Function createApp

electron/mapi/httpserver/main.ts:194–742

(port: number, token: string)

};

const createApp = (port: number, token: string) => {
    const app = express();
    app.use(express.json());
    app.use((_req, res, next) => {
        res.setHeader("Access-Control-Allow-Origin", "*");
        res.setHeader("Access-Control-Allow-Methods", "POST, GET, OPTIONS");
        res.setHeader(
            "Access-Control-Allow-Headers",
            "Content-Type, Authorization",
        );
        if (_req.method === "OPTIONS") {
            res.status(200).end();
            return;
        }
        next();
    });

    app.get("/doc", (_req, res) => {
        const html = docHtml.replace(/\{\{PORT\}\}/g, String(port));
        res.status(200)
            .set("Content-Type", "text/html; charset=utf-8")
            .send(html);
    });

    app.use((_req, res, next) => {
        const auth = _req.headers["authorization"] || "";
        if (!auth.startsWith("Bearer ") || auth.slice(7) !== token) {
            sendJson(res, 401, { code: -1, msg: "Unauthorized" });
            return;
        }
        next();
    });

    app.post("/api/model/list", async (_req, res) => {
        try {
            const servers = await getInstalledServers();
            sendJson(res, 200, { code: 0, data: servers });
        } catch (e) {
            sendJson(res, 500, { code: -1, msg: String(e) });
        }
    });

    app.post("/api/model/call", async (req, res) => {
        try {
            const {
                model,
                version,
                function: funcName,
                param,
            } = req.body || {};
            let serverName: string;
            let serverVersion: string;
            if (version !== undefined) {
                // 新格式：model 和 version 分别传递
                serverName = model || "";
                serverVersion = version || "";
            } else {
                // 兼容旧格式：model 为 "name|version"