From 6c6fa0bb1c9970fefa6388e1c34351b58d7c146d Mon Sep 17 00:00:00 2001
From: paisley <8197966+su8su@users.noreply.github.com>
Date: Sat, 14 Feb 2026 12:29:46 +0800
Subject: [PATCH] fix: resolve gateway token mismatch and openrouter validation
 (#85)

---
 electron/main/ipc-handlers.ts | 16 +++++++++++++++-
 1 file changed, 15 insertions(+), 1 deletion(-)

diff --git a/electron/main/ipc-handlers.ts b/electron/main/ipc-handlers.ts
index 9eae72bbd..2ba37f406 100644
--- a/electron/main/ipc-handlers.ts
+++ b/electron/main/ipc-handlers.ts
@@ -1024,7 +1024,7 @@ function registerProviderHandlers(): void {
   );
 }
 
-type ValidationProfile = 'openai-compatible' | 'google-query-key' | 'anthropic-header' | 'none';
+type ValidationProfile = 'openai-compatible' | 'google-query-key' | 'anthropic-header' | 'openrouter' | 'none';
 
 /**
  * Validate API key using lightweight model-listing endpoints (zero token cost).
@@ -1056,6 +1056,8 @@ async function validateApiKeyWithProvider(
         return await validateGoogleQueryKey(providerType, trimmedKey, options?.baseUrl);
       case 'anthropic-header':
         return await validateAnthropicHeaderKey(providerType, trimmedKey, options?.baseUrl);
+      case 'openrouter':
+        return await validateOpenRouterKey(providerType, trimmedKey);
       default:
         return { valid: false, error: `Unsupported validation profile for provider: ${providerType}` };
     }
@@ -1123,6 +1125,8 @@ function getValidationProfile(providerType: string): ValidationProfile {
       return 'anthropic-header';
     case 'google':
       return 'google-query-key';
+    case 'openrouter':
+      return 'openrouter';
     case 'ollama':
       return 'none';
     default:
@@ -1274,6 +1278,16 @@ async function validateAnthropicHeaderKey(
   return await performProviderValidationRequest(providerType, url, headers);
 }
 
+async function validateOpenRouterKey(
+  providerType: string,
+  apiKey: string
+): Promise<{ valid: boolean; error?: string }> {
+  // Use OpenRouter's auth check endpoint instead of public /models
+  const url = 'https://openrouter.ai/api/v1/auth/key';
+  const headers = { Authorization: `Bearer ${apiKey}` };
+  return await performProviderValidationRequest(providerType, url, headers);
+}
+
 /**
  * Shell-related IPC handlers
  */