@pixelbyte-software/pixcode 1.34.0 → 1.35.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (247) hide show
  1. package/LICENSE +718 -718
  2. package/README.de.md +248 -248
  3. package/README.ja.md +240 -240
  4. package/README.ko.md +240 -240
  5. package/README.md +303 -303
  6. package/README.ru.md +248 -248
  7. package/README.tr.md +250 -250
  8. package/README.zh-CN.md +240 -240
  9. package/dist/api-docs.html +548 -395
  10. package/dist/assets/index-B8w57E1r.css +32 -0
  11. package/dist/assets/index-CBdsvGSR.js +854 -0
  12. package/dist/clear-cache.html +85 -85
  13. package/dist/convert-icons.md +52 -52
  14. package/dist/favicon.svg +8 -8
  15. package/dist/generate-icons.js +48 -48
  16. package/dist/icons/codex-white.svg +3 -3
  17. package/dist/icons/codex.svg +3 -3
  18. package/dist/icons/cursor-white.svg +11 -11
  19. package/dist/icons/icon-128x128.svg +9 -9
  20. package/dist/icons/icon-144x144.svg +9 -9
  21. package/dist/icons/icon-152x152.svg +9 -9
  22. package/dist/icons/icon-192x192.svg +9 -9
  23. package/dist/icons/icon-384x384.svg +9 -9
  24. package/dist/icons/icon-512x512.svg +9 -9
  25. package/dist/icons/icon-72x72.svg +9 -9
  26. package/dist/icons/icon-96x96.svg +9 -9
  27. package/dist/icons/icon-template.svg +9 -9
  28. package/dist/icons/qwen-logo.svg +14 -14
  29. package/dist/index.html +59 -59
  30. package/dist/logo.svg +12 -12
  31. package/dist/manifest.json +60 -60
  32. package/dist/openapi.yaml +1693 -1311
  33. package/dist/sw.js +124 -124
  34. package/dist-server/server/claude-sdk.js +38 -7
  35. package/dist-server/server/claude-sdk.js.map +1 -1
  36. package/dist-server/server/cli.js +107 -112
  37. package/dist-server/server/cli.js.map +1 -1
  38. package/dist-server/server/daemon/manager.js +33 -33
  39. package/dist-server/server/daemon-manager.js +159 -112
  40. package/dist-server/server/daemon-manager.js.map +1 -1
  41. package/dist-server/server/database/json-store.js +8 -5
  42. package/dist-server/server/database/json-store.js.map +1 -1
  43. package/dist-server/server/index.js +31 -10
  44. package/dist-server/server/index.js.map +1 -1
  45. package/dist-server/server/modules/orchestration/a2a/adapter-registry.js +45 -19
  46. package/dist-server/server/modules/orchestration/a2a/adapter-registry.js.map +1 -1
  47. package/dist-server/server/modules/orchestration/a2a/adapters/abstract-a2a.adapter.js.map +1 -1
  48. package/dist-server/server/modules/orchestration/a2a/adapters/claude-code.adapter.js +1 -0
  49. package/dist-server/server/modules/orchestration/a2a/adapters/claude-code.adapter.js.map +1 -1
  50. package/dist-server/server/modules/orchestration/a2a/adapters/codex.adapter.js +202 -0
  51. package/dist-server/server/modules/orchestration/a2a/adapters/codex.adapter.js.map +1 -0
  52. package/dist-server/server/modules/orchestration/a2a/adapters/cursor.adapter.js +205 -0
  53. package/dist-server/server/modules/orchestration/a2a/adapters/cursor.adapter.js.map +1 -0
  54. package/dist-server/server/modules/orchestration/a2a/adapters/gemini.adapter.js +205 -0
  55. package/dist-server/server/modules/orchestration/a2a/adapters/gemini.adapter.js.map +1 -0
  56. package/dist-server/server/modules/orchestration/a2a/adapters/opencode.adapter.js +205 -0
  57. package/dist-server/server/modules/orchestration/a2a/adapters/opencode.adapter.js.map +1 -0
  58. package/dist-server/server/modules/orchestration/a2a/adapters/qwen.adapter.js +205 -0
  59. package/dist-server/server/modules/orchestration/a2a/adapters/qwen.adapter.js.map +1 -0
  60. package/dist-server/server/modules/orchestration/a2a/routes.js +298 -34
  61. package/dist-server/server/modules/orchestration/a2a/routes.js.map +1 -1
  62. package/dist-server/server/modules/orchestration/a2a/task-store.js +144 -0
  63. package/dist-server/server/modules/orchestration/a2a/task-store.js.map +1 -0
  64. package/dist-server/server/modules/orchestration/a2a/validator.js +16 -0
  65. package/dist-server/server/modules/orchestration/a2a/validator.js.map +1 -1
  66. package/dist-server/server/modules/orchestration/index.js +14 -0
  67. package/dist-server/server/modules/orchestration/index.js.map +1 -1
  68. package/dist-server/server/modules/orchestration/preview/port-watcher.js +90 -0
  69. package/dist-server/server/modules/orchestration/preview/port-watcher.js.map +1 -0
  70. package/dist-server/server/modules/orchestration/preview/preview-proxy.js +58 -0
  71. package/dist-server/server/modules/orchestration/preview/preview-proxy.js.map +1 -0
  72. package/dist-server/server/modules/orchestration/preview/types.js +2 -0
  73. package/dist-server/server/modules/orchestration/preview/types.js.map +1 -0
  74. package/dist-server/server/modules/orchestration/tasks/orchestration-task-store.js +37 -0
  75. package/dist-server/server/modules/orchestration/tasks/orchestration-task-store.js.map +1 -0
  76. package/dist-server/server/modules/orchestration/tasks/orchestration-task.routes.js +68 -0
  77. package/dist-server/server/modules/orchestration/tasks/orchestration-task.routes.js.map +1 -0
  78. package/dist-server/server/modules/orchestration/tasks/orchestration-task.service.js +128 -0
  79. package/dist-server/server/modules/orchestration/tasks/orchestration-task.service.js.map +1 -0
  80. package/dist-server/server/modules/orchestration/tasks/orchestration-task.types.js +2 -0
  81. package/dist-server/server/modules/orchestration/tasks/orchestration-task.types.js.map +1 -0
  82. package/dist-server/server/modules/orchestration/workflows/built-in-workflows.js +126 -0
  83. package/dist-server/server/modules/orchestration/workflows/built-in-workflows.js.map +1 -0
  84. package/dist-server/server/modules/orchestration/workflows/workflow-runner.js +1047 -0
  85. package/dist-server/server/modules/orchestration/workflows/workflow-runner.js.map +1 -0
  86. package/dist-server/server/modules/orchestration/workflows/workflow-store.js +76 -0
  87. package/dist-server/server/modules/orchestration/workflows/workflow-store.js.map +1 -0
  88. package/dist-server/server/modules/orchestration/workflows/workflow.routes.js +151 -0
  89. package/dist-server/server/modules/orchestration/workflows/workflow.routes.js.map +1 -0
  90. package/dist-server/server/modules/orchestration/workflows/workflow.types.js +2 -0
  91. package/dist-server/server/modules/orchestration/workflows/workflow.types.js.map +1 -0
  92. package/dist-server/server/modules/orchestration/workflows/workspace-target.js +98 -0
  93. package/dist-server/server/modules/orchestration/workflows/workspace-target.js.map +1 -0
  94. package/dist-server/server/modules/orchestration/workspace/docker-workspace.js +122 -0
  95. package/dist-server/server/modules/orchestration/workspace/docker-workspace.js.map +1 -0
  96. package/dist-server/server/modules/orchestration/workspace/path-safety.js +48 -0
  97. package/dist-server/server/modules/orchestration/workspace/path-safety.js.map +1 -0
  98. package/dist-server/server/modules/orchestration/workspace/types.js +11 -0
  99. package/dist-server/server/modules/orchestration/workspace/types.js.map +1 -0
  100. package/dist-server/server/modules/orchestration/workspace/workspace-manager.js +80 -0
  101. package/dist-server/server/modules/orchestration/workspace/workspace-manager.js.map +1 -0
  102. package/dist-server/server/modules/orchestration/workspace/worktree-workspace.js +96 -0
  103. package/dist-server/server/modules/orchestration/workspace/worktree-workspace.js.map +1 -0
  104. package/dist-server/server/modules/providers/index.js +3 -0
  105. package/dist-server/server/modules/providers/index.js.map +1 -0
  106. package/dist-server/server/openai-codex.js +35 -4
  107. package/dist-server/server/openai-codex.js.map +1 -1
  108. package/dist-server/server/routes/commands.js +25 -25
  109. package/dist-server/server/routes/git.js +17 -17
  110. package/dist-server/server/routes/taskmaster.js +525 -508
  111. package/dist-server/server/routes/taskmaster.js.map +1 -1
  112. package/package.json +180 -178
  113. package/scripts/fix-node-pty.js +67 -67
  114. package/scripts/smoke/a2a-roundtrip.mjs +86 -17
  115. package/scripts/smoke/orchestration-api.mjs +172 -0
  116. package/scripts/smoke/orchestration-live-run.mjs +176 -0
  117. package/server/claude-sdk.js +898 -857
  118. package/server/cli.js +935 -940
  119. package/server/constants/config.js +4 -4
  120. package/server/cursor-cli.js +342 -342
  121. package/server/daemon/manager.js +564 -564
  122. package/server/daemon-manager.js +959 -920
  123. package/server/database/db.js +794 -794
  124. package/server/database/json-store.js +197 -194
  125. package/server/gemini-cli.js +535 -535
  126. package/server/gemini-response-handler.js +79 -79
  127. package/server/index.js +3135 -3104
  128. package/server/load-env.js +34 -34
  129. package/server/middleware/auth.js +173 -173
  130. package/server/modules/orchestration/a2a/adapter-registry.ts +72 -22
  131. package/server/modules/orchestration/a2a/adapters/abstract-a2a.adapter.ts +9 -3
  132. package/server/modules/orchestration/a2a/adapters/claude-code.adapter.ts +1 -0
  133. package/server/modules/orchestration/a2a/adapters/codex.adapter.ts +244 -0
  134. package/server/modules/orchestration/a2a/adapters/cursor.adapter.ts +249 -0
  135. package/server/modules/orchestration/a2a/adapters/gemini.adapter.ts +248 -0
  136. package/server/modules/orchestration/a2a/adapters/opencode.adapter.ts +248 -0
  137. package/server/modules/orchestration/a2a/adapters/qwen.adapter.ts +248 -0
  138. package/server/modules/orchestration/a2a/routes.ts +349 -36
  139. package/server/modules/orchestration/a2a/task-store.ts +178 -0
  140. package/server/modules/orchestration/a2a/types.ts +14 -0
  141. package/server/modules/orchestration/a2a/validator.ts +25 -2
  142. package/server/modules/orchestration/index.ts +40 -0
  143. package/server/modules/orchestration/preview/port-watcher.ts +112 -0
  144. package/server/modules/orchestration/preview/preview-proxy.ts +60 -0
  145. package/server/modules/orchestration/preview/types.ts +19 -0
  146. package/server/modules/orchestration/tasks/orchestration-task-store.ts +45 -0
  147. package/server/modules/orchestration/tasks/orchestration-task.routes.ts +73 -0
  148. package/server/modules/orchestration/tasks/orchestration-task.service.ts +145 -0
  149. package/server/modules/orchestration/tasks/orchestration-task.types.ts +29 -0
  150. package/server/modules/orchestration/workflows/built-in-workflows.ts +127 -0
  151. package/server/modules/orchestration/workflows/workflow-runner.ts +1206 -0
  152. package/server/modules/orchestration/workflows/workflow-store.ts +97 -0
  153. package/server/modules/orchestration/workflows/workflow.routes.ts +169 -0
  154. package/server/modules/orchestration/workflows/workflow.types.ts +70 -0
  155. package/server/modules/orchestration/workflows/workspace-target.ts +120 -0
  156. package/server/modules/orchestration/workspace/docker-workspace.ts +135 -0
  157. package/server/modules/orchestration/workspace/path-safety.ts +55 -0
  158. package/server/modules/orchestration/workspace/types.ts +52 -0
  159. package/server/modules/orchestration/workspace/workspace-manager.ts +97 -0
  160. package/server/modules/orchestration/workspace/worktree-workspace.ts +125 -0
  161. package/server/modules/providers/index.ts +2 -0
  162. package/server/modules/providers/list/claude/claude-auth.provider.ts +145 -145
  163. package/server/modules/providers/list/claude/claude-mcp.provider.ts +135 -135
  164. package/server/modules/providers/list/claude/claude-sessions.provider.ts +306 -306
  165. package/server/modules/providers/list/claude/claude.provider.ts +15 -15
  166. package/server/modules/providers/list/codex/codex-auth.provider.ts +115 -115
  167. package/server/modules/providers/list/codex/codex-mcp.provider.ts +135 -135
  168. package/server/modules/providers/list/codex/codex-sessions.provider.ts +319 -319
  169. package/server/modules/providers/list/codex/codex.provider.ts +15 -15
  170. package/server/modules/providers/list/cursor/cursor-auth.provider.ts +143 -143
  171. package/server/modules/providers/list/cursor/cursor-mcp.provider.ts +108 -108
  172. package/server/modules/providers/list/cursor/cursor-sessions.provider.ts +421 -421
  173. package/server/modules/providers/list/cursor/cursor.provider.ts +15 -15
  174. package/server/modules/providers/list/gemini/gemini-auth.provider.ts +163 -163
  175. package/server/modules/providers/list/gemini/gemini-mcp.provider.ts +110 -110
  176. package/server/modules/providers/list/gemini/gemini-sessions.provider.ts +227 -227
  177. package/server/modules/providers/list/gemini/gemini.provider.ts +15 -15
  178. package/server/modules/providers/list/opencode/opencode-auth.provider.ts +130 -130
  179. package/server/modules/providers/list/opencode/opencode-mcp.provider.ts +126 -126
  180. package/server/modules/providers/list/opencode/opencode-sessions.provider.ts +232 -232
  181. package/server/modules/providers/list/opencode/opencode.provider.ts +29 -29
  182. package/server/modules/providers/list/qwen/qwen-auth.provider.ts +145 -145
  183. package/server/modules/providers/list/qwen/qwen-mcp.provider.ts +114 -114
  184. package/server/modules/providers/list/qwen/qwen-sessions.provider.ts +265 -265
  185. package/server/modules/providers/list/qwen/qwen.provider.ts +21 -21
  186. package/server/modules/providers/provider.registry.ts +40 -40
  187. package/server/modules/providers/provider.routes.ts +819 -819
  188. package/server/modules/providers/services/mcp.service.ts +86 -86
  189. package/server/modules/providers/services/provider-auth.service.ts +26 -26
  190. package/server/modules/providers/services/sessions.service.ts +45 -45
  191. package/server/modules/providers/shared/base/abstract.provider.ts +20 -20
  192. package/server/modules/providers/shared/mcp/mcp.provider.ts +151 -151
  193. package/server/modules/providers/shared/provider-configs.ts +142 -142
  194. package/server/modules/providers/tests/mcp.test.ts +293 -293
  195. package/server/openai-codex.js +462 -426
  196. package/server/opencode-cli.js +459 -459
  197. package/server/opencode-response-handler.js +107 -107
  198. package/server/projects.js +3105 -3105
  199. package/server/qwen-code-cli.js +395 -395
  200. package/server/qwen-response-handler.js +73 -73
  201. package/server/routes/agent.js +1365 -1365
  202. package/server/routes/auth.js +138 -138
  203. package/server/routes/codex.js +19 -19
  204. package/server/routes/commands.js +554 -554
  205. package/server/routes/cursor.js +52 -52
  206. package/server/routes/gemini.js +24 -24
  207. package/server/routes/git.js +1488 -1488
  208. package/server/routes/mcp-utils.js +31 -31
  209. package/server/routes/messages.js +61 -61
  210. package/server/routes/network.js +120 -120
  211. package/server/routes/plugins.js +318 -318
  212. package/server/routes/projects.js +915 -915
  213. package/server/routes/qwen.js +27 -27
  214. package/server/routes/settings.js +286 -286
  215. package/server/routes/taskmaster.js +1496 -1471
  216. package/server/routes/telegram.js +125 -125
  217. package/server/routes/user.js +123 -123
  218. package/server/services/external-access.js +171 -171
  219. package/server/services/install-jobs.js +571 -571
  220. package/server/services/notification-orchestrator.js +242 -242
  221. package/server/services/provider-credentials.js +189 -189
  222. package/server/services/provider-models.js +381 -381
  223. package/server/services/telegram/bot.js +279 -279
  224. package/server/services/telegram/telegram-http-client.js +130 -130
  225. package/server/services/telegram/translations.js +170 -170
  226. package/server/services/vapid-keys.js +36 -36
  227. package/server/sessionManager.js +225 -225
  228. package/server/shared/interfaces.ts +54 -54
  229. package/server/shared/types.ts +172 -172
  230. package/server/shared/utils.ts +193 -193
  231. package/server/tsconfig.json +36 -36
  232. package/server/utils/colors.js +21 -21
  233. package/server/utils/commandParser.js +303 -303
  234. package/server/utils/frontmatter.js +18 -18
  235. package/server/utils/gitConfig.js +34 -34
  236. package/server/utils/mcp-detector.js +147 -147
  237. package/server/utils/plugin-loader.js +457 -457
  238. package/server/utils/plugin-process-manager.js +184 -184
  239. package/server/utils/port-access.js +209 -209
  240. package/server/utils/runtime-paths.js +37 -37
  241. package/server/utils/taskmaster-websocket.js +128 -128
  242. package/server/utils/url-detection.js +71 -71
  243. package/server/vite-daemon.js +78 -78
  244. package/shared/modelConstants.js +162 -162
  245. package/shared/networkHosts.js +22 -22
  246. package/dist/assets/index-B1ghfb4w.css +0 -32
  247. package/dist/assets/index-BvClqlMf.js +0 -852
@@ -1,27 +1,27 @@
1
- import express from 'express';
2
-
3
- import sessionManager from '../sessionManager.js';
4
- import { sessionNamesDb } from '../database/db.js';
5
-
6
- const router = express.Router();
7
-
8
- // Delete a Qwen Code session — mirrors the Gemini/Codex routes so the UI's
9
- // unified delete flow works identically regardless of the active provider.
10
- router.delete('/sessions/:sessionId', async (req, res) => {
11
- try {
12
- const { sessionId } = req.params;
13
-
14
- if (!sessionId || typeof sessionId !== 'string' || !/^[a-zA-Z0-9_.-]{1,100}$/.test(sessionId)) {
15
- return res.status(400).json({ success: false, error: 'Invalid session ID format' });
16
- }
17
-
18
- await sessionManager.deleteSession(sessionId);
19
- sessionNamesDb.deleteName(sessionId, 'qwen');
20
- res.json({ success: true });
21
- } catch (error) {
22
- console.error(`Error deleting Qwen session ${req.params.sessionId}:`, error);
23
- res.status(500).json({ success: false, error: error.message });
24
- }
25
- });
26
-
27
- export default router;
1
+ import express from 'express';
2
+
3
+ import sessionManager from '../sessionManager.js';
4
+ import { sessionNamesDb } from '../database/db.js';
5
+
6
+ const router = express.Router();
7
+
8
+ // Delete a Qwen Code session — mirrors the Gemini/Codex routes so the UI's
9
+ // unified delete flow works identically regardless of the active provider.
10
+ router.delete('/sessions/:sessionId', async (req, res) => {
11
+ try {
12
+ const { sessionId } = req.params;
13
+
14
+ if (!sessionId || typeof sessionId !== 'string' || !/^[a-zA-Z0-9_.-]{1,100}$/.test(sessionId)) {
15
+ return res.status(400).json({ success: false, error: 'Invalid session ID format' });
16
+ }
17
+
18
+ await sessionManager.deleteSession(sessionId);
19
+ sessionNamesDb.deleteName(sessionId, 'qwen');
20
+ res.json({ success: true });
21
+ } catch (error) {
22
+ console.error(`Error deleting Qwen session ${req.params.sessionId}:`, error);
23
+ res.status(500).json({ success: false, error: error.message });
24
+ }
25
+ });
26
+
27
+ export default router;
@@ -1,286 +1,286 @@
1
- import express from 'express';
2
- import { apiKeysDb, credentialsDb, notificationPreferencesDb, pushSubscriptionsDb } from '../database/db.js';
3
- import { getPublicKey } from '../services/vapid-keys.js';
4
- import { createNotificationEvent, notifyUserIfEnabled } from '../services/notification-orchestrator.js';
5
-
6
- const router = express.Router();
7
-
8
- // ===============================
9
- // API Keys Management
10
- // ===============================
11
-
12
- // Get all API keys for the authenticated user
13
- router.get('/api-keys', async (req, res) => {
14
- try {
15
- const apiKeys = apiKeysDb.getApiKeys(req.user.id);
16
- // Don't send the full API key in the list for security
17
- const sanitizedKeys = apiKeys.map(key => ({
18
- ...key,
19
- api_key: key.api_key.substring(0, 10) + '...'
20
- }));
21
- res.json({ apiKeys: sanitizedKeys });
22
- } catch (error) {
23
- console.error('Error fetching API keys:', error);
24
- res.status(500).json({ error: 'Failed to fetch API keys' });
25
- }
26
- });
27
-
28
- // Create a new API key
29
- router.post('/api-keys', async (req, res) => {
30
- try {
31
- const { keyName } = req.body;
32
-
33
- if (!keyName || !keyName.trim()) {
34
- return res.status(400).json({ error: 'Key name is required' });
35
- }
36
-
37
- const result = apiKeysDb.createApiKey(req.user.id, keyName.trim());
38
- res.json({
39
- success: true,
40
- apiKey: result
41
- });
42
- } catch (error) {
43
- console.error('Error creating API key:', error);
44
- res.status(500).json({ error: 'Failed to create API key' });
45
- }
46
- });
47
-
48
- // Delete an API key
49
- router.delete('/api-keys/:keyId', async (req, res) => {
50
- try {
51
- const { keyId } = req.params;
52
- const success = apiKeysDb.deleteApiKey(req.user.id, parseInt(keyId));
53
-
54
- if (success) {
55
- res.json({ success: true });
56
- } else {
57
- res.status(404).json({ error: 'API key not found' });
58
- }
59
- } catch (error) {
60
- console.error('Error deleting API key:', error);
61
- res.status(500).json({ error: 'Failed to delete API key' });
62
- }
63
- });
64
-
65
- // Toggle API key active status
66
- router.patch('/api-keys/:keyId/toggle', async (req, res) => {
67
- try {
68
- const { keyId } = req.params;
69
- const { isActive } = req.body;
70
-
71
- if (typeof isActive !== 'boolean') {
72
- return res.status(400).json({ error: 'isActive must be a boolean' });
73
- }
74
-
75
- const success = apiKeysDb.toggleApiKey(req.user.id, parseInt(keyId), isActive);
76
-
77
- if (success) {
78
- res.json({ success: true });
79
- } else {
80
- res.status(404).json({ error: 'API key not found' });
81
- }
82
- } catch (error) {
83
- console.error('Error toggling API key:', error);
84
- res.status(500).json({ error: 'Failed to toggle API key' });
85
- }
86
- });
87
-
88
- // ===============================
89
- // Generic Credentials Management
90
- // ===============================
91
-
92
- // Get all credentials for the authenticated user (optionally filtered by type)
93
- router.get('/credentials', async (req, res) => {
94
- try {
95
- const { type } = req.query;
96
- const credentials = credentialsDb.getCredentials(req.user.id, type || null);
97
- // Don't send the actual credential values for security
98
- res.json({ credentials });
99
- } catch (error) {
100
- console.error('Error fetching credentials:', error);
101
- res.status(500).json({ error: 'Failed to fetch credentials' });
102
- }
103
- });
104
-
105
- // Create a new credential
106
- router.post('/credentials', async (req, res) => {
107
- try {
108
- const { credentialName, credentialType, credentialValue, description } = req.body;
109
-
110
- if (!credentialName || !credentialName.trim()) {
111
- return res.status(400).json({ error: 'Credential name is required' });
112
- }
113
-
114
- if (!credentialType || !credentialType.trim()) {
115
- return res.status(400).json({ error: 'Credential type is required' });
116
- }
117
-
118
- if (!credentialValue || !credentialValue.trim()) {
119
- return res.status(400).json({ error: 'Credential value is required' });
120
- }
121
-
122
- const result = credentialsDb.createCredential(
123
- req.user.id,
124
- credentialName.trim(),
125
- credentialType.trim(),
126
- credentialValue.trim(),
127
- description?.trim() || null
128
- );
129
-
130
- res.json({
131
- success: true,
132
- credential: result
133
- });
134
- } catch (error) {
135
- console.error('Error creating credential:', error);
136
- res.status(500).json({ error: 'Failed to create credential' });
137
- }
138
- });
139
-
140
- // Delete a credential
141
- router.delete('/credentials/:credentialId', async (req, res) => {
142
- try {
143
- const { credentialId } = req.params;
144
- const success = credentialsDb.deleteCredential(req.user.id, parseInt(credentialId));
145
-
146
- if (success) {
147
- res.json({ success: true });
148
- } else {
149
- res.status(404).json({ error: 'Credential not found' });
150
- }
151
- } catch (error) {
152
- console.error('Error deleting credential:', error);
153
- res.status(500).json({ error: 'Failed to delete credential' });
154
- }
155
- });
156
-
157
- // Toggle credential active status
158
- router.patch('/credentials/:credentialId/toggle', async (req, res) => {
159
- try {
160
- const { credentialId } = req.params;
161
- const { isActive } = req.body;
162
-
163
- if (typeof isActive !== 'boolean') {
164
- return res.status(400).json({ error: 'isActive must be a boolean' });
165
- }
166
-
167
- const success = credentialsDb.toggleCredential(req.user.id, parseInt(credentialId), isActive);
168
-
169
- if (success) {
170
- res.json({ success: true });
171
- } else {
172
- res.status(404).json({ error: 'Credential not found' });
173
- }
174
- } catch (error) {
175
- console.error('Error toggling credential:', error);
176
- res.status(500).json({ error: 'Failed to toggle credential' });
177
- }
178
- });
179
-
180
- // ===============================
181
- // Notification Preferences
182
- // ===============================
183
-
184
- router.get('/notification-preferences', async (req, res) => {
185
- try {
186
- const preferences = notificationPreferencesDb.getPreferences(req.user.id);
187
- res.json({ success: true, preferences });
188
- } catch (error) {
189
- console.error('Error fetching notification preferences:', error);
190
- res.status(500).json({ error: 'Failed to fetch notification preferences' });
191
- }
192
- });
193
-
194
- router.put('/notification-preferences', async (req, res) => {
195
- try {
196
- const preferences = notificationPreferencesDb.updatePreferences(req.user.id, req.body || {});
197
- res.json({ success: true, preferences });
198
- } catch (error) {
199
- console.error('Error saving notification preferences:', error);
200
- res.status(500).json({ error: 'Failed to save notification preferences' });
201
- }
202
- });
203
-
204
- // ===============================
205
- // Push Subscription Management
206
- // ===============================
207
-
208
- router.get('/push/vapid-public-key', async (req, res) => {
209
- try {
210
- const publicKey = getPublicKey();
211
- res.json({ publicKey });
212
- } catch (error) {
213
- console.error('Error fetching VAPID public key:', error);
214
- res.status(500).json({ error: 'Failed to fetch VAPID public key' });
215
- }
216
- });
217
-
218
- router.post('/push/subscribe', async (req, res) => {
219
- try {
220
- const { endpoint, keys } = req.body;
221
- if (!endpoint || !keys?.p256dh || !keys?.auth) {
222
- return res.status(400).json({ error: 'Missing subscription fields' });
223
- }
224
- pushSubscriptionsDb.saveSubscription(req.user.id, endpoint, keys.p256dh, keys.auth);
225
-
226
- // Enable webPush in preferences so the confirmation goes through the full pipeline
227
- const currentPrefs = notificationPreferencesDb.getPreferences(req.user.id);
228
- if (!currentPrefs?.channels?.webPush) {
229
- notificationPreferencesDb.updatePreferences(req.user.id, {
230
- ...currentPrefs,
231
- channels: { ...currentPrefs?.channels, webPush: true },
232
- });
233
- }
234
-
235
- res.json({ success: true });
236
-
237
- // Send a confirmation push through the full notification pipeline
238
- const event = createNotificationEvent({
239
- provider: 'system',
240
- kind: 'info',
241
- code: 'push.enabled',
242
- meta: { message: 'Push notifications are now enabled!' },
243
- severity: 'info'
244
- });
245
- notifyUserIfEnabled({ userId: req.user.id, event });
246
- } catch (error) {
247
- console.error('Error saving push subscription:', error);
248
- res.status(500).json({ error: 'Failed to save push subscription' });
249
- }
250
- });
251
-
252
- router.post('/push/unsubscribe', async (req, res) => {
253
- try {
254
- const { endpoint } = req.body;
255
- if (!endpoint) {
256
- return res.status(400).json({ error: 'Missing endpoint' });
257
- }
258
- pushSubscriptionsDb.removeSubscription(endpoint);
259
-
260
- // Disable webPush in preferences to match subscription state
261
- const currentPrefs = notificationPreferencesDb.getPreferences(req.user.id);
262
- if (currentPrefs?.channels?.webPush) {
263
- notificationPreferencesDb.updatePreferences(req.user.id, {
264
- ...currentPrefs,
265
- channels: { ...currentPrefs.channels, webPush: false },
266
- });
267
- }
268
-
269
- res.json({ success: true });
270
- } catch (error) {
271
- console.error('Error removing push subscription:', error);
272
- res.status(500).json({ error: 'Failed to remove push subscription' });
273
- }
274
- });
275
-
276
- // Host OS for UI (e.g. hide Cursor agent when the backend runs on Windows).
277
- router.get('/server-env', async (req, res) => {
278
- try {
279
- res.json({ platform: process.platform });
280
- } catch (error) {
281
- console.error('Error reading server environment:', error);
282
- res.status(500).json({ error: 'Failed to read server environment' });
283
- }
284
- });
285
-
286
- export default router;
1
+ import express from 'express';
2
+ import { apiKeysDb, credentialsDb, notificationPreferencesDb, pushSubscriptionsDb } from '../database/db.js';
3
+ import { getPublicKey } from '../services/vapid-keys.js';
4
+ import { createNotificationEvent, notifyUserIfEnabled } from '../services/notification-orchestrator.js';
5
+
6
+ const router = express.Router();
7
+
8
+ // ===============================
9
+ // API Keys Management
10
+ // ===============================
11
+
12
+ // Get all API keys for the authenticated user
13
+ router.get('/api-keys', async (req, res) => {
14
+ try {
15
+ const apiKeys = apiKeysDb.getApiKeys(req.user.id);
16
+ // Don't send the full API key in the list for security
17
+ const sanitizedKeys = apiKeys.map(key => ({
18
+ ...key,
19
+ api_key: key.api_key.substring(0, 10) + '...'
20
+ }));
21
+ res.json({ apiKeys: sanitizedKeys });
22
+ } catch (error) {
23
+ console.error('Error fetching API keys:', error);
24
+ res.status(500).json({ error: 'Failed to fetch API keys' });
25
+ }
26
+ });
27
+
28
+ // Create a new API key
29
+ router.post('/api-keys', async (req, res) => {
30
+ try {
31
+ const { keyName } = req.body;
32
+
33
+ if (!keyName || !keyName.trim()) {
34
+ return res.status(400).json({ error: 'Key name is required' });
35
+ }
36
+
37
+ const result = apiKeysDb.createApiKey(req.user.id, keyName.trim());
38
+ res.json({
39
+ success: true,
40
+ apiKey: result
41
+ });
42
+ } catch (error) {
43
+ console.error('Error creating API key:', error);
44
+ res.status(500).json({ error: 'Failed to create API key' });
45
+ }
46
+ });
47
+
48
+ // Delete an API key
49
+ router.delete('/api-keys/:keyId', async (req, res) => {
50
+ try {
51
+ const { keyId } = req.params;
52
+ const success = apiKeysDb.deleteApiKey(req.user.id, parseInt(keyId));
53
+
54
+ if (success) {
55
+ res.json({ success: true });
56
+ } else {
57
+ res.status(404).json({ error: 'API key not found' });
58
+ }
59
+ } catch (error) {
60
+ console.error('Error deleting API key:', error);
61
+ res.status(500).json({ error: 'Failed to delete API key' });
62
+ }
63
+ });
64
+
65
+ // Toggle API key active status
66
+ router.patch('/api-keys/:keyId/toggle', async (req, res) => {
67
+ try {
68
+ const { keyId } = req.params;
69
+ const { isActive } = req.body;
70
+
71
+ if (typeof isActive !== 'boolean') {
72
+ return res.status(400).json({ error: 'isActive must be a boolean' });
73
+ }
74
+
75
+ const success = apiKeysDb.toggleApiKey(req.user.id, parseInt(keyId), isActive);
76
+
77
+ if (success) {
78
+ res.json({ success: true });
79
+ } else {
80
+ res.status(404).json({ error: 'API key not found' });
81
+ }
82
+ } catch (error) {
83
+ console.error('Error toggling API key:', error);
84
+ res.status(500).json({ error: 'Failed to toggle API key' });
85
+ }
86
+ });
87
+
88
+ // ===============================
89
+ // Generic Credentials Management
90
+ // ===============================
91
+
92
+ // Get all credentials for the authenticated user (optionally filtered by type)
93
+ router.get('/credentials', async (req, res) => {
94
+ try {
95
+ const { type } = req.query;
96
+ const credentials = credentialsDb.getCredentials(req.user.id, type || null);
97
+ // Don't send the actual credential values for security
98
+ res.json({ credentials });
99
+ } catch (error) {
100
+ console.error('Error fetching credentials:', error);
101
+ res.status(500).json({ error: 'Failed to fetch credentials' });
102
+ }
103
+ });
104
+
105
+ // Create a new credential
106
+ router.post('/credentials', async (req, res) => {
107
+ try {
108
+ const { credentialName, credentialType, credentialValue, description } = req.body;
109
+
110
+ if (!credentialName || !credentialName.trim()) {
111
+ return res.status(400).json({ error: 'Credential name is required' });
112
+ }
113
+
114
+ if (!credentialType || !credentialType.trim()) {
115
+ return res.status(400).json({ error: 'Credential type is required' });
116
+ }
117
+
118
+ if (!credentialValue || !credentialValue.trim()) {
119
+ return res.status(400).json({ error: 'Credential value is required' });
120
+ }
121
+
122
+ const result = credentialsDb.createCredential(
123
+ req.user.id,
124
+ credentialName.trim(),
125
+ credentialType.trim(),
126
+ credentialValue.trim(),
127
+ description?.trim() || null
128
+ );
129
+
130
+ res.json({
131
+ success: true,
132
+ credential: result
133
+ });
134
+ } catch (error) {
135
+ console.error('Error creating credential:', error);
136
+ res.status(500).json({ error: 'Failed to create credential' });
137
+ }
138
+ });
139
+
140
+ // Delete a credential
141
+ router.delete('/credentials/:credentialId', async (req, res) => {
142
+ try {
143
+ const { credentialId } = req.params;
144
+ const success = credentialsDb.deleteCredential(req.user.id, parseInt(credentialId));
145
+
146
+ if (success) {
147
+ res.json({ success: true });
148
+ } else {
149
+ res.status(404).json({ error: 'Credential not found' });
150
+ }
151
+ } catch (error) {
152
+ console.error('Error deleting credential:', error);
153
+ res.status(500).json({ error: 'Failed to delete credential' });
154
+ }
155
+ });
156
+
157
+ // Toggle credential active status
158
+ router.patch('/credentials/:credentialId/toggle', async (req, res) => {
159
+ try {
160
+ const { credentialId } = req.params;
161
+ const { isActive } = req.body;
162
+
163
+ if (typeof isActive !== 'boolean') {
164
+ return res.status(400).json({ error: 'isActive must be a boolean' });
165
+ }
166
+
167
+ const success = credentialsDb.toggleCredential(req.user.id, parseInt(credentialId), isActive);
168
+
169
+ if (success) {
170
+ res.json({ success: true });
171
+ } else {
172
+ res.status(404).json({ error: 'Credential not found' });
173
+ }
174
+ } catch (error) {
175
+ console.error('Error toggling credential:', error);
176
+ res.status(500).json({ error: 'Failed to toggle credential' });
177
+ }
178
+ });
179
+
180
+ // ===============================
181
+ // Notification Preferences
182
+ // ===============================
183
+
184
+ router.get('/notification-preferences', async (req, res) => {
185
+ try {
186
+ const preferences = notificationPreferencesDb.getPreferences(req.user.id);
187
+ res.json({ success: true, preferences });
188
+ } catch (error) {
189
+ console.error('Error fetching notification preferences:', error);
190
+ res.status(500).json({ error: 'Failed to fetch notification preferences' });
191
+ }
192
+ });
193
+
194
+ router.put('/notification-preferences', async (req, res) => {
195
+ try {
196
+ const preferences = notificationPreferencesDb.updatePreferences(req.user.id, req.body || {});
197
+ res.json({ success: true, preferences });
198
+ } catch (error) {
199
+ console.error('Error saving notification preferences:', error);
200
+ res.status(500).json({ error: 'Failed to save notification preferences' });
201
+ }
202
+ });
203
+
204
+ // ===============================
205
+ // Push Subscription Management
206
+ // ===============================
207
+
208
+ router.get('/push/vapid-public-key', async (req, res) => {
209
+ try {
210
+ const publicKey = getPublicKey();
211
+ res.json({ publicKey });
212
+ } catch (error) {
213
+ console.error('Error fetching VAPID public key:', error);
214
+ res.status(500).json({ error: 'Failed to fetch VAPID public key' });
215
+ }
216
+ });
217
+
218
+ router.post('/push/subscribe', async (req, res) => {
219
+ try {
220
+ const { endpoint, keys } = req.body;
221
+ if (!endpoint || !keys?.p256dh || !keys?.auth) {
222
+ return res.status(400).json({ error: 'Missing subscription fields' });
223
+ }
224
+ pushSubscriptionsDb.saveSubscription(req.user.id, endpoint, keys.p256dh, keys.auth);
225
+
226
+ // Enable webPush in preferences so the confirmation goes through the full pipeline
227
+ const currentPrefs = notificationPreferencesDb.getPreferences(req.user.id);
228
+ if (!currentPrefs?.channels?.webPush) {
229
+ notificationPreferencesDb.updatePreferences(req.user.id, {
230
+ ...currentPrefs,
231
+ channels: { ...currentPrefs?.channels, webPush: true },
232
+ });
233
+ }
234
+
235
+ res.json({ success: true });
236
+
237
+ // Send a confirmation push through the full notification pipeline
238
+ const event = createNotificationEvent({
239
+ provider: 'system',
240
+ kind: 'info',
241
+ code: 'push.enabled',
242
+ meta: { message: 'Push notifications are now enabled!' },
243
+ severity: 'info'
244
+ });
245
+ notifyUserIfEnabled({ userId: req.user.id, event });
246
+ } catch (error) {
247
+ console.error('Error saving push subscription:', error);
248
+ res.status(500).json({ error: 'Failed to save push subscription' });
249
+ }
250
+ });
251
+
252
+ router.post('/push/unsubscribe', async (req, res) => {
253
+ try {
254
+ const { endpoint } = req.body;
255
+ if (!endpoint) {
256
+ return res.status(400).json({ error: 'Missing endpoint' });
257
+ }
258
+ pushSubscriptionsDb.removeSubscription(endpoint);
259
+
260
+ // Disable webPush in preferences to match subscription state
261
+ const currentPrefs = notificationPreferencesDb.getPreferences(req.user.id);
262
+ if (currentPrefs?.channels?.webPush) {
263
+ notificationPreferencesDb.updatePreferences(req.user.id, {
264
+ ...currentPrefs,
265
+ channels: { ...currentPrefs.channels, webPush: false },
266
+ });
267
+ }
268
+
269
+ res.json({ success: true });
270
+ } catch (error) {
271
+ console.error('Error removing push subscription:', error);
272
+ res.status(500).json({ error: 'Failed to remove push subscription' });
273
+ }
274
+ });
275
+
276
+ // Host OS for UI (e.g. hide Cursor agent when the backend runs on Windows).
277
+ router.get('/server-env', async (req, res) => {
278
+ try {
279
+ res.json({ platform: process.platform });
280
+ } catch (error) {
281
+ console.error('Error reading server environment:', error);
282
+ res.status(500).json({ error: 'Failed to read server environment' });
283
+ }
284
+ });
285
+
286
+ export default router;