agent-consultation-mcp 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Menes Ekinci
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,140 @@
+# Agent Consultation MCP
+
+An MCP (Model Context Protocol) server that allows AI agents like Claude Code to consult other AI models (DeepSeek Reasoner, OpenAI GPT-5.2) for alternative perspectives during coding sessions.
+
+## Features
+
+- **Multi-Provider Support**: DeepSeek (Reasoner, Chat) and OpenAI (GPT-5.2, GPT-5.2 Pro)
+- **Specialized Consultation Modes**: Debug, Code Analysis, Architecture Review, Plan Validation, Concept Explanation
+- **Conversation Management**: Continue multi-turn conversations with context
+- **Web UI**: Configure providers and API keys through a browser interface
+- **Encrypted Storage**: API keys are encrypted at rest
+
+## Installation
+
+### Via npx (Recommended)
+
+No installation required - just add to your Claude Code MCP settings:
+
+```json
+{
+  "mcpServers": {
+    "agent-consultation": {
+      "command": "npx",
+      "args": ["-y", "agent-consultation-mcp"]
+    }
+  }
+}
+```
+
+### Global Installation
+
+```bash
+npm install -g agent-consultation-mcp
+```
+
+Then add to your MCP settings:
+
+```json
+{
+  "mcpServers": {
+    "agent-consultation": {
+      "command": "agent-consultation-mcp"
+    }
+  }
+}
+```
+
+## Configuration
+
+### Setting Up API Keys
+
+1. **Via Web UI** (Recommended):
+   ```bash
+   npx agent-consultation-mcp --config
+   ```
+   This opens a browser where you can configure providers and API keys.
+
+2. **Via Config File**:
+   Config is stored at `~/.agent-consultation-mcp/config.json`
+
+### Supported Providers
+
+| Provider | Models | API Key |
+|----------|--------|---------|
+| DeepSeek | `deepseek-reasoner` (default), `deepseek-chat` | [Get API Key](https://platform.deepseek.com/) |
+| OpenAI | `gpt-5.2`, `gpt-5.2-pro` | [Get API Key](https://platform.openai.com/) |
+
+## Usage
+
+Once configured, Claude Code can use the following tools:
+
+### consult_agent
+
+Get a second opinion from another AI model.
+
+```
+Parameters:
+- question (required): The question or problem to get advice on
+- mode (optional): Consultation mode - debug, analyzeCode, reviewArchitecture, validatePlan, explainConcept, general
+- context (optional): Additional context like code snippets or error messages
+```
+
+### continue_conversation
+
+Continue an existing consultation conversation.
+
+```
+Parameters:
+- conversationId (required): The conversation ID from a previous consultation
+- message (required): Your follow-up message
+```
+
+### end_conversation
+
+End an active consultation conversation.
+
+```
+Parameters:
+- conversationId (required): The conversation ID to end
+```
+
+## Example
+
+In Claude Code, you might use it like:
+
+> "Can you consult DeepSeek about this architecture decision? I'm not sure if using a monorepo is the right choice for this microservices setup."
+
+Claude will then call the `consult_agent` tool with your question and provide the response.
+
+## Consultation Modes
+
+| Mode | Description |
+|------|-------------|
+| `debug` | Focus on finding bugs, analyzing errors, and suggesting fixes |
+| `analyzeCode` | Code review focusing on quality, patterns, and improvements |
+| `reviewArchitecture` | Evaluate architectural decisions and suggest alternatives |
+| `validatePlan` | Review implementation plans for completeness and risks |
+| `explainConcept` | Explain technical concepts clearly |
+| `general` | General-purpose consultation |
+
+## Development
+
+```bash
+# Clone the repo
+git clone https://github.com/menesekinci/agent-consultation-mcp.git
+cd agent-consultation-mcp
+
+# Install dependencies
+npm install
+
+# Run in development mode
+npm run dev
+
+# Build for production
+npm run build
+```
+
+## License
+
+MIT

package/dist/api/index.d.ts

@@ -0,0 +1,27 @@
+export interface ConfigUIOptions {
+    port?: number;
+    openBrowser?: boolean;
+}
+/**
+ * Start the configuration UI HTTP server
+ */
+export declare function startConfigUI(options?: ConfigUIOptions): Promise<void>;
+/**
+ * Start the UI server in background mode (for MCP mode)
+ * Does not block and does not open browser automatically
+ */
+export declare function startBackgroundUIServer(port?: number): Promise<boolean>;
+/**
+ * Open the Web UI in browser (only opens once per session)
+ * Spawns a completely separate standalone server process that handles
+ * both server startup and browser opening.
+ */
+export declare function openWebUI(): Promise<void>;
+/**
+ * Check if browser has been opened
+ */
+export declare function isBrowserOpened(): boolean;
+/**
+ * Check if background server is running
+ */
+export declare function isBackgroundServerRunning(): boolean;

package/dist/api/index.js

@@ -0,0 +1,213 @@
+import express from 'express';
+import path from 'path';
+import { fileURLToPath } from 'url';
+import { spawn } from 'child_process';
+import open from 'open';
+import { getConfigManager } from '../config/index.js';
+import { logger } from '../utils/index.js';
+import { configRoutes } from './routes/config.js';
+import { providerRoutes } from './routes/providers.js';
+import chatRoutes from './routes/chat.js';
+import { securityMiddleware } from './middleware/security.js';
+// Get __dirname equivalent in ES modules
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+const DEFAULT_PORT = 3456;
+// Track background UI server state
+let backgroundServerRunning = false;
+let browserOpened = false;
+let backgroundServerPort = DEFAULT_PORT;
+/**
+ * Start the configuration UI HTTP server
+ */
+export async function startConfigUI(options = {}) {
+    const port = options.port ?? DEFAULT_PORT;
+    const shouldOpenBrowser = options.openBrowser ?? true;
+    // Ensure config is loaded
+    const configManager = getConfigManager();
+    await configManager.init();
+    const app = express();
+    // Middleware
+    app.use(express.json());
+    app.use(securityMiddleware);
+    // API routes
+    app.use('/api/config', configRoutes);
+    app.use('/api/providers', providerRoutes);
+    app.use('/api/chat', chatRoutes);
+    // Serve static UI files
+    const uiPath = path.join(__dirname, '../ui');
+    app.use(express.static(uiPath));
+    // Fallback to index.html for SPA-like behavior (Express 5 compatible)
+    app.use((_req, res, next) => {
+        // Only serve index.html for non-API requests that don't have a file extension
+        if (!_req.path.startsWith('/api') && !path.extname(_req.path)) {
+            res.sendFile(path.join(uiPath, 'index.html'));
+        }
+        else {
+            next();
+        }
+    });
+    // Error handling middleware
+    app.use((err, _req, res, _next) => {
+        logger.error('HTTP server error', { error: err.message });
+        res.status(500).json({
+            error: 'Internal server error',
+            message: err.message,
+        });
+    });
+    // CRITICAL: Bind to localhost only for security
+    return new Promise((resolve, reject) => {
+        const server = app.listen(port, '127.0.0.1', () => {
+            const url = `http://127.0.0.1:${port}`;
+            logger.info(`Config UI running at ${url}`);
+            console.log(`
+┌─────────────────────────────────────────────────┐
+│                                                 │
+│   Agent Consultation MCP - Configuration UI    │
+│                                                 │
+│   URL: ${url.padEnd(40)}│
+│                                                 │
+│   Press Ctrl+C to stop                          │
+│                                                 │
+└─────────────────────────────────────────────────┘
+`);
+            // Open browser
+            if (shouldOpenBrowser) {
+                open(url).catch((err) => {
+                    logger.warn('Failed to open browser', { error: err.message });
+                    console.log(`Please open ${url} in your browser`);
+                });
+            }
+            resolve();
+        });
+        server.on('error', (err) => {
+            if (err.code === 'EADDRINUSE') {
+                logger.error(`Port ${port} is already in use`);
+                console.error(`\nError: Port ${port} is already in use.`);
+                console.error(`Try a different port: npx agent-consultation-mcp --config --port ${port + 1}\n`);
+            }
+            reject(err);
+        });
+    });
+}
+/**
+ * Start the UI server in background mode (for MCP mode)
+ * Does not block and does not open browser automatically
+ */
+export async function startBackgroundUIServer(port = DEFAULT_PORT) {
+    if (backgroundServerRunning) {
+        return true;
+    }
+    // Ensure config is loaded
+    const configManager = getConfigManager();
+    await configManager.init();
+    const app = express();
+    // Middleware
+    app.use(express.json());
+    app.use(securityMiddleware);
+    // API routes
+    app.use('/api/config', configRoutes);
+    app.use('/api/providers', providerRoutes);
+    app.use('/api/chat', chatRoutes);
+    // Serve static UI files
+    const uiPath = path.join(__dirname, '../ui');
+    app.use(express.static(uiPath));
+    // Fallback to index.html for SPA-like behavior
+    app.use((_req, res, next) => {
+        if (!_req.path.startsWith('/api') && !path.extname(_req.path)) {
+            res.sendFile(path.join(uiPath, 'index.html'));
+        }
+        else {
+            next();
+        }
+    });
+    // Error handling middleware
+    app.use((err, _req, res, _next) => {
+        logger.error('Background HTTP server error', { error: err.message });
+        res.status(500).json({
+            error: 'Internal server error',
+            message: err.message,
+        });
+    });
+    return new Promise((resolve) => {
+        const server = app.listen(port, '127.0.0.1', () => {
+            backgroundServerRunning = true;
+            backgroundServerPort = port;
+            logger.info(`Background UI server started at http://127.0.0.1:${port}`);
+            resolve(true);
+        });
+        server.on('error', (err) => {
+            if (err.code === 'EADDRINUSE') {
+                // Port is in use, maybe server is already running from another process
+                logger.debug(`Port ${port} already in use, assuming UI server is running`);
+                backgroundServerRunning = true;
+                backgroundServerPort = port;
+                resolve(true);
+            }
+            else {
+                logger.error('Failed to start background UI server', { error: err.message });
+                resolve(false);
+            }
+        });
+    });
+}
+/**
+ * Open the Web UI in browser (only opens once per session)
+ * Spawns a completely separate standalone server process that handles
+ * both server startup and browser opening.
+ */
+export async function openWebUI() {
+    logger.info('openWebUI called', { browserOpened });
+    if (browserOpened) {
+        logger.info('Browser already opened, skipping');
+        return;
+    }
+    // Path to the standalone server script
+    const standaloneServerPath = path.join(__dirname, 'standalone-server.js');
+    logger.info('Spawning standalone server process', { standaloneServerPath });
+    try {
+        // Spawn a completely detached process
+        // This process will start the server AND open the browser
+        const child = spawn(process.execPath, [standaloneServerPath, String(backgroundServerPort)], {
+            detached: true,
+            stdio: 'ignore',
+            windowsHide: true,
+            env: { ...process.env }
+        });
+        // Unref to allow parent (MCP) process to exit independently
+        child.unref();
+        browserOpened = true;
+        backgroundServerRunning = true;
+        logger.info('Standalone server process spawned successfully');
+    }
+    catch (err) {
+        logger.error('Failed to spawn standalone server process', {
+            error: err instanceof Error ? err.message : 'Unknown error'
+        });
+        // Fallback: try to open browser directly (server might already be running)
+        const url = `http://127.0.0.1:${backgroundServerPort}`;
+        try {
+            await open(url, { wait: false });
+            browserOpened = true;
+            logger.info('Browser opened via fallback');
+        }
+        catch (openErr) {
+            logger.error('Fallback browser open also failed', {
+                error: openErr instanceof Error ? openErr.message : 'Unknown error'
+            });
+        }
+    }
+}
+/**
+ * Check if browser has been opened
+ */
+export function isBrowserOpened() {
+    return browserOpened;
+}
+/**
+ * Check if background server is running
+ */
+export function isBackgroundServerRunning() {
+    return backgroundServerRunning;
+}
+//# sourceMappingURL=index.js.map

package/dist/api/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,UAAU,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE9D,yCAAyC;AACzC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAE3C,MAAM,YAAY,GAAG,IAAI,CAAC;AAE1B,mCAAmC;AACnC,IAAI,uBAAuB,GAAG,KAAK,CAAC;AACpC,IAAI,aAAa,GAAG,KAAK,CAAC;AAC1B,IAAI,oBAAoB,GAAG,YAAY,CAAC;AAOxC;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,UAA2B,EAAE;IAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,YAAY,CAAC;IAC1C,MAAM,iBAAiB,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC;IAEtD,0BAA0B;IAC1B,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IACzC,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;IAE3B,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IAEtB,aAAa;IACb,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACxB,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAE5B,aAAa;IACb,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IACrC,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;IAC1C,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAEjC,wBAAwB;IACxB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC7C,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAEhC,sEAAsE;IACtE,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC1B,8EAA8E;QAC9E,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,IAAI,EAAE,CAAC;QACT,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,4BAA4B;IAC5B,GAAG,CAAC,GAAG,CACL,CACE,GAAU,EACV,IAAqB,EACrB,GAAqB,EACrB,KAA2B,EAC3B,EAAE;QACF,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,KAAK,EAAE,uBAAuB;YAC9B,OAAO,EAAE,GAAG,CAAC,OAAO;SACrB,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IAEF,gDAAgD;IAChD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;YAChD,MAAM,GAAG,GAAG,oBAAoB,IAAI,EAAE,CAAC;YACvC,MAAM,CAAC,IAAI,CAAC,wBAAwB,GAAG,EAAE,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC;;;;;WAKP,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;;;;;CAKxB,CAAC,CAAC;YAEG,eAAe;YACf,IAAI,iBAAiB,EAAE,CAAC;gBACtB,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBACtB,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;oBAC9D,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,kBAAkB,CAAC,CAAC;gBACpD,CAAC,CAAC,CAAC;YACL,CAAC;YAED,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;YAChD,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC9B,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,oBAAoB,CAAC,CAAC;gBAC/C,OAAO,CAAC,KAAK,CAAC,iBAAiB,IAAI,qBAAqB,CAAC,CAAC;gBAC1D,OAAO,CAAC,KAAK,CAAC,oEAAoE,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;YAClG,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAAe,YAAY;IACvE,IAAI,uBAAuB,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,0BAA0B;IAC1B,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IACzC,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;IAE3B,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IAEtB,aAAa;IACb,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACxB,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAE5B,aAAa;IACb,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IACrC,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;IAC1C,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAEjC,wBAAwB;IACxB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC7C,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAEhC,+CAA+C;IAC/C,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC1B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,IAAI,EAAE,CAAC;QACT,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,4BAA4B;IAC5B,GAAG,CAAC,GAAG,CACL,CACE,GAAU,EACV,IAAqB,EACrB,GAAqB,EACrB,KAA2B,EAC3B,EAAE;QACF,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACrE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,KAAK,EAAE,uBAAuB;YAC9B,OAAO,EAAE,GAAG,CAAC,OAAO;SACrB,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IAEF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;YAChD,uBAAuB,GAAG,IAAI,CAAC;YAC/B,oBAAoB,GAAG,IAAI,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,oDAAoD,IAAI,EAAE,CAAC,CAAC;YACxE,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;YAChD,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC9B,uEAAuE;gBACvE,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,gDAAgD,CAAC,CAAC;gBAC3E,uBAAuB,GAAG,IAAI,CAAC;gBAC/B,oBAAoB,GAAG,IAAI,CAAC;gBAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC7E,OAAO,CAAC,KAAK,CAAC,CAAC;YACjB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC;IAEnD,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QAChD,OAAO;IACT,CAAC;IAED,uCAAuC;IACvC,MAAM,oBAAoB,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC;IAE1E,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAE5E,IAAI,CAAC;QACH,sCAAsC;QACtC,0DAA0D;QAC1D,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC,EAAE;YAC1F,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,QAAQ;YACf,WAAW,EAAE,IAAI;YACjB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;SACxB,CAAC,CAAC;QAEH,4DAA4D;QAC5D,KAAK,CAAC,KAAK,EAAE,CAAC;QAEd,aAAa,GAAG,IAAI,CAAC;QACrB,uBAAuB,GAAG,IAAI,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE;YACxD,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;SAC5D,CAAC,CAAC;QAEH,2EAA2E;QAC3E,MAAM,GAAG,GAAG,oBAAoB,oBAAoB,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACjC,aAAa,GAAG,IAAI,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,OAAO,EAAE,CAAC;YACjB,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE;gBAChD,KAAK,EAAE,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aACpE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,aAAa,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB;IACvC,OAAO,uBAAuB,CAAC;AACjC,CAAC"}

package/dist/api/middleware/security.d.ts

@@ -0,0 +1,6 @@
+import type { Request, Response, NextFunction } from 'express';
+/**
+ * Security middleware for the config UI HTTP server
+ * Adds security headers to all responses
+ */
+export declare function securityMiddleware(_req: Request, res: Response, next: NextFunction): void;

package/dist/api/middleware/security.js

@@ -0,0 +1,28 @@
+/**
+ * Security middleware for the config UI HTTP server
+ * Adds security headers to all responses
+ */
+export function securityMiddleware(_req, res, next) {
+    // Prevent MIME type sniffing
+    res.setHeader('X-Content-Type-Options', 'nosniff');
+    // Prevent clickjacking
+    res.setHeader('X-Frame-Options', 'DENY');
+    // Enable XSS filter in browsers
+    res.setHeader('X-XSS-Protection', '1; mode=block');
+    // Content Security Policy - allow CDN resources for Alpine.js and Tailwind
+    // Note: 'unsafe-eval' is required for Alpine.js to evaluate expressions
+    // This is acceptable since the UI runs on localhost only
+    res.setHeader('Content-Security-Policy', [
+        "default-src 'self'",
+        "script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.tailwindcss.com https://unpkg.com",
+        "style-src 'self' 'unsafe-inline' https://fonts.googleapis.com",
+        "img-src 'self' data:",
+        "font-src 'self' https://fonts.gstatic.com",
+        "connect-src 'self'",
+    ].join('; '));
+    // Prevent caching of sensitive data
+    res.setHeader('Cache-Control', 'no-store, no-cache, must-revalidate');
+    res.setHeader('Pragma', 'no-cache');
+    next();
+}
+//# sourceMappingURL=security.js.map

package/dist/api/middleware/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../../src/api/middleware/security.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAa,EACb,GAAa,EACb,IAAkB;IAElB,6BAA6B;IAC7B,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;IAEnD,uBAAuB;IACvB,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;IAEzC,gCAAgC;IAChC,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAC;IAEnD,2EAA2E;IAC3E,wEAAwE;IACxE,yDAAyD;IACzD,GAAG,CAAC,SAAS,CACX,yBAAyB,EACzB;QACE,oBAAoB;QACpB,+FAA+F;QAC/F,+DAA+D;QAC/D,sBAAsB;QACtB,2CAA2C;QAC3C,oBAAoB;KACrB,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IAEF,oCAAoC;IACpC,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,qCAAqC,CAAC,CAAC;IACtE,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAEpC,IAAI,EAAE,CAAC;AACT,CAAC"}

package/dist/api/routes/chat.d.ts

@@ -0,0 +1,2 @@
+declare const router: import("express-serve-static-core").Router;
+export default router;

package/dist/api/routes/chat.js

@@ -0,0 +1,61 @@
+import { Router } from 'express';
+import { ConversationManager } from '../../server/conversation.js';
+const router = Router();
+/**
+ * GET /api/chat/history
+ * Returns all conversations (active + archived) from files
+ */
+router.get('/history', (_req, res) => {
+    try {
+        // Load active conversations
+        const activeConversations = ConversationManager.loadFromFile();
+        // Load archived conversations
+        const archivedConversations = ConversationManager.loadHistoryFromFile();
+        // Format active conversations for UI display
+        const active = activeConversations.map((conv) => ({
+            id: conv.id,
+            model: conv.model,
+            messageCount: conv.messages.length,
+            messages: conv.messages.map((msg, idx) => ({
+                id: `${conv.id}-${idx}`,
+                role: msg.role,
+                content: msg.content,
+            })),
+            createdAt: conv.createdAt.toISOString(),
+            lastActivityAt: conv.lastActivityAt.toISOString(),
+            status: 'active',
+        }));
+        // Format archived conversations for UI display
+        const archived = archivedConversations.map((conv) => ({
+            id: conv.id,
+            model: conv.model,
+            messageCount: conv.messages.length,
+            messages: conv.messages.map((msg, idx) => ({
+                id: `${conv.id}-${idx}`,
+                role: msg.role,
+                content: msg.content,
+            })),
+            createdAt: conv.createdAt,
+            lastActivityAt: conv.lastActivityAt,
+            endedAt: conv.endedAt,
+            endReason: conv.endReason,
+            status: 'archived',
+        }));
+        // Combine: active first, then archived (already sorted by newest first)
+        const allConversations = [...active, ...archived];
+        res.json({
+            count: allConversations.length,
+            activeCount: active.length,
+            archivedCount: archived.length,
+            conversations: allConversations,
+        });
+    }
+    catch (error) {
+        res.status(500).json({
+            error: 'Failed to fetch conversation history',
+            message: error instanceof Error ? error.message : 'Unknown error',
+        });
+    }
+});
+export default router;
+//# sourceMappingURL=chat.js.map

package/dist/api/routes/chat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat.js","sourceRoot":"","sources":["../../../src/api/routes/chat.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAA+B,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAgD,MAAM,8BAA8B,CAAC;AAGjH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;AAExB;;;GAGG;AACH,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;IACtD,IAAI,CAAC;QACH,4BAA4B;QAC5B,MAAM,mBAAmB,GAAG,mBAAmB,CAAC,YAAY,EAAE,CAAC;QAE/D,8BAA8B;QAC9B,MAAM,qBAAqB,GAAG,mBAAmB,CAAC,mBAAmB,EAAE,CAAC;QAExE,6CAA6C;QAC7C,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC,IAAkB,EAAE,EAAE,CAAC,CAAC;YAC9D,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;YAClC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAY,EAAE,GAAW,EAAE,EAAE,CAAC,CAAC;gBAC1D,EAAE,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE;gBACvB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,OAAO,EAAE,GAAG,CAAC,OAAO;aACrB,CAAC,CAAC;YACH,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE;YACvC,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE;YACjD,MAAM,EAAE,QAAiB;SAC1B,CAAC,CAAC,CAAC;QAEJ,+CAA+C;QAC/C,MAAM,QAAQ,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC,IAA0B,EAAE,EAAE,CAAC,CAAC;YAC1E,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;YAClC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAY,EAAE,GAAW,EAAE,EAAE,CAAC,CAAC;gBAC1D,EAAE,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE;gBACvB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,OAAO,EAAE,GAAG,CAAC,OAAO;aACrB,CAAC,CAAC;YACH,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE,UAAmB;SAC5B,CAAC,CAAC,CAAC;QAEJ,wEAAwE;QACxE,MAAM,gBAAgB,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC;QAElD,GAAG,CAAC,IAAI,CAAC;YACP,KAAK,EAAE,gBAAgB,CAAC,MAAM;YAC9B,WAAW,EAAE,MAAM,CAAC,MAAM;YAC1B,aAAa,EAAE,QAAQ,CAAC,MAAM;YAC9B,aAAa,EAAE,gBAAgB;SAChC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,KAAK,EAAE,sCAAsC;YAC7C,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;SAClE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,eAAe,MAAM,CAAC"}

package/dist/api/routes/config.d.ts

@@ -0,0 +1,2 @@
+declare const router: import("express-serve-static-core").Router;
+export { router as configRoutes };

package/dist/api/routes/config.js

@@ -0,0 +1,81 @@
+import { Router } from 'express';
+import { getConfigManager } from '../../config/index.js';
+import { MODEL_TYPES } from '../../types/index.js';
+const router = Router();
+/**
+ * GET /api/config - Get current configuration (with masked keys)
+ */
+router.get('/', (_req, res) => {
+    try {
+        const config = getConfigManager().getConfig();
+        // Build safe response with masked keys
+        const safeConfig = {
+            defaultModel: config.defaultModel,
+            maxMessages: config.maxMessages,
+            availableModels: MODEL_TYPES,
+            providers: Object.fromEntries(Object.entries(config.providers).map(([id, cfg]) => [
+                id,
+                {
+                    enabled: cfg.enabled,
+                    hasKey: !!cfg.apiKey,
+                },
+            ])),
+        };
+        res.json(safeConfig);
+    }
+    catch (error) {
+        res.status(500).json({
+            error: 'Failed to get configuration',
+            message: error instanceof Error ? error.message : 'Unknown error',
+        });
+    }
+});
+/**
+ * PATCH /api/config - Update configuration (defaultModel, maxMessages)
+ */
+router.patch('/', async (req, res) => {
+    try {
+        const { defaultModel, maxMessages } = req.body;
+        const updates = {};
+        // Validate defaultModel
+        if (defaultModel !== undefined) {
+            if (!MODEL_TYPES.includes(defaultModel)) {
+                res.status(400).json({
+                    error: 'Invalid model',
+                    message: `Model must be one of: ${MODEL_TYPES.join(', ')}`,
+                });
+                return;
+            }
+            updates.defaultModel = defaultModel;
+        }
+        // Validate maxMessages
+        if (maxMessages !== undefined) {
+            const num = parseInt(maxMessages, 10);
+            if (isNaN(num) || num < 1 || num > 50) {
+                res.status(400).json({
+                    error: 'Invalid maxMessages',
+                    message: 'maxMessages must be between 1 and 50',
+                });
+                return;
+            }
+            updates.maxMessages = num;
+        }
+        if (Object.keys(updates).length === 0) {
+            res.status(400).json({
+                error: 'No updates provided',
+                message: 'Provide at least one of: defaultModel, maxMessages',
+            });
+            return;
+        }
+        await getConfigManager().update(updates);
+        res.json({ success: true, updated: updates });
+    }
+    catch (error) {
+        res.status(500).json({
+            error: 'Failed to update configuration',
+            message: error instanceof Error ? error.message : 'Unknown error',
+        });
+    }
+});
+export { router as configRoutes };
+//# sourceMappingURL=config.js.map

package/dist/api/routes/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/api/routes/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAGnD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;AAExB;;GAEG;AACH,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IAC5B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC,SAAS,EAAE,CAAC;QAE9C,uCAAuC;QACvC,MAAM,UAAU,GAAG;YACjB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,eAAe,EAAE,WAAW;YAC5B,SAAS,EAAE,MAAM,CAAC,WAAW,CAC3B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;gBAClD,EAAE;gBACF;oBACE,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM;iBACrB;aACF,CAAC,CACH;SACF,CAAC;QAEF,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,KAAK,EAAE,6BAA6B;YACpC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;SAClE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACnC,IAAI,CAAC;QACH,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAC/C,MAAM,OAAO,GAAuD,EAAE,CAAC;QAEvE,wBAAwB;QACxB,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;gBACxC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,eAAe;oBACtB,OAAO,EAAE,yBAAyB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;iBAC3D,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,OAAO,CAAC,YAAY,GAAG,YAAY,CAAC;QACtC,CAAC;QAED,uBAAuB;QACvB,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,GAAG,GAAG,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YACtC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,EAAE,EAAE,CAAC;gBACtC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,qBAAqB;oBAC5B,OAAO,EAAE,sCAAsC;iBAChD,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,OAAO,CAAC,WAAW,GAAG,GAAG,CAAC;QAC5B,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,qBAAqB;gBAC5B,OAAO,EAAE,oDAAoD;aAC9D,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,gBAAgB,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACzC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,KAAK,EAAE,gCAAgC;YACvC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;SAClE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,OAAO,EAAE,MAAM,IAAI,YAAY,EAAE,CAAC"}

package/dist/api/routes/providers.d.ts

@@ -0,0 +1,2 @@
+declare const router: import("express-serve-static-core").Router;
+export { router as providerRoutes };