wyxrouter 0.4.71

package/src/app/api/cli-tools/cowork-settings/route.js

@@ -0,0 +1,412 @@
+"use server";
+
+import { NextResponse } from "next/server";
+import fs from "fs/promises";
+import path from "path";
+import os from "os";
+import crypto from "crypto";
+import { DEFAULT_PLUGINS, LOCAL_STDIO_PLUGINS, ALLOWED_MCP_COMMANDS, buildManagedMcpServers } from "@/shared/constants/coworkPlugins";
+import { UPDATER_CONFIG } from "@/shared/constants/config";
+import { DATA_DIR } from "@/lib/dataDir";
+import { getConsistentMachineId } from "@/shared/utils/machineId";
+
+const APP_PORT = UPDATER_CONFIG.appPort;
+const CLI_TOKEN_HEADER = "x-9r-cli-token";
+const CLI_TOKEN_SALT = "9r-cli-auth";
+const LOCAL_MCP_PREFIX = `http://localhost:${APP_PORT}/api/mcp/`;
+
+let cachedCliToken = null;
+const getCliToken = async () => {
+  if (!cachedCliToken) cachedCliToken = await getConsistentMachineId(CLI_TOKEN_SALT);
+  return cachedCliToken;
+};
+
+// Inject CLI token header into entries pointing at our local /api/mcp/ bridge.
+const injectAuthHeaders = async (entries) => {
+  const token = await getCliToken();
+  for (const e of entries) {
+    if (typeof e?.url === "string" && e.url.startsWith(LOCAL_MCP_PREFIX)) {
+      e.headers = { ...(e.headers || {}), [CLI_TOKEN_HEADER]: token };
+    }
+  }
+  return entries;
+};
+
+const PROVIDER = "gateway";
+
+// Hardcoded relax-security profile applied on every Apply.
+const SECURITY_RELAX = {
+  coworkEgressAllowedHosts: ["*"],
+  disabledBuiltinTools: [],
+  isLocalDevMcpEnabled: true,
+  isDesktopExtensionEnabled: true,
+  isDesktopExtensionDirectoryEnabled: true,
+  isDesktopExtensionSignatureRequired: false,
+  isClaudeCodeForDesktopEnabled: true,
+  disableEssentialTelemetry: true,
+  disableNonessentialTelemetry: true,
+  disableNonessentialServices: true,
+};
+
+// Tools auto-allow per server via toolPolicy["*"] = "allow" semantics.
+// 3p schema requires explicit tool names; we mark "*" via operonSkipMcpApprovals instead.
+
+const getCandidateRoots = () => {
+  if (os.platform() === "darwin") {
+    const base = path.join(os.homedir(), "Library", "Application Support");
+    return [path.join(base, "Claude-3p"), path.join(base, "Claude")];
+  }
+  if (os.platform() === "win32") {
+    const localApp = process.env.LOCALAPPDATA || path.join(os.homedir(), "AppData", "Local");
+    const roaming = process.env.APPDATA || path.join(os.homedir(), "AppData", "Roaming");
+    return [
+      path.join(localApp, "Claude-3p"),
+      path.join(roaming, "Claude-3p"),
+      path.join(localApp, "Claude"),
+      path.join(roaming, "Claude"),
+    ];
+  }
+  return [
+    path.join(os.homedir(), ".config", "Claude-3p"),
+    path.join(os.homedir(), ".config", "Claude"),
+  ];
+};
+
+const getAppInstallPaths = () => {
+  if (os.platform() === "darwin") {
+    return ["/Applications/Claude.app", path.join(os.homedir(), "Applications", "Claude.app")];
+  }
+  if (os.platform() === "win32") {
+    const localApp = process.env.LOCALAPPDATA || path.join(os.homedir(), "AppData", "Local");
+    const programFiles = process.env["ProgramFiles"] || "C:\\Program Files";
+    return [
+      path.join(localApp, "AnthropicClaude"),
+      path.join(programFiles, "Claude"),
+      path.join(programFiles, "AnthropicClaude"),
+    ];
+  }
+  return [];
+};
+
+const resolveAppRootForRead = async () => {
+  const candidates = getCandidateRoots();
+  for (const dir of candidates) {
+    try {
+      await fs.access(path.join(dir, "configLibrary"));
+      return dir;
+    } catch { /* try next */ }
+  }
+  return candidates[0];
+};
+
+const getWriteRoot = () => getCandidateRoots()[0];
+const getConfigDir = async () => path.join(await resolveAppRootForRead(), "configLibrary");
+const getWriteConfigDir = () => path.join(getWriteRoot(), "configLibrary");
+const getMetaPath = async () => path.join(await getConfigDir(), "_meta.json");
+const getWriteMetaPath = () => path.join(getWriteConfigDir(), "_meta.json");
+
+const get1pRoot = () => {
+  if (os.platform() === "darwin") return path.join(os.homedir(), "Library", "Application Support", "Claude");
+  if (os.platform() === "win32") {
+    const roaming = process.env.APPDATA || path.join(os.homedir(), "AppData", "Roaming");
+    return path.join(roaming, "Claude");
+  }
+  return path.join(os.homedir(), ".config", "Claude");
+};
+
+const get1pConfigPath = () => path.join(get1pRoot(), "claude_desktop_config.json");
+
+const read1pConfig = async () => {
+  try { return JSON.parse(await fs.readFile(get1pConfigPath(), "utf-8")) || {}; }
+  catch (error) {
+    if (error.code === "ENOENT") return {};
+    throw error;
+  }
+};
+
+const write1pConfig = async (cfg) => {
+  await fs.mkdir(get1pRoot(), { recursive: true });
+  await fs.writeFile(get1pConfigPath(), JSON.stringify(cfg, null, 2));
+};
+
+const bootstrapDeploymentMode = async () => {
+  const cfg = await read1pConfig();
+  if (cfg.deploymentMode === "3p") return false;
+  cfg.deploymentMode = "3p";
+  await write1pConfig(cfg);
+  return true;
+};
+
+// Remove any legacy stdio entries previously written into 1p claude_desktop_config.json.
+const cleanup1pLegacy = async () => {
+  const cfg = await read1pConfig();
+  if (!cfg.mcpServers || typeof cfg.mcpServers !== "object") return;
+  const managedNames = new Set(LOCAL_STDIO_PLUGINS.map((p) => p.name));
+  for (const k of Object.keys(cfg.mcpServers)) {
+    if (managedNames.has(k)) delete cfg.mcpServers[k];
+  }
+  if (Object.keys(cfg.mcpServers).length === 0) delete cfg.mcpServers;
+  await write1pConfig(cfg);
+};
+
+// Build SSE bridge entries pointing at this app's inline /api/mcp/{name} endpoint.
+const buildLocalBridgeEntries = (localPluginNames) => {
+  const names = Array.isArray(localPluginNames) ? localPluginNames : [];
+  const out = [];
+  for (const n of names) {
+    const def = LOCAL_STDIO_PLUGINS.find((p) => p.name === n);
+    if (!def) continue;
+    const entry = {
+      name: def.name,
+      url: `http://localhost:${APP_PORT}/api/mcp/${def.name}/sse`,
+      transport: "sse",
+    };
+    if (Array.isArray(def.toolNames) && def.toolNames.length > 0) {
+      const prefix = `${def.name}-`;
+      const policy = {};
+      for (const t of def.toolNames) {
+        policy[t] = "allow";
+        policy[`${prefix}${t}`] = "allow";
+      }
+      entry.toolPolicy = policy;
+    }
+    out.push(entry);
+  }
+  return out;
+};
+
+// Build entries for user-defined custom MCP plugins (URL or stdio command).
+const buildCustomEntries = (customPlugins) => {
+  if (!Array.isArray(customPlugins)) return [];
+  const out = [];
+  for (const p of customPlugins) {
+    if (!p?.name) continue;
+    if (p.url) {
+      out.push({ name: p.name, url: p.url, transport: p.transport || "sse", custom: true });
+    } else if (p.command) {
+      out.push({
+        name: p.name,
+        url: `http://localhost:${APP_PORT}/api/mcp/${encodeURIComponent(p.name)}/sse`,
+        transport: "sse",
+        custom: true,
+      });
+    }
+  }
+  return out;
+};
+
+const checkInstalled = async () => {
+  for (const dir of [...getCandidateRoots(), ...getAppInstallPaths()]) {
+    try { await fs.access(dir); return true; } catch { /* try next */ }
+  }
+  return false;
+};
+
+const readJson = async (filePath) => {
+  try { return JSON.parse(await fs.readFile(filePath, "utf-8")); }
+  catch (error) {
+    if (error.code === "ENOENT") return null;
+    throw error;
+  }
+};
+
+const ensureMeta = async () => {
+  const writeMetaPath = getWriteMetaPath();
+  let meta = await readJson(writeMetaPath);
+  if (!meta || !meta.appliedId) {
+    const existingRead = await readJson(await getMetaPath());
+    if (existingRead?.appliedId) {
+      meta = existingRead;
+    } else {
+      const newId = crypto.randomUUID();
+      meta = { appliedId: newId, entries: [{ id: newId, name: "Default" }] };
+    }
+    await fs.mkdir(getWriteConfigDir(), { recursive: true });
+    await fs.writeFile(writeMetaPath, JSON.stringify(meta, null, 2));
+  }
+  return meta;
+};
+
+// Auto-skip approvals for every managed server (no per-tool prompts).
+async function writeSkipApprovals(managedServers) {
+  const cfgPath = path.join(getWriteRoot(), "config.json");
+  let cfg = {};
+  try { cfg = JSON.parse(await fs.readFile(cfgPath, "utf-8")) || {}; }
+  catch (e) { if (e.code !== "ENOENT") return { error: e.code }; }
+  const skip = {};
+  for (const srv of managedServers) {
+    if (srv?.name) skip[srv.name] = true;
+  }
+  cfg.operonSkipMcpApprovals = skip;
+  await fs.mkdir(getWriteRoot(), { recursive: true });
+  await fs.writeFile(cfgPath, JSON.stringify(cfg, null, 2));
+  return { written: Object.keys(skip).length };
+}
+
+export async function GET() {
+  try {
+    const installed = await checkInstalled();
+    if (!installed) {
+      return NextResponse.json({ installed: false, config: null, message: "Claude Desktop (Cowork mode) not detected" });
+    }
+    const meta = await readJson(await getMetaPath());
+    const appliedId = meta?.appliedId || null;
+    const configDir = await getConfigDir();
+    const configPath = appliedId ? path.join(configDir, `${appliedId}.json`) : null;
+    const config = configPath ? await readJson(configPath) : null;
+
+    const baseUrl = config?.inferenceGatewayBaseUrl || null;
+    const models = Array.isArray(config?.inferenceModels)
+      ? config.inferenceModels.map((m) => (typeof m === "string" ? m : m?.name)).filter(Boolean)
+      : [];
+    const managedMcp = Array.isArray(config?.managedMcpServers) ? config.managedMcpServers : [];
+    const has9Router = !!(config?.inferenceProvider === PROVIDER && baseUrl);
+
+    // Active local plugins = managedMcp entries whose URL points at our inline bridge.
+    const stdioNames = new Set(LOCAL_STDIO_PLUGINS.map((p) => p.name));
+    const activeLocalNames = managedMcp
+      .filter((m) => stdioNames.has(m.name) && typeof m.url === "string" && m.url.includes("/api/mcp/"))
+      .map((m) => m.name);
+
+    // Custom plugins = bridge entries not in preset LOCAL_STDIO_PLUGINS (custom:true or unknown name).
+    const activeCustomPlugins = managedMcp
+      .filter((m) => m.custom || (!stdioNames.has(m.name) && typeof m.url === "string" && m.url.includes("/api/mcp/")))
+      .map((m) => ({ name: m.name, url: m.url, transport: m.transport, custom: true }));
+
+    return NextResponse.json({
+      installed: true,
+      config,
+      has9Router,
+      configPath,
+      cowork: {
+        appliedId,
+        baseUrl,
+        models,
+        provider: config?.inferenceProvider || null,
+        plugins: managedMcp.filter((m) => !m.custom && !(stdioNames.has(m.name) && typeof m.url === "string" && m.url.includes("/api/mcp/"))).map((m) => {
+          // Strip "{name}-" prefix and dedupe so re-applies don't multiply entries.
+          const keys = m.toolPolicy ? Object.keys(m.toolPolicy) : [];
+          const prefix = `${m.name}-`;
+          const bare = new Set();
+          for (const k of keys) {
+            let t = k;
+            while (t.startsWith(prefix)) t = t.slice(prefix.length);
+            bare.add(t);
+          }
+          // If plugin matches a default, prefer default toolNames (curated/correct).
+          const def = DEFAULT_PLUGINS.find((d) => d.name === m.name);
+          const toolNames = def && Array.isArray(def.toolNames) ? def.toolNames : Array.from(bare);
+          return { name: m.name, url: m.url, transport: m.transport, oauth: !!m.oauth, toolNames };
+        }),
+        localPlugins: activeLocalNames,
+        customPlugins: activeCustomPlugins,
+      },
+      defaultPlugins: DEFAULT_PLUGINS,
+      localStdioPlugins: LOCAL_STDIO_PLUGINS,
+    });
+  } catch (error) {
+    console.log("Error reading cowork settings:", error);
+    return NextResponse.json({ error: "Failed to read cowork settings" }, { status: 500 });
+  }
+}
+
+export async function POST(request) {
+  // Cowork disabled: spawns arbitrary processes (RCE risk).
+  return NextResponse.json({ error: "Cowork is disabled" }, { status: 403 });
+  try {
+    const { baseUrl, apiKey, models, plugins, localPlugins, customPlugins } = await request.json();
+
+    if (!baseUrl || !apiKey) {
+      return NextResponse.json({ error: "baseUrl and apiKey are required" }, { status: 400 });
+    }
+    const modelsArray = Array.isArray(models) ? models.filter((m) => typeof m === "string" && m.trim()) : [];
+    if (modelsArray.length === 0) {
+      return NextResponse.json({ error: "At least one model is required" }, { status: 400 });
+    }
+
+    // Respect empty array (user toggled all off); fallback to defaults only when undefined.
+    const pluginsArray = Array.isArray(plugins) ? plugins : DEFAULT_PLUGINS;
+    const localPluginNames = Array.isArray(localPlugins) ? localPlugins : [];
+    const customPluginsArray = Array.isArray(customPlugins) ? customPlugins : [];
+
+    // Register custom stdio plugins into bridge + persist for restart survival.
+    if (customPluginsArray.length > 0) {
+      const { registerCustomPlugin } = require("@/lib/mcp/stdioSseBridge");
+      const stdioCustoms = customPluginsArray
+        .filter((p) => p && typeof p.command === "string" && p.command.trim())
+        .filter((p) => ALLOWED_MCP_COMMANDS.has(path.basename(p.command)))
+        .map((p) => ({
+          name: String(p.name || "").replace(/[^a-zA-Z0-9_-]/g, "").slice(0, 64),
+          command: p.command,
+          args: Array.isArray(p.args) ? p.args.map(String) : [],
+        }))
+        .filter((p) => p.name);
+      for (const p of stdioCustoms) {
+        try { registerCustomPlugin(p); } catch { /* skip invalid */ }
+      }
+      try {
+        const dir = path.join(DATA_DIR, "mcp");
+        await fs.mkdir(dir, { recursive: true });
+        await fs.writeFile(path.join(dir, "customPlugins.json"), JSON.stringify(stdioCustoms, null, 2));
+      } catch { /* ignore */ }
+    }
+
+    const bridgeEntries = await injectAuthHeaders(buildLocalBridgeEntries(localPluginNames));
+    const customEntries = await injectAuthHeaders(buildCustomEntries(customPluginsArray));
+    const managedMcpServers = [...buildManagedMcpServers(pluginsArray), ...bridgeEntries, ...customEntries];
+
+    const bootstrapped = await bootstrapDeploymentMode();
+    const meta = await ensureMeta();
+    const configPath = path.join(getWriteConfigDir(), `${meta.appliedId}.json`);
+
+    const newConfig = {
+      ...SECURITY_RELAX,
+      inferenceProvider: PROVIDER,
+      inferenceGatewayBaseUrl: baseUrl,
+      inferenceGatewayApiKey: apiKey,
+      inferenceModels: modelsArray.map((name) => ({ name })),
+    };
+    if (managedMcpServers.length > 0) newConfig.managedMcpServers = managedMcpServers;
+
+    await fs.writeFile(configPath, JSON.stringify(newConfig, null, 2));
+
+    let skipResult = null;
+    try { skipResult = await writeSkipApprovals(managedMcpServers); } catch (e) { skipResult = { error: e.message }; }
+
+    // Best-effort cleanup of legacy 1p mcpServers entries written by earlier versions.
+    let localMcpResult = { applied: localPluginNames, via: "3p-sse-bridge" };
+    try { await cleanup1pLegacy(); } catch { /* ignore */ }
+
+    return NextResponse.json({
+      success: true,
+      bootstrapped,
+      message: bootstrapped
+        ? "Cowork enabled (3p mode set). Quit & reopen Claude Desktop."
+        : "Cowork settings applied. Quit & reopen Claude Desktop.",
+      configPath,
+      skipApprovals: skipResult,
+      localMcp: localMcpResult,
+    });
+  } catch (error) {
+    console.log("Error applying cowork settings:", error);
+    return NextResponse.json({ error: "Failed to apply cowork settings" }, { status: 500 });
+  }
+}
+
+export async function DELETE() {
+  try {
+    const meta = await readJson(await getMetaPath());
+    if (!meta?.appliedId) {
+      return NextResponse.json({ success: true, message: "No active config to reset" });
+    }
+    const configPath = path.join(await getConfigDir(), `${meta.appliedId}.json`);
+    try { await fs.writeFile(configPath, JSON.stringify({}, null, 2)); }
+    catch (error) { if (error.code !== "ENOENT") throw error; }
+    try { await writeSkipApprovals([]); } catch { /* ignore */ }
+    try { await cleanup1pLegacy(); } catch { /* ignore */ }
+    return NextResponse.json({ success: true, message: "Cowork config reset" });
+  } catch (error) {
+    console.log("Error resetting cowork settings:", error);
+    return NextResponse.json({ error: "Failed to reset cowork settings" }, { status: 500 });
+  }
+}

package/src/app/api/cli-tools/deepseek-tui-settings/route.js

@@ -0,0 +1,164 @@
+"use server";
+
+import { NextResponse } from "next/server";
+import { exec } from "child_process";
+import { promisify } from "util";
+import fs from "fs/promises";
+import path from "path";
+import os from "os";
+
+const execAsync = promisify(exec);
+
+const PROVIDER_NAME = "9router";
+
+const getDeepSeekDir = () => path.join(os.homedir(), ".deepseek");
+const getDeepSeekConfigPath = () => path.join(getDeepSeekDir(), "config.toml");
+
+// Simple TOML parser for key = "value" and [section] patterns
+const parseToml = (content) => {
+    const result = {};
+    let currentSection = result;
+
+    const lines = content.split(/\r?\n/);
+    for (const line of lines) {
+        const trimmed = line.trim();
+        // Skip empty lines and comments
+        if (!trimmed || trimmed.startsWith("#")) continue;
+
+        // Section header: [section] or [section.subsection]
+        const sectionMatch = trimmed.match(/^\[([^\]]+)\]$/);
+        if (sectionMatch) {
+            const sectionName = sectionMatch[1];
+            if (!result[sectionName]) result[sectionName] = {};
+            currentSection = result[sectionName];
+            continue;
+        }
+
+        // Key = "value" or key = value
+        const keyValueMatch = trimmed.match(/^(\w+)\s*=\s*"([^"]*)"$/);
+        if (keyValueMatch) {
+            currentSection[keyValueMatch[1]] = keyValueMatch[2];
+            continue;
+        }
+
+        // Key = value (unquoted)
+        const unquotedMatch = trimmed.match(/^(\w+)\s*=\s*(.+)$/);
+        if (unquotedMatch) {
+            currentSection[unquotedMatch[1]] = unquotedMatch[2].trim();
+        }
+    }
+
+    return result;
+};
+
+// Build TOML config for 9Router (openai provider mode)
+const build9RouterConfig = (baseUrl, apiKey, model) => {
+    const normalizedBaseUrl = baseUrl.endsWith("/v1") ? baseUrl : `${baseUrl}/v1`;
+    return `provider = "openai"
+
+[providers.openai]
+base_url = "${normalizedBaseUrl}"
+api_key = "${apiKey}"
+model = "${model}"
+`;
+};
+
+// Default DeepSeek config (reset state)
+const DEFAULT_CONFIG = `provider = "deepseek"
+`;
+
+const checkDeepSeekInstalled = async () => {
+    try {
+        const isWindows = os.platform() === "win32";
+        const command = isWindows ? "where deepseek" : "which deepseek";
+        await execAsync(command, { windowsHide: true });
+        return true;
+    } catch {
+        try {
+            await fs.access(getDeepSeekConfigPath());
+            return true;
+        } catch {
+            return false;
+        }
+    }
+};
+
+const readConfigToml = async () => {
+    try {
+        return await fs.readFile(getDeepSeekConfigPath(), "utf-8");
+    } catch (error) {
+        if (error.code === "ENOENT") return "";
+        throw error;
+    }
+};
+
+// Detect 9Router by checking if provider is "openai" and base_url points to localhost/127.0.0.1
+const has9RouterConfig = (config) => {
+    if (!config) return false;
+    const provider = config.provider;
+    if (provider !== "openai") return false;
+    const openaiSection = config["providers.openai"];
+    if (!openaiSection?.base_url) return false;
+    return /localhost|127\.0\.0\.1|0\.0\.0\.0/.test(openaiSection.base_url);
+};
+
+export async function GET() {
+    try {
+        const installed = await checkDeepSeekInstalled();
+        if (!installed) {
+            return NextResponse.json({ installed: false, settings: null, message: "DeepSeek TUI is not installed" });
+        }
+        const toml = await readConfigToml();
+        const config = parseToml(toml);
+        return NextResponse.json({
+            installed: true,
+            settings: config,
+            has9Router: has9RouterConfig(config),
+            configPath: getDeepSeekConfigPath(),
+        });
+    } catch (error) {
+        console.log("Error checking deepseek-tui settings:", error);
+        return NextResponse.json({ error: "Failed to check deepseek-tui settings" }, { status: 500 });
+    }
+}
+
+export async function POST(request) {
+    try {
+        const { baseUrl, apiKey, model } = await request.json();
+        if (!baseUrl || !model) {
+            return NextResponse.json({ error: "baseUrl and model are required" }, { status: 400 });
+        }
+
+        const dir = getDeepSeekDir();
+        await fs.mkdir(dir, { recursive: true });
+
+        const newConfig = build9RouterConfig(baseUrl, apiKey || "sk_9router", model);
+        await fs.writeFile(getDeepSeekConfigPath(), newConfig);
+
+        return NextResponse.json({
+            success: true,
+            message: "DeepSeek TUI settings applied successfully!",
+            configPath: getDeepSeekConfigPath(),
+        });
+    } catch (error) {
+        console.log("Error updating deepseek-tui settings:", error);
+        return NextResponse.json({ error: "Failed to update deepseek-tui settings" }, { status: 500 });
+    }
+}
+
+export async function DELETE() {
+    try {
+        const configPath = getDeepSeekConfigPath();
+        try {
+            await fs.access(configPath);
+        } catch {
+            return NextResponse.json({ success: true, message: "No config file to reset" });
+        }
+
+        await fs.writeFile(configPath, DEFAULT_CONFIG);
+        return NextResponse.json({ success: true, message: `${PROVIDER_NAME} config reset to DeepSeek defaults` });
+    } catch (error) {
+        console.log("Error resetting deepseek-tui settings:", error);
+        return NextResponse.json({ error: "Failed to reset deepseek-tui settings" }, { status: 500 });
+    }
+}