@pixelbyte-software/pixcode 1.54.7 → 1.54.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (290) hide show
  1. package/CODE_OF_CONDUCT.md +41 -41
  2. package/CONTRIBUTING.md +155 -155
  3. package/LICENSE +718 -718
  4. package/README.de.md +169 -169
  5. package/README.ja.md +167 -167
  6. package/README.ko.md +167 -167
  7. package/README.md +418 -418
  8. package/README.ru.md +169 -169
  9. package/README.tr.md +298 -298
  10. package/README.zh-CN.md +167 -167
  11. package/SECURITY.md +46 -46
  12. package/dist/api-automation.html +110 -110
  13. package/dist/api-docs.html +548 -548
  14. package/dist/assets/{index-D-4VRH1a.js → index-Bm6uAqKU.js} +186 -184
  15. package/dist/assets/index-Dz1luE0u.css +32 -0
  16. package/dist/clear-cache.html +85 -85
  17. package/dist/convert-icons.md +52 -52
  18. package/dist/docs.html +308 -308
  19. package/dist/features.html +133 -133
  20. package/dist/generate-icons.js +48 -48
  21. package/dist/humans.txt +15 -15
  22. package/dist/icons/codex-white.svg +3 -3
  23. package/dist/icons/codex.svg +3 -3
  24. package/dist/icons/cursor-white.svg +11 -11
  25. package/dist/icons/qwen-logo.svg +14 -14
  26. package/dist/index.html +59 -59
  27. package/dist/landing.html +268 -268
  28. package/dist/llms-full.txt +119 -119
  29. package/dist/llms.txt +53 -53
  30. package/dist/manifest.json +60 -60
  31. package/dist/openapi.yaml +1696 -1696
  32. package/dist/orchestration.html +125 -125
  33. package/dist/robots.txt +4 -4
  34. package/dist/site.css +692 -692
  35. package/dist/sitemap.xml +51 -51
  36. package/dist/sw.js +132 -132
  37. package/dist-server/server/cli.js +100 -100
  38. package/dist-server/server/daemon/manager.js +33 -33
  39. package/dist-server/server/daemon-manager.js +64 -64
  40. package/dist-server/server/index.js +148 -14
  41. package/dist-server/server/index.js.map +1 -1
  42. package/dist-server/server/projects.js +16 -6
  43. package/dist-server/server/projects.js.map +1 -1
  44. package/dist-server/server/routes/auth.js +17 -5
  45. package/dist-server/server/routes/auth.js.map +1 -1
  46. package/dist-server/server/routes/commands.js +25 -25
  47. package/dist-server/server/routes/git.js +17 -17
  48. package/dist-server/server/routes/live-view.js +46 -46
  49. package/dist-server/server/services/public-api-manifest.js +51 -51
  50. package/package.json +224 -224
  51. package/scripts/fix-node-pty.js +67 -67
  52. package/scripts/github/create-v1.38-issues.mjs +351 -351
  53. package/scripts/github/create-vscode-workbench-issues.mjs +121 -121
  54. package/scripts/smoke/backend-resource-bounds.mjs +152 -152
  55. package/scripts/smoke/changes-panel-layout.mjs +48 -48
  56. package/scripts/smoke/chat-composer-fixed-layout.mjs +55 -55
  57. package/scripts/smoke/chat-message-timeline-order.mjs +41 -41
  58. package/scripts/smoke/chat-realtime-hydration.mjs +44 -44
  59. package/scripts/smoke/chat-session-provider-pools.mjs +35 -35
  60. package/scripts/smoke/chat-session-state.mjs +19 -19
  61. package/scripts/smoke/code-editor-theme.mjs +55 -55
  62. package/scripts/smoke/code-editor-vscode-engine.mjs +91 -91
  63. package/scripts/smoke/command-center-agent-writes.mjs +79 -79
  64. package/scripts/smoke/command-center-non-git.mjs +46 -46
  65. package/scripts/smoke/context-packet.mjs +43 -43
  66. package/scripts/smoke/control-room-ux-redesign.mjs +91 -91
  67. package/scripts/smoke/daemon-entrypoint.mjs +20 -20
  68. package/scripts/smoke/default-landing-routing.mjs +33 -33
  69. package/scripts/smoke/desktop-native-notifications.mjs +30 -30
  70. package/scripts/smoke/desktop-tray-icon.mjs +33 -33
  71. package/scripts/smoke/discord-release-workflow.mjs +24 -24
  72. package/scripts/smoke/git-install-update.mjs +255 -255
  73. package/scripts/smoke/handoff-artifact-protocol.mjs +50 -50
  74. package/scripts/smoke/live-view-diagnostics.mjs +53 -53
  75. package/scripts/smoke/live-view-environment.mjs +92 -92
  76. package/scripts/smoke/live-view-integration.mjs +450 -450
  77. package/scripts/smoke/mac-desktop-runtime.mjs +37 -37
  78. package/scripts/smoke/mobile-tunnel-guidance.mjs +29 -29
  79. package/scripts/smoke/mobile-ux.mjs +76 -76
  80. package/scripts/smoke/model-registry.mjs +36 -36
  81. package/scripts/smoke/multi-project-ui.mjs +45 -45
  82. package/scripts/smoke/multi-worker-slots.mjs +42 -42
  83. package/scripts/smoke/notification-center.mjs +87 -87
  84. package/scripts/smoke/notification-inapp-preference.mjs +23 -23
  85. package/scripts/smoke/notification-taxonomy.mjs +58 -58
  86. package/scripts/smoke/orchestration-api.mjs +172 -172
  87. package/scripts/smoke/orchestration-execution-dashboard.mjs +33 -33
  88. package/scripts/smoke/orchestration-live-run.mjs +176 -176
  89. package/scripts/smoke/orchestration-mobile-scroll.mjs +29 -29
  90. package/scripts/smoke/orchestration-model-sync.mjs +30 -30
  91. package/scripts/smoke/orchestration-permission-fallback.mjs +34 -34
  92. package/scripts/smoke/orchestration-runtime-guards.mjs +48 -48
  93. package/scripts/smoke/orchestration-user-facing-output.mjs +25 -25
  94. package/scripts/smoke/permission-policy.mjs +50 -50
  95. package/scripts/smoke/pixcode-workbench-1-48.mjs +167 -167
  96. package/scripts/smoke/provider-models-opencode-live.mjs +66 -66
  97. package/scripts/smoke/provider-rest-api.mjs +124 -124
  98. package/scripts/smoke/provider-selection-status.mjs +52 -52
  99. package/scripts/smoke/run-state-refresh.mjs +52 -52
  100. package/scripts/smoke/runtime-manager.mjs +99 -99
  101. package/scripts/smoke/shell-manual-disconnect.mjs +30 -30
  102. package/scripts/smoke/side-panel-editor-layout.mjs +34 -34
  103. package/scripts/smoke/static-root-routing.mjs +21 -21
  104. package/scripts/smoke/strict-handoff-compact.mjs +60 -60
  105. package/scripts/smoke/taskmaster-config.mjs +24 -24
  106. package/scripts/smoke/taskmaster-execution-telegram.mjs +3 -3
  107. package/scripts/smoke/taskmaster-onboarding.mjs +3 -3
  108. package/scripts/smoke/taskmaster-run-graph.mjs +3 -3
  109. package/scripts/smoke/telegram-control.mjs +331 -331
  110. package/scripts/smoke/tunnel-persistence.mjs +56 -56
  111. package/scripts/smoke/update-issue-progress.mjs +69 -69
  112. package/scripts/smoke/update-ux.mjs +55 -55
  113. package/scripts/smoke/v138-completion.mjs +132 -132
  114. package/scripts/smoke/v138-desktop-release-hardening.mjs +69 -69
  115. package/scripts/smoke/v138-diagnostics.mjs +63 -63
  116. package/scripts/smoke/v138-issue-planner.mjs +33 -33
  117. package/scripts/smoke/v143-remote-control.mjs +76 -76
  118. package/scripts/smoke/v144-production-loop.mjs +47 -47
  119. package/scripts/smoke/v145-platformization.mjs +46 -46
  120. package/scripts/smoke/v146-control-room-ui.mjs +150 -150
  121. package/scripts/smoke/version-modal-autoshow.mjs +29 -29
  122. package/scripts/smoke/vscode-workbench-layout.mjs +63 -63
  123. package/scripts/smoke/vscode-workbench-polish.mjs +461 -461
  124. package/scripts/smoke/workflow-fallback-replay.mjs +56 -56
  125. package/scripts/smoke/workflow-templates.mjs +43 -43
  126. package/scripts/smoke/workflow-trace-timeline.mjs +46 -46
  127. package/scripts/update-git-install.mjs +298 -298
  128. package/server/claude-sdk.js +927 -927
  129. package/server/cli.js +1106 -1106
  130. package/server/constants/config.js +4 -4
  131. package/server/cursor-cli.js +344 -344
  132. package/server/daemon/manager.js +563 -563
  133. package/server/daemon-manager.js +964 -964
  134. package/server/database/db.js +988 -988
  135. package/server/database/json-store.js +197 -197
  136. package/server/gemini-cli.js +550 -550
  137. package/server/gemini-response-handler.js +79 -79
  138. package/server/index.js +5659 -5529
  139. package/server/load-env.js +35 -35
  140. package/server/middleware/account-lockout.js +112 -112
  141. package/server/middleware/auth.js +277 -277
  142. package/server/middleware/rate-limiter.js +87 -87
  143. package/server/modules/orchestration/a2a/adapter-registry.ts +108 -108
  144. package/server/modules/orchestration/a2a/adapters/abstract-a2a.adapter.ts +63 -63
  145. package/server/modules/orchestration/a2a/adapters/claude-code.adapter.ts +286 -286
  146. package/server/modules/orchestration/a2a/adapters/codex.adapter.ts +244 -244
  147. package/server/modules/orchestration/a2a/adapters/cursor.adapter.ts +249 -249
  148. package/server/modules/orchestration/a2a/adapters/gemini.adapter.ts +248 -248
  149. package/server/modules/orchestration/a2a/adapters/json-event.adapter.test.ts +60 -60
  150. package/server/modules/orchestration/a2a/adapters/json-event.adapter.ts +101 -101
  151. package/server/modules/orchestration/a2a/adapters/opencode.adapter.ts +248 -248
  152. package/server/modules/orchestration/a2a/adapters/qwen.adapter.ts +248 -248
  153. package/server/modules/orchestration/a2a/agent-card.ts +55 -55
  154. package/server/modules/orchestration/a2a/auth.middleware.ts +29 -29
  155. package/server/modules/orchestration/a2a/bus.ts +46 -46
  156. package/server/modules/orchestration/a2a/routes.ts +586 -586
  157. package/server/modules/orchestration/a2a/task-dispatcher.ts +345 -345
  158. package/server/modules/orchestration/a2a/task-store.ts +178 -178
  159. package/server/modules/orchestration/a2a/types.ts +126 -126
  160. package/server/modules/orchestration/a2a/validator.ts +113 -113
  161. package/server/modules/orchestration/index.ts +99 -99
  162. package/server/modules/orchestration/preview/port-watcher.ts +112 -112
  163. package/server/modules/orchestration/preview/preview-proxy.ts +60 -60
  164. package/server/modules/orchestration/preview/types.ts +19 -19
  165. package/server/modules/orchestration/security/permission-policy.ts +401 -401
  166. package/server/modules/orchestration/tasks/orchestration-task-store.ts +41 -41
  167. package/server/modules/orchestration/tasks/orchestration-task.routes.ts +81 -81
  168. package/server/modules/orchestration/tasks/orchestration-task.service.ts +201 -201
  169. package/server/modules/orchestration/tasks/orchestration-task.types.ts +40 -40
  170. package/server/modules/orchestration/tasks/task-run-graph.ts +155 -155
  171. package/server/modules/orchestration/workflows/approval-queue.ts +106 -106
  172. package/server/modules/orchestration/workflows/built-in-workflows.ts +127 -127
  173. package/server/modules/orchestration/workflows/context-packet.ts +186 -186
  174. package/server/modules/orchestration/workflows/handoff-artifact.ts +175 -175
  175. package/server/modules/orchestration/workflows/workflow-fallback-policy.ts +161 -161
  176. package/server/modules/orchestration/workflows/workflow-replay.ts +254 -254
  177. package/server/modules/orchestration/workflows/workflow-runner.ts +2062 -2062
  178. package/server/modules/orchestration/workflows/workflow-store.ts +97 -97
  179. package/server/modules/orchestration/workflows/workflow-templates.ts +272 -272
  180. package/server/modules/orchestration/workflows/workflow-trace.ts +424 -424
  181. package/server/modules/orchestration/workflows/workflow.routes.ts +586 -586
  182. package/server/modules/orchestration/workflows/workflow.types.ts +111 -111
  183. package/server/modules/orchestration/workflows/workspace-target.ts +122 -122
  184. package/server/modules/orchestration/workspace/docker-workspace.ts +136 -136
  185. package/server/modules/orchestration/workspace/path-safety.ts +55 -55
  186. package/server/modules/orchestration/workspace/types.ts +52 -52
  187. package/server/modules/orchestration/workspace/workspace-manager.ts +102 -102
  188. package/server/modules/orchestration/workspace/worktree-workspace.ts +126 -126
  189. package/server/modules/providers/index.ts +2 -2
  190. package/server/modules/providers/list/claude/claude-auth.provider.ts +146 -146
  191. package/server/modules/providers/list/claude/claude-mcp.provider.ts +135 -135
  192. package/server/modules/providers/list/claude/claude-sessions.provider.ts +306 -306
  193. package/server/modules/providers/list/claude/claude.provider.ts +15 -15
  194. package/server/modules/providers/list/codex/codex-auth.provider.ts +117 -117
  195. package/server/modules/providers/list/codex/codex-mcp.provider.ts +135 -135
  196. package/server/modules/providers/list/codex/codex-sessions.provider.ts +319 -319
  197. package/server/modules/providers/list/codex/codex.provider.ts +15 -15
  198. package/server/modules/providers/list/cursor/cursor-auth.provider.ts +147 -147
  199. package/server/modules/providers/list/cursor/cursor-mcp.provider.ts +108 -108
  200. package/server/modules/providers/list/cursor/cursor-sessions.provider.ts +421 -421
  201. package/server/modules/providers/list/cursor/cursor.provider.ts +15 -15
  202. package/server/modules/providers/list/gemini/gemini-auth.provider.ts +173 -173
  203. package/server/modules/providers/list/gemini/gemini-mcp.provider.ts +110 -110
  204. package/server/modules/providers/list/gemini/gemini-sessions.provider.ts +227 -227
  205. package/server/modules/providers/list/gemini/gemini.provider.ts +15 -15
  206. package/server/modules/providers/list/opencode/opencode-auth.provider.ts +131 -131
  207. package/server/modules/providers/list/opencode/opencode-sessions.provider.ts +286 -286
  208. package/server/modules/providers/list/qwen/qwen-auth.provider.ts +146 -146
  209. package/server/modules/providers/list/qwen/qwen-sessions.provider.ts +265 -265
  210. package/server/modules/providers/provider.registry.ts +40 -40
  211. package/server/modules/providers/provider.routes.ts +982 -982
  212. package/server/modules/providers/services/mcp.service.ts +86 -86
  213. package/server/modules/providers/services/provider-auth.service.ts +26 -26
  214. package/server/modules/providers/services/sessions.service.ts +45 -45
  215. package/server/modules/providers/shared/base/abstract.provider.ts +20 -20
  216. package/server/modules/providers/shared/mcp/mcp.provider.ts +151 -151
  217. package/server/modules/providers/tests/mcp.test.ts +293 -293
  218. package/server/openai-codex.js +468 -468
  219. package/server/opencode-cli.js +491 -491
  220. package/server/opencode-response-handler.js +111 -111
  221. package/server/projects.js +3135 -3125
  222. package/server/qwen-code-cli.js +410 -410
  223. package/server/routes/agent.js +1451 -1451
  224. package/server/routes/auth.js +298 -286
  225. package/server/routes/codex.js +20 -20
  226. package/server/routes/commands.js +581 -581
  227. package/server/routes/cursor.js +61 -61
  228. package/server/routes/diagnostics.js +44 -44
  229. package/server/routes/gemini.js +25 -25
  230. package/server/routes/git.js +1822 -1822
  231. package/server/routes/live-view.js +434 -434
  232. package/server/routes/mcp-utils.js +13 -13
  233. package/server/routes/messages.js +97 -97
  234. package/server/routes/network.js +143 -143
  235. package/server/routes/platformization.js +231 -231
  236. package/server/routes/plugins.js +690 -690
  237. package/server/routes/production-agent-loop.js +90 -90
  238. package/server/routes/projects.js +918 -918
  239. package/server/routes/public-api.js +34 -34
  240. package/server/routes/qwen.js +27 -27
  241. package/server/routes/remote.js +56 -56
  242. package/server/routes/settings.js +321 -321
  243. package/server/routes/telegram.js +163 -163
  244. package/server/routes/user.js +125 -125
  245. package/server/routes/webhooks.js +63 -63
  246. package/server/services/control-room.js +102 -102
  247. package/server/services/diagnostics.js +165 -165
  248. package/server/services/external-access.js +403 -403
  249. package/server/services/install-jobs.js +715 -715
  250. package/server/services/live-view.js +956 -956
  251. package/server/services/managed-runtimes.js +493 -493
  252. package/server/services/model-registry.js +144 -144
  253. package/server/services/notification-orchestrator.js +365 -365
  254. package/server/services/notification-taxonomy.js +204 -204
  255. package/server/services/platformization.js +1052 -1052
  256. package/server/services/production-agent-loop.js +248 -248
  257. package/server/services/provider-cli-versions.js +149 -149
  258. package/server/services/provider-credentials.js +189 -189
  259. package/server/services/provider-models.js +396 -396
  260. package/server/services/public-api-manifest.js +181 -181
  261. package/server/services/qr-login.js +126 -126
  262. package/server/services/remote-connection.js +127 -127
  263. package/server/services/runtime-manager.js +323 -323
  264. package/server/services/startup-update.js +259 -259
  265. package/server/services/telegram/bot.js +393 -393
  266. package/server/services/telegram/control-center.js +2453 -2453
  267. package/server/services/telegram/telegram-gateway.js +314 -314
  268. package/server/services/telegram/telegram-http-client.js +201 -201
  269. package/server/services/telegram/translations.js +470 -470
  270. package/server/services/webhooks.js +216 -216
  271. package/server/sessionManager.js +225 -225
  272. package/server/setup-wizard.js +283 -283
  273. package/server/shared/interfaces.ts +54 -54
  274. package/server/shared/types.ts +172 -172
  275. package/server/shared/utils.ts +193 -193
  276. package/server/tsconfig.json +36 -36
  277. package/server/utils/colors.js +21 -21
  278. package/server/utils/commandParser.js +305 -305
  279. package/server/utils/frontmatter.js +18 -18
  280. package/server/utils/gitConfig.js +34 -34
  281. package/server/utils/plugin-loader.js +461 -461
  282. package/server/utils/plugin-process-manager.js +185 -185
  283. package/server/utils/port-access.js +227 -227
  284. package/server/utils/runtime-paths.js +37 -37
  285. package/server/utils/security-log.js +84 -84
  286. package/server/utils/url-detection.js +71 -71
  287. package/server/vite-daemon.js +79 -79
  288. package/shared/modelConstants.js +161 -161
  289. package/shared/networkHosts.js +22 -22
  290. package/dist/assets/index-DvudRU5X.css +0 -32
@@ -1,146 +1,146 @@
1
- /* eslint-disable import-x/order */
2
- import { readFile } from 'node:fs/promises';
3
- import os from 'node:os';
4
- import path from 'node:path';
5
-
6
- import spawn from 'cross-spawn';
7
-
8
- import type { IProviderAuth } from '@/shared/interfaces.js';
9
- import type { ProviderAuthStatus } from '@/shared/types.js';
10
- import { readObjectRecord, readOptionalString } from '@/shared/utils.js';
11
-
12
- // @ts-ignore — plain-JS module
13
- import { getProviderCredentials } from '@/services/provider-credentials.js';
14
-
15
- type ClaudeCredentialsStatus = {
16
- authenticated: boolean;
17
- email: string | null;
18
- method: string | null;
19
- error?: string;
20
- };
21
-
22
- export class ClaudeProviderAuth implements IProviderAuth {
23
- /**
24
- * Checks whether the Claude Code CLI is available on this host.
25
- *
26
- * NOTE: `cross-spawn.sync` does NOT throw on ENOENT — it returns a result
27
- * object with `error` populated. The try/catch alone was always returning
28
- * true and every provider appeared "installed". We now require both
29
- * `!result.error` and a numeric exit status (0 for `--version`) before
30
- * trusting the install.
31
- */
32
- private checkInstalled(): boolean {
33
- const cliPath = process.env.CLAUDE_CLI_PATH || 'claude';
34
- try {
35
- const result = spawn.sync(cliPath, ['--version'], { stdio: 'ignore', timeout: 5000 });
36
- return !result.error && result.status === 0;
37
- } catch {
38
- return false;
39
- }
40
- }
41
-
42
- /**
43
- * Returns Claude installation and credential status using Claude Code's auth priority.
44
- */
45
- async getStatus(): Promise<ProviderAuthStatus> {
46
- const installed = this.checkInstalled();
47
-
48
- if (!installed) {
49
- return {
50
- installed,
51
- provider: 'claude',
52
- authenticated: false,
53
- email: null,
54
- method: null,
55
- error: 'Claude Code CLI is not installed',
56
- };
57
- }
58
-
59
- const credentials = await this.checkCredentials();
60
-
61
- return {
62
- installed,
63
- provider: 'claude',
64
- authenticated: credentials.authenticated,
65
- email: credentials.authenticated ? credentials.email || 'Authenticated' : credentials.email,
66
- method: credentials.method,
67
- error: credentials.authenticated ? undefined : credentials.error || 'Not authenticated',
68
- };
69
- }
70
-
71
- /**
72
- * Reads Claude settings env values that the CLI can use even when the server process env is empty.
73
- */
74
- private async loadSettingsEnv(): Promise<Record<string, unknown>> {
75
- try {
76
- const settingsPath = path.join(os.homedir(), '.claude', 'settings.json');
77
- const content = await readFile(settingsPath, 'utf8');
78
- const settings = readObjectRecord(JSON.parse(content));
79
- return readObjectRecord(settings?.env) ?? {};
80
- } catch {
81
- return {};
82
- }
83
- }
84
-
85
- /**
86
- * Checks Claude credentials in the same priority order used by Claude Code.
87
- */
88
- private async checkCredentials(): Promise<ClaudeCredentialsStatus> {
89
- // Pixcode-UI-saved credentials win. Users who paste a key into our
90
- // Settings > Agents form expect authenticated status immediately,
91
- // regardless of env var timing.
92
- try {
93
- const creds = await getProviderCredentials('claude');
94
- if (creds?.apiKey) {
95
- const label = creds.baseUrl
96
- ? `API Key · ${(() => { try { return new URL(creds.baseUrl).host; } catch { return creds.baseUrl; } })()}`
97
- : 'API Key Auth';
98
- return { authenticated: true, email: label, method: 'pixcode_store' };
99
- }
100
- } catch { /* fall through */ }
101
-
102
- if (process.env.ANTHROPIC_API_KEY?.trim()) {
103
- return { authenticated: true, email: 'API Key Auth', method: 'api_key' };
104
- }
105
-
106
- const settingsEnv = await this.loadSettingsEnv();
107
- if (readOptionalString(settingsEnv.ANTHROPIC_API_KEY)) {
108
- return { authenticated: true, email: 'API Key Auth', method: 'api_key' };
109
- }
110
-
111
- if (readOptionalString(settingsEnv.ANTHROPIC_AUTH_TOKEN)) {
112
- return { authenticated: true, email: 'Configured via settings.json', method: 'api_key' };
113
- }
114
-
115
- try {
116
- const credPath = path.join(os.homedir(), '.claude', '.credentials.json');
117
- const content = await readFile(credPath, 'utf8');
118
- const creds = readObjectRecord(JSON.parse(content)) ?? {};
119
- const oauth = readObjectRecord(creds.claudeAiOauth);
120
- const accessToken = readOptionalString(oauth?.accessToken);
121
-
122
- if (accessToken) {
123
- const expiresAt = typeof oauth?.expiresAt === 'number' ? oauth.expiresAt : undefined;
124
- const email = readOptionalString(creds.email) ?? readOptionalString(creds.user) ?? null;
125
- if (!expiresAt || Date.now() < expiresAt) {
126
- return {
127
- authenticated: true,
128
- email,
129
- method: 'credentials_file',
130
- };
131
- }
132
-
133
- return {
134
- authenticated: false,
135
- email,
136
- method: 'credentials_file',
137
- error: 'OAuth token has expired. Please re-authenticate with claude login',
138
- };
139
- }
140
-
141
- return { authenticated: false, email: null, method: null };
142
- } catch {
143
- return { authenticated: false, email: null, method: null };
144
- }
145
- }
146
- }
1
+ /* eslint-disable import-x/order */
2
+ import { readFile } from 'node:fs/promises';
3
+ import os from 'node:os';
4
+ import path from 'node:path';
5
+
6
+ import spawn from 'cross-spawn';
7
+
8
+ import type { IProviderAuth } from '@/shared/interfaces.js';
9
+ import type { ProviderAuthStatus } from '@/shared/types.js';
10
+ import { readObjectRecord, readOptionalString } from '@/shared/utils.js';
11
+
12
+ // @ts-ignore — plain-JS module
13
+ import { getProviderCredentials } from '@/services/provider-credentials.js';
14
+
15
+ type ClaudeCredentialsStatus = {
16
+ authenticated: boolean;
17
+ email: string | null;
18
+ method: string | null;
19
+ error?: string;
20
+ };
21
+
22
+ export class ClaudeProviderAuth implements IProviderAuth {
23
+ /**
24
+ * Checks whether the Claude Code CLI is available on this host.
25
+ *
26
+ * NOTE: `cross-spawn.sync` does NOT throw on ENOENT — it returns a result
27
+ * object with `error` populated. The try/catch alone was always returning
28
+ * true and every provider appeared "installed". We now require both
29
+ * `!result.error` and a numeric exit status (0 for `--version`) before
30
+ * trusting the install.
31
+ */
32
+ private checkInstalled(): boolean {
33
+ const cliPath = process.env.CLAUDE_CLI_PATH || 'claude';
34
+ try {
35
+ const result = spawn.sync(cliPath, ['--version'], { stdio: 'ignore', timeout: 5000 });
36
+ return !result.error && result.status === 0;
37
+ } catch {
38
+ return false;
39
+ }
40
+ }
41
+
42
+ /**
43
+ * Returns Claude installation and credential status using Claude Code's auth priority.
44
+ */
45
+ async getStatus(): Promise<ProviderAuthStatus> {
46
+ const installed = this.checkInstalled();
47
+
48
+ if (!installed) {
49
+ return {
50
+ installed,
51
+ provider: 'claude',
52
+ authenticated: false,
53
+ email: null,
54
+ method: null,
55
+ error: 'Claude Code CLI is not installed',
56
+ };
57
+ }
58
+
59
+ const credentials = await this.checkCredentials();
60
+
61
+ return {
62
+ installed,
63
+ provider: 'claude',
64
+ authenticated: credentials.authenticated,
65
+ email: credentials.authenticated ? credentials.email || 'Authenticated' : credentials.email,
66
+ method: credentials.method,
67
+ error: credentials.authenticated ? undefined : credentials.error || 'Not authenticated',
68
+ };
69
+ }
70
+
71
+ /**
72
+ * Reads Claude settings env values that the CLI can use even when the server process env is empty.
73
+ */
74
+ private async loadSettingsEnv(): Promise<Record<string, unknown>> {
75
+ try {
76
+ const settingsPath = path.join(os.homedir(), '.claude', 'settings.json');
77
+ const content = await readFile(settingsPath, 'utf8');
78
+ const settings = readObjectRecord(JSON.parse(content));
79
+ return readObjectRecord(settings?.env) ?? {};
80
+ } catch {
81
+ return {};
82
+ }
83
+ }
84
+
85
+ /**
86
+ * Checks Claude credentials in the same priority order used by Claude Code.
87
+ */
88
+ private async checkCredentials(): Promise<ClaudeCredentialsStatus> {
89
+ // Pixcode-UI-saved credentials win. Users who paste a key into our
90
+ // Settings > Agents form expect authenticated status immediately,
91
+ // regardless of env var timing.
92
+ try {
93
+ const creds = await getProviderCredentials('claude');
94
+ if (creds?.apiKey) {
95
+ const label = creds.baseUrl
96
+ ? `API Key · ${(() => { try { return new URL(creds.baseUrl).host; } catch { return creds.baseUrl; } })()}`
97
+ : 'API Key Auth';
98
+ return { authenticated: true, email: label, method: 'pixcode_store' };
99
+ }
100
+ } catch { /* fall through */ }
101
+
102
+ if (process.env.ANTHROPIC_API_KEY?.trim()) {
103
+ return { authenticated: true, email: 'API Key Auth', method: 'api_key' };
104
+ }
105
+
106
+ const settingsEnv = await this.loadSettingsEnv();
107
+ if (readOptionalString(settingsEnv.ANTHROPIC_API_KEY)) {
108
+ return { authenticated: true, email: 'API Key Auth', method: 'api_key' };
109
+ }
110
+
111
+ if (readOptionalString(settingsEnv.ANTHROPIC_AUTH_TOKEN)) {
112
+ return { authenticated: true, email: 'Configured via settings.json', method: 'api_key' };
113
+ }
114
+
115
+ try {
116
+ const credPath = path.join(os.homedir(), '.claude', '.credentials.json');
117
+ const content = await readFile(credPath, 'utf8');
118
+ const creds = readObjectRecord(JSON.parse(content)) ?? {};
119
+ const oauth = readObjectRecord(creds.claudeAiOauth);
120
+ const accessToken = readOptionalString(oauth?.accessToken);
121
+
122
+ if (accessToken) {
123
+ const expiresAt = typeof oauth?.expiresAt === 'number' ? oauth.expiresAt : undefined;
124
+ const email = readOptionalString(creds.email) ?? readOptionalString(creds.user) ?? null;
125
+ if (!expiresAt || Date.now() < expiresAt) {
126
+ return {
127
+ authenticated: true,
128
+ email,
129
+ method: 'credentials_file',
130
+ };
131
+ }
132
+
133
+ return {
134
+ authenticated: false,
135
+ email,
136
+ method: 'credentials_file',
137
+ error: 'OAuth token has expired. Please re-authenticate with claude login',
138
+ };
139
+ }
140
+
141
+ return { authenticated: false, email: null, method: null };
142
+ } catch {
143
+ return { authenticated: false, email: null, method: null };
144
+ }
145
+ }
146
+ }
@@ -1,135 +1,135 @@
1
- import os from 'node:os';
2
- import path from 'node:path';
3
-
4
- import { McpProvider } from '@/modules/providers/shared/mcp/mcp.provider.js';
5
- import type { McpScope, ProviderMcpServer, UpsertProviderMcpServerInput } from '@/shared/types.js';
6
- import {
7
- AppError,
8
- readJsonConfig,
9
- readObjectRecord,
10
- readOptionalString,
11
- readStringArray,
12
- readStringRecord,
13
- writeJsonConfig,
14
- } from '@/shared/utils.js';
15
-
16
- export class ClaudeMcpProvider extends McpProvider {
17
- constructor() {
18
- super('claude', ['user', 'local', 'project'], ['stdio', 'http', 'sse']);
19
- }
20
-
21
- protected async readScopedServers(scope: McpScope, workspacePath: string): Promise<Record<string, unknown>> {
22
- if (scope === 'project') {
23
- const filePath = path.join(workspacePath, '.mcp.json');
24
- const config = await readJsonConfig(filePath);
25
- return readObjectRecord(config.mcpServers) ?? {};
26
- }
27
-
28
- const filePath = path.join(os.homedir(), '.claude.json');
29
- const config = await readJsonConfig(filePath);
30
- if (scope === 'user') {
31
- return readObjectRecord(config.mcpServers) ?? {};
32
- }
33
-
34
- const projects = readObjectRecord(config.projects) ?? {};
35
- const projectConfig = readObjectRecord(projects[workspacePath]) ?? {};
36
- return readObjectRecord(projectConfig.mcpServers) ?? {};
37
- }
38
-
39
- protected async writeScopedServers(
40
- scope: McpScope,
41
- workspacePath: string,
42
- servers: Record<string, unknown>,
43
- ): Promise<void> {
44
- if (scope === 'project') {
45
- const filePath = path.join(workspacePath, '.mcp.json');
46
- const config = await readJsonConfig(filePath);
47
- config.mcpServers = servers;
48
- await writeJsonConfig(filePath, config);
49
- return;
50
- }
51
-
52
- const filePath = path.join(os.homedir(), '.claude.json');
53
- const config = await readJsonConfig(filePath);
54
- if (scope === 'user') {
55
- config.mcpServers = servers;
56
- await writeJsonConfig(filePath, config);
57
- return;
58
- }
59
-
60
- const projects = readObjectRecord(config.projects) ?? {};
61
- const projectConfig = readObjectRecord(projects[workspacePath]) ?? {};
62
- projectConfig.mcpServers = servers;
63
- projects[workspacePath] = projectConfig;
64
- config.projects = projects;
65
- await writeJsonConfig(filePath, config);
66
- }
67
-
68
- protected buildServerConfig(input: UpsertProviderMcpServerInput): Record<string, unknown> {
69
- if (input.transport === 'stdio') {
70
- if (!input.command?.trim()) {
71
- throw new AppError('command is required for stdio MCP servers.', {
72
- code: 'MCP_COMMAND_REQUIRED',
73
- statusCode: 400,
74
- });
75
- }
76
-
77
- return {
78
- type: 'stdio',
79
- command: input.command,
80
- args: input.args ?? [],
81
- env: input.env ?? {},
82
- };
83
- }
84
-
85
- if (!input.url?.trim()) {
86
- throw new AppError('url is required for http/sse MCP servers.', {
87
- code: 'MCP_URL_REQUIRED',
88
- statusCode: 400,
89
- });
90
- }
91
-
92
- return {
93
- type: input.transport,
94
- url: input.url,
95
- headers: input.headers ?? {},
96
- };
97
- }
98
-
99
- protected normalizeServerConfig(
100
- scope: McpScope,
101
- name: string,
102
- rawConfig: unknown,
103
- ): ProviderMcpServer | null {
104
- if (!rawConfig || typeof rawConfig !== 'object') {
105
- return null;
106
- }
107
-
108
- const config = rawConfig as Record<string, unknown>;
109
- if (typeof config.command === 'string') {
110
- return {
111
- provider: 'claude',
112
- name,
113
- scope,
114
- transport: 'stdio',
115
- command: config.command,
116
- args: readStringArray(config.args),
117
- env: readStringRecord(config.env),
118
- };
119
- }
120
-
121
- if (typeof config.url === 'string') {
122
- const transport = readOptionalString(config.type) === 'sse' ? 'sse' : 'http';
123
- return {
124
- provider: 'claude',
125
- name,
126
- scope,
127
- transport,
128
- url: config.url,
129
- headers: readStringRecord(config.headers),
130
- };
131
- }
132
-
133
- return null;
134
- }
135
- }
1
+ import os from 'node:os';
2
+ import path from 'node:path';
3
+
4
+ import { McpProvider } from '@/modules/providers/shared/mcp/mcp.provider.js';
5
+ import type { McpScope, ProviderMcpServer, UpsertProviderMcpServerInput } from '@/shared/types.js';
6
+ import {
7
+ AppError,
8
+ readJsonConfig,
9
+ readObjectRecord,
10
+ readOptionalString,
11
+ readStringArray,
12
+ readStringRecord,
13
+ writeJsonConfig,
14
+ } from '@/shared/utils.js';
15
+
16
+ export class ClaudeMcpProvider extends McpProvider {
17
+ constructor() {
18
+ super('claude', ['user', 'local', 'project'], ['stdio', 'http', 'sse']);
19
+ }
20
+
21
+ protected async readScopedServers(scope: McpScope, workspacePath: string): Promise<Record<string, unknown>> {
22
+ if (scope === 'project') {
23
+ const filePath = path.join(workspacePath, '.mcp.json');
24
+ const config = await readJsonConfig(filePath);
25
+ return readObjectRecord(config.mcpServers) ?? {};
26
+ }
27
+
28
+ const filePath = path.join(os.homedir(), '.claude.json');
29
+ const config = await readJsonConfig(filePath);
30
+ if (scope === 'user') {
31
+ return readObjectRecord(config.mcpServers) ?? {};
32
+ }
33
+
34
+ const projects = readObjectRecord(config.projects) ?? {};
35
+ const projectConfig = readObjectRecord(projects[workspacePath]) ?? {};
36
+ return readObjectRecord(projectConfig.mcpServers) ?? {};
37
+ }
38
+
39
+ protected async writeScopedServers(
40
+ scope: McpScope,
41
+ workspacePath: string,
42
+ servers: Record<string, unknown>,
43
+ ): Promise<void> {
44
+ if (scope === 'project') {
45
+ const filePath = path.join(workspacePath, '.mcp.json');
46
+ const config = await readJsonConfig(filePath);
47
+ config.mcpServers = servers;
48
+ await writeJsonConfig(filePath, config);
49
+ return;
50
+ }
51
+
52
+ const filePath = path.join(os.homedir(), '.claude.json');
53
+ const config = await readJsonConfig(filePath);
54
+ if (scope === 'user') {
55
+ config.mcpServers = servers;
56
+ await writeJsonConfig(filePath, config);
57
+ return;
58
+ }
59
+
60
+ const projects = readObjectRecord(config.projects) ?? {};
61
+ const projectConfig = readObjectRecord(projects[workspacePath]) ?? {};
62
+ projectConfig.mcpServers = servers;
63
+ projects[workspacePath] = projectConfig;
64
+ config.projects = projects;
65
+ await writeJsonConfig(filePath, config);
66
+ }
67
+
68
+ protected buildServerConfig(input: UpsertProviderMcpServerInput): Record<string, unknown> {
69
+ if (input.transport === 'stdio') {
70
+ if (!input.command?.trim()) {
71
+ throw new AppError('command is required for stdio MCP servers.', {
72
+ code: 'MCP_COMMAND_REQUIRED',
73
+ statusCode: 400,
74
+ });
75
+ }
76
+
77
+ return {
78
+ type: 'stdio',
79
+ command: input.command,
80
+ args: input.args ?? [],
81
+ env: input.env ?? {},
82
+ };
83
+ }
84
+
85
+ if (!input.url?.trim()) {
86
+ throw new AppError('url is required for http/sse MCP servers.', {
87
+ code: 'MCP_URL_REQUIRED',
88
+ statusCode: 400,
89
+ });
90
+ }
91
+
92
+ return {
93
+ type: input.transport,
94
+ url: input.url,
95
+ headers: input.headers ?? {},
96
+ };
97
+ }
98
+
99
+ protected normalizeServerConfig(
100
+ scope: McpScope,
101
+ name: string,
102
+ rawConfig: unknown,
103
+ ): ProviderMcpServer | null {
104
+ if (!rawConfig || typeof rawConfig !== 'object') {
105
+ return null;
106
+ }
107
+
108
+ const config = rawConfig as Record<string, unknown>;
109
+ if (typeof config.command === 'string') {
110
+ return {
111
+ provider: 'claude',
112
+ name,
113
+ scope,
114
+ transport: 'stdio',
115
+ command: config.command,
116
+ args: readStringArray(config.args),
117
+ env: readStringRecord(config.env),
118
+ };
119
+ }
120
+
121
+ if (typeof config.url === 'string') {
122
+ const transport = readOptionalString(config.type) === 'sse' ? 'sse' : 'http';
123
+ return {
124
+ provider: 'claude',
125
+ name,
126
+ scope,
127
+ transport,
128
+ url: config.url,
129
+ headers: readStringRecord(config.headers),
130
+ };
131
+ }
132
+
133
+ return null;
134
+ }
135
+ }