@fudrouter/fsrouter 0.6.116 → 0.6.118

package/dist/lib/oauth/providers.js

@@ -740,7 +740,7 @@ const PROVIDERS = {
     // locally, the user lands on qoder.com/device/selectAccounts in the
     // browser, and we poll openapi.qoder.sh until a `dt-...` token appears.
     requestDeviceCode: async (config) => {
-      const { QoderService } = await import("@/lib/oauth/services/qoder");
+      const { QoderService } = await import('../../lib/oauth/services/qoder.js');
       const flow = new QoderService().initiateDeviceFlow();
       // Match the device_code shape the rest of the OAuthModal expects
       // (device_code, user_code, verification_uri[_complete], interval).
@@ -761,7 +761,7 @@ const PROVIDERS = {
       };
     },
     pollToken: async (config, deviceCode, codeVerifier, extraData) => {
-      const { QoderService } = await import("@/lib/oauth/services/qoder");
+      const { QoderService } = await import('../../lib/oauth/services/qoder.js');
       const svc = new QoderService();
       const nonce = deviceCode || extraData?._qoderNonce;
       const verifier = codeVerifier || extraData?._qoderVerifier;
@@ -1724,7 +1724,7 @@ export async function backfillCodexEmails() {
   if (codexBackfillDone) return;
   codexBackfillDone = true;
   try {
-    const { getProviderConnections, updateProviderConnection } = await import("@/lib/localDb");
+    const { getProviderConnections, updateProviderConnection } = await import('../../lib/localDb.js');
     const connections = await getProviderConnections();
     const targets = connections.filter((c) => {
       if (c.provider !== "codex" || c.authType !== "oauth" || !c.idToken) return false;

package/dist/open-sse/handlers/ttsProviders/index.js

@@ -26,7 +26,7 @@ export function getTtsAdapter(provider) {
 
 // Generic config-driven dispatcher (uses ttsConfig.format)
 export async function synthesizeViaConfig(provider, text, model, credentials) {
-  const { AI_PROVIDERS } = await import("@/shared/constants/providers");
+  const { AI_PROVIDERS } = await import('../../../shared/constants/providers.js');
   const cfg = AI_PROVIDERS[provider]?.ttsConfig;
   if (!cfg) return null;
   const handler = FORMAT_HANDLERS[cfg.format];

package/dist/routes/v1/models/route.js

@@ -400,13 +400,21 @@ export async function OPTIONS() {
  */
 export async function GET(req, res) {
     try {
+        // Require auth: do not publicly expose the model catalog.
+        const authHeader = (req.headers && (req.headers.authorization || req.headers.Authorization)) ||
+            (typeof req.get === "function" ? req.get("authorization") : undefined);
+        if (!authHeader || !/^Bearer\s+/i.test(String(authHeader))) {
+            return res.status(401).json({
+                error: { message: "Authentication required to list models", type: "authentication_error" },
+            });
+        }
         const data = await buildModelsList([LLM_KIND]);
-        return Response.json({ object: "list", data }, {
-            headers: { "Access-Control-Allow-Origin": "*" },
-        });
+        return res.status(200).json({ object: "list", data });
     }
     catch (error) {
         console.log("Error fetching models:", error);
-        return Response.json({ error: { message: error.message, type: "server_error" } }, { status: 500 });
+        return res.status(500).json({
+            error: { message: error.message, type: "server_error" },
+        });
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fudrouter/fsrouter",
-  "version": "0.6.116",
+  "version": "0.6.118",
   "private": false,
   "type": "module",
   "description": "9Router v2 — Express Backend (API, SSE, DB, Auth, MITM)",