Function handleApiConfig

packages/server/src/api-extension.ts:13195–13247

(req: IncomingMessage, res: ServerResponse)

  const paneTargetLockDir = projectDir ? getLocalDir(projectDir) : null;
  async function handleApiConfig(req: IncomingMessage, res: ServerResponse): Promise<void> {
    if (req.method === 'DELETE') {
      const peerAddress = req.socket?.remoteAddress;
      if (peerAddress !== undefined && !isLoopbackAddress(peerAddress)) {
        errorResponse(res, 403, 'urn:ok:error:loopback-required', 'Loopback required.', {
          handler: 'api-config',
        });
        return;
      }
      if (!isAllowedWorkspaceHostHeader(req.headers.host)) {
        errorResponse(res, 403, 'urn:ok:error:host-not-allowed', 'Host header not allowed.', {
          handler: 'api-config',
        });
        return;
      }
      if (paneTargetLockDir) clearArmedPaneTarget(paneTargetLockDir);
      res.setHeader('Cache-Control', 'no-store');
      res.statusCode = 204;
      res.end();
      return;
    }
    if (req.method === 'GET' || req.method === 'HEAD') {
      try {
        const host = req.headers.host;
        const collabUrl = host ? `ws://${host}/collab` : null;
        const port = paneTargetLockDir ? (readServerLock(paneTargetLockDir)?.port ?? 0) : 0;
        const paneTarget = paneTargetLockDir ? readArmedPaneTarget(paneTargetLockDir) : null;
        const payload = { collabUrl, previewUrl: null, port, paneTarget, singleFile: ephemeral };
        if (req.method === 'HEAD') {
          res.setHeader('Content-Type', 'application/json');
          res.setHeader('Cache-Control', 'no-store');
          res.setHeader('X-Content-Type-Options', 'nosniff');
          res.statusCode = 200;
          res.end();
          return;
        }
        successResponse(res, 200, ApiConfigSuccessSchema, payload, {
          handler: 'api-config',
          extraHeaders: { 'Cache-Control': 'no-store' },
        });
      } catch (e) {
        errorResponse(res, 500, 'urn:ok:error:internal-server-error', 'Internal server error.', {
          handler: 'api-config',
          cause: e,
        });
      }
      return;
    }
    errorResponse(res, 405, 'urn:ok:error:method-not-allowed', 'Method not allowed.', {
      handler: 'api-config',
      extraHeaders: { Allow: 'GET, HEAD, DELETE' },
    });
  }

  const HANDLE_LOCAL_OP_EMBEDDINGS_SET_KEY = 'local-op-embeddings-set-key';
  const HANDLE_LOCAL_OP_EMBEDDINGS_CLEAR_KEY = 'local-op-embeddings-clear-key';