🚀 feat: launch v1.0 — next-generation frontend built from the ground up (#4265)

* feat: add parameter coverage for the operations: copy, trim_prefix, trim_suffix, ensure_prefix, ensure_suffix, trim_space, to_lower, to_upper, replace, and regex_replace

* fix: CrossGroupRetry default false

移除gorm:"default:false"，避免每次 AutoMigrate时都执行ALTER TABLE `tokens` MODIFY COLUMN `cross_group_retry` boolean DEFAULT false
且bool默认false不影响原有功能

* feat: check-in feature integrates Turnstile security check

* feat: add support for Doubao /v1/responses (#2567)

* feat: add support for Doubao /v1/responses

* fix: fix model deployment style issues, lint problems, and i18n gaps. (#2556)

* fix: fix model deployment style issues, lint problems, and i18n gaps.

* fix: adjust the key not to be displayed on the frontend, tested via the backend.

* fix: adjust the sidebar configuration logic to use the default configuration items if they are not defined.

* feat: add plans directory to .gitignore

* fix: 修复 gemini 文件类型不支持 image/jpg

* fix: fix the proxyURL is empty, not using the default HTTP client configuration && the AWS calling side did not apply the relay timeout.

* fix: batch add key backend deduplication

* Merge pull request #2582 from seefs001/fix/tips

fix: add tips for model management and channel testing

* fix(gin): update request body size check to allow zero limit

* feat: add regex pattern to mask API keys in sensitive information

* fix(task): 修复使用 auto 分组时 Task Relay 不记录日志和不扣费的问题

问题描述：
- 使用 auto 分组的令牌调用 /v1/videos 等 Task 接口时，虽然任务能成功创建，
  但使用日志不显示记录，且不会扣费

根本原因：
- Distribute 中间件在选择渠道后，会将实际选中的分组存储在 ContextKeyAutoGroup 中
- 但 RelayTaskSubmit 函数没有从 context 中读取这个值来更新 info.UsingGroup
- 导致 info.UsingGroup 始终是 "auto" 而不是实际选中的分组（如 "sora2逆"）
- 当 auto 分组的倍率配置为 0 时，quota 计算结果为 0
- 日志记录条件 "if quota != 0" 不满足，导致日志不记录、不扣费

修复方案：
- 在 RelayTaskSubmit 函数中计算分组倍率之前，添加从 ContextKeyAutoGroup
  获取实际分组的逻辑
- 使用安全的类型断言，避免潜在的 panic 风险

影响范围：
- 仅影响 Task Relay 流程（/v1/videos, /suno, /kling 等接口）
- 不影响使用具体分组令牌的调用
- 不影响其他 Relay 类型（chat/completions 等已有类似处理逻辑）

* 🚀 feat(web): port legacy v2 frontend changes into new UI (deployments, check-in, ollama) + align APIs

Bring over the key frontend functionality introduced in merge `efa3301` and integrate it cleanly into the new `web/src` architecture and design system.

- **Model deployments (io.net)**
  - Align frontend endpoints and payloads with backend deployment routes (`/api/deployments/*`)
  - Add missing deployment operations: details, logs (container-aware), update config, rename, extend duration
  - Improve create-deployment flow (proper request shape, name availability check, price estimation parity)

- **System settings**
  - Enhance io.net deployment settings: allow testing connection with an unsaved API key and add “how to get API key” guidance

- **Channels / Ollama**
  - Improve Ollama model management: live fetch via base_url with fallback to channel fetch, selection + apply flows, delete confirmation
  - Refactor for feature-layer consistency: extract Ollama parsing/normalization utilities into `features/channels/lib`

- **Quality**
  - Ensure TypeScript typecheck passes after refactor and new dialogs/components integration

* Merge pull request #2590 from xyfacai/fix/max-body-limit

fix: 设置默认max req body 为128MB

* docs: update readme

* i18n: add missing translations

* fix(gemini): fetch model list via native v1beta/models endpoint

Use the native Gemini Models API (/v1beta/models) instead of the OpenAI-compatible
path when listing models for Gemini channels, improving compatibility with
third-party Gemini-format providers that don't implement OpenAI routes.

- Add paginated model listing with timeout and optional proxy support
- Select an enabled key for multi-key Gemini channels

* refactor(gemini): 更新 GeminiModelsResponse 以使用 dto.GeminiModel 类型

* fix: remove Minimax from FETCHABLE channels

* fix(minimax): 添加 MiniMax-M2 系列模型到 ModelList

* feat: add doubao video 1.5

* 🤢 chore: remove useless file

* feat: /v1/chat/completion -> /v1/response (#2629)

* feat: /v1/chat/completion -> /v1/response

* fix: clean propertyNames for gemini function

* fix: support snake_case fields in GeminiChatGenerationConfig

* chore: update dependencies and lockfile for improved compatibility

- Updated @clerk/clerk-react to version 5.59.3
- Updated @hookform/resolvers to version 5.2.2
- Updated @lobehub/icons to version 2.48.0
- Updated various Radix UI components to their latest versions
- Updated @tanstack/react-query and related packages for better performance
- Updated axios, i18next, and other libraries for security and feature enhancements
- Updated lockfile to include configVersion and ensure consistency across environments

* Merge pull request #2647 from seefs001/feature/status-code-auto-disable

feat: status code auto-disable configuration

* fix: chat2response setting ui (#2643)

* fix: setting ui

* fix: rm global.chat_completions_to_responses_policy

* fix: rm global.chat_completions_to_responses_policy

* Merge pull request #2627 from seefs001/feature/channel-test-param-override

feat: channel testing supports parameter overriding

* chore: update dependencies and lockfile for improved compatibility

- Updated @lobehub/icons to version 4.0.3
- Updated ai to version 6.0.27
- Updated various libraries including axios, react-day-picker, and streamdown for security and feature enhancements
- Updated devDependencies for eslint, prettier, and typescript for better performance and compatibility
- Updated lockfile to ensure consistency across environments

* chore: update lockfile and Vite configuration for improved build process

- Updated lockfile to version 1 for better compatibility and consistency
- Enhanced Vite configuration to support production optimizations, including code minification and chunking for dependencies
- Added environment-specific console and debugger removal for production builds

* chore: migrate from Vite to Rsbuild for build process

- Added Rsbuild configuration for development and production builds
- Updated package.json scripts to use Rsbuild instead of Vite
- Replaced @tailwindcss/vite with @tailwindcss/postcss in dependencies
- Introduced postcss.config.mjs for Tailwind CSS integration
- Updated TypeScript configuration to include Rsbuild config
- Removed Vite configuration file to streamline the build process

* refactor: optimize user data handling and API calls

- Replaced direct API calls to get user data with cached user information from auth-store in ModelsFilter and SummaryCards components.
- Improved session management in RootComponent and Authenticated route to utilize localStorage for user authentication status, reducing unnecessary API requests.
- Added caching for setup status checks to enhance performance during navigation.

* feat: enhance session validation in authenticated route

- Implemented session verification to check user authentication status via API call only once per session.
- Updated beforeLoad logic to redirect users to the login page if session validation fails or if no user information is available in localStorage.
- Improved user data handling by updating the auth store with fresh user information upon successful session verification.

* refactor: improve useMediaQuery hook for better SSR handling

- Enhanced the useMediaQuery hook to check for window availability before accessing matchMedia, preventing errors during server-side rendering.
- Simplified state initialization and change handling by using a dedicated function to determine initial matches.
- Updated event listener management for improved performance and clarity.

* feat(hooks): export useMediaQuery from hooks index

* refactor: update useMediaQuery imports to use unified hooks index

* fix(rsbuild): fix loadEnv API usage and removeConsole type

* feat: customizable automatic retry status codes

* refactor(hooks): use useSyncExternalStore for better SSR handling in useMediaQuery

* refactor: simplify embedded file structure in main.go

- Updated the embedded file directive to include the entire web/dist directory instead of individual assets, streamlining the build process.

* refactor: replace DropdownMenu with Sheet component in ProfileDropdown

- Updated the ProfileDropdown component to use a Sheet for user interactions instead of a DropdownMenu.
- Enhanced user info display with improved layout and styling.
- Added navigation links and sign-out functionality within the Sheet.

* refactor: streamline ProfileDropdown layout and improve user info display

- Removed unused Badge component and secondary text from user display.
- Enhanced styling for user info section and navigation links.
- Updated sign-out functionality to use a button for better accessibility.

* feat: add System Settings link for super admin in ProfileDropdown

- Introduced a new link to System Settings in the ProfileDropdown, visible only to users with the SUPER_ADMIN role.
- Updated imports to include the Settings icon and adjusted the component logic accordingly.
- Removed the Settings entry from the sidebar data to streamline navigation.

* feat: codex channel (#2652)

* feat: codex channel

* feat: codex channel

* feat: codex oauth flow

* feat: codex refresh cred

* feat: codex usage

* fix: codex err message detail

* fix: codex setting ui

* feat: codex refresh cred task

* fix: import err

* fix: codex store must be false

* fix: chat -> responses tool call

* fix: chat -> responses tool call

* feat(i18n): add missing translations

* fix(i18n): restore missing translations for "360" and add "User Menu" in multiple locales

- Reintroduced the translation for "360" in English, French, Japanese, Russian, Vietnamese, and Chinese locales.
- Added the "User Menu" translation in the same languages to enhance user interface consistency.

* fix: openAI function to gemini function field adjusted to whitelist mode

* feat: TLS_INSECURE_SKIP_VERIFY env

* fix: for chat-based calls to the Claude model, tagging is required. Using Claude's rendering logs, the two approaches handle input rendering differently.

* refactor(system-settings): restructure settings sections and navigation

- Replaced SettingsAccordion with a unified SettingsSection component across various settings sections for consistency.
- Introduced a section registry to manage general settings sections dynamically.
- Updated navigation items in the system settings sidebar to utilize the new section registry.
- Enhanced the GeneralSettings component to support section-based content rendering based on user selection.

* fix(system-settings): remove type assertion for quotaDisplayType in GeneralSettings

- Eliminated the type assertion for quotaDisplayType in the GeneralSettings component to improve type inference and maintain cleaner code.

* refactor(system-settings): update zod import syntax in general settings

- Changed the import statement for zod from a default import to a namespace import for better clarity and consistency in the codebase.

* fix: the login method cannot be displayed under the aff link.

* feat(system-settings): implement generic settings page and enhance navigation

- Added a new generic SettingsPage component to handle loading states, data fetching, and section rendering.
- Integrated section registry for general and authentication settings to streamline navigation and content management.
- Updated URL utility functions to improve query parameter handling for active navigation states.
- Enhanced the system settings sidebar to include authentication section items dynamically.

* refactor(system-settings): replace SettingsAccordion with SettingsSection across authentication settings

- Updated BasicAuthSection, BotProtectionSection, OAuthSection, and PasskeySection to use the new SettingsSection component for consistency.
- Introduced a section registry to manage authentication settings dynamically, enhancing navigation and content rendering.

* feat(system-settings): enhance request limits settings with new section and unified component

- Added a new Request Limits section to the system settings sidebar, integrating it with the section registry for improved navigation.
- Replaced SettingsAccordion with SettingsSection in RateLimitSection, SensitiveWordsSection, and SSRFSection for consistency.
- Updated RequestLimitsSettings to utilize the new SettingsPage component for better data handling and rendering.
- Implemented a search schema for request limits to streamline navigation and section management.

* feat(system-settings): integrate content settings sections with unified component and registry

- Added a new Content section to the system settings sidebar, incorporating it into the section registry for improved navigation.
- Replaced SettingsAccordion with SettingsSection in multiple content-related components for consistency.
- Created a section registry to manage content settings dynamically, enhancing the rendering and navigation experience.
- Updated the ContentSettings component to utilize the new section registry and streamline content display.

* feat(system-settings): enhance integrations settings with unified section registry and components

- Introduced a new section registry for integrations settings, consolidating various settings components for better organization and navigation.
- Replaced SettingsAccordion with SettingsSection in multiple integration-related components for consistency.
- Updated IntegrationSettings to utilize the new SettingsPage component, improving data handling and rendering.
- Added a new integrations section to the system settings sidebar, enhancing user experience and accessibility.

* feat(system-settings): unify model settings with new section registry and components

- Introduced a section registry for model settings, consolidating various model-related components for improved organization and navigation.
- Replaced SettingsAccordion with SettingsSection in multiple model settings components for consistency.
- Updated ModelSettings to utilize the new SettingsPage component, enhancing data handling and rendering.
- Added a new Models section to the system settings sidebar, improving user experience and accessibility.

* feat(system-settings): enhance maintenance settings with unified section registry and components

- Introduced a new section registry for maintenance settings, consolidating various maintenance-related components for improved organization and navigation.
- Replaced SettingsAccordion with SettingsSection in multiple maintenance components for consistency.
- Updated MaintenanceSettings to utilize the new section registry, enhancing data handling and rendering.
- Added a new Maintenance section to the system settings sidebar, improving user experience and accessibility.

* feat(system-settings): update section titles for improved clarity and consistency

- Renamed various section titles across content, integrations, maintenance, models, and request limits to enhance clarity and better reflect their functionalities.
- Adjusted titles such as 'Dashboard' to 'Data Dashboard', 'API Info' to 'API Addresses', and 'Update Checker' to 'System maintenance' for improved user understanding.
- Ensured consistency in naming conventions across all settings sections to streamline user experience and navigation.

* feat(nav-group): enhance collapsible menu behavior and URL matching logic

- Added controlled state management for collapsible menu items to automatically expand based on active sub-item paths.
- Updated the URL matching logic in checkIsActive to improve handling of query parameters and ensure accurate navigation state detection.
- Refactored the collapsible component to utilize the new state management, enhancing user experience in the sidebar navigation.

* feat(system-settings): update system settings navigation and redirect logic

- Changed the link in the profile dropdown to point directly to the general section of system settings with a search parameter for section identification.
- Implemented a redirect in the general settings route to ensure users are directed to the default section if no section parameter is provided, enhancing navigation consistency.

* feat(system-settings): unify route configuration for settings sections

- Refactored route configuration for various system settings sections (auth, content, general, integrations, maintenance, models, request limits) to utilize a new `createSettingsRouteConfig` function.
- This change consolidates the repetitive logic of creating search schemas and handling redirects, improving code maintainability and readability.
- Enhanced navigation by ensuring default sections are loaded when no section parameter is provided.

* feat(url-utils): enhance URL handling and matching logic

- Introduced a new utility function `urlToString` to convert various URL formats (string and object) into a standardized string format.
- Updated the `checkIsActive` function to utilize `urlToString`, improving the accuracy of URL matching and handling of query parameters.
- Refactored URL comparison logic to ensure consistent behavior across different URL types, enhancing navigation state detection.

* feat(system-settings): validate DataExportDefaultTime for improved data handling

- Introduced a new function `validateDataExportDefaultTime` to ensure the `DataExportDefaultTime` value is either 'week', 'hour', or 'day', defaulting to 'hour' for unexpected values.
- Updated the `DataExportDefaultTime` assignment in the settings section to utilize this validation function, enhancing data integrity and user experience.

* perf(system-settings): Improve the i18n of system settings content

- Changed button labels in various sections to use consistent capitalization and translation functions, enhancing user experience.
- Updated validation messages in schemas to utilize translation functions for improved internationalization support.
- Ensured all user-facing strings are properly translated, improving accessibility for non-English users.

* fix(system-settings): update ApiInfoFormValues type inference for improved schema validation

- Changed the type inference for ApiInfoFormValues to utilize ReturnType of createApiInfoSchema, ensuring accurate type representation and enhancing type safety in the API info section.

* fix(chat-settings): improve validation logic for chat settings schema

- Updated the validation logic to ensure that null values are correctly handled and that only objects are accepted as valid items in the chat settings schema.
- Simplified error handling by removing the error message from the catch block, providing a consistent user-facing message for invalid JSON strings.

* fix(system-settings): enhance validation error handling in uptime-kuma schema

- Updated the validation logic for category name, URL, and slug fields to use an object format for error messages, improving clarity and consistency in user feedback.
- Ensured that all validation messages are properly structured to enhance internationalization support.

* fix(i18n): add translations for Uptime Kuma group management

- Added English, French, Japanese, Russian, Vietnamese, and Chinese translations for "Add Uptime Kuma Group" and "Edit Uptime Kuma Group" to enhance internationalization support.
- Included validation messages for category name and slug fields across multiple languages to improve user feedback and accessibility.

* fix(system-settings): improve validation error message structure for SystemName

- Updated the validation logic for the SystemName field to use an object format for error messages, enhancing clarity and consistency in user feedback.
- This change aligns with recent improvements in internationalization support across the system settings schemas.

* perf(i18n): add new validation error message translations

- Added translations for the new validation error message "Invalid JSON format or values out of allowed range" in English, French, Japanese, Russian, Vietnamese, and Chinese.
- This update enhances internationalization support by ensuring users receive clear feedback across multiple languages.

* fix(i18n): update Japanese translation for payment method configuration message

- Corrected the Japanese translation for the message regarding payment methods configuration to use the term "メソッド" instead of "方法" for improved accuracy and consistency in user feedback.
- This change enhances the clarity of the message for Japanese-speaking users.

* fix(i18n): remove unnecessary loading messages from French translations

- Removed the French translations for "Loading settings...", "Loading maintenance settings...", and "Loading content settings..." to streamline the localization file.
- This change improves the clarity and relevance of the translations provided to users.

* fix(i18n): add translations for Uptime Kuma group management in multiple languages

- Added French, Japanese, Russian, Vietnamese, and Chinese translations for "Add Uptime Kuma Group" and "Edit Uptime Kuma Group" to enhance internationalization support.
- This update improves user experience by providing clear and consistent messaging across different languages.

* fix(validation): enhance pricing schema error messages and add translations

- Updated the pricing schema to include localized error messages for validation, ensuring users receive clear feedback when input values are invalid.
- Added new translations for "Exchange rate is required" and "Exchange rate must be greater than 0" in English, French, Japanese, and Chinese to improve internationalization support.
- This change enhances user experience by providing accurate and contextually relevant messages across multiple languages.

* fix: codex Unsupported parameter: max_output_tokens

* fix(model-mapping-editor): simplify JSON parsing logic in useEffect

* fix: jimeng i2v support multi image by metadata

* refactor(models): restructure models section handling and improve UI components

- Replaced tab-based navigation with section-based navigation for better clarity and organization.
- Introduced a new section registry to manage model sections, including 'metadata' and 'deployments'.
- Updated the ModelsContent component to reflect the new section structure and added a Create Deployment button.
- Removed the ModelsTabs component as it was no longer needed.
- Enhanced internationalization support by adding new translations for section descriptions and management tasks.
- Adjusted sidebar configuration to accommodate the new section structure.

* fix: update warning threshold label from '5$' to '2$'

* fix: video content api Priority use url field

* fix: update abortWithOpenAiMessage function to use types.ErrorCode

* feat(deployment): introduce CreateDeploymentDrawer component and update dialog references

- Replaced the CreateDeploymentDialog with a new CreateDeploymentDrawer component for improved user experience.
- Added comprehensive form handling for deployment creation, including validation and price estimation features.
- Updated internationalization files to include new translations for UI elements and descriptions related to deployment configuration.
- Enhanced the ModelsContent component to integrate the new drawer for creating deployments.

* perf(i18n): enhance internationalization for models table and columns

- Updated labels and titles in the ModelsTable and useModelsColumns components to utilize translation functions for improved localization.
- Changed static text for vendor and sync status to dynamic translations, enhancing user experience for non-English speakers.
- Updated empty state messages in the ModelsTable to support internationalization, ensuring clarity for all users.

* fix: fix email send

* fix: issue where consecutive calls to multiple tools in gemini all returned an index of 0

* fix: replace Alibaba's Claude-compatible interface with the new interface

* fix: Only models with the "qwen" designation can use the Claude-compatible interface; others require conversion.

* feat: log shows request conversion

* feat: optimized display

* feat: optimized display

* feat: optimized display

* fix: codex rm Temperature

* Revert "fix: video content api Priority use url field"

* feat: requestId time string use UTC

* feat(qwen): support qwen image sync image model config

* feat: sync old ui

* feat: more ui sync

* feat: replace theme

* fix build

* refactor(web): revert theme colors and variables in CSS

Updated color variables for light and dark themes to improve consistency and visual appeal.

* feat(deployment): enhance deployment access guard and model deployment settings

- Introduced loading phase management in the DeploymentAccessGuard component to provide better user feedback during connection checks.
- Updated the ModelsContent component to prefetch the deployments list while checking connection status, improving data readiness.
- Implemented a caching mechanism for connection status in useModelDeploymentSettings to optimize performance and reduce unnecessary API calls.
- Enhanced loading states and error handling for improved user experience during deployment settings retrieval and connection testing.

* feat(i18n): add new translations for connection and loading states across multiple languages

- Introduced translations for "Checking connection" and "Loading configuration" in English, French, Japanese, Russian, Vietnamese, and Chinese.
- This update enhances the internationalization support, providing clearer user feedback during connection checks and loading phases.

* refactor(pagination): adjust layout and styling for pagination component

- Updated the pagination component to improve layout by removing unnecessary width constraints and enhancing responsiveness.
- Increased minimum width for pagination text to ensure better visibility and alignment across different screen sizes.

* feat(i18n): implement translations for various UI elements across multiple components

- Updated several components to utilize the translation function for titles and placeholders, enhancing internationalization support.
- Added new translation entries for "Filter by name or key..." and "Log Type" in English, French, Japanese, Russian, Vietnamese, and Chinese.
- This update improves user experience by providing localized text in the ChannelsTable, SummaryCards, ApiKeysTable, RedemptionsTable, UsageLogsTable, and UsersTable components.

* feat(i18n): integrate translation support in SummaryCards component

- Added the useTranslation hook to the SummaryCards component to enhance internationalization.
- This update allows for localized text rendering, improving user experience for diverse language speakers.

* feat(dashboard): refactor dashboard structure and introduce section-based navigation

- Removed the tab navigation in favor of a section-based approach, enhancing user experience by providing clearer context for the dashboard content.
- Introduced a new section registry to manage dashboard sections, allowing for easier expansion and maintenance.
- Updated sidebar configuration to reflect the new section structure, ensuring proper navigation links are displayed.
- Added translations for new section titles and descriptions to support internationalization.

* feat(i18n): update time range labels and enhance translation support

- Changed time range labels from shorthand (e.g., '1D') to full text (e.g., '1 Day') for better clarity.
- Updated various components to utilize the translation function for time range labels, improving internationalization.
- Added new translation entries for time ranges in English, French, Japanese, Russian, Vietnamese, and Chinese, enhancing user experience across languages.

* feat(dashboard): enhance type safety and improve component structure

- Updated the Dashboard component to use specific types for model data and filters, enhancing type safety.
- Introduced new types for announcements and FAQs, improving clarity and maintainability.
- Refactored LogStatCards and UptimePanel components to utilize AbortController for better data fetching management.
- Optimized the rendering of announcements and FAQs by using unique keys based on item IDs.
- Improved theme management in ModelCharts by caching the ThemeManager import to reduce dynamic imports.

* feat(agents): add comprehensive guidelines for React and Next.js development

- Introduced a new set of best practices and optimization techniques for React and Next.js applications, aimed at enhancing performance and maintainability.
- Included detailed rules covering various aspects such as event handling, API routes, rendering strategies, and state management.
- Added extensive documentation in AGENTS.md and SKILL.md to support developers in adhering to these practices.
- This update serves as a foundational resource for improving code quality and efficiency in React-based projects.

* chore(web): update package.json dependencies

- Removed outdated dependencies including @base-ui/react, @clerk/clerk-react, and others to streamline the project.
- Updated remaining dependencies to their latest versions for improved performance and security.
- This cleanup enhances the overall maintainability of the project.

* feat(usage-logs): implement section-based navigation and enhance log management

- Introduced a section registry for usage logs, allowing for better organization and navigation between different log categories (common, drawing, task).
- Updated the UsageLogsContent component to dynamically render titles and descriptions based on the selected section.
- Refactored UsageLogsTable and UsageLogsPrimaryButtons components to accept the active log category as a prop, improving modularity.
- Enhanced sidebar configuration to support new section navigation, ensuring users can easily access different log types.
- Updated routing to redirect to the default section if none is specified, improving user experience.

* feat(i18n): enhance internationalization across usage logs components

- Integrated the useTranslation hook in various components related to usage logs, including CommonLogsStats, UsageLogsTable, and column helpers.
- Updated labels, titles, and messages to utilize translation functions, improving localization support.
- Added new translation entries for log-related terms in English, French, Japanese, Russian, Vietnamese, and Chinese, enhancing user experience for diverse language speakers.

* feat(datetime-picker): integrate dayjs for date formatting

- Added dayjs as a dependency to the project for improved date handling.
- Updated the DateTimePicker component to use dayjs for formatting dates, enhancing consistency and readability of date displays.

* feat(date-handling): replace date-fns with dayjs for improved date management

- Updated the project to use dayjs instead of date-fns for date formatting and manipulation, enhancing consistency across components.
- Refactored DatePicker, DateTimePicker, and other components to utilize dayjs for date-related functionalities.
- Added a new dayjs configuration file to extend its capabilities with relative time support.
- Updated AGENTS.md to reflect the new technology stack, emphasizing the use of dayjs for date handling.

* refactor(agents): streamline front-end development guidelines and update technology stack

- Revised AGENTS.md to condense front-end development standards and best practices, making it more accessible for developers and AI assistants.
- Updated the technology stack section to reflect current dependencies, emphasizing the use of Bun, React 19, TypeScript, and other key libraries.
- Enhanced the document structure with a new table format for better readability and navigation, including a comprehensive table of contents for quick access to sections.

* feat(i18n): enhance date picker and datetime picker localization support

- Integrated internationalization support in DatePicker and DateTimePicker components by adding locale handling for multiple languages (English, French, Japanese, Russian, Vietnamese, Chinese).
- Updated the calendar component to accept a locale prop, ensuring proper localization of month and weekday labels.
- Improved user experience by allowing date selection to adapt based on the user's language preference.

* feat(layout): add SectionPageLayout component for structured page layouts

- Introduced a new SectionPageLayout component to facilitate structured layouts for pages with sections, enhancing the organization of content.
- Added subcomponents for Title, Description, Actions, and Content to improve clarity and maintainability of page structures.
- Updated AGENTS.md to include guidelines on avoiding unnecessary destructuring of props for better code readability.

* feat(layout): refactor components to use SectionPageLayout for improved structure

- Replaced AppHeader and Main components with SectionPageLayout across multiple features including Channels, Dashboard, ApiKeys, Models, Redemption Codes, Usage Logs, Users, and Wallet.
- Enhanced page organization by utilizing SectionPageLayout's Title, Description, Actions, and Content subcomponents, improving clarity and maintainability.
- This update standardizes the layout structure across the application, facilitating a more cohesive user experience.

* feat(usage-logs): enhance URL state management and redirection logic

- Added useEffect to synchronize column filters with URL search changes, preventing infinite loops caused by inline references.
- Improved redirection logic in usage logs to clear 'type' from the URL when the section is not 'common', enhancing user experience and URL cleanliness.

* fix(usage-logs): disable global filter and update DataTableToolbar props

- Disabled the global filter in the UsageLogsTable component to streamline the user interface.
- Updated the DataTableToolbar component to accept a null customSearch prop, enhancing flexibility in toolbar configuration.

* feat(routes): implement section-based routing for system settings and dashboard

- Introduced section-based routing for system settings and dashboard features, enhancing navigation and organization.
- Updated route definitions to include dynamic sections, allowing for more granular access to settings and dashboard components.
- Refactored existing routes to redirect to default sections when no specific section is provided, improving user experience.
- Added new section routes for models, usage logs, and system settings, ensuring consistency across the application.
- Removed deprecated routes to streamline the routing structure and improve maintainability.

* refactor(usage-logs): update column helper functions to require config parameter

- Modified createFailReasonColumn and createProgressColumn functions to require a config parameter instead of allowing it to be optional.
- Simplified destructuring of config to enhance clarity and ensure necessary properties are always provided, improving code reliability.

* refactor(usage-logs): improve section ID validation and routing logic

- Introduced a type guard function, isUsageLogsSectionId, to validate section IDs, enhancing type safety and reducing the need for casting.
- Updated UsageLogsContent to utilize the new validation function for determining the active category, improving clarity and reliability.
- Refactored routing logic to use isUsageLogsSectionId for section validation, ensuring proper redirection to the default section when necessary.

* refactor(calendar): update locale documentation for i18n support

- Revised the locale prop documentation in the Calendar component to specify the use of react-day-picker for internationalization, clarifying the expected locale setup for users.

* chore(i18n): remove redundant user information description from locale files

- Removed the user information description from English, French, Japanese, Russian, Vietnamese, and Chinese locale files to streamline translations and improve clarity.

* chore(i18n): streamline locale files by removing redundant entries

- Removed unnecessary entries from English, French, Japanese, Russian, Vietnamese, and Chinese locale files to enhance clarity and reduce clutter.
- Adjusted translations for consistency and improved user experience across multiple languages.

* chore(sidebar): remove deprecated usage logs route from sidebar config

- Eliminated the '/usage-logs' entry from the sidebar configuration to streamline navigation and improve clarity in the sidebar structure.

* refactor(redemption-codes): enhance internationalization support and improve UI consistency

- Updated various components to utilize translation functions for user-facing strings, ensuring a consistent experience across different languages.
- Added meta labels for table columns to improve accessibility and clarity.
- Revised confirmation and action texts in dialogs and tooltips to leverage translation, enhancing user experience.
- Updated locale files to include new translations for improved clarity and consistency.

* feat(masked-value-display): add MaskedValueDisplay component for sensitive data handling

- Introduced a new MaskedValueDisplay component to display masked values with a popover for full value visibility and a copy button for easy access.
- Updated api-keys-columns and redemptions-columns to utilize the new component, enhancing code reusability and UI consistency.
- Revised translation keys in locale files to remove colons for improved clarity.

* refactor(url-utils): simplify query parameter matching logic in checkIsActive function

- Updated the checkIsActive function to streamline the logic for matching URLs with and without query parameters.
- Removed unnecessary checks for query parameters when matching base paths, improving clarity and maintainability of the code.

* fix(channels-table): update group filter label to use translation function

- Replaced hardcoded 'All Groups' label with a translation function call to enhance internationalization support in the ChannelsTable component.

* chore(api-keys): remove deprecated API key action messages and related exports

- Deleted the api-key-actions.ts file, which contained action messages for enabling, disabling, and deleting API keys.
- Updated index.ts to remove the export of getApiKeyActionMessage, streamlining the codebase by eliminating unused functionality.

* refactor(i18n): enhance internationalization support across various components

- Updated multiple components to utilize translation functions for user-facing strings, ensuring a consistent experience across different languages.
- Revised constants and labels in the channels and redemption codes features to use i18n keys, improving maintainability and clarity.
- Ensured that success and error messages leverage translation functions, enhancing user experience and accessibility.
- Streamlined the handling of i18n keys in the constants files for better organization and clarity.

* refactor(i18n): enhance translation support across various components

- Updated multiple components to utilize translation functions for user-facing strings, ensuring a consistent experience across different languages.
- Revised pagination and status labels to use i18n keys, improving maintainability and clarity.
- Enhanced response time formatting to support internationalization, allowing for localized display of time values.
- Updated locale files to include new translations for improved clarity and consistency.

* docs(AGENTS): add type checking requirement for TypeScript changes

- Included a new guideline stating that type checks must be executed after modifying TypeScript or TSX code, ensuring no type errors are left unresolved.
- Updated the document to reflect this addition in the relevant section for better clarity on coding standards.

* feat(combobox-input): add ComboboxInput component for enhanced token selection

- Introduced a new ComboboxInput component to facilitate token name selection with search and filtering capabilities.
- Integrated the ComboboxInput into the UsageLogsFilterDialog for improved user experience when filtering by token name.
- Updated locale files to include new translations for user-facing strings related to token filtering.

* feat(combobox): integrate translation support for custom value prompt

- Added translation functionality to the Combobox component, replacing hardcoded text with a translatable string for the custom value prompt.
- Utilized the useTranslation hook from react-i18next to enhance internationalization support, ensuring a consistent user experience across different languages.

* refactor(i18n): improve Chinese translations for consistency and clarity

- Adjusted spacing in various Chinese translations to enhance readability and maintain consistency across the locale file.
- Updated multiple user-facing strings to ensure proper formatting and alignment with localization standards.

* feat(calendar): add CalendarDropdown component for enhanced dropdown functionality

- Introduced a new CalendarDropdown component to improve user interaction with dropdown selections in the calendar.
- Implemented state management for dropdown visibility and selection handling, enhancing the overall user experience.
- Updated styling for dropdown elements to ensure consistency and better alignment with the UI design.

* fix(balance-query-dialog): handle null currentRow and improve usage query logic

- Updated the BalanceQueryDialog component to safely access currentRow properties using optional chaining.
- Added a check to ensure currentRow is not null before proceeding with usage queries, preventing potential runtime errors.
- Refactored the handleQueryCodexUsage function to use a local variable for currentRow, enhancing code clarity.

* feat(i18n): add new translations for batch creation and channel updates

- Added new translation strings for batch creation instructions across multiple languages, enhancing user guidance.
- Included translations for the "Update Channel" prompt to improve clarity in channel configuration settings.
- Ensured consistency in terminology across locale files for better user experience.

* feat(channel-mutate-drawer): improve API key input handling and update translations

- Refactored the API key input logic in the ChannelMutateDrawer component to enhance readability and maintainability.
- Added new placeholder translations for batch creation and existing key prompts in multiple languages, improving user guidance.
- Ensured consistency in translation strings across locale files for better user experience.

* feat(fetch-models-dialog): implement sorting for model categories

- Added a new function to sort model categories alphabetically, placing 'Other' at the end for easier navigation.
- Updated the rendering logic in the FetchModelsDialog component to utilize the new sorting function for both new and existing models, enhancing user experience.

* refactor(wallet-stats-card): standardize props usage and improve layout consistency

Standardizes props usage and improves layout consistency in wallet stats card

Refactors the wallet stats card component to:
- Use props directly instead of destructuring for consistency
- Add min-w-0 to prevent content overflow
- Adjust text sizing with break-all for proper wrapping
- Implement responsive font sizes (3xl on mobile, 4xl on larger screens)
- Improve leading and tracking for better readability

Refactor wallet stats card for consistency and layout

Standardizes props usage and improves layout consistency in wallet stats card

- Uses props directly instead of destructuring for consistency
- Adds min-w-0 to prevent content overflow
- Adjusts text sizing with break-all for proper wrapping
- Implements responsive font sizes (3xl on mobile, 4xl on larger screens)
- Improves leading and tracking for better readability

* feat(web): add subscription management and admin settings UI

* feat(web): add subscription management and admin settings UI

- Add subscription management module (plans, pricing, toggle status, and related dialogs/tables with Stripe/Creem integration notes)
- Add channel affinity (rules and cache stats), Waffo integration, performance, and Grok model sections to system settings, with extended types and section registry
- Add status code mapping validation/risk warnings, upstream update hooks, and utilities for channels; add available models and sidebar module cards to user profile
- Add chat2link route and useMinimumLoadingTime, useTableCompactMode shared hooks

Made-with: Cursor

* fix: remove duplicate GenerateOAuthCode and add missing TaskBulkUpdate

- remove duplicate GenerateOAuthCode from github.go since oauth.go already has the generic version.
- add model.TaskBulkUpdate for bulk update by upstream task_id strings, fixing task_video.go build failure.

* feat(router): add chat2link and subscriptions routes

- register /chat2link page route under authenticated layout.
- register /subscriptions/ page route under authenticated layout.
- update auto-generated routeTree type definitions and route mappings.

* feat(docker): add development environment setup with Docker Compose

- Introduced docker-compose.dev.yml for local development, including services for new-api, Redis, and PostgreSQL.
- Created Dockerfile.dev for backend-only builds, optimizing the development workflow.
- Updated makefile to include new commands for starting backend services and frontend development.

* feat(web): complete i18n coverage for setup wizard and add language switcher

- wrap all hardcoded English strings in setup-wizard, database-step, usage-mode-step, and complete-step with t() calls, covering step titles, descriptions, form validation messages, and fallback strings.
- add LanguageSwitcher component to the top-right corner of the setup page so users can switch language during initial setup.
- register 25 dynamic i18n keys in static-keys.ts and provide full translations for zh/en/ja/fr/ru/vi.

* feat(i18n): internationalize default version text in workspace-switcher

- remove hardcoded 'Unknown version' default, use t('Unknown version') for i18n fallback
- add "Unknown version" translation entries across all 6 locale files (zh/en/fr/ru/ja/vi)

* feat(i18n): add full i18n coverage for channel-affinity settings page

- replace Chinese t() keys with English keys across three channel-affinity components to align with new frontend i18n conventions.
- add 51 translation entries to all 6 locale files (en/zh/ja/fr/ru/vi) covering main page, rule editor, and cache stats dialog.
- register section-registry dynamic keys in static-keys.ts.

* feat(i18n): add full i18n coverage for Waffo payment settings page

- replace Chinese i18n keys with English keys in waffo-settings-section.tsx for consistency.
- wrap previously hardcoded labels (Pay Method Type / Pay Method Name) with t().
- add 26 Waffo-related translation entries across all 6 locale files (en/zh/fr/ru/ja/vi).

* feat(i18n): add missing translations for global model settings page

- add all 6 locale translations for 3 missing t() keys in global-settings-card.
- register dynamically used 'Grok' key in static-keys.ts for i18n scanner coverage.

* feat(i18n): add full i18n coverage for Grok model settings page

- add translations in all 6 locales (en/zh/fr/ja/ru/vi) for grok-settings-card t() calls.
- cover violation fee toggle, amount input, and official docs link labels.
- include section-registry descriptionKey translation entries.

* feat(i18n): add full i18n coverage for performance settings page

- migrate all t() keys from Chinese to English to align with project conventions.
- add translations for all 6 locales (en/zh/ja/fr/ru/vi) covering disk cache,
  system monitoring, log management, and stats dashboard sections.
- remove 71 obsolete Chinese-keyed entries from every locale file.

* fix(i18n): add 116 missing English translation keys across all locales

- scan all t() calls to identify English keys used in code but absent from locale files.
- add translations for zh/en/fr/ja/ru/vi, keeping key sets and sort order consistent.
- covers system-settings, channels, models, auth, wallet and other modules.

* fix(i18n): add missing translations for log cleanup quick-select and confirm dialog

- wrap quick-select button labels (24 hours ago / 7 days ago / 30 days ago) with t().
- replace hardcoded English strings in purge confirm dialog with t() calls and date interpolation.
- add 5 new translation keys across all 6 locale files (zh/en/fr/ja/ru/vi).

* refactor(web): unify all time display with dayjs formatting

- replace all toLocaleString/toLocaleDateString/toLocaleTimeString and manual padStart concatenation with dayjs.format().
- standardize output: datetime as YYYY-MM-DD HH:mm:ss, date as YYYY-MM-DD, time as HH:mm:ss.
- add formatDateTimeStr, formatDateStr, formatTimeStr dayjs-based helpers in lib/format.ts.
- update 12 files across core utils and feature components.

* refactor(web): replace native datetime-local input with DateTimePicker in announcements

- swap browser-native datetime-local for the project's DateTimePicker component to match the UI used in log cleanup and other pages.
- convert between Date objects and ISO strings to bridge the form's string-based schema.

* refactor(web): replace native HTML elements with design system components

- replace ~35 native <button> with <Button> across pricing, profile, channels modules
- replace native <input>/<textarea>/<label> with <Input>/<Textarea>/<Label> for consistent form styling
- replace native <table> with <Table> components, <details>/<summary> with <Collapsible>
- replace decorative <hr> with <Separator> to ensure global UI consistency

* refactor(web): enhance profile components with design system consistency

- update ProfileSecurityCard to use buttons for security actions, improving accessibility and styling.
- modify AccountBindingsTab layout to a grid for better responsiveness and visual alignment.
- refactor NotificationTab to utilize icons for notification methods, enhancing user experience and clarity.

* fix(i18n): complete i18n coverage for profile page components

- wrap passkey card status badges (enabled/disabled, backup state) and last-used text with t()
- fix hardcoded button labels in security dialogs (change password, access token, delete account)
- internationalize all 2FA dialog strings (setup, disable, backup codes)
- fix email bind dialog description and button state text missing i18n
- wrap remaining hardcoded strings in notification tab and checkin calendar
- add all missing translation entries to zh.json and en.json

* fix(i18n): enhance error messages with translations for deployment access and settings

- wrap connection error messages in DeploymentAccessGuard and IoNetDeploymentSettingsSection with t() for internationalization.
- add missing translation key for "io.net model deployment is not enabled or api key missing" in all locale files (en, fr, ja, ru, vi, zh).

* 🧹 chore(web): resolve all ESLint errors and warnings

Align the Vite/React frontend with the current ESLint flat config and
React Compiler–related rules by fixing violations instead of broad
suppression where practical.

- Replace `any` with concrete types (`unknown`, `Record<string, unknown>`,
  domain types) where upstream/API shapes allow
- Fix duplicate imports, unused bindings, `no-console`, and empty blocks
- Address react-hooks issues: reorder declarations, memoize unstable
  callbacks (`useCallback`), extend dependency arrays, and use targeted
  disables only where sync-from-props in `useEffect` is intentional
- Refactor `motion.create` usage in ai-elements shimmer to avoid creating
  components during render (static-components)
- Stabilize TanStack Query/Mutation hook usage (query keys, `mutate` in
  deps) and add narrowly scoped rule disables where the linter conflicts
  with library patterns
- Disable `react-hooks/incompatible-library` in ESLint config for
  TanStack Table / RHF false positives
- Add file-level `react-refresh/only-export-components` disables for
  registry/provider/column modules that intentionally mix exports

`bun lint` completes with 0 errors and 0 warnings.

* ✨ feat(web): add subscription management to sidebar and align drawer with project conventions

- Register "Subscription Management" nav item in the admin sidebar group
  with CreditCard icon pointing to /subscriptions
- Add subscription module to sidebar config defaults and URL mapping so it
  integrates with the admin sidebar modules toggle in system settings
- Add subscription entry to sidebar-modules-section moduleMeta for the
  maintenance settings UI
- Refactor SubscriptionsMutateDrawer to follow the same patterns used by
  users, redemption-codes, and other mutate drawers:
  - Use shadcn Form/FormField/FormItem/FormControl/FormLabel/FormMessage
    instead of raw register() + Label + manual error display
  - Move SheetFooter outside the form with form attribute association
  - Use SheetClose for the cancel button
  - Reset form state on drawer close
  - Align SheetContent width (sm:max-w-[600px]) and spacing conventions

* ✨ feat(web): overhaul UI/UX with Vercel Geist design alignment

Refactor the entire frontend UI/UX to align with Vercel/OpenAI design
principles, covering layout, animations, skeleton loading, and overall
visual polish.

Motion & Page Transitions:
- Add centralized motion system (lib/motion.ts) with Vercel-style
  transition presets, stagger variants for tables, cards, and sidebars
- Implement AnimatedOutlet for route-level page enter animations
  using TanStack Router pathname keying
- Add PageTransition, StaggerContainer, StaggerItem, CardStagger,
  and TableStagger wrapper components for progressive reveal effects

Skeleton Loading — Vercel Geist Style:
- Replace shadcn default `animate-pulse` with Geist-style shimmer
  sweep animation (linear-gradient + background-position keyframes)
- Add `--skeleton-base` / `--skeleton-highlight` CSS variables tuned
  for both light and dark themes with neutral oklch tones
- Override auto-skeleton-react inline styles via CSS to unify all
  skeleton elements under the same shimmer effect
- Update TableSkeleton with varied column widths for a natural feel
- Add ContentSkeleton and QuerySkeleton wrappers for auto-skeleton
  integration with React Query error/loading states
- Respect prefers-reduced-motion: disable shimmer for accessibility

Layout & Sidebar:
- Upgrade sidebar expand/collapse transitions to cubic-bezier easing
- Add hover micro-interactions (background-color, color, transform)
  to sidebar menu buttons with smooth 150ms transitions
- Fix oklch color compatibility in sidebar outline variant
- Integrate AnimatedOutlet into AuthenticatedLayout for unified
  route-level animations

Theme & CSS:
- Streamline theme.css with cleaner oklch color definitions
- Add CSS table row stagger-in animations with nth-child delays
- Fix hover-scrollbar color bug (hsl → color-mix for oklch compat)
- Add content-auto utility for long list rendering optimization

Cleanup:
- Remove deprecated skeleton-wrapper.tsx
- Remove unused imports and dead code across components
- Add empty-state, error-state, and loading-state utility components

* 🐛 fix(docker): track bun.lock to fix Docker build failure

Remove `web/bun.lock` from `.gitignore` so the lock file is committed
to version control. The Dockerfile `COPY web/bun.lock .` instruction
requires this file to be present in the build context, and ignoring it
caused the build to fail with a "not found" error.

* ⬆️ chore(web): upgrade dependencies and fix all type/lint errors

Upgrade all frontend dependencies to latest stable versions:
- lucide-react 0.562 → 1.7 (major: brand icons removed)
- shiki 3.x → 4.x, eslint 9.x → 10.x, knip 5.x → 6.x
- @rsbuild/core 1.3 → 1.7, @types/node 24 → 25
- tailwindcss/postcss 4.1 → 4.2, motion 12.25 → 12.38
- @tanstack/react-query 5.90 → 5.95, zod 4.3.5 → 4.3.6
- react 19.2.3 → 19.2.4, axios 1.13.2 → 1.13.6
- prettier 3.7 → 3.8, typescript-eslint 8.52 → 8.57
- Add missing optional deps: @xyflow/react, embla-carousel-react

Resolve all TypeScript compilation errors introduced by upgrades:
- Replace lucide-react brand icons (Github) with react-icons/si
- Fix react-hook-form Control/Resolver generics for zod v4
- Fix Record<string, unknown> type constraints across API utils
- Fix axios interceptor return types in lib/api.ts
- Add type assertions for useSettings/useStatus hook returns
- Resolve Badge variant, spread type, and route path mismatches

Resolve all ESLint 10 errors:
- preserve-caught-error: attach cause to re-thrown errors
- no-useless-assignment: refactor redundant variable assignments
- prefer-as-const: use `as const` over literal type assertions
- no-unused-vars: prefix type-only schemas with underscore

Update tsconfig lib from ES2020 to ES2022 for Error.cause support.

* 🐛 fix(web): stop pricing model row from centering its content

Wrapping the row in shadcn <Button variant='ghost'> inherits
`justify-center`, and the inner flex container had no width, so
`justify-between` collapsed and the row appeared centered.

* feat: add Waffo payment integration and related UI components

- Introduced Waffo payment method with support for custom icons and settings.
- Updated payment settings section to include Waffo settings.
- Added Waffo payment request handling in the wallet API.
- Enhanced wallet recharge form to support Waffo payment methods.
- Implemented hooks for Waffo payment processing.
- Updated localization files for new Waffo-related strings.
- Added new payment type and icon for Waffo in constants and UI components.
- Refactored topup info handling to include Waffo payment methods and configurations.

* feat(profile): add admin-only upstream model update notification setting

* fix(web): make sidebar module user settings actually take effect

Previously, saving sidebar module preferences in profile had no effect
because the client ignored user-level sidebar_modules entirely. This
fix wires user config into useSidebarConfig so the sidebar updates
immediately without a page refresh.

Changes:
- Add UserPermissions type with sidebar_settings/sidebar_modules fields
- Refactor useSidebarConfig to merge admin × user config with AND logic
- Sync sidebar_modules to auth store on save for immediate UI updates
- Conditionally render SidebarModulesCard based on user permissions
- Treat null/empty user config as "do not narrow" for legacy users

* feat(web): add custom OAuth provider CRUD and login button support

Migrate custom OAuth from v1 to v2:
- Admin CRUD UI with provider table, form dialog, preset templates, and OIDC discovery
- Login page renders dynamic buttons for custom OAuth providers
- Fix account bindings display showing "Not bound" text when already bound

* feat(web): add ServerAddress, SMTPForceAuthLogin, CreateCacheRatio and group special usable settings

Migrate missing v1 system settings to v2:
- ServerAddress input in General > System Information
- SMTPForceAuthLogin toggle in Integrations > Email
- CreateCacheRatio JSON editor in Models > Ratio
- Group special usable group rules editor in Models > Ratio

* feat(web): wire user subscriptions dialog to users table row actions

The UserSubscriptionsDialog component already existed but had no entry point
in the users table dropdown menu. Add "Manage Subscriptions" menu item.

* chore(web): update i18n translations for new settings and custom OAuth

* 💎 refactor(web): redesign pricing page with flat, typography-driven layout

* 🌐 chore(i18n): complete missing translations and normalize project config

- Add 425+ missing translations across fr, ja, ru, zh, vi locales
  for subscription management, sidebar navigation, Grok settings,
  upstream model updates, pricing page, and other UI components
- Add 37 missing i18n keys used in t() calls but absent from locale
  files (pricing filters, display options, audio/cache labels, etc.)
- Fix stale tech stack info in CLAUDE.md, AGENTS.md, and project.mdc:
  React 18 → 19, Vite → Rsbuild, Semi Design → Radix UI + Tailwind
- Fix i18n key format description: "Chinese source strings" → English
- Deduplicate .cursor/rules/project.mdc to avoid triple-loading the
  same rules already present in root CLAUDE.md and AGENTS.md
- Add i18n-translate Cursor skill for repeatable translation workflow

* 🎨 refactor(web): redesign dashboard with flat, typography-driven layout

Replace Card-based dashboard components with a flat, border-driven design
system consistent with the pricing page, following the ui-style.mdc conventions.

Overview section:
- StatCard: replace Card wrapper with flat flex layout, monospace tabular
  values, uppercase tracking-wider labels, layered opacity hierarchy
- PanelWrapper: replace Card/CardHeader/CardContent with rounded-lg border
  container and border-b header
- SummaryCards: merge three stat cards into a single bordered container
  with divide-x separators; decouple border from stagger animation to
  prevent border deformation during entrance transitions
- ApiInfoPanel/Item: full-width list rows with border-b separators,
  monospace route names, layered opacity for URLs and descriptions
- AnnouncementsPanel: native button rows with hover:bg-muted/40, i18n for
  "Click for details" hint
- FAQPanel: lighter border-border/60 accordion dividers, muted answer text
- UptimePanel: uppercase tracking-wider group headers with bg-muted/30
  background, monospace uptime percentages, fine-grained border opacity

Models section:
- LogStatCards: replace Card with rounded-lg border + divide-x grid,
  fix react-hooks/exhaustive-deps by destructuring props before useEffect
- ModelCharts: replace Card+Tabs with bordered container + custom
  segmented control matching ui-style spec
- Suspense fallbacks: match new flat skeleton layout with accurate
  column structure

Animation:
- Wrap models section in FadeIn with staggered delay
- Keep CardStagger for overview panel grid (each panel has own border)

Other:
- Add ui-style.mdc cursor rule documenting the design language
- Disable react-refresh/only-export-components for src/routes/** in
  eslint config (TanStack Router route files always export Route objects)
- Fix zh.json: "Token-based" translation "基于令牌的" → "按量计费"

* ✨ refactor(web): adopt flat dot-and-text design for all status badges

Replace the bordered/colored-background StatusBadge and Badge components
across the entire frontend with a minimal flat design: a small colored
dot followed by colored text, eliminating visual noise from heavy
borders, backgrounds, and rounded pill shapes.

Key changes:

- Redesign StatusBadge to use dot + text instead of bordered pill style,
  removing cva-based background/border variants in favor of exported
  dotColorMap and textColorMap lookup tables
- Add children prop support to StatusBadge for flexible content rendering
  alongside the existing label prop
- Migrate all Badge usages (except pricing page) to StatusBadge with
  appropriate variant mappings (default→info, secondary→neutral,
  outline→neutral, destructive→danger)
- Consolidate adjacent multi-badge groups into single-dot layouts with
  dot separators (·) to reduce visual clutter in:
  - Channel balance columns (used + remaining)
  - Channel type column (type + IO.NET indicator)
  - User invite info column (invited + revenue + inviter)
  - Usage log stats bar (usage + RPM + TPM)
  - Usage log time/FRT column (time + FRT + stream status)
  - Subscription plan counts (active + expired)
  - Channel affinity scope/regex/key-source columns
  - Prefill group card headers (type + ID)
- Export dotColorMap and textColorMap for direct use in custom inline
  layouts that need consistent status colors without the full component

* ✨ refactor(web): redesign public layout and landing page with modern UI

Overhaul the public-facing layout, header, and homepage to deliver a
polished, animation-rich landing experience inspired by contemporary
SaaS design patterns.

Header:
- Replace sticky header with fixed floating navbar that compacts into
  a pill-shaped glass-morphism bar on scroll (backdrop-blur + ring)
- Add smooth 700ms cubic-bezier transitions for scroll-based shrinking
- Build full-screen mobile menu overlay with staggered entry animations
- Remove background color from logo container, show logo image directly

Homepage sections:
- Hero: gradient text title, radial gradient + grid pattern background,
  interactive terminal demo showcasing API request/response
- Terminal demo: auto-cycles through gpt-4o, claude-sonnet-4-20250514,
  gemini-2.5-pro, deepseek-chat with smooth cross-fade transitions,
  clickable model badges, dual theme support (light/dark), fixed height
- Stats: animated counters driven by IntersectionObserver with
  cubic-bezier easing, supports integer and decimal modes
- Features: Bento grid layout with gap-px border technique, each card
  includes contextual visuals (model list, security badge, workflow)
- How It Works: new three-step process section (Configure → Connect →
  Monitor) with connecting gradient line and numbered badges
- CTA: gradient mesh background with scale-in scroll animation
- Footer: streamlined brand column + link columns layout

New components:
- AnimateInView: IntersectionObserver-based scroll animation component
  supporting fade-up, fade-in, scale-in, fade-left, fade-right
- HeroTerminalDemo: themed terminal with model carousel and live
  request/response preview

CSS:
- Add landing page scroll-triggered keyframe animations
- Add terminal demo animations (blink cursor, spinner, pulse indicator)
- Respect prefers-reduced-motion throughout

i18n:
- Add 17 new translation keys across all 6 locales (en/zh/fr/ja/ru/vi)

* ✨ feat(web): align usage logs and channels with legacy UI

Usage logs
- Show Refund (type 6) in detail dialog and hide conversion chain for refunds
- Sync filter dialog state from URL for model, token, group, username, and requestId

Channels
- Support optional stream flag in channel test API, actions, and test dialog
- Show upstream model update badges (+added / -removed) on fetchable channel types
- Add form fields and drawer toggles for upstream model update check and auto-sync
- Persist upstream model update flags in channel settings JSON for fetchable types

i18n
- Add locale strings for upstream model update UI (en, zh, fr, ja, ru, vi)

* 🐛 fix(web): prevent transient vertical scrollbar on tables during animations

Add overflow-y-clip to the shared Table container (data-slot=table-container)
alongside overflow-x-auto. Setting overflow-x to auto implicitly pairs with
overflow-y: auto in browsers, which made the table shell briefly show a
vertical scrollbar during route enter motion (y/blur) and table row stagger.

Remove the redundant descendant selector workaround from the model pricing
GroupPricingSection; behavior is now covered globally by the Table component.

* 🏗️ refactor(web): redesign console layout with fixed header, scrollable content, and pinned footer

Overhaul the authenticated console layout to match the OpenAI dashboard
pattern: header and page title bar stay fixed at the top, only the
content area scrolls, and table pagination is pinned to the bottom.

Layout architecture:
- Lock SidebarInset to full viewport height (h-svh) so all inner
  regions are controlled by flexbox instead of document scroll
- Convert Main from a generic div to a semantic <main> flex container
  with overflow-hidden, removing the legacy `fixed` prop and
  `data-layout` attribute
- Strip scroll-shadow logic and `fixed` prop from Header/AppHeader;
  the header is now naturally fixed as a shrink-0 flex child
- Restructure SectionPageLayout into three flex regions: a shrink-0
  title bar, a flex-1 overflow-auto content area, and a shrink-0
  footer portal target with empty:hidden
- Add min-h-0 to AnimatedOutlet wrappers to prevent flex overflow

Footer portal system:
- Introduce PageFooterProvider / PageFooterPortal (React Context +
  createPortal) so deeply nested table components can render their
  DataTablePagination into the fixed footer without prop drilling
- Migrate all 8 data tables (api-keys, channels, users, models,
  deployments, usage-logs, subscriptions, redemption-codes) to use
  PageFooterPortal for pagination

Page-level fixes:
- Profile: wrap content in a scrollable flex child with proper padding
- SystemSettings: remove overflow-auto from wrapper to avoid nested
  scrollbars (sub-pages manage their own scroll)
- Playground / Error pages: remove obsolete `fixed` props

API keys UX improvement:
- Replace inline key show/hide toggle with a Popover-based reveal,
  removing toggleKeyVisibility and keyVisibility state from the
  provider context

Cleanup:
- Remove dead CSS rule for body:has([data-layout='fixed'])
- Remove unused `fixed` prop from Header, AppHeader, and Main types
- Export PageFooterPortal from layout barrel file

* 💅 refactor(web): polish table UI consistency and add pagination transitions

- Standardize primary action buttons (Create, Add, Search) to size="sm"
  across all pages for visual consistency with channels and models
- Redesign NumericSpinnerInput with minimal inline style: plain text by
  default, hover-revealed +/- buttons, click-to-edit — replacing the
  clunky bordered input with stacked chevron arrows
- Fix vertical scrollbar in channels group column by replacing
  overflow-x-auto with overflow-hidden (redundant with +N collapse)
- Simplify API keys group column: replace colorful StatusBadge pairs
  with clean typography using opacity hierarchy and dot separators
- Move API key copy loading indicator from key text to the copy button
  itself, eliminating layout shift during key resolution
- Reduce page title from text-2xl to text-lg and subtitle to text-sm
  in SectionPageLayout for a more compact header
- Add smooth opacity transition (duration-150) on all 7 server-paginated
  tables during background data fetches (isFetching && !isLoading),
  with pointer-events-none to prevent interaction during loading
- Constrain usage logs Details column width (size: 200, maxSize: 220)

* 🐛 fix(web): restore missing padding on system settings content

The console layout refactor in d2150469 moved padding ownership from
Main onto each route, but SystemSettings was missed — its Outlet
wrapper had no padding, so the content area sat flush against the
sidebar and top nav. Add `px-4 pt-6 pb-4` to match the vertical
rhythm used by SectionPageLayout and the Profile page.

* 📱 refactor(web): standardize mobile responsive layout across all table pages

Unify mobile experience for all data table pages (channels, keys, models,
deployments, usage-logs, users, redemption-codes, subscriptions) with a
consistent layout pattern and cleaner header area.

DataTableToolbar:
- Redesign mobile layout: full-width search input + collapsible filter
  toggle button with active filter count badge
- Filters, additional search, and reset button collapse into an
  expandable section on mobile, keeping the default view compact
- Desktop layout remains unchanged

SectionPageLayout:
- Tighten mobile spacing (padding, gaps) for higher content density
- Scale down title (text-base) and description (text-xs) on mobile
- Shrink action button gaps on small screens

ChannelsPrimaryButtons:
- Move Tag Mode and Sort by ID toggles into the "More" dropdown on
  mobile (via DropdownMenuCheckboxItem), freeing header space
- Desktop toggle switches remain visible outside the dropdown

MobileCardList (shared component):
- Compact list-item layout with title + badge header row and
  side-by-side key fields, replacing individual card components
- Structured (CompactRow) and fallback (FallbackRow) rendering modes
  driven by column meta (mobileTitle, mobileBadge, mobileHidden)

New MobileCardList integration:
- Users table: username as title, status as badge; hide id,
  display_name, invite_info on mobile
- Redemptions table: name as title, status as badge; hide id,
  created_time, expired_time, used_user_id on mobile
- Subscriptions table: plan title as title, enabled as badge; hide id,
  sort_order, reset, payment, total_amount, upgrade_group on mobile

Column meta updates:
- Add mobileTitle/mobileBadge/mobileHidden meta across all 8 table
  column definitions for consistent mobile field prioritization

Minor fixes:
- Hide Subscriptions Stripe/Creem alert on mobile
- Disable card hover animations on mobile via CSS media query

* 🐛 fix(web): sync favicon with custom system logo

Favicon stayed at the hardcoded /logo.png while document.title already
followed system_name, leaving tab icon and site branding out of sync.
Apply the logo as favicon from localStorage cache on startup, refresh
from getStatus(), and re-apply when useSystemConfig finishes preloading.
Extract applyFaviconToDom helper into lib/dom-utils with idempotent guard
to avoid redundant DOM writes.

* ✨ feat(web): add channel affinity rule templates and CreateCacheRatio visual editing

Port missing features from legacy frontend (b8650b9 merge) to the new
React frontend:

- Add Codex CLI and Claude CLI channel affinity rule templates with
  header passthrough presets (pass_headers operations for Originator,
  Session_id, X-Codex-*, X-Stainless-*, Anthropic-*, etc.)
- Introduce "Add Rule" dropdown menu with blank, Codex CLI, and Claude
  CLI template options in the channel affinity settings page
- Add "Fill Templates" button to batch-append both CLI templates with
  duplicate name resolution and confirmation dialog
- Support templateKey prop in RuleEditorDialog to pre-fill form fields
  from selected template, auto-expanding advanced settings when a
  param_override_template is present
- Add CreateCacheRatio support to the model ratio visual editor, edit
  dialog, and form — previously only editable in JSON mode, now fully
  integrated into the visual table column, add/edit dialog fields, and
  save/delete handlers

* 🐛 fix(web): fix content-type detection bugs in About and Home pages

- Fix About page URL detection: replace naive `startsWith('https://')`
  with proper `new URL()` validation to support both http and https, and
  handle untrimmed input that previously caused silent misdetection
- Fix About page HTML detection: remove overly broad `startsWith('<')`
  and `endsWith('>')` checks that could misclassify Markdown or XML
  content; align with LegalDocument's regex-only `isLikelyHtml` approach
- Fix Home page URL detection: same `startsWith('https://')` bug,
  replaced with `new URL()` protocol validation
- Refactor About page to use early-return pattern instead of deeply
  nested ternary expressions for better readability
- Replace About loading spinner with Skeleton placeholder consistent
  with LegalDocument
- Add `prose prose-neutral dark:prose-invert` typography classes to
  About HTML/Markdown rendering for proper dark mode support
- Remove unused `Code` icon import from About page

* ✨ feat(web): port missing features from legacy frontend and complete i18n

Backport and enhance several features from the old frontend (web/old)
that were missing or incomplete in the new React frontend:

- Playground & channel test: parse structured JSON error responses from
  SSE streams and non-streaming API calls, extract error codes, and
  display actionable UI for `model_price_error` (admin settings link)
- User management: replace local quota manipulation with atomic
  server-side quota adjustments (add/subtract/override) via dedicated
  API endpoint, making the quota field read-only in the edit drawer
- Subscriptions: display next quota reset time for active subscriptions
- Dashboard: limit model ranking chart to top 20 models with an "Other"
  bucket, add dimension tooltips with sorted values and totals to model
  call trend and user consumption trend charts
- i18n: add 24 new translation keys across all 6 locales (en, zh, fr,
  ja, ru, vi) for the newly introduced UI elements and messages

* 🎨 feat: add backend-configurable frontend theme switching (default/classic)

Introduce runtime frontend theme switching so administrators can switch
between the new frontend (Radix UI + Tailwind) and the classic frontend
(Semi Design) from the settings page without restarting the server.

Directory restructuring:
- Move new frontend from web/ to web/default/
- Move classic frontend from web/old/ to web/classic/
- One-frontend-per-folder layout for extensibility

Backend (injection pattern):
- Add setting/system_setting/theme.go with GlobalConfig.Register("theme")
  so the DB key "theme.frontend" is handled automatically by
  handleConfigUpdate — no switch-case in updateOptionMap needed
- Use atomic.Value in common.GetTheme()/SetTheme() for lock-free
  concurrent reads on the hot path (static file middleware)
- Add themeAwareFileSystem that delegates to the correct embedded FS
  based on the current theme at request time
- Embed both frontends into the binary via go:embed
- Add controller validation for theme.frontend values
- Expose theme in GET /api/status response

Frontend settings UI:
- New frontend: add "Frontend Theme" select in System Information section
  using Radix UI Select + react-hook-form + Zod validation
- Classic frontend: add "前端主题" select in Personalization section
  using Semi Design Form.Select

Build system:
- Update Dockerfile with multi-stage builds for both frontends
- Update Makefile with separate build targets for each frontend
- Update GitHub Actions release workflow for dual frontend builds

i18n:
- New frontend: add translations for all 6 locales (en/zh/fr/ja/ru/vi)
- Classic frontend: add translations for all 7 locales (en/zh-TW/ja/fr/ru/vi)
- Fix zh "AI Proxy Library" → "AI 代理库"

Documentation:
- Update CLAUDE.md, AGENTS.md, .cursor/rules/project.mdc to reflect
  the new web/default/ and web/classic/ directory structure

* ✨ feat(web): add allow_speed passthrough for Claude channels, fix multi-key index and inference_geo scope

- Add `allow_speed` toggle for Anthropic (type 14) channels to control
  Claude inference speed mode passthrough, with full form schema,
  settings persistence, and UI switch
- Fix `allow_inference_geo` to also apply to Anthropic (type 14) channels,
  not just OpenAI (type 1), matching the backend behavior for Claude data
  residency region control
- Fix multi-key management dialog to display 1-based key indices instead
  of 0-based (#{key.index + 1})
- Fix TypeScript type error in section-registry by adding type assertion
  for theme.frontend enum
- Add i18n translations for all new keys across 6 locales (en, zh, fr,
  ja, ru, vi)

* 🧹 chore: clean up editor configs, consolidate agent skills, and set classic as default theme

- Add .cursor/ to .gitignore and remove tracked editor config files
  (.cursor/rules/, .cursor/skills/) from version control
- Consolidate .agents/skills/vercel-react-best-practices by keeping only
  the compiled AGENTS.md and removing redundant SKILL.md and 57 individual
  rule files under rules/
- Change default frontend theme from "default" to "classic" in both
  common/constants.go init and setting/system_setting/theme.go

* feat: Frontend Tiered Pricing, Waffo Payments, and Rsbuild 2 Upgrade (#24)

* feat(ui): add codex extra limits, key last used, and admin audit surfaces

- codex usage dialog: render `additional_rate_limits` with `RateLimitGroupSection` and typed base/secondary window data.
- api keys table: add "Last Used" column from `accessed_time`.
- usage log details: show top-up audit and manage operator for admins; extend `LogOtherData` audit fields; broaden IP display; warn when legacy records lack audit data.
- billing history: show user id badge for admins; add zh i18n for new strings.

* feat(web): add dynamic pricing breakdown and Waffo Pancake payments

- add billing-expr parsing and DynamicPricingBreakdown; surface tiered_expr in model list/details.
- extend PricingModel with billing_mode, billing_expr, and pricing_version for backend parity.
- add Waffo Pancake integration settings, amount/pay APIs, hook, and recharge flow wiring.
- update payment confirm/recharge UI and Chinese locale strings.

* feat(pricing): add tiered billing editor and tool price settings

- introduce tier-expr and extend billing-expr (time/param conditions, combine/split helpers, editor utilities) for visual tiers and request rules.
- support tiered_expr in model ratio dialog, form, and visual editor with billing_setting fields and default JSON placeholders.
- add TieredPricingEditor and tool price settings UI plus i18n updates.

* chore(web): bump rsbuild to v2 and align build config

- upgrade @rsbuild/core, @rsbuild/plugin-react, and Rspack 2 transitives; bump TanStack Router packages and refresh bun.lock.
- replace deprecated performance.chunkSplit with top-level splitChunks cache groups for react, radix, and tanstack vendors.
- factor dev server proxy into devProxy; set legalComments to none in prod; enable performance.buildCache keyed by VITE_REACT_APP_VERSION.
- TanStack Router plugin: enable autoCodeSplitting only in production for faster dev navigation and HMR.

* fix(i18n): update translations for API keys and Waffo Pancake settings

- Corrected translations for "API Private Key" and "Merchant ID is required" across multiple languages.
- Added new translation for "Configure Waffo Pancake hosted checkout integration for USD-priced top-ups."
- Updated various existing translations to ensure consistency and clarity in user interface text.

* refactor(code-block): simplify code highlighting and improve theme handling

- Updated the highlightCode function to support dual themes in a single call, reducing complexity.
- Removed unnecessary state management for dark theme HTML, streamlining the component.
- Enhanced CSS for Shiki themes to ensure proper token color application in dark mode.

* refactor(wallet): use isWaffoPancakePayment for pancake payment dispatch

- replace the waffo_pancake string literal with the shared helper for consistency with use-payment and PAYMENT_TYPES.
- centralize the value so a constant change does not require hunting for typos in multiple call sites.

* fix(wallet): validate waffo pancake checkout url and safe open

- allow only parseable http/https redirect targets from the backend, rejecting dangerous schemes.
- pass noopener and noreferrer in window.open to reduce reverse tabnabbing.
- show a toast and abort on invalid URLs; add i18n entries across locales.

* fix(wallet): harden payment icon image URLs

- add normalizeHttpIconUrl to allow only http(s) after resolution and reject userinfo in URLs.
- set referrerPolicy, lazy loading, and async decode on the icon <img> to cut referrer leakage.
- fall back to built-in icons on invalid URLs, same as when iconUrl is missing.

* fix(pricing): label param() conditions as body param in dynamic pricing

- non-header request rules map to `param()`, not query strings.
- align with tiered pricing editor by using the existing `Body param` string.

* fix(rsbuild): update legalComments handling in build config

- Rely on Rsbuild's default legalComments setting in all modes to ensure compliance with open-source licensing requirements.
- Clarified comments to explain the implications of omitting legalComments in production.

* fix(i18n): correct billing and codex UI strings in locale files

- restore ~83 en.json values to English (tool pricing, audit text, alipay label, etc.).
- add proper fr/ru/vi/ja strings so those locales no longer copy zh.
- change five locale files only; zh.json unchanged.

* fix(i18n): update locale files for improved translations and sync report

- Added missing translations and corrected existing strings in English, French, Japanese, Russian, Vietnamese, and Chinese locale files.
- Updated the sync report to reflect zero missing translations across multiple locales.
- Enhanced the untranslated count for Japanese locale to ensure completeness.
- Changed the base locale from zh.json to en.json for better alignment.

* chore(agents): add i18n-translate agent skill

- add `.agents/skills/i18n-translate/SKILL.md` documenting locale layout under `web/default` and
  `bun run i18n:sync` usage.
- capture a repeatable maintainer workflow with embedded script examples to find missing keys
  and untranslated values.
- give agents a clear path to complete and verify translations across en, zh, fr, ja, ru, and vi.

* feat(settings): hide frontend theme setting (#25)

* feat(settings): hide frontend theme setting

- add a local hidden feature flag with window.newapiUnlock support.
- hide the frontend theme option by default and reveal it immediately after unlock.

* feat(settings): support click unlock for frontend theme setting

- add a shared hidden click unlock hook for repeated-click gated UI.
- reveal the frontend theme option after triple-clicking the system information title.
- preserve the Doubao API address ten-click unlock behavior and remove global unlock functions.

* feat(sync 59337e9): Sync classic tiered billing, upstream price synchronization, and model management features to web/default (#26)

* feat(skill): add classic-to-default-sync skill for auditing and syncing web/classic changes to web/default

- Introduced a new skill to inspect a given commit's changes in web/classic and synchronize features and fixes to web/default.
- Documented workflow steps for extracting diffs, mapping changes, triaging, implementing, and reporting on the synchronization process.
- Emphasized quality standards and internationalization considerations for new user-visible strings.

* feat(web/default): sync billing and model management features from classic

- add `len` condition variable (total input context length); introduce
  BILLING_PRICING_VARS / BILLING_CONDITION_VARS to separate pricing vars
  from condition-only vars; fix tier condition regex to accept `len`.
- rewrite upstream ratio sync components to support per-model grouped
  rows and new ratio types (create_cache, image, audio, billing_expr).
- add LlmPromptHelper component; update tiered presets to use `len` for
  conditions; add GLM-4.5 Air, Doubao Seed 1.8, Qwen3 Omni Flash, and
  weekend-discount presets.
- add created_at / last_login_at columns to users table; add "Removed
  Models" tab to FetchModelsDialog for mapping source keys not in the
  models list.
- add extractMappingSourceModels helper; update dynamic-pricing-breakdown
  to use system currency settings; add 19 i18n keys across all locales.

* ✨ feat(default): surface tiered billing in usage logs and gate Passkey ops behind 2FA

Continues the classic-to-default sync (commit 1be6cdb) by porting the
remaining audit-log, pricing-hint, and Passkey lifecycle features from
web/classic to web/default using the default frontend's component
patterns (Radix UI, Tailwind, shadcn-style dialogs).

* feat(usage-logs): show tiered_expr breakdown and matched tier in details

  - Extend `LogOtherData` with `billing_mode`, `expr_b64`, and
    `matched_tier` fields populated by the backend for tiered logs.
  - Add `decodeBillingExprB64`, `resolveMatchedTier`, and
    `getTieredBillingSummary` helpers in `usage-logs/lib/format.ts` that
    centralise tiered-billing parsing on top of the canonical
    `parseTiersFromExpr` / `BILLING_PRICING_VARS` from the pricing
    feature, instead of duplicating the classic-frontend renderer.
  - Render `<DynamicPricingBreakdown>` inside the consume-log details
    dialog with the matched tier row highlighted in emerald and tagged
    "Matched"; suppress the legacy claude/audio/image cost rows when a
    tiered expression is in effect.
  - Surface per-tier prices and the matched tier label in log row
    segments and the billing breakdown table.

* feat(pricing): show tier-count, time-based, and request-based hints in model list

  - Add `summarizeTieredExpr` that derives compact dynamic-pricing
    metadata (tier count + presence of time/request conditions) from a
    `tiered_expr` model, computed once per render via `useMemo`, so
    users can tell *what kind* of dynamic pricing applies before
    drilling into the model details.
  - Render the hints alongside the existing "Dynamic Pricing" badge in
    `<ModelRow>`.
  - Extend `<DynamicPricingBreakdown>` with a `matchedTierLabel` prop so
    the same component can be reused from the usage-log details dialog
    to highlight the tier that actually fired.

* feat(profile): require Security Verification for Passkey register/remove

  - Wire `usePasskeyManagement` through `useSecureVerification` and
    `<SecureVerificationDialog>` in `<PasskeyCard>`.
  - Registration prompts for 2FA before issuing the Passkey credential
    (only when 2FA is already enabled — otherwise the browser-level
    Passkey prompt itself acts as proof of presence and we register
    directly).
  - Removal prompts for 2FA or Passkey, whichever the account has
    enabled, with informative toasts when neither method is available
    or the device lacks Passkey support.
  - Scope the dialog method set to the required factor so users cannot
    fall back to a weaker method, and propagate cancellation cleanly.

* refactor: tighten upstream-ratio-sync and fix tier editor narrowing

  - Drop the unused `hasSynced` state and dead `getOrderedRatioTypes` /
    `isSelectableUpstreamValue` imports from `upstream-ratio-sync.tsx`.
  - In the cost estimator, narrow `BILLING_EXTRA_VARS` entries with a
    null-`field` guard to silence the type checker and make the
    "pricing variables only" contract explicit.
  - Apply Prettier-consistent formatting to the upstream-ratio-sync
    table/columns, channel mutate drawer, system info section,
    tier-expr, and wallet helpers (no behaviour change).

* i18n: add 9 keys across en/zh/fr/ja/ru/vi

  - `{{count}} tiers`, `Billing Process`, `Matched`, `Matched Tier`,
    `Request-based`, `Security verification`, `Time-based`, plus the
    two new Passkey verification description strings.

* 🔧 refactor(default): align upstream price sync, tiered billing, and fetch-models with classic 59337e9

Port and optimize the remaining web/classic features from commit 59337e9 to web/default,
covering upstream price synchronization, tiered billing expressions, model fetching, and
channel preset detection. Improve component architecture, memoization, and i18n coverage.

Upstream Price Sync
- Extend sync to all ratio fields: CacheRatio, CreateCacheRatio, ImageRatio,
  AudioRatio, AudioCompletionRatio in addition to ModelRatio / CompletionRatio
  / ModelPrice
- Add tiered billing sync (billing_mode + billing_expr) with auto-pairing so
  selecting one upstream tier value populates the other from the same source
- Bulk select / unselect per upstream column with indeterminate checkbox state
  reflecting partial selection
- Confidence indicators warn when an upstream entry is heuristically derived
- Conflict confirm dialog gains loading state and disables actions during sync
- Default endpoint per channel: /api/pricing for official preset,
  /api/models.dev for the models.dev preset, /api/v1/models for OpenRouter,
  with the rest falling back to the global default
- Rename tab label from "Upstream sync" to "Upstream price sync" for clarity

Tiered Pricing Editor
- Add `len` (full input length, including cache hits) as a tier-condition
  variable to avoid mis-routing when cache hits reduce `p`
- When inserting a new tier, automatically convert the previous catch-all into
  a bounded tier with a `len <= X` upper bound
- Cap each tier at 0~2 conditions and disable the add-condition button at the
  limit, with an Alert explaining the recommended `len` usage
- Extend presets with Multimodal (img / img_o / ai / ao), Request rule
  (header/param matching), and Time-based (hour / weekday) entries
- Embed an LLM prompt helper that copies a model-aware template for designing
  expressions with ChatGPT / Claude

Fetch Models Dialog
- Add a "Removed Models" tab listing models still in the local selection but
  no longer returned by the upstream listing
- Exclude `model_mapping` source keys from the removed view so aliases never
  appear as missing entries
- Force-remount tab content on tab switch via `key` prop to clear stale state
- Switch count placeholders to `{{count}}` interpolation across "Existing
  Models", "New Models", and "Removed Models" labels

Channel Selector & Constants
- Recognize the models.dev preset (id, base_url, name) alongside the existing
  official-channel preset detection
- Add MODELS_DEV_PRESET_* and OPENROUTER_* constants and reorder
  ENDPOINT_OPTIONS so `pricing` is preferred over `ratio_config`
- Expose the new ratio types in RATIO_TYPE_OPTIONS for the sync filter

Types
- Add optional `type` field to UpstreamChannel for endpoint inference
- Extend RatioType union with create_cache_ratio, image_ratio, audio_ratio,
  audio_completion_ratio, billing_mode, and billing_expr

Code Quality & Performance
- Extract upstream-ratio-sync-helpers.ts to host shared types
  (RatioDifferenceEntry, ModelRow, ResolutionsMap), field ordering
  (RATIO_SYNC_FIELDS, SYNC_FIELD_ORDER, NUMERIC_SYNC_FIELDS), and selection
  logic (getPreferredSyncField, isSelectableUpstreamValue, getSyncFieldLabel)
- Memoize the column definitions in useUpstreamRatioSyncColumns and pull the
  per-cell rendering into a renderUpstreamValue helper to remove inline IIFEs
- Wrap handleBulkSelect / handleBulkUnselect in useCallback for stable refs;
  rename the misleading `_upstream` parameter to `upstream`
- Convert parsedRatios from useCallback (returning a function) to useMemo
  (returning the value) and update all call sites to read it as a value
- Memoize the channels list with useMemo so the endpoint-init effect no
  longer fires on every render due to a fresh `?? []` reference

i18n
- Add and translate new keys ("Upstream price sync", "Audio Ratio", "Audio
  Completion Ratio", "Cache Create Ratio", "Image Ratio", "Expression
  Billing", "Fixed Price", "{{n}} model(s) selected", tier guidance, etc.)
  across en, zh, fr, ja, ru, vi
- Fix truncated keys ("Existing Models (", "New Models (", "Removed Models (")
  to proper {{count}} interpolated forms in every locale
- bun run i18n:sync reports 0 missing and 0 extra keys for every locale

Verification
- bun run typecheck: pass
- bun run lint: pass
- bun run i18n:sync: pass (0 missing / 0 extras across all locales)

* 🐛 fix(default): port classic 73e5557 tiered-billing fixes and dedupe Title-Case ratio i18n keys

Sync the web/classic frontend fixes from upstream merge 73e5557 to
web/default, and clean up duplicated Title-Case ratio labels in the
upstream sync UI that were shadowing the canonical sentence-case i18n
keys.

Cache-token filter for tiered model price (port of 9f8a4ec05)
- The matched-tier breakdown shown in the usage-log details dialog
  and in the log table previously listed every cache-related price
  (Cache Read, Cache Write, Cache Write 1h) regardless of whether
  the request actually consumed cache tokens.
- `getTieredBillingSummary` in `usage-logs/lib/format.ts` now skips
  `cache`-group vars when none of `cache_tokens`,
  `cache_creation_tokens`, `cache_creation_tokens_5m`, or
  `cache_creation_tokens_1h` are positive, mirroring the classic
  `renderTieredModelPrice` / `renderTieredModelPriceSimple` logic.
- Extract `hasAnyCacheTokens(other)` as an exported helper so the
  predicate is defined once.
- Add a `hideCacheColumns?: boolean` prop to
  `DynamicPricingBreakdown` and wire it up from the log details
  dialog so the full tier table hides cache columns under the same
  condition. `model-details.tsx` keeps the default (show all
  configured prices), since that view represents the model's
  pricing structure rather than a specific call.

`tiered_expr` ratio/price fallback during sync delays (port of bee339d27)
- When saving a model in tiered-expression mode, the visual editor
  used to delete every ratio/price map entry for the model and only
  write `billing_setting.billing_mode` /
  `billing_setting.billing_expr`. In multi-instance deployments,
  instances that had not yet observed the billing_setting update
  fell back to ratios that no longer existed, breaking pricing.
- `model-ratio-dialog.tsx`: `handleSubmit` always passes every form
  field (`price`, `ratio`, `cacheRatio`, `createCacheRatio`,
  `completionRatio`, `imageRatio`, `audioRatio`,
  `audioCompletionRatio`) into the data object regardless of
  `pricingMode`, so a switch from per-token to tiered_expr no
  longer drops the previously entered ratios.
- `model-ratio-visual-editor.tsx`:
  - The row builder now also surfaces ratio/price values for
    `tiered_expr` rows, so they survive the edit-and-save round
    trip and the next save.
  - `handleSave` factors out a `setIfPresent` helper and persists
    ratio/price entries for `tiered_expr` models alongside
    billing_mode / billing_expr. These act purely as fallback
    because the backend's `ModelPriceHelper` checks `billing_mode`
    first.
  - Cell rendering mutes ratio/price values whenever the row is
    `tiered_expr` (in addition to the existing per-request
    muting), making it visually clear the values are fallback,
    not the active pricing source.

i18n: dedupe Title-Case ratio labels in upstream sync
- `upstream-ratio-sync` `RATIO_TYPE_OPTIONS` previously used
  Title-Case labels (`Model Ratio`, `Cache Ratio`, `Audio
  Completion Ratio`, …) that were rendered through `t()` but never
  existed as canonical keys in the catalogue. The form-field side
  has used sentence-case (`Model ratio`, `Cache ratio`, …) for
  some time, leaving two parallel translation entries per ratio
  type and causing the upstream sync UI to fall back to the
  English source string in zh/ja/ru/fr/vi.
- Rewrite `RATIO_TYPE_OPTIONS` in
  `system-settings/models/constants.ts` and the conflict-detection
  labels in `upstream-ratio-sync.tsx` to reuse the sentence-case
  keys.
- Drop the duplicate Title-Case entries from every locale and
  promote the better translations onto the surviving sentence-case
  keys (e.g. zh `Image ratio` keeps "图片倍率", `Audio completion
  ratio` keeps "音频补全倍率").
- Add a comment to `RATIO_TYPE_OPTIONS` warning future
  contributors not to switch back to Title Case without updating
  the catalogue.

Note on backend fix 4e93148d9
- The backend portion of the merge (allocating a fresh map in
  `updateConfigFromMap` so removed keys are properly cleared) is
  already on HEAD; no additional change is needed.

Verification
- `bun run typecheck`: pass
- `bun run lint`: pass
- `bun run i18n:sync`: 0 missing / 0 extras across
  en / zh / fr / ja / ru / vi

---------

Co-authored-by: Seefs <40468931+seefs001@users.noreply.github.com>
Co-authored-by: Seefs <i@seefs.me>
Co-authored-by: feitianbubu <feitianbubu@qq.com>
Co-authored-by: Calcium-Ion <i@caion.me>
Co-authored-by: Xyfacai <xyfacai@gmail.com>
Co-authored-by: xiangsx <1984871009@qq.com>
Co-authored-by: 郑伯涛 <351175318@qq.com>
Co-authored-by: RedwindA <austinaosid@gmail.com>
Co-authored-by: dean <1006393151@qq.com>
Co-authored-by: QuentinHsu <xuquentinyang@gmail.com>
Co-authored-by: Bliod <bliod@bliod.lan>
Co-authored-by: Apple\Apple <zeraturing@foxmail.com>

web/default/src/lib/api.ts

@@ -0,0 +1,236 @@
+import axios from 'axios'
+import i18next from 'i18next'
+import { toast } from 'sonner'
+import { useAuthStore } from '@/stores/auth-store'
+
+// ============================================================================
+// Axios Instance Configuration
+// ============================================================================
+
+// Base URL: empty string for same-origin API requests
+const baseURL = ''
+
+// Create axios instance with default config
+export const api = axios.create({
+  baseURL,
+  withCredentials: true, // Include cookies in cross-origin requests
+  headers: {
+    'Cache-Control': 'no-store', // Prevent caching
+  },
+})
+
+// ============================================================================
+// Request Deduplication
+// ============================================================================
+
+// Deduplicate concurrent GET requests to the same URL
+// Prevents multiple identical requests from being sent simultaneously
+const inFlightGet = new Map<string, Promise<unknown>>()
+const originalGet = api.get.bind(api)
+
+api.get = ((url: string, config = {}) => {
+  const disableDuplicate = (config as unknown as Record<string, unknown>)
+    ?.disableDuplicate
+  if (disableDuplicate) return originalGet(url, config)
+
+  const params = (config as unknown as Record<string, unknown>)?.params
+    ? JSON.stringify((config as unknown as Record<string, unknown>).params)
+    : '{}'
+  const key = `${url}?${params}`
+
+  // Return existing in-flight request if available
+  if (inFlightGet.has(key)) return inFlightGet.get(key)!
+
+  // Create new request and clean up after completion
+  const req = originalGet(url, config).finally(() => inFlightGet.delete(key))
+  inFlightGet.set(key, req)
+  return req
+}) as typeof api.get
+
+// ============================================================================
+// Response Interceptor
+// ============================================================================
+
+// Handle business logic errors and HTTP errors globally
+api.interceptors.response.use(
+  (response) => {
+    const skipBusiness = (response.config as unknown as Record<string, unknown>)
+      ?.skipBusinessError
+
+    // Unified business response format: { success, message, data }
+    if (
+      !skipBusiness &&
+      response &&
+      response.data &&
+      typeof response.data.success === 'boolean'
+    ) {
+      if (!response.data.success) {
+        // Show error toast for business failures
+        const msg = response.data.message || 'Request failed'
+        toast.error(msg)
+      }
+    }
+    return response
+  },
+  (error) => {
+    const skip = error?.config?.skipErrorHandler
+    if (!skip) {
+      const status = error?.response?.status
+
+      if (status === 401) {
+        // Unauthorized: clear auth state and show toast
+        toast.error(i18next.t('Session expired!'))
+        try {
+          useAuthStore.getState().auth.reset()
+        } catch {
+          /* empty */
+        }
+      } else {
+        // Other errors: show error message from response or default
+        const msg =
+          error?.response?.data?.message || error?.message || 'Request error'
+        toast.error(msg)
+      }
+    }
+    return Promise.reject(error)
+  }
+)
+
+// ============================================================================
+// Common Headers Utility
+// ============================================================================
+
+/**
+ * Get user ID from localStorage
+ */
+function getUserId(): string | null {
+  try {
+    if (typeof window !== 'undefined') {
+      return window.localStorage.getItem('uid')
+    }
+  } catch {
+    /* empty */
+  }
+  return null
+}
+
+/**
+ * Get common request headers (for both axios and SSE requests)
+ */
+export function getCommonHeaders(): Record<string, string> {
+  const headers: Record<string, string> = {
+    'Content-Type': 'application/json',
+  }
+
+  const uid = getUserId()
+  if (uid) {
+    headers['New-Api-User'] = uid
+  }
+
+  return headers
+}
+
+// ============================================================================
+// Request Interceptor
+// ============================================================================
+
+// Attach user ID header for all requests
+api.interceptors.request.use((config) => {
+  const uid = getUserId()
+  if (uid) {
+    // Custom header for user identification
+    ;(config.headers as Record<string, string>)['New-Api-User'] = uid
+  }
+  return config
+})
+
+// ============================================================================
+// Common API Functions
+// ============================================================================
+
+// ----------------------------------------------------------------------------
+// User APIs
+// ----------------------------------------------------------------------------
+
+// Get current user info
+export async function getSelf() {
+  const res = await api.get('/api/user/self', {
+    // Avoid global 401 toast during guards/preloads
+    skipErrorHandler: true,
+  } as Record<string, unknown>)
+  return res.data
+}
+
+// Get user available models
+export async function getUserModels(): Promise<{
+  success: boolean
+  message?: string
+  data?: string[]
+}> {
+  const res = await api.get('/api/user/models')
+  return res.data
+}
+
+// Get user groups with descriptions and ratios
+export async function getUserGroups(): Promise<{
+  success: boolean
+  message?: string
+  data?: Record<string, { desc: string; ratio: number }>
+}> {
+  const res = await api.get('/api/user/self/groups')
+  return res.data
+}
+
+// ----------------------------------------------------------------------------
+// System APIs
+// ----------------------------------------------------------------------------
+
+// Get system status
+export async function getStatus() {
+  const res = await api.get('/api/status')
+  return res.data?.data as Record<string, unknown>
+}
+
+// Get system notice
+export async function getNotice(): Promise<{
+  success: boolean
+  message?: string
+  data?: string
+}> {
+  const res = await api.get('/api/notice')
+  return res.data
+}
+
+// ----------------------------------------------------------------------------
+// 2FA Management APIs
+// ----------------------------------------------------------------------------
+
+// Get 2FA status
+export async function get2FAStatus() {
+  const res = await api.get('/api/user/2fa/status')
+  return res.data
+}
+
+// Setup 2FA
+export async function setup2FA() {
+  const res = await api.post('/api/user/2fa/setup')
+  return res.data
+}
+
+// Enable 2FA with verification code
+export async function enable2FA(code: string) {
+  const res = await api.post('/api/user/2fa/enable', { code })
+  return res.data
+}
+
+// Disable 2FA with verification code
+export async function disable2FA(code: string) {
+  const res = await api.post('/api/user/2fa/disable', { code })
+  return res.data
+}
+
+// Regenerate 2FA backup codes
+export async function regenerate2FABackupCodes(code: string) {
+  const res = await api.post('/api/user/2fa/backup_codes', { code })
+  return res.data
+}

web/default/src/lib/colors.ts

@@ -0,0 +1,141 @@
+export type SemanticColor =
+  | 'blue'
+  | 'green'
+  | 'cyan'
+  | 'purple'
+  | 'pink'
+  | 'red'
+  | 'orange'
+  | 'amber'
+  | 'yellow'
+  | 'lime'
+  | 'light-green'
+  | 'teal'
+  | 'light-blue'
+  | 'indigo'
+  | 'violet'
+  | 'grey'
+
+export const colorToBgClass: Record<SemanticColor, string> = {
+  blue: 'bg-blue-500',
+  green: 'bg-green-500',
+  cyan: 'bg-cyan-500',
+  purple: 'bg-purple-500',
+  pink: 'bg-pink-500',
+  red: 'bg-red-500',
+  orange: 'bg-orange-500',
+  amber: 'bg-amber-500',
+  yellow: 'bg-yellow-500',
+  lime: 'bg-lime-500',
+  'light-green': 'bg-green-400',
+  teal: 'bg-teal-500',
+  'light-blue': 'bg-sky-500',
+  indigo: 'bg-indigo-500',
+  violet: 'bg-violet-500',
+  grey: 'bg-gray-500',
+}
+
+export function getBgColorClass(color?: string): string {
+  if (!color) return colorToBgClass.blue
+  return (
+    (colorToBgClass as Record<string, string>)[color] || colorToBgClass.blue
+  )
+}
+
+/**
+ * Chart color palette - Modern gradient colors compatible with light/dark themes
+ * Uses HSL format for better theme adaptation
+ */
+export const CHART_COLORS = [
+  'hsl(217, 91%, 60%)', // blue
+  'hsl(142, 76%, 36%)', // green
+  'hsl(38, 92%, 50%)', // amber
+  'hsl(258, 90%, 66%)', // violet
+  'hsl(330, 81%, 60%)', // pink
+  'hsl(189, 94%, 43%)', // cyan
+  'hsl(25, 95%, 53%)', // orange
+  'hsl(239, 84%, 67%)', // indigo
+  'hsl(173, 80%, 40%)', // teal
+  'hsl(271, 91%, 65%)', // purple
+  'hsl(199, 89%, 48%)', // sky
+  'hsl(280, 65%, 60%)', // fuchsia
+] as const
+
+/**
+ * Get a chart color by index (cycles through the palette)
+ */
+export function getChartColor(index: number): string {
+  return CHART_COLORS[index % CHART_COLORS.length]
+}
+
+/**
+ * Announcement status types
+ */
+export type AnnouncementType =
+  | 'default'
+  | 'ongoing'
+  | 'success'
+  | 'warning'
+  | 'error'
+
+/**
+ * Announcement status color mapping
+ */
+export const ANNOUNCEMENT_TYPE_COLORS: Record<AnnouncementType, string> = {
+  default: 'bg-gray-500',
+  ongoing: 'bg-blue-500',
+  success: 'bg-green-500',
+  warning: 'bg-orange-500',
+  error: 'bg-red-500',
+}
+
+/**
+ * Get announcement status color class
+ */
+export function getAnnouncementColorClass(type?: string): string {
+  const validType = (type || 'default') as AnnouncementType
+  return ANNOUNCEMENT_TYPE_COLORS[validType] || ANNOUNCEMENT_TYPE_COLORS.default
+}
+
+/**
+ * Semantic colors for tags and badges
+ */
+const TAG_COLORS = [
+  'amber',
+  'blue',
+  'cyan',
+  'green',
+  'grey',
+  'indigo',
+  'light-blue',
+  'lime',
+  'orange',
+  'pink',
+  'purple',
+  'red',
+  'teal',
+  'violet',
+  'yellow',
+] as const
+
+/**
+ * Convert string to a stable semantic color
+ * Used for model tags, group badges, user avatars, etc.
+ * Same string always returns the same color
+ *
+ * @param str - Input string (model name, group name, username, etc.)
+ * @returns Semantic color name from TAG_COLORS
+ *
+ * @example
+ * stringToColor('gpt-4') // 'blue'
+ * stringToColor('claude-3') // 'purple'
+ * stringToColor('default') // 'green'
+ */
+export function stringToColor(str: string): SemanticColor {
+  let sum = 0
+  for (let i = 0; i < str.length; i++) {
+    sum += str.charCodeAt(i)
+  }
+  const index = sum % TAG_COLORS.length
+  return TAG_COLORS[index]
+}

web/default/src/lib/constants.ts

@@ -0,0 +1,14 @@
+/**
+ * Application-wide constants
+ */
+
+// System Configuration Defaults
+export const DEFAULT_SYSTEM_NAME = 'New API'
+export const DEFAULT_LOGO = '/logo.png'
+
+// LocalStorage Keys
+export const STORAGE_KEYS = {
+  SYSTEM_NAME: 'system_name',
+  LOGO: 'logo',
+  FOOTER_HTML: 'footer_html',
+} as const

web/default/src/lib/cookies.ts

@@ -0,0 +1,43 @@
+/**
+ * Cookie utility functions using manual document.cookie approach
+ * Replaces js-cookie dependency for better consistency
+ */
+
+const DEFAULT_MAX_AGE = 60 * 60 * 24 * 7 // 7 days
+
+/**
+ * Get a cookie value by name
+ */
+export function getCookie(name: string): string | undefined {
+  if (typeof document === 'undefined') return undefined
+
+  const value = `; ${document.cookie}`
+  const parts = value.split(`; ${name}=`)
+  if (parts.length === 2) {
+    const cookieValue = parts.pop()?.split(';').shift()
+    return cookieValue
+  }
+  return undefined
+}
+
+/**
+ * Set a cookie with name, value, and optional max age
+ */
+export function setCookie(
+  name: string,
+  value: string,
+  maxAge: number = DEFAULT_MAX_AGE
+): void {
+  if (typeof document === 'undefined') return
+
+  document.cookie = `${name}=${value}; path=/; max-age=${maxAge}`
+}
+
+/**
+ * Remove a cookie by setting its max age to 0
+ */
+export function removeCookie(name: string): void {
+  if (typeof document === 'undefined') return
+
+  document.cookie = `${name}=; path=/; max-age=0`
+}

web/default/src/lib/copy-to-clipboard.ts

@@ -0,0 +1,85 @@
+/**
+ * Fallback copy method using document.execCommand (works in HTTP)
+ */
+function fallbackCopyToClipboard(text: string): boolean {
+  const textArea = document.createElement('textarea')
+  textArea.value = text
+
+  // Make the textarea out of viewport
+  textArea.style.position = 'fixed'
+  textArea.style.left = '-999999px'
+  textArea.style.top = '-999999px'
+  textArea.style.opacity = '0'
+  textArea.setAttribute('readonly', '')
+
+  document.body.appendChild(textArea)
+
+  try {
+    // Select the text
+    textArea.focus()
+    textArea.select()
+
+    // For iOS devices
+    const range = document.createRange()
+    range.selectNodeContents(textArea)
+    const selection = window.getSelection()
+    if (selection) {
+      selection.removeAllRanges()
+      selection.addRange(range)
+    }
+    textArea.setSelectionRange(0, text.length)
+
+    // Execute copy command
+    const successful = document.execCommand('copy')
+    document.body.removeChild(textArea)
+    // Clear selection ranges for better UX
+    const selectionAfter = window.getSelection()
+    if (selectionAfter) {
+      selectionAfter.removeAllRanges()
+    }
+
+    return successful
+  } catch (err) {
+    // eslint-disable-next-line no-console
+    console.error('Fallback copy failed:', err)
+    document.body.removeChild(textArea)
+    return false
+  }
+}
+
+/**
+ * Copy text to clipboard with fallback support for HTTP environments
+ *
+ * @param text - The text to copy
+ * @returns Promise that resolves to true if successful, false otherwise
+ *
+ * @example
+ * ```ts
+ * const success = await copyToClipboard('Hello, World!')
+ * if (success) {
+ *   console.log('Copied successfully')
+ * }
+ * ```
+ */
+export async function copyToClipboard(text: string): Promise<boolean> {
+  // Guard for SSR / non-browser environments
+  if (typeof window === 'undefined' || typeof document === 'undefined') {
+    return false
+  }
+
+  // Try modern clipboard API first (HTTPS required)
+  if (navigator?.clipboard?.writeText) {
+    try {
+      await navigator.clipboard.writeText(text)
+      return true
+    } catch (error) {
+      // eslint-disable-next-line no-console
+      console.warn('Clipboard API failed, trying fallback method:', error)
+      // Try fallback method
+      return fallbackCopyToClipboard(text)
+    }
+  } else {
+    // Use fallback method directly
+    return fallbackCopyToClipboard(text)
+  }
+}

web/default/src/lib/currency.ts

@@ -0,0 +1,554 @@
+/**
+ * ============================================================================
+ * Currency Formatting Library
+ * ============================================================================
+ *
+ * This module provides currency formatting utilities that handle the conversion
+ * between system USD amounts, local currency, and token displays based on
+ * admin-configured settings.
+ *
+ * ## Key Concepts
+ *
+ * 1. **System USD**: Internal currency unit used throughout the system (e.g., 10 USD)
+ * 2. **Local Currency**: Admin-configured display currency (e.g., CNY, custom currency)
+ * 3. **Exchange Rate (usdExchangeRate)**: Conversion rate from USD to local currency
+ *    - Example: usdExchangeRate = 7 means 1 USD = 7 CNY
+ * 4. **Recharge Price (priceRatio)**: Cost in local currency to purchase 1 system USD
+ *    - Example: priceRatio = 5 means user pays 5 CNY to get 1 USD credit
+ * 5. **Tokens**: Alternative display unit (e.g., 500,000 tokens = 1 USD)
+ *
+ * ## When to Use Each Function
+ *
+ * - `formatCurrencyFromUSD()`: Use for quota/balance display (stored as USD, converted for display)
+ * - `formatBillingCurrencyFromUSD()`: Use for billing/pricing displays (never shows tokens)
+ * - `formatLocalCurrencyAmount()`: Use for payment amounts already in local currency
+ * - `formatQuotaWithCurrency()`: Use for raw quota values (converts to USD first)
+ *
+ * ## Example Scenario
+ *
+ * Admin Configuration:
+ * - quotaDisplayType: 'CNY'
+ * - usdExchangeRate: 7 (1 USD = 7 CNY)
+ * - priceRatio: 5 (5 CNY per 1 USD credit)
+ * - quotaPerUnit: 500000 (tokens per USD)
+ *
+ * User Flow:
+ * 1. Recharge option: 10 USD
+ *    - Display: formatCurrencyFromUSD(10) → "¥70"
+ * 2. Payment amount: 10 × 5 = 50 (already in CNY)
+ *    - Display: formatLocalCurrencyAmount(50) → "¥50"
+ * 3. User receives: 10 USD credit
+ *    - Balance display: formatCurrencyFromUSD(10) → "¥70"
+ *
+ * ## Quick Reference Guide
+ *
+ * | Scenario | Input Type | Function to Use | Why |
+ * |----------|-----------|-----------------|-----|
+ * | User balance display | USD (from DB) | `formatCurrencyFromUSD()` | Needs conversion to display currency |
+ * | Recharge option button | USD | `formatCurrencyFromUSD()` | Needs conversion to local currency |
+ * | Payment confirmation | Already local currency | `formatLocalCurrencyAmount()` | Already converted via priceRatio |
+ * | Billing history Amount | USD (from DB) | `formatCurrencyFromUSD()` | Historical USD needs conversion |
+ * | Billing history Payment | Local currency | `formatNumber()` | Just show number, no symbol |
+ * | Model pricing | USD | `formatBillingCurrencyFromUSD()` | Never show as tokens |
+ * | Raw quota from API | Tokens | `formatQuotaWithCurrency()` | Convert tokens → USD → display |
+ *
+ * ## Critical Rules
+ *
+ * 1. **Never double-convert**: If you multiply by exchangeRate, use formatLocalCurrencyAmount()
+ * 2. **Database USD values**: Always use formatCurrencyFromUSD() for amounts stored as USD
+ * 3. **Payment amounts**: Always use formatLocalCurrencyAmount() for priceRatio-calculated values
+ * 4. **Billing displays**: Use formatBillingCurrencyFromUSD() to avoid token display
+ * 5. **Effective exchange rate**: When quotaDisplayType is 'USD', use rate of 1 regardless of config
+ */
+import {
+  useSystemConfigStore,
+  DEFAULT_CURRENCY_CONFIG,
+  type CurrencyConfig,
+  type CurrencyDisplayType,
+} from '@/stores/system-config-store'
+
+export interface CurrencyFormatOptions {
+  /** Fraction digits to use when |value| >= 1 */
+  digitsLarge?: number
+  /** Fraction digits to use when |value| < 1 */
+  digitsSmall?: number
+  /** Whether to abbreviate thousands with k suffix */
+  abbreviate?: boolean
+  /** Minimal absolute value to display when rounding would produce zero */
+  minimumNonZero?: number
+}
+
+type DisplayMeta =
+  | {
+      kind: 'currency'
+      symbol: string
+      currencyCode: string
+      exchangeRate: number
+    }
+  | {
+      kind: 'custom'
+      symbol: string
+      exchangeRate: number
+    }
+  | {
+      kind: 'tokens'
+      /** Number of tokens per USD */
+      quotaPerUnit: number
+    }
+
+const DEFAULT_FORMAT_OPTIONS: Required<CurrencyFormatOptions> = {
+  digitsLarge: 2,
+  digitsSmall: 4,
+  abbreviate: true,
+  minimumNonZero: 0,
+}
+
+const DISPLAY_TYPE_VALUES = ['USD', 'CNY', 'TOKENS', 'CUSTOM'] as const
+type DisplayTypeLiteral = (typeof DISPLAY_TYPE_VALUES)[number]
+
+export function isCurrencyDisplayType(
+  value: unknown
+): value is CurrencyDisplayType {
+  return (
+    typeof value === 'string' &&
+    DISPLAY_TYPE_VALUES.includes(value as DisplayTypeLiteral)
+  )
+}
+
+export function parseCurrencyDisplayType(
+  value: unknown,
+  fallback: CurrencyDisplayType = 'USD'
+): CurrencyDisplayType {
+  return isCurrencyDisplayType(value) ? value : fallback
+}
+
+function getConfig(): CurrencyConfig {
+  const { config } = useSystemConfigStore.getState()
+  const currency = config?.currency ?? DEFAULT_CURRENCY_CONFIG
+  return {
+    ...DEFAULT_CURRENCY_CONFIG,
+    ...currency,
+    quotaPerUnit:
+      currency?.quotaPerUnit && currency.quotaPerUnit > 0
+        ? currency.quotaPerUnit
+        : DEFAULT_CURRENCY_CONFIG.quotaPerUnit,
+    usdExchangeRate:
+      currency?.usdExchangeRate && currency.usdExchangeRate > 0
+        ? currency.usdExchangeRate
+        : DEFAULT_CURRENCY_CONFIG.usdExchangeRate,
+    customCurrencyExchangeRate:
+      currency?.customCurrencyExchangeRate &&
+      currency.customCurrencyExchangeRate > 0
+        ? currency.customCurrencyExchangeRate
+        : DEFAULT_CURRENCY_CONFIG.customCurrencyExchangeRate,
+    customCurrencySymbol:
+      currency?.customCurrencySymbol?.trim() ||
+      DEFAULT_CURRENCY_CONFIG.customCurrencySymbol,
+  }
+}
+
+function getDisplayMeta(config: CurrencyConfig): DisplayMeta {
+  switch (config.quotaDisplayType) {
+    case 'CNY':
+      return {
+        kind: 'currency',
+        symbol: '¥',
+        currencyCode: 'CNY',
+        exchangeRate: config.usdExchangeRate,
+      }
+    case 'CUSTOM':
+      return {
+        kind: 'custom',
+        symbol: config.customCurrencySymbol,
+        exchangeRate: config.customCurrencyExchangeRate,
+      }
+    case 'TOKENS':
+      return {
+        kind: 'tokens',
+        quotaPerUnit: config.quotaPerUnit,
+      }
+    case 'USD':
+    default:
+      return {
+        kind: 'currency',
+        symbol: '$',
+        currencyCode: 'USD',
+        exchangeRate: 1,
+      }
+  }
+}
+
+function getBillingDisplayMeta(config: CurrencyConfig): DisplayMeta {
+  const meta = getDisplayMeta(config)
+  if (meta.kind === 'tokens') {
+    return {
+      kind: 'currency',
+      symbol: '$',
+      currencyCode: 'USD',
+      exchangeRate: 1,
+    }
+  }
+  return meta
+}
+
+function mergeOptions(
+  options?: CurrencyFormatOptions
+): Required<CurrencyFormatOptions> {
+  if (!options) return DEFAULT_FORMAT_OPTIONS
+  return {
+    digitsLarge: options.digitsLarge ?? DEFAULT_FORMAT_OPTIONS.digitsLarge,
+    digitsSmall: options.digitsSmall ?? DEFAULT_FORMAT_OPTIONS.digitsSmall,
+    abbreviate: options.abbreviate ?? DEFAULT_FORMAT_OPTIONS.abbreviate,
+    minimumNonZero:
+      options.minimumNonZero ?? DEFAULT_FORMAT_OPTIONS.minimumNonZero,
+  }
+}
+
+function removeTrailingZeros(str: string): string {
+  if (!str.includes('.')) return str
+  return str.replace(/(\.[0-9]*?)0+$/, '$1').replace(/\.$/, '')
+}
+
+function formatNumberWithSuffix(
+  value: number,
+  digitsLarge: number,
+  digitsSmall: number,
+  abbreviate: boolean
+): string {
+  const abs = Math.abs(value)
+  if (abbreviate && abs >= 1000) {
+    const result = value / 1000
+    return removeTrailingZeros(result.toFixed(1)) + 'k'
+  }
+
+  const digits = abs >= 1 ? digitsLarge : digitsSmall
+  return removeTrailingZeros(value.toFixed(digits))
+}
+
+function adjustForMinimum(
+  value: number,
+  digits: number,
+  minimumNonZero: number
+): number {
+  if (value === 0) return value
+
+  const threshold = minimumNonZero > 0 ? minimumNonZero : Math.pow(10, -digits)
+  const abs = Math.abs(value)
+  if (abs > 0 && abs < threshold) {
+    return value > 0 ? threshold : -threshold
+  }
+  return value
+}
+
+function formatCurrencyValue(
+  value: number,
+  options: Required<CurrencyFormatOptions>,
+  meta: DisplayMeta
+): string {
+  if (meta.kind === 'tokens') {
+    return formatNumberWithSuffix(
+      value,
+      options.digitsLarge,
+      options.digitsSmall,
+      options.abbreviate
+    )
+  }
+
+  const digits =
+    Math.abs(value) >= 1 ? options.digitsLarge : options.digitsSmall
+  const adjustedValue = adjustForMinimum(value, digits, options.minimumNonZero)
+
+  if (meta.kind === 'currency') {
+    const formatted = new Intl.NumberFormat(undefined, {
+      style: 'currency',
+      currency: meta.currencyCode,
+      minimumFractionDigits: 0,
+      maximumFractionDigits: digits,
+    }).format(adjustedValue)
+    return formatted
+  }
+
+  const decimal = new Intl.NumberFormat(undefined, {
+    minimumFractionDigits: 0,
+    maximumFractionDigits: digits,
+  }).format(adjustedValue)
+
+  return `${meta.symbol}${decimal}`
+}
+
+/**
+ * Get the current currency configuration and display metadata.
+ *
+ * @returns Object containing config and display metadata
+ *
+ * @internal
+ * This is primarily for internal use. Most consumers should use the
+ * higher-level formatting functions instead.
+ */
+export function getCurrencyDisplay() {
+  const config = getConfig()
+  const meta = getDisplayMeta(config)
+  return { config, meta }
+}
+
+/**
+ * Format a USD amount according to the admin-configured display settings.
+ *
+ * This is the PRIMARY function for displaying quota/balance/credit amounts
+ * that are stored in the system as USD values.
+ *
+ * @param amountUSD - Amount in system USD units (e.g., user balance, quota)
+ * @param options - Optional formatting configuration
+ * @returns Formatted string with currency symbol or token count
+ *
+ * @example
+ * // With quotaDisplayType: 'USD'
+ * formatCurrencyFromUSD(10) → "$10"
+ *
+ * @example
+ * // With quotaDisplayType: 'CNY', usdExchangeRate: 7
+ * formatCurrencyFromUSD(10) → "¥70"
+ *
+ * @example
+ * // With quotaDisplayType: 'TOKENS', quotaPerUnit: 500000
+ * formatCurrencyFromUSD(10) → "5,000,000"
+ *
+ * @example
+ * // With quotaDisplayType: 'CUSTOM', customCurrencySymbol: '€', customCurrencyExchangeRate: 0.9
+ * formatCurrencyFromUSD(10) → "€9"
+ *
+ * @remarks
+ * Use this function for:
+ * - User balance/quota display
+ * - Recharge option amounts (before exchange rate applied)
+ * - Transaction amounts in billing history
+ * - Any value stored in database as USD
+ *
+ * DO NOT use for:
+ * - Payment amounts already converted via priceRatio → use formatLocalCurrencyAmount()
+ * - Raw token values → use formatQuotaWithCurrency()
+ */
+export function formatCurrencyFromUSD(
+  amountUSD: number | null | undefined,
+  options?: CurrencyFormatOptions
+): string {
+  if (amountUSD == null || Number.isNaN(amountUSD)) return '-'
+
+  const { config, meta } = getCurrencyDisplay()
+  const merged = mergeOptions(options)
+
+  if (!config.displayInCurrency || meta.kind === 'tokens') {
+    const tokens = amountUSD * config.quotaPerUnit
+    return formatNumberWithSuffix(
+      tokens,
+      meta.kind === 'tokens' ? 0 : merged.digitsLarge,
+      merged.digitsSmall,
+      merged.abbreviate
+    )
+  }
+
+  const value =
+    meta.kind === 'currency'
+      ? amountUSD * meta.exchangeRate
+      : amountUSD * meta.exchangeRate
+
+  return formatCurrencyValue(value, merged, meta)
+}
+
+/**
+ * Format USD amounts for billing/payment contexts (never shows tokens).
+ *
+ * Similar to formatCurrencyFromUSD, but NEVER displays in token units.
+ * Always shows real currency values (USD, CNY, etc.) even when the system
+ * is configured to display quotas as tokens elsewhere.
+ *
+ * @param amountUSD - Amount in system USD units
+ * @param options - Optional formatting configuration
+ * @returns Formatted string with currency symbol (never tokens)
+ *
+ * @example
+ * // With quotaDisplayType: 'TOKENS' - still shows currency
+ * formatBillingCurrencyFromUSD(10) → "$10"  (not "5,000,000 tokens")
+ *
+ * @example
+ * // With quotaDisplayType: 'CNY', usdExchangeRate: 7
+ * formatBillingCurrencyFromUSD(10) → "¥70"
+ *
+ * @remarks
+ * Use this function for:
+ * - Model pricing displays
+ * - API usage costs
+ * - Billing/invoice amounts
+ * - Any monetary value where tokens don't make sense
+ *
+ * DO NOT use for:
+ * - User balance/quota → use formatCurrencyFromUSD()
+ * - Payment amounts already in local currency → use formatLocalCurrencyAmount()
+ */
+export function formatBillingCurrencyFromUSD(
+  amountUSD: number | null | undefined,
+  options?: CurrencyFormatOptions
+): string {
+  if (amountUSD == null || Number.isNaN(amountUSD)) return '-'
+
+  const { config } = getCurrencyDisplay()
+  const meta = getBillingDisplayMeta(config)
+  const merged = mergeOptions(options)
+  const value =
+    meta.kind === 'currency' || meta.kind === 'custom'
+      ? amountUSD * meta.exchangeRate
+      : amountUSD
+
+  return formatCurrencyValue(value, merged, meta)
+}
+
+/**
+ * Format raw quota values (token units) to display currency.
+ *
+ * Converts raw quota/token amounts to USD first, then formats according
+ * to display settings. Use when you have quota in token units (e.g., 5000000)
+ * and need to display it as currency (e.g., "$10").
+ *
+ * @param quota - Raw quota amount in token units (e.g., 5000000)
+ * @param options - Optional formatting configuration
+ * @returns Formatted string with currency symbol or token count
+ *
+ * @example
+ * // With quotaPerUnit: 500000, quotaDisplayType: 'USD'
+ * formatQuotaWithCurrency(5000000) → "$10"
+ *
+ * @example
+ * // With quotaPerUnit: 500000, quotaDisplayType: 'CNY', usdExchangeRate: 7
+ * formatQuotaWithCurrency(5000000) → "¥70"
+ *
+ * @remarks
+ * Use this function for:
+ * - Raw quota values from database (stored as tokens)
+ * - When you need to convert tokens → USD → display currency
+ *
+ * DO NOT use for:
+ * - Values already in USD → use formatCurrencyFromUSD()
+ * - Payment amounts → use formatLocalCurrencyAmount()
+ */
+export function formatQuotaWithCurrency(
+  quota: number | null | undefined,
+  options?: CurrencyFormatOptions
+): string {
+  if (quota == null || Number.isNaN(quota)) return '-'
+
+  const { config } = getCurrencyDisplay()
+  const amountUSD = quota / config.quotaPerUnit
+  return formatCurrencyFromUSD(amountUSD, options)
+}
+
+/**
+ * Get the current currency label for UI display.
+ *
+ * Returns a simple string label representing the current display currency.
+ * Useful for labels, tooltips, and UI text.
+ *
+ * @returns Currency label string (e.g., "USD", "CNY", "Tokens")
+ *
+ * @example
+ * getCurrencyLabel() → "USD"
+ * getCurrencyLabel() → "CNY"
+ * getCurrencyLabel() → "Tokens"
+ *
+ * @remarks
+ * Use this for:
+ * - Currency selector labels
+ * - Table column headers
+ * - Form field labels
+ */
+export function getCurrencyLabel(): string {
+  const { config, meta } = getCurrencyDisplay()
+
+  if (!config.displayInCurrency || meta.kind === 'tokens') {
+    return 'Tokens'
+  }
+
+  switch (config.quotaDisplayType) {
+    case 'CNY':
+      return 'CNY'
+    case 'CUSTOM':
+      return meta.kind === 'custom' ? meta.symbol : 'Custom'
+    case 'USD':
+    default:
+      return 'USD'
+  }
+}
+
+/**
+ * Check if currency display is enabled (not in token-only mode).
+ *
+ * @returns True if displaying in actual currency (USD/CNY/etc), false if tokens only
+ *
+ * @example
+ * // With quotaDisplayType: 'USD' or 'CNY'
+ * isCurrencyDisplayEnabled() → true
+ *
+ * // With quotaDisplayType: 'TOKENS'
+ * isCurrencyDisplayEnabled() → false
+ *
+ * @remarks
+ * Use this to conditionally show currency-specific UI elements
+ */
+export function isCurrencyDisplayEnabled(): boolean {
+  const { config, meta } = getCurrencyDisplay()
+  return config.displayInCurrency && meta.kind !== 'tokens'
+}
+
+/**
+ * Format an amount that is ALREADY in local currency.
+ *
+ * ⚠️ CRITICAL: This function does NOT apply exchange rate conversion.
+ * Only use this for values that have already been converted to local currency
+ * via priceRatio or other means.
+ *
+ * @param amount - Amount already in local currency units
+ * @param options - Optional formatting configuration
+ * @returns Formatted string with appropriate currency symbol
+ *
+ * @example
+ * // Payment amount already calculated: 10 USD × priceRatio(5) = 50 CNY
+ * // With quotaDisplayType: 'CNY'
+ * formatLocalCurrencyAmount(50) → "¥50"
+ * // NOT "¥350" (which would be 50 × 7 exchangeRate)
+ *
+ * @example
+ * // With quotaDisplayType: 'USD'
+ * formatLocalCurrencyAmount(10) → "$10"
+ *
+ * @remarks
+ * Use this function for:
+ * - Payment amounts calculated via priceRatio (amount × price)
+ * - Actual money charged to user's payment method
+ * - Values that are already in the target currency
+ *
+ * DO NOT use for:
+ * - USD values that need conversion → use formatCurrencyFromUSD()
+ * - Raw quota values → use formatQuotaWithCurrency()
+ *
+ * Common mistake:
+ * ```ts
+ * // ❌ WRONG - Double conversion
+ * const payment = usdAmount * exchangeRate
+ * formatLocalCurrencyAmount(payment) // Will apply exchange rate again!
+ *
+ * // ✅ CORRECT - Already in local currency
+ * const payment = usdAmount * priceRatio
+ * formatLocalCurrencyAmount(payment) // Just formats with symbol
+ * ```
+ */
+export function formatLocalCurrencyAmount(
+  amount: number | null | undefined,
+  options?: CurrencyFormatOptions
+): string {
+  if (amount == null || Number.isNaN(amount)) return '-'
+
+  const { config } = getCurrencyDisplay()
+  const meta = getBillingDisplayMeta(config)
+  const merged = mergeOptions(options)
+
+  return formatCurrencyValue(amount, merged, meta)
+}

web/default/src/lib/dayjs.ts

@@ -0,0 +1,6 @@
+import dayjs from 'dayjs'
+import relativeTime from 'dayjs/plugin/relativeTime'
+
+dayjs.extend(relativeTime)
+
+export default dayjs

web/default/src/lib/dom-utils.ts

@@ -0,0 +1,16 @@
+export function applyFaviconToDom(url: string) {
+  if (typeof document === 'undefined' || !url) return
+  try {
+    const next = new URL(url, window.location.href).href
+    const existing =
+      document.querySelectorAll<HTMLLinkElement>('link[rel~="icon"]')
+    if (existing.length === 1 && existing[0].href === next) return
+    const link = document.createElement('link')
+    link.rel = 'icon'
+    link.href = url
+    existing.forEach((l) => l.remove())
+    document.head.appendChild(link)
+  } catch {
+    // Ignore malformed URLs
+  }
+}

web/default/src/lib/format.ts

@@ -0,0 +1,219 @@
+import dayjs from '@/lib/dayjs'
+import {
+  formatCurrencyFromUSD,
+  formatQuotaWithCurrency,
+  getCurrencyDisplay,
+} from './currency'
+
+// ============================================================================
+// Number Formatting
+// ============================================================================
+
+export function formatNumber(value: number | null | undefined): string {
+  if (value == null || Number.isNaN(value as number)) return '-'
+  return Intl.NumberFormat(undefined, { maximumFractionDigits: 2 }).format(
+    value as number
+  )
+}
+
+export function formatCompactNumber(value: number | null | undefined): string {
+  if (value == null || Number.isNaN(value as number)) return '-'
+  return Intl.NumberFormat(undefined, {
+    notation: 'compact',
+    maximumFractionDigits: 1,
+  }).format(value as number)
+}
+
+export function formatPercent(value: number | null | undefined): string {
+  if (value == null || Number.isNaN(value as number)) return '-'
+  return Intl.NumberFormat(undefined, {
+    style: 'percent',
+    maximumFractionDigits: 2,
+  }).format((value as number) / 100)
+}
+
+export function formatCurrencyUSD(value: number | null | undefined): string {
+  return formatCurrencyFromUSD(value == null ? null : (value as number))
+}
+
+// ============================================================================
+// Quota Formatting (500,000 units = $1)
+// ============================================================================
+
+/**
+ * Format quota into the configured display amount.
+ * Quota is stored in units where `quotaPerUnit` equals 1 USD.
+ */
+export function formatQuota(quota: number): string {
+  return formatQuotaWithCurrency(quota, {
+    digitsLarge: 2,
+    digitsSmall: 4,
+    abbreviate: true,
+  })
+}
+
+/**
+ * Parse quota from the current display input back to quota units.
+ */
+export function parseQuotaFromDollars(amount: number): number {
+  if (!Number.isFinite(amount)) return 0
+
+  const { config, meta } = getCurrencyDisplay()
+
+  // Tokens-only or raw quota mode
+  if (!config.displayInCurrency || meta.kind === 'tokens') {
+    return Math.round(amount)
+  }
+
+  const exchangeRate =
+    meta.kind === 'currency' || meta.kind === 'custom' ? meta.exchangeRate : 1
+
+  const usdAmount = exchangeRate > 0 ? amount / exchangeRate : amount
+
+  return Math.round(usdAmount * config.quotaPerUnit)
+}
+
+/**
+ * Convert quota units to the configured display amount.
+ * Reverse of parseQuotaFromDollars.
+ */
+export function quotaUnitsToDollars(units: number): number {
+  const { config, meta } = getCurrencyDisplay()
+
+  if (!config.displayInCurrency || meta.kind === 'tokens') {
+    return units
+  }
+
+  const usdAmount = units / config.quotaPerUnit
+  const exchangeRate =
+    meta.kind === 'currency' || meta.kind === 'custom' ? meta.exchangeRate : 1
+
+  return usdAmount * exchangeRate
+}
+
+// ============================================================================
+// Timestamp Formatting
+// ============================================================================
+
+/**
+ * Format Unix timestamp (seconds) to YYYY-MM-DD HH:mm:ss
+ */
+export function formatTimestamp(timestamp: number): string {
+  if (timestamp === -1) {
+    return 'Never'
+  }
+  return formatTimestampToDate(timestamp)
+}
+
+/**
+ * Format timestamp to YYYY-MM-DD HH:mm:ss
+ * @param timestamp - Timestamp in seconds or milliseconds
+ * @param unit - Unit of the timestamp ('seconds' or 'milliseconds')
+ */
+export function formatTimestampToDate(
+  timestamp?: number,
+  unit: 'seconds' | 'milliseconds' = 'seconds'
+): string {
+  if (!timestamp || timestamp === -1 || timestamp === 0) {
+    return '-'
+  }
+  const ms = unit === 'seconds' ? timestamp * 1000 : timestamp
+  return dayjs(ms).format('YYYY-MM-DD HH:mm:ss')
+}
+
+/** Format a Date object to YYYY-MM-DD HH:mm:ss */
+export function formatDateTimeStr(date: Date): string {
+  return dayjs(date).format('YYYY-MM-DD HH:mm:ss')
+}
+
+/** Format a Date object to YYYY-MM-DD */
+export function formatDateStr(date: Date): string {
+  return dayjs(date).format('YYYY-MM-DD')
+}
+
+/** Format a Date object to HH:mm:ss */
+export function formatTimeStr(date: Date): string {
+  return dayjs(date).format('HH:mm:ss')
+}
+
+/**
+ * Format quota for usage logs with higher precision
+ * Uses 6 decimal places to show very small costs accurately
+ */
+export function formatLogQuota(quota: number): string {
+  return formatQuotaWithCurrency(quota, {
+    digitsLarge: 4,
+    digitsSmall: 6,
+    abbreviate: false,
+  })
+}
+
+/**
+ * Format tokens count with K/M suffixes
+ */
+export function formatTokens(tokens: number): string {
+  if (tokens === 0) return '-'
+  if (tokens < 1000) return tokens.toString()
+  if (tokens < 1000000) return `${(tokens / 1000).toFixed(1)}K`
+  return `${(tokens / 1000000).toFixed(2)}M`
+}
+
+/**
+ * Format use time in seconds with appropriate unit
+ */
+export function formatUseTime(seconds: number): string {
+  if (seconds < 1) return `${(seconds * 1000).toFixed(0)}ms`
+  if (seconds < 60) return `${seconds.toFixed(1)}s`
+  const minutes = Math.floor(seconds / 60)
+  const remainingSeconds = seconds % 60
+  return `${minutes}m ${remainingSeconds.toFixed(0)}s`
+}
+
+/**
+ * Format timestamp to date input value (YYYY-MM-DDTHH:mm)
+ */
+export function formatTimestampForInput(timestamp: number): string {
+  if (timestamp === -1) {
+    return ''
+  }
+  return dayjs(timestamp * 1000).format('YYYY-MM-DDTHH:mm')
+}
+
+/**
+ * Parse datetime-local input to Unix timestamp
+ */
+export function parseTimestampFromInput(value: string): number {
+  if (!value) {
+    return -1
+  }
+  const date = new Date(value)
+  return Math.floor(date.getTime() / 1000)
+}
+
+// ============================================================================
+// Color Generation
+// ============================================================================
+
+/**
+ * Generate a consistent color from a string
+ * Uses HSL for better color distribution
+ */
+export function stringToColor(str: string): string {
+  if (!str) return 'gray'
+
+  // Generate hash from string
+  let hash = 0
+  for (let i = 0; i < str.length; i++) {
+    hash = str.charCodeAt(i) + ((hash << 5) - hash)
+    hash = hash & hash // Convert to 32-bit integer
+  }
+
+  // Use hash to generate hue (0-360)
+  const hue = Math.abs(hash % 360)
+
+  // Use saturation and lightness that work well for tags
+  const saturation = 65 + (Math.abs(hash) % 10) // 65-75%
+  const lightness = 55 + (Math.abs(hash >> 8) % 10) // 55-65%
+
+  return `hsl(${hue}, ${saturation}%, ${lightness}%)`
+}

web/default/src/lib/handle-server-error.ts

@@ -0,0 +1,25 @@
+import { AxiosError } from 'axios'
+import i18next from 'i18next'
+import { toast } from 'sonner'
+
+export function handleServerError(error: unknown) {
+  // eslint-disable-next-line no-console
+  console.log(error)
+
+  let errMsg = i18next.t('Something went wrong!')
+
+  if (
+    error &&
+    typeof error === 'object' &&
+    'status' in error &&
+    Number(error.status) === 204
+  ) {
+    errMsg = i18next.t('Content not found.')
+  }
+
+  if (error instanceof AxiosError) {
+    errMsg = error.response?.data.title
+  }
+
+  toast.error(errMsg)
+}

web/default/src/lib/http-status-code-rules.ts

@@ -0,0 +1,118 @@
+export type StatusCodeRange = {
+  start: number
+  end: number
+}
+
+export type ParsedHttpStatusCodeRules = {
+  ok: boolean
+  ranges: StatusCodeRange[]
+  tokens: string[]
+  normalized: string
+  invalidTokens: string[]
+}
+
+export function parseHttpStatusCodeRules(
+  input: unknown
+): ParsedHttpStatusCodeRules {
+  const raw = (input ?? '').toString().trim()
+  if (raw.length === 0) {
+    return {
+      ok: true,
+      ranges: [],
+      tokens: [],
+      normalized: '',
+      invalidTokens: [],
+    }
+  }
+
+  const sanitized = raw.replace(/[，]/g, ',')
+  const segments = sanitized
+    .split(',')
+    .map((s) => s.trim())
+    .filter(Boolean)
+
+  const ranges: StatusCodeRange[] = []
+  const invalidTokens: string[] = []
+
+  for (const segment of segments) {
+    const parsed = parseToken(segment)
+    if (!parsed) {
+      invalidTokens.push(segment)
+    } else {
+      ranges.push(parsed)
+    }
+  }
+
+  if (invalidTokens.length > 0) {
+    return {
+      ok: false,
+      ranges: [],
+      tokens: [],
+      normalized: raw,
+      invalidTokens,
+    }
+  }
+
+  const merged = mergeRanges(ranges)
+  const tokens = merged.map((r) =>
+    r.start === r.end ? `${r.start}` : `${r.start}-${r.end}`
+  )
+  const normalized = tokens.join(',')
+
+  return {
+    ok: true,
+    ranges: merged,
+    tokens,
+    normalized,
+    invalidTokens: [],
+  }
+}
+
+function parseToken(token: string): StatusCodeRange | null {
+  const cleaned = token.trim().replace(/\s/g, '')
+  if (!cleaned) return null
+
+  const isValidCode = (code: number) =>
+    Number.isFinite(code) && code >= 100 && code <= 599
+
+  if (cleaned.includes('-')) {
+    const [a, b] = cleaned.split('-')
+    if (!isNumber(a) || !isNumber(b)) return null
+
+    const start = Number.parseInt(a, 10)
+    const end = Number.parseInt(b, 10)
+    if (!isValidCode(start) || !isValidCode(end) || start > end) return null
+
+    return { start, end }
+  }
+
+  if (!isNumber(cleaned)) return null
+  const code = Number.parseInt(cleaned, 10)
+  if (!isValidCode(code)) return null
+
+  return { start: code, end: code }
+}
+
+function isNumber(s: string) {
+  return typeof s === 'string' && /^\d+$/.test(s)
+}
+
+function mergeRanges(ranges: StatusCodeRange[]): StatusCodeRange[] {
+  if (ranges.length === 0) return []
+
+  const sorted = [...ranges].sort((a, b) =>
+    a.start !== b.start ? a.start - b.start : a.end - b.end
+  )
+
+  return sorted.reduce<StatusCodeRange[]>((merged, current) => {
+    const last = merged[merged.length - 1]
+
+    if (!last || current.start > last.end + 1) {
+      merged.push({ ...current })
+    } else {
+      last.end = Math.max(last.end, current.end)
+    }
+
+    return merged
+  }, [])
+}

web/default/src/lib/lobe-icon.tsx

@@ -0,0 +1,146 @@
+/**
+ * LobeHub Icon Loader
+ * Dynamically load and render icons from @lobehub/icons
+ *
+ * Supports:
+ * - Basic: "OpenAI", "OpenAI.Color"
+ * - Chained properties: "OpenAI.Avatar.type={'platform'}"
+ * - Size parameter: getLobeIcon("OpenAI", 20)
+ */
+import * as LobeIcons from '@lobehub/icons'
+
+/**
+ * Parse a property value from string to appropriate type
+ * @param raw - Raw string value
+ * @returns Parsed value (boolean, number, or string)
+ */
+function parseValue(raw: string | undefined | null): string | number | boolean {
+  if (raw == null) return true
+
+  let v = String(raw).trim()
+
+  // Remove curly braces
+  if (v.startsWith('{') && v.endsWith('}')) {
+    v = v.slice(1, -1).trim()
+  }
+
+  // Remove quotes
+  if (
+    (v.startsWith('"') && v.endsWith('"')) ||
+    (v.startsWith("'") && v.endsWith("'"))
+  ) {
+    return v.slice(1, -1)
+  }
+
+  // Boolean
+  if (v === 'true') return true
+  if (v === 'false') return false
+
+  // Number
+  if (/^-?\d+(?:\.\d+)?$/.test(v)) return Number(v)
+
+  // Return as string
+  return v
+}
+
+/**
+ * Get LobeHub icon component by name
+ * @param iconName - Icon name/description (e.g., "OpenAI", "OpenAI.Color", "Claude.Avatar")
+ * @param size - Icon size (default: 20)
+ * @returns Icon component or fallback
+ *
+ * @example
+ * getLobeIcon("OpenAI", 24)
+ * getLobeIcon("OpenAI.Color", 20)
+ * getLobeIcon("Claude.Avatar.type={'platform'}", 32)
+ */
+export function getLobeIcon(
+  iconName: string | undefined | null,
+  size: number = 20
+): React.ReactNode {
+  if (!iconName || typeof iconName !== 'string') {
+    return (
+      <div
+        className='bg-muted text-muted-foreground flex items-center justify-center rounded-full text-xs font-medium'
+        style={{ width: size, height: size }}
+      >
+        ?
+      </div>
+    )
+  }
+
+  const trimmedName = iconName.trim()
+  if (!trimmedName) {
+    return (
+      <div
+        className='bg-muted text-muted-foreground flex items-center justify-center rounded-full text-xs font-medium'
+        style={{ width: size, height: size }}
+      >
+        ?
+      </div>
+    )
+  }
+
+  // Parse component path and chained properties
+  const segments = trimmedName.split('.')
+  const baseKey = segments[0]
+  const BaseIcon = (LobeIcons as Record<string, unknown>)[baseKey] as
+    | Record<string, unknown>
+    | undefined
+
+  let IconComponent: React.ComponentType<Record<string, unknown>> | undefined
+  let propStartIndex: number
+
+  if (BaseIcon && segments.length > 1 && BaseIcon[segments[1]]) {
+    IconComponent = BaseIcon[segments[1]] as React.ComponentType<
+      Record<string, unknown>
+    >
+    propStartIndex = 2
+  } else {
+    IconComponent = (LobeIcons as Record<string, unknown>)[baseKey] as
+      | React.ComponentType<Record<string, unknown>>
+      | undefined
+    propStartIndex = segments.length > 1 && /^[A-Z]/.test(segments[1]) ? 2 : 1
+  }
+
+  // Fallback if icon not found
+  if (
+    !IconComponent ||
+    (typeof IconComponent !== 'function' && typeof IconComponent !== 'object')
+  ) {
+    const firstLetter = trimmedName.charAt(0).toUpperCase()
+    return (
+      <div
+        className='bg-muted text-muted-foreground flex items-center justify-center rounded-full text-xs font-medium'
+        style={{ width: size, height: size }}
+      >
+        {firstLetter}
+      </div>
+    )
+  }
+
+  // Parse chained properties (e.g., "type={'platform'}", "shape='square'")
+  const props: Record<string, string | number | boolean> = {}
+
+  for (let i = propStartIndex; i < segments.length; i++) {
+    const seg = segments[i]
+    if (!seg) continue
+
+    const eqIdx = seg.indexOf('=')
+    if (eqIdx === -1) {
+      props[seg.trim()] = true
+      continue
+    }
+
+    const key = seg.slice(0, eqIdx).trim()
+    const valRaw = seg.slice(eqIdx + 1).trim()
+    props[key] = parseValue(valRaw)
+  }
+
+  // Set size if not explicitly specified in the string
+  if (props.size == null && size != null) {
+    props.size = size
+  }
+
+  return <IconComponent {...props} />
+}

web/default/src/lib/motion.ts

@@ -0,0 +1,104 @@
+import type { Transition, Variants } from 'motion/react'
+
+const EASE_OUT_CUBIC = [0.33, 1, 0.68, 1] as const
+
+const DURATION = {
+  instant: 0,
+  fast: 0.15,
+  normal: 0.25,
+  slow: 0.35,
+} as const
+
+export const MOTION_TRANSITION: Record<string, Transition> = {
+  default: { duration: DURATION.normal, ease: EASE_OUT_CUBIC },
+  fast: { duration: DURATION.fast, ease: EASE_OUT_CUBIC },
+  slow: { duration: DURATION.slow, ease: EASE_OUT_CUBIC },
+  spring: { type: 'spring', damping: 20, stiffness: 300 },
+  none: { duration: DURATION.instant },
+}
+
+export const MOTION_VARIANTS = {
+  pageEnter: {
+    initial: { opacity: 0, y: 8, filter: 'blur(4px)' },
+    animate: { opacity: 1, y: 0, filter: 'blur(0px)' },
+    exit: { opacity: 0, y: -4, filter: 'blur(2px)' },
+  },
+  fadeIn: {
+    initial: { opacity: 0 },
+    animate: { opacity: 1 },
+    exit: { opacity: 0 },
+  },
+  scaleIn: {
+    initial: { opacity: 0, scale: 0.96 },
+    animate: { opacity: 1, scale: 1 },
+    exit: { opacity: 0, scale: 0.96 },
+  },
+  slideUp: {
+    initial: { opacity: 0, y: 16 },
+    animate: { opacity: 1, y: 0 },
+    exit: { opacity: 0, y: 16 },
+  },
+  slideDown: {
+    initial: { opacity: 0, y: -16 },
+    animate: { opacity: 1, y: 0 },
+    exit: { opacity: 0, y: -16 },
+  },
+  tableRow: {
+    initial: { opacity: 0, y: 4 },
+    animate: { opacity: 1, y: 0 },
+  },
+  cardItem: {
+    initial: { opacity: 0, y: 12, scale: 0.98 },
+    animate: { opacity: 1, y: 0, scale: 1 },
+  },
+  sidebarSlide: {
+    initial: { opacity: 0, x: -8 },
+    animate: { opacity: 1, x: 0 },
+    exit: { opacity: 0, x: -8 },
+  },
+} as const
+
+export const STAGGER_VARIANTS: Variants = {
+  initial: {},
+  animate: { transition: { staggerChildren: 0.04 } },
+}
+
+export const STAGGER_ITEM_VARIANTS: Variants = {
+  initial: { opacity: 0, y: 8 },
+  animate: { opacity: 1, y: 0, transition: MOTION_TRANSITION.default },
+}
+
+export const TABLE_STAGGER_VARIANTS: Variants = {
+  initial: {},
+  animate: { transition: { staggerChildren: 0.03 } },
+}
+
+export const TABLE_ROW_VARIANTS: Variants = {
+  initial: { opacity: 0, y: 4 },
+  animate: { opacity: 1, y: 0, transition: MOTION_TRANSITION.fast },
+}
+
+export const CARD_STAGGER_VARIANTS: Variants = {
+  initial: {},
+  animate: { transition: { staggerChildren: 0.05 } },
+}
+
+export const CARD_ITEM_VARIANTS: Variants = {
+  initial: { opacity: 0, y: 12, scale: 0.98 },
+  animate: {
+    opacity: 1,
+    y: 0,
+    scale: 1,
+    transition: MOTION_TRANSITION.default,
+  },
+}
+
+export const SIDEBAR_STAGGER_VARIANTS: Variants = {
+  initial: {},
+  animate: { transition: { staggerChildren: 0.03, delayChildren: 0.05 } },
+}
+
+export const SIDEBAR_ITEM_VARIANTS: Variants = {
+  initial: { opacity: 0, x: -8 },
+  animate: { opacity: 1, x: 0, transition: MOTION_TRANSITION.fast },
+}

web/default/src/lib/oauth.ts

@@ -0,0 +1,126 @@
+import { api } from './api'
+
+// ============================================================================
+// OAuth URL Builders
+// ============================================================================
+
+/**
+ * Build GitHub OAuth URL
+ */
+export function buildGitHubOAuthUrl(clientId: string, state: string): string {
+  return `https://github.com/login/oauth/authorize?client_id=${clientId}&state=${state}&scope=user:email`
+}
+
+/**
+ * Build Discord OAuth URL
+ */
+export function buildDiscordOAuthUrl(clientId: string, state: string): string {
+  const url = new URL('https://discord.com/oauth2/authorize')
+  url.searchParams.set('client_id', clientId)
+  url.searchParams.set(
+    'redirect_uri',
+    `${window.location.origin}/oauth/discord`
+  )
+  url.searchParams.set('response_type', 'code')
+  url.searchParams.set('scope', 'identify+openid')
+  url.searchParams.set('state', state)
+  return url.toString()
+}
+
+/**
+ * Build OIDC OAuth URL
+ */
+export function buildOIDCOAuthUrl(
+  authUrl: string,
+  clientId: string,
+  state: string
+): string {
+  const url = new URL(authUrl)
+  url.searchParams.set('client_id', clientId)
+  url.searchParams.set('redirect_uri', `${window.location.origin}/oauth/oidc`)
+  url.searchParams.set('response_type', 'code')
+  url.searchParams.set('scope', 'openid profile email')
+  url.searchParams.set('state', state)
+  return url.toString()
+}
+
+/**
+ * Build LinuxDO OAuth URL
+ */
+export function buildLinuxDOOAuthUrl(clientId: string, state: string): string {
+  return `https://connect.linux.do/oauth2/authorize?response_type=code&client_id=${clientId}&state=${state}`
+}
+
+// ============================================================================
+// OAuth Helper Functions
+// ============================================================================
+
+/**
+ * Get OAuth state token
+ * Includes affiliate code from localStorage if available
+ */
+export async function getOAuthState(): Promise<string | null> {
+  try {
+    let path = '/api/oauth/state'
+    const affCode = localStorage.getItem('aff')
+    if (affCode && affCode.length > 0) {
+      path += `?aff=${affCode}`
+    }
+    const res = await api.get(path)
+    if (res.data.success) {
+      return res.data.data
+    }
+    return null
+  } catch (error) {
+    // eslint-disable-next-line no-console
+    console.error('Failed to get OAuth state:', error)
+    return null
+  }
+}
+
+/**
+ * Handle GitHub OAuth binding/login
+ */
+export async function handleGitHubOAuth(clientId: string): Promise<void> {
+  const state = await getOAuthState()
+  if (!state) return
+
+  const url = buildGitHubOAuthUrl(clientId, state)
+  window.open(url, '_blank')
+}
+
+/**
+ * Handle Discord OAuth binding/login
+ */
+export async function handleDiscordOAuth(clientId: string): Promise<void> {
+  const state = await getOAuthState()
+  if (!state) return
+
+  const url = buildDiscordOAuthUrl(clientId, state)
+  window.open(url, '_blank')
+}
+
+/**
+ * Handle OIDC OAuth binding/login
+ */
+export async function handleOIDCOAuth(
+  authUrl: string,
+  clientId: string
+): Promise<void> {
+  const state = await getOAuthState()
+  if (!state) return
+
+  const url = buildOIDCOAuthUrl(authUrl, clientId, state)
+  window.open(url, '_blank')
+}
+
+/**
+ * Handle LinuxDO OAuth binding/login
+ */
+export async function handleLinuxDOOAuth(clientId: string): Promise<void> {
+  const state = await getOAuthState()
+  if (!state) return
+
+  const url = buildLinuxDOOAuthUrl(clientId, state)
+  window.open(url, '_blank')
+}

web/default/src/lib/passkey.ts

@@ -0,0 +1,271 @@
+/**
+ * Passkey helper utilities for WebAuthn credential handling.
+ *
+ * These helpers convert between ArrayBuffer and Base64URL encodings and
+ * normalise server-provided credential options into browser-compatible types.
+ */
+
+/* eslint-disable @typescript-eslint/no-explicit-any */
+
+/**
+ * Convert a base64url string to an ArrayBuffer.
+ */
+type NodeBufferCtor = {
+  from(input: string, encoding: string): { toString(encoding: string): string }
+}
+
+export function base64UrlToArrayBuffer(value?: string | null): ArrayBuffer {
+  if (!value) return new ArrayBuffer(0)
+
+  const padding = '='.repeat((4 - (value.length % 4)) % 4)
+  const base64 = (value + padding).replace(/-/g, '+').replace(/_/g, '/')
+
+  const globalRef = globalThis as typeof globalThis & {
+    Buffer?: NodeBufferCtor
+  }
+
+  const decode =
+    typeof globalRef.atob === 'function'
+      ? globalRef.atob.bind(globalRef)
+      : (input: string) => {
+          if (typeof globalRef.Buffer !== 'undefined') {
+            return globalRef.Buffer.from(input, 'base64').toString('binary')
+          }
+          throw new Error(
+            'Base64 decoding is not supported in this environment'
+          )
+        }
+
+  const binary = decode(base64)
+  const buffer = new ArrayBuffer(binary.length)
+  const bytes = new Uint8Array(buffer)
+
+  for (let i = 0; i < binary.length; i += 1) {
+    bytes[i] = binary.charCodeAt(i)
+  }
+
+  return buffer
+}
+
+/**
+ * Convert an ArrayBuffer to a base64url string.
+ */
+export function arrayBufferToBase64Url(
+  buffer?: ArrayBuffer | ArrayBufferLike | null
+): string {
+  if (!buffer) return ''
+
+  const globalRef = globalThis as typeof globalThis & {
+    Buffer?: NodeBufferCtor
+  }
+
+  const bytes = new Uint8Array(buffer)
+  let binary = ''
+  for (let i = 0; i < bytes.byteLength; i += 1) {
+    binary += String.fromCharCode(bytes[i])
+  }
+
+  const encode =
+    typeof globalRef.btoa === 'function'
+      ? globalRef.btoa.bind(globalRef)
+      : (input: string) => {
+          if (typeof globalRef.Buffer !== 'undefined') {
+            return globalRef.Buffer.from(input, 'binary').toString('base64')
+          }
+          throw new Error(
+            'Base64 encoding is not supported in this environment'
+          )
+        }
+
+  return encode(binary)
+    .replace(/\+/g, '-')
+    .replace(/\//g, '_')
+    .replace(/=+$/g, '')
+}
+
+/**
+ * Prepare credential creation options returned by the backend.
+ */
+export function prepareCredentialCreationOptions(
+  payload: any
+): PublicKeyCredentialCreationOptions {
+  const options =
+    payload?.publicKey ??
+    payload?.PublicKey ??
+    payload?.response ??
+    payload?.Response
+
+  if (!options) {
+    throw new Error(
+      'Unable to parse Passkey registration options from response'
+    )
+  }
+
+  const publicKey: PublicKeyCredentialCreationOptions & Record<string, any> = {
+    ...options,
+    challenge: base64UrlToArrayBuffer(options.challenge),
+    user: {
+      ...options.user,
+      id: base64UrlToArrayBuffer(options.user?.id),
+    },
+  }
+
+  if (Array.isArray(options.excludeCredentials)) {
+    publicKey.excludeCredentials = options.excludeCredentials.map(
+      (item: any) => ({
+        ...item,
+        id: base64UrlToArrayBuffer(item.id),
+      })
+    )
+  }
+
+  if (
+    Array.isArray(options.attestationFormats) &&
+    options.attestationFormats.length === 0
+  ) {
+    delete publicKey.attestationFormats
+  }
+
+  return publicKey
+}
+
+/**
+ * Prepare credential request options returned by the backend.
+ */
+export function prepareCredentialRequestOptions(
+  payload: any
+): PublicKeyCredentialRequestOptions {
+  const options =
+    payload?.publicKey ??
+    payload?.PublicKey ??
+    payload?.response ??
+    payload?.Response
+
+  if (!options) {
+    throw new Error('Unable to parse Passkey login options from response')
+  }
+
+  const publicKey: PublicKeyCredentialRequestOptions & Record<string, any> = {
+    ...options,
+    challenge: base64UrlToArrayBuffer(options.challenge),
+  }
+
+  if (Array.isArray(options.allowCredentials)) {
+    publicKey.allowCredentials = options.allowCredentials.map((item: any) => ({
+      ...item,
+      id: base64UrlToArrayBuffer(item.id),
+    }))
+  }
+
+  return publicKey
+}
+
+/**
+ * Build payload for registering a new credential.
+ */
+export function buildRegistrationResult(
+  credential: PublicKeyCredential | null
+): Record<string, any> | null {
+  if (!credential) return null
+
+  const response = credential.response as AuthenticatorAttestationResponse & {
+    getTransports?: () => string[]
+  }
+
+  const transports =
+    typeof response.getTransports === 'function'
+      ? response.getTransports()
+      : undefined
+
+  return {
+    id: credential.id,
+    rawId: arrayBufferToBase64Url(credential.rawId),
+    type: credential.type,
+    authenticatorAttachment: credential.authenticatorAttachment,
+    response: {
+      attestationObject: arrayBufferToBase64Url(response.attestationObject),
+      clientDataJSON: arrayBufferToBase64Url(response.clientDataJSON),
+      transports,
+    },
+    clientExtensionResults: credential.getClientExtensionResults?.() ?? {},
+  }
+}
+
+/**
+ * Build payload for verifying an existing credential.
+ */
+export function buildAssertionResult(
+  credential: PublicKeyCredential | null
+): Record<string, any> | null {
+  if (!credential) return null
+
+  const response = credential.response as AuthenticatorAssertionResponse
+
+  return {
+    id: credential.id,
+    rawId: arrayBufferToBase64Url(credential.rawId),
+    type: credential.type,
+    authenticatorAttachment: credential.authenticatorAttachment,
+    response: {
+      authenticatorData: arrayBufferToBase64Url(response.authenticatorData),
+      clientDataJSON: arrayBufferToBase64Url(response.clientDataJSON),
+      signature: arrayBufferToBase64Url(response.signature),
+      userHandle: response.userHandle
+        ? arrayBufferToBase64Url(response.userHandle)
+        : null,
+    },
+    clientExtensionResults: credential.getClientExtensionResults?.() ?? {},
+  }
+}
+
+/**
+ * Check if current environment supports Passkey/WebAuthn.
+ */
+export async function isPasskeySupported(): Promise<boolean> {
+  if (typeof window === 'undefined') return false
+  const { PublicKeyCredential } = window
+  if (!PublicKeyCredential) return false
+
+  if (
+    typeof PublicKeyCredential.isConditionalMediationAvailable === 'function'
+  ) {
+    try {
+      const available =
+        await PublicKeyCredential.isConditionalMediationAvailable()
+      if (available) return true
+    } catch {
+      // ignore
+    }
+  }
+
+  if (
+    typeof PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable ===
+    'function'
+  ) {
+    try {
+      return await PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable()
+    } catch {
+      return false
+    }
+  }
+
+  return true
+}
+
+/**
+ * Execute an async Passkey credential creation flow.
+ */
+export async function createCredential(
+  options: PublicKeyCredentialCreationOptions
+) {
+  return navigator.credentials.create({ publicKey: options })
+}
+
+/**
+ * Execute an async Passkey credential request flow.
+ */
+export async function getCredential(
+  options: PublicKeyCredentialRequestOptions
+) {
+  return navigator.credentials.get({ publicKey: options })
+}

web/default/src/lib/roles.ts

@@ -0,0 +1,27 @@
+import { t } from 'i18next'
+
+export const ROLE = {
+  GUEST: 0, // 后续如果需要用到这个角色那就再加，同语先留一下
+  USER: 1,
+  ADMIN: 10,
+  SUPER_ADMIN: 100,
+} as const
+
+export type RoleValue = (typeof ROLE)[keyof typeof ROLE]
+
+const DEFAULT_ROLE = ROLE.GUEST
+
+const ROLE_LABEL_KEYS: Record<RoleValue, string> = {
+  [ROLE.SUPER_ADMIN]: 'Super Admin',
+  [ROLE.ADMIN]: 'Admin',
+  [ROLE.USER]: 'User',
+  [ROLE.GUEST]: 'Guest',
+}
+
+export function getRoleLabelKey(role?: number): string {
+  return ROLE_LABEL_KEYS[role as RoleValue] ?? ROLE_LABEL_KEYS[DEFAULT_ROLE]
+}
+
+export function getRoleLabel(role?: number): string {
+  return t(getRoleLabelKey(role))
+}

web/default/src/lib/secure-verification.ts

@@ -0,0 +1,48 @@
+import type { AxiosError } from 'axios'
+
+export interface VerificationRequiredInfo {
+  code?: string
+  message: string
+  required: boolean
+}
+
+/**
+ * Determine whether an Axios error indicates secure verification is required.
+ */
+export function isVerificationRequiredError(
+  error: unknown
+): error is AxiosError {
+  if (!error || typeof error !== 'object') return false
+  const axiosError = error as AxiosError<{ code?: string }>
+  const status = axiosError.response?.status
+  if (status !== 403) return false
+
+  const code = axiosError.response?.data?.code
+  if (!code) return false
+
+  const verificationCodes = new Set([
+    'VERIFICATION_REQUIRED',
+    'VERIFICATION_EXPIRED',
+    'VERIFICATION_INVALID',
+  ])
+
+  return verificationCodes.has(code)
+}
+
+/**
+ * Extract verification requirement info from an Axios error.
+ */
+export function extractVerificationInfo(
+  error: unknown
+): VerificationRequiredInfo {
+  const axiosError = error as AxiosError<{ code?: string; message?: string }>
+  const code = axiosError.response?.data?.code
+  const message =
+    axiosError.response?.data?.message ?? 'Secure verification is required'
+
+  return {
+    code,
+    message,
+    required: true,
+  }
+}

web/default/src/lib/show-submitted-data.tsx

@@ -0,0 +1,15 @@
+import { toast } from 'sonner'
+
+export function showSubmittedData(
+  data: unknown,
+  title: string = 'You submitted the following values:'
+) {
+  toast.message(title, {
+    description: (
+      // w-[340px]
+      <pre className='mt-2 w-full overflow-x-auto rounded-md bg-slate-950 p-4'>
+        <code className='text-white'>{JSON.stringify(data, null, 2)}</code>
+      </pre>
+    ),
+  })
+}

web/default/src/lib/time.ts

@@ -0,0 +1,171 @@
+/**
+ * Time utility functions for consistent time handling across the application
+ */
+import dayjs from '@/lib/dayjs'
+
+/**
+ * Time granularity type
+ */
+export type TimeGranularity = 'hour' | 'day' | 'week'
+
+/**
+ * Convert Date object to Unix timestamp (seconds)
+ */
+export function dateToUnixTimestamp(date: Date): number {
+  return Math.floor(date.getTime() / 1000)
+}
+
+/**
+ * Get start of day for a Unix timestamp (seconds)
+ * Sets time to 00:00:00
+ */
+export function toStartOfDay(tsSec: number): number {
+  const d = new Date(tsSec * 1000)
+  d.setHours(0, 0, 0, 0)
+  return Math.floor(d.getTime() / 1000)
+}
+
+/**
+ * Get start of day for a Date object
+ * Returns new Date with time set to 00:00:00
+ */
+export function getStartOfDay(date: Date = new Date()): Date {
+  const d = new Date(date)
+  d.setHours(0, 0, 0, 0)
+  return d
+}
+
+/**
+ * Get end of day for a Date object
+ * Returns new Date with time set to 23:59:59.999
+ */
+export function getEndOfDay(date: Date = new Date()): Date {
+  const d = new Date(date)
+  d.setHours(23, 59, 59, 999)
+  return d
+}
+
+/**
+ * Calculate date range with start and end of day normalization
+ * @param days Number of days to go back
+ * @param fromDate Starting point (defaults to now)
+ * @returns Object with normalized start (00:00:00) and end (23:59:59) dates
+ */
+export function getNormalizedDateRange(
+  days: number,
+  fromDate: Date = new Date()
+): { start: Date; end: Date } {
+  const end = new Date(fromDate)
+  const start = new Date(fromDate)
+  start.setDate(end.getDate() - days)
+
+  return {
+    start: getStartOfDay(start),
+    end: getEndOfDay(end),
+  }
+}
+
+/**
+ * Compute time range as Unix timestamps (seconds)
+ * @param days Default number of days if no dates provided
+ * @param startDate Optional start date
+ * @param endDate Optional end date
+ * @param useStartOfDay Whether to normalize to start/end of day
+ * @returns Object with start_timestamp and end_timestamp in seconds
+ */
+export function computeTimeRange(
+  days: number,
+  startDate?: Date,
+  endDate?: Date,
+  useStartOfDay = false
+): { start_timestamp: number; end_timestamp: number } {
+  const now = Math.floor(Date.now() / 1000)
+
+  if (useStartOfDay) {
+    const defaultEnd = toStartOfDay(now)
+    const end = endDate
+      ? toStartOfDay(dateToUnixTimestamp(endDate))
+      : defaultEnd
+    const start = startDate
+      ? toStartOfDay(dateToUnixTimestamp(startDate))
+      : end - days * 24 * 3600
+
+    return {
+      start_timestamp: start,
+      end_timestamp: end + 24 * 3600 - 1, // End of day
+    }
+  }
+
+  // Normal mode without day normalization
+  // Add 1 hour buffer to end time (matches legacy frontend behavior)
+  // This ensures the current hour's data is fully included
+  const end = endDate ? dateToUnixTimestamp(endDate) : now + 3600
+  const start = startDate
+    ? dateToUnixTimestamp(startDate)
+    : end - days * 24 * 3600
+
+  return { start_timestamp: start, end_timestamp: end }
+}
+
+/**
+ * Format Unix timestamp (seconds) to YYYY-MM-DD
+ */
+export function formatDate(tsSec: number): string {
+  return dayjs(tsSec * 1000).format('YYYY-MM-DD')
+}
+
+/**
+ * Format Date object to YYYY-MM-DD HH:mm:ss
+ */
+export function formatDateTimeObject(date: Date): string {
+  return dayjs(date).format('YYYY-MM-DD HH:mm:ss')
+}
+
+/**
+ * Format timestamp for chart display based on time granularity
+ * @param timestamp Unix timestamp in seconds
+ * @param granularity Time granularity: 'hour', 'day', or 'week'
+ * @returns Formatted string suitable for chart axis
+ */
+export function formatChartTime(
+  timestamp: number,
+  granularity: TimeGranularity = 'day'
+): string {
+  const d = dayjs(timestamp * 1000)
+  let result = d.format('MM-DD')
+
+  if (granularity === 'hour') {
+    result += ` ${d.format('HH')}:00`
+  } else if (granularity === 'week') {
+    const weekEnd = d.add(6, 'day')
+    result += ` - ${weekEnd.format('MM-DD')}`
+  }
+
+  return result
+}
+
+/**
+ * Add time duration to a date
+ * @param months Number of months to add
+ * @param days Number of days to add
+ * @param hours Number of hours to add
+ * @param baseDate Base date to add time to (defaults to now)
+ * @returns New date with added time, or undefined if all parameters are 0
+ */
+export function addTimeToDate(
+  months: number,
+  days: number,
+  hours: number,
+  baseDate: Date = new Date()
+): Date | undefined {
+  if (months === 0 && days === 0 && hours === 0) {
+    return undefined
+  }
+
+  const result = new Date(baseDate)
+  result.setMonth(result.getMonth() + months)
+  result.setDate(result.getDate() + days)
+  result.setHours(result.getHours() + hours)
+
+  return result
+}

web/default/src/lib/utils.ts

@@ -0,0 +1,95 @@
+import { type ClassValue, clsx } from 'clsx'
+import { twMerge } from 'tailwind-merge'
+
+export function cn(...inputs: ClassValue[]) {
+  return twMerge(clsx(inputs))
+}
+
+export function sleep(ms: number = 1000) {
+  return new Promise((resolve) => setTimeout(resolve, ms))
+}
+
+/**
+ * 清理 CSS 变量名，替换特殊字符
+ * 用于将模型名称（如 gpt-3.5-turbo）转换为有效的 CSS 变量名（gpt-3-5-turbo）
+ * @param name - 原始名称
+ * @returns 清理后的 CSS 变量名
+ */
+export function sanitizeCssVariableName(name: string): string {
+  // 将点号、空格、斜杠替换为连字符
+  // 移除其他不允许在 CSS 变量名中的特殊字符
+  return name.replace(/[.\s/]/g, '-').replace(/[^\w-]/g, '')
+}
+
+/**
+ * Generates page numbers for pagination with ellipsis
+ * @param currentPage - Current page number (1-based)
+ * @param totalPages - Total number of pages
+ * @returns Array of page numbers and ellipsis strings
+ *
+ * Examples:
+ * - Small dataset (≤5 pages): [1, 2, 3, 4, 5]
+ * - Near beginning: [1, 2, 3, 4, '...', 10]
+ * - In middle: [1, '...', 4, 5, 6, '...', 10]
+ * - Near end: [1, '...', 7, 8, 9, 10]
+ */
+export function getPageNumbers(currentPage: number, totalPages: number) {
+  const maxVisiblePages = 5 // Maximum number of page buttons to show
+  const rangeWithDots = []
+
+  if (totalPages <= maxVisiblePages) {
+    // If total pages is 5 or less, show all pages
+    for (let i = 1; i <= totalPages; i++) {
+      rangeWithDots.push(i)
+    }
+  } else {
+    // Always show first page
+    rangeWithDots.push(1)
+
+    if (currentPage <= 3) {
+      // Near the beginning: [1] [2] [3] [4] ... [10]
+      for (let i = 2; i <= 4; i++) {
+        rangeWithDots.push(i)
+      }
+      rangeWithDots.push('...', totalPages)
+    } else if (currentPage >= totalPages - 2) {
+      // Near the end: [1] ... [7] [8] [9] [10]
+      rangeWithDots.push('...')
+      for (let i = totalPages - 3; i <= totalPages; i++) {
+        rangeWithDots.push(i)
+      }
+    } else {
+      // In the middle: [1] ... [4] [5] [6] ... [10]
+      rangeWithDots.push('...')
+      for (let i = currentPage - 1; i <= currentPage + 1; i++) {
+        rangeWithDots.push(i)
+      }
+      rangeWithDots.push('...', totalPages)
+    }
+  }
+
+  return rangeWithDots
+}
+
+/**
+ * Truncate text to a maximum length with ellipsis
+ */
+export function truncateText(text: string, maxLength: number): string {
+  if (!text || text.length <= maxLength) return text
+  return text.slice(0, maxLength) + '...'
+}
+
+/**
+ * Try to parse and pretty-print JSON, fallback to original text if invalid
+ * @param text - Text that might be JSON
+ * @returns Pretty-printed JSON or original text
+ */
+export function tryPrettyJson(text: string): string {
+  const raw = (text ?? '').toString().trim()
+  if (!raw) return ''
+  try {
+    return JSON.stringify(JSON.parse(raw), null, 2)
+  } catch {
+    return raw
+  }
+}

web/default/src/lib/vchart.ts

@@ -0,0 +1,4 @@
+export const VCHART_OPTION = {
+  // 与老前端保持一致（浏览器环境渲染优化）
+  mode: 'desktop-browser',
+} as const