feat: add Chutes provider with TEE-only model restriction

Author: echobt

src/cortex-common/src/model_presets/mod.rs

@@ -18,7 +18,7 @@ pub use types::{ModelAlias, ModelPreset, ModelResolution};
 pub use constants::{DEFAULT_MODEL, DEFAULT_MODELS, DEFAULT_PROVIDER};
 
 // Re-export preset data and helpers
-pub use presets::{MODEL_PRESETS, get_model_preset, get_models_for_provider};
+pub use presets::{MODEL_PRESETS, get_model_preset, get_models_for_provider, validate_chutes_model, provider_allows_custom_models};
 
 // Re-export alias data and helpers
 pub use aliases::{MODEL_ALIASES, list_model_aliases, resolve_model_alias};

src/cortex-common/src/model_presets/presets.rs

@@ -806,6 +806,17 @@ pub const MODEL_PRESETS: &[ModelPreset] = &[
         supports_tools: true,
         supports_reasoning: false,
     },
+    // Chutes TEE models (Trusted Execution Environment)
+    // Security requirement: Only models with '-TEE' suffix are allowed
+    ModelPreset {
+        id: "moonshotai/Kimi-K2.5-TEE",
+        name: "Kimi K2.5 (TEE)",
+        provider: "chutes",
+        context_window: 262_144,
+        supports_vision: false,
+        supports_tools: true,
+        supports_reasoning: true,
+    },
 ];
 
 /// Get a model preset by ID.
@@ -820,3 +831,24 @@ pub fn get_models_for_provider(provider: &str) -> Vec<&'static ModelPreset> {
         .filter(|m| m.provider == provider)
         .collect()
 }
+
+/// Validates that a model is allowed for the Chutes provider.
+/// Chutes only allows TEE (Trusted Execution Environment) models for security.
+/// Returns Ok(()) if valid, Err with message if invalid.
+pub fn validate_chutes_model(model: &str) -> Result<(), String> {
+    if !model.ends_with("-TEE") {
+        return Err(format!(
+            "Chutes provider only allows TEE models (models ending with '-TEE'). \
+             Model '{}' is not a TEE model. Available TEE models: moonshotai/Kimi-K2.5-TEE",
+            model
+        ));
+    }
+    Ok(())
+}
+
+/// Checks if a provider restricts custom models.
+/// Chutes only allows predefined TEE models, no custom models.
+pub fn provider_allows_custom_models(provider: &str) -> bool {
+    // Chutes does NOT allow custom models - only predefined TEE models
+    provider != "chutes"
+}

src/cortex-tui/src/modal/providers.rs

@@ -70,7 +70,10 @@ impl ProviderInfo {
 
 /// Returns the list of known providers with their default information.
 pub fn known_providers() -> Vec<ProviderInfo> {
-    vec![ProviderInfo::new("cortex", "Cortex").with_description("Cortex AI Gateway")]
+    vec![
+        ProviderInfo::new("cortex", "Cortex").with_description("Cortex AI Gateway"),
+        ProviderInfo::new("chutes", "Chutes (TEE)").with_description("TEE-secured models only"),
+    ]
 }
 
 // ============================================================================
@@ -402,8 +405,9 @@ mod tests {
     fn test_known_providers() {
         let providers = known_providers();
 
-        assert_eq!(providers.len(), 1);
+        assert_eq!(providers.len(), 2);
         assert!(providers.iter().any(|p| p.id == "cortex"));
+        assert!(providers.iter().any(|p| p.id == "chutes"));
     }
 
     #[test]

src/cortex-tui/src/providers/config.rs

@@ -27,14 +27,23 @@ pub const CONFIG_FILE: &str = "config.json";
 /// Sessions directory name
 pub const SESSIONS_DIR: &str = "sessions";
 
-/// Single provider - Cortex Backend (for compatibility with old code)
-pub const PROVIDERS: &[ProviderInfo] = &[ProviderInfo {
-    id: "cortex",
-    name: "Cortex",
-    env_var: "CORTEX_AUTH_TOKEN",
-    base_url: "https://api.cortex.foundation",
-    requires_key: true,
-}];
+/// Supported providers
+pub const PROVIDERS: &[ProviderInfo] = &[
+    ProviderInfo {
+        id: "cortex",
+        name: "Cortex",
+        env_var: "CORTEX_AUTH_TOKEN",
+        base_url: "https://api.cortex.foundation",
+        requires_key: true,
+    },
+    ProviderInfo {
+        id: "chutes",
+        name: "Chutes (TEE)",
+        env_var: "CHUTES_API_KEY",
+        base_url: "https://llm.chutes.ai",
+        requires_key: true,
+    },
+];
 
 // ============================================================
 // TYPES