Refactor global styles and enhance MITM functionality

- Updated global CSS to implement a new brand color palette and improve light/dark theme consistency.
- Enhanced the MitmServerCard component to provide clearer user feedback regarding admin privileges.
- Filtered LLM combos in the CombosPage to ensure only relevant data is displayed.
- Improved APIPageClient layout for better usability and visual consistency.
- Added functionality to save and load DNS tool states in the MITM manager.
- Updated OAuth configuration URLs for Qwen to reflect the new endpoint structure.
- Refined tunnel management logic to improve reliability and user experience.

src/app/api/cli-tools/antigravity-mitm/route.js

@@ -46,13 +46,22 @@ function requiresSudoPassword(pwd) {
 }
 
 function checkIsAdmin() {
-  if (!isWin) return true;
-  try {
-    require("child_process").execSync("net session >nul 2>&1", { windowsHide: true });
-    return true;
-  } catch {
-    return false;
+  if (isWin) {
+    try {
+      require("child_process").execSync("net session >nul 2>&1", { windowsHide: true });
+      return true;
+    } catch {
+      return false;
+    }
   }
+  return typeof process.getuid === "function" && process.getuid() === 0;
+}
+
+function checkPrivilege(pwd) {
+  if (checkIsAdmin()) return true;
+  if (isWin) return false;
+  if (!isSudoPasswordRequired()) return true;
+  return !!pwd;
 }
 
 // GET - Full MITM status (server + per-tool DNS)
@@ -94,6 +103,13 @@ export async function POST(request) {
       );
     }
 
+    if (!checkPrivilege(pwd)) {
+      return NextResponse.json(
+        { error: isWin ? "Administrator required — restart 9Router as Administrator" : "Root or sudo password required to start MITM" },
+        { status: 403 }
+      );
+    }
+
     if (mitmRouterBaseUrl !== undefined && mitmRouterBaseUrl !== null) {
       try {
         const normalized = normalizeMitmRouterBaseUrlInput(mitmRouterBaseUrl);
@@ -149,6 +165,12 @@ export async function PATCH(request) {
     if (requiresSudoPassword(pwd)) {
       return NextResponse.json({ error: "Missing sudoPassword" }, { status: 400 });
     }
+    if (!checkPrivilege(pwd)) {
+      return NextResponse.json(
+        { error: isWin ? "Administrator required — restart 9Router as Administrator" : "Root or sudo password required to modify DNS" },
+        { status: 403 }
+      );
+    }
 
     if (action === "enable") {
       await enableToolDNS(tool, pwd);

src/app/api/v1/models/route.js

@@ -138,9 +138,6 @@ export async function GET() {
         object: "model",
         created: timestamp,
         owned_by: "combo",
-        permission: [],
-        root: combo.name,
-        parent: null,
       });
     }
 
@@ -154,9 +151,6 @@ export async function GET() {
             object: "model",
             created: timestamp,
             owned_by: alias,
-            permission: [],
-            root: model.id,
-            parent: null,
           });
         }
       }
@@ -175,9 +169,6 @@ export async function GET() {
           object: "model",
           created: timestamp,
           owned_by: providerAlias,
-          permission: [],
-          root: modelId,
-          parent: null,
         });
       }
     } else {
@@ -267,9 +258,6 @@ export async function GET() {
             object: "model",
             created: timestamp,
             owned_by: outputAlias,
-            permission: [],
-            root: modelId,
-            parent: null,
           });
         }
       }

src/app/api/v1/route.js

@@ -1,32 +1 @@
-const CORS_HEADERS = {
-  "Access-Control-Allow-Origin": "*",
-  "Access-Control-Allow-Methods": "GET, OPTIONS",
-  "Access-Control-Allow-Headers": "*"
-};
-
-/**
- * Handle CORS preflight
- */
-export async function OPTIONS() {
-  return new Response(null, { headers: CORS_HEADERS });
-}
-
-/**
- * GET /v1 - Return models list (OpenAI compatible)
- */
-export async function GET() {
-  const models = [
-    { id: "claude-sonnet-4-20250514", object: "model", owned_by: "anthropic" },
-    { id: "claude-3-5-sonnet-20241022", object: "model", owned_by: "anthropic" },
-    { id: "gpt-4o", object: "model", owned_by: "openai" },
-    { id: "gemini-2.5-pro", object: "model", owned_by: "google" }
-  ];
-
-  return new Response(JSON.stringify({
-    object: "list",
-    data: models
-  }), {
-    headers: { "Content-Type": "application/json", ...CORS_HEADERS }
-  });
-}
-
+export { GET, OPTIONS } from "./models/route";