@pixelbyte-software/pixcode 1.55.1 → 1.55.3

package/server/modules/tasks/task-types.ts

@@ -0,0 +1,100 @@
+// ============================================================
+// Task Types — Core type definitions for the task system
+// ============================================================
+
+export type TaskStatus =
+  | 'PENDING'       // Created but waiting for predecessor or queue slot
+  | 'QUEUED'        // Ready to run, waiting for scheduler
+  | 'RUNNING'       // Agent is executing
+  | 'AWAITING_INPUT' // Agent asked a question, waiting for user
+  | 'COMPLETED'     // Finished successfully
+  | 'FAILED'        // Finished with error
+  | 'CANCELLED';    // User cancelled
+
+export type AgentType = 'claude-code' | 'codex' | 'gemini' | 'qwen' | 'opencode';
+
+export type TaskRole = 'backend' | 'frontend' | 'fullstack' | 'reviewer' | 'tester' | 'custom';
+
+export type TaskPriority = 'low' | 'normal' | 'high' | 'urgent';
+
+export interface TaskInteraction {
+  id: string;
+  taskId: string;
+  question: string;
+  options?: string[];
+  answer?: string;
+  status: 'pending' | 'answered' | 'timeout';
+  createdAt: string;
+  answeredAt?: string;
+}
+
+export interface TaskLog {
+  id: string;
+  taskId: string;
+  level: 'info' | 'warn' | 'error' | 'debug';
+  message: string;
+  timestamp: string;
+}
+
+export interface Task {
+  id: string;
+  projectId: string;
+  title: string;
+  prompt: string;
+  status: TaskStatus;
+  agentType: AgentType;
+  model?: string;
+  role: TaskRole;
+  priority: TaskPriority;
+
+  // Dependency chain — predecessor must complete before this starts
+  predecessorTaskId?: string;
+  continueSession?: boolean;  // Continue predecessor's session
+  sessionId?: string;         // Session ID from agent (for continuation)
+
+  // Budget
+  maxBudgetUsd?: number;
+  costUsd?: number;
+  tokenCount?: { input: number; output: number };
+
+  // Git worktree
+  branchName?: string;
+  worktreePath?: string;
+
+  // Result
+  result?: string;
+  summary?: string;
+  changedFiles?: string[];
+
+  // Timestamps
+  createdAt: string;
+  startedAt?: string;
+  completedAt?: string;
+
+  // Metadata
+  interactionTimeout?: number;  // ms, default 300000 (5 min)
+  thinkingEnabled?: boolean;
+  permissionMode?: string;
+}
+
+export interface CreateTaskInput {
+  projectId: string;
+  title: string;
+  prompt: string;
+  agentType: AgentType;
+  model?: string;
+  role?: TaskRole;
+  priority?: TaskPriority;
+  predecessorTaskId?: string;
+  continueSession?: boolean;
+  maxBudgetUsd?: number;
+  interactionTimeout?: number;
+  thinkingEnabled?: boolean;
+  permissionMode?: string;
+}
+
+export interface DispatchTaskInput {
+  agentType: AgentType;
+  model?: string;
+  permissionMode?: string;
+}

package/server/modules/tasks/user-interaction.ts

@@ -0,0 +1,93 @@
+// ============================================================
+// User Interaction — Agent asks questions, user responds via UI
+// ============================================================
+
+import { EventEmitter } from 'node:events';
+
+import { createInteraction, answerInteraction, getPendingInteractions, timeoutInteraction, addLog } from './task-store.js';
+
+// Event bus for WebSocket notifications
+export const interactionEvents = new EventEmitter();
+
+// Pending interaction promises — keyed by interaction ID
+const pendingResolvers = new Map<string, { resolve: (answer: string) => void; reject: (err: Error) => void; timer: NodeJS.Timeout }>();
+
+/**
+ * Create a question for the user and wait for the answer.
+ * Called by agent runners when the agent needs user input.
+ */
+export function askUser(
+  taskId: string,
+  question: string,
+  options?: string[],
+  timeoutMs = 300_000,
+): Promise<string> {
+  return new Promise((resolve, reject) => {
+    const interaction = createInteraction(taskId, question, options);
+
+    // Emit event for WebSocket broadcast
+    interactionEvents.emit('interaction:created', {
+      taskId,
+      interactionId: interaction.id,
+      question,
+      options,
+    });
+
+    addLog(taskId, 'info', `Agent asked: "${question.slice(0, 100)}"`);
+
+    // Set timeout
+    const timer = setTimeout(() => {
+      timeoutInteraction(interaction.id);
+      pendingResolvers.delete(interaction.id);
+      addLog(taskId, 'warn', `Interaction timed out: "${question.slice(0, 60)}"`);
+      resolve('[TIMEOUT] No response from user');
+    }, timeoutMs);
+
+    pendingResolvers.set(interaction.id, { resolve, reject, timer });
+  });
+}
+
+/**
+ * Called when user answers a question via the UI.
+ */
+export function submitAnswer(interactionId: string, answer: string): boolean {
+  const pending = pendingResolvers.get(interactionId);
+  if (!pending) return false;
+
+  clearTimeout(pending.timer);
+  pendingResolvers.delete(interactionId);
+
+  // Persist the answer
+  answerInteraction(interactionId, answer);
+
+  // Resolve the promise
+  pending.resolve(answer);
+
+  // Emit event for WebSocket broadcast
+  interactionEvents.emit('interaction:answered', { interactionId, answer });
+
+  return true;
+}
+
+/**
+ * Get all pending interactions for a task.
+ */
+export function getTaskInteractions(taskId: string) {
+  return getPendingInteractions(taskId);
+}
+
+/**
+ * Cancel all pending interactions for a task (e.g. when task is cancelled).
+ */
+export function cancelTaskInteractions(taskId: string): void {
+  const pending = getPendingInteractions(taskId);
+  for (const interaction of pending) {
+    const resolver = pendingResolvers.get(interaction.id);
+    if (resolver) {
+      clearTimeout(resolver.timer);
+      pendingResolvers.delete(interaction.id);
+      resolver.resolve('[CANCELLED] Task was cancelled');
+    }
+    timeoutInteraction(interaction.id);
+  }
+}

package/server/routes/auth.js

@@ -36,7 +36,7 @@ function publicUser(user) {
 // Check auth status and setup requirements
 router.get('/status', async (req, res) => {
   try {
-    const hasUsers = await userDb.hasUsers();
+    const hasUsers = userDb.hasUsers();
     res.json({ 
       needsSetup: !hasUsers,
       isAuthenticated: false // Will be overridden by frontend if token exists
@@ -62,16 +62,23 @@ router.put('/connection-mode', async (req, res) => {
   try {
     // During first-run setup no users exist yet, so we skip auth.
     // The setup form calls this endpoint before creating the admin account.
-    const hasUsers = await userDb.hasUsers();
+    const hasUsers = userDb.hasUsers();
     if (!hasUsers) {
       return res.json({ success: true, connection: saveRemoteConnectionConfig(req.body || {}) });
     }
     // Post-setup: require authenticated admin
-    authenticateToken(req, res, () => {
-      requireAdmin(req, res, () => {
-        res.json({ success: true, connection: saveRemoteConnectionConfig(req.body || {}) });
+    // Wrap authenticateToken in a try/catch so that if it sends a response
+    // (e.g. 401 when no token is present) we don't double-send.
+    try {
+      authenticateToken(req, res, () => {
+        requireAdmin(req, res, () => {
+          res.json({ success: true, connection: saveRemoteConnectionConfig(req.body || {}) });
+        });
       });
-    });
+    } catch (err) {
+      // If authenticateToken throws instead of calling next/send, return 401
+      res.status(401).json({ error: err.message || 'Authentication required' });
+    }
   } catch (error) {
     res.status(400).json({ success: false, error: error.message });
   }

package/dist/api-automation.html

@@ -1,110 +0,0 @@
-<!doctype html>
-<html lang="en">
-  <head>
-    <meta charset="utf-8" />
-    <meta name="viewport" content="width=device-width, initial-scale=1" />
-    <title>Pixcode API Automation - px_ API Keys, Agent Runs and Workflow Control</title>
-    <meta
-      name="description"
-      content="Use Pixcode API automation with px_ API keys to list projects, run Claude Code, Codex, Cursor CLI, Gemini CLI, Qwen Code, and OpenCode tasks, preview orchestration workflows, start runs, stream events, cancel runs, and integrate Telegram or external tools."
-    />
-    <meta
-      name="keywords"
-      content="Pixcode API, px API key, AI coding agent API, Codex API automation, Claude Code automation, OpenCode automation, orchestration REST API, self-hosted developer automation, coding agent webhook"
-    />
-    <meta name="robots" content="index,follow,max-image-preview:large,max-snippet:-1" />
-    <link rel="canonical" href="https://alicomert.github.io/pixcode/api-automation.html" />
-    <link rel="icon" href="favicon.png" />
-    <link rel="stylesheet" href="site.css" />
-  </head>
-  <body>
-    <nav class="site-nav" aria-label="Main navigation">
-      <a class="brand" href="landing.html">
-        <img src="logo.png" alt="" />
-        <span>Pixcode</span>
-      </a>
-      <div class="nav-links">
-        <a href="docs.html">Documentation</a>
-        <a href="features.html">Features</a>
-        <a href="orchestration.html">Orchestration</a>
-        <a href="api-automation.html">API</a>
-        <a href="https://github.com/alicomert/pixcode">GitHub</a>
-      </div>
-    </nav>
-
-    <header class="hero docs-hero">
-      <div>
-        <div class="eyebrow">API automation</div>
-        <h1>Control Pixcode from scripts, dashboards, CI, and remote tools.</h1>
-        <p class="lead">
-          Pixcode exposes REST and WebSocket-powered workflows. Generate a `px_` API key, then trigger provider tasks, inspect projects, preview orchestration, start workflow runs, stream output, and cancel work from external clients.
-        </p>
-      </div>
-      <div class="image-slot">
-        <span><strong>API dashboard slot</strong>Recommended: 1400 x 1000. Show API keys, OpenAPI docs, and an automation request/result.</span>
-      </div>
-    </header>
-
-    <main>
-      <section class="section">
-        <h2>Authentication</h2>
-        <p class="sublead">
-          New Pixcode API keys start with `px_`. Older `ck_` keys remain accepted for compatibility, but new documentation and examples should use `px_`.
-        </p>
-        <div class="grid two">
-          <div class="code-panel"><pre><code>curl http://localhost:3001/api/projects \
-  -H "Authorization: Bearer px_your_key_here"</code></pre></div>
-          <div class="code-panel"><pre><code>curl http://localhost:3001/api/projects \
-  -H "X-API-Key: px_your_key_here"</code></pre></div>
-        </div>
-      </section>
-
-      <section class="section alt">
-        <h2>Run a one-shot agent task</h2>
-        <p class="sublead">
-          `POST /api/agent` is the external REST entry point for non-interactive automation. It can run a provider against a project path, optionally stream events, and optionally return buffered JSON with `stream: false`.
-        </p>
-        <div class="code-panel"><pre><code>curl http://localhost:3001/api/agent \
-  -H "Authorization: Bearer px_your_key_here" \
-  -H "Content-Type: application/json" \
-  -d '{
-    "provider": "codex",
-    "projectPath": "/home/me/project",
-    "message": "Review the current diff and list release risks.",
-    "stream": false
-  }'</code></pre></div>
-      </section>
-
-      <section class="section warm">
-        <h2>Workflow automation</h2>
-        <p class="sublead">
-          Orchestration endpoints can list workflow modes, preview expanded DAGs, start runs, read run state, stream events, and cancel active work.
-        </p>
-        <div class="grid two">
-          <div class="card"><strong>Preview</strong><p>Validate agent metadata and inspect the node graph before running child agents.</p></div>
-          <div class="card"><strong>Run</strong><p>Start the workflow and track node runs, agent task IDs, status, events, and output.</p></div>
-          <div class="card"><strong>Stream</strong><p>Use run event endpoints to follow progress in dashboards or CLI scripts.</p></div>
-          <div class="card"><strong>Cancel</strong><p>Stop active orchestration runs when the user changes direction or detects bad output.</p></div>
-        </div>
-      </section>
-
-      <section class="section">
-        <h2>Common integration ideas</h2>
-        <ul class="feature-list">
-          <li>Ask Codex or Claude Code to review a Git diff from a CI job before release.</li>
-          <li>Trigger OpenCode or Gemini CLI from a custom internal dashboard.</li>
-          <li>Build a Telegram command that starts a Pixcode agent run on an always-on server.</li>
-          <li>Run multi-agent review on a branch before creating a tag or npm publish.</li>
-          <li>Expose a safe internal tool that lists projects and starts approved workflows.</li>
-        </ul>
-        <p>
-          Full OpenAPI reference: <a href="openapi.yaml">openapi.yaml</a>.
-        </p>
-      </section>
-    </main>
-
-    <footer class="footer">
-      <strong>Pixcode API automation</strong> · <a href="docs.html">Documentation</a> · <a href="openapi.yaml">OpenAPI</a> · <a href="llms.txt">llms.txt</a>
-    </footer>
-  </body>
-</html>