/** * @file HTTP surface for the AI Tools catalog (server/lib/ai-tools.js): list * what is known and installed, re-detect after hydrating PATH from the login * shell, and enable/disable a tool or make it the default. Nothing here takes * a command or an argument from the request — the catalog files are the only * source of what a lane may run. Writes sit behind the same-origin guard. * @author Nguyễn Ngọc Trí Vĩ */ const express = require("express"); const aiTools = require("../lib/ai-tools"); const { hydrateShellPath } = require("../lib/shell-path"); const { sameOriginGuard } = require("../lib/same-origin"); const router = express.Router(); router.get("/", (_req, res) => { res.json(aiTools.view()); }); router.post("/refresh", sameOriginGuard, async (_req, res) => { await hydrateShellPath(); aiTools.refresh(); res.json(aiTools.view()); }); router.put("/:id", sameOriginGuard, (req, res) => { const { enabled, default: makeDefault } = req.body || {}; try { if (enabled !== undefined) { if (typeof enabled !== "boolean") { return res .status(400) .json({ error: { code: "EBADFIELD", message: "enabled must be a boolean" } }); } aiTools.setEnabled(req.params.id, enabled); } if (makeDefault === true) aiTools.setDefault(req.params.id); else if (enabled === undefined && !aiTools.has(req.params.id)) { return res.status(404).json({ error: { code: "ENOTOOL", message: "unknown AI tool" } }); } res.json(aiTools.view()); } catch (e) { const status = e.code === "ENOTOOL" ? 404 : e.code === "EBADDEFAULT" ? 400 : 500; res.status(status).json({ error: { code: e.code || "EINTERNAL", message: e.message } }); } }); module.exports = router;