@shawnstack/quickforge 1.7.3 → 1.7.5

package/server/routes/scheduled-tasks.mjs

@@ -1,4 +1,4 @@
-import { streamSimple } from '@earendil-works/pi-ai/compat'
+import { streamSimpleWithAiHttpLogging } from '../ai-http-logger.mjs'
 import { DEFAULT_AI_MAX_RETRIES } from '../ai-provider-options.mjs'
 import { readJsonBody, sendJson, decodeSegment } from '../utils/response.mjs'
 import { readStore, atomicUpdate } from '../storage.mjs'
@@ -6,6 +6,7 @@ import { createAgent, getSessionEventBus, agentEvents, persistSessionState, abor
 import { agentProfileSnapshot, getAgentProfile } from '../agent-profiles.mjs'
 import { projectContextFromId, readProjectConfig } from '../project-config.mjs'
 import { logger } from '../utils/logger.mjs'
+import { resolveModelBinding } from '../model-catalog.mjs'
 import {
   dayMs,
   formatLocalDateTime,
@@ -133,10 +134,14 @@ async function getApiKey(provider) {
   }
 }
 
-async function parseScheduledTaskInstructionWithAi(instruction, model, thinkingLevel = 'off') {
+async function parseScheduledTaskInstructionWithAi(instruction, modelInput, thinkingLevel = 'off', context = {}) {
   const text = String(instruction || '').trim()
   if (!text) return { needMoreInfo: true, question: '请输入要创建的定时任务。' }
-  if (!model) return { needMoreInfo: true, question: '请先选择用于解析任务的大模型。' }
+  if (!modelInput) return { needMoreInfo: true, question: '请先选择用于解析任务的大模型。' }
+  const { model } = await resolveModelBinding(
+    modelInput?.modelRef || modelInput?.model ? modelInput : { model: modelInput },
+    { context, legacySnapshot: modelInput?.model || modelInput },
+  )
 
   const now = new Date()
   const systemPrompt = `你是定时任务解析器。把用户的中文自然语言定时任务解析为 JSON。
@@ -154,7 +159,7 @@ async function parseScheduledTaskInstructionWithAi(instruction, model, thinkingL
 示例输出：{"title":"生成日报","instruction":"生成销售日报","cronExpression":"0 9 * * *","scheduleRule":"每天 09:00","question":""}`
 
   try {
-    const stream = streamSimple(
+    const stream = streamSimpleWithAiHttpLogging(
       model,
       {
         systemPrompt,
@@ -529,6 +534,18 @@ async function executeTask(task, trigger = 'schedule', onStarted) {
 
   try {
     const executionProject = await resolveExecutionProject(task)
+    const binding = task.modelRef || task.model
+      ? await resolveModelBinding(
+          task.modelRef ? { modelRef: task.modelRef } : { model: task.model },
+          {
+            context: { source: 'scheduled', allowCloud: true },
+            currentModel: task.model,
+            allowCurrentHidden: true,
+            forExecution: true,
+            legacySnapshot: task.model,
+          },
+        )
+      : null
     if (task.agentId) {
       executionAgent = await getAgentProfile(task.agentId, { projectId: executionProject?.id || null, workspaceRoot: executionProject?.path })
       if (!executionAgent) agentWarning = `Configured agent not found: ${task.agentId}`
@@ -541,7 +558,9 @@ async function executeTask(task, trigger = 'schedule', onStarted) {
       scope: executionProject ? 'project' : 'global',
       projectId: executionProject?.id || null,
       yoloMode,
-      model: task.model,
+      model: binding?.model || task.model,
+      modelRef: binding?.modelRef || task.modelRef || null,
+      modelAccessContext: { source: 'scheduled', allowCloud: true },
       thinkingLevel: task.thinkingLevel,
       title: `[定时任务] ${task.title}`,
       agentProfile: executionAgent,
@@ -577,7 +596,7 @@ async function executeTask(task, trigger = 'schedule', onStarted) {
     onStarted?.({ taskId: task.id, runId, sessionId })
 
     const eventBus = getSessionEventBus(sessionId)
-    const runtimeLimitMs = Math.max(1000, Math.min(Number(executionAgent?.maxRuntimeMs || 30 * 60 * 1000), 30 * 60 * 1000))
+    const runtimeLimitMs = Math.max(1000, Math.min(Number(executionAgent?.maxRuntimeMs || 60 * 60 * 1000), 60 * 60 * 1000))
     let timeout = null
     let handler = null
     let timedOut = false
@@ -770,12 +789,12 @@ export function stopScheduledTaskRunner() {
   runningTaskRunIds.clear()
 }
 
-export async function handleScheduledTasksApi(req, res, url) {
+export async function handleScheduledTasksApi(req, res, url, context = {}) {
   const parts = url.pathname.split('/').filter(Boolean)
 
   if (req.method === 'POST' && url.pathname === '/api/scheduled-tasks/parse') {
     const body = await readJsonBody(req)
-    sendJson(res, 200, await parseScheduledTaskInstructionWithAi(body?.instruction, body?.model, body?.thinkingLevel))
+    sendJson(res, 200, await parseScheduledTaskInstructionWithAi(body?.instruction, body?.modelRef ? body : body?.model, body?.thinkingLevel, context))
     return
   }
 
@@ -796,12 +815,14 @@ export async function handleScheduledTasksApi(req, res, url) {
     const now = new Date().toISOString()
     const normalized = normalizeTaskInput(parsed)
     const enabled = parsed.enabled !== false && parsed.status !== 'paused'
+    const binding = await resolveModelBinding(body, { context, legacySnapshot: body?.model })
     const task = {
       id: createId(),
       ...normalized,
       scheduleRule: normalized.scheduleRule || scheduleRuleFor(normalized),
       executionMode: normalized.executionMode || 'serial',
-      model: body?.model,
+      model: binding.model,
+      modelRef: binding.modelRef,
       thinkingLevel: body?.thinkingLevel || (body?.model?.reasoning ? 'medium' : 'off'),
       projectId: body?.projectId || null,
       projectName: body?.projectName || null,
@@ -830,6 +851,14 @@ export async function handleScheduledTasksApi(req, res, url) {
       const parsed = body?.task
       if (!parsed) throw requestError('Missing task')
       const normalized = normalizeTaskInput(parsed, existing)
+      const binding = body?.modelRef || body?.model
+        ? await resolveModelBinding(body, {
+            context,
+            currentModel: existing.model,
+            allowCurrentHidden: true,
+            legacySnapshot: body?.model,
+          })
+        : null
       const now = new Date().toISOString()
       const hasProject = Object.prototype.hasOwnProperty.call(body, 'projectId')
       const task = await updateTask(taskId, (current) => ({
@@ -837,7 +866,8 @@ export async function handleScheduledTasksApi(req, res, url) {
         ...normalized,
         scheduleRule: normalized.scheduleRule || scheduleRuleFor(normalized),
         executionMode: normalized.executionMode || 'serial',
-        model: body?.model ?? current.model,
+        model: binding?.model ?? current.model,
+        modelRef: binding?.modelRef ?? current.modelRef,
         thinkingLevel: body?.thinkingLevel ?? current.thinkingLevel,
         projectId: hasProject ? (body.projectId || null) : current.projectId,
         projectName: hasProject ? (body.projectName || null) : current.projectName,

package/server/routes/shared-conversation.mjs

@@ -1,10 +1,12 @@
 import { sendJson, readJsonBody, decodeSegment } from '../utils/response.mjs'
-import { readSessionValue, readStore } from '../storage.mjs'
+import { readSessionValue } from '../storage.mjs'
+import { listModelCatalog, resolveModelBinding } from '../model-catalog.mjs'
 import { sendSessionAsset } from './session-assets.mjs'
 import { abortRun, restoreAgent, runPrompt, getSessionState, getSessionEventBus, updateSessionModel, updateSessionThinkingLevel } from '../agent-manager.mjs'
 import {
   assertShareActive,
   issueConversationShareToken,
+  onConversationShareInvalidated,
   parseCookies,
   readConversationShare,
   rollbackSharedSessionMessages,
@@ -49,6 +51,7 @@ function publicSharePayload(record) {
     scope: record.scope,
     projectId: record.projectId,
     hasPassword: Boolean(record.passwordHash),
+    allowCloudUsage: record.allowCloudUsage === true,
   }
 }
 
@@ -101,13 +104,6 @@ function sanitizeModel(model) {
   }
 }
 
-function sanitizeIncomingModel(model) {
-  if (!model || typeof model !== 'object') return null
-  const sanitized = sanitizeModel(model)
-  if (!sanitized.id || !sanitized.provider) return null
-  return sanitized
-}
-
 function sanitizeEvent(event) {
   if (!event || typeof event !== 'object') return event
   const next = { ...event }
@@ -147,6 +143,20 @@ async function handleSharedEvents(req, res, record) {
 
   writeSseEvent(res, 'state', await sharedSessionPayload(record))
 
+  let cleanedUp = false
+  let expirationTimeout
+  let removeShareInvalidationListener = () => undefined
+
+  const cleanup = () => {
+    if (cleanedUp) return
+    cleanedUp = true
+    clearInterval(keepAlive)
+    if (expirationTimeout) clearTimeout(expirationTimeout)
+    removeShareInvalidationListener()
+    eventBus.removeListener('agent_event', onAgentEvent)
+    if (!res.writableEnded) res.end()
+  }
+
   const keepAlive = setInterval(() => {
     try {
       res.write(': ping\n\n')
@@ -164,11 +174,19 @@ async function handleSharedEvents(req, res, record) {
     }
   }
 
-  const cleanup = () => {
-    clearInterval(keepAlive)
-    eventBus.removeListener('agent_event', onAgentEvent)
-    if (!res.writableEnded) res.end()
+  removeShareInvalidationListener = onConversationShareInvalidated(({ shareId }) => {
+    if (shareId === record.id) cleanup()
+  })
+  const scheduleExpiration = () => {
+    if (!record.expiresAt || cleanedUp) return
+    const delay = Date.parse(record.expiresAt) - Date.now()
+    if (delay <= 0) {
+      cleanup()
+      return
+    }
+    expirationTimeout = setTimeout(scheduleExpiration, Math.min(delay, 2_147_483_647))
   }
+  scheduleExpiration()
 
   eventBus.on('agent_event', onAgentEvent)
   req.on('close', cleanup)
@@ -269,42 +287,7 @@ async function sharedSessionPayload(record) {
   return sanitizeSession(session, record)
 }
 
-function sanitizeProvider(provider) {
-  if (!provider || typeof provider !== 'object') return null
-  const models = Array.isArray(provider.models)
-    ? provider.models.map(sanitizeModel).filter((model) => model?.id && model?.provider && model?.api)
-    : []
-  if (!models.length) return null
-  return {
-    id: provider.id || provider.name || models[0].provider,
-    name: provider.name || models[0].provider,
-    type: provider.type || models[0].api,
-    baseUrl: provider.baseUrl,
-    models,
-  }
-}
-
-async function listSharedModelProviders() {
-  const providers = await readStore('custom-providers')
-  return Object.values(providers || {}).map(sanitizeProvider).filter(Boolean)
-}
-
-async function readConfiguredModel(model) {
-  if (!model || typeof model !== 'object') return null
-  const providers = await readStore('custom-providers')
-  for (const provider of Object.values(providers || {})) {
-    if (!provider || typeof provider !== 'object') continue
-    const matched = Array.isArray(provider.models)
-      ? provider.models.find((candidate) => {
-          return candidate?.id === model.id && candidate?.provider === model.provider && candidate?.api === model.api
-        })
-      : undefined
-    if (matched) return matched
-  }
-  return null
-}
-
-export async function handleSharedConversationApi(req, res, url) {
+export async function handleSharedConversationApi(req, res, url, context = {}) {
   const parts = url.pathname.split('/').filter(Boolean)
   const shareId = decodeSegment(parts[2])
   const action = parts[3]
@@ -360,7 +343,21 @@ export async function handleSharedConversationApi(req, res, url) {
 
   if (req.method === 'GET' && action === 'models') {
     assertOperate(record)
-    sendJson(res, 200, { providers: await listSharedModelProviders() })
+    const session = await sharedSessionPayload(record)
+    const models = await listModelCatalog({
+      context: { ...context, allowCloud: record.allowCloudUsage === true },
+      currentModel: session.model,
+    })
+    const providers = []
+    for (const model of models) {
+      let provider = providers.find((item) => item.id === model.provider)
+      if (!provider) {
+        provider = { id: model.provider, name: model.provider, type: model.api, baseUrl: model.baseUrl, models: [] }
+        providers.push(provider)
+      }
+      provider.models.push(sanitizeModel(model))
+    }
+    sendJson(res, 200, { providers })
     return
   }
 
@@ -373,7 +370,14 @@ export async function handleSharedConversationApi(req, res, url) {
     assertOperate(record)
     const body = await readJsonBody(req)
     await restoreAgent(record.sessionId)
-    const result = await runPrompt(record.sessionId, messageFromBody(body, record, req), [], body?.command)
+    const result = await runPrompt(
+      record.sessionId,
+      messageFromBody(body, record, req),
+      [],
+      body?.command,
+      null,
+      { ...context, allowCloud: record.allowCloudUsage === true, source: 'shared' },
+    )
     sendJson(res, 200, result)
     return
   }
@@ -381,15 +385,15 @@ export async function handleSharedConversationApi(req, res, url) {
   if (req.method === 'POST' && action === 'model') {
     assertOperate(record)
     const body = await readJsonBody(req)
-    const model = sanitizeIncomingModel(body?.model)
-    if (!model) {
-      const error = new Error('Missing model in request body')
-      error.statusCode = 400
-      throw error
-    }
     await restoreAgent(record.sessionId)
-    const configured = await readConfiguredModel(model)
-    sendJson(res, 200, updateSessionModel(record.sessionId, configured ? sanitizeModel(configured) : model))
+    const currentModel = getSessionState(record.sessionId)?.model
+    const binding = await resolveModelBinding(body, {
+      context: { ...context, allowCloud: record.allowCloudUsage === true, source: 'shared' },
+      currentModel,
+      allowCurrentHidden: true,
+      legacySnapshot: body?.model,
+    })
+    sendJson(res, 200, updateSessionModel(record.sessionId, sanitizeModel(binding.model), binding.modelRef))
     return
   }
 

package/server/routes/shares.mjs

@@ -1,10 +1,14 @@
 import { sendJson, readJsonBody, decodeSegment } from '../utils/response.mjs'
 import { readSessionValue } from '../storage.mjs'
-import { getLanUrls } from '../utils/network.mjs'
+import { getLanUrls, isTailscaleAddress } from '../utils/network.mjs'
 import {
   createConversationShare,
+  deleteConversationShare,
   listConversationShares,
+  restoreConversationShare,
   revokeConversationShare,
+  updateConversationShare,
+  updateConversationShareExpiration,
 } from '../share-store.mjs'
 
 function localBaseUrl(req, port) {
@@ -46,6 +50,13 @@ export async function handleSharesApi(req, res, url, context = {}) {
     const passwordProvided = typeof body?.password === 'string'
     const password = passwordProvided ? body.password.trim() : undefined
     const expiresAt = typeof body?.expiresAt === 'string' && body.expiresAt ? body.expiresAt : undefined
+    const allowCloudUsage = permission === 'operate' && body?.allowCloudUsage === true
+    if (allowCloudUsage && context.isLocalRequest === false
+      && !(context.remoteAuthorized === true && isTailscaleAddress(context.remoteAddress))) {
+      const error = new Error('QuickForge Cloud sharing can only be enabled locally or from an authorized Tailscale client.')
+      error.statusCode = 403
+      throw error
+    }
 
     const session = sessionId ? await readSessionValue(sessionId) : null
     if (!session) {
@@ -59,6 +70,7 @@ export async function handleSharesApi(req, res, url, context = {}) {
       permission,
       password: passwordProvided ? password : undefined,
       expiresAt,
+      allowCloudUsage,
       titleSnapshot: session.title,
       scope: session.scope,
       projectId: session.projectId,
@@ -77,6 +89,69 @@ export async function handleSharesApi(req, res, url, context = {}) {
     return
   }
 
+  if (parts.length === 4 && parts[0] === 'api' && parts[1] === 'shares') {
+    const shareId = decodeSegment(parts[2])
+    const action = parts[3]
+
+    if (req.method === 'POST' && action === 'disable') {
+      const share = await revokeConversationShare(shareId)
+      sendJson(res, 200, { ok: true, share })
+      return
+    }
+
+    if (req.method === 'POST' && action === 'restore') {
+      const body = await readJsonBody(req)
+      const expiresAt = typeof body?.expiresAt === 'string' && body.expiresAt ? body.expiresAt : undefined
+      const currentShares = await listConversationShares()
+      const current = currentShares.find((share) => share.id === shareId)
+      if (!current) {
+        const error = new Error('Share not found')
+        error.statusCode = 404
+        throw error
+      }
+      const session = current.sessionId ? await readSessionValue(current.sessionId) : null
+      if (!session) {
+        const error = new Error('Session not found')
+        error.statusCode = 404
+        throw error
+      }
+      const share = await restoreConversationShare(shareId, expiresAt)
+      sendJson(res, 200, { ok: true, share })
+      return
+    }
+
+    if (req.method === 'POST' && action === 'expiration') {
+      const body = await readJsonBody(req)
+      const expiresAt = typeof body?.expiresAt === 'string' && body.expiresAt ? body.expiresAt : undefined
+      const share = await updateConversationShareExpiration(shareId, expiresAt)
+      sendJson(res, 200, { ok: true, share })
+      return
+    }
+
+    if (req.method === 'POST' && action === 'update') {
+      const body = await readJsonBody(req)
+      const permission = body?.permission
+      const password = typeof body?.password === 'string' ? body.password : undefined
+      const expiresAt = typeof body?.expiresAt === 'string' && body.expiresAt ? body.expiresAt : undefined
+      const allowCloudUsage = body?.allowCloudUsage
+      if (allowCloudUsage === true && context.isLocalRequest === false
+        && !(context.remoteAuthorized === true && isTailscaleAddress(context.remoteAddress))) {
+        const error = new Error('QuickForge Cloud sharing can only be enabled locally or from an authorized Tailscale client.')
+        error.statusCode = 403
+        throw error
+      }
+      const share = await updateConversationShare(shareId, { permission, password, expiresAt, allowCloudUsage })
+      sendJson(res, 200, { ok: true, share })
+      return
+    }
+
+    if (req.method === 'DELETE' && action === 'permanent') {
+      const share = await deleteConversationShare(shareId)
+      sendJson(res, 200, { ok: true, share })
+      return
+    }
+  }
+
   if (req.method === 'DELETE' && parts.length === 3 && parts[0] === 'api' && parts[1] === 'shares') {
     const shareId = decodeSegment(parts[2])
     const share = await revokeConversationShare(shareId)

package/server/routes/static.mjs

@@ -4,6 +4,7 @@ import { fileURLToPath } from 'node:url'
 
 const __filename = fileURLToPath(import.meta.url)
 const projectRoot = path.resolve(path.dirname(__filename), '../..')
+const androidApkPath = path.join(projectRoot, 'android', 'app', 'build', 'outputs', 'apk', 'debug', 'app-debug.apk')
 
 function getContentType(filePath) {
   const extension = path.extname(filePath).toLowerCase()
@@ -45,7 +46,31 @@ function shouldFallbackToIndex(url, pathname) {
   return !path.extname(pathname)
 }
 
+function cacheControlFor(filePath) {
+  if (filePath.endsWith('index.html')) return 'no-cache'
+  if (path.extname(filePath).toLowerCase() === '.apk') return 'no-cache'
+  return 'public, max-age=31536000, immutable'
+}
+
 export async function serveStatic(req, res, url) {
+  if (url.pathname === '/downloads/quickforge-android.apk') {
+    try {
+      const data = await fs.readFile(androidApkPath)
+      res.writeHead(200, {
+        'content-type': 'application/vnd.android.package-archive',
+        'content-length': data.length,
+        'content-disposition': 'attachment; filename="quickforge-android.apk"',
+        'cache-control': 'no-cache',
+        'x-content-type-options': 'nosniff',
+      })
+      res.end(data)
+    } catch {
+      res.writeHead(404, { 'content-type': 'text/plain; charset=utf-8', 'cache-control': 'no-store' })
+      res.end('Android APK not found. Run npm run android:build first.')
+    }
+    return
+  }
+
   const distDir = path.join(projectRoot, 'dist')
   const requested = decodeURIComponent(requestPathname(url))
   const normalized = path.normalize(requested).replace(/^([.][.][/])+/, '').replace(/^[/\\]+/, '')
@@ -74,7 +99,7 @@ export async function serveStatic(req, res, url) {
     const data = await fs.readFile(filePath)
     res.writeHead(200, {
       'content-type': getContentType(filePath),
-      'cache-control': filePath.endsWith('index.html') ? 'no-cache' : 'public, max-age=31536000, immutable',
+      'cache-control': cacheControlFor(filePath),
     })
     res.end(data)
   } catch {

package/server/routes/storage.mjs

@@ -94,7 +94,7 @@ async function readIndexedValues(store, indexName, direction, scope, projectId,
   return values
 }
 
-export async function handleStorageApi(req, res, url) {
+export async function handleStorageApi(req, res, url, context = {}) {
   const parts = url.pathname.split('/').filter(Boolean)
 
   if (req.method === 'GET' && url.pathname === '/api/storage/quota') {
@@ -116,6 +116,29 @@ export async function handleStorageApi(req, res, url) {
   }
 
   const store = decodeSegment(parts[2])
+  const remotelySensitiveStores = new Set([
+    'provider-keys',
+    'custom-providers',
+    'mcp',
+    'plugins',
+    'scheduled-tasks',
+    'agent-profile-overrides',
+    'custom-agents',
+  ])
+  if (context.isLocalRequest === false && remotelySensitiveStores.has(store)) {
+    const error = new Error('This storage area is available only on this computer.')
+    error.statusCode = 403
+    error.errorCode = 'storage_local_only'
+    throw error
+  }
+
+  const remotelyReadOnlyStores = new Set(['sessions', 'sessions-metadata'])
+  if (context.isLocalRequest === false && remotelyReadOnlyStores.has(store) && req.method !== 'GET') {
+    const error = new Error('Remote clients must modify conversations through the Agent API.')
+    error.statusCode = 403
+    error.errorCode = 'storage_remote_read_only'
+    throw error
+  }
 
   if (req.method === 'GET' && parts[3] === 'keys') {
     const prefix = url.searchParams.get('prefix') || ''

package/server/routes/system.mjs

@@ -36,6 +36,12 @@ export async function handleSystemApi(req, res, url, context) {
   }
 
   if (req.method === 'POST' && url.pathname === '/api/system/restart') {
+    if (!context.isLocalRequest) {
+      const error = new Error('Restart is only allowed from this computer')
+      error.statusCode = 403
+      throw error
+    }
+
     if (req.headers['x-quickforge-action'] !== 'restart') {
       const error = new Error('Forbidden action')
       error.statusCode = 403
@@ -59,6 +65,11 @@ export async function handleSystemApi(req, res, url, context) {
     }
 
     if (req.method === 'PUT') {
+      if (!context.isLocalRequest) {
+        const error = new Error('Terminal shell settings can only be changed from this computer')
+        error.statusCode = 403
+        throw error
+      }
       const body = await readJsonBody(req, 64 * 1024) || {}
       if (Array.isArray(body.profiles) || typeof body.defaultProfileId === 'string') {
         sendJson(res, 200, await context.updateTerminalShellConfig(body))

package/server/routes/terminal.mjs

@@ -59,7 +59,7 @@ export async function handleTerminalApi(req, res, url, options = {}) {
   await assertLocalTerminalRequest(req, options.isLocalRequest)
 
   if (req.method === 'GET' && url.pathname === '/api/terminal/capabilities') {
-    sendJson(res, 200, { ...await terminalCapabilities(), ...await platformInfo() })
+    sendJson(res, 200, { ...await terminalCapabilities(), ...await platformInfo() }, 'private, max-age=300')
     return
   }
 
@@ -137,7 +137,12 @@ async function handleTerminalUpgradeAsync(req, socket, head, url, options = {})
         attachTerminalClient(sessionId, ws)
       } catch (err) {
         try {
-          ws.send(JSON.stringify({ type: 'error', message: err?.message || 'Terminal connection failed' }), () => ws.close())
+          ws.send(JSON.stringify({
+            type: 'error',
+            code: err?.statusCode === 404 ? 'SESSION_NOT_FOUND' : 'TERMINAL_CONNECTION_FAILED',
+            message: err?.message || 'Terminal connection failed',
+            retryable: err?.statusCode !== 404,
+          }), () => ws.close())
         } catch {
           ws.close()
         }