ai-consultation-mcp 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Menes Ekinci
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,193 @@
+# Agent Consultation MCP
+
+[![npm version](https://img.shields.io/npm/v/ai-consultation-mcp.svg)](https://www.npmjs.com/package/ai-consultation-mcp)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+
+An MCP (Model Context Protocol) server that enables AI agents to get a **second opinion** from other AI models, enriching their perspectives during work.
+
+> **Purpose**: When AI agents work on complex tasks, having a single perspective can lead to blind spots or suboptimal solutions. This MCP server allows agents like Claude Code to consult with DeepSeek Reasoner or ChatGPT for alternative viewpoints, validation, or different problem-solving strategies.
+
+## Features
+
+- **Multi-Tool Auto-Install**: Automatically detects and configures MCP for Claude Code, Cursor, Windsurf, Cline, Continue, Zed, and more
+- **Multi-Provider Support**: DeepSeek (Reasoner, Chat) and OpenAI (GPT-5.2, GPT-5.2 Pro)
+- **Specialized Consultation Modes**: Debug, Code Analysis, Architecture Review, Plan Validation, Concept Explanation
+- **Conversation Management**: Continue multi-turn conversations with context
+- **Web UI**: Configure providers and API keys through a browser interface
+- **Encrypted Storage**: API keys are encrypted at rest
+
+## Quick Start (2 steps)
+
+```bash
+# 1. Auto-install to all detected AI tools
+npx ai-consultation-mcp --install
+
+# 2. Configure your API key in the Web UI that opens automatically
+# Done! Restart your AI tools and start using
+```
+
+## Installation
+
+### Option 1: npm (Recommended)
+
+The easiest way to install and use the MCP server:
+
+```bash
+# Auto-install to all detected AI tools
+npx ai-consultation-mcp --install
+
+# Or install globally
+npm install -g ai-consultation-mcp
+ai-consultation-mcp --install
+```
+
+### Option 2: From GitHub
+
+Clone the repository and build from source:
+
+```bash
+# Clone the repository
+git clone https://github.com/menesekinci/ai-consultation-mcp.git
+cd ai-consultation-mcp
+
+# Install dependencies
+npm install
+
+# Build
+npm run build
+
+# Run the installer
+npm start -- --install
+```
+
+### Auto-Install Features
+
+The `--install` flag will:
+- Scan for installed AI tools (Claude Code, Cursor, Windsurf, OpenCode, VSCode Copilot, Cline, Continue, Zed, Roo Code)
+- Add MCP configuration to each detected tool
+- Open the Web UI to configure your API key
+- Show which tools need to be restarted
+
+### Supported AI Tools
+
+| Tool | Config Location |
+|------|-----------------|
+| Claude Code | `~/.claude/mcp.json` |
+| Cursor | `~/.cursor/mcp.json` |
+| Windsurf | `~/.codeium/windsurf/mcp_config.json` |
+| OpenCode | `~/.config/opencode/opencode.json` |
+| VSCode Copilot | `~/Library/Application Support/Code/User/mcp.json` |
+| Cline | VSCode globalStorage |
+| Continue | `~/.continue/config.json` |
+| Zed | `~/.config/zed/settings.json` |
+| Roo Code | VSCode globalStorage |
+
+### Manual Installation (Claude Code)
+
+Add to `~/.claude/mcp.json`:
+
+```json
+{
+  "mcpServers": {
+    "agent-consultation": {
+      "command": "npx",
+      "args": ["-y", "ai-consultation-mcp"]
+    }
+  }
+}
+```
+
+## Configuration
+
+### Setting Up API Keys
+
+```bash
+npx ai-consultation-mcp --config
+```
+
+This opens a web UI where you can:
+- Add/update API keys for DeepSeek and OpenAI
+- Test API key validity
+- Change default model
+- View conversation history
+
+### Supported Providers
+
+| Provider | Models | API Key |
+|----------|--------|---------|
+| DeepSeek | `deepseek-reasoner` (default), `deepseek-chat` | [Get API Key](https://platform.deepseek.com/) |
+| OpenAI | `gpt-5.2`, `gpt-5.2-pro` | [Get API Key](https://platform.openai.com/) |
+
+## Usage
+
+Once configured, Claude Code can use the following tools:
+
+### consult_agent
+
+Get a second opinion from another AI model.
+
+```
+Parameters:
+- question (required): The question or problem to get advice on
+- mode (optional): Consultation mode - debug, analyzeCode, reviewArchitecture, validatePlan, explainConcept, general
+- context (optional): Additional context like code snippets or error messages
+```
+
+### continue_conversation
+
+Continue an existing consultation conversation.
+
+```
+Parameters:
+- conversationId (required): The conversation ID from a previous consultation
+- message (required): Your follow-up message
+```
+
+### end_conversation
+
+End an active consultation conversation.
+
+```
+Parameters:
+- conversationId (required): The conversation ID to end
+```
+
+## Example
+
+In Claude Code, you might use it like:
+
+> "Can you consult DeepSeek about this architecture decision? I'm not sure if using a monorepo is the right choice for this microservices setup."
+
+Claude will then call the `consult_agent` tool with your question and provide the response.
+
+## Consultation Modes
+
+| Mode | Description |
+|------|-------------|
+| `debug` | Focus on finding bugs, analyzing errors, and suggesting fixes |
+| `analyzeCode` | Code review focusing on quality, patterns, and improvements |
+| `reviewArchitecture` | Evaluate architectural decisions and suggest alternatives |
+| `validatePlan` | Review implementation plans for completeness and risks |
+| `explainConcept` | Explain technical concepts clearly |
+| `general` | General-purpose consultation |
+
+## Development
+
+```bash
+# Clone the repo
+git clone https://github.com/menesekinci/ai-consultation-mcp.git
+cd ai-consultation-mcp
+
+# Install dependencies
+npm install
+
+# Run in development mode
+npm run dev
+
+# Build for production
+npm run build
+```
+
+## License
+
+MIT

package/dist/api/index.d.ts

@@ -0,0 +1,27 @@
+export interface ConfigUIOptions {
+    port?: number;
+    openBrowser?: boolean;
+}
+/**
+ * Start the configuration UI HTTP server
+ */
+export declare function startConfigUI(options?: ConfigUIOptions): Promise<void>;
+/**
+ * Start the UI server in background mode (for MCP mode)
+ * Does not block and does not open browser automatically
+ */
+export declare function startBackgroundUIServer(port?: number): Promise<boolean>;
+/**
+ * Open the Web UI in browser (only opens once per session)
+ * Spawns a completely separate standalone server process that handles
+ * both server startup and browser opening.
+ */
+export declare function openWebUI(): Promise<void>;
+/**
+ * Check if browser has been opened
+ */
+export declare function isBrowserOpened(): boolean;
+/**
+ * Check if background server is running
+ */
+export declare function isBackgroundServerRunning(): boolean;

package/dist/api/index.js

@@ -0,0 +1,213 @@
+import express from 'express';
+import path from 'path';
+import { fileURLToPath } from 'url';
+import { spawn } from 'child_process';
+import open from 'open';
+import { getConfigManager } from '../config/index.js';
+import { logger } from '../utils/index.js';
+import { configRoutes } from './routes/config.js';
+import { providerRoutes } from './routes/providers.js';
+import chatRoutes from './routes/chat.js';
+import { securityMiddleware } from './middleware/security.js';
+// Get __dirname equivalent in ES modules
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+const DEFAULT_PORT = 3456;
+// Track background UI server state
+let backgroundServerRunning = false;
+let browserOpened = false;
+let backgroundServerPort = DEFAULT_PORT;
+/**
+ * Start the configuration UI HTTP server
+ */
+export async function startConfigUI(options = {}) {
+    const port = options.port ?? DEFAULT_PORT;
+    const shouldOpenBrowser = options.openBrowser ?? true;
+    // Ensure config is loaded
+    const configManager = getConfigManager();
+    await configManager.init();
+    const app = express();
+    // Middleware
+    app.use(express.json());
+    app.use(securityMiddleware);
+    // API routes
+    app.use('/api/config', configRoutes);
+    app.use('/api/providers', providerRoutes);
+    app.use('/api/chat', chatRoutes);
+    // Serve static UI files
+    const uiPath = path.join(__dirname, '../ui');
+    app.use(express.static(uiPath));
+    // Fallback to index.html for SPA-like behavior (Express 5 compatible)
+    app.use((_req, res, next) => {
+        // Only serve index.html for non-API requests that don't have a file extension
+        if (!_req.path.startsWith('/api') && !path.extname(_req.path)) {
+            res.sendFile(path.join(uiPath, 'index.html'));
+        }
+        else {
+            next();
+        }
+    });
+    // Error handling middleware
+    app.use((err, _req, res, _next) => {
+        logger.error('HTTP server error', { error: err.message });
+        res.status(500).json({
+            error: 'Internal server error',
+            message: err.message,
+        });
+    });
+    // CRITICAL: Bind to localhost only for security
+    return new Promise((resolve, reject) => {
+        const server = app.listen(port, '127.0.0.1', () => {
+            const url = `http://127.0.0.1:${port}`;
+            logger.info(`Config UI running at ${url}`);
+            console.log(`
+┌─────────────────────────────────────────────────┐
+│                                                 │
+│   Agent Consultation MCP - Configuration UI    │
+│                                                 │
+│   URL: ${url.padEnd(40)}│
+│                                                 │
+│   Press Ctrl+C to stop                          │
+│                                                 │
+└─────────────────────────────────────────────────┘
+`);
+            // Open browser
+            if (shouldOpenBrowser) {
+                open(url).catch((err) => {
+                    logger.warn('Failed to open browser', { error: err.message });
+                    console.log(`Please open ${url} in your browser`);
+                });
+            }
+            resolve();
+        });
+        server.on('error', (err) => {
+            if (err.code === 'EADDRINUSE') {
+                logger.error(`Port ${port} is already in use`);
+                console.error(`\nError: Port ${port} is already in use.`);
+                console.error(`Try a different port: npx agent-consultation-mcp --config --port ${port + 1}\n`);
+            }
+            reject(err);
+        });
+    });
+}
+/**
+ * Start the UI server in background mode (for MCP mode)
+ * Does not block and does not open browser automatically
+ */
+export async function startBackgroundUIServer(port = DEFAULT_PORT) {
+    if (backgroundServerRunning) {
+        return true;
+    }
+    // Ensure config is loaded
+    const configManager = getConfigManager();
+    await configManager.init();
+    const app = express();
+    // Middleware
+    app.use(express.json());
+    app.use(securityMiddleware);
+    // API routes
+    app.use('/api/config', configRoutes);
+    app.use('/api/providers', providerRoutes);
+    app.use('/api/chat', chatRoutes);
+    // Serve static UI files
+    const uiPath = path.join(__dirname, '../ui');
+    app.use(express.static(uiPath));
+    // Fallback to index.html for SPA-like behavior
+    app.use((_req, res, next) => {
+        if (!_req.path.startsWith('/api') && !path.extname(_req.path)) {
+            res.sendFile(path.join(uiPath, 'index.html'));
+        }
+        else {
+            next();
+        }
+    });
+    // Error handling middleware
+    app.use((err, _req, res, _next) => {
+        logger.error('Background HTTP server error', { error: err.message });
+        res.status(500).json({
+            error: 'Internal server error',
+            message: err.message,
+        });
+    });
+    return new Promise((resolve) => {
+        const server = app.listen(port, '127.0.0.1', () => {
+            backgroundServerRunning = true;
+            backgroundServerPort = port;
+            logger.info(`Background UI server started at http://127.0.0.1:${port}`);
+            resolve(true);
+        });
+        server.on('error', (err) => {
+            if (err.code === 'EADDRINUSE') {
+                // Port is in use, maybe server is already running from another process
+                logger.debug(`Port ${port} already in use, assuming UI server is running`);
+                backgroundServerRunning = true;
+                backgroundServerPort = port;
+                resolve(true);
+            }
+            else {
+                logger.error('Failed to start background UI server', { error: err.message });
+                resolve(false);
+            }
+        });
+    });
+}
+/**
+ * Open the Web UI in browser (only opens once per session)
+ * Spawns a completely separate standalone server process that handles
+ * both server startup and browser opening.
+ */
+export async function openWebUI() {
+    logger.info('openWebUI called', { browserOpened });
+    if (browserOpened) {
+        logger.info('Browser already opened, skipping');
+        return;
+    }
+    // Path to the standalone server script
+    const standaloneServerPath = path.join(__dirname, 'standalone-server.js');
+    logger.info('Spawning standalone server process', { standaloneServerPath });
+    try {
+        // Spawn a completely detached process
+        // This process will start the server AND open the browser
+        const child = spawn(process.execPath, [standaloneServerPath, String(backgroundServerPort)], {
+            detached: true,
+            stdio: 'ignore',
+            windowsHide: true,
+            env: { ...process.env }
+        });
+        // Unref to allow parent (MCP) process to exit independently
+        child.unref();
+        browserOpened = true;
+        backgroundServerRunning = true;
+        logger.info('Standalone server process spawned successfully');
+    }
+    catch (err) {
+        logger.error('Failed to spawn standalone server process', {
+            error: err instanceof Error ? err.message : 'Unknown error'
+        });
+        // Fallback: try to open browser directly (server might already be running)
+        const url = `http://127.0.0.1:${backgroundServerPort}`;
+        try {
+            await open(url, { wait: false });
+            browserOpened = true;
+            logger.info('Browser opened via fallback');
+        }
+        catch (openErr) {
+            logger.error('Fallback browser open also failed', {
+                error: openErr instanceof Error ? openErr.message : 'Unknown error'
+            });
+        }
+    }
+}
+/**
+ * Check if browser has been opened
+ */
+export function isBrowserOpened() {
+    return browserOpened;
+}
+/**
+ * Check if background server is running
+ */
+export function isBackgroundServerRunning() {
+    return backgroundServerRunning;
+}
+//# sourceMappingURL=index.js.map

package/dist/api/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,UAAU,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE9D,yCAAyC;AACzC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAE3C,MAAM,YAAY,GAAG,IAAI,CAAC;AAE1B,mCAAmC;AACnC,IAAI,uBAAuB,GAAG,KAAK,CAAC;AACpC,IAAI,aAAa,GAAG,KAAK,CAAC;AAC1B,IAAI,oBAAoB,GAAG,YAAY,CAAC;AAOxC;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,UAA2B,EAAE;IAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,YAAY,CAAC;IAC1C,MAAM,iBAAiB,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC;IAEtD,0BAA0B;IAC1B,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IACzC,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;IAE3B,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IAEtB,aAAa;IACb,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACxB,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAE5B,aAAa;IACb,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IACrC,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;IAC1C,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAEjC,wBAAwB;IACxB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC7C,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAEhC,sEAAsE;IACtE,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC1B,8EAA8E;QAC9E,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,IAAI,EAAE,CAAC;QACT,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,4BAA4B;IAC5B,GAAG,CAAC,GAAG,CACL,CACE,GAAU,EACV,IAAqB,EACrB,GAAqB,EACrB,KAA2B,EAC3B,EAAE;QACF,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,KAAK,EAAE,uBAAuB;YAC9B,OAAO,EAAE,GAAG,CAAC,OAAO;SACrB,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IAEF,gDAAgD;IAChD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;YAChD,MAAM,GAAG,GAAG,oBAAoB,IAAI,EAAE,CAAC;YACvC,MAAM,CAAC,IAAI,CAAC,wBAAwB,GAAG,EAAE,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC;;;;;WAKP,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;;;;;CAKxB,CAAC,CAAC;YAEG,eAAe;YACf,IAAI,iBAAiB,EAAE,CAAC;gBACtB,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBACtB,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;oBAC9D,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,kBAAkB,CAAC,CAAC;gBACpD,CAAC,CAAC,CAAC;YACL,CAAC;YAED,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;YAChD,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC9B,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,oBAAoB,CAAC,CAAC;gBAC/C,OAAO,CAAC,KAAK,CAAC,iBAAiB,IAAI,qBAAqB,CAAC,CAAC;gBAC1D,OAAO,CAAC,KAAK,CAAC,oEAAoE,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;YAClG,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAAe,YAAY;IACvE,IAAI,uBAAuB,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,0BAA0B;IAC1B,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IACzC,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;IAE3B,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IAEtB,aAAa;IACb,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACxB,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAE5B,aAAa;IACb,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IACrC,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;IAC1C,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAEjC,wBAAwB;IACxB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC7C,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAEhC,+CAA+C;IAC/C,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC1B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,IAAI,EAAE,CAAC;QACT,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,4BAA4B;IAC5B,GAAG,CAAC,GAAG,CACL,CACE,GAAU,EACV,IAAqB,EACrB,GAAqB,EACrB,KAA2B,EAC3B,EAAE;QACF,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACrE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,KAAK,EAAE,uBAAuB;YAC9B,OAAO,EAAE,GAAG,CAAC,OAAO;SACrB,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IAEF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;YAChD,uBAAuB,GAAG,IAAI,CAAC;YAC/B,oBAAoB,GAAG,IAAI,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,oDAAoD,IAAI,EAAE,CAAC,CAAC;YACxE,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;YAChD,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC9B,uEAAuE;gBACvE,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,gDAAgD,CAAC,CAAC;gBAC3E,uBAAuB,GAAG,IAAI,CAAC;gBAC/B,oBAAoB,GAAG,IAAI,CAAC;gBAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC7E,OAAO,CAAC,KAAK,CAAC,CAAC;YACjB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC;IAEnD,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QAChD,OAAO;IACT,CAAC;IAED,uCAAuC;IACvC,MAAM,oBAAoB,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC;IAE1E,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAE5E,IAAI,CAAC;QACH,sCAAsC;QACtC,0DAA0D;QAC1D,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC,EAAE;YAC1F,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,QAAQ;YACf,WAAW,EAAE,IAAI;YACjB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;SACxB,CAAC,CAAC;QAEH,4DAA4D;QAC5D,KAAK,CAAC,KAAK,EAAE,CAAC;QAEd,aAAa,GAAG,IAAI,CAAC;QACrB,uBAAuB,GAAG,IAAI,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE;YACxD,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;SAC5D,CAAC,CAAC;QAEH,2EAA2E;QAC3E,MAAM,GAAG,GAAG,oBAAoB,oBAAoB,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACjC,aAAa,GAAG,IAAI,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,OAAO,EAAE,CAAC;YACjB,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE;gBAChD,KAAK,EAAE,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aACpE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,aAAa,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB;IACvC,OAAO,uBAAuB,CAAC;AACjC,CAAC"}

package/dist/api/middleware/security.d.ts

@@ -0,0 +1,6 @@
+import type { Request, Response, NextFunction } from 'express';
+/**
+ * Security middleware for the config UI HTTP server
+ * Adds security headers to all responses
+ */
+export declare function securityMiddleware(_req: Request, res: Response, next: NextFunction): void;

package/dist/api/middleware/security.js

@@ -0,0 +1,28 @@
+/**
+ * Security middleware for the config UI HTTP server
+ * Adds security headers to all responses
+ */
+export function securityMiddleware(_req, res, next) {
+    // Prevent MIME type sniffing
+    res.setHeader('X-Content-Type-Options', 'nosniff');
+    // Prevent clickjacking
+    res.setHeader('X-Frame-Options', 'DENY');
+    // Enable XSS filter in browsers
+    res.setHeader('X-XSS-Protection', '1; mode=block');
+    // Content Security Policy - allow CDN resources for Alpine.js and Tailwind
+    // Note: 'unsafe-eval' is required for Alpine.js to evaluate expressions
+    // This is acceptable since the UI runs on localhost only
+    res.setHeader('Content-Security-Policy', [
+        "default-src 'self'",
+        "script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.tailwindcss.com https://unpkg.com",
+        "style-src 'self' 'unsafe-inline' https://fonts.googleapis.com",
+        "img-src 'self' data:",
+        "font-src 'self' https://fonts.gstatic.com",
+        "connect-src 'self'",
+    ].join('; '));
+    // Prevent caching of sensitive data
+    res.setHeader('Cache-Control', 'no-store, no-cache, must-revalidate');
+    res.setHeader('Pragma', 'no-cache');
+    next();
+}
+//# sourceMappingURL=security.js.map

package/dist/api/middleware/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../../src/api/middleware/security.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAa,EACb,GAAa,EACb,IAAkB;IAElB,6BAA6B;IAC7B,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;IAEnD,uBAAuB;IACvB,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;IAEzC,gCAAgC;IAChC,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAC;IAEnD,2EAA2E;IAC3E,wEAAwE;IACxE,yDAAyD;IACzD,GAAG,CAAC,SAAS,CACX,yBAAyB,EACzB;QACE,oBAAoB;QACpB,+FAA+F;QAC/F,+DAA+D;QAC/D,sBAAsB;QACtB,2CAA2C;QAC3C,oBAAoB;KACrB,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IAEF,oCAAoC;IACpC,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,qCAAqC,CAAC,CAAC;IACtE,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAEpC,IAAI,EAAE,CAAC;AACT,CAAC"}

package/dist/api/routes/chat.d.ts

@@ -0,0 +1,2 @@
+declare const router: import("express-serve-static-core").Router;
+export default router;

package/dist/api/routes/chat.js

@@ -0,0 +1,78 @@
+import { Router } from 'express';
+import { ConversationManager, conversationManager } from '../../server/conversation.js';
+const router = Router();
+/**
+ * GET /api/chat/history
+ * Returns all conversations (active + archived) from files
+ */
+router.get('/history', (_req, res) => {
+    try {
+        // Load active conversations from both in-memory (runtime) and file
+        const inMemoryActive = conversationManager.listActive();
+        const fileActive = ConversationManager.loadFromFile();
+        // Merge and dedupe by ID (in-memory takes precedence)
+        const activeMap = new Map();
+        [...fileActive, ...inMemoryActive].forEach((conv) => {
+            activeMap.set(conv.id, conv);
+        });
+        const activeConversations = Array.from(activeMap.values());
+        // Load archived conversations and dedupe
+        const archivedRaw = ConversationManager.loadHistoryFromFile();
+        // Get active IDs to exclude from archived (active takes precedence)
+        const activeIds = new Set(activeConversations.map((c) => c.id));
+        // Dedupe archived: keep only first occurrence (newest) and exclude active ones
+        const archivedMap = new Map();
+        archivedRaw.forEach((conv) => {
+            if (!activeIds.has(conv.id) && !archivedMap.has(conv.id)) {
+                archivedMap.set(conv.id, conv);
+            }
+        });
+        const archivedConversations = Array.from(archivedMap.values());
+        // Format active conversations for UI display
+        const active = activeConversations.map((conv) => ({
+            id: conv.id,
+            model: conv.model,
+            messageCount: conv.messages.length,
+            messages: conv.messages.map((msg, idx) => ({
+                id: `${conv.id}-${idx}`,
+                role: msg.role,
+                content: msg.content,
+            })),
+            createdAt: conv.createdAt.toISOString(),
+            lastActivityAt: conv.lastActivityAt.toISOString(),
+            status: 'active',
+        }));
+        // Format archived conversations for UI display
+        const archived = archivedConversations.map((conv) => ({
+            id: conv.id,
+            model: conv.model,
+            messageCount: conv.messages.length,
+            messages: conv.messages.map((msg, idx) => ({
+                id: `${conv.id}-${idx}`,
+                role: msg.role,
+                content: msg.content,
+            })),
+            createdAt: conv.createdAt,
+            lastActivityAt: conv.lastActivityAt,
+            endedAt: conv.endedAt,
+            endReason: conv.endReason,
+            status: 'archived',
+        }));
+        // Combine: active first, then archived (already sorted by newest first)
+        const allConversations = [...active, ...archived];
+        res.json({
+            count: allConversations.length,
+            activeCount: active.length,
+            archivedCount: archived.length,
+            conversations: allConversations,
+        });
+    }
+    catch (error) {
+        res.status(500).json({
+            error: 'Failed to fetch conversation history',
+            message: error instanceof Error ? error.message : 'Unknown error',
+        });
+    }
+});
+export default router;
+//# sourceMappingURL=chat.js.map

package/dist/api/routes/chat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat.js","sourceRoot":"","sources":["../../../src/api/routes/chat.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAA+B,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAgD,MAAM,8BAA8B,CAAC;AAGtI,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;AAExB;;;GAGG;AACH,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;IACtD,IAAI,CAAC;QACH,mEAAmE;QACnE,MAAM,cAAc,GAAG,mBAAmB,CAAC,UAAU,EAAE,CAAC;QACxD,MAAM,UAAU,GAAG,mBAAmB,CAAC,YAAY,EAAE,CAAC;QAEtD,sDAAsD;QACtD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAwB,CAAC;QAClD,CAAC,GAAG,UAAU,EAAE,GAAG,cAAc,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YAClD,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QACH,MAAM,mBAAmB,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;QAE3D,yCAAyC;QACzC,MAAM,WAAW,GAAG,mBAAmB,CAAC,mBAAmB,EAAE,CAAC;QAE9D,oEAAoE;QACpE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAEhE,+EAA+E;QAC/E,MAAM,WAAW,GAAG,IAAI,GAAG,EAAgC,CAAC;QAC5D,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YAC3B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;gBACzD,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACjC,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,qBAAqB,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;QAE/D,6CAA6C;QAC7C,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC,IAAkB,EAAE,EAAE,CAAC,CAAC;YAC9D,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;YAClC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAY,EAAE,GAAW,EAAE,EAAE,CAAC,CAAC;gBAC1D,EAAE,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE;gBACvB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,OAAO,EAAE,GAAG,CAAC,OAAO;aACrB,CAAC,CAAC;YACH,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE;YACvC,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE;YACjD,MAAM,EAAE,QAAiB;SAC1B,CAAC,CAAC,CAAC;QAEJ,+CAA+C;QAC/C,MAAM,QAAQ,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC,IAA0B,EAAE,EAAE,CAAC,CAAC;YAC1E,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;YAClC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAY,EAAE,GAAW,EAAE,EAAE,CAAC,CAAC;gBAC1D,EAAE,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE;gBACvB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,OAAO,EAAE,GAAG,CAAC,OAAO;aACrB,CAAC,CAAC;YACH,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE,UAAmB;SAC5B,CAAC,CAAC,CAAC;QAEJ,wEAAwE;QACxE,MAAM,gBAAgB,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC;QAElD,GAAG,CAAC,IAAI,CAAC;YACP,KAAK,EAAE,gBAAgB,CAAC,MAAM;YAC9B,WAAW,EAAE,MAAM,CAAC,MAAM;YAC1B,aAAa,EAAE,QAAQ,CAAC,MAAM;YAC9B,aAAa,EAAE,gBAAgB;SAChC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,KAAK,EAAE,sCAAsC;YAC7C,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;SAClE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,eAAe,MAAM,CAAC"}

package/dist/api/routes/config.d.ts

@@ -0,0 +1,2 @@
+declare const router: import("express-serve-static-core").Router;
+export { router as configRoutes };