@shawnstack/quickforge 1.7.3 → 1.7.5

package/server/network-proxy.mjs

@@ -4,7 +4,7 @@ import { SocksClient } from 'socks'
 import { atomicUpdate, readStore } from './storage.mjs'
 
 const SETTINGS_KEY = 'network-proxy'
-const VALID_MODES = new Set(['direct', 'system', 'manual'])
+const VALID_MODES = new Set(['direct', 'system', 'manual', 'pac'])
 const PROXY_ENV_KEYS = [
   'HTTP_PROXY', 'HTTPS_PROXY', 'ALL_PROXY', 'NO_PROXY',
   'http_proxy', 'https_proxy', 'all_proxy', 'no_proxy',
@@ -60,6 +60,40 @@ export function validateManualProxyUrl(value) {
   return `${url.protocol}//${url.host}`
 }
 
+export function validatePacUrl(value) {
+  let url
+  try {
+    url = new URL(String(value || '').trim())
+  } catch {
+    const error = new Error('PAC URL must be a valid HTTP or HTTPS URL')
+    error.statusCode = 400
+    throw error
+  }
+
+  if (url.protocol !== 'http:' && url.protocol !== 'https:') {
+    const error = new Error('Only HTTP and HTTPS PAC URLs are supported')
+    error.statusCode = 400
+    throw error
+  }
+  if (!url.hostname) {
+    const error = new Error('PAC URL must include a host')
+    error.statusCode = 400
+    throw error
+  }
+  if (url.username || url.password) {
+    const error = new Error('Credentials are not supported in the PAC URL')
+    error.statusCode = 400
+    throw error
+  }
+  if (url.hash) {
+    const error = new Error('PAC URL cannot include a fragment')
+    error.statusCode = 400
+    throw error
+  }
+
+  return url.href
+}
+
 function isLoopbackUrl(input) {
   let url
   try {
@@ -251,9 +285,27 @@ class SystemProxyDispatcher extends Dispatcher {
   }
 }
 
+class UnsupportedProxyDispatcher extends Dispatcher {
+  constructor(message) {
+    super()
+    this.error = new Error(message)
+    this.error.code = 'QUICKFORGE_PROXY_UNSUPPORTED'
+  }
+
+  dispatch(_options, handler) {
+    queueMicrotask(() => handler.onResponseError?.(null, this.error))
+    return true
+  }
+
+  async close() {}
+
+  async destroy() {}
+}
+
 async function createNetworkDispatcher(config) {
   if (config.mode === 'manual') return new ProxyAgent(config.proxyUrl)
   if (config.mode === 'system') return new SystemProxyDispatcher(await getNativeResolver())
+  if (config.mode === 'pac') return new UnsupportedProxyDispatcher('Custom PAC URLs are not supported by this runtime')
   return new Agent()
 }
 
@@ -291,6 +343,7 @@ async function persistConfig(config) {
 async function applyConfig(config) {
   const normalized = normalizeNetworkProxyConfig(config)
   if (normalized.mode === 'manual') normalized.proxyUrl = validateManualProxyUrl(normalized.proxyUrl)
+  if (normalized.mode === 'pac') normalized.proxyUrl = validatePacUrl(normalized.proxyUrl)
 
   if (hostRuntime) await hostRuntime.apply(normalized)
   else await replaceNetworkDispatcher(normalized)
@@ -310,6 +363,7 @@ async function nativeStatus() {
       source,
       features: {
         pac: config.configuredPac?.state !== 'unsupported',
+        pacUrl: false,
         wpad: config.wpadDns?.state !== 'unsupported' || config.wpadDhcp?.state !== 'unsupported',
         httpProxy: true,
         httpsProxy: true,
@@ -320,7 +374,7 @@ async function nativeStatus() {
     return {
       supported: false,
       source: 'none',
-      features: { pac: false, wpad: false, httpProxy: false, httpsProxy: false, socks: false },
+      features: { pac: false, pacUrl: false, wpad: false, httpProxy: false, httpsProxy: false, socks: false },
       error: error instanceof Error ? error.message : String(error),
     }
   }
@@ -331,7 +385,9 @@ export async function getNetworkProxyStatus() {
     ? await hostRuntime.getStatus()
     : await nativeStatus()
   const configuredMode = currentConfig.mode
-  const modeSupported = configuredMode !== 'system' || runtimeStatus.supported
+  const modeSupported = configuredMode === 'system'
+    ? runtimeStatus.supported
+    : configuredMode !== 'pac' || runtimeStatus.features?.pacUrl === true
   return {
     configuredMode,
     effectiveMode: modeSupported ? configuredMode : 'unsupported',
@@ -361,6 +417,15 @@ export async function updateNetworkProxyConfig(value) {
   const previous = currentConfig
   const next = normalizeNetworkProxyConfig(value)
   if (next.mode === 'manual') next.proxyUrl = validateManualProxyUrl(next.proxyUrl)
+  if (next.mode === 'pac') {
+    next.proxyUrl = validatePacUrl(next.proxyUrl)
+    const runtimeStatus = hostRuntime ? await hostRuntime.getStatus() : await nativeStatus()
+    if (runtimeStatus.features?.pacUrl !== true) {
+      const error = new Error('Custom PAC URLs are not supported by this runtime')
+      error.statusCode = 400
+      throw error
+    }
+  }
 
   await applyConfig(next)
   try {

package/server/plugins/registry.mjs

@@ -16,6 +16,13 @@ const __dirname = path.dirname(fileURLToPath(import.meta.url))
 const bundledPluginDir = path.resolve(__dirname, '..', '..', 'plugins')
 const globalPluginDir = path.join(dataDir, 'plugins')
 const legacyGlobalPluginDir = path.join(os.homedir(), '.agents', 'plugins')
+const PLUGIN_STORE_SCHEMA_VERSION = 2
+const LEGACY_BUNDLED_PLUGIN_NAMES = {
+  'openai-documents': 'documents',
+  'openai-presentations': 'presentations',
+  'openai-spreadsheets': 'spreadsheets',
+}
+export const DEFAULT_PLUGIN_TOOL_TIMEOUT_MS = 2 * 60 * 1000
 let cachedCatalog = null
 let cachedCatalogKey = null
 let catalogDirty = false
@@ -29,6 +36,56 @@ function isPlainObject(value) {
   return Boolean(value && typeof value === 'object' && !Array.isArray(value))
 }
 
+function withTimeout(promise, timeoutMs, message, onTimeout, signal) {
+  let timer
+  let timedOut = false
+  let abortHandler
+  const guardedPromise = promise.catch((error) => {
+    if (timedOut) return new Promise(() => {})
+    throw error
+  })
+  const timeoutPromise = new Promise((_, reject) => {
+    const rejectForAbort = () => {
+      timedOut = true
+      reject(new Error('Plugin tool call aborted'))
+    }
+    if (signal?.aborted) {
+      rejectForAbort()
+      return
+    }
+    if (signal) {
+      abortHandler = rejectForAbort
+      signal.addEventListener('abort', abortHandler, { once: true })
+    }
+    timer = setTimeout(() => {
+      timedOut = true
+      try {
+        onTimeout?.()
+      } finally {
+        reject(new Error(message))
+      }
+    }, timeoutMs)
+  })
+  return Promise.race([guardedPromise, timeoutPromise]).finally(() => {
+    clearTimeout(timer)
+    if (abortHandler) signal?.removeEventListener('abort', abortHandler)
+  })
+}
+
+function combineAbortSignals(parentSignal, timeoutSignal) {
+  if (!parentSignal) return timeoutSignal
+  if (typeof AbortSignal.any === 'function') return AbortSignal.any([parentSignal, timeoutSignal])
+
+  const controller = new AbortController()
+  const abort = () => controller.abort()
+  if (parentSignal.aborted || timeoutSignal.aborted) controller.abort()
+  else {
+    parentSignal.addEventListener('abort', abort, { once: true })
+    timeoutSignal.addEventListener('abort', abort, { once: true })
+  }
+  return controller.signal
+}
+
 async function exists(filePath) {
   try {
     await fs.access(filePath)
@@ -57,13 +114,31 @@ async function listPluginDirs(root) {
 function normalizePluginStore(store) {
   const source = isPlainObject(store) ? store : {}
   return {
-    enabled: isPlainObject(source.enabled) ? source.enabled : {},
-    config: isPlainObject(source.config) ? source.config : {},
+    schemaVersion: Number.isInteger(source.schemaVersion) ? source.schemaVersion : 1,
+    enabled: isPlainObject(source.enabled) ? { ...source.enabled } : {},
+    config: isPlainObject(source.config) ? { ...source.config } : {},
   }
 }
 
+function migratePluginStore(store) {
+  const next = normalizePluginStore(store)
+  if (next.schemaVersion >= PLUGIN_STORE_SCHEMA_VERSION) return { store: next, changed: false }
+
+  for (const [legacyName, name] of Object.entries(LEGACY_BUNDLED_PLUGIN_NAMES)) {
+    if (!(name in next.enabled) && legacyName in next.enabled) next.enabled[name] = next.enabled[legacyName]
+    if (!(name in next.config) && legacyName in next.config) next.config[name] = next.config[legacyName]
+    delete next.enabled[legacyName]
+    delete next.config[legacyName]
+  }
+  next.schemaVersion = PLUGIN_STORE_SCHEMA_VERSION
+  return { store: next, changed: true }
+}
+
 async function readPluginStore() {
-  return normalizePluginStore(await readStore('plugins'))
+  const current = await readStore('plugins')
+  const migration = migratePluginStore(current)
+  if (!migration.changed) return migration.store
+  return atomicUpdate('plugins', (store) => migratePluginStore(store).store)
 }
 
 function contributionSummary(contribution) {
@@ -241,7 +316,7 @@ export async function getPluginStatus(projectContext = null) {
 
 export async function setPluginEnabled(name, enabled) {
   await atomicUpdate('plugins', (store) => {
-    const next = normalizePluginStore(store)
+    const next = migratePluginStore(store).store
     next.enabled[name] = enabled === true
     return next
   })
@@ -250,7 +325,7 @@ export async function setPluginEnabled(name, enabled) {
 
 export async function setPluginConfig(name, config) {
   await atomicUpdate('plugins', (store) => {
-    const next = normalizePluginStore(store)
+    const next = migratePluginStore(store).store
     next.config[name] = isPlainObject(config) ? config : {}
     return next
   })
@@ -308,10 +383,19 @@ export async function callPluginTool(toolName, params = {}, toolContext = {}) {
     throw error
   }
 
-  const result = await handler.callTool(tool.name, params, {
-    ...toolContext,
-    plugin: { name: plugin.name, dir: plugin.dir, config: plugin.config },
-  })
+  const timeoutController = new AbortController()
+  const signal = combineAbortSignals(toolContext.signal, timeoutController.signal)
+  const result = await withTimeout(
+    Promise.resolve().then(() => handler.callTool(tool.name, params, {
+      ...toolContext,
+      signal,
+      plugin: { name: plugin.name, dir: plugin.dir, config: plugin.config },
+    })),
+    DEFAULT_PLUGIN_TOOL_TIMEOUT_MS,
+    `Plugin tool ${toolName} timed out after ${DEFAULT_PLUGIN_TOOL_TIMEOUT_MS}ms`,
+    () => timeoutController.abort(),
+    toolContext.signal,
+  )
 
   return {
     isError: Boolean(result.isError),

package/server/public-api.mjs

@@ -1,6 +1,7 @@
 import { spawn } from 'node:child_process'
 import path from 'node:path'
 import { fileURLToPath, pathToFileURL } from 'node:url'
+import { createNodeProcessEnv } from './utils/process-env.mjs'
 
 const __filename = fileURLToPath(import.meta.url)
 const __dirname = path.dirname(__filename)
@@ -83,13 +84,16 @@ function buildEnv(options = {}) {
   if (options.workspaceDir) env.QUICKFORGE_WORKSPACE_DIR = path.resolve(options.workspaceDir)
   if (options.vitePort) env.QUICKFORGE_VITE_PORT = String(options.vitePort)
   if (options.terminal === false) env.QUICKFORGE_TERMINAL = '0'
-  if (process.versions.electron) env.ELECTRON_RUN_AS_NODE = '1'
   if (options.allowRemote || shareLan) env.QUICKFORGE_ALLOW_REMOTE = '1'
+  delete env.ELECTRON_RUN_AS_NODE
+  delete env.ATOM_SHELL_INTERNAL_RUN_AS_NODE
 
   return env
 }
 
 export function prepareQuickForgeEnv(options = {}) {
+  delete process.env.ELECTRON_RUN_AS_NODE
+  delete process.env.ATOM_SHELL_INTERNAL_RUN_AS_NODE
   Object.assign(process.env, buildEnv(options))
 }
 
@@ -191,7 +195,7 @@ export async function startQuickForge(options = {}) {
     stdio: options.stdio || 'ignore',
     windowsHide: true,
     shell: false,
-    env: buildEnv(options),
+    env: createNodeProcessEnv(buildEnv(options)),
   })
 
   let exitInfo = null

package/server/routes/agent-profiles.mjs

@@ -1,8 +1,38 @@
-import { streamSimple } from '@earendil-works/pi-ai/compat'
+import { streamSimpleWithAiHttpLogging } from '../ai-http-logger.mjs'
 import { DEFAULT_AI_MAX_RETRIES } from '../ai-provider-options.mjs'
 import { sendJson, readJsonBody, decodeSegment } from '../utils/response.mjs'
 import { readStore } from '../storage.mjs'
 import { logger } from '../utils/logger.mjs'
+import { resolveModelBinding } from '../model-catalog.mjs'
+
+function profileModelReference(model) {
+  if (!model || model.mode !== 'fixed') return null
+  if (model.source === 'cloud') return { version: 1, source: 'cloud', catalogId: model.catalogId || model.modelId }
+  if (model.source === 'custom') return { version: 1, source: 'custom', providerId: model.providerId, modelId: model.modelId }
+  return {
+    version: 1,
+    source: 'legacy-custom',
+    provider: model.provider,
+    modelId: model.modelId,
+    ...(model.api ? { api: model.api } : {}),
+    ...(model.baseUrl ? { baseUrl: model.baseUrl } : {}),
+  }
+}
+
+async function canonicalizeProfileModel(body, current, context) {
+  if (!body || !Object.prototype.hasOwnProperty.call(body, 'model')) return body
+  const model = body.model
+  if (!model || model.mode !== 'fixed') return body
+  if (current?.model && JSON.stringify(current.model) === JSON.stringify(model)) return body
+  const binding = await resolveModelBinding({ modelRef: profileModelReference(model) }, { context })
+  const ref = binding.modelRef
+  return {
+    ...body,
+    model: ref.source === 'cloud'
+      ? { mode: 'fixed', source: 'cloud', catalogId: ref.catalogId }
+      : { mode: 'fixed', source: 'custom', providerId: ref.providerId, modelId: ref.modelId },
+  }
+}
 import {
   agentProfileSnapshot,
   createCustomAgentProfile,
@@ -65,10 +95,14 @@ function normalizeGeneratedAgentProfile(value) {
   return { name, label, description, systemPrompt }
 }
 
-async function generateAgentProfileWithAi(instruction, model, thinkingLevel = 'off') {
+async function generateAgentProfileWithAi(instruction, modelInput, thinkingLevel = 'off', context = {}) {
   const text = String(instruction || '').trim()
   if (!text) throw requestError('Please describe the agent you want to create')
-  if (!model) throw requestError('Please configure a default model first')
+  if (!modelInput) throw requestError('Please configure a default model first')
+  const { model } = await resolveModelBinding(
+    modelInput?.modelRef || modelInput?.model ? modelInput : { model: modelInput },
+    { context, legacySnapshot: modelInput?.model || modelInput },
+  )
 
   const systemPrompt = `You are a QuickForge Agent Profile generator.
 Generate only the basic definition fields for a custom Agent Profile from the user's request.
@@ -90,7 +124,7 @@ Rules:
 - If the user requests Chinese, write label, description, and systemPrompt in Chinese; otherwise match the user's language.`
 
   try {
-    const stream = streamSimple(
+    const stream = streamSimpleWithAiHttpLogging(
       model,
       {
         systemPrompt,
@@ -120,7 +154,7 @@ Rules:
   }
 }
 
-export async function handleAgentProfilesApi(req, res, url) {
+export async function handleAgentProfilesApi(req, res, url, context = {}) {
   const parts = url.pathname.split('/').filter(Boolean)
 
   if (req.method === 'GET' && url.pathname === '/api/agent-profiles') {
@@ -136,13 +170,13 @@ export async function handleAgentProfilesApi(req, res, url) {
 
   if (req.method === 'POST' && url.pathname === '/api/agent-profiles/ai-fill') {
     const body = await readJsonBody(req)
-    sendJson(res, 200, { agent: await generateAgentProfileWithAi(body?.instruction, body?.model, body?.thinkingLevel) })
+    sendJson(res, 200, { agent: await generateAgentProfileWithAi(body?.instruction, body?.modelRef ? body : body?.model, body?.thinkingLevel, context) })
     return
   }
 
   if (req.method === 'POST' && url.pathname === '/api/agent-profiles') {
     const body = await readJsonBody(req)
-    sendJson(res, 200, { agent: await createCustomAgentProfile(body || {}) })
+    sendJson(res, 200, { agent: await createCustomAgentProfile(await canonicalizeProfileModel(body || {}, null, context)) })
     return
   }
 
@@ -162,11 +196,11 @@ export async function handleAgentProfilesApi(req, res, url) {
       if (current?.builtin) {
         const keys = Object.keys(body || {})
         if (keys.length !== 1 || keys[0] !== 'model') throw requestError('Built-in agents only allow model updates', 403)
-        sendJson(res, 200, { agent: agentProfileSnapshot(await updateBuiltinAgentModelOverride(id, body.model)) })
+        sendJson(res, 200, { agent: agentProfileSnapshot(await updateBuiltinAgentModelOverride(id, (await canonicalizeProfileModel(body, current, context)).model)) })
         return
       }
       if (current?.readonly) throw requestError('Read-only agents cannot be modified from the API', 403)
-      sendJson(res, 200, { agent: await updateCustomAgentProfile(id, body || {}) })
+      sendJson(res, 200, { agent: await updateCustomAgentProfile(id, await canonicalizeProfileModel(body || {}, current, context)) })
       return
     }
 

package/server/routes/agent.mjs

@@ -1,4 +1,6 @@
 import { sendJson, readJsonBody, decodeSegment } from '../utils/response.mjs'
+import { logger } from '../utils/logger.mjs'
+import { resolveModelBinding } from '../model-catalog.mjs'
 import {
   createAgent,
   runPrompt,
@@ -30,7 +32,7 @@ import {
   agentEvents,
 } from '../agent-manager.mjs'
 
-export async function handleAgentApi(req, res, url) {
+export async function handleAgentApi(req, res, url, context = {}) {
   const pathname = url.pathname
   const parts = pathname.split('/').filter(Boolean)
 
@@ -84,7 +86,7 @@ export async function handleAgentApi(req, res, url) {
       error.statusCode = 400
       throw error
     }
-    const result = await runPrompt(sessionId, message, body?.selectedCapabilities, body?.command)
+    const result = await runPrompt(sessionId, message, body?.selectedCapabilities, body?.command, null, context)
     sendJson(res, 200, result)
     return
   }
@@ -96,6 +98,30 @@ export async function handleAgentApi(req, res, url) {
     return
   }
 
+  // POST /api/agents/:sessionId/restore — restore once and return the authoritative state
+  if (req.method === 'POST' && subPath === 'restore') {
+    const startedAt = performance.now()
+    const session = await restoreAgent(sessionId)
+    if (!session) {
+      const error = new Error('Session not found')
+      error.statusCode = 404
+      throw error
+    }
+    const state = getSessionState(sessionId)
+    if (!state) {
+      const error = new Error('Session not found')
+      error.statusCode = 404
+      throw error
+    }
+    logger.debug(`Restored session ${sessionId} for client`, {
+      sessionId,
+      messageCount: state.messages?.length ?? 0,
+      durationMs: Math.round((performance.now() - startedAt) * 10) / 10,
+    })
+    sendJson(res, 200, state)
+    return
+  }
+
   // GET /api/agents/:sessionId/state — get session state
   if (req.method === 'GET' && subPath === 'state') {
     let state = getSessionState(sessionId)
@@ -135,12 +161,22 @@ export async function handleAgentApi(req, res, url) {
   // POST /api/agents/:sessionId — create/ensure agent
   if (req.method === 'POST' && parts.length === 3) {
     const body = await readJsonBody(req)
-    const session = await createAgent(sessionId, body)
+    let config
+    if (body?.modelRef || body?.model) {
+      const binding = await resolveModelBinding(body, { context, legacySnapshot: body?.model })
+      config = { ...body, model: binding.model, modelRef: binding.modelRef, modelAccessContext: context, resolvePersistedModel: true }
+    } else {
+      config = { ...body, modelAccessContext: context, resolvePersistedModel: true }
+    }
+    const session = await createAgent(sessionId, config)
     sendJson(res, 200, {
       sessionId: session.sessionId,
       status: session.status,
       scope: session.scope,
       title: session.title,
+      source: session.source || undefined,
+      channelId: session.channelId || undefined,
+      channelName: session.channelName || undefined,
       accessMode: session.accessMode,
       yoloMode: session.yoloMode,
     })
@@ -181,13 +217,14 @@ export async function handleAgentApi(req, res, url) {
   // POST /api/agents/:sessionId/model — update session model
   if (req.method === 'POST' && subPath === 'model') {
     const body = await readJsonBody(req)
-    const model = body?.model
-    if (!model) {
-      const error = new Error('Missing model in request body')
-      error.statusCode = 400
-      throw error
-    }
-    const result = updateSessionModel(sessionId, model)
+    const currentModel = getSessionState(sessionId)?.model
+    const binding = await resolveModelBinding(body, {
+      context,
+      currentModel,
+      allowCurrentHidden: true,
+      legacySnapshot: body?.model,
+    })
+    const result = updateSessionModel(sessionId, binding.model, binding.modelRef)
     sendJson(res, 200, result)
     return
   }
@@ -216,7 +253,7 @@ export async function handleAgentApi(req, res, url) {
 
   // POST /api/agents/:sessionId/continue — continue generation from last message (retry)
   if (req.method === 'POST' && subPath === 'continue') {
-    const result = await continueSession(sessionId)
+    const result = await continueSession(sessionId, context)
     sendJson(res, 200, result)
     return
   }

package/server/routes/backup.mjs

@@ -580,7 +580,13 @@ async function restoreValidatedBackup(backup, mode = 'replace') {
   return summary
 }
 
-export async function handleBackupApi(req, res, url) {
+export async function handleBackupApi(req, res, url, context = {}) {
+  if (context.isLocalRequest === false) {
+    const error = new Error('Backup import and export are available only on this computer.')
+    error.statusCode = 403
+    error.errorCode = 'backup_local_only'
+    throw error
+  }
   if (req.method === 'GET' && url.pathname === '/api/backup/export') {
     await ensureStorage()
     sendJson(res, 200, await buildBackup(url.searchParams.get('scope'), {

package/server/routes/channels.mjs

@@ -1,4 +1,8 @@
+import { promises as fs } from 'node:fs'
+import { logger } from '../utils/logger.mjs'
 import { sendJson, decodeSegment, readJsonBody } from '../utils/response.mjs'
+import { channelLogsDirectory } from '../channels/channel-logs.mjs'
+import { openPathInFileManager } from '../utils/platform.mjs'
 import {
   channelEvents,
   getChannelStatus,
@@ -25,6 +29,24 @@ function assertActionHeader(req) {
   }
 }
 
+function assertEventHeader(req) {
+  if (req.headers['x-quickforge-action'] !== 'channel-event') {
+    const error = new Error('Forbidden event')
+    error.statusCode = 403
+    throw error
+  }
+}
+
+async function readChannelEvent(req) {
+  const event = await readJsonBody(req, 256 * 1024)
+  if (!event || event.type !== 'sessions-changed' || typeof event.sessionId !== 'string' || !event.sessionId.trim()) {
+    const error = new Error('Invalid channel event')
+    error.statusCode = 400
+    throw error
+  }
+  return event
+}
+
 async function readActionOptions(req) {
   if (!['POST', 'PUT', 'PATCH'].includes(req.method || '')) return {}
   const contentType = String(req.headers['content-type'] || '')
@@ -46,6 +68,15 @@ export async function handleChannelsApi(req, res, url, context = {}) {
     return
   }
 
+  if (req.method === 'POST' && pathname === '/api/channels/events') {
+    assertLocal(context)
+    assertEventHeader(req)
+    const event = await readChannelEvent(req)
+    channelEvents.emit('channel_event', event)
+    sendJson(res, 202, { ok: true })
+    return
+  }
+
   if (parts.length < 3 || parts[0] !== 'api' || parts[1] !== 'channels') {
     const error = new Error('Not found')
     error.statusCode = 404
@@ -67,6 +98,22 @@ export async function handleChannelsApi(req, res, url, context = {}) {
 
   assertLocal(context)
 
+  if (req.method === 'POST' && subPath.length === 1 && subPath[0] === 'open-logs') {
+    assertActionHeader(req)
+    getChannelStatus(channelId)
+    if (!context.logsDir) {
+      const error = new Error('Channel log directory is unavailable')
+      error.statusCode = 500
+      throw error
+    }
+    const directory = channelLogsDirectory(context.logsDir, channelId)
+    await fs.mkdir(directory, { recursive: true })
+    await (context.openPathInFileManager ?? openPathInFileManager)(directory)
+    logger.info('Opened channel log directory.', { channelId })
+    sendJson(res, 200, { ok: true })
+    return
+  }
+
   if (req.method === 'POST' && subPath[0] === 'start') {
     assertActionHeader(req)
     sendJson(res, 202, await startChannel(channelId, await readActionOptions(req)))