@shawnstack/quickforge 1.7.3 → 1.7.5

package/server/routes/cloud.mjs

@@ -0,0 +1,227 @@
+import { CloudClient, CloudApiError } from '../cloud/client.mjs'
+import { parseCloudBaseUrl } from '../cloud/config.mjs'
+import { createCloudCredentialStore } from '../cloud/credential-store.mjs'
+import { getCloudRuntime, invalidateCloudRuntime } from '../cloud/runtime.mjs'
+import {
+  publicCloudServiceConfig,
+  readCloudServiceConfig,
+  saveCloudServiceConfig,
+} from '../cloud/service-config.mjs'
+import { isTailscaleAddress } from '../utils/network.mjs'
+import { readJsonBody, sendJson } from '../utils/response.mjs'
+
+const CLOUD_CONFIG_BODY_MAX_BYTES = 16 * 1024
+const CLOUD_ACTION_HEADER = 'x-quickforge-action'
+const CLOUD_ACTION_VALUE = 'cloud-action'
+const SAFE_METHODS = new Set(['GET', 'HEAD', 'OPTIONS'])
+const JSON_WRITE_ROUTES = new Set([
+  'POST /api/cloud/test-connection',
+  'PUT /api/cloud/config',
+  'POST /api/cloud/identity/reset',
+  'POST /api/cloud/device/start',
+  'POST /api/cloud/device/poll',
+  'POST /api/cloud/device/cancel',
+])
+
+function routeError(message, statusCode, code) {
+  const error = new Error(message)
+  error.statusCode = statusCode
+  error.errorCode = code
+  error.code = code
+  return error
+}
+
+function mapCloudError(error) {
+  if (!(error instanceof CloudApiError)) return error
+  const mapped = routeError(error.message, error.status || 503, error.code)
+  mapped.retryable = error.retryable
+  mapped.details = error.details
+  return mapped
+}
+
+function createDefaultRuntime() {
+  return getCloudRuntime()
+}
+
+function sameCloudUrl(left, right) {
+  try {
+    return parseCloudBaseUrl(left).href === parseCloudBaseUrl(right).href
+  } catch {
+    return false
+  }
+}
+
+function requireDangerousConfirmation(body) {
+  if (body?.confirm !== 'reset-cloud-identity') {
+    throw routeError('Explicit confirmation is required to rebuild the QuickForge Cloud identity.', 400, 'cloud_reset_confirmation_required')
+  }
+}
+
+function requireProtectedCloudWrite(req, pathname) {
+  const method = String(req.method || 'GET').toUpperCase()
+  if (SAFE_METHODS.has(method)) return
+
+  if (req.headers[CLOUD_ACTION_HEADER] !== CLOUD_ACTION_VALUE) {
+    throw routeError('QuickForge Cloud action header is required.', 403, 'cloud_action_header_required')
+  }
+
+  if (!JSON_WRITE_ROUTES.has(`${method} ${pathname}`)) return
+  const mediaType = String(req.headers['content-type'] || '').split(';', 1)[0].trim().toLowerCase()
+  if (mediaType !== 'application/json') {
+    throw routeError('QuickForge Cloud JSON requests require Content-Type: application/json.', 415, 'cloud_json_content_type_required')
+  }
+}
+
+export function createCloudRouteHandler({
+  runtimeFactory = createDefaultRuntime,
+  readServiceConfig = readCloudServiceConfig,
+  saveServiceConfig = saveCloudServiceConfig,
+  credentialStoreFactory = createCloudCredentialStore,
+  invalidateRuntime = invalidateCloudRuntime,
+  cloudClientFactory = (config) => new CloudClient(config),
+} = {}) {
+  async function runtimeOrError() {
+    try {
+      return { runtime: await runtimeFactory() }
+    } catch (error) {
+      return { configurationError: error }
+    }
+  }
+
+  return async function handleCloudApi(req, res, url, {
+    isLocalRequest = false,
+    remoteAddress,
+    remoteAuthorized = false,
+  } = {}) {
+    const tailscaleAllowed = remoteAuthorized === true
+      && isTailscaleAddress(remoteAddress)
+    if (!isLocalRequest && !tailscaleAllowed) {
+      throw routeError('QuickForge Cloud is available only on this computer or an authorized Tailscale client.', 403, 'cloud_local_only')
+    }
+
+    requireProtectedCloudWrite(req, url.pathname)
+
+    if (req.method === 'GET' && url.pathname === '/api/cloud/config') {
+      sendJson(res, 200, publicCloudServiceConfig(await readServiceConfig({ strict: false })))
+      return
+    }
+
+    if (req.method === 'POST' && url.pathname === '/api/cloud/test-connection') {
+      const body = await readJsonBody(req, CLOUD_CONFIG_BODY_MAX_BYTES)
+      const baseUrl = parseCloudBaseUrl(body?.cloudUrl)
+      const timeoutValue = Number(process.env.QUICKFORGE_CLOUD_TIMEOUT_MS || 10_000)
+      const client = cloudClientFactory({
+        baseUrl,
+        timeoutMs: Number.isFinite(timeoutValue) ? Math.min(60_000, Math.max(1_000, timeoutValue)) : 10_000,
+      })
+      try {
+        const [health, ready] = await Promise.all([client.health(), client.ready()])
+        sendJson(res, 200, { ok: true, cloudUrl: baseUrl.href, health, ready })
+      } catch (error) {
+        throw mapCloudError(error)
+      }
+      return
+    }
+
+    if (req.method === 'PUT' && url.pathname === '/api/cloud/config') {
+      const body = await readJsonBody(req, CLOUD_CONFIG_BODY_MAX_BYTES)
+      const nextUrl = parseCloudBaseUrl(body?.cloudUrl).href
+      const credentialStore = credentialStoreFactory()
+      const identityRecord = await credentialStore.read()
+      if (identityRecord.refreshToken || identityRecord.pendingDeviceFlow) {
+        const boundUrl = String(identityRecord.pendingDeviceFlow?.sessionCloudUrl || identityRecord.sessionCloudUrl || '').trim()
+        const sameUrl = boundUrl ? sameCloudUrl(boundUrl, nextUrl) : false
+        if (!sameUrl) {
+          throw routeError('A QuickForge Cloud session is active. Sign out first, or explicitly rebuild the identity before switching services.', 409, 'cloud_session_active')
+        }
+      }
+      await saveServiceConfig(nextUrl)
+      invalidateRuntime()
+      sendJson(res, 200, publicCloudServiceConfig(await readServiceConfig({ strict: false })))
+      return
+    }
+
+    if (req.method === 'POST' && url.pathname === '/api/cloud/identity/reset') {
+      const body = await readJsonBody(req, CLOUD_CONFIG_BODY_MAX_BYTES)
+      requireDangerousConfirmation(body)
+      const { runtime } = await runtimeOrError()
+      if (runtime?.enabled) await runtime.identity.resetIdentity()
+      else {
+        const store = credentialStoreFactory()
+        await store.rotateInstallation()
+      }
+      invalidateRuntime()
+      sendJson(res, 200, { ok: true, mode: 'local' })
+      return
+    }
+
+    const { runtime: current, configurationError } = await runtimeOrError()
+    if (req.method === 'GET' && url.pathname === '/api/cloud/status') {
+      if (configurationError) {
+        sendJson(res, 200, { configured: false, mode: 'local', configurationError: configurationError.message })
+        return
+      }
+      if (!current?.enabled) {
+        sendJson(res, 200, { configured: false, mode: 'local' })
+        return
+      }
+      sendJson(res, 200, { configured: true, ...(await current.identity.status()) })
+      return
+    }
+
+    if (configurationError) throw routeError(configurationError.message, 503, 'cloud_configuration_error')
+    if (!current?.enabled) throw routeError('QuickForge Cloud is not configured.', 503, 'cloud_not_configured')
+
+    try {
+      if (req.method === 'POST' && url.pathname === '/api/cloud/guest/start') {
+        sendJson(res, 201, await current.identity.startGuest())
+        return
+      }
+      if (req.method === 'POST' && url.pathname === '/api/cloud/device/start') {
+        await readJsonBody(req, CLOUD_CONFIG_BODY_MAX_BYTES)
+        sendJson(res, 201, await current.identity.startDeviceFlow())
+        return
+      }
+      if (req.method === 'POST' && url.pathname === '/api/cloud/device/poll') {
+        await readJsonBody(req, CLOUD_CONFIG_BODY_MAX_BYTES)
+        sendJson(res, 200, await current.identity.pollDeviceFlow())
+        return
+      }
+      if (req.method === 'POST' && url.pathname === '/api/cloud/device/cancel') {
+        await readJsonBody(req, CLOUD_CONFIG_BODY_MAX_BYTES)
+        sendJson(res, 200, await current.identity.cancelDeviceFlow())
+        return
+      }
+      if (req.method === 'GET' && url.pathname === '/api/cloud/models') {
+        sendJson(res, 200, { items: await current.models.list(undefined, { refresh: true }) })
+        return
+      }
+      if (req.method === 'GET' && url.pathname === '/api/cloud/usage') {
+        sendJson(res, 200, await current.identity.usage())
+        return
+      }
+      if (req.method === 'GET' && url.pathname === '/api/cloud/installations') {
+        sendJson(res, 200, await current.identity.installations())
+        return
+      }
+      if (req.method === 'POST' && url.pathname === '/api/cloud/logout') {
+        await current.identity.logout()
+        invalidateRuntime()
+        sendJson(res, 200, { ok: true, mode: 'local' })
+        return
+      }
+      const revokeMatch = url.pathname.match(/^\/api\/cloud\/installations\/([^/]+)$/)
+      if (req.method === 'DELETE' && revokeMatch) {
+        await current.identity.revokeInstallation(decodeURIComponent(revokeMatch[1]))
+        sendJson(res, 200, { ok: true })
+        return
+      }
+    } catch (error) {
+      throw mapCloudError(error)
+    }
+
+    throw routeError('Not found', 404, 'route_not_found')
+  }
+}
+
+export const handleCloudApi = createCloudRouteHandler()

package/server/routes/lan-access.mjs

@@ -1,10 +1,13 @@
 import { sendJson, readJsonBody } from '../utils/response.mjs'
 import { getLanUrls } from '../utils/network.mjs'
 import { logger } from '../utils/logger.mjs'
+import { parseCookies } from '../share-store.mjs'
 import {
   issueLanAccessToken,
   lanAccessCookieName,
   readLanAccessStatus,
+  revokeLanAccessToken,
+  revokeLanAccessTokenById,
   revokeLanAccessTokens,
   updateLanAccessSettings,
 } from '../lan-access-store.mjs'
@@ -102,36 +105,242 @@ export function renderLanUnlockPage(res) {
 <head>
   <meta charset="utf-8" />
   <meta name="viewport" content="width=device-width, initial-scale=1" />
+  <meta name="theme-color" content="#ffffff" media="(prefers-color-scheme: light)" />
+  <meta name="theme-color" content="#171717" media="(prefers-color-scheme: dark)" />
+  <link rel="icon" href="/favicon.svg" />
   <title>QuickForge 局域网访问</title>
   <style>
-    :root { color-scheme: light dark; font-family: Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif; }
-    body { margin: 0; min-height: 100vh; display: grid; place-items: center; background: #0f172a; color: #e5e7eb; }
-    main { width: min(420px, calc(100vw - 32px)); border: 1px solid rgba(148,163,184,.3); border-radius: 20px; padding: 28px; background: rgba(15,23,42,.92); box-shadow: 0 24px 80px rgba(0,0,0,.35); }
-    h1 { margin: 0 0 8px; font-size: 22px; }
-    p { margin: 0 0 18px; color: #94a3b8; line-height: 1.6; }
-    label { display: block; margin-bottom: 8px; font-size: 14px; font-weight: 600; }
-    input { width: 100%; box-sizing: border-box; height: 42px; border-radius: 10px; border: 1px solid #334155; background: #020617; color: #f8fafc; padding: 0 12px; font-size: 15px; }
-    button { width: 100%; height: 42px; margin-top: 14px; border: 0; border-radius: 10px; background: #2563eb; color: white; font-weight: 700; cursor: pointer; }
-    button:disabled { opacity: .6; cursor: default; }
-    .error { min-height: 20px; margin-top: 12px; color: #fca5a5; font-size: 13px; }
+    :root {
+      color-scheme: light dark;
+      font-family: ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto,
+        "Helvetica Neue", Arial, "Noto Sans", "PingFang SC", "Microsoft YaHei", sans-serif;
+      --background: #ffffff;
+      --foreground: #171717;
+      --muted-foreground: #737373;
+      --border: #e5e5e5;
+      --input-border: #dedede;
+      --surface: #ffffff;
+      --surface-muted: #fafafa;
+      --primary: #171717;
+      --primary-hover: #292929;
+      --primary-foreground: #fafafa;
+      --danger: #dc2626;
+      --shadow: 0 10px 26px -18px rgba(15, 23, 42, .48);
+    }
+    * { box-sizing: border-box; }
+    html, body { margin: 0; min-width: 0; min-height: 100%; }
+    body {
+      min-height: 100vh;
+      min-height: 100dvh;
+      display: grid;
+      place-items: center;
+      padding: 32px 20px;
+      background: var(--background);
+      color: var(--foreground);
+      -webkit-font-smoothing: antialiased;
+    }
+    main { width: min(100%, 440px); }
+    .intro { display: flex; align-items: center; gap: 13px; margin-bottom: 30px; }
+    .brand-mark {
+      display: grid;
+      width: 46px;
+      height: 46px;
+      flex: 0 0 auto;
+      place-items: center;
+      border: 1px solid var(--border);
+      border-radius: 13px;
+      background: var(--surface);
+      box-shadow: var(--shadow);
+    }
+    .brand-mark img { width: 29px; height: 29px; }
+    .eyebrow {
+      margin: 0 0 2px;
+      color: var(--muted-foreground);
+      font-size: 11px;
+      font-weight: 600;
+      letter-spacing: .1em;
+    }
+    h1 { margin: 0; font-size: 20px; font-weight: 600; letter-spacing: -.02em; line-height: 1.35; }
+    .subtitle { margin: 3px 0 0; color: var(--muted-foreground); font-size: 14px; line-height: 1.5; }
+    form {
+      padding: 22px;
+      border: 1px solid var(--border);
+      border-radius: 16px;
+      background: var(--surface);
+      box-shadow: var(--shadow);
+    }
+    label { display: block; margin-bottom: 9px; font-size: 14px; font-weight: 500; }
+    .input-wrap { position: relative; }
+    .input-icon {
+      position: absolute;
+      top: 50%;
+      left: 13px;
+      width: 17px;
+      height: 17px;
+      color: var(--muted-foreground);
+      pointer-events: none;
+      transform: translateY(-50%);
+    }
+    input {
+      width: 100%;
+      height: 44px;
+      border: 1px solid var(--input-border);
+      border-radius: 12px;
+      outline: none;
+      background: var(--surface);
+      color: var(--foreground);
+      padding: 0 13px 0 40px;
+      font: inherit;
+      font-size: 14px;
+      transition: border-color 150ms ease, box-shadow 150ms ease;
+    }
+    input::placeholder { color: var(--muted-foreground); opacity: .7; }
+    input:hover { border-color: color-mix(in srgb, var(--foreground) 24%, var(--border)); }
+    input:focus {
+      border-color: color-mix(in srgb, var(--foreground) 30%, var(--border));
+      box-shadow: var(--shadow);
+    }
+    input[aria-invalid="true"] { border-color: color-mix(in srgb, var(--danger) 60%, var(--border)); }
+    button {
+      width: 100%;
+      height: 44px;
+      margin-top: 18px;
+      display: inline-flex;
+      align-items: center;
+      justify-content: center;
+      gap: 8px;
+      border: 0;
+      border-radius: 12px;
+      background: var(--primary);
+      color: var(--primary-foreground);
+      font: inherit;
+      font-size: 14px;
+      font-weight: 500;
+      cursor: pointer;
+      transition: background-color 150ms ease, opacity 150ms ease;
+    }
+    button:hover:not(:disabled) { background: var(--primary-hover); }
+    button:active:not(:disabled) { opacity: .88; }
+    button:focus-visible { outline: 2px solid color-mix(in srgb, var(--foreground) 28%, transparent); outline-offset: 3px; }
+    button:disabled { cursor: default; opacity: .62; }
+    .button-icon { width: 16px; height: 16px; }
+    .spinner { display: none; width: 15px; height: 15px; animation: spin .8s linear infinite; }
+    button.is-loading .button-icon { display: none; }
+    button.is-loading .spinner { display: block; }
+    .error {
+      min-height: 20px;
+      margin: 10px 0 -2px;
+      color: var(--danger);
+      font-size: 13px;
+      line-height: 20px;
+    }
+    .note {
+      display: flex;
+      gap: 9px;
+      margin: 17px 3px 0;
+      color: var(--muted-foreground);
+      font-size: 12px;
+      line-height: 1.65;
+    }
+    .note svg { width: 15px; height: 15px; flex: 0 0 auto; margin-top: 2px; }
+    @keyframes spin { to { transform: rotate(360deg); } }
+    @media (prefers-color-scheme: dark) {
+      :root {
+        --background: #171717;
+        --foreground: #fafafa;
+        --muted-foreground: #a3a3a3;
+        --border: #353535;
+        --input-border: #404040;
+        --surface: #1d1d1d;
+        --surface-muted: #262626;
+        --primary: #e5e5e5;
+        --primary-hover: #fafafa;
+        --primary-foreground: #171717;
+        --danger: #f87171;
+        --shadow: 0 10px 26px -18px rgba(0, 0, 0, .9);
+      }
+    }
+    @media (max-width: 480px) {
+      body { place-items: start center; padding-top: max(28px, 8vh); }
+      .intro { margin-bottom: 24px; }
+      form { padding: 20px; }
+    }
+    @media (prefers-reduced-motion: reduce) {
+      *, *::before, *::after { scroll-behavior: auto !important; transition: none !important; }
+    }
   </style>
 </head>
 <body>
   <main>
-    <h1>QuickForge 局域网访问</h1>
-    <p>请输入本机设置中配置的局域网访问密码。</p>
-    <label for="password">访问密码</label>
-    <input id="password" type="password" autocomplete="current-password" autofocus />
-    <button id="submit" type="button">进入 QuickForge</button>
-    <div id="error" class="error" role="alert"></div>
+    <header class="intro">
+      <div class="brand-mark" aria-hidden="true"><img src="/favicon.svg" alt="" /></div>
+      <div>
+        <p class="eyebrow">QUICKFORGE</p>
+        <h1>验证局域网访问</h1>
+        <p class="subtitle">输入主机端设置的访问密码，继续进入工作区。</p>
+      </div>
+    </header>
+
+    <form id="unlock-form">
+      <label for="password">访问密码</label>
+      <div class="input-wrap">
+        <svg class="input-icon" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" aria-hidden="true">
+          <rect x="4.5" y="10" width="15" height="10" rx="2.5"></rect>
+          <path d="M8 10V7.5a4 4 0 0 1 8 0V10"></path>
+        </svg>
+        <input
+          id="password"
+          type="password"
+          autocomplete="current-password"
+          placeholder="请输入访问密码"
+          aria-describedby="error"
+          aria-invalid="false"
+          autofocus
+        />
+      </div>
+      <button id="submit" type="submit">
+        <svg class="spinner" viewBox="0 0 24 24" fill="none" aria-hidden="true">
+          <circle cx="12" cy="12" r="9" stroke="currentColor" stroke-opacity=".25" stroke-width="3"></circle>
+          <path d="M21 12a9 9 0 0 0-9-9" stroke="currentColor" stroke-width="3" stroke-linecap="round"></path>
+        </svg>
+        <span id="button-label">进入 QuickForge</span>
+        <svg class="button-icon" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" aria-hidden="true">
+          <path d="M5 12h14M13 6l6 6-6 6" stroke-linecap="round" stroke-linejoin="round"></path>
+        </svg>
+      </button>
+      <p id="error" class="error" role="alert" aria-live="polite"></p>
+    </form>
+
+    <p class="note">
+      <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" aria-hidden="true">
+        <path d="M12 3 5 6v5c0 4.6 2.9 8.4 7 10 4.1-1.6 7-5.4 7-10V6l-7-3Z" stroke-linejoin="round"></path>
+        <path d="m9.5 12 1.7 1.7 3.6-3.7" stroke-linecap="round" stroke-linejoin="round"></path>
+      </svg>
+      <span>密码仅用于验证本次局域网访问，不会保存在此设备。</span>
+    </p>
   </main>
   <script>
+    const form = document.getElementById('unlock-form')
     const password = document.getElementById('password')
     const button = document.getElementById('submit')
+    const buttonLabel = document.getElementById('button-label')
     const error = document.getElementById('error')
-    async function unlock() {
+
+    password.addEventListener('input', () => {
+      error.textContent = ''
+      password.setAttribute('aria-invalid', 'false')
+    })
+
+    form.addEventListener('submit', async (event) => {
+      event.preventDefault()
+      if (button.disabled) return
+
       error.textContent = ''
+      password.setAttribute('aria-invalid', 'false')
       button.disabled = true
+      button.classList.add('is-loading')
+      buttonLabel.textContent = '正在验证…'
+
       try {
         const response = await fetch('/api/lan-access/unlock', {
           method: 'POST',
@@ -143,12 +352,14 @@ export function renderLanUnlockPage(res) {
         window.location.reload()
       } catch (err) {
         error.textContent = err instanceof Error ? err.message : '密码错误'
+        password.setAttribute('aria-invalid', 'true')
+        password.focus()
       } finally {
         button.disabled = false
+        button.classList.remove('is-loading')
+        buttonLabel.textContent = '进入 QuickForge'
       }
-    }
-    button.addEventListener('click', unlock)
-    password.addEventListener('keydown', (event) => { if (event.key === 'Enter') unlock() })
+    })
   </script>
 </body>
 </html>`
@@ -186,7 +397,10 @@ export async function handleLanAccessApi(req, res, url, context = {}) {
     assertNotLocked(req)
     const body = await readJsonBody(req, 1024)
     try {
-      const result = await issueLanAccessToken(body?.password)
+      const result = await issueLanAccessToken(body?.password, {
+        remoteAddress: req.socket.remoteAddress,
+        userAgent: req.headers['user-agent'],
+      })
       setLanCookie(res, result.token, result.maxAge)
       clearFailures(req)
       logger.info('LAN access unlock succeeded.', { remoteAddress: req.socket.remoteAddress })
@@ -202,11 +416,22 @@ export async function handleLanAccessApi(req, res, url, context = {}) {
   }
 
   if (req.method === 'POST' && pathname === '/api/lan-access/logout') {
+    const token = parseCookies(req.headers.cookie).get(lanAccessCookieName())
+    await revokeLanAccessToken(token)
     clearLanCookie(res)
     sendJson(res, 200, { ok: true })
     return
   }
 
+  if (req.method === 'POST' && pathname === '/api/lan-access/revoke') {
+    requireLocal(context)
+    const body = await readJsonBody(req, 1024)
+    const status = await revokeLanAccessTokenById(body?.id)
+    logger.info('LAN access session revoked.', { sessionId: body?.id })
+    sendJson(res, 200, { ok: true, ...status })
+    return
+  }
+
   if (req.method === 'POST' && pathname === '/api/lan-access/revoke-all') {
     requireLocal(context)
     const status = await revokeLanAccessTokens()

package/server/routes/models.mjs

@@ -1,4 +1,5 @@
-import { streamSimple } from '@earendil-works/pi-ai/compat'
+import { streamSimpleWithAiHttpLogging } from '../ai-http-logger.mjs'
+import { listModelCatalog } from '../model-catalog.mjs'
 import { sendJson, readJsonBody } from '../utils/response.mjs'
 import { readStore } from '../storage.mjs'
 import { logger } from '../utils/logger.mjs'
@@ -22,7 +23,7 @@ async function getApiKey(provider) {
 // API key is valid. Returns { ok: true } on success; throws on failure.
 async function probeModelConnection(model, apiKeyOverride) {
   const apiKey = apiKeyOverride || (await getApiKey(model?.provider))
-  const stream = streamSimple(
+  const stream = streamSimpleWithAiHttpLogging(
     model,
     {
       systemPrompt: 'You are a connectivity test. Reply with a single word.',
@@ -39,11 +40,19 @@ async function probeModelConnection(model, apiKeyOverride) {
       maxRetryDelayMs: 30000,
     },
   )
-  await stream.result()
+  const message = await stream.result()
+  if (message?.stopReason === 'error' || message?.stopReason === 'aborted') {
+    throw new Error(message.errorMessage || `Model request ${message.stopReason}`)
+  }
   return { ok: true }
 }
 
-export async function handleModelsApi(req, res, url) {
+export async function handleModelsApi(req, res, url, context = {}) {
+  if (req.method === 'GET' && url.pathname === '/api/models/catalog') {
+    sendJson(res, 200, { models: await listModelCatalog({ context, refreshCloud: url.searchParams.get('refresh') === 'true' }) })
+    return
+  }
+
   if (req.method === 'POST' && url.pathname === '/api/models/test-connection') {
     const body = await readJsonBody(req)
     const model = body?.model

package/server/routes/project.mjs

@@ -8,7 +8,25 @@ import { getWorkspaceRoot, setWorkspaceRoot } from '../utils/workspace.mjs'
 import { selectDirectoryDialog, openPathInFileManager, openPathInIDEA, openPathInVSCode } from '../utils/platform.mjs'
 import path from 'node:path'
 
-export async function handleProjectApi(req, res, url) {
+function assertLocalExternalAction(context) {
+  if (context.isLocalRequest === true) return
+  const error = new Error('Opening applications is only allowed from this computer')
+  error.statusCode = 403
+  throw error
+}
+
+export async function handleProjectApi(req, res, url, context = {}) {
+  const externalAction = req.method === 'POST' && (
+    url.pathname === '/api/project/select-directory'
+    || (url.pathname.startsWith('/api/project/') && (
+      url.pathname.endsWith('/open-in-explorer')
+      || url.pathname.endsWith('/open-in-vscode')
+      || url.pathname.endsWith('/open-in-idea')
+    ))
+    || url.pathname === '/api/project/open-path'
+  )
+  if (externalAction) assertLocalExternalAction(context)
+
   const config = await readProjectConfig()
 
   if (req.method === 'GET' && url.pathname === '/api/project') {