update llm function access control

Author: yujonglee

apps/web/supabase/functions/_shared/cors.ts

@@ -1,4 +1,5 @@
 export const corsHeaders = {
   "Access-Control-Allow-Origin": "*",
-  "Access-Control-Allow-Headers": "authorization, x-client-info, apikey, content-type",
+  "Access-Control-Allow-Headers": "authorization, x-client-info, apikey, content-type, user-agent",
+  "Access-Control-Allow-Methods": "POST, GET, OPTIONS",
 };

apps/web/supabase/functions/llm/index.ts

@@ -29,8 +29,8 @@ Deno.serve(async (req) => {
   const needsToolCalling = requestBody.tools && requestBody.tool_choice !== "none";
 
   const modelsToUse = needsToolCalling
-    ? ["anthropic/claude-haiku-4.5", "z-ai/glm-4.6"]
-    : ["openai/chatgpt-4o-latest", "moonshotai/kimi-k2-0905"];
+    ? ["anthropic/claude-haiku-4.5", "openai/gpt-oss-120b:nitro"]
+    : ["openai/chatgpt-4o-latest", "moonshotai/kimi-k2-0905:nitro"];
 
   const { model: _, ...bodyWithoutModel } = requestBody;