@pixelbyte-software/pixcode 1.54.9 → 1.54.11

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (288) hide show
  1. package/CODE_OF_CONDUCT.md +41 -41
  2. package/CONTRIBUTING.md +156 -156
  3. package/LICENSE +21 -718
  4. package/README.de.md +169 -169
  5. package/README.ja.md +167 -167
  6. package/README.ko.md +167 -167
  7. package/README.md +435 -418
  8. package/README.ru.md +169 -169
  9. package/README.tr.md +298 -298
  10. package/README.zh-CN.md +167 -167
  11. package/SECURITY.md +46 -46
  12. package/dist/api-automation.html +110 -110
  13. package/dist/api-docs.html +548 -548
  14. package/dist/assets/{index-Bm6uAqKU.js → index-Bcqs_1vc.js} +114 -114
  15. package/dist/clear-cache.html +85 -85
  16. package/dist/convert-icons.md +52 -52
  17. package/dist/docs.html +308 -308
  18. package/dist/features.html +133 -133
  19. package/dist/generate-icons.js +48 -48
  20. package/dist/humans.txt +15 -15
  21. package/dist/icons/codex-white.svg +3 -3
  22. package/dist/icons/codex.svg +3 -3
  23. package/dist/icons/cursor-white.svg +11 -11
  24. package/dist/icons/qwen-logo.svg +14 -14
  25. package/dist/index.html +58 -58
  26. package/dist/landing.html +268 -268
  27. package/dist/llms-full.txt +119 -119
  28. package/dist/llms.txt +53 -53
  29. package/dist/manifest.json +60 -60
  30. package/dist/openapi.yaml +1696 -1696
  31. package/dist/orchestration.html +125 -125
  32. package/dist/robots.txt +4 -4
  33. package/dist/site.css +692 -692
  34. package/dist/sitemap.xml +51 -51
  35. package/dist/sw.js +132 -132
  36. package/dist-server/server/cli.js +100 -100
  37. package/dist-server/server/daemon/manager.js +33 -33
  38. package/dist-server/server/daemon-manager.js +64 -64
  39. package/dist-server/server/index.js +13 -0
  40. package/dist-server/server/index.js.map +1 -1
  41. package/dist-server/server/routes/agent.js +10 -1
  42. package/dist-server/server/routes/agent.js.map +1 -1
  43. package/dist-server/server/routes/commands.js +25 -25
  44. package/dist-server/server/routes/git.js +17 -17
  45. package/dist-server/server/routes/live-view.js +46 -46
  46. package/dist-server/server/services/public-api-manifest.js +51 -51
  47. package/dist-server/server/sessionManager.js +5 -5
  48. package/dist-server/server/sessionManager.js.map +1 -1
  49. package/package.json +224 -224
  50. package/scripts/fix-node-pty.js +67 -67
  51. package/scripts/github/create-v1.38-issues.mjs +351 -351
  52. package/scripts/github/create-vscode-workbench-issues.mjs +121 -121
  53. package/scripts/smoke/backend-resource-bounds.mjs +152 -152
  54. package/scripts/smoke/changes-panel-layout.mjs +48 -48
  55. package/scripts/smoke/chat-composer-fixed-layout.mjs +55 -55
  56. package/scripts/smoke/chat-message-timeline-order.mjs +41 -41
  57. package/scripts/smoke/chat-realtime-hydration.mjs +44 -44
  58. package/scripts/smoke/chat-session-provider-pools.mjs +35 -35
  59. package/scripts/smoke/chat-session-state.mjs +19 -19
  60. package/scripts/smoke/code-editor-theme.mjs +55 -55
  61. package/scripts/smoke/code-editor-vscode-engine.mjs +91 -91
  62. package/scripts/smoke/command-center-agent-writes.mjs +79 -79
  63. package/scripts/smoke/command-center-non-git.mjs +46 -46
  64. package/scripts/smoke/context-packet.mjs +43 -43
  65. package/scripts/smoke/control-room-ux-redesign.mjs +91 -91
  66. package/scripts/smoke/daemon-entrypoint.mjs +20 -20
  67. package/scripts/smoke/default-landing-routing.mjs +33 -33
  68. package/scripts/smoke/desktop-native-notifications.mjs +30 -30
  69. package/scripts/smoke/desktop-tray-icon.mjs +33 -33
  70. package/scripts/smoke/discord-release-workflow.mjs +24 -24
  71. package/scripts/smoke/git-install-update.mjs +255 -255
  72. package/scripts/smoke/handoff-artifact-protocol.mjs +50 -50
  73. package/scripts/smoke/live-view-diagnostics.mjs +53 -53
  74. package/scripts/smoke/live-view-environment.mjs +92 -92
  75. package/scripts/smoke/live-view-integration.mjs +450 -450
  76. package/scripts/smoke/mac-desktop-runtime.mjs +37 -37
  77. package/scripts/smoke/mobile-tunnel-guidance.mjs +29 -29
  78. package/scripts/smoke/mobile-ux.mjs +76 -76
  79. package/scripts/smoke/model-registry.mjs +36 -36
  80. package/scripts/smoke/multi-project-ui.mjs +45 -45
  81. package/scripts/smoke/multi-worker-slots.mjs +42 -42
  82. package/scripts/smoke/notification-center.mjs +87 -87
  83. package/scripts/smoke/notification-inapp-preference.mjs +23 -23
  84. package/scripts/smoke/notification-taxonomy.mjs +58 -58
  85. package/scripts/smoke/orchestration-api.mjs +172 -172
  86. package/scripts/smoke/orchestration-execution-dashboard.mjs +33 -33
  87. package/scripts/smoke/orchestration-live-run.mjs +176 -176
  88. package/scripts/smoke/orchestration-mobile-scroll.mjs +29 -29
  89. package/scripts/smoke/orchestration-model-sync.mjs +30 -30
  90. package/scripts/smoke/orchestration-permission-fallback.mjs +34 -34
  91. package/scripts/smoke/orchestration-runtime-guards.mjs +48 -48
  92. package/scripts/smoke/orchestration-user-facing-output.mjs +25 -25
  93. package/scripts/smoke/permission-policy.mjs +50 -50
  94. package/scripts/smoke/pixcode-workbench-1-48.mjs +167 -167
  95. package/scripts/smoke/provider-models-opencode-live.mjs +66 -66
  96. package/scripts/smoke/provider-rest-api.mjs +124 -124
  97. package/scripts/smoke/provider-selection-status.mjs +52 -52
  98. package/scripts/smoke/run-state-refresh.mjs +52 -52
  99. package/scripts/smoke/runtime-manager.mjs +99 -99
  100. package/scripts/smoke/shell-manual-disconnect.mjs +30 -30
  101. package/scripts/smoke/side-panel-editor-layout.mjs +34 -34
  102. package/scripts/smoke/static-root-routing.mjs +21 -21
  103. package/scripts/smoke/strict-handoff-compact.mjs +60 -60
  104. package/scripts/smoke/taskmaster-config.mjs +24 -24
  105. package/scripts/smoke/taskmaster-execution-telegram.mjs +3 -3
  106. package/scripts/smoke/taskmaster-onboarding.mjs +3 -3
  107. package/scripts/smoke/taskmaster-run-graph.mjs +3 -3
  108. package/scripts/smoke/telegram-control.mjs +331 -331
  109. package/scripts/smoke/tunnel-persistence.mjs +56 -56
  110. package/scripts/smoke/update-issue-progress.mjs +69 -69
  111. package/scripts/smoke/update-ux.mjs +55 -55
  112. package/scripts/smoke/v138-completion.mjs +132 -132
  113. package/scripts/smoke/v138-desktop-release-hardening.mjs +69 -69
  114. package/scripts/smoke/v138-diagnostics.mjs +63 -63
  115. package/scripts/smoke/v138-issue-planner.mjs +33 -33
  116. package/scripts/smoke/v143-remote-control.mjs +76 -76
  117. package/scripts/smoke/v144-production-loop.mjs +47 -47
  118. package/scripts/smoke/v145-platformization.mjs +46 -46
  119. package/scripts/smoke/v146-control-room-ui.mjs +150 -150
  120. package/scripts/smoke/version-modal-autoshow.mjs +29 -29
  121. package/scripts/smoke/vscode-workbench-layout.mjs +63 -63
  122. package/scripts/smoke/vscode-workbench-polish.mjs +461 -461
  123. package/scripts/smoke/workflow-fallback-replay.mjs +56 -56
  124. package/scripts/smoke/workflow-templates.mjs +43 -43
  125. package/scripts/smoke/workflow-trace-timeline.mjs +46 -46
  126. package/scripts/update-git-install.mjs +298 -298
  127. package/server/claude-sdk.js +927 -927
  128. package/server/cli.js +1106 -1106
  129. package/server/constants/config.js +4 -4
  130. package/server/cursor-cli.js +344 -344
  131. package/server/daemon/manager.js +563 -563
  132. package/server/daemon-manager.js +964 -964
  133. package/server/database/db.js +988 -988
  134. package/server/database/json-store.js +197 -197
  135. package/server/gemini-cli.js +550 -550
  136. package/server/gemini-response-handler.js +79 -79
  137. package/server/index.js +5671 -5659
  138. package/server/load-env.js +35 -35
  139. package/server/middleware/account-lockout.js +112 -112
  140. package/server/middleware/auth.js +277 -277
  141. package/server/middleware/rate-limiter.js +87 -87
  142. package/server/modules/orchestration/a2a/adapter-registry.ts +108 -108
  143. package/server/modules/orchestration/a2a/adapters/abstract-a2a.adapter.ts +63 -63
  144. package/server/modules/orchestration/a2a/adapters/claude-code.adapter.ts +286 -286
  145. package/server/modules/orchestration/a2a/adapters/codex.adapter.ts +244 -244
  146. package/server/modules/orchestration/a2a/adapters/cursor.adapter.ts +249 -249
  147. package/server/modules/orchestration/a2a/adapters/gemini.adapter.ts +248 -248
  148. package/server/modules/orchestration/a2a/adapters/json-event.adapter.test.ts +60 -60
  149. package/server/modules/orchestration/a2a/adapters/json-event.adapter.ts +101 -101
  150. package/server/modules/orchestration/a2a/adapters/opencode.adapter.ts +248 -248
  151. package/server/modules/orchestration/a2a/adapters/qwen.adapter.ts +248 -248
  152. package/server/modules/orchestration/a2a/agent-card.ts +55 -55
  153. package/server/modules/orchestration/a2a/auth.middleware.ts +29 -29
  154. package/server/modules/orchestration/a2a/bus.ts +46 -46
  155. package/server/modules/orchestration/a2a/routes.ts +586 -586
  156. package/server/modules/orchestration/a2a/task-dispatcher.ts +345 -345
  157. package/server/modules/orchestration/a2a/task-store.ts +178 -178
  158. package/server/modules/orchestration/a2a/types.ts +126 -126
  159. package/server/modules/orchestration/a2a/validator.ts +113 -113
  160. package/server/modules/orchestration/index.ts +99 -99
  161. package/server/modules/orchestration/preview/port-watcher.ts +112 -112
  162. package/server/modules/orchestration/preview/preview-proxy.ts +60 -60
  163. package/server/modules/orchestration/preview/types.ts +19 -19
  164. package/server/modules/orchestration/security/permission-policy.ts +401 -401
  165. package/server/modules/orchestration/tasks/orchestration-task-store.ts +41 -41
  166. package/server/modules/orchestration/tasks/orchestration-task.routes.ts +81 -81
  167. package/server/modules/orchestration/tasks/orchestration-task.service.ts +201 -201
  168. package/server/modules/orchestration/tasks/orchestration-task.types.ts +40 -40
  169. package/server/modules/orchestration/tasks/task-run-graph.ts +155 -155
  170. package/server/modules/orchestration/workflows/approval-queue.ts +106 -106
  171. package/server/modules/orchestration/workflows/built-in-workflows.ts +127 -127
  172. package/server/modules/orchestration/workflows/context-packet.ts +186 -186
  173. package/server/modules/orchestration/workflows/handoff-artifact.ts +175 -175
  174. package/server/modules/orchestration/workflows/workflow-fallback-policy.ts +161 -161
  175. package/server/modules/orchestration/workflows/workflow-replay.ts +254 -254
  176. package/server/modules/orchestration/workflows/workflow-runner.ts +2062 -2062
  177. package/server/modules/orchestration/workflows/workflow-store.ts +97 -97
  178. package/server/modules/orchestration/workflows/workflow-templates.ts +272 -272
  179. package/server/modules/orchestration/workflows/workflow-trace.ts +424 -424
  180. package/server/modules/orchestration/workflows/workflow.routes.ts +586 -586
  181. package/server/modules/orchestration/workflows/workflow.types.ts +111 -111
  182. package/server/modules/orchestration/workflows/workspace-target.ts +122 -122
  183. package/server/modules/orchestration/workspace/docker-workspace.ts +136 -136
  184. package/server/modules/orchestration/workspace/path-safety.ts +55 -55
  185. package/server/modules/orchestration/workspace/types.ts +52 -52
  186. package/server/modules/orchestration/workspace/workspace-manager.ts +102 -102
  187. package/server/modules/orchestration/workspace/worktree-workspace.ts +126 -126
  188. package/server/modules/providers/index.ts +2 -2
  189. package/server/modules/providers/list/claude/claude-auth.provider.ts +146 -146
  190. package/server/modules/providers/list/claude/claude-mcp.provider.ts +135 -135
  191. package/server/modules/providers/list/claude/claude-sessions.provider.ts +306 -306
  192. package/server/modules/providers/list/claude/claude.provider.ts +15 -15
  193. package/server/modules/providers/list/codex/codex-auth.provider.ts +117 -117
  194. package/server/modules/providers/list/codex/codex-mcp.provider.ts +135 -135
  195. package/server/modules/providers/list/codex/codex-sessions.provider.ts +319 -319
  196. package/server/modules/providers/list/codex/codex.provider.ts +15 -15
  197. package/server/modules/providers/list/cursor/cursor-auth.provider.ts +147 -147
  198. package/server/modules/providers/list/cursor/cursor-mcp.provider.ts +108 -108
  199. package/server/modules/providers/list/cursor/cursor-sessions.provider.ts +421 -421
  200. package/server/modules/providers/list/cursor/cursor.provider.ts +15 -15
  201. package/server/modules/providers/list/gemini/gemini-auth.provider.ts +173 -173
  202. package/server/modules/providers/list/gemini/gemini-mcp.provider.ts +110 -110
  203. package/server/modules/providers/list/gemini/gemini-sessions.provider.ts +227 -227
  204. package/server/modules/providers/list/gemini/gemini.provider.ts +15 -15
  205. package/server/modules/providers/list/opencode/opencode-auth.provider.ts +131 -131
  206. package/server/modules/providers/list/opencode/opencode-sessions.provider.ts +286 -286
  207. package/server/modules/providers/list/qwen/qwen-auth.provider.ts +146 -146
  208. package/server/modules/providers/list/qwen/qwen-sessions.provider.ts +265 -265
  209. package/server/modules/providers/provider.registry.ts +40 -40
  210. package/server/modules/providers/provider.routes.ts +982 -982
  211. package/server/modules/providers/services/mcp.service.ts +86 -86
  212. package/server/modules/providers/services/provider-auth.service.ts +26 -26
  213. package/server/modules/providers/services/sessions.service.ts +45 -45
  214. package/server/modules/providers/shared/base/abstract.provider.ts +20 -20
  215. package/server/modules/providers/shared/mcp/mcp.provider.ts +151 -151
  216. package/server/modules/providers/tests/mcp.test.ts +293 -293
  217. package/server/openai-codex.js +468 -468
  218. package/server/opencode-cli.js +491 -491
  219. package/server/opencode-response-handler.js +111 -111
  220. package/server/projects.js +3135 -3135
  221. package/server/qwen-code-cli.js +410 -410
  222. package/server/routes/agent.js +1462 -1451
  223. package/server/routes/auth.js +298 -298
  224. package/server/routes/codex.js +20 -20
  225. package/server/routes/commands.js +581 -581
  226. package/server/routes/cursor.js +61 -61
  227. package/server/routes/diagnostics.js +44 -44
  228. package/server/routes/gemini.js +25 -25
  229. package/server/routes/git.js +1822 -1822
  230. package/server/routes/live-view.js +434 -434
  231. package/server/routes/mcp-utils.js +13 -13
  232. package/server/routes/messages.js +97 -97
  233. package/server/routes/network.js +143 -143
  234. package/server/routes/platformization.js +231 -231
  235. package/server/routes/plugins.js +690 -690
  236. package/server/routes/production-agent-loop.js +90 -90
  237. package/server/routes/projects.js +918 -918
  238. package/server/routes/public-api.js +34 -34
  239. package/server/routes/qwen.js +27 -27
  240. package/server/routes/remote.js +56 -56
  241. package/server/routes/settings.js +321 -321
  242. package/server/routes/telegram.js +163 -163
  243. package/server/routes/user.js +125 -125
  244. package/server/routes/webhooks.js +63 -63
  245. package/server/services/control-room.js +102 -102
  246. package/server/services/diagnostics.js +165 -165
  247. package/server/services/external-access.js +403 -403
  248. package/server/services/install-jobs.js +715 -715
  249. package/server/services/live-view.js +956 -956
  250. package/server/services/managed-runtimes.js +493 -493
  251. package/server/services/model-registry.js +144 -144
  252. package/server/services/notification-orchestrator.js +365 -365
  253. package/server/services/notification-taxonomy.js +204 -204
  254. package/server/services/platformization.js +1052 -1052
  255. package/server/services/production-agent-loop.js +248 -248
  256. package/server/services/provider-cli-versions.js +149 -149
  257. package/server/services/provider-credentials.js +189 -189
  258. package/server/services/provider-models.js +396 -396
  259. package/server/services/public-api-manifest.js +181 -181
  260. package/server/services/qr-login.js +126 -126
  261. package/server/services/remote-connection.js +127 -127
  262. package/server/services/runtime-manager.js +323 -323
  263. package/server/services/startup-update.js +259 -259
  264. package/server/services/telegram/bot.js +393 -393
  265. package/server/services/telegram/control-center.js +2453 -2453
  266. package/server/services/telegram/telegram-gateway.js +314 -314
  267. package/server/services/telegram/telegram-http-client.js +201 -201
  268. package/server/services/telegram/translations.js +470 -470
  269. package/server/services/webhooks.js +216 -216
  270. package/server/sessionManager.js +225 -225
  271. package/server/setup-wizard.js +283 -283
  272. package/server/shared/interfaces.ts +54 -54
  273. package/server/shared/types.ts +172 -172
  274. package/server/shared/utils.ts +193 -193
  275. package/server/tsconfig.json +36 -36
  276. package/server/utils/colors.js +21 -21
  277. package/server/utils/commandParser.js +305 -305
  278. package/server/utils/frontmatter.js +18 -18
  279. package/server/utils/gitConfig.js +34 -34
  280. package/server/utils/plugin-loader.js +461 -461
  281. package/server/utils/plugin-process-manager.js +185 -185
  282. package/server/utils/port-access.js +227 -227
  283. package/server/utils/runtime-paths.js +37 -37
  284. package/server/utils/security-log.js +84 -84
  285. package/server/utils/url-detection.js +71 -71
  286. package/server/vite-daemon.js +79 -79
  287. package/shared/modelConstants.js +161 -161
  288. package/shared/networkHosts.js +22 -22
@@ -1,146 +1,146 @@
1
- /* eslint-disable import-x/order */
2
- import { readFile } from 'node:fs/promises';
3
- import os from 'node:os';
4
- import path from 'node:path';
5
-
6
- import spawn from 'cross-spawn';
7
-
8
- import type { IProviderAuth } from '@/shared/interfaces.js';
9
- import type { ProviderAuthStatus } from '@/shared/types.js';
10
- import { readObjectRecord, readOptionalString } from '@/shared/utils.js';
11
-
12
- // @ts-ignore — plain-JS module
13
- import { getProviderCredentials } from '@/services/provider-credentials.js';
14
-
15
- type ClaudeCredentialsStatus = {
16
- authenticated: boolean;
17
- email: string | null;
18
- method: string | null;
19
- error?: string;
20
- };
21
-
22
- export class ClaudeProviderAuth implements IProviderAuth {
23
- /**
24
- * Checks whether the Claude Code CLI is available on this host.
25
- *
26
- * NOTE: `cross-spawn.sync` does NOT throw on ENOENT — it returns a result
27
- * object with `error` populated. The try/catch alone was always returning
28
- * true and every provider appeared "installed". We now require both
29
- * `!result.error` and a numeric exit status (0 for `--version`) before
30
- * trusting the install.
31
- */
32
- private checkInstalled(): boolean {
33
- const cliPath = process.env.CLAUDE_CLI_PATH || 'claude';
34
- try {
35
- const result = spawn.sync(cliPath, ['--version'], { stdio: 'ignore', timeout: 5000 });
36
- return !result.error && result.status === 0;
37
- } catch {
38
- return false;
39
- }
40
- }
41
-
42
- /**
43
- * Returns Claude installation and credential status using Claude Code's auth priority.
44
- */
45
- async getStatus(): Promise<ProviderAuthStatus> {
46
- const installed = this.checkInstalled();
47
-
48
- if (!installed) {
49
- return {
50
- installed,
51
- provider: 'claude',
52
- authenticated: false,
53
- email: null,
54
- method: null,
55
- error: 'Claude Code CLI is not installed',
56
- };
57
- }
58
-
59
- const credentials = await this.checkCredentials();
60
-
61
- return {
62
- installed,
63
- provider: 'claude',
64
- authenticated: credentials.authenticated,
65
- email: credentials.authenticated ? credentials.email || 'Authenticated' : credentials.email,
66
- method: credentials.method,
67
- error: credentials.authenticated ? undefined : credentials.error || 'Not authenticated',
68
- };
69
- }
70
-
71
- /**
72
- * Reads Claude settings env values that the CLI can use even when the server process env is empty.
73
- */
74
- private async loadSettingsEnv(): Promise<Record<string, unknown>> {
75
- try {
76
- const settingsPath = path.join(os.homedir(), '.claude', 'settings.json');
77
- const content = await readFile(settingsPath, 'utf8');
78
- const settings = readObjectRecord(JSON.parse(content));
79
- return readObjectRecord(settings?.env) ?? {};
80
- } catch {
81
- return {};
82
- }
83
- }
84
-
85
- /**
86
- * Checks Claude credentials in the same priority order used by Claude Code.
87
- */
88
- private async checkCredentials(): Promise<ClaudeCredentialsStatus> {
89
- // Pixcode-UI-saved credentials win. Users who paste a key into our
90
- // Settings > Agents form expect authenticated status immediately,
91
- // regardless of env var timing.
92
- try {
93
- const creds = await getProviderCredentials('claude');
94
- if (creds?.apiKey) {
95
- const label = creds.baseUrl
96
- ? `API Key · ${(() => { try { return new URL(creds.baseUrl).host; } catch { return creds.baseUrl; } })()}`
97
- : 'API Key Auth';
98
- return { authenticated: true, email: label, method: 'pixcode_store' };
99
- }
100
- } catch { /* fall through */ }
101
-
102
- if (process.env.ANTHROPIC_API_KEY?.trim()) {
103
- return { authenticated: true, email: 'API Key Auth', method: 'api_key' };
104
- }
105
-
106
- const settingsEnv = await this.loadSettingsEnv();
107
- if (readOptionalString(settingsEnv.ANTHROPIC_API_KEY)) {
108
- return { authenticated: true, email: 'API Key Auth', method: 'api_key' };
109
- }
110
-
111
- if (readOptionalString(settingsEnv.ANTHROPIC_AUTH_TOKEN)) {
112
- return { authenticated: true, email: 'Configured via settings.json', method: 'api_key' };
113
- }
114
-
115
- try {
116
- const credPath = path.join(os.homedir(), '.claude', '.credentials.json');
117
- const content = await readFile(credPath, 'utf8');
118
- const creds = readObjectRecord(JSON.parse(content)) ?? {};
119
- const oauth = readObjectRecord(creds.claudeAiOauth);
120
- const accessToken = readOptionalString(oauth?.accessToken);
121
-
122
- if (accessToken) {
123
- const expiresAt = typeof oauth?.expiresAt === 'number' ? oauth.expiresAt : undefined;
124
- const email = readOptionalString(creds.email) ?? readOptionalString(creds.user) ?? null;
125
- if (!expiresAt || Date.now() < expiresAt) {
126
- return {
127
- authenticated: true,
128
- email,
129
- method: 'credentials_file',
130
- };
131
- }
132
-
133
- return {
134
- authenticated: false,
135
- email,
136
- method: 'credentials_file',
137
- error: 'OAuth token has expired. Please re-authenticate with claude login',
138
- };
139
- }
140
-
141
- return { authenticated: false, email: null, method: null };
142
- } catch {
143
- return { authenticated: false, email: null, method: null };
144
- }
145
- }
146
- }
1
+ /* eslint-disable import-x/order */
2
+ import { readFile } from 'node:fs/promises';
3
+ import os from 'node:os';
4
+ import path from 'node:path';
5
+
6
+ import spawn from 'cross-spawn';
7
+
8
+ import type { IProviderAuth } from '@/shared/interfaces.js';
9
+ import type { ProviderAuthStatus } from '@/shared/types.js';
10
+ import { readObjectRecord, readOptionalString } from '@/shared/utils.js';
11
+
12
+ // @ts-ignore — plain-JS module
13
+ import { getProviderCredentials } from '@/services/provider-credentials.js';
14
+
15
+ type ClaudeCredentialsStatus = {
16
+ authenticated: boolean;
17
+ email: string | null;
18
+ method: string | null;
19
+ error?: string;
20
+ };
21
+
22
+ export class ClaudeProviderAuth implements IProviderAuth {
23
+ /**
24
+ * Checks whether the Claude Code CLI is available on this host.
25
+ *
26
+ * NOTE: `cross-spawn.sync` does NOT throw on ENOENT — it returns a result
27
+ * object with `error` populated. The try/catch alone was always returning
28
+ * true and every provider appeared "installed". We now require both
29
+ * `!result.error` and a numeric exit status (0 for `--version`) before
30
+ * trusting the install.
31
+ */
32
+ private checkInstalled(): boolean {
33
+ const cliPath = process.env.CLAUDE_CLI_PATH || 'claude';
34
+ try {
35
+ const result = spawn.sync(cliPath, ['--version'], { stdio: 'ignore', timeout: 5000 });
36
+ return !result.error && result.status === 0;
37
+ } catch {
38
+ return false;
39
+ }
40
+ }
41
+
42
+ /**
43
+ * Returns Claude installation and credential status using Claude Code's auth priority.
44
+ */
45
+ async getStatus(): Promise<ProviderAuthStatus> {
46
+ const installed = this.checkInstalled();
47
+
48
+ if (!installed) {
49
+ return {
50
+ installed,
51
+ provider: 'claude',
52
+ authenticated: false,
53
+ email: null,
54
+ method: null,
55
+ error: 'Claude Code CLI is not installed',
56
+ };
57
+ }
58
+
59
+ const credentials = await this.checkCredentials();
60
+
61
+ return {
62
+ installed,
63
+ provider: 'claude',
64
+ authenticated: credentials.authenticated,
65
+ email: credentials.authenticated ? credentials.email || 'Authenticated' : credentials.email,
66
+ method: credentials.method,
67
+ error: credentials.authenticated ? undefined : credentials.error || 'Not authenticated',
68
+ };
69
+ }
70
+
71
+ /**
72
+ * Reads Claude settings env values that the CLI can use even when the server process env is empty.
73
+ */
74
+ private async loadSettingsEnv(): Promise<Record<string, unknown>> {
75
+ try {
76
+ const settingsPath = path.join(os.homedir(), '.claude', 'settings.json');
77
+ const content = await readFile(settingsPath, 'utf8');
78
+ const settings = readObjectRecord(JSON.parse(content));
79
+ return readObjectRecord(settings?.env) ?? {};
80
+ } catch {
81
+ return {};
82
+ }
83
+ }
84
+
85
+ /**
86
+ * Checks Claude credentials in the same priority order used by Claude Code.
87
+ */
88
+ private async checkCredentials(): Promise<ClaudeCredentialsStatus> {
89
+ // Pixcode-UI-saved credentials win. Users who paste a key into our
90
+ // Settings > Agents form expect authenticated status immediately,
91
+ // regardless of env var timing.
92
+ try {
93
+ const creds = await getProviderCredentials('claude');
94
+ if (creds?.apiKey) {
95
+ const label = creds.baseUrl
96
+ ? `API Key · ${(() => { try { return new URL(creds.baseUrl).host; } catch { return creds.baseUrl; } })()}`
97
+ : 'API Key Auth';
98
+ return { authenticated: true, email: label, method: 'pixcode_store' };
99
+ }
100
+ } catch { /* fall through */ }
101
+
102
+ if (process.env.ANTHROPIC_API_KEY?.trim()) {
103
+ return { authenticated: true, email: 'API Key Auth', method: 'api_key' };
104
+ }
105
+
106
+ const settingsEnv = await this.loadSettingsEnv();
107
+ if (readOptionalString(settingsEnv.ANTHROPIC_API_KEY)) {
108
+ return { authenticated: true, email: 'API Key Auth', method: 'api_key' };
109
+ }
110
+
111
+ if (readOptionalString(settingsEnv.ANTHROPIC_AUTH_TOKEN)) {
112
+ return { authenticated: true, email: 'Configured via settings.json', method: 'api_key' };
113
+ }
114
+
115
+ try {
116
+ const credPath = path.join(os.homedir(), '.claude', '.credentials.json');
117
+ const content = await readFile(credPath, 'utf8');
118
+ const creds = readObjectRecord(JSON.parse(content)) ?? {};
119
+ const oauth = readObjectRecord(creds.claudeAiOauth);
120
+ const accessToken = readOptionalString(oauth?.accessToken);
121
+
122
+ if (accessToken) {
123
+ const expiresAt = typeof oauth?.expiresAt === 'number' ? oauth.expiresAt : undefined;
124
+ const email = readOptionalString(creds.email) ?? readOptionalString(creds.user) ?? null;
125
+ if (!expiresAt || Date.now() < expiresAt) {
126
+ return {
127
+ authenticated: true,
128
+ email,
129
+ method: 'credentials_file',
130
+ };
131
+ }
132
+
133
+ return {
134
+ authenticated: false,
135
+ email,
136
+ method: 'credentials_file',
137
+ error: 'OAuth token has expired. Please re-authenticate with claude login',
138
+ };
139
+ }
140
+
141
+ return { authenticated: false, email: null, method: null };
142
+ } catch {
143
+ return { authenticated: false, email: null, method: null };
144
+ }
145
+ }
146
+ }
@@ -1,135 +1,135 @@
1
- import os from 'node:os';
2
- import path from 'node:path';
3
-
4
- import { McpProvider } from '@/modules/providers/shared/mcp/mcp.provider.js';
5
- import type { McpScope, ProviderMcpServer, UpsertProviderMcpServerInput } from '@/shared/types.js';
6
- import {
7
- AppError,
8
- readJsonConfig,
9
- readObjectRecord,
10
- readOptionalString,
11
- readStringArray,
12
- readStringRecord,
13
- writeJsonConfig,
14
- } from '@/shared/utils.js';
15
-
16
- export class ClaudeMcpProvider extends McpProvider {
17
- constructor() {
18
- super('claude', ['user', 'local', 'project'], ['stdio', 'http', 'sse']);
19
- }
20
-
21
- protected async readScopedServers(scope: McpScope, workspacePath: string): Promise<Record<string, unknown>> {
22
- if (scope === 'project') {
23
- const filePath = path.join(workspacePath, '.mcp.json');
24
- const config = await readJsonConfig(filePath);
25
- return readObjectRecord(config.mcpServers) ?? {};
26
- }
27
-
28
- const filePath = path.join(os.homedir(), '.claude.json');
29
- const config = await readJsonConfig(filePath);
30
- if (scope === 'user') {
31
- return readObjectRecord(config.mcpServers) ?? {};
32
- }
33
-
34
- const projects = readObjectRecord(config.projects) ?? {};
35
- const projectConfig = readObjectRecord(projects[workspacePath]) ?? {};
36
- return readObjectRecord(projectConfig.mcpServers) ?? {};
37
- }
38
-
39
- protected async writeScopedServers(
40
- scope: McpScope,
41
- workspacePath: string,
42
- servers: Record<string, unknown>,
43
- ): Promise<void> {
44
- if (scope === 'project') {
45
- const filePath = path.join(workspacePath, '.mcp.json');
46
- const config = await readJsonConfig(filePath);
47
- config.mcpServers = servers;
48
- await writeJsonConfig(filePath, config);
49
- return;
50
- }
51
-
52
- const filePath = path.join(os.homedir(), '.claude.json');
53
- const config = await readJsonConfig(filePath);
54
- if (scope === 'user') {
55
- config.mcpServers = servers;
56
- await writeJsonConfig(filePath, config);
57
- return;
58
- }
59
-
60
- const projects = readObjectRecord(config.projects) ?? {};
61
- const projectConfig = readObjectRecord(projects[workspacePath]) ?? {};
62
- projectConfig.mcpServers = servers;
63
- projects[workspacePath] = projectConfig;
64
- config.projects = projects;
65
- await writeJsonConfig(filePath, config);
66
- }
67
-
68
- protected buildServerConfig(input: UpsertProviderMcpServerInput): Record<string, unknown> {
69
- if (input.transport === 'stdio') {
70
- if (!input.command?.trim()) {
71
- throw new AppError('command is required for stdio MCP servers.', {
72
- code: 'MCP_COMMAND_REQUIRED',
73
- statusCode: 400,
74
- });
75
- }
76
-
77
- return {
78
- type: 'stdio',
79
- command: input.command,
80
- args: input.args ?? [],
81
- env: input.env ?? {},
82
- };
83
- }
84
-
85
- if (!input.url?.trim()) {
86
- throw new AppError('url is required for http/sse MCP servers.', {
87
- code: 'MCP_URL_REQUIRED',
88
- statusCode: 400,
89
- });
90
- }
91
-
92
- return {
93
- type: input.transport,
94
- url: input.url,
95
- headers: input.headers ?? {},
96
- };
97
- }
98
-
99
- protected normalizeServerConfig(
100
- scope: McpScope,
101
- name: string,
102
- rawConfig: unknown,
103
- ): ProviderMcpServer | null {
104
- if (!rawConfig || typeof rawConfig !== 'object') {
105
- return null;
106
- }
107
-
108
- const config = rawConfig as Record<string, unknown>;
109
- if (typeof config.command === 'string') {
110
- return {
111
- provider: 'claude',
112
- name,
113
- scope,
114
- transport: 'stdio',
115
- command: config.command,
116
- args: readStringArray(config.args),
117
- env: readStringRecord(config.env),
118
- };
119
- }
120
-
121
- if (typeof config.url === 'string') {
122
- const transport = readOptionalString(config.type) === 'sse' ? 'sse' : 'http';
123
- return {
124
- provider: 'claude',
125
- name,
126
- scope,
127
- transport,
128
- url: config.url,
129
- headers: readStringRecord(config.headers),
130
- };
131
- }
132
-
133
- return null;
134
- }
135
- }
1
+ import os from 'node:os';
2
+ import path from 'node:path';
3
+
4
+ import { McpProvider } from '@/modules/providers/shared/mcp/mcp.provider.js';
5
+ import type { McpScope, ProviderMcpServer, UpsertProviderMcpServerInput } from '@/shared/types.js';
6
+ import {
7
+ AppError,
8
+ readJsonConfig,
9
+ readObjectRecord,
10
+ readOptionalString,
11
+ readStringArray,
12
+ readStringRecord,
13
+ writeJsonConfig,
14
+ } from '@/shared/utils.js';
15
+
16
+ export class ClaudeMcpProvider extends McpProvider {
17
+ constructor() {
18
+ super('claude', ['user', 'local', 'project'], ['stdio', 'http', 'sse']);
19
+ }
20
+
21
+ protected async readScopedServers(scope: McpScope, workspacePath: string): Promise<Record<string, unknown>> {
22
+ if (scope === 'project') {
23
+ const filePath = path.join(workspacePath, '.mcp.json');
24
+ const config = await readJsonConfig(filePath);
25
+ return readObjectRecord(config.mcpServers) ?? {};
26
+ }
27
+
28
+ const filePath = path.join(os.homedir(), '.claude.json');
29
+ const config = await readJsonConfig(filePath);
30
+ if (scope === 'user') {
31
+ return readObjectRecord(config.mcpServers) ?? {};
32
+ }
33
+
34
+ const projects = readObjectRecord(config.projects) ?? {};
35
+ const projectConfig = readObjectRecord(projects[workspacePath]) ?? {};
36
+ return readObjectRecord(projectConfig.mcpServers) ?? {};
37
+ }
38
+
39
+ protected async writeScopedServers(
40
+ scope: McpScope,
41
+ workspacePath: string,
42
+ servers: Record<string, unknown>,
43
+ ): Promise<void> {
44
+ if (scope === 'project') {
45
+ const filePath = path.join(workspacePath, '.mcp.json');
46
+ const config = await readJsonConfig(filePath);
47
+ config.mcpServers = servers;
48
+ await writeJsonConfig(filePath, config);
49
+ return;
50
+ }
51
+
52
+ const filePath = path.join(os.homedir(), '.claude.json');
53
+ const config = await readJsonConfig(filePath);
54
+ if (scope === 'user') {
55
+ config.mcpServers = servers;
56
+ await writeJsonConfig(filePath, config);
57
+ return;
58
+ }
59
+
60
+ const projects = readObjectRecord(config.projects) ?? {};
61
+ const projectConfig = readObjectRecord(projects[workspacePath]) ?? {};
62
+ projectConfig.mcpServers = servers;
63
+ projects[workspacePath] = projectConfig;
64
+ config.projects = projects;
65
+ await writeJsonConfig(filePath, config);
66
+ }
67
+
68
+ protected buildServerConfig(input: UpsertProviderMcpServerInput): Record<string, unknown> {
69
+ if (input.transport === 'stdio') {
70
+ if (!input.command?.trim()) {
71
+ throw new AppError('command is required for stdio MCP servers.', {
72
+ code: 'MCP_COMMAND_REQUIRED',
73
+ statusCode: 400,
74
+ });
75
+ }
76
+
77
+ return {
78
+ type: 'stdio',
79
+ command: input.command,
80
+ args: input.args ?? [],
81
+ env: input.env ?? {},
82
+ };
83
+ }
84
+
85
+ if (!input.url?.trim()) {
86
+ throw new AppError('url is required for http/sse MCP servers.', {
87
+ code: 'MCP_URL_REQUIRED',
88
+ statusCode: 400,
89
+ });
90
+ }
91
+
92
+ return {
93
+ type: input.transport,
94
+ url: input.url,
95
+ headers: input.headers ?? {},
96
+ };
97
+ }
98
+
99
+ protected normalizeServerConfig(
100
+ scope: McpScope,
101
+ name: string,
102
+ rawConfig: unknown,
103
+ ): ProviderMcpServer | null {
104
+ if (!rawConfig || typeof rawConfig !== 'object') {
105
+ return null;
106
+ }
107
+
108
+ const config = rawConfig as Record<string, unknown>;
109
+ if (typeof config.command === 'string') {
110
+ return {
111
+ provider: 'claude',
112
+ name,
113
+ scope,
114
+ transport: 'stdio',
115
+ command: config.command,
116
+ args: readStringArray(config.args),
117
+ env: readStringRecord(config.env),
118
+ };
119
+ }
120
+
121
+ if (typeof config.url === 'string') {
122
+ const transport = readOptionalString(config.type) === 'sse' ? 'sse' : 'http';
123
+ return {
124
+ provider: 'claude',
125
+ name,
126
+ scope,
127
+ transport,
128
+ url: config.url,
129
+ headers: readStringRecord(config.headers),
130
+ };
131
+ }
132
+
133
+ return null;
134
+ }
135
+ }