zen: add security check

This commit is contained in:
Frank 2026-07-21 14:51:41 -04:00
commit 4438f69aac

View file

@ -775,7 +775,11 @@ export async function handler(
)
if (!data) throw new AuthError(t("zen.api.error.invalidApiKey"))
if (data.workspace.isBlocked || data.workspace.isFlaggedByAnthropic || data.workspace.isFlaggedByOpenAI)
if (
data.workspace.isBlocked ||
(data.workspace.isFlaggedByAnthropic && modelInfo.id.startsWith("claude-")) ||
(data.workspace.isFlaggedByOpenAI && modelInfo.id.startsWith("gpt-"))
)
throw new AuthError(t("zen.api.error.requestBlockedByUpstreamProvider"))
if (
modelInfo.id.startsWith("alpha-") &&