From 7785c44fddabc0257d2f1960d0babd5d2653d55b Mon Sep 17 00:00:00 2001 From: shrimbly Date: Wed, 11 Mar 2026 08:49:26 +1300 Subject: [PATCH] fix: gate fal provider behind API key check fal was unconditionally listed as available, which could surface fal models to users without a fal API key configured. Co-Authored-By: Claude Opus 4.6 --- src/app/api/models/route.ts | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/app/api/models/route.ts b/src/app/api/models/route.ts index 1836acf4..7b943a64 100644 --- a/src/app/api/models/route.ts +++ b/src/app/api/models/route.ts @@ -955,7 +955,8 @@ export async function GET( const wavespeedKey = request.headers.get("X-WaveSpeed-Key") || process.env.WAVESPEED_API_KEY || null; // Build list of all available providers (have keys from env or client headers) - const availableProviders: string[] = ["gemini", "fal"]; // Always available + const availableProviders: string[] = ["gemini"]; // Gemini always available + if (falKey) availableProviders.push("fal"); if (replicateKey) availableProviders.push("replicate"); if (kieKey) availableProviders.push("kie"); if (wavespeedKey) availableProviders.push("wavespeed");