@shawnstack/quickforge 1.7.4 → 1.7.6

package/server/routes/scheduled-tasks.mjs

@@ -6,6 +6,7 @@ import { createAgent, getSessionEventBus, agentEvents, persistSessionState, abor
 import { agentProfileSnapshot, getAgentProfile } from '../agent-profiles.mjs'
 import { projectContextFromId, readProjectConfig } from '../project-config.mjs'
 import { logger } from '../utils/logger.mjs'
+import { resolveModelBinding } from '../model-catalog.mjs'
 import {
   dayMs,
   formatLocalDateTime,
@@ -133,10 +134,14 @@ async function getApiKey(provider) {
   }
 }
 
-async function parseScheduledTaskInstructionWithAi(instruction, model, thinkingLevel = 'off') {
+async function parseScheduledTaskInstructionWithAi(instruction, modelInput, thinkingLevel = 'off', context = {}) {
   const text = String(instruction || '').trim()
   if (!text) return { needMoreInfo: true, question: '请输入要创建的定时任务。' }
-  if (!model) return { needMoreInfo: true, question: '请先选择用于解析任务的大模型。' }
+  if (!modelInput) return { needMoreInfo: true, question: '请先选择用于解析任务的大模型。' }
+  const { model } = await resolveModelBinding(
+    modelInput?.modelRef || modelInput?.model ? modelInput : { model: modelInput },
+    { context, legacySnapshot: modelInput?.model || modelInput },
+  )
 
   const now = new Date()
   const systemPrompt = `你是定时任务解析器。把用户的中文自然语言定时任务解析为 JSON。
@@ -529,6 +534,18 @@ async function executeTask(task, trigger = 'schedule', onStarted) {
 
   try {
     const executionProject = await resolveExecutionProject(task)
+    const binding = task.modelRef || task.model
+      ? await resolveModelBinding(
+          task.modelRef ? { modelRef: task.modelRef } : { model: task.model },
+          {
+            context: { source: 'scheduled', allowCloud: true },
+            currentModel: task.model,
+            allowCurrentHidden: true,
+            forExecution: true,
+            legacySnapshot: task.model,
+          },
+        )
+      : null
     if (task.agentId) {
       executionAgent = await getAgentProfile(task.agentId, { projectId: executionProject?.id || null, workspaceRoot: executionProject?.path })
       if (!executionAgent) agentWarning = `Configured agent not found: ${task.agentId}`
@@ -541,7 +558,9 @@ async function executeTask(task, trigger = 'schedule', onStarted) {
       scope: executionProject ? 'project' : 'global',
       projectId: executionProject?.id || null,
       yoloMode,
-      model: task.model,
+      model: binding?.model || task.model,
+      modelRef: binding?.modelRef || task.modelRef || null,
+      modelAccessContext: { source: 'scheduled', allowCloud: true },
       thinkingLevel: task.thinkingLevel,
       title: `[定时任务] ${task.title}`,
       agentProfile: executionAgent,
@@ -577,7 +596,7 @@ async function executeTask(task, trigger = 'schedule', onStarted) {
     onStarted?.({ taskId: task.id, runId, sessionId })
 
     const eventBus = getSessionEventBus(sessionId)
-    const runtimeLimitMs = Math.max(1000, Math.min(Number(executionAgent?.maxRuntimeMs || 30 * 60 * 1000), 30 * 60 * 1000))
+    const runtimeLimitMs = Math.max(1000, Math.min(Number(executionAgent?.maxRuntimeMs || 60 * 60 * 1000), 60 * 60 * 1000))
     let timeout = null
     let handler = null
     let timedOut = false
@@ -770,12 +789,12 @@ export function stopScheduledTaskRunner() {
   runningTaskRunIds.clear()
 }
 
-export async function handleScheduledTasksApi(req, res, url) {
+export async function handleScheduledTasksApi(req, res, url, context = {}) {
   const parts = url.pathname.split('/').filter(Boolean)
 
   if (req.method === 'POST' && url.pathname === '/api/scheduled-tasks/parse') {
     const body = await readJsonBody(req)
-    sendJson(res, 200, await parseScheduledTaskInstructionWithAi(body?.instruction, body?.model, body?.thinkingLevel))
+    sendJson(res, 200, await parseScheduledTaskInstructionWithAi(body?.instruction, body?.modelRef ? body : body?.model, body?.thinkingLevel, context))
     return
   }
 
@@ -796,12 +815,14 @@ export async function handleScheduledTasksApi(req, res, url) {
     const now = new Date().toISOString()
     const normalized = normalizeTaskInput(parsed)
     const enabled = parsed.enabled !== false && parsed.status !== 'paused'
+    const binding = await resolveModelBinding(body, { context, legacySnapshot: body?.model })
     const task = {
       id: createId(),
       ...normalized,
       scheduleRule: normalized.scheduleRule || scheduleRuleFor(normalized),
       executionMode: normalized.executionMode || 'serial',
-      model: body?.model,
+      model: binding.model,
+      modelRef: binding.modelRef,
       thinkingLevel: body?.thinkingLevel || (body?.model?.reasoning ? 'medium' : 'off'),
       projectId: body?.projectId || null,
       projectName: body?.projectName || null,
@@ -830,6 +851,14 @@ export async function handleScheduledTasksApi(req, res, url) {
       const parsed = body?.task
       if (!parsed) throw requestError('Missing task')
       const normalized = normalizeTaskInput(parsed, existing)
+      const binding = body?.modelRef || body?.model
+        ? await resolveModelBinding(body, {
+            context,
+            currentModel: existing.model,
+            allowCurrentHidden: true,
+            legacySnapshot: body?.model,
+          })
+        : null
       const now = new Date().toISOString()
       const hasProject = Object.prototype.hasOwnProperty.call(body, 'projectId')
       const task = await updateTask(taskId, (current) => ({
@@ -837,7 +866,8 @@ export async function handleScheduledTasksApi(req, res, url) {
         ...normalized,
         scheduleRule: normalized.scheduleRule || scheduleRuleFor(normalized),
         executionMode: normalized.executionMode || 'serial',
-        model: body?.model ?? current.model,
+        model: binding?.model ?? current.model,
+        modelRef: binding?.modelRef ?? current.modelRef,
         thinkingLevel: body?.thinkingLevel ?? current.thinkingLevel,
         projectId: hasProject ? (body.projectId || null) : current.projectId,
         projectName: hasProject ? (body.projectName || null) : current.projectName,

package/server/routes/shared-conversation.mjs

@@ -1,10 +1,12 @@
 import { sendJson, readJsonBody, decodeSegment } from '../utils/response.mjs'
-import { readSessionValue, readStore } from '../storage.mjs'
+import { readSessionValue } from '../storage.mjs'
+import { listModelCatalog, resolveModelBinding } from '../model-catalog.mjs'
 import { sendSessionAsset } from './session-assets.mjs'
 import { abortRun, restoreAgent, runPrompt, getSessionState, getSessionEventBus, updateSessionModel, updateSessionThinkingLevel } from '../agent-manager.mjs'
 import {
   assertShareActive,
   issueConversationShareToken,
+  onConversationShareInvalidated,
   parseCookies,
   readConversationShare,
   rollbackSharedSessionMessages,
@@ -49,6 +51,7 @@ function publicSharePayload(record) {
     scope: record.scope,
     projectId: record.projectId,
     hasPassword: Boolean(record.passwordHash),
+    allowCloudUsage: record.allowCloudUsage === true,
   }
 }
 
@@ -101,13 +104,6 @@ function sanitizeModel(model) {
   }
 }
 
-function sanitizeIncomingModel(model) {
-  if (!model || typeof model !== 'object') return null
-  const sanitized = sanitizeModel(model)
-  if (!sanitized.id || !sanitized.provider) return null
-  return sanitized
-}
-
 function sanitizeEvent(event) {
   if (!event || typeof event !== 'object') return event
   const next = { ...event }
@@ -147,6 +143,20 @@ async function handleSharedEvents(req, res, record) {
 
   writeSseEvent(res, 'state', await sharedSessionPayload(record))
 
+  let cleanedUp = false
+  let expirationTimeout
+  let removeShareInvalidationListener = () => undefined
+
+  const cleanup = () => {
+    if (cleanedUp) return
+    cleanedUp = true
+    clearInterval(keepAlive)
+    if (expirationTimeout) clearTimeout(expirationTimeout)
+    removeShareInvalidationListener()
+    eventBus.removeListener('agent_event', onAgentEvent)
+    if (!res.writableEnded) res.end()
+  }
+
   const keepAlive = setInterval(() => {
     try {
       res.write(': ping\n\n')
@@ -164,11 +174,19 @@ async function handleSharedEvents(req, res, record) {
     }
   }
 
-  const cleanup = () => {
-    clearInterval(keepAlive)
-    eventBus.removeListener('agent_event', onAgentEvent)
-    if (!res.writableEnded) res.end()
+  removeShareInvalidationListener = onConversationShareInvalidated(({ shareId }) => {
+    if (shareId === record.id) cleanup()
+  })
+  const scheduleExpiration = () => {
+    if (!record.expiresAt || cleanedUp) return
+    const delay = Date.parse(record.expiresAt) - Date.now()
+    if (delay <= 0) {
+      cleanup()
+      return
+    }
+    expirationTimeout = setTimeout(scheduleExpiration, Math.min(delay, 2_147_483_647))
   }
+  scheduleExpiration()
 
   eventBus.on('agent_event', onAgentEvent)
   req.on('close', cleanup)
@@ -269,42 +287,7 @@ async function sharedSessionPayload(record) {
   return sanitizeSession(session, record)
 }
 
-function sanitizeProvider(provider) {
-  if (!provider || typeof provider !== 'object') return null
-  const models = Array.isArray(provider.models)
-    ? provider.models.map(sanitizeModel).filter((model) => model?.id && model?.provider && model?.api)
-    : []
-  if (!models.length) return null
-  return {
-    id: provider.id || provider.name || models[0].provider,
-    name: provider.name || models[0].provider,
-    type: provider.type || models[0].api,
-    baseUrl: provider.baseUrl,
-    models,
-  }
-}
-
-async function listSharedModelProviders() {
-  const providers = await readStore('custom-providers')
-  return Object.values(providers || {}).map(sanitizeProvider).filter(Boolean)
-}
-
-async function readConfiguredModel(model) {
-  if (!model || typeof model !== 'object') return null
-  const providers = await readStore('custom-providers')
-  for (const provider of Object.values(providers || {})) {
-    if (!provider || typeof provider !== 'object') continue
-    const matched = Array.isArray(provider.models)
-      ? provider.models.find((candidate) => {
-          return candidate?.id === model.id && candidate?.provider === model.provider && candidate?.api === model.api
-        })
-      : undefined
-    if (matched) return matched
-  }
-  return null
-}
-
-export async function handleSharedConversationApi(req, res, url) {
+export async function handleSharedConversationApi(req, res, url, context = {}) {
   const parts = url.pathname.split('/').filter(Boolean)
   const shareId = decodeSegment(parts[2])
   const action = parts[3]
@@ -360,7 +343,21 @@ export async function handleSharedConversationApi(req, res, url) {
 
   if (req.method === 'GET' && action === 'models') {
     assertOperate(record)
-    sendJson(res, 200, { providers: await listSharedModelProviders() })
+    const session = await sharedSessionPayload(record)
+    const models = await listModelCatalog({
+      context: { ...context, allowCloud: record.allowCloudUsage === true },
+      currentModel: session.model,
+    })
+    const providers = []
+    for (const model of models) {
+      let provider = providers.find((item) => item.id === model.provider)
+      if (!provider) {
+        provider = { id: model.provider, name: model.provider, type: model.api, baseUrl: model.baseUrl, models: [] }
+        providers.push(provider)
+      }
+      provider.models.push(sanitizeModel(model))
+    }
+    sendJson(res, 200, { providers })
     return
   }
 
@@ -373,7 +370,14 @@ export async function handleSharedConversationApi(req, res, url) {
     assertOperate(record)
     const body = await readJsonBody(req)
     await restoreAgent(record.sessionId)
-    const result = await runPrompt(record.sessionId, messageFromBody(body, record, req), [], body?.command)
+    const result = await runPrompt(
+      record.sessionId,
+      messageFromBody(body, record, req),
+      [],
+      body?.command,
+      null,
+      { ...context, allowCloud: record.allowCloudUsage === true, source: 'shared' },
+    )
     sendJson(res, 200, result)
     return
   }
@@ -381,15 +385,15 @@ export async function handleSharedConversationApi(req, res, url) {
   if (req.method === 'POST' && action === 'model') {
     assertOperate(record)
     const body = await readJsonBody(req)
-    const model = sanitizeIncomingModel(body?.model)
-    if (!model) {
-      const error = new Error('Missing model in request body')
-      error.statusCode = 400
-      throw error
-    }
     await restoreAgent(record.sessionId)
-    const configured = await readConfiguredModel(model)
-    sendJson(res, 200, updateSessionModel(record.sessionId, configured ? sanitizeModel(configured) : model))
+    const currentModel = getSessionState(record.sessionId)?.model
+    const binding = await resolveModelBinding(body, {
+      context: { ...context, allowCloud: record.allowCloudUsage === true, source: 'shared' },
+      currentModel,
+      allowCurrentHidden: true,
+      legacySnapshot: body?.model,
+    })
+    sendJson(res, 200, updateSessionModel(record.sessionId, sanitizeModel(binding.model), binding.modelRef))
     return
   }
 

package/server/routes/shares.mjs

@@ -1,10 +1,15 @@
 import { sendJson, readJsonBody, decodeSegment } from '../utils/response.mjs'
 import { readSessionValue } from '../storage.mjs'
 import { getLanUrls } from '../utils/network.mjs'
+import { isAuthenticatedAppClient } from '../access-policy.mjs'
 import {
   createConversationShare,
+  deleteConversationShare,
   listConversationShares,
+  restoreConversationShare,
   revokeConversationShare,
+  updateConversationShare,
+  updateConversationShareExpiration,
 } from '../share-store.mjs'
 
 function localBaseUrl(req, port) {
@@ -24,7 +29,7 @@ function shareUrlForRequest(req, shareId, port) {
   return `${baseUrl}/share/${encodeURIComponent(shareId)}`
 }
 
-export async function handleSharesApi(req, res, url, context = {}) {
+export async function handleSharesApi(req, res, url, context = { isLocalRequest: true }) {
   const parts = url.pathname.split('/').filter(Boolean)
 
   if (req.method === 'GET' && url.pathname === '/api/shares') {
@@ -46,6 +51,12 @@ export async function handleSharesApi(req, res, url, context = {}) {
     const passwordProvided = typeof body?.password === 'string'
     const password = passwordProvided ? body.password.trim() : undefined
     const expiresAt = typeof body?.expiresAt === 'string' && body.expiresAt ? body.expiresAt : undefined
+    const allowCloudUsage = permission === 'operate' && body?.allowCloudUsage === true
+    if (allowCloudUsage && !isAuthenticatedAppClient(context)) {
+      const error = new Error('QuickForge Cloud sharing can only be enabled locally or from an authenticated remote client.')
+      error.statusCode = 403
+      throw error
+    }
 
     const session = sessionId ? await readSessionValue(sessionId) : null
     if (!session) {
@@ -59,6 +70,7 @@ export async function handleSharesApi(req, res, url, context = {}) {
       permission,
       password: passwordProvided ? password : undefined,
       expiresAt,
+      allowCloudUsage,
       titleSnapshot: session.title,
       scope: session.scope,
       projectId: session.projectId,
@@ -77,6 +89,68 @@ export async function handleSharesApi(req, res, url, context = {}) {
     return
   }
 
+  if (parts.length === 4 && parts[0] === 'api' && parts[1] === 'shares') {
+    const shareId = decodeSegment(parts[2])
+    const action = parts[3]
+
+    if (req.method === 'POST' && action === 'disable') {
+      const share = await revokeConversationShare(shareId)
+      sendJson(res, 200, { ok: true, share })
+      return
+    }
+
+    if (req.method === 'POST' && action === 'restore') {
+      const body = await readJsonBody(req)
+      const expiresAt = typeof body?.expiresAt === 'string' && body.expiresAt ? body.expiresAt : undefined
+      const currentShares = await listConversationShares()
+      const current = currentShares.find((share) => share.id === shareId)
+      if (!current) {
+        const error = new Error('Share not found')
+        error.statusCode = 404
+        throw error
+      }
+      const session = current.sessionId ? await readSessionValue(current.sessionId) : null
+      if (!session) {
+        const error = new Error('Session not found')
+        error.statusCode = 404
+        throw error
+      }
+      const share = await restoreConversationShare(shareId, expiresAt)
+      sendJson(res, 200, { ok: true, share })
+      return
+    }
+
+    if (req.method === 'POST' && action === 'expiration') {
+      const body = await readJsonBody(req)
+      const expiresAt = typeof body?.expiresAt === 'string' && body.expiresAt ? body.expiresAt : undefined
+      const share = await updateConversationShareExpiration(shareId, expiresAt)
+      sendJson(res, 200, { ok: true, share })
+      return
+    }
+
+    if (req.method === 'POST' && action === 'update') {
+      const body = await readJsonBody(req)
+      const permission = body?.permission
+      const password = typeof body?.password === 'string' ? body.password : undefined
+      const expiresAt = typeof body?.expiresAt === 'string' && body.expiresAt ? body.expiresAt : undefined
+      const allowCloudUsage = body?.allowCloudUsage
+      if (allowCloudUsage === true && !isAuthenticatedAppClient(context)) {
+        const error = new Error('QuickForge Cloud sharing can only be enabled locally or from an authenticated remote client.')
+        error.statusCode = 403
+        throw error
+      }
+      const share = await updateConversationShare(shareId, { permission, password, expiresAt, allowCloudUsage })
+      sendJson(res, 200, { ok: true, share })
+      return
+    }
+
+    if (req.method === 'DELETE' && action === 'permanent') {
+      const share = await deleteConversationShare(shareId)
+      sendJson(res, 200, { ok: true, share })
+      return
+    }
+  }
+
   if (req.method === 'DELETE' && parts.length === 3 && parts[0] === 'api' && parts[1] === 'shares') {
     const shareId = decodeSegment(parts[2])
     const share = await revokeConversationShare(shareId)

package/server/routes/storage.mjs

@@ -2,6 +2,7 @@ import { sendJson, readJsonBody, decodeSegment } from '../utils/response.mjs'
 import { readStore, writeStore, atomicUpdate, getComparable, getStoreRevision, readSessionStoreScoped, readSessionValue, writeSessionValue, deleteSessionValue, ensureStorage, dataDir, configDir, storageDir, cacheDir, logsDir } from '../storage.mjs'
 import { AUTO_ARCHIVE_SETTINGS_KEY, archiveInactiveSessions, normalizeAutoArchiveSettings } from '../auto-archive.mjs'
 import { directorySize } from '../utils/workspace.mjs'
+import { isAuthenticatedAppClient } from '../access-policy.mjs'
 
 const metadataIndexCache = new Map()
 const MAX_METADATA_INDEX_CACHE_ENTRIES = 50
@@ -94,7 +95,14 @@ async function readIndexedValues(store, indexName, direction, scope, projectId,
   return values
 }
 
-export async function handleStorageApi(req, res, url) {
+export async function handleStorageApi(req, res, url, context = { isLocalRequest: true }) {
+  if (!isAuthenticatedAppClient(context)) {
+    const error = new Error('Storage access requires a local or authenticated remote client.')
+    error.statusCode = 403
+    error.errorCode = 'storage_auth_required'
+    throw error
+  }
+
   const parts = url.pathname.split('/').filter(Boolean)
 
   if (req.method === 'GET' && url.pathname === '/api/storage/quota') {

package/server/routes/system.mjs

@@ -1,5 +1,6 @@
 import { sendJson, readJsonBody } from '../utils/response.mjs'
 import { getLanUrls } from '../utils/network.mjs'
+import { isAuthenticatedAppClient } from '../access-policy.mjs'
 
 export async function handleSystemApi(req, res, url, context) {
   if (req.method === 'GET' && url.pathname === '/api/system/about') {
@@ -18,9 +19,10 @@ export async function handleSystemApi(req, res, url, context) {
   }
 
   if (req.method === 'POST' && url.pathname === '/api/system/update') {
-    if (!context.isLocalRequest) {
-      const error = new Error('Update is only allowed from this computer')
+    if (!isAuthenticatedAppClient(context)) {
+      const error = new Error('Update requires a local or authenticated remote client')
       error.statusCode = 403
+      error.errorCode = 'system_update_requires_auth'
       throw error
     }
 
@@ -36,9 +38,10 @@ export async function handleSystemApi(req, res, url, context) {
   }
 
   if (req.method === 'POST' && url.pathname === '/api/system/restart') {
-    if (!context.isLocalRequest) {
-      const error = new Error('Restart is only allowed from this computer')
+    if (!isAuthenticatedAppClient(context)) {
+      const error = new Error('Restart requires a local or authenticated remote client')
       error.statusCode = 403
+      error.errorCode = 'system_restart_requires_auth'
       throw error
     }
 

package/server/routes/workspace.mjs

@@ -2,6 +2,7 @@ import { promises as fs } from 'node:fs'
 import path from 'node:path'
 import { spawn } from 'node:child_process'
 import { streamSimpleWithAiHttpLogging } from '../ai-http-logger.mjs'
+import { resolveModelBinding } from '../model-catalog.mjs'
 import { DEFAULT_AI_MAX_RETRIES } from '../ai-provider-options.mjs'
 import { sendJson, readJsonBody } from '../utils/response.mjs'
 import { projectContextFromId } from '../project-config.mjs'
@@ -1080,9 +1081,10 @@ async function contextFromGitBody(req) {
   return { context: await projectContextFromId(projectId), body }
 }
 
-async function handleGitGenerateCommitMessage(req, res) {
+async function handleGitGenerateCommitMessage(req, res, requestContext = {}) {
   const { context, body } = await contextFromGitBody(req)
-  const message = await generateGitCommitMessage(context, body?.model, body?.thinkingLevel, Boolean(body?.includeUnstaged))
+  const binding = await resolveModelBinding(body, { context: requestContext, legacySnapshot: body?.model })
+  const message = await generateGitCommitMessage(context, binding.model, body?.thinkingLevel, Boolean(body?.includeUnstaged))
   sendJson(res, 200, { message })
 }
 
@@ -1178,7 +1180,7 @@ export async function handleWorkspaceApi(req, res, url, requestContext = {}) {
   throw error
 }
 
-export async function handleGitApi(req, res, url) {
+export async function handleGitApi(req, res, url, requestContext = {}) {
   if (req.method === 'GET' && url.pathname === '/api/git/status') {
     await handleGitStatus(req, res, url)
     return
@@ -1204,7 +1206,7 @@ export async function handleGitApi(req, res, url) {
     return
   }
   if (req.method === 'POST' && url.pathname === '/api/git/generate-commit-message') {
-    await handleGitGenerateCommitMessage(req, res)
+    await handleGitGenerateCommitMessage(req, res, requestContext)
     return
   }
   if (req.method === 'POST' && url.pathname === '/api/git/stage') {