Fix http fetch cors

[wyhaya]

Fix #185

[Copilot]

Pull request overview

This PR switches the app’s HTTP requests from a custom Tauri invoke-based fetch to @tauri-apps/plugin-http to address CORS limitations, and removes the now-unneeded Rust/TS HTTP bridge.

Changes:

• Replace custom Http.fetch usage with @tauri-apps/plugin-http (tauriFetch) in web code paths.
• Remove the custom Rust http::fetch command and the TS wrapper module.
• Add the Tauri HTTP plugin + capability permissions, and update JS/Rust dependencies accordingly.

Reviewed changes

Copilot reviewed 10 out of 12 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
src-web/utils/license.ts	Uses tauriFetch instead of the removed custom Http.fetch.
src-web/tauri/index.ts	Stops re-exporting the removed HTTP wrapper module.
src-web/tauri/http.ts	Deletes the old invoke('fetch') wrapper implementation.
src-web/pages/settings/provider/api.ts	Uses tauriFetch for provider model discovery calls.
src-web/pages/database/ai/services.ts	Injects tauriFetch into AI SDK clients to avoid browser fetch/CORS.
src-tauri/main.rs	Registers tauri_plugin_http and removes the old command handler.
src-tauri/http.rs	Deletes the old Rust fetch command implementation.
capabilities/default.json	Adds http:default allow rules required by the HTTP plugin.
package.json	Adds @tauri-apps/plugin-http dependency.
pnpm-lock.yaml	Locks @tauri-apps/plugin-http and its transitive dependencies.
Cargo.toml	Adds tauri-plugin-http and removes the now-unused app-level reqwest dependency entry.
Cargo.lock	Updates the resolved Rust dependency graph to include tauri-plugin-http.

Files not reviewed (1)

• pnpm-lock.yaml: Language not supported

Comments suppressed due to low confidence (1)

src-web/utils/license.ts:85

• Avoid wrapping an async operation in new Promise(async ...) here. Using an async IIFE (or making send itself async) prevents the async Promise executor anti-pattern and ensures thrown errors reject the returned promise predictably.

        return new Promise(async (success, error) => {
            try {
                let res = await tauriFetch(url.toString(), {
                    method: data.method,
                    headers: {
                        'Content-Type': 'application/json'
                    },
                    body
                })
                if (res.status !== 200) {
                    const rst: { message: string } = await res.json()
                    return error(rst.message)
                }
                success(await res.json())
            } catch (err: any) {
                error(err.toString())
            }
        })

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.