@pixelbyte-software/pixcode 1.35.1 → 1.35.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (172) hide show
  1. package/LICENSE +718 -718
  2. package/README.de.md +248 -248
  3. package/README.ja.md +240 -240
  4. package/README.ko.md +240 -240
  5. package/README.md +303 -303
  6. package/README.ru.md +248 -248
  7. package/README.tr.md +250 -250
  8. package/README.zh-CN.md +240 -240
  9. package/dist/api-docs.html +548 -548
  10. package/dist/assets/{index-CBdsvGSR.js → index-D1-AIL_5.js} +1 -1
  11. package/dist/clear-cache.html +85 -85
  12. package/dist/convert-icons.md +52 -52
  13. package/dist/favicon.svg +8 -8
  14. package/dist/generate-icons.js +48 -48
  15. package/dist/icons/codex-white.svg +3 -3
  16. package/dist/icons/codex.svg +3 -3
  17. package/dist/icons/cursor-white.svg +11 -11
  18. package/dist/icons/icon-128x128.svg +9 -9
  19. package/dist/icons/icon-144x144.svg +9 -9
  20. package/dist/icons/icon-152x152.svg +9 -9
  21. package/dist/icons/icon-192x192.svg +9 -9
  22. package/dist/icons/icon-384x384.svg +9 -9
  23. package/dist/icons/icon-512x512.svg +9 -9
  24. package/dist/icons/icon-72x72.svg +9 -9
  25. package/dist/icons/icon-96x96.svg +9 -9
  26. package/dist/icons/icon-template.svg +9 -9
  27. package/dist/icons/qwen-logo.svg +14 -14
  28. package/dist/index.html +58 -58
  29. package/dist/logo.svg +12 -12
  30. package/dist/manifest.json +60 -60
  31. package/dist/openapi.yaml +1693 -1693
  32. package/dist/sw.js +124 -124
  33. package/dist-server/server/cli.js +96 -96
  34. package/dist-server/server/daemon/manager.js +33 -33
  35. package/dist-server/server/daemon-manager.js +64 -64
  36. package/dist-server/server/routes/commands.js +25 -25
  37. package/dist-server/server/routes/git.js +17 -17
  38. package/dist-server/server/routes/taskmaster.js +419 -419
  39. package/package.json +180 -180
  40. package/scripts/fix-node-pty.js +67 -67
  41. package/scripts/smoke/a2a-roundtrip.mjs +167 -167
  42. package/scripts/smoke/orchestration-api.mjs +172 -172
  43. package/scripts/smoke/orchestration-live-run.mjs +176 -176
  44. package/server/claude-sdk.js +898 -898
  45. package/server/cli.js +935 -935
  46. package/server/constants/config.js +4 -4
  47. package/server/cursor-cli.js +342 -342
  48. package/server/daemon/manager.js +564 -564
  49. package/server/daemon-manager.js +959 -959
  50. package/server/database/db.js +794 -794
  51. package/server/database/json-store.js +197 -197
  52. package/server/gemini-cli.js +535 -535
  53. package/server/gemini-response-handler.js +79 -79
  54. package/server/index.js +3135 -3135
  55. package/server/load-env.js +34 -34
  56. package/server/middleware/auth.js +173 -173
  57. package/server/modules/orchestration/a2a/adapter-registry.ts +108 -108
  58. package/server/modules/orchestration/a2a/adapters/abstract-a2a.adapter.ts +55 -55
  59. package/server/modules/orchestration/a2a/adapters/claude-code.adapter.ts +284 -284
  60. package/server/modules/orchestration/a2a/adapters/codex.adapter.ts +244 -244
  61. package/server/modules/orchestration/a2a/adapters/cursor.adapter.ts +249 -249
  62. package/server/modules/orchestration/a2a/adapters/gemini.adapter.ts +248 -248
  63. package/server/modules/orchestration/a2a/adapters/opencode.adapter.ts +248 -248
  64. package/server/modules/orchestration/a2a/adapters/qwen.adapter.ts +248 -248
  65. package/server/modules/orchestration/a2a/routes.ts +577 -577
  66. package/server/modules/orchestration/a2a/task-store.ts +178 -178
  67. package/server/modules/orchestration/a2a/types.ts +125 -125
  68. package/server/modules/orchestration/a2a/validator.ts +113 -113
  69. package/server/modules/orchestration/index.ts +66 -66
  70. package/server/modules/orchestration/preview/port-watcher.ts +112 -112
  71. package/server/modules/orchestration/preview/preview-proxy.ts +60 -60
  72. package/server/modules/orchestration/preview/types.ts +19 -19
  73. package/server/modules/orchestration/tasks/orchestration-task-store.ts +45 -45
  74. package/server/modules/orchestration/tasks/orchestration-task.routes.ts +73 -73
  75. package/server/modules/orchestration/tasks/orchestration-task.service.ts +145 -145
  76. package/server/modules/orchestration/tasks/orchestration-task.types.ts +29 -29
  77. package/server/modules/orchestration/workflows/built-in-workflows.ts +127 -127
  78. package/server/modules/orchestration/workflows/workflow-runner.ts +1206 -1206
  79. package/server/modules/orchestration/workflows/workflow-store.ts +97 -97
  80. package/server/modules/orchestration/workflows/workflow.routes.ts +169 -169
  81. package/server/modules/orchestration/workflows/workflow.types.ts +70 -70
  82. package/server/modules/orchestration/workflows/workspace-target.ts +120 -120
  83. package/server/modules/orchestration/workspace/docker-workspace.ts +135 -135
  84. package/server/modules/orchestration/workspace/path-safety.ts +55 -55
  85. package/server/modules/orchestration/workspace/types.ts +52 -52
  86. package/server/modules/orchestration/workspace/workspace-manager.ts +97 -97
  87. package/server/modules/orchestration/workspace/worktree-workspace.ts +125 -125
  88. package/server/modules/providers/index.ts +2 -2
  89. package/server/modules/providers/list/claude/claude-auth.provider.ts +145 -145
  90. package/server/modules/providers/list/claude/claude-mcp.provider.ts +135 -135
  91. package/server/modules/providers/list/claude/claude-sessions.provider.ts +306 -306
  92. package/server/modules/providers/list/claude/claude.provider.ts +15 -15
  93. package/server/modules/providers/list/codex/codex-auth.provider.ts +115 -115
  94. package/server/modules/providers/list/codex/codex-mcp.provider.ts +135 -135
  95. package/server/modules/providers/list/codex/codex-sessions.provider.ts +319 -319
  96. package/server/modules/providers/list/codex/codex.provider.ts +15 -15
  97. package/server/modules/providers/list/cursor/cursor-auth.provider.ts +143 -143
  98. package/server/modules/providers/list/cursor/cursor-mcp.provider.ts +108 -108
  99. package/server/modules/providers/list/cursor/cursor-sessions.provider.ts +421 -421
  100. package/server/modules/providers/list/cursor/cursor.provider.ts +15 -15
  101. package/server/modules/providers/list/gemini/gemini-auth.provider.ts +163 -163
  102. package/server/modules/providers/list/gemini/gemini-mcp.provider.ts +110 -110
  103. package/server/modules/providers/list/gemini/gemini-sessions.provider.ts +227 -227
  104. package/server/modules/providers/list/gemini/gemini.provider.ts +15 -15
  105. package/server/modules/providers/list/opencode/opencode-auth.provider.ts +130 -130
  106. package/server/modules/providers/list/opencode/opencode-mcp.provider.ts +126 -126
  107. package/server/modules/providers/list/opencode/opencode-sessions.provider.ts +232 -232
  108. package/server/modules/providers/list/opencode/opencode.provider.ts +29 -29
  109. package/server/modules/providers/list/qwen/qwen-auth.provider.ts +145 -145
  110. package/server/modules/providers/list/qwen/qwen-mcp.provider.ts +114 -114
  111. package/server/modules/providers/list/qwen/qwen-sessions.provider.ts +265 -265
  112. package/server/modules/providers/list/qwen/qwen.provider.ts +21 -21
  113. package/server/modules/providers/provider.registry.ts +40 -40
  114. package/server/modules/providers/provider.routes.ts +819 -819
  115. package/server/modules/providers/services/mcp.service.ts +86 -86
  116. package/server/modules/providers/services/provider-auth.service.ts +26 -26
  117. package/server/modules/providers/services/sessions.service.ts +45 -45
  118. package/server/modules/providers/shared/base/abstract.provider.ts +20 -20
  119. package/server/modules/providers/shared/mcp/mcp.provider.ts +151 -151
  120. package/server/modules/providers/shared/provider-configs.ts +142 -142
  121. package/server/modules/providers/tests/mcp.test.ts +293 -293
  122. package/server/openai-codex.js +462 -462
  123. package/server/opencode-cli.js +459 -459
  124. package/server/opencode-response-handler.js +107 -107
  125. package/server/projects.js +3105 -3105
  126. package/server/qwen-code-cli.js +395 -395
  127. package/server/qwen-response-handler.js +73 -73
  128. package/server/routes/agent.js +1365 -1365
  129. package/server/routes/auth.js +138 -138
  130. package/server/routes/codex.js +19 -19
  131. package/server/routes/commands.js +554 -554
  132. package/server/routes/cursor.js +52 -52
  133. package/server/routes/gemini.js +24 -24
  134. package/server/routes/git.js +1488 -1488
  135. package/server/routes/mcp-utils.js +31 -31
  136. package/server/routes/messages.js +61 -61
  137. package/server/routes/network.js +120 -120
  138. package/server/routes/plugins.js +318 -318
  139. package/server/routes/projects.js +915 -915
  140. package/server/routes/qwen.js +27 -27
  141. package/server/routes/settings.js +286 -286
  142. package/server/routes/taskmaster.js +1496 -1496
  143. package/server/routes/telegram.js +125 -125
  144. package/server/routes/user.js +123 -123
  145. package/server/services/external-access.js +171 -171
  146. package/server/services/install-jobs.js +571 -571
  147. package/server/services/notification-orchestrator.js +242 -242
  148. package/server/services/provider-credentials.js +189 -189
  149. package/server/services/provider-models.js +381 -381
  150. package/server/services/telegram/bot.js +279 -279
  151. package/server/services/telegram/telegram-http-client.js +130 -130
  152. package/server/services/telegram/translations.js +170 -170
  153. package/server/services/vapid-keys.js +36 -36
  154. package/server/sessionManager.js +225 -225
  155. package/server/shared/interfaces.ts +54 -54
  156. package/server/shared/types.ts +172 -172
  157. package/server/shared/utils.ts +193 -193
  158. package/server/tsconfig.json +36 -36
  159. package/server/utils/colors.js +21 -21
  160. package/server/utils/commandParser.js +303 -303
  161. package/server/utils/frontmatter.js +18 -18
  162. package/server/utils/gitConfig.js +34 -34
  163. package/server/utils/mcp-detector.js +147 -147
  164. package/server/utils/plugin-loader.js +457 -457
  165. package/server/utils/plugin-process-manager.js +184 -184
  166. package/server/utils/port-access.js +209 -209
  167. package/server/utils/runtime-paths.js +37 -37
  168. package/server/utils/taskmaster-websocket.js +128 -128
  169. package/server/utils/url-detection.js +71 -71
  170. package/server/vite-daemon.js +78 -78
  171. package/shared/modelConstants.js +162 -162
  172. package/shared/networkHosts.js +22 -22
@@ -1,27 +1,27 @@
1
- import express from 'express';
2
-
3
- import sessionManager from '../sessionManager.js';
4
- import { sessionNamesDb } from '../database/db.js';
5
-
6
- const router = express.Router();
7
-
8
- // Delete a Qwen Code session — mirrors the Gemini/Codex routes so the UI's
9
- // unified delete flow works identically regardless of the active provider.
10
- router.delete('/sessions/:sessionId', async (req, res) => {
11
- try {
12
- const { sessionId } = req.params;
13
-
14
- if (!sessionId || typeof sessionId !== 'string' || !/^[a-zA-Z0-9_.-]{1,100}$/.test(sessionId)) {
15
- return res.status(400).json({ success: false, error: 'Invalid session ID format' });
16
- }
17
-
18
- await sessionManager.deleteSession(sessionId);
19
- sessionNamesDb.deleteName(sessionId, 'qwen');
20
- res.json({ success: true });
21
- } catch (error) {
22
- console.error(`Error deleting Qwen session ${req.params.sessionId}:`, error);
23
- res.status(500).json({ success: false, error: error.message });
24
- }
25
- });
26
-
27
- export default router;
1
+ import express from 'express';
2
+
3
+ import sessionManager from '../sessionManager.js';
4
+ import { sessionNamesDb } from '../database/db.js';
5
+
6
+ const router = express.Router();
7
+
8
+ // Delete a Qwen Code session — mirrors the Gemini/Codex routes so the UI's
9
+ // unified delete flow works identically regardless of the active provider.
10
+ router.delete('/sessions/:sessionId', async (req, res) => {
11
+ try {
12
+ const { sessionId } = req.params;
13
+
14
+ if (!sessionId || typeof sessionId !== 'string' || !/^[a-zA-Z0-9_.-]{1,100}$/.test(sessionId)) {
15
+ return res.status(400).json({ success: false, error: 'Invalid session ID format' });
16
+ }
17
+
18
+ await sessionManager.deleteSession(sessionId);
19
+ sessionNamesDb.deleteName(sessionId, 'qwen');
20
+ res.json({ success: true });
21
+ } catch (error) {
22
+ console.error(`Error deleting Qwen session ${req.params.sessionId}:`, error);
23
+ res.status(500).json({ success: false, error: error.message });
24
+ }
25
+ });
26
+
27
+ export default router;
@@ -1,286 +1,286 @@
1
- import express from 'express';
2
- import { apiKeysDb, credentialsDb, notificationPreferencesDb, pushSubscriptionsDb } from '../database/db.js';
3
- import { getPublicKey } from '../services/vapid-keys.js';
4
- import { createNotificationEvent, notifyUserIfEnabled } from '../services/notification-orchestrator.js';
5
-
6
- const router = express.Router();
7
-
8
- // ===============================
9
- // API Keys Management
10
- // ===============================
11
-
12
- // Get all API keys for the authenticated user
13
- router.get('/api-keys', async (req, res) => {
14
- try {
15
- const apiKeys = apiKeysDb.getApiKeys(req.user.id);
16
- // Don't send the full API key in the list for security
17
- const sanitizedKeys = apiKeys.map(key => ({
18
- ...key,
19
- api_key: key.api_key.substring(0, 10) + '...'
20
- }));
21
- res.json({ apiKeys: sanitizedKeys });
22
- } catch (error) {
23
- console.error('Error fetching API keys:', error);
24
- res.status(500).json({ error: 'Failed to fetch API keys' });
25
- }
26
- });
27
-
28
- // Create a new API key
29
- router.post('/api-keys', async (req, res) => {
30
- try {
31
- const { keyName } = req.body;
32
-
33
- if (!keyName || !keyName.trim()) {
34
- return res.status(400).json({ error: 'Key name is required' });
35
- }
36
-
37
- const result = apiKeysDb.createApiKey(req.user.id, keyName.trim());
38
- res.json({
39
- success: true,
40
- apiKey: result
41
- });
42
- } catch (error) {
43
- console.error('Error creating API key:', error);
44
- res.status(500).json({ error: 'Failed to create API key' });
45
- }
46
- });
47
-
48
- // Delete an API key
49
- router.delete('/api-keys/:keyId', async (req, res) => {
50
- try {
51
- const { keyId } = req.params;
52
- const success = apiKeysDb.deleteApiKey(req.user.id, parseInt(keyId));
53
-
54
- if (success) {
55
- res.json({ success: true });
56
- } else {
57
- res.status(404).json({ error: 'API key not found' });
58
- }
59
- } catch (error) {
60
- console.error('Error deleting API key:', error);
61
- res.status(500).json({ error: 'Failed to delete API key' });
62
- }
63
- });
64
-
65
- // Toggle API key active status
66
- router.patch('/api-keys/:keyId/toggle', async (req, res) => {
67
- try {
68
- const { keyId } = req.params;
69
- const { isActive } = req.body;
70
-
71
- if (typeof isActive !== 'boolean') {
72
- return res.status(400).json({ error: 'isActive must be a boolean' });
73
- }
74
-
75
- const success = apiKeysDb.toggleApiKey(req.user.id, parseInt(keyId), isActive);
76
-
77
- if (success) {
78
- res.json({ success: true });
79
- } else {
80
- res.status(404).json({ error: 'API key not found' });
81
- }
82
- } catch (error) {
83
- console.error('Error toggling API key:', error);
84
- res.status(500).json({ error: 'Failed to toggle API key' });
85
- }
86
- });
87
-
88
- // ===============================
89
- // Generic Credentials Management
90
- // ===============================
91
-
92
- // Get all credentials for the authenticated user (optionally filtered by type)
93
- router.get('/credentials', async (req, res) => {
94
- try {
95
- const { type } = req.query;
96
- const credentials = credentialsDb.getCredentials(req.user.id, type || null);
97
- // Don't send the actual credential values for security
98
- res.json({ credentials });
99
- } catch (error) {
100
- console.error('Error fetching credentials:', error);
101
- res.status(500).json({ error: 'Failed to fetch credentials' });
102
- }
103
- });
104
-
105
- // Create a new credential
106
- router.post('/credentials', async (req, res) => {
107
- try {
108
- const { credentialName, credentialType, credentialValue, description } = req.body;
109
-
110
- if (!credentialName || !credentialName.trim()) {
111
- return res.status(400).json({ error: 'Credential name is required' });
112
- }
113
-
114
- if (!credentialType || !credentialType.trim()) {
115
- return res.status(400).json({ error: 'Credential type is required' });
116
- }
117
-
118
- if (!credentialValue || !credentialValue.trim()) {
119
- return res.status(400).json({ error: 'Credential value is required' });
120
- }
121
-
122
- const result = credentialsDb.createCredential(
123
- req.user.id,
124
- credentialName.trim(),
125
- credentialType.trim(),
126
- credentialValue.trim(),
127
- description?.trim() || null
128
- );
129
-
130
- res.json({
131
- success: true,
132
- credential: result
133
- });
134
- } catch (error) {
135
- console.error('Error creating credential:', error);
136
- res.status(500).json({ error: 'Failed to create credential' });
137
- }
138
- });
139
-
140
- // Delete a credential
141
- router.delete('/credentials/:credentialId', async (req, res) => {
142
- try {
143
- const { credentialId } = req.params;
144
- const success = credentialsDb.deleteCredential(req.user.id, parseInt(credentialId));
145
-
146
- if (success) {
147
- res.json({ success: true });
148
- } else {
149
- res.status(404).json({ error: 'Credential not found' });
150
- }
151
- } catch (error) {
152
- console.error('Error deleting credential:', error);
153
- res.status(500).json({ error: 'Failed to delete credential' });
154
- }
155
- });
156
-
157
- // Toggle credential active status
158
- router.patch('/credentials/:credentialId/toggle', async (req, res) => {
159
- try {
160
- const { credentialId } = req.params;
161
- const { isActive } = req.body;
162
-
163
- if (typeof isActive !== 'boolean') {
164
- return res.status(400).json({ error: 'isActive must be a boolean' });
165
- }
166
-
167
- const success = credentialsDb.toggleCredential(req.user.id, parseInt(credentialId), isActive);
168
-
169
- if (success) {
170
- res.json({ success: true });
171
- } else {
172
- res.status(404).json({ error: 'Credential not found' });
173
- }
174
- } catch (error) {
175
- console.error('Error toggling credential:', error);
176
- res.status(500).json({ error: 'Failed to toggle credential' });
177
- }
178
- });
179
-
180
- // ===============================
181
- // Notification Preferences
182
- // ===============================
183
-
184
- router.get('/notification-preferences', async (req, res) => {
185
- try {
186
- const preferences = notificationPreferencesDb.getPreferences(req.user.id);
187
- res.json({ success: true, preferences });
188
- } catch (error) {
189
- console.error('Error fetching notification preferences:', error);
190
- res.status(500).json({ error: 'Failed to fetch notification preferences' });
191
- }
192
- });
193
-
194
- router.put('/notification-preferences', async (req, res) => {
195
- try {
196
- const preferences = notificationPreferencesDb.updatePreferences(req.user.id, req.body || {});
197
- res.json({ success: true, preferences });
198
- } catch (error) {
199
- console.error('Error saving notification preferences:', error);
200
- res.status(500).json({ error: 'Failed to save notification preferences' });
201
- }
202
- });
203
-
204
- // ===============================
205
- // Push Subscription Management
206
- // ===============================
207
-
208
- router.get('/push/vapid-public-key', async (req, res) => {
209
- try {
210
- const publicKey = getPublicKey();
211
- res.json({ publicKey });
212
- } catch (error) {
213
- console.error('Error fetching VAPID public key:', error);
214
- res.status(500).json({ error: 'Failed to fetch VAPID public key' });
215
- }
216
- });
217
-
218
- router.post('/push/subscribe', async (req, res) => {
219
- try {
220
- const { endpoint, keys } = req.body;
221
- if (!endpoint || !keys?.p256dh || !keys?.auth) {
222
- return res.status(400).json({ error: 'Missing subscription fields' });
223
- }
224
- pushSubscriptionsDb.saveSubscription(req.user.id, endpoint, keys.p256dh, keys.auth);
225
-
226
- // Enable webPush in preferences so the confirmation goes through the full pipeline
227
- const currentPrefs = notificationPreferencesDb.getPreferences(req.user.id);
228
- if (!currentPrefs?.channels?.webPush) {
229
- notificationPreferencesDb.updatePreferences(req.user.id, {
230
- ...currentPrefs,
231
- channels: { ...currentPrefs?.channels, webPush: true },
232
- });
233
- }
234
-
235
- res.json({ success: true });
236
-
237
- // Send a confirmation push through the full notification pipeline
238
- const event = createNotificationEvent({
239
- provider: 'system',
240
- kind: 'info',
241
- code: 'push.enabled',
242
- meta: { message: 'Push notifications are now enabled!' },
243
- severity: 'info'
244
- });
245
- notifyUserIfEnabled({ userId: req.user.id, event });
246
- } catch (error) {
247
- console.error('Error saving push subscription:', error);
248
- res.status(500).json({ error: 'Failed to save push subscription' });
249
- }
250
- });
251
-
252
- router.post('/push/unsubscribe', async (req, res) => {
253
- try {
254
- const { endpoint } = req.body;
255
- if (!endpoint) {
256
- return res.status(400).json({ error: 'Missing endpoint' });
257
- }
258
- pushSubscriptionsDb.removeSubscription(endpoint);
259
-
260
- // Disable webPush in preferences to match subscription state
261
- const currentPrefs = notificationPreferencesDb.getPreferences(req.user.id);
262
- if (currentPrefs?.channels?.webPush) {
263
- notificationPreferencesDb.updatePreferences(req.user.id, {
264
- ...currentPrefs,
265
- channels: { ...currentPrefs.channels, webPush: false },
266
- });
267
- }
268
-
269
- res.json({ success: true });
270
- } catch (error) {
271
- console.error('Error removing push subscription:', error);
272
- res.status(500).json({ error: 'Failed to remove push subscription' });
273
- }
274
- });
275
-
276
- // Host OS for UI (e.g. hide Cursor agent when the backend runs on Windows).
277
- router.get('/server-env', async (req, res) => {
278
- try {
279
- res.json({ platform: process.platform });
280
- } catch (error) {
281
- console.error('Error reading server environment:', error);
282
- res.status(500).json({ error: 'Failed to read server environment' });
283
- }
284
- });
285
-
286
- export default router;
1
+ import express from 'express';
2
+ import { apiKeysDb, credentialsDb, notificationPreferencesDb, pushSubscriptionsDb } from '../database/db.js';
3
+ import { getPublicKey } from '../services/vapid-keys.js';
4
+ import { createNotificationEvent, notifyUserIfEnabled } from '../services/notification-orchestrator.js';
5
+
6
+ const router = express.Router();
7
+
8
+ // ===============================
9
+ // API Keys Management
10
+ // ===============================
11
+
12
+ // Get all API keys for the authenticated user
13
+ router.get('/api-keys', async (req, res) => {
14
+ try {
15
+ const apiKeys = apiKeysDb.getApiKeys(req.user.id);
16
+ // Don't send the full API key in the list for security
17
+ const sanitizedKeys = apiKeys.map(key => ({
18
+ ...key,
19
+ api_key: key.api_key.substring(0, 10) + '...'
20
+ }));
21
+ res.json({ apiKeys: sanitizedKeys });
22
+ } catch (error) {
23
+ console.error('Error fetching API keys:', error);
24
+ res.status(500).json({ error: 'Failed to fetch API keys' });
25
+ }
26
+ });
27
+
28
+ // Create a new API key
29
+ router.post('/api-keys', async (req, res) => {
30
+ try {
31
+ const { keyName } = req.body;
32
+
33
+ if (!keyName || !keyName.trim()) {
34
+ return res.status(400).json({ error: 'Key name is required' });
35
+ }
36
+
37
+ const result = apiKeysDb.createApiKey(req.user.id, keyName.trim());
38
+ res.json({
39
+ success: true,
40
+ apiKey: result
41
+ });
42
+ } catch (error) {
43
+ console.error('Error creating API key:', error);
44
+ res.status(500).json({ error: 'Failed to create API key' });
45
+ }
46
+ });
47
+
48
+ // Delete an API key
49
+ router.delete('/api-keys/:keyId', async (req, res) => {
50
+ try {
51
+ const { keyId } = req.params;
52
+ const success = apiKeysDb.deleteApiKey(req.user.id, parseInt(keyId));
53
+
54
+ if (success) {
55
+ res.json({ success: true });
56
+ } else {
57
+ res.status(404).json({ error: 'API key not found' });
58
+ }
59
+ } catch (error) {
60
+ console.error('Error deleting API key:', error);
61
+ res.status(500).json({ error: 'Failed to delete API key' });
62
+ }
63
+ });
64
+
65
+ // Toggle API key active status
66
+ router.patch('/api-keys/:keyId/toggle', async (req, res) => {
67
+ try {
68
+ const { keyId } = req.params;
69
+ const { isActive } = req.body;
70
+
71
+ if (typeof isActive !== 'boolean') {
72
+ return res.status(400).json({ error: 'isActive must be a boolean' });
73
+ }
74
+
75
+ const success = apiKeysDb.toggleApiKey(req.user.id, parseInt(keyId), isActive);
76
+
77
+ if (success) {
78
+ res.json({ success: true });
79
+ } else {
80
+ res.status(404).json({ error: 'API key not found' });
81
+ }
82
+ } catch (error) {
83
+ console.error('Error toggling API key:', error);
84
+ res.status(500).json({ error: 'Failed to toggle API key' });
85
+ }
86
+ });
87
+
88
+ // ===============================
89
+ // Generic Credentials Management
90
+ // ===============================
91
+
92
+ // Get all credentials for the authenticated user (optionally filtered by type)
93
+ router.get('/credentials', async (req, res) => {
94
+ try {
95
+ const { type } = req.query;
96
+ const credentials = credentialsDb.getCredentials(req.user.id, type || null);
97
+ // Don't send the actual credential values for security
98
+ res.json({ credentials });
99
+ } catch (error) {
100
+ console.error('Error fetching credentials:', error);
101
+ res.status(500).json({ error: 'Failed to fetch credentials' });
102
+ }
103
+ });
104
+
105
+ // Create a new credential
106
+ router.post('/credentials', async (req, res) => {
107
+ try {
108
+ const { credentialName, credentialType, credentialValue, description } = req.body;
109
+
110
+ if (!credentialName || !credentialName.trim()) {
111
+ return res.status(400).json({ error: 'Credential name is required' });
112
+ }
113
+
114
+ if (!credentialType || !credentialType.trim()) {
115
+ return res.status(400).json({ error: 'Credential type is required' });
116
+ }
117
+
118
+ if (!credentialValue || !credentialValue.trim()) {
119
+ return res.status(400).json({ error: 'Credential value is required' });
120
+ }
121
+
122
+ const result = credentialsDb.createCredential(
123
+ req.user.id,
124
+ credentialName.trim(),
125
+ credentialType.trim(),
126
+ credentialValue.trim(),
127
+ description?.trim() || null
128
+ );
129
+
130
+ res.json({
131
+ success: true,
132
+ credential: result
133
+ });
134
+ } catch (error) {
135
+ console.error('Error creating credential:', error);
136
+ res.status(500).json({ error: 'Failed to create credential' });
137
+ }
138
+ });
139
+
140
+ // Delete a credential
141
+ router.delete('/credentials/:credentialId', async (req, res) => {
142
+ try {
143
+ const { credentialId } = req.params;
144
+ const success = credentialsDb.deleteCredential(req.user.id, parseInt(credentialId));
145
+
146
+ if (success) {
147
+ res.json({ success: true });
148
+ } else {
149
+ res.status(404).json({ error: 'Credential not found' });
150
+ }
151
+ } catch (error) {
152
+ console.error('Error deleting credential:', error);
153
+ res.status(500).json({ error: 'Failed to delete credential' });
154
+ }
155
+ });
156
+
157
+ // Toggle credential active status
158
+ router.patch('/credentials/:credentialId/toggle', async (req, res) => {
159
+ try {
160
+ const { credentialId } = req.params;
161
+ const { isActive } = req.body;
162
+
163
+ if (typeof isActive !== 'boolean') {
164
+ return res.status(400).json({ error: 'isActive must be a boolean' });
165
+ }
166
+
167
+ const success = credentialsDb.toggleCredential(req.user.id, parseInt(credentialId), isActive);
168
+
169
+ if (success) {
170
+ res.json({ success: true });
171
+ } else {
172
+ res.status(404).json({ error: 'Credential not found' });
173
+ }
174
+ } catch (error) {
175
+ console.error('Error toggling credential:', error);
176
+ res.status(500).json({ error: 'Failed to toggle credential' });
177
+ }
178
+ });
179
+
180
+ // ===============================
181
+ // Notification Preferences
182
+ // ===============================
183
+
184
+ router.get('/notification-preferences', async (req, res) => {
185
+ try {
186
+ const preferences = notificationPreferencesDb.getPreferences(req.user.id);
187
+ res.json({ success: true, preferences });
188
+ } catch (error) {
189
+ console.error('Error fetching notification preferences:', error);
190
+ res.status(500).json({ error: 'Failed to fetch notification preferences' });
191
+ }
192
+ });
193
+
194
+ router.put('/notification-preferences', async (req, res) => {
195
+ try {
196
+ const preferences = notificationPreferencesDb.updatePreferences(req.user.id, req.body || {});
197
+ res.json({ success: true, preferences });
198
+ } catch (error) {
199
+ console.error('Error saving notification preferences:', error);
200
+ res.status(500).json({ error: 'Failed to save notification preferences' });
201
+ }
202
+ });
203
+
204
+ // ===============================
205
+ // Push Subscription Management
206
+ // ===============================
207
+
208
+ router.get('/push/vapid-public-key', async (req, res) => {
209
+ try {
210
+ const publicKey = getPublicKey();
211
+ res.json({ publicKey });
212
+ } catch (error) {
213
+ console.error('Error fetching VAPID public key:', error);
214
+ res.status(500).json({ error: 'Failed to fetch VAPID public key' });
215
+ }
216
+ });
217
+
218
+ router.post('/push/subscribe', async (req, res) => {
219
+ try {
220
+ const { endpoint, keys } = req.body;
221
+ if (!endpoint || !keys?.p256dh || !keys?.auth) {
222
+ return res.status(400).json({ error: 'Missing subscription fields' });
223
+ }
224
+ pushSubscriptionsDb.saveSubscription(req.user.id, endpoint, keys.p256dh, keys.auth);
225
+
226
+ // Enable webPush in preferences so the confirmation goes through the full pipeline
227
+ const currentPrefs = notificationPreferencesDb.getPreferences(req.user.id);
228
+ if (!currentPrefs?.channels?.webPush) {
229
+ notificationPreferencesDb.updatePreferences(req.user.id, {
230
+ ...currentPrefs,
231
+ channels: { ...currentPrefs?.channels, webPush: true },
232
+ });
233
+ }
234
+
235
+ res.json({ success: true });
236
+
237
+ // Send a confirmation push through the full notification pipeline
238
+ const event = createNotificationEvent({
239
+ provider: 'system',
240
+ kind: 'info',
241
+ code: 'push.enabled',
242
+ meta: { message: 'Push notifications are now enabled!' },
243
+ severity: 'info'
244
+ });
245
+ notifyUserIfEnabled({ userId: req.user.id, event });
246
+ } catch (error) {
247
+ console.error('Error saving push subscription:', error);
248
+ res.status(500).json({ error: 'Failed to save push subscription' });
249
+ }
250
+ });
251
+
252
+ router.post('/push/unsubscribe', async (req, res) => {
253
+ try {
254
+ const { endpoint } = req.body;
255
+ if (!endpoint) {
256
+ return res.status(400).json({ error: 'Missing endpoint' });
257
+ }
258
+ pushSubscriptionsDb.removeSubscription(endpoint);
259
+
260
+ // Disable webPush in preferences to match subscription state
261
+ const currentPrefs = notificationPreferencesDb.getPreferences(req.user.id);
262
+ if (currentPrefs?.channels?.webPush) {
263
+ notificationPreferencesDb.updatePreferences(req.user.id, {
264
+ ...currentPrefs,
265
+ channels: { ...currentPrefs.channels, webPush: false },
266
+ });
267
+ }
268
+
269
+ res.json({ success: true });
270
+ } catch (error) {
271
+ console.error('Error removing push subscription:', error);
272
+ res.status(500).json({ error: 'Failed to remove push subscription' });
273
+ }
274
+ });
275
+
276
+ // Host OS for UI (e.g. hide Cursor agent when the backend runs on Windows).
277
+ router.get('/server-env', async (req, res) => {
278
+ try {
279
+ res.json({ platform: process.platform });
280
+ } catch (error) {
281
+ console.error('Error reading server environment:', error);
282
+ res.status(500).json({ error: 'Failed to read server environment' });
283
+ }
284
+ });
285
+
286
+ export default router;