@pixelbyte-software/pixcode 1.35.2 → 1.35.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (173) hide show
  1. package/LICENSE +718 -718
  2. package/README.de.md +248 -248
  3. package/README.ja.md +240 -240
  4. package/README.ko.md +240 -240
  5. package/README.md +303 -303
  6. package/README.ru.md +248 -248
  7. package/README.tr.md +250 -250
  8. package/README.zh-CN.md +240 -240
  9. package/dist/api-docs.html +548 -548
  10. package/dist/assets/{index-D1-AIL_5.js → index-D8z78r_D.js} +57 -57
  11. package/dist/assets/{index-B8w57E1r.css → index-DmchzORZ.css} +1 -1
  12. package/dist/clear-cache.html +85 -85
  13. package/dist/convert-icons.md +52 -52
  14. package/dist/favicon.svg +8 -8
  15. package/dist/generate-icons.js +48 -48
  16. package/dist/icons/codex-white.svg +3 -3
  17. package/dist/icons/codex.svg +3 -3
  18. package/dist/icons/cursor-white.svg +11 -11
  19. package/dist/icons/icon-128x128.svg +9 -9
  20. package/dist/icons/icon-144x144.svg +9 -9
  21. package/dist/icons/icon-152x152.svg +9 -9
  22. package/dist/icons/icon-192x192.svg +9 -9
  23. package/dist/icons/icon-384x384.svg +9 -9
  24. package/dist/icons/icon-512x512.svg +9 -9
  25. package/dist/icons/icon-72x72.svg +9 -9
  26. package/dist/icons/icon-96x96.svg +9 -9
  27. package/dist/icons/icon-template.svg +9 -9
  28. package/dist/icons/qwen-logo.svg +14 -14
  29. package/dist/index.html +59 -59
  30. package/dist/logo.svg +12 -12
  31. package/dist/manifest.json +60 -60
  32. package/dist/openapi.yaml +1693 -1693
  33. package/dist/sw.js +124 -124
  34. package/dist-server/server/cli.js +96 -96
  35. package/dist-server/server/daemon/manager.js +33 -33
  36. package/dist-server/server/daemon-manager.js +64 -64
  37. package/dist-server/server/routes/commands.js +25 -25
  38. package/dist-server/server/routes/git.js +17 -17
  39. package/dist-server/server/routes/taskmaster.js +419 -419
  40. package/package.json +180 -180
  41. package/scripts/fix-node-pty.js +67 -67
  42. package/scripts/smoke/a2a-roundtrip.mjs +167 -167
  43. package/scripts/smoke/orchestration-api.mjs +172 -172
  44. package/scripts/smoke/orchestration-live-run.mjs +176 -176
  45. package/server/claude-sdk.js +898 -898
  46. package/server/cli.js +935 -935
  47. package/server/constants/config.js +4 -4
  48. package/server/cursor-cli.js +342 -342
  49. package/server/daemon/manager.js +564 -564
  50. package/server/daemon-manager.js +959 -959
  51. package/server/database/db.js +794 -794
  52. package/server/database/json-store.js +197 -197
  53. package/server/gemini-cli.js +535 -535
  54. package/server/gemini-response-handler.js +79 -79
  55. package/server/index.js +3135 -3135
  56. package/server/load-env.js +34 -34
  57. package/server/middleware/auth.js +173 -173
  58. package/server/modules/orchestration/a2a/adapter-registry.ts +108 -108
  59. package/server/modules/orchestration/a2a/adapters/abstract-a2a.adapter.ts +55 -55
  60. package/server/modules/orchestration/a2a/adapters/claude-code.adapter.ts +284 -284
  61. package/server/modules/orchestration/a2a/adapters/codex.adapter.ts +244 -244
  62. package/server/modules/orchestration/a2a/adapters/cursor.adapter.ts +249 -249
  63. package/server/modules/orchestration/a2a/adapters/gemini.adapter.ts +248 -248
  64. package/server/modules/orchestration/a2a/adapters/opencode.adapter.ts +248 -248
  65. package/server/modules/orchestration/a2a/adapters/qwen.adapter.ts +248 -248
  66. package/server/modules/orchestration/a2a/routes.ts +577 -577
  67. package/server/modules/orchestration/a2a/task-store.ts +178 -178
  68. package/server/modules/orchestration/a2a/types.ts +125 -125
  69. package/server/modules/orchestration/a2a/validator.ts +113 -113
  70. package/server/modules/orchestration/index.ts +66 -66
  71. package/server/modules/orchestration/preview/port-watcher.ts +112 -112
  72. package/server/modules/orchestration/preview/preview-proxy.ts +60 -60
  73. package/server/modules/orchestration/preview/types.ts +19 -19
  74. package/server/modules/orchestration/tasks/orchestration-task-store.ts +45 -45
  75. package/server/modules/orchestration/tasks/orchestration-task.routes.ts +73 -73
  76. package/server/modules/orchestration/tasks/orchestration-task.service.ts +145 -145
  77. package/server/modules/orchestration/tasks/orchestration-task.types.ts +29 -29
  78. package/server/modules/orchestration/workflows/built-in-workflows.ts +127 -127
  79. package/server/modules/orchestration/workflows/workflow-runner.ts +1206 -1206
  80. package/server/modules/orchestration/workflows/workflow-store.ts +97 -97
  81. package/server/modules/orchestration/workflows/workflow.routes.ts +169 -169
  82. package/server/modules/orchestration/workflows/workflow.types.ts +70 -70
  83. package/server/modules/orchestration/workflows/workspace-target.ts +120 -120
  84. package/server/modules/orchestration/workspace/docker-workspace.ts +135 -135
  85. package/server/modules/orchestration/workspace/path-safety.ts +55 -55
  86. package/server/modules/orchestration/workspace/types.ts +52 -52
  87. package/server/modules/orchestration/workspace/workspace-manager.ts +97 -97
  88. package/server/modules/orchestration/workspace/worktree-workspace.ts +125 -125
  89. package/server/modules/providers/index.ts +2 -2
  90. package/server/modules/providers/list/claude/claude-auth.provider.ts +145 -145
  91. package/server/modules/providers/list/claude/claude-mcp.provider.ts +135 -135
  92. package/server/modules/providers/list/claude/claude-sessions.provider.ts +306 -306
  93. package/server/modules/providers/list/claude/claude.provider.ts +15 -15
  94. package/server/modules/providers/list/codex/codex-auth.provider.ts +115 -115
  95. package/server/modules/providers/list/codex/codex-mcp.provider.ts +135 -135
  96. package/server/modules/providers/list/codex/codex-sessions.provider.ts +319 -319
  97. package/server/modules/providers/list/codex/codex.provider.ts +15 -15
  98. package/server/modules/providers/list/cursor/cursor-auth.provider.ts +143 -143
  99. package/server/modules/providers/list/cursor/cursor-mcp.provider.ts +108 -108
  100. package/server/modules/providers/list/cursor/cursor-sessions.provider.ts +421 -421
  101. package/server/modules/providers/list/cursor/cursor.provider.ts +15 -15
  102. package/server/modules/providers/list/gemini/gemini-auth.provider.ts +163 -163
  103. package/server/modules/providers/list/gemini/gemini-mcp.provider.ts +110 -110
  104. package/server/modules/providers/list/gemini/gemini-sessions.provider.ts +227 -227
  105. package/server/modules/providers/list/gemini/gemini.provider.ts +15 -15
  106. package/server/modules/providers/list/opencode/opencode-auth.provider.ts +130 -130
  107. package/server/modules/providers/list/opencode/opencode-mcp.provider.ts +126 -126
  108. package/server/modules/providers/list/opencode/opencode-sessions.provider.ts +232 -232
  109. package/server/modules/providers/list/opencode/opencode.provider.ts +29 -29
  110. package/server/modules/providers/list/qwen/qwen-auth.provider.ts +145 -145
  111. package/server/modules/providers/list/qwen/qwen-mcp.provider.ts +114 -114
  112. package/server/modules/providers/list/qwen/qwen-sessions.provider.ts +265 -265
  113. package/server/modules/providers/list/qwen/qwen.provider.ts +21 -21
  114. package/server/modules/providers/provider.registry.ts +40 -40
  115. package/server/modules/providers/provider.routes.ts +819 -819
  116. package/server/modules/providers/services/mcp.service.ts +86 -86
  117. package/server/modules/providers/services/provider-auth.service.ts +26 -26
  118. package/server/modules/providers/services/sessions.service.ts +45 -45
  119. package/server/modules/providers/shared/base/abstract.provider.ts +20 -20
  120. package/server/modules/providers/shared/mcp/mcp.provider.ts +151 -151
  121. package/server/modules/providers/shared/provider-configs.ts +142 -142
  122. package/server/modules/providers/tests/mcp.test.ts +293 -293
  123. package/server/openai-codex.js +462 -462
  124. package/server/opencode-cli.js +459 -459
  125. package/server/opencode-response-handler.js +107 -107
  126. package/server/projects.js +3105 -3105
  127. package/server/qwen-code-cli.js +395 -395
  128. package/server/qwen-response-handler.js +73 -73
  129. package/server/routes/agent.js +1365 -1365
  130. package/server/routes/auth.js +138 -138
  131. package/server/routes/codex.js +19 -19
  132. package/server/routes/commands.js +554 -554
  133. package/server/routes/cursor.js +52 -52
  134. package/server/routes/gemini.js +24 -24
  135. package/server/routes/git.js +1488 -1488
  136. package/server/routes/mcp-utils.js +31 -31
  137. package/server/routes/messages.js +61 -61
  138. package/server/routes/network.js +120 -120
  139. package/server/routes/plugins.js +318 -318
  140. package/server/routes/projects.js +915 -915
  141. package/server/routes/qwen.js +27 -27
  142. package/server/routes/settings.js +286 -286
  143. package/server/routes/taskmaster.js +1496 -1496
  144. package/server/routes/telegram.js +125 -125
  145. package/server/routes/user.js +123 -123
  146. package/server/services/external-access.js +171 -171
  147. package/server/services/install-jobs.js +571 -571
  148. package/server/services/notification-orchestrator.js +242 -242
  149. package/server/services/provider-credentials.js +189 -189
  150. package/server/services/provider-models.js +381 -381
  151. package/server/services/telegram/bot.js +279 -279
  152. package/server/services/telegram/telegram-http-client.js +130 -130
  153. package/server/services/telegram/translations.js +170 -170
  154. package/server/services/vapid-keys.js +36 -36
  155. package/server/sessionManager.js +225 -225
  156. package/server/shared/interfaces.ts +54 -54
  157. package/server/shared/types.ts +172 -172
  158. package/server/shared/utils.ts +193 -193
  159. package/server/tsconfig.json +36 -36
  160. package/server/utils/colors.js +21 -21
  161. package/server/utils/commandParser.js +303 -303
  162. package/server/utils/frontmatter.js +18 -18
  163. package/server/utils/gitConfig.js +34 -34
  164. package/server/utils/mcp-detector.js +147 -147
  165. package/server/utils/plugin-loader.js +457 -457
  166. package/server/utils/plugin-process-manager.js +184 -184
  167. package/server/utils/port-access.js +209 -209
  168. package/server/utils/runtime-paths.js +37 -37
  169. package/server/utils/taskmaster-websocket.js +128 -128
  170. package/server/utils/url-detection.js +71 -71
  171. package/server/vite-daemon.js +78 -78
  172. package/shared/modelConstants.js +162 -162
  173. package/shared/networkHosts.js +22 -22
@@ -1,27 +1,27 @@
1
- import express from 'express';
2
-
3
- import sessionManager from '../sessionManager.js';
4
- import { sessionNamesDb } from '../database/db.js';
5
-
6
- const router = express.Router();
7
-
8
- // Delete a Qwen Code session — mirrors the Gemini/Codex routes so the UI's
9
- // unified delete flow works identically regardless of the active provider.
10
- router.delete('/sessions/:sessionId', async (req, res) => {
11
- try {
12
- const { sessionId } = req.params;
13
-
14
- if (!sessionId || typeof sessionId !== 'string' || !/^[a-zA-Z0-9_.-]{1,100}$/.test(sessionId)) {
15
- return res.status(400).json({ success: false, error: 'Invalid session ID format' });
16
- }
17
-
18
- await sessionManager.deleteSession(sessionId);
19
- sessionNamesDb.deleteName(sessionId, 'qwen');
20
- res.json({ success: true });
21
- } catch (error) {
22
- console.error(`Error deleting Qwen session ${req.params.sessionId}:`, error);
23
- res.status(500).json({ success: false, error: error.message });
24
- }
25
- });
26
-
27
- export default router;
1
+ import express from 'express';
2
+
3
+ import sessionManager from '../sessionManager.js';
4
+ import { sessionNamesDb } from '../database/db.js';
5
+
6
+ const router = express.Router();
7
+
8
+ // Delete a Qwen Code session — mirrors the Gemini/Codex routes so the UI's
9
+ // unified delete flow works identically regardless of the active provider.
10
+ router.delete('/sessions/:sessionId', async (req, res) => {
11
+ try {
12
+ const { sessionId } = req.params;
13
+
14
+ if (!sessionId || typeof sessionId !== 'string' || !/^[a-zA-Z0-9_.-]{1,100}$/.test(sessionId)) {
15
+ return res.status(400).json({ success: false, error: 'Invalid session ID format' });
16
+ }
17
+
18
+ await sessionManager.deleteSession(sessionId);
19
+ sessionNamesDb.deleteName(sessionId, 'qwen');
20
+ res.json({ success: true });
21
+ } catch (error) {
22
+ console.error(`Error deleting Qwen session ${req.params.sessionId}:`, error);
23
+ res.status(500).json({ success: false, error: error.message });
24
+ }
25
+ });
26
+
27
+ export default router;
@@ -1,286 +1,286 @@
1
- import express from 'express';
2
- import { apiKeysDb, credentialsDb, notificationPreferencesDb, pushSubscriptionsDb } from '../database/db.js';
3
- import { getPublicKey } from '../services/vapid-keys.js';
4
- import { createNotificationEvent, notifyUserIfEnabled } from '../services/notification-orchestrator.js';
5
-
6
- const router = express.Router();
7
-
8
- // ===============================
9
- // API Keys Management
10
- // ===============================
11
-
12
- // Get all API keys for the authenticated user
13
- router.get('/api-keys', async (req, res) => {
14
- try {
15
- const apiKeys = apiKeysDb.getApiKeys(req.user.id);
16
- // Don't send the full API key in the list for security
17
- const sanitizedKeys = apiKeys.map(key => ({
18
- ...key,
19
- api_key: key.api_key.substring(0, 10) + '...'
20
- }));
21
- res.json({ apiKeys: sanitizedKeys });
22
- } catch (error) {
23
- console.error('Error fetching API keys:', error);
24
- res.status(500).json({ error: 'Failed to fetch API keys' });
25
- }
26
- });
27
-
28
- // Create a new API key
29
- router.post('/api-keys', async (req, res) => {
30
- try {
31
- const { keyName } = req.body;
32
-
33
- if (!keyName || !keyName.trim()) {
34
- return res.status(400).json({ error: 'Key name is required' });
35
- }
36
-
37
- const result = apiKeysDb.createApiKey(req.user.id, keyName.trim());
38
- res.json({
39
- success: true,
40
- apiKey: result
41
- });
42
- } catch (error) {
43
- console.error('Error creating API key:', error);
44
- res.status(500).json({ error: 'Failed to create API key' });
45
- }
46
- });
47
-
48
- // Delete an API key
49
- router.delete('/api-keys/:keyId', async (req, res) => {
50
- try {
51
- const { keyId } = req.params;
52
- const success = apiKeysDb.deleteApiKey(req.user.id, parseInt(keyId));
53
-
54
- if (success) {
55
- res.json({ success: true });
56
- } else {
57
- res.status(404).json({ error: 'API key not found' });
58
- }
59
- } catch (error) {
60
- console.error('Error deleting API key:', error);
61
- res.status(500).json({ error: 'Failed to delete API key' });
62
- }
63
- });
64
-
65
- // Toggle API key active status
66
- router.patch('/api-keys/:keyId/toggle', async (req, res) => {
67
- try {
68
- const { keyId } = req.params;
69
- const { isActive } = req.body;
70
-
71
- if (typeof isActive !== 'boolean') {
72
- return res.status(400).json({ error: 'isActive must be a boolean' });
73
- }
74
-
75
- const success = apiKeysDb.toggleApiKey(req.user.id, parseInt(keyId), isActive);
76
-
77
- if (success) {
78
- res.json({ success: true });
79
- } else {
80
- res.status(404).json({ error: 'API key not found' });
81
- }
82
- } catch (error) {
83
- console.error('Error toggling API key:', error);
84
- res.status(500).json({ error: 'Failed to toggle API key' });
85
- }
86
- });
87
-
88
- // ===============================
89
- // Generic Credentials Management
90
- // ===============================
91
-
92
- // Get all credentials for the authenticated user (optionally filtered by type)
93
- router.get('/credentials', async (req, res) => {
94
- try {
95
- const { type } = req.query;
96
- const credentials = credentialsDb.getCredentials(req.user.id, type || null);
97
- // Don't send the actual credential values for security
98
- res.json({ credentials });
99
- } catch (error) {
100
- console.error('Error fetching credentials:', error);
101
- res.status(500).json({ error: 'Failed to fetch credentials' });
102
- }
103
- });
104
-
105
- // Create a new credential
106
- router.post('/credentials', async (req, res) => {
107
- try {
108
- const { credentialName, credentialType, credentialValue, description } = req.body;
109
-
110
- if (!credentialName || !credentialName.trim()) {
111
- return res.status(400).json({ error: 'Credential name is required' });
112
- }
113
-
114
- if (!credentialType || !credentialType.trim()) {
115
- return res.status(400).json({ error: 'Credential type is required' });
116
- }
117
-
118
- if (!credentialValue || !credentialValue.trim()) {
119
- return res.status(400).json({ error: 'Credential value is required' });
120
- }
121
-
122
- const result = credentialsDb.createCredential(
123
- req.user.id,
124
- credentialName.trim(),
125
- credentialType.trim(),
126
- credentialValue.trim(),
127
- description?.trim() || null
128
- );
129
-
130
- res.json({
131
- success: true,
132
- credential: result
133
- });
134
- } catch (error) {
135
- console.error('Error creating credential:', error);
136
- res.status(500).json({ error: 'Failed to create credential' });
137
- }
138
- });
139
-
140
- // Delete a credential
141
- router.delete('/credentials/:credentialId', async (req, res) => {
142
- try {
143
- const { credentialId } = req.params;
144
- const success = credentialsDb.deleteCredential(req.user.id, parseInt(credentialId));
145
-
146
- if (success) {
147
- res.json({ success: true });
148
- } else {
149
- res.status(404).json({ error: 'Credential not found' });
150
- }
151
- } catch (error) {
152
- console.error('Error deleting credential:', error);
153
- res.status(500).json({ error: 'Failed to delete credential' });
154
- }
155
- });
156
-
157
- // Toggle credential active status
158
- router.patch('/credentials/:credentialId/toggle', async (req, res) => {
159
- try {
160
- const { credentialId } = req.params;
161
- const { isActive } = req.body;
162
-
163
- if (typeof isActive !== 'boolean') {
164
- return res.status(400).json({ error: 'isActive must be a boolean' });
165
- }
166
-
167
- const success = credentialsDb.toggleCredential(req.user.id, parseInt(credentialId), isActive);
168
-
169
- if (success) {
170
- res.json({ success: true });
171
- } else {
172
- res.status(404).json({ error: 'Credential not found' });
173
- }
174
- } catch (error) {
175
- console.error('Error toggling credential:', error);
176
- res.status(500).json({ error: 'Failed to toggle credential' });
177
- }
178
- });
179
-
180
- // ===============================
181
- // Notification Preferences
182
- // ===============================
183
-
184
- router.get('/notification-preferences', async (req, res) => {
185
- try {
186
- const preferences = notificationPreferencesDb.getPreferences(req.user.id);
187
- res.json({ success: true, preferences });
188
- } catch (error) {
189
- console.error('Error fetching notification preferences:', error);
190
- res.status(500).json({ error: 'Failed to fetch notification preferences' });
191
- }
192
- });
193
-
194
- router.put('/notification-preferences', async (req, res) => {
195
- try {
196
- const preferences = notificationPreferencesDb.updatePreferences(req.user.id, req.body || {});
197
- res.json({ success: true, preferences });
198
- } catch (error) {
199
- console.error('Error saving notification preferences:', error);
200
- res.status(500).json({ error: 'Failed to save notification preferences' });
201
- }
202
- });
203
-
204
- // ===============================
205
- // Push Subscription Management
206
- // ===============================
207
-
208
- router.get('/push/vapid-public-key', async (req, res) => {
209
- try {
210
- const publicKey = getPublicKey();
211
- res.json({ publicKey });
212
- } catch (error) {
213
- console.error('Error fetching VAPID public key:', error);
214
- res.status(500).json({ error: 'Failed to fetch VAPID public key' });
215
- }
216
- });
217
-
218
- router.post('/push/subscribe', async (req, res) => {
219
- try {
220
- const { endpoint, keys } = req.body;
221
- if (!endpoint || !keys?.p256dh || !keys?.auth) {
222
- return res.status(400).json({ error: 'Missing subscription fields' });
223
- }
224
- pushSubscriptionsDb.saveSubscription(req.user.id, endpoint, keys.p256dh, keys.auth);
225
-
226
- // Enable webPush in preferences so the confirmation goes through the full pipeline
227
- const currentPrefs = notificationPreferencesDb.getPreferences(req.user.id);
228
- if (!currentPrefs?.channels?.webPush) {
229
- notificationPreferencesDb.updatePreferences(req.user.id, {
230
- ...currentPrefs,
231
- channels: { ...currentPrefs?.channels, webPush: true },
232
- });
233
- }
234
-
235
- res.json({ success: true });
236
-
237
- // Send a confirmation push through the full notification pipeline
238
- const event = createNotificationEvent({
239
- provider: 'system',
240
- kind: 'info',
241
- code: 'push.enabled',
242
- meta: { message: 'Push notifications are now enabled!' },
243
- severity: 'info'
244
- });
245
- notifyUserIfEnabled({ userId: req.user.id, event });
246
- } catch (error) {
247
- console.error('Error saving push subscription:', error);
248
- res.status(500).json({ error: 'Failed to save push subscription' });
249
- }
250
- });
251
-
252
- router.post('/push/unsubscribe', async (req, res) => {
253
- try {
254
- const { endpoint } = req.body;
255
- if (!endpoint) {
256
- return res.status(400).json({ error: 'Missing endpoint' });
257
- }
258
- pushSubscriptionsDb.removeSubscription(endpoint);
259
-
260
- // Disable webPush in preferences to match subscription state
261
- const currentPrefs = notificationPreferencesDb.getPreferences(req.user.id);
262
- if (currentPrefs?.channels?.webPush) {
263
- notificationPreferencesDb.updatePreferences(req.user.id, {
264
- ...currentPrefs,
265
- channels: { ...currentPrefs.channels, webPush: false },
266
- });
267
- }
268
-
269
- res.json({ success: true });
270
- } catch (error) {
271
- console.error('Error removing push subscription:', error);
272
- res.status(500).json({ error: 'Failed to remove push subscription' });
273
- }
274
- });
275
-
276
- // Host OS for UI (e.g. hide Cursor agent when the backend runs on Windows).
277
- router.get('/server-env', async (req, res) => {
278
- try {
279
- res.json({ platform: process.platform });
280
- } catch (error) {
281
- console.error('Error reading server environment:', error);
282
- res.status(500).json({ error: 'Failed to read server environment' });
283
- }
284
- });
285
-
286
- export default router;
1
+ import express from 'express';
2
+ import { apiKeysDb, credentialsDb, notificationPreferencesDb, pushSubscriptionsDb } from '../database/db.js';
3
+ import { getPublicKey } from '../services/vapid-keys.js';
4
+ import { createNotificationEvent, notifyUserIfEnabled } from '../services/notification-orchestrator.js';
5
+
6
+ const router = express.Router();
7
+
8
+ // ===============================
9
+ // API Keys Management
10
+ // ===============================
11
+
12
+ // Get all API keys for the authenticated user
13
+ router.get('/api-keys', async (req, res) => {
14
+ try {
15
+ const apiKeys = apiKeysDb.getApiKeys(req.user.id);
16
+ // Don't send the full API key in the list for security
17
+ const sanitizedKeys = apiKeys.map(key => ({
18
+ ...key,
19
+ api_key: key.api_key.substring(0, 10) + '...'
20
+ }));
21
+ res.json({ apiKeys: sanitizedKeys });
22
+ } catch (error) {
23
+ console.error('Error fetching API keys:', error);
24
+ res.status(500).json({ error: 'Failed to fetch API keys' });
25
+ }
26
+ });
27
+
28
+ // Create a new API key
29
+ router.post('/api-keys', async (req, res) => {
30
+ try {
31
+ const { keyName } = req.body;
32
+
33
+ if (!keyName || !keyName.trim()) {
34
+ return res.status(400).json({ error: 'Key name is required' });
35
+ }
36
+
37
+ const result = apiKeysDb.createApiKey(req.user.id, keyName.trim());
38
+ res.json({
39
+ success: true,
40
+ apiKey: result
41
+ });
42
+ } catch (error) {
43
+ console.error('Error creating API key:', error);
44
+ res.status(500).json({ error: 'Failed to create API key' });
45
+ }
46
+ });
47
+
48
+ // Delete an API key
49
+ router.delete('/api-keys/:keyId', async (req, res) => {
50
+ try {
51
+ const { keyId } = req.params;
52
+ const success = apiKeysDb.deleteApiKey(req.user.id, parseInt(keyId));
53
+
54
+ if (success) {
55
+ res.json({ success: true });
56
+ } else {
57
+ res.status(404).json({ error: 'API key not found' });
58
+ }
59
+ } catch (error) {
60
+ console.error('Error deleting API key:', error);
61
+ res.status(500).json({ error: 'Failed to delete API key' });
62
+ }
63
+ });
64
+
65
+ // Toggle API key active status
66
+ router.patch('/api-keys/:keyId/toggle', async (req, res) => {
67
+ try {
68
+ const { keyId } = req.params;
69
+ const { isActive } = req.body;
70
+
71
+ if (typeof isActive !== 'boolean') {
72
+ return res.status(400).json({ error: 'isActive must be a boolean' });
73
+ }
74
+
75
+ const success = apiKeysDb.toggleApiKey(req.user.id, parseInt(keyId), isActive);
76
+
77
+ if (success) {
78
+ res.json({ success: true });
79
+ } else {
80
+ res.status(404).json({ error: 'API key not found' });
81
+ }
82
+ } catch (error) {
83
+ console.error('Error toggling API key:', error);
84
+ res.status(500).json({ error: 'Failed to toggle API key' });
85
+ }
86
+ });
87
+
88
+ // ===============================
89
+ // Generic Credentials Management
90
+ // ===============================
91
+
92
+ // Get all credentials for the authenticated user (optionally filtered by type)
93
+ router.get('/credentials', async (req, res) => {
94
+ try {
95
+ const { type } = req.query;
96
+ const credentials = credentialsDb.getCredentials(req.user.id, type || null);
97
+ // Don't send the actual credential values for security
98
+ res.json({ credentials });
99
+ } catch (error) {
100
+ console.error('Error fetching credentials:', error);
101
+ res.status(500).json({ error: 'Failed to fetch credentials' });
102
+ }
103
+ });
104
+
105
+ // Create a new credential
106
+ router.post('/credentials', async (req, res) => {
107
+ try {
108
+ const { credentialName, credentialType, credentialValue, description } = req.body;
109
+
110
+ if (!credentialName || !credentialName.trim()) {
111
+ return res.status(400).json({ error: 'Credential name is required' });
112
+ }
113
+
114
+ if (!credentialType || !credentialType.trim()) {
115
+ return res.status(400).json({ error: 'Credential type is required' });
116
+ }
117
+
118
+ if (!credentialValue || !credentialValue.trim()) {
119
+ return res.status(400).json({ error: 'Credential value is required' });
120
+ }
121
+
122
+ const result = credentialsDb.createCredential(
123
+ req.user.id,
124
+ credentialName.trim(),
125
+ credentialType.trim(),
126
+ credentialValue.trim(),
127
+ description?.trim() || null
128
+ );
129
+
130
+ res.json({
131
+ success: true,
132
+ credential: result
133
+ });
134
+ } catch (error) {
135
+ console.error('Error creating credential:', error);
136
+ res.status(500).json({ error: 'Failed to create credential' });
137
+ }
138
+ });
139
+
140
+ // Delete a credential
141
+ router.delete('/credentials/:credentialId', async (req, res) => {
142
+ try {
143
+ const { credentialId } = req.params;
144
+ const success = credentialsDb.deleteCredential(req.user.id, parseInt(credentialId));
145
+
146
+ if (success) {
147
+ res.json({ success: true });
148
+ } else {
149
+ res.status(404).json({ error: 'Credential not found' });
150
+ }
151
+ } catch (error) {
152
+ console.error('Error deleting credential:', error);
153
+ res.status(500).json({ error: 'Failed to delete credential' });
154
+ }
155
+ });
156
+
157
+ // Toggle credential active status
158
+ router.patch('/credentials/:credentialId/toggle', async (req, res) => {
159
+ try {
160
+ const { credentialId } = req.params;
161
+ const { isActive } = req.body;
162
+
163
+ if (typeof isActive !== 'boolean') {
164
+ return res.status(400).json({ error: 'isActive must be a boolean' });
165
+ }
166
+
167
+ const success = credentialsDb.toggleCredential(req.user.id, parseInt(credentialId), isActive);
168
+
169
+ if (success) {
170
+ res.json({ success: true });
171
+ } else {
172
+ res.status(404).json({ error: 'Credential not found' });
173
+ }
174
+ } catch (error) {
175
+ console.error('Error toggling credential:', error);
176
+ res.status(500).json({ error: 'Failed to toggle credential' });
177
+ }
178
+ });
179
+
180
+ // ===============================
181
+ // Notification Preferences
182
+ // ===============================
183
+
184
+ router.get('/notification-preferences', async (req, res) => {
185
+ try {
186
+ const preferences = notificationPreferencesDb.getPreferences(req.user.id);
187
+ res.json({ success: true, preferences });
188
+ } catch (error) {
189
+ console.error('Error fetching notification preferences:', error);
190
+ res.status(500).json({ error: 'Failed to fetch notification preferences' });
191
+ }
192
+ });
193
+
194
+ router.put('/notification-preferences', async (req, res) => {
195
+ try {
196
+ const preferences = notificationPreferencesDb.updatePreferences(req.user.id, req.body || {});
197
+ res.json({ success: true, preferences });
198
+ } catch (error) {
199
+ console.error('Error saving notification preferences:', error);
200
+ res.status(500).json({ error: 'Failed to save notification preferences' });
201
+ }
202
+ });
203
+
204
+ // ===============================
205
+ // Push Subscription Management
206
+ // ===============================
207
+
208
+ router.get('/push/vapid-public-key', async (req, res) => {
209
+ try {
210
+ const publicKey = getPublicKey();
211
+ res.json({ publicKey });
212
+ } catch (error) {
213
+ console.error('Error fetching VAPID public key:', error);
214
+ res.status(500).json({ error: 'Failed to fetch VAPID public key' });
215
+ }
216
+ });
217
+
218
+ router.post('/push/subscribe', async (req, res) => {
219
+ try {
220
+ const { endpoint, keys } = req.body;
221
+ if (!endpoint || !keys?.p256dh || !keys?.auth) {
222
+ return res.status(400).json({ error: 'Missing subscription fields' });
223
+ }
224
+ pushSubscriptionsDb.saveSubscription(req.user.id, endpoint, keys.p256dh, keys.auth);
225
+
226
+ // Enable webPush in preferences so the confirmation goes through the full pipeline
227
+ const currentPrefs = notificationPreferencesDb.getPreferences(req.user.id);
228
+ if (!currentPrefs?.channels?.webPush) {
229
+ notificationPreferencesDb.updatePreferences(req.user.id, {
230
+ ...currentPrefs,
231
+ channels: { ...currentPrefs?.channels, webPush: true },
232
+ });
233
+ }
234
+
235
+ res.json({ success: true });
236
+
237
+ // Send a confirmation push through the full notification pipeline
238
+ const event = createNotificationEvent({
239
+ provider: 'system',
240
+ kind: 'info',
241
+ code: 'push.enabled',
242
+ meta: { message: 'Push notifications are now enabled!' },
243
+ severity: 'info'
244
+ });
245
+ notifyUserIfEnabled({ userId: req.user.id, event });
246
+ } catch (error) {
247
+ console.error('Error saving push subscription:', error);
248
+ res.status(500).json({ error: 'Failed to save push subscription' });
249
+ }
250
+ });
251
+
252
+ router.post('/push/unsubscribe', async (req, res) => {
253
+ try {
254
+ const { endpoint } = req.body;
255
+ if (!endpoint) {
256
+ return res.status(400).json({ error: 'Missing endpoint' });
257
+ }
258
+ pushSubscriptionsDb.removeSubscription(endpoint);
259
+
260
+ // Disable webPush in preferences to match subscription state
261
+ const currentPrefs = notificationPreferencesDb.getPreferences(req.user.id);
262
+ if (currentPrefs?.channels?.webPush) {
263
+ notificationPreferencesDb.updatePreferences(req.user.id, {
264
+ ...currentPrefs,
265
+ channels: { ...currentPrefs.channels, webPush: false },
266
+ });
267
+ }
268
+
269
+ res.json({ success: true });
270
+ } catch (error) {
271
+ console.error('Error removing push subscription:', error);
272
+ res.status(500).json({ error: 'Failed to remove push subscription' });
273
+ }
274
+ });
275
+
276
+ // Host OS for UI (e.g. hide Cursor agent when the backend runs on Windows).
277
+ router.get('/server-env', async (req, res) => {
278
+ try {
279
+ res.json({ platform: process.platform });
280
+ } catch (error) {
281
+ console.error('Error reading server environment:', error);
282
+ res.status(500).json({ error: 'Failed to read server environment' });
283
+ }
284
+ });
285
+
286
+ export default router;