release: v0.4.26 — quota sorting, Antigravity quota buckets, Command Code, video models

docs/internal-review/bundle-baseline.md

@@ -20,7 +20,7 @@ bun run build
 | `index`              |  396.29 kB | 121.04 kB | 多账号切换（AuthProvider vault + AppShell 账号菜单）进入 shell 入口；后续可再拆 account menu |
 | `index.css`          |  430.02 kB |  86.34 kB | 入口样式表；含 114 条自托管字体 @font-face 分片声明（Inter / Noto Sans SC / JetBrains Mono），字体文件本身按 unicode-range 懒加载不计入此行 |
 | `ConfigPage`         |  119.60 kB |  33.35 kB | 页面 chunk 低于预算                                                         |
-| `AuthFilesPage`      |  216.81 kB |  58.90 kB | 身份多档案与出站策略交互加入后仍低于页面 gzip 预算                          |
+| `AuthFilesPage`      |  234.90 kB |  64.36 kB | 与 dev 现状对齐（原记 58.90 kB 已落后约 5.5 kB）；仍低于 `< 80 kB gzip` 页面预算，余量约 15 kB |
 | `ProvidersPage`      |  121.98 kB |  30.85 kB | 已低于 `< 80 kB gzip` 页面预算                                              |
 | `MonitorPage`        |   24.33 kB |   6.80 kB | 已拆为 toolbar / state hook / dashboard sections                            |
 | `LogsPage`           |   22.15 kB |   6.51 kB | 已拆为 live logs / error logs / helpers                                     |
@@ -37,7 +37,7 @@ bun run build
 
 | 页面/模块         |                  当前体积 | 预算状态       | 最近治理结果                                                                                                    |
 | ----------------- | ------------------------: | -------------- | --------------------------------------------------------------------------------------------------------------- |
-| `AuthFilesPage`   | 216.81 kB / 58.90 kB gzip | 通过           | 新增 Codex 身份多档案与出站选择后仍低于页面 gzip 预算，后续继续关注 chunk 治理 |
+| `AuthFilesPage`   | 234.90 kB / 64.36 kB gzip | 通过           | 基线与 dev 现状对齐；仍低于页面 gzip 预算，余量约 15 kB，chunk 治理继续关注 |
 | `ConfigPage`      | 119.60 kB / 33.35 kB gzip | 通过           | 已拆出 runtime panel / visual payload editors，并复用 feature 侧 visual config hook |
 | `ProvidersPage`   | 121.98 kB / 30.85 kB gzip | 通过且低于预算 | OpenAI tab、usage summary、provider editor hooks 已完成拆分 |
 | `MonitorPage`     |  24.33 kB /  6.80 kB gzip | 通过且低于预算 | 拆出 `MonitorToolbarSection`、`MonitorDashboardSections`、`useMonitorDashboardState` |

e2e/video-generation-page.spec.ts

@@ -0,0 +1,134 @@
+import { expect, test, type Page } from "@playwright/test";
+
+/**
+ * Renders the video models page against mocked management APIs.
+ *
+ * Not marked @critical: the page's behaviour is covered by unit tests, and this
+ * spec exists so the layout — highlighted curl block, endpoint switch, spec
+ * tables — is exercised in a real browser rather than only in jsdom.
+ */
+
+const VIDEO_MODEL = {
+  id: "grok-imagine-video-1.5",
+  provider: "xai",
+  display_name: "Grok Imagine Video",
+  description: "Grok Imagine text-to-video and image-to-video generation.",
+  supports_image_to_video: true,
+  max_duration_seconds: 15,
+};
+
+const seedAuth = async (page: Page) => {
+  await page.addInitScript(() => {
+    sessionStorage.setItem(
+      "code-proxy-admin-auth",
+      JSON.stringify({
+        apiBase: "http://127.0.0.1:8317",
+        managementKey: "cps_test",
+        rememberPassword: false,
+        expiresAt: Date.now() + 60_000,
+      }),
+    );
+    localStorage.setItem(
+      "cli-proxy-language",
+      JSON.stringify({ language: "zh-CN", state: { language: "zh-CN" } }),
+    );
+  });
+};
+
+const mockApis = async (page: Page) => {
+  const tenant = {
+    id: "t-system",
+    slug: "system",
+    name: "System Administration",
+    type: "system",
+    status: "active",
+    effective_status: "active",
+    expires_at: null,
+    description: "",
+    version: 1,
+    created_at: "",
+    updated_at: "",
+  };
+  await page.route("**/v0/auth/me", (route) =>
+    route.fulfill({
+      status: 200,
+      contentType: "application/json",
+      body: JSON.stringify({
+        principal: {
+          kind: "user_session",
+          user: {
+            id: "u-admin",
+            tenant_id: "t-system",
+            username: "admin",
+            display_name: "Super Administrator",
+            status: "active",
+            must_change_password: false,
+            last_login_at: null,
+            role_ids: ["r-platform-admin"],
+            role_codes: ["platform_super_admin"],
+            version: 1,
+            created_at: "",
+            updated_at: "",
+          },
+          home_tenant: tenant,
+          effective_tenant: tenant,
+          roles: [],
+          permissions: ["system.config.read", "dashboard.read"],
+          platform_admin: true,
+        },
+      }),
+    }),
+  );
+  // Order matters: Playwright tries the most recently registered route first, so
+  // the catch-all has to be registered before the specific one it must not shadow.
+  await page.route("**/v0/management/**", (route) =>
+    route.fulfill({ status: 200, contentType: "application/json", body: "{}" }),
+  );
+  await page.route("**/v0/management/video-generation/models", (route) =>
+    route.fulfill({
+      status: 200,
+      contentType: "application/json",
+      body: JSON.stringify({ models: [VIDEO_MODEL] }),
+    }),
+  );
+};
+
+test("renders the video call docs with a highlighted snippet", async ({ page }) => {
+  await seedAuth(page);
+  await mockApis(page);
+  await page.goto("/#/models/video-generation");
+
+  await expect(page.getByRole("heading", { name: "视频模型" })).toBeVisible();
+
+  const codeBlock = page.locator("[data-code-block]").first();
+  await expect(codeBlock).toContainText("curl http://127.0.0.1:8317/v1/videos/generations");
+  await expect(codeBlock).toContainText("/v1/videos/$REQUEST_ID");
+
+  // Highlighting must produce coloured token spans, not one flat text node.
+  const tokenColours = await codeBlock.evaluate((element) => {
+    const spans = [...element.querySelectorAll("span")];
+    return new Set(spans.map((span) => getComputedStyle(span).color)).size;
+  });
+  expect(tokenColours).toBeGreaterThan(2);
+
+  await page.getByRole("tab", { name: "图生视频" }).click();
+  await expect(page.locator("[data-code-block]").first()).toContainText('"image": { "url"');
+
+  await expect(page.getByText("请求参数")).toBeVisible();
+  await expect(page.getByText("返回结构")).toBeVisible();
+});
+
+test("enables the test panel from the served model catalog", async ({ page }) => {
+  await seedAuth(page);
+  await mockApis(page);
+  await page.goto("/#/models/video-generation");
+
+  // The button stays disabled until the catalog answers, which is what made the
+  // panel unreachable when the models call was shadowed by a catch-all mock.
+  const testButton = page.getByRole("button", { name: "测试生成" });
+  await expect(testButton).toBeEnabled();
+
+  await testButton.click();
+  await expect(page.getByText("测试视频生成")).toBeVisible();
+  await expect(page.getByText(VIDEO_MODEL.id, { exact: false }).first()).toBeVisible();
+});

features/api-key-restrictions/useApiKeyPermissionOptions.tsx

@@ -132,6 +132,7 @@ export function useApiKeyPermissionOptions() {
         openCodeGoKeys,
         clineKeys,
         ollamaCloudKeys,
+        commandCodeKeys,
         vertexKeys,
         openaiProviders,
         authFiles,
@@ -142,6 +143,7 @@ export function useApiKeyPermissionOptions() {
         providersApi.getOpenCodeGoConfigs().catch(() => []),
         providersApi.getClineConfigs().catch(() => []),
         providersApi.getOllamaCloudConfigs().catch(() => []),
+        providersApi.getCommandCodeConfigs().catch(() => []),
         providersApi.getVertexConfigs().catch(() => []),
         providersApi.getOpenAIProviders().catch(() => []),
         authFilesApi.list().catch(() => ({ files: [] })),
@@ -173,6 +175,7 @@ export function useApiKeyPermissionOptions() {
       openCodeGoKeys.forEach((item) => push(item.name || "", "API", "opencode-go"));
       clineKeys.forEach((item) => push(item.name || "", "API", "cline"));
       ollamaCloudKeys.forEach((item) => push(item.name || "", "API", "ollama-cloud"));
+      commandCodeKeys.forEach((item) => push(item.name || "", "API", "commandcode"));
       vertexKeys.forEach((item) => push(item.name || "", "API", "vertex"));
       openaiProviders.forEach((item) => push(item.name || "", "API", "openai"));
       (authFiles.files || []).forEach((file) => {

features/model-availability/modelAvailability.ts

@@ -131,13 +131,15 @@ const PROVIDER_CHANNELS = [
   { key: "cline", load: () => providersApi.getClineConfigs() },
   { key: "opencode-go", load: () => providersApi.getOpenCodeGoConfigs() },
   { key: "ollama-cloud", load: () => providersApi.getOllamaCloudConfigs() },
+  { key: "commandcode", load: () => providersApi.getCommandCodeConfigs() },
   { key: "vertex", load: () => providersApi.getVertexConfigs() },
 ] as const;
 
 const MODEL_ACCESS_PROVIDER_KEYS = new Set([
   "cline",
   "opencode-go",
   "ollama-cloud",
+  "commandcode",
 ]);
 
 const emptyAvailability = (

features/model-tags/index.tsx

@@ -365,7 +365,10 @@ export function ModelTag({
 
   return (
     <span
-      title={title ?? id}
+      // No implicit title: it repeated the visible model id as a second, native
+      // tooltip stacked on top of the managed one. Callers that truncate the tag
+      // wrap it in OverflowTooltip, which only opens when the text is cut off.
+      title={title}
       className={cn(
         "inline-flex max-w-full items-center border font-mono font-semibold leading-none",
         sizeClasses.wrapper,