fix(playground): recompute all UI state on selection change, allow localhost and 127.0.0.1 origins

Author: msranjana

packages/moss-cli/src/moss_cli/commands/playground.py

@@ -62,11 +62,13 @@ def _check_api_request(self) -> bool:
             self._send_json(403, {"error": "Forbidden: invalid or missing token"})
             return False
         host = self.headers.get("Host", "")
-        if host and host != self._server_host and host != self._server_host.replace("127.0.0.1", "localhost"):
+        allowed_hosts = {self._server_host, self._server_host.replace("127.0.0.1", "localhost")}
+        if host and host not in allowed_hosts:
             self._send_json(403, {"error": "Forbidden: invalid Host header"})
             return False
         origin = self.headers.get("Origin", "")
-        if origin and origin != f"http://{self._server_host}":
+        allowed_origins = {f"http://{h}" for h in allowed_hosts}
+        if origin and origin not in allowed_origins:
             self._send_json(403, {"error": "Forbidden: invalid Origin"})
             return False
         return True

packages/moss-cli/src/moss_cli/playground/index.html

@@ -193,11 +193,19 @@ <h1>Moss <span>Playground</span></h1>
 
 function updateLoadBtn() {
   const name = select.value;
-  loadBtn.disabled = !name || name === currentIndex;
-  if (name !== currentIndex && currentIndex) {
-    searchInput.disabled = true;
-    topkInput.disabled = true;
-    alphaSlider.disabled = true;
+  const isLoaded = name === currentIndex;
+  loadBtn.disabled = !name || isLoaded;
+  loadBtn.innerHTML = isLoaded ? '&#10003; Loaded' : 'Load Index';
+  loadBtn.className = isLoaded ? 'btn btn-success' : 'btn btn-primary';
+  searchInput.disabled = !isLoaded;
+  topkInput.disabled = !isLoaded;
+  alphaSlider.disabled = !isLoaded;
+  if (isLoaded) {
+    loadStatus.className = 'status-box status-success';
+    loadStatus.textContent = 'Index loaded into server memory';
+    loadStatus.classList.remove('hidden');
+  } else {
+    loadStatus.classList.add('hidden');
   }
 }
 
@@ -249,22 +257,16 @@ <h1>Moss <span>Playground</span></h1>
     }
     if (loadReqId !== requestId || select.value !== name) return;
     currentIndex = name;
-    loadBtn.innerHTML = '&#10003; Loaded';
-    loadBtn.className = 'btn btn-success';
-    loadBtn.disabled = false;
-    loadStatus.className = 'status-box status-success';
-    loadStatus.textContent = 'Index loaded into server memory';
-    searchInput.disabled = false;
+    updateLoadBtn();
     searchInput.focus();
-    topkInput.disabled = false;
-    alphaSlider.disabled = false;
   } catch (e) {
     if (loadReqId !== requestId) return;
     console.error('loadIndex failed:', e);
     currentIndex = null;
-    loadBtn.innerHTML = 'Load Index';
-    loadBtn.className = 'btn btn-primary';
-    loadBtn.disabled = false;
+    updateLoadBtn();
+    loadStatus.classList.remove('hidden');
+    loadStatus.className = 'status-box status-error';
+    loadStatus.textContent = `Failed: ${e.message || e}`;
     loadStatus.className = 'status-box status-error';
     loadStatus.textContent = `Failed: ${e.message || e}`;
   } finally {