113 Commits

• feat(opencode): Phase 6 - Tauri command extensions for OpenCode

  - Add import_opencode_providers_from_live command to provider.rs
  - Register new command in lib.rs invoke_handler
  - Update commands/mcp.rs: include OpenCode in sync_other_side logic
  - Add McpService::import_from_opencode to import_mcp_from_apps
  - Implement MCP sync/remove for OpenCode in services/mcp.rs
    - sync_server_to_app_no_config now calls sync_single_server_to_opencode
    - remove_server_from_app now calls remove_server_from_opencode

  Jason · 2026-01-15 16:20:03 +08:00
  7997b2c7b3
• feat(opencode): complete Phase 5 - provider service layer

  Implement OpenCode-specific provider service logic with additive mode:
  - add(): Always write to live config (no is_current check needed)
  - update(): Always sync changes to live config
  - delete(): Remove from both DB and live config (no is_current check)
  
  New helper functions in live.rs:
  - write_live_snapshot(): Write provider to opencode.json provider section
  - remove_opencode_provider_from_live(): Remove provider from live config
  - import_opencode_providers_from_live(): Import existing providers from
    ~/.config/opencode/opencode.json into CC Switch database
  
  Key design: OpenCode uses additive mode where all providers coexist
  in the config file, unlike Claude/Codex/Gemini which use replacement
  mode with a single active provider.

  Jason · 2026-01-15 16:15:01 +08:00
  b8538b211d
• feat(opencode): Phase 1 - Backend data structure expansion for OpenCode support

  Add OpenCode as the 4th supported application with additive provider management:
  
  - Add OpenCode variant to AppType enum with all related match statements
  - Add enabled_opencode field to McpApps and SkillApps structures
  - Add opencode field to McpRoot and PromptRoot
  - Add database schema migration v3→v4 with enabled_opencode columns
  - Add settings.rs support for opencode_config_dir and current_provider_opencode
  - Create opencode_config.rs module for config file I/O operations
  - Update all services (proxy, mcp, skill, provider, stream_check) for OpenCode
  - Add OpenCode support to deeplink provider and MCP parsing
  - Update commands/config.rs for OpenCode config status and paths
  
  Key design decisions:
  - OpenCode uses additive mode (no is_current needed, no proxy support)
  - Config path: ~/.config/opencode/opencode.json
  - MCP format: stdio→local, sse/http→remote conversion planned
  - Stream check returns error (not yet implemented for OpenCode)

  Jason · 2026-01-15 15:54:29 +08:00
  5658d93924
• feat(usage): improve custom template system with variable hints and validation fixes (#628)

  * feat(usage): improve custom template with variables display and explicit type detection
  
  Combine two feature improvements:
  1. Display supported variables ({{baseUrl}}, {{apiKey}}) with actual values in custom template mode
  2. Add explicit templateType field for accurate template mode detection
  
  ## Changes
  
  ### Frontend
  - Display template variables with actual values extracted from provider settings
  - Add templateType field to UsageScript for explicit mode detection
  - Support template mode persistence across sessions
  
  ### Backend
  - Add template_type field to UsageScript struct
  - Improve validation logic based on explicit template type
  - Maintain backward compatibility with type inference
  
  ### I18n
  - Add "Supported Variables" section translation (zh/en/ja)
  
  ### Benefits
  - More accurate template mode detection (no more guessing)
  - Better user experience with variable hints
  - Clearer validation rules per template type
  
  * fix(usage): resolve custom template cache and validation issues
  
  Combine three bug fixes to make custom template mode work correctly:
  
  1. **Update cache after test**: Testing usage script successfully now updates the main list cache immediately
  2. **Fix same-origin check**: Custom template mode can now access different domains (SSRF protection still active)
  3. **Fix field naming**: Unified to use autoQueryInterval consistently between frontend and backend
  
  ## Problems Solved
  
  - Main provider list showing "Query failed" after successful test
  - Custom templates blocked by overly strict same-origin validation
  - Auto-query intervals not saved correctly due to inconsistent naming
  
  ## Changes
  
  ### Frontend (UsageScriptModal)
  - Import useQueryClient and update cache after successful test
  - Invalidate usage cache when saving script configuration
  - Use standardized autoQueryInterval field name
  
  ### Backend (usage_script.rs)
  - Allow custom template mode to bypass same-origin checks
  - Maintain SSRF protection for all modes
  
  ### Hooks (useProviderActions)
  - Invalidate usage query cache when saving script
  
  ## Impact
  
  Users can now use custom templates freely while security validations remain intact for general templates.
  
  * fix(usage): correct provider credential field names
  
  - Claude: support both ANTHROPIC_API_KEY and ANTHROPIC_AUTH_TOKEN
  - Gemini: use GEMINI_API_KEY instead of GOOGLE_GEMINI_API_KEY
  - Codex: use OPENAI_API_KEY and parse base_url from TOML config string
  
  Addresses review feedback from PR #628
  
  * style: format code
  
  ---------
  
  Co-authored-by: Jason <farion1231@gmail.com>

  杨永安 · 2026-01-14 15:42:05 +08:00
  07d022ba9f
• feat(stream-check): enhance health check with configurable prompt and CLI-compatible requests (#623)

  - Add configurable test prompt field to StreamCheckConfig
  - Implement Claude CLI-compatible request format with proper headers:
    - Authorization + x-api-key dual auth
    - anthropic-beta, anthropic-version headers
    - x-stainless-* SDK headers with dynamic OS/arch detection
    - URL with ?beta=true parameter
  - Implement Codex CLI-compatible Responses API format:
    - /v1/responses endpoint
    - input array format with reasoning effort support
    - codex_cli_rs user-agent and originator headers
  - Add dynamic OS name and CPU architecture detection
  - Internationalize error messages (Chinese -> English)
  - Add test prompt Textarea UI component with i18n support
  - Remove obsolete testPromptDesc translation key

  Dex Miller · 2026-01-13 11:36:19 +08:00
  f9d80b8dc3
• Feature/global proxy (#596)

  * refactor(proxy): simplify logging for better readability
  
  - Delete 17 verbose debug logs from handlers, streaming, and response_processor
  - Convert excessive INFO logs to DEBUG level for internal processing details
  - Add 2 critical INFO logs in forwarder.rs for failover scenarios:
    - Log when switching to next provider after failure
    - Log when all providers have been exhausted
  - Fix clippy uninlined_format_args warning
  
  This reduces log noise while maintaining visibility into key user-facing decisions.
  
  * fix: replace unsafe unwrap() calls with proper error handling
  
  - database/dao/mcp.rs: Use map_err for serde_json serialization
  - database/dao/providers.rs: Use map_err for settings_config and meta serialization
  - commands/misc.rs: Use expect() for compile-time regex pattern
  - services/prompt.rs: Use unwrap_or_default() for SystemTime
  - deeplink/provider.rs: Replace unwrap() with is_none_or pattern for Option checks
  
  Reduces potential panic points from 26 to 1 (static regex init, safe).
  
  * refactor(proxy): simplify verbose logging output
  
  - Remove response JSON full output logging in response_processor
  - Remove per-request INFO logs in provider_router (failover status, provider selection)
  - Change model mapping log from INFO to DEBUG
  - Change usage logging failure from INFO to WARN
  - Remove redundant debug logs for circuit breaker operations
  
  Reduces log noise significantly while preserving important warnings and errors.
  
  * feat(proxy): add structured log codes for i18n support
  
  Add error code system to proxy module logs for multi-language support:
  
  - CB-001~006: Circuit breaker state transitions and triggers
  - SRV-001~004: Proxy server lifecycle events
  - FWD-001~002: Request forwarding and failover
  - FO-001~005: Failover switch operations
  - USG-001~002: Usage logging errors
  
  Log format: [CODE] Chinese message
  Frontend/log tools can map codes to any language.
  
  New file: src/proxy/log_codes.rs - centralized code definitions
  
  * chore: bump version to 3.9.1
  
  * style: format code with prettier and rustfmt
  
  * fix(ui): allow number inputs to be fully cleared before saving
  
  - Convert numeric state to string type for controlled inputs
  - Use isNaN() check instead of || fallback to allow 0 values
  - Apply fix to ProxyPanel, CircuitBreakerConfigPanel,
    AutoFailoverConfigPanel, and ModelTestConfigPanel
  
  * feat(pricing): support @ separator in model name matching
  
  - Refactor model name cleaning into chained method calls
  - Add @ to - replacement (e.g., gpt-5.2-codex@low → gpt-5.2-codex-low)
  - Add test case for @ separator matching
  
  * feat(proxy): add global proxy settings support
  
  Add ability to configure a global HTTP/HTTPS proxy for all outbound
  requests including provider API calls, speed tests, and stream checks.
  
  * fix(proxy): improve validation and error handling in proxy config panels
  
  - Add StopTimeout/StopFailed error types for proper stop() error reporting
  - Replace silent clamp with validation-and-block in config panels
  - Add listenAddress format validation in ProxyPanel
  - Use log_codes constants instead of hardcoded strings
  - Use once_cell::Lazy for regex precompilation
  
  * fix(proxy): harden error handling and input validation
  
  - Handle RwLock poisoning in settings.rs with unwrap_or_else
  - Add fallback for dirs::home_dir() in config modules
  - Normalize localhost to 127.0.0.1 in ProxyPanel
  - Format IPv6 addresses with brackets for valid URLs
  - Strict port validation with pure digit regex
  - Treat NaN as validation failure in config panels
  - Log warning on cost_multiplier parse failure
  - Align timeoutSeconds range to [0, 300] across all panels
  
  * feat(proxy): add local proxy auto-scan and fix hot-reload
  
  - Add scan_local_proxies command to detect common proxy ports
  - Fix SkillService not using updated proxy after hot-reload
  - Move global proxy settings to advanced tab
  - Add error handling for scan failures
  
  * fix(proxy): allow localhost input in proxy address field
  
  * fix(proxy): restore request timeout and fix proxy hot-reload issues
  
  - Add URL scheme validation in build_client (http/https/socks5/socks5h)
  - Restore per-request timeout for speedtest, stream_check, usage_script, forwarder
  - Fix set_global_proxy_url to validate before persisting to DB
  - Mask proxy credentials in all log outputs
  - Fix forwarder hot-reload by fetching client on each request
  
  * style: format code with prettier
  
  * fix(proxy): improve global proxy stability and error handling
  
  - Fix RwLock silent failures with explicit error propagation
  - Handle init() duplicate calls gracefully with warning log
  - Align fallback client config with build_client settings
  - Make scan_local_proxies async to avoid UI blocking
  - Add mixed mode support for Clash 7890 port (http+socks5)
  - Use multiple test targets for better proxy connectivity test
  - Clear invalid proxy config on init failure
  - Restore timeout constraints in usage_script
  - Fix mask_url output for URLs without port
  - Add structured error codes [GP-001 to GP-009]
  
  * feat(proxy): add username/password authentication support
  
  - Add separate username and password input fields
  - Implement password visibility toggle with eye icon
  - Add clear button to reset all proxy fields
  - Auto-extract auth info from saved URL and merge on save
  - Update i18n translations (zh/en/ja)
  
  * fix(proxy): fix double encoding issue in proxy auth and add debug logs
  
  - Remove encodeURIComponent in mergeAuth() since URL object's
    username/password setters already do percent-encoding automatically
  - Add GP-010 debug log for database read operations
  - Add GP-011 debug log to track incoming URL info (length, has_auth)
  - Fix username.trim() in fallback branch for consistent behavior

  Dex Miller · 2026-01-13 10:55:53 +08:00
  8b92982112
• Feat/deeplink multi endpoints (#597)

  * feat(deeplink): support comma-separated multiple endpoints in URL
  
  Allow importing multiple API endpoints via single endpoint parameter.
  First URL becomes primary endpoint, rest are added as custom endpoints.
  
  * feat(deeplink): add usage query fields to deeplink generator
  
  Add form fields for usage query configuration in deeplink HTML generator:
  - usageEnabled, usageBaseUrl, usageApiKey
  - usageScript, usageAutoInterval
  - usageAccessToken, usageUserId
  
  * fix(deeplink): auto-infer homepage and improve multi-endpoint display
  
  - Auto-infer homepage from primary endpoint when not provided
  - Display multiple endpoints as list in import dialog (primary marked)
  - Update deeplink parser in deplink.html to show multi-endpoint info
  - Add test for homepage inference from endpoint
  - Minor log format fix in live.rs
  
  * fix(deeplink): use primary endpoint for usage script base_url
  
  - Fix usage_script.base_url getting comma-separated string when multiple endpoints
  - Add i18n support for primary endpoint label in DeepLinkImportDialog

  Dex Miller · 2026-01-12 15:57:45 +08:00
  8f7423f011
• Refactor/simplify proxy logs (#585)

  * refactor(proxy): simplify logging for better readability
  
  - Delete 17 verbose debug logs from handlers, streaming, and response_processor
  - Convert excessive INFO logs to DEBUG level for internal processing details
  - Add 2 critical INFO logs in forwarder.rs for failover scenarios:
    - Log when switching to next provider after failure
    - Log when all providers have been exhausted
  - Fix clippy uninlined_format_args warning
  
  This reduces log noise while maintaining visibility into key user-facing decisions.
  
  * fix: replace unsafe unwrap() calls with proper error handling
  
  - database/dao/mcp.rs: Use map_err for serde_json serialization
  - database/dao/providers.rs: Use map_err for settings_config and meta serialization
  - commands/misc.rs: Use expect() for compile-time regex pattern
  - services/prompt.rs: Use unwrap_or_default() for SystemTime
  - deeplink/provider.rs: Replace unwrap() with is_none_or pattern for Option checks
  
  Reduces potential panic points from 26 to 1 (static regex init, safe).
  
  * refactor(proxy): simplify verbose logging output
  
  - Remove response JSON full output logging in response_processor
  - Remove per-request INFO logs in provider_router (failover status, provider selection)
  - Change model mapping log from INFO to DEBUG
  - Change usage logging failure from INFO to WARN
  - Remove redundant debug logs for circuit breaker operations
  
  Reduces log noise significantly while preserving important warnings and errors.
  
  * feat(proxy): add structured log codes for i18n support
  
  Add error code system to proxy module logs for multi-language support:
  
  - CB-001~006: Circuit breaker state transitions and triggers
  - SRV-001~004: Proxy server lifecycle events
  - FWD-001~002: Request forwarding and failover
  - FO-001~005: Failover switch operations
  - USG-001~002: Usage logging errors
  
  Log format: [CODE] Chinese message
  Frontend/log tools can map codes to any language.
  
  New file: src/proxy/log_codes.rs - centralized code definitions
  
  * chore: bump version to 3.9.1
  
  * style: format code with prettier and rustfmt
  
  * fix(ui): allow number inputs to be fully cleared before saving
  
  - Convert numeric state to string type for controlled inputs
  - Use isNaN() check instead of || fallback to allow 0 values
  - Apply fix to ProxyPanel, CircuitBreakerConfigPanel,
    AutoFailoverConfigPanel, and ModelTestConfigPanel
  
  * feat(pricing): support @ separator in model name matching
  
  - Refactor model name cleaning into chained method calls
  - Add @ to - replacement (e.g., gpt-5.2-codex@low → gpt-5.2-codex-low)
  - Add test case for @ separator matching
  
  * fix(proxy): improve validation and error handling in proxy config panels
  
  - Add StopTimeout/StopFailed error types for proper stop() error reporting
  - Replace silent clamp with validation-and-block in config panels
  - Add listenAddress format validation in ProxyPanel
  - Use log_codes constants instead of hardcoded strings
  - Use once_cell::Lazy for regex precompilation
  
  * fix(proxy): harden error handling and input validation
  
  - Handle RwLock poisoning in settings.rs with unwrap_or_else
  - Add fallback for dirs::home_dir() in config modules
  - Normalize localhost to 127.0.0.1 in ProxyPanel
  - Format IPv6 addresses with brackets for valid URLs
  - Strict port validation with pure digit regex
  - Treat NaN as validation failure in config panels
  - Log warning on cost_multiplier parse failure
  - Align timeoutSeconds range to [0, 300] across all panels

  Dex Miller · 2026-01-11 20:50:54 +08:00
  6dd809701b
• fix(live): sync skills to app directories on config path change

  When users change app config directories (claudeConfigDir, codexConfigDir,
  geminiConfigDir), MCP servers were being synced to the new paths but Skills
  were not. This adds Skill synchronization to sync_current_to_live() to ensure
  installed Skills are also copied to the new app directories.

  Jason · 2026-01-11 16:39:50 +08:00
  76fa830688
• Fix/Resolve panic issues in proxy-related code (#560)

  * fix(proxy): change default port from 5000 to 15721
  
  Port 5000 conflicts with AirPlay Receiver on macOS 12+.
  Also adds error handling for proxy toggle and i18n placeholder updates.
  
  * fix(proxy): replace unwrap/expect with graceful error handling
  
  - Handle HTTP client initialization failure with no_proxy fallback
  - Fix potential panic on Unicode slicing in API key preview
  - Add proper error handling for response body builder
  - Handle edge case where SystemTime is before UNIX_EPOCH
  
  * fix(proxy): handle UTF-8 char boundary when truncating request body log
  
  Rust strings are UTF-8 encoded, slicing at a fixed byte index may cut
  in the middle of a multi-byte character (e.g., Chinese, emoji), causing
  a panic. Use is_char_boundary() to find the nearest safe cut point.
  
  * fix(proxy): improve robustness and prevent panics
  
  - Add reqwest socks feature to support SOCKS proxy environments
  - Fix UTF-8 safety in masked_key/masked_access_token (use chars() instead of byte slicing)
  - Fix UTF-8 boundary check in usage_script HTTP response truncation
  - Add defensive checks for JSON operations in proxy service
  - Remove verbose debug logs that could trigger panic-prone code paths

  Jason Young · 2026-01-09 13:09:19 +08:00
  a268127f1f
• Feat/proxy header improvements (#538)

  * fix(proxy): improve header handling for Claude API compatibility
  
  - Streamline header blacklist by removing overly aggressive filtering
    (browser-specific headers like sec-fetch-*, accept-language)
  - Ensure anthropic-beta header always includes 'claude-code-20250219'
    marker required by upstream services for request validation
  - Centralize anthropic-version header handling in forwarder to prevent
    duplicate headers across different auth strategies
  - Add ?beta=true query parameter to /v1/messages endpoint for
    compatibility with certain upstream services (e.g., DuckCoding)
  - Remove redundant anthropic-version from ClaudeAdapter auth headers
    as it's now managed exclusively by the forwarder
  
  This improves proxy reliability with various Claude API endpoints
  and third-party services that have specific header requirements.
  
  * style(services): use inline format arguments in format strings
  
  Apply Rust 1.58+ format string syntax across provider and skill
  services. This replaces format!("msg {}", var) with format!("msg {var}")
  for improved readability and consistency with modern Rust idioms.
  
  Changed files:
  - services/provider/mod.rs: 1 format string
  - services/skill.rs: 10 format strings (error messages, log statements)
  
  No functional changes, purely stylistic improvement.
  
  * fix(proxy): restrict Anthropic headers to Claude adapter only
  
  - Move anthropic-beta and anthropic-version header handling inside
    Claude-specific condition to avoid sending unnecessary headers
    to Codex and Gemini APIs
  - Update test cases to reflect ?beta=true query parameter behavior
  - Add edge case tests for non-messages endpoints and existing queries

  Dex Miller · 2026-01-08 11:04:42 +08:00
  847f1c5377
• fix(proxy): clean up model override env vars when switching providers in takeover mode

  When proxy takeover is enabled, switching providers no longer writes to
  the Live config. However, if model override fields (ANTHROPIC_MODEL,
  ANTHROPIC_REASONING_MODEL, etc.) remain in the Live config, Claude Code
  continues sending requests with the old model name, causing failures
  when the new provider doesn't support that model.
  
  This fix:
  - Removes model override env keys from Claude Live config during takeover
  - Adds cleanup when switching providers in takeover mode
  - Fixes has_mapping() to include reasoning_model in the check
  - Adds test coverage for reasoning-only model mapping scenarios

  Jason · 2026-01-04 16:09:37 +08:00
  8979d964d6
• fix(codex): remove entire model_providers table from common config extraction

  Previously only removed base_url from model_providers.* tables. Now removes
  the entire model_providers section since all its fields (name, base_url,
  wire_api, requires_openai_auth) are provider-specific configuration.
  
  MCP servers configuration remains preserved as it's provider-agnostic.

  Jason · 2026-01-04 12:27:22 +08:00
  2c35372ca0
• refactor(common-config): extract snippet from editor content instead of active provider

  - Change extraction source from current active provider to editor's live content
  - Add i18n support for JSON parse error messages via invalid_json_format_error()
  - Simplify API by removing unused providerId parameter
  - Update button labels and error messages in zh/en/ja locales

  Jason · 2026-01-04 12:27:22 +08:00
  63bb673bf2
• fix(codex): prevent extract_common_config from removing MCP servers' base_url

  - Replace regex patterns with toml_edit for precise field removal
  - Only remove top-level model/model_provider/base_url fields
  - Only remove base_url from [model_providers.*] tables
  - Add regression test to ensure [mcp_servers.*] base_url is preserved

  Jason · 2026-01-04 12:27:22 +08:00
  058f86aff3
• feat(common-config): add extract from current provider functionality

  - Add backend command to extract common config snippet from current provider
  - Automatically extract common config on first run after importing default provider
  - Auto-enable common config checkbox in new provider mode when snippet exists
  - Refactor Gemini common config to operate on .env instead of config.json
  - Add "Extract from Current" button to all three common config modals
  - Update i18n translations for new extraction feature

  Jason · 2026-01-04 12:27:22 +08:00
  188c94f2e3
• fix(skills): skip hidden directories when scanning for skills

  Filter out directories starting with '.' (e.g., .system) during skill
  scanning to avoid exposing internal system directories from Codex.

  Jason · 2026-01-03 11:42:10 +08:00
  0a9de282a3
• feat(mcp): add import button to import MCP servers from apps

  - Add import_mcp_from_apps command that reuses existing import logic
  - Add Import button in MCP panel header (consistent with Skills)
  - Fix import count to only return truly new servers (not already in DB)
  - Update translations for import success/no-import messages (zh/en/ja)

  Jason · 2026-01-03 10:04:46 +08:00
  86e802bd4b
• feat(skills): unified management architecture with SSOT and React Query

  - Introduce SSOT (Single Source of Truth) at ~/.cc-switch/skills/
  - Add three-app toggle support (Claude/Codex/Gemini) for each skill
  - Refactor frontend to use TanStack Query hooks instead of manual state
  - Add UnifiedSkillsPanel for managing installed skills with app toggles
  - Add useSkills.ts with declarative data fetching hooks
  - Extend skills.ts API with unified install/uninstall/toggle methods
  - Support importing unmanaged skills from app directories
  - Add v2→v3 database migration for new skills table structure

  Jason · 2026-01-02 22:04:02 +08:00
  ff03ca1e63
• Feat/usage improvements (#508)

  * i18n: update cache terminology across all languages
  
  - Change 'Cache Read' to 'Cache Hit' in all languages
  - Change 'Cache Write' to 'Cache Creation' in all languages
  - Update zh: 缓存读取 → 缓存命中, 缓存写入 → 缓存创建
  - Update en: Cache Read → Cache Hit, Cache Write → Cache Creation
  - Update ja: キャッシュ読取 → キャッシュヒット, キャッシュ書込 → キャッシュ作成
  
  Affected keys: cacheReadTokens, cacheCreationTokens, cacheReadCost,
  cacheWriteCost, cacheRead, cacheWrite
  
  * feat(usage): add cache metrics to trend chart
  
  - Add cache creation tokens visualization (orange line)
  - Add cache hit tokens visualization (purple line)
  - Add gradient definitions for new cache metrics
  - Include cache data in hourly aggregation
  - Display cache metrics alongside input/output tokens
  
  This provides better visibility into cache usage patterns over time.
  
  * fix(usage): fix timezone handling in datetime picker
  
  - Add timestampToLocalDatetime() to convert Unix timestamp to local datetime
  - Add localDatetimeToTimestamp() with validation for incomplete input
  - Fix issue where typing hours/minutes would jump to previous day
  - Validate datetime format completeness before conversion
  - Use local timezone instead of UTC for datetime-local input
  
  This resolves the issue where users couldn't fine-tune time selection
  and the input would jump unexpectedly when editing hours or minutes.
  
  * feat(usage): add auto-refresh for usage statistics
  
  - Add 30-second auto-refresh interval for all usage queries
  - Disable background refresh to save resources
  - Apply to: summary, trends, provider stats, model stats, request logs
  - Queries automatically update when tab is active
  - Pause refresh when user switches to another tab
  
  This keeps usage data fresh without manual refresh.
  
  * fix(proxy): improve usage logging and cache token parsing
  
  - Log requests even when usage parsing fails (with default values)
  - Add detailed debug logging for usage metrics
  - Support cache_read_input_tokens field in Codex responses
  - Fallback to input_tokens_details.cached_tokens if needed
  - Add test case for cached_tokens in input_tokens_details
  - Ensure all requests are tracked in database for analytics
  
  This fixes missing request logs when API responses lack usage data
  and improves cache token detection across different response formats.
  
  * style(rust): use inline format args in format! macros
  
  - Replace format!("...", var) with format!("...{var}")
  - Update universal provider ID formatting
  - Update error message formatting
  - Update config.toml generation in Codex provider
  
  Fixes clippy::uninlined_format_args warnings.
  
  * feat(proxy): enhance provider router logging
  
  - Add debug logs for failover queue provider count
  - Log circuit breaker state for each provider check
  - Add logs for missing current provider scenarios
  - Log when no current provider is configured
  - Use inline format args for better readability
  
  This improves debugging of provider selection and failover behavior.
  
  * feat(database): update model pricing data
  
  - Update Claude models to full version format (e.g. claude-opus-4-5-20251101)
  - Add GPT-5.2 series model pricing (10 models)
  - Add GPT-5.1 series model pricing (10 models)
  - Add GPT-5 series model pricing (12 models)
  - Add Gemini 3 series model pricing (2 models)
  - Update Gemini 2.5 series model ID format (use dot separator)
  - Unify display names by removing thinking level suffixes
  
  * fix(usage): correct Gemini output token calculation
  
  Fix Gemini API output token parsing to use totalTokenCount - promptTokenCount
  instead of candidatesTokenCount alone. This ensures thoughtsTokenCount is
  included in output statistics.
  
  - Update from_gemini_response to calculate output from total - input
  - Update from_gemini_stream_chunks with same logic for consistency
  - Fix from_codex_stream_events to use adjusted token calculation
  - Add test case for responses with thoughtsTokenCount
  - Update existing tests to match new calculation logic
  
  * fix(usage): correct cache token billing and add Codex format auto-detection
  
  - Avoid double-billing cache tokens by subtracting from input before calculation
  - Add smart Codex parser that auto-detects OpenAI vs Codex API format
  - Extract model name from Codex responses for accurate tracking
  
  * fix(proxy): improve takeover detection with live config check
  
  - Add live config takeover detection for hot-switch decision
  - Rebuild takeover when backup is missing or placeholder remains
  - Make detect_takeover_in_live_config_for_app public
  - Fix is_takeover_active to use actual takeover status
  
  * refactor(usage): simplify model pricing lookup by removing suffix fallback
  
  Replace complex suffix-stripping fallback with direct prefix/suffix cleanup.
  Model IDs are now cleaned by removing vendor prefix (before /) and colon
  suffix (after :), then matched exactly against pricing table.
  
  * feat(database): add Chinese AI model pricing data
  
  Add pricing for domestic AI models (CNY/1M tokens):
  - Doubao-Seed-Code (ByteDance)
  - DeepSeek V3/V3.1/V3.2
  - Kimi K2/K2-Thinking/K2-Turbo (Moonshot)
  - MiniMax M2/M2.1/M2.1-Lightning
  - GLM-4.6/4.7 (Zhipu)
  - Mimo V2 Flash (Xiaomi)
  
  Also fix test case to use correct model ID and remove invalid currency column.
  
  * refactor(proxy): improve header forwarding with blacklist approach
  
  Change from whitelist to blacklist mode for request header forwarding.
  Only skip headers that will be overridden (auth, host, content-length).
  This preserves client's original headers and improves compatibility.
  
  * fix(proxy): bypass timeout and retry configs when failover is disabled
  
  When auto_failover_enabled is false, timeout and retry configurations
  should not affect normal request flow. This change ensures:
  
  - create_forwarder: passes 0 for all timeout/retry params when failover
    is disabled, effectively bypassing these checks
  - streaming_timeout_config: returns 0 for both first_byte_timeout and
    idle_timeout when failover is disabled
  
  This prevents unnecessary timeout errors and retry attempts when users
  have explicitly disabled the failover feature.
  
  * fix(proxy): handle zero value input in failover config fields
  
  * refactor(proxy): remove retry logic and add enabled check for failover
  
  * refactor(proxy): distinguish circuit-open from no-provider errors
  
  * Align usage stats to sliding windows
  
  * feat(proxy): add body and header filtering for upstream requests
  
  * feat(proxy): enable transparent passthrough for headers
  
  - Passthrough anthropic-beta header as-is from client
  - Passthrough anthropic-version header from client
  - Passthrough client IP headers (x-forwarded-for, x-real-ip) by default
  - Filter private params (underscore-prefixed fields) from request body
  - No database changes required
  
  * feat(proxy): extract session ID from client requests for logging
  
  - Add SessionIdExtractor to parse session ID from Claude/Codex requests
  - Support extraction from metadata.user_id, headers, previous_response_id
  - Pass session_id through RequestContext to usage logger
  - Enable request correlation by session in proxy_request_logs

  Dex Miller · 2025-12-31 22:57:00 +08:00
  5376ea042b
• fix wrong skill repo branch (#505)

  Co-authored-by: yrs <yuruosheng@17paipai.cn>

  Kjasn · 2025-12-30 15:38:19 +08:00
  d0431b66ae
• fix: resolve test failures and clippy warnings

  - tests/App.test.tsx: remove outdated SettingsPage mock, use dynamic import
  - database/tests.rs: remove unused field, use struct init syntax
  - deeplink/tests.rs: use idiomatic assert!() instead of assert_eq!(true)
  - support.rs: add #[allow(dead_code)] for test utilities
  - usage_stats.rs: code formatting

  Jason · 2025-12-30 08:54:48 +08:00
  83a5597756
• fix: use local timezone and robust DST handling in usage stats (#500)

  - Change from UTC to local timezone for daily/hourly trends
  - Use SQLite 'localtime' modifier for date grouping
  - Replace single().unwrap() with earliest().unwrap_or_else()
    to handle DST transition edge cases gracefully

  Dex Miller · 2025-12-29 23:46:26 +08:00
  bcfc22514c
• fix: MCP同步时优雅处理无效的Codex config.toml (#461)

  * fix(mcp): 移除同步Codex Provider时的旧MCP同步调用
  
  sync_enabled_to_codex使用旧的config.mcp.codex结构，
  在v3.7.0统一结构中该字段为空，导致MCP配置被错误清除。
  MCP同步应通过McpService进行。
  
  Fixes #403
  
  * fix(mcp): 优雅处理Codex配置文件解析失败的情况
  
  当~/.codex/config.toml存在但内容无效时，MCP同步操作会失败，
  导致后续provider切换等操作也失败。
  
  修改sync_single_server_to_codex和remove_server_from_codex函数，
  在配置文件解析失败时进行容错处理而不是返回错误。
  
  Fixes #393

  lif · 2025-12-27 18:05:58 +08:00
  3a548152a9
• feat: add Universal Provider feature (#348)

  * feat: add Universal Provider feature
  
  - Add Universal Provider data structures and type definitions
  - Implement backend CRUD operations and sync functionality
  - Add frontend UI components (UniversalProviderPanel, Card, FormModal)
  - Add NewAPI icon and preset configuration
  - Support cross-app (Claude/Codex/Gemini) configuration sync
  - Add website URL field for providers
  - Implement real-time refresh via event notifications
  - Add i18n support (Chinese/English/Japanese)
  
  * feat: integrate universal provider presets into add provider dialog
  
  - Add universal provider presets (NewAPI, Custom Gateway) to preset selector
  - Show universal presets with Layers icon badge in preset selector
  - Open UniversalProviderFormModal when universal preset is clicked
  - Pass initialPreset to auto-fill form when opened from add dialog
  - Add i18n keys for addSuccess/addFailed messages
  - Keep separate universal provider panel for management
  
  * refactor: move universal provider management to add dialog
  
  - Remove Layers button from main navigation header
  - Add 'Manage' button next to universal provider presets
  - Open UniversalProviderPanel from within add provider dialog
  - Add i18n keys for 'manage' in all locales
  
  * style: display universal provider presets on separate line
  
  - Move universal provider section to a new row with border separator
  - Add label '统一供应商:' to clarify the section
  
  * style: unify universal provider label style with preset label
  
  - Use FormLabel component for consistent styling
  - Add background to 'Manage' button matching preset buttons
  - Update icon size and button padding for consistency
  
  * feat: add sync functionality and JSON preview for Universal Provider
  
  * fix: add missing in_failover_queue field to Provider structs
  
  After rebasing to main, the Provider struct gained a new
  `in_failover_queue` field. This fix adds the missing field
  to the three to_*_provider() methods in UniversalProvider.
  
  * refactor: redesign AddProviderDialog with tab-based layout
  
  - Add tabs to separate app-specific providers and universal providers
  - Move "Add Universal Provider" button from panel header to footer
  - Remove unused handleAdd callback and clean up imports
  - Update emptyHint i18n text to reference the footer button
  
  * fix: append /v1 suffix to Codex base_url in Universal Provider
  
  Codex uses OpenAI-compatible API which requires the /v1 endpoint suffix.
  The Universal Provider now automatically appends /v1 to base_url when
  generating Codex provider config if not already present.
  
  - Handle trailing slashes to avoid double slashes
  - Apply fix to both backend (to_codex_provider) and frontend preview
  
  * feat: auto-sync universal provider to apps on creation
  
  Previously, users had to manually click sync after adding a universal
  provider. Now it automatically syncs to Claude/Codex/Gemini on creation,
  providing a smoother user experience.
  
  ---------
  
  Co-authored-by: Jason <farion1231@gmail.com>

  Calcium-Ion · 2025-12-26 22:47:24 +08:00
  8fe5c1041a
• Feat/usage model extraction (#455)

  * feat(proxy): extract model name from API response for accurate usage tracking
  
  - Add model field extraction in TokenUsage parsing for Claude, OpenAI, and Codex
  - Prioritize response model over request model in usage logging
  - Update model extractors to use parsed usage.model first
  - Add tests for model extraction in stream and non-stream responses
  
  * feat(proxy): implement streaming timeout control with validation
  
  - Add first byte timeout (0 or 1-180s) for streaming requests
  - Add idle timeout (0 or 60-600s) for streaming data gaps
  - Add non-streaming timeout (0 or 60-1800s) for total request
  - Implement timeout logic in response processor
  - Add 1800s global timeout fallback when disabled
  - Add database schema migration for timeout fields
  - Add i18n translations for timeout settings
  
  * feat(proxy): add model mapping module for provider-based model substitution
  
  - Add model_mapper.rs with ModelMapping struct to extract model configs from Provider
  - Support ANTHROPIC_MODEL, ANTHROPIC_REASONING_MODEL, and default models for haiku/sonnet/opus
  - Implement thinking mode detection for reasoning model priority
  - Include comprehensive unit tests for all mapping scenarios
  
  * fix(proxy): bypass circuit breaker for single provider scenario
  
  When failover is disabled (single provider), circuit breaker open state
  would block all requests causing poor UX. Now bypasses circuit breaker
  check in this scenario. Also integrates model mapping into request flow.
  
  * feat(ui): add reasoning model field to Claude provider form
  
  Add ANTHROPIC_REASONING_MODEL configuration field for Claude providers,
  allowing users to specify a dedicated model for thinking/reasoning tasks.
  
  * feat(proxy): add openrouter_compat_mode for optional format conversion
  
  Add configurable OpenRouter compatibility mode that enables Anthropic to
  OpenAI format conversion. When enabled, rewrites endpoint to /v1/chat/completions
  and transforms request/response formats. Defaults to enabled for OpenRouter.
  
  * feat(ui): add OpenRouter compatibility mode toggle
  
  Add UI toggle for OpenRouter providers to enable/disable compatibility
  mode which uses OpenAI Chat Completions format with SSE conversion.
  
  * feat(stream-check): use provider-configured model for health checks
  
  Extract model from provider's settings_config (ANTHROPIC_MODEL, GEMINI_MODEL,
  or Codex config.toml) instead of always using default test models.
  
  * refactor(ui): remove timeout settings from AutoFailoverConfigPanel
  
  Remove streaming/non-streaming timeout configuration from failover panel
  as these settings have been moved to a dedicated location.
  
  * refactor(database): migrate proxy_config to per-app three-row structure
  
  Replace singleton proxy_config table with app_type primary key structure,
  allowing independent proxy settings for Claude, Codex, and Gemini.
  Add GlobalProxyConfig queries and per-app config management in DAO layer.
  
  * feat(proxy): add GlobalProxyConfig and AppProxyConfig types
  
  Add new type definitions for the refactored proxy configuration:
  - GlobalProxyConfig: shared settings (enabled, address, port, logging)
  - AppProxyConfig: per-app settings (failover, timeouts, circuit breaker)
  
  * refactor(proxy): update service layer for per-app config structure
  
  Adapt proxy service, handler context, and provider router to use
  the new per-app configuration model. Read enabled/timeout settings
  from proxy_config table instead of settings table.
  
  * feat(commands): add global and per-app proxy config commands
  
  Add new Tauri commands for the refactored proxy configuration:
  - get_global_proxy_config / update_global_proxy_config
  - get_proxy_config_for_app / update_proxy_config_for_app
  Update startup restore logic to read from proxy_config table.
  
  * feat(api): add frontend API and Query hooks for proxy config
  
  Add TypeScript wrappers and TanStack Query hooks for:
  - Global proxy config (address, port, logging)
  - Per-app proxy config (failover, timeouts, circuit breaker)
  - Proxy takeover status management
  
  * refactor(ui): redesign proxy panel with inline config controls
  
  Replace ProxySettingsDialog with inline controls in ProxyPanel.
  Add per-app takeover switches and global address/port settings.
  Simplify AutoFailoverConfigPanel by removing timeout settings.
  
  * feat(i18n): add proxy takeover translations and update types
  
  Add i18n strings for proxy takeover status in zh/en/ja.
  Update TypeScript types for GlobalProxyConfig and AppProxyConfig.
  
  * refactor(proxy): load circuit breaker config per-app instead of globally
  
  Extract app_type from router key and read circuit breaker settings
  from the corresponding proxy_config row for each application.

  YoVinchen · 2025-12-25 10:40:11 +08:00
  e6f18ba801
• Feat/auto failover switch (#440)

  * feat(failover): add auto-failover master switch with proxy integration
  
  - Add persistent auto_failover_enabled setting in database
  - Add get/set_auto_failover_enabled commands
  - Provider router respects master switch state
  - Proxy shutdown automatically disables failover
  - Enabling failover auto-starts proxy server
  - Optimistic updates for failover queue toggle
  
  * feat(proxy): persist proxy takeover state across app restarts
  
  - Add proxy_takeover_{app_type} settings for per-app state tracking
  - Restore proxy takeover state automatically on app startup
  - Preserve state on normal exit, clear on manual stop
  - Add stop_with_restore_keep_state method for graceful shutdown
  
  * fix(proxy): set takeover state for all apps in start_with_takeover
  
  * fix(windows): hide console window when checking CLI versions
  
  Add CREATE_NO_WINDOW flag to prevent command prompt from flashing
  when detecting claude/codex/gemini CLI versions on Windows.
  
  * refactor(failover): make auto-failover toggle per-app independent
  
  - Change setting key from 'auto_failover_enabled' to 'auto_failover_enabled_{app_type}'
  - Update provider_router to check per-app failover setting
  - When failover disabled, use current provider only; when enabled, use queue order
  - Add unit tests for failover enabled/disabled behavior
  
  * feat(failover): auto-switch to higher priority provider on recovery
  
  - After circuit breaker reset, check if recovered provider has higher priority
  - Automatically switch back if queue_order is lower (higher priority)
  - Stream health check now resets circuit breaker on success/degraded
  
  * chore: remove unused start_proxy_with_takeover command
  
  - Remove command registration from lib.rs
  - Add comment clarifying failover queue is preserved on proxy stop
  
  * feat(ui): integrate failover controls into provider cards
  
  - Add failover toggle button to provider card actions
  - Show priority badge (P1, P2, ...) for queued providers
  - Highlight active provider with green border in failover mode
  - Sync drag-drop order with failover queue
  - Move per-app failover toggle to FailoverQueueManager
  - Simplify SettingsPage failover section
  
  * test(providers): add mocks for failover hooks in ProviderList tests
  
  * refactor(failover): merge failover_queue table into providers
  
  - Add in_failover_queue field to providers table
  - Remove standalone failover_queue table and related indexes
  - Simplify queue ordering by reusing sort_index field
  - Remove reorder_failover_queue and set_failover_item_enabled commands
  - Update frontend to use simplified FailoverQueueItem type
  
  * fix(database): ensure in_failover_queue column exists for v2 databases
  
  Add column check in create_tables to handle existing v2 databases
  that were created before the failover queue refactor.
  
  * fix(ui): differentiate active provider border color by proxy mode
  
  - Use green border/gradient when proxy takeover is active
  - Use blue border/gradient in normal mode (no proxy)
  - Improves visual distinction between proxy and non-proxy states
  
  * fix(database): clear provider health record when removing from failover queue
  
  When a provider is removed from the failover queue, its health monitoring
  is no longer needed. This change ensures the health record is also deleted
  from the database to prevent stale data.
  
  * fix(failover): improve cache cleanup for provider health and circuit breaker
  
  - Use removeQueries instead of invalidateQueries when stopping proxy to
    completely clear health and circuit breaker caches
  - Clear provider health and circuit breaker caches when removing from
    failover queue
  - Refresh failover queue after drag-sort since queue order depends on
    sort_index
  - Only show health badge when provider is in failover queue
  
  * style: apply prettier formatting to App.tsx and ProviderList.tsx
  
  * fix(proxy): handle missing health records and clear health on proxy stop
  
  - Return default healthy state when provider health record not found
  - Add clear_provider_health_for_app to clear health for specific app
  - Clear app health records when stopping proxy takeover
  
  * fix(proxy): track actual provider used in forwarding for accurate logging
  
  Introduce ForwardResult and ForwardError structs to return the actual
  provider that handled the request. This ensures usage statistics and
  error logs reflect the correct provider after failover.

  YoVinchen · 2025-12-23 12:37:36 +08:00
  1586451862
• feat(failover): add auto-failover master switch with proxy integration (#427)

  * feat(failover): add auto-failover master switch with proxy integration
  
  - Add persistent auto_failover_enabled setting in database
  - Add get/set_auto_failover_enabled commands
  - Provider router respects master switch state
  - Proxy shutdown automatically disables failover
  - Enabling failover auto-starts proxy server
  - Optimistic updates for failover queue toggle
  
  * feat(proxy): persist proxy takeover state across app restarts
  
  - Add proxy_takeover_{app_type} settings for per-app state tracking
  - Restore proxy takeover state automatically on app startup
  - Preserve state on normal exit, clear on manual stop
  - Add stop_with_restore_keep_state method for graceful shutdown
  
  * fix(proxy): set takeover state for all apps in start_with_takeover

  YoVinchen · 2025-12-21 22:39:50 +08:00
  a1537807eb
• fix(proxy): respect existing token field when syncing Claude config

  - Add support for ANTHROPIC_API_KEY in Claude auth extraction
  - Only update existing token fields during sync, avoid adding fields
    that weren't originally configured by the user
  - Add tests for both scenarios

  Jason · 2025-12-20 11:04:07 +08:00
  8ecb41d25e
• fix(proxy): add fallback recovery for orphaned takeover state

  - Detect takeover residue in Live configs even when proxy is not running
  - Implement 3-tier fallback: backup → SSOT → cleanup placeholders
  - Only delete backup after successful restore to prevent data loss
  - Fix EditProviderDialog to check current app's takeover status only

  Jason · 2025-12-20 10:07:04 +08:00
  3e8f84481d
• refactor(proxy): remove global auto-start flag

  - Remove global proxy auto-start flag from config and UI.
  - Simplify per-app takeover start/stop and stop server when the last takeover is disabled.
  - Restore live takeover detection used for crash recovery.
  - Keep proxy_config.enabled column but always write 0 for compatibility.
  - Tests: not run (not requested).

  Jason · 2025-12-20 08:48:59 +08:00
  ba59483b33
• fix(mcp): improve upsert and import robustness

  - Remove server from live config when app is disabled during upsert
  - Merge enabled flags instead of overwriting when importing from multiple apps
  - Normalize Gemini MCP type field (url-only → sse, command → stdio)
  - Use atomic write for Codex config updates
  - Add tests for disable-removal, multi-app merge, and Gemini SSE import

  Jason · 2025-12-18 15:14:37 +08:00
  fa33330b3b
• feat(proxy): implement per-app takeover mode

  Replace global live takeover with granular per-app control:
  - Add start_proxy_server command (start without takeover)
  - Add get_proxy_takeover_status to query each app's state
  - Add set_proxy_takeover_for_app for individual app control
  - Use live backup existence as SSOT for takeover state
  - Refactor sync_live_to_provider to eliminate code duplication
  - Update ProxyToggle to show status per active app

  Jason · 2025-12-18 11:28:10 +08:00
  18207771ad
• fix(proxy): takeover Codex base_url via model_provider

  - Update Codex `model_providers.<model_provider>.base_url` to the proxy origin with `/v1`
  - Add route fallbacks for `/responses` and `/chat/completions` (plus double-`/v1` safeguard)
  - Add unit tests for the TOML base_url takeover logic

  Jason · 2025-12-17 22:53:32 +08:00
  0cd7d0756c
• fix(proxy): harden crash recovery with fallback detection

  - Set takeover flag before writing proxy config to fix race condition
    where crash during takeover left Live configs corrupted but flag unset
  - Add fallback detection by checking for placeholder tokens in Live
    configs when backups exist but flag is false (handles legacy/edge cases)
  - Improve error handling with proper rollback at each stage of startup
  - Clean up stale backups when Live configs are not in takeover state
    to avoid long-term storage of sensitive tokens

  Jason · 2025-12-17 11:03:49 +08:00
  bca0997afa
• fix(proxy): stabilize live takeover and provider editing

  - Skip live writes when takeover is active and proxy is running
  - Refresh live backups from provider edits during takeover
  - Sync live tokens to DB without clobbering real keys with placeholders
  - Avoid injecting extra placeholder keys into Claude live env
  - Reapply takeover after proxy listen address/port changes
  - In takeover mode, edit dialog uses DB config and keeps API key state in sync

  Jason · 2025-12-17 09:36:17 +08:00
  3d514c8250
• Feature/error request logging (#401)

  * feat(proxy): add error mapper for HTTP status code mapping
  
  - Add error_mapper.rs module to map ProxyError to HTTP status codes
  - Implement map_proxy_error_to_status() for error classification
  - Implement get_error_message() for user-friendly error messages
  - Support all error types: upstream, timeout, connection, provider failures
  - Include comprehensive unit tests for all mappings
  
  * feat(proxy): enhance error logging with context support
  
  - Add log_error_with_context() method for detailed error recording
  - Support streaming flag, session_id, and provider_type fields
  - Remove dead_code warning from log_error() method
  - Enable comprehensive error request tracking in database
  
  * feat(proxy): implement error capture and logging in all handlers
  
  - Capture and log all failed requests in handle_messages (Claude)
  - Capture and log all failed requests in handle_gemini (Gemini)
  - Capture and log all failed requests in handle_responses (Codex)
  - Capture and log all failed requests in handle_chat_completions (Codex)
  - Record error status codes, messages, and latency for all failures
  - Generate unique session_id for each request
  - Support both streaming and non-streaming error scenarios
  
  * style: fix clippy warnings and typescript errors
  
  - Add allow(dead_code) for CircuitBreaker::get_state (reserved for future)
  - Fix all uninlined format string warnings (27 instances)
  - Use inline format syntax for better readability
  - Fix unused import and parameter warnings in ProviderActions.tsx
  - Achieve zero warnings in both Rust and TypeScript
  
  * style: apply code formatting
  
  - Remove trailing whitespace in misc.rs
  - Add trailing comma in App.tsx
  - Format multi-line className in ProviderCard.tsx
  
  * feat(proxy): add settings button to proxy panel
  
  Add configuration buttons in both running and stopped states to
  provide easy access to proxy settings dialog.
  
  * fix(speedtest): skip client build for invalid inputs
  
  * chore(clippy): fix uninlined format args
  
  * Merge branch 'main' into feature/error-request-logging

  YoVinchen · 2025-12-16 21:02:08 +08:00
  ec20ff4d8c
• refactor(proxy): remove is_proxy_target in favor of failover_queue

  - Remove `is_proxy_target` field from Provider struct (Rust & TypeScript)
  - Remove related DAO methods: get_proxy_target_provider, set_proxy_target
  - Remove deprecated Tauri commands: get_proxy_targets, set_proxy_target
  - Add `is_available()` method to CircuitBreaker for availability checks
    without consuming HalfOpen probe permits (used in select_providers)
  - Keep `allow_request()` for actual request gating with permit tracking
  - Update stream_check to use failover_queue instead of is_proxy_target
  - Clean up commented-out reset circuit breaker button in ProviderActions
  - Remove unused useProxyTargets and useSetProxyTarget hooks

  Jason · 2025-12-16 15:45:15 +08:00
  e6654bd7f9
• fix(proxy): reset health badges when proxy stops

  Clear all provider_health records when stopping the proxy server,
  ensuring health badges reset to "healthy" state. This fixes the
  inconsistency where circuit breakers (in memory) would reset on
  stop but health badges (in database) would retain stale state.

  Jason · 2025-12-15 22:52:58 +08:00
  e081c7560c
• feat(proxy): sync UI when failover succeeds

  Add FailoverSwitchManager to handle provider switching after successful
  failover. This ensures the UI reflects the actual provider in use:
  
  - Create failover_switch.rs with deduplication and async switching logic
  - Pass AppHandle through ProxyService -> ProxyServer -> RequestForwarder
  - Update is_current in database when failover succeeds
  - Emit provider-switched event for frontend refresh
  - Update tray menu and live backup synchronously
  
  The switching runs asynchronously via tokio::spawn to avoid blocking
  API responses while still providing immediate UI feedback.

  Jason · 2025-12-15 17:12:36 +08:00
  9196d07925
• fix(usage): add fallback to provider config for usage credentials (#360)

  - Make usage script credential fields optional with provider config fallback
  - Optimize multi-plan card display: show plan count by default, expandable for details
  - Add hint text to explain credential fallback mechanism

  Sirhexs · 2025-12-15 17:09:46 +08:00
  1172209f49
• fix(proxy): resolve HalfOpen counter underflow and config field inconsistencies

  - Fix HalfOpen counter underflow: increment half_open_requests when
    transitioning from Open to HalfOpen to prevent underflow in
    record_success/record_failure
  
  - Fix Gemini config field names: unify to GEMINI_API_KEY and
    GOOGLE_GEMINI_BASE_URL (removed GOOGLE_API_KEY and GEMINI_API_BASE)
  
  - Fix Codex proxy takeover: write base_url to config.toml instead of
    OPENAI_BASE_URL in auth.json (Codex CLI reads from config.toml)

  Jason · 2025-12-14 20:38:04 +08:00
  bfe9bb6a0c
• fix(proxy): resolve circuit breaker state persistence and HalfOpen deadlock

  This commit addresses several critical issues in the failover system:
  
  **Circuit breaker state persistence (previous fix)**
  - Promote ProviderRouter to ProxyState for cross-request state sharing
  - Remove redundant router.rs module
  - Fix 429 errors to be retryable (rate limiting should try other providers)
  
  **Hot-update circuit breaker config**
  - Add update_circuit_breaker_configs() to ProxyServer and ProxyService
  - Connect update_circuit_breaker_config command to running circuit breakers
  - Add reset_provider_circuit_breaker() for manual breaker reset
  
  **Fix HalfOpen deadlock bug**
  - Change half_open_requests from cumulative count to in-flight count
  - Release quota in record_success()/record_failure() when in HalfOpen state
  - Prevents permanent deadlock when success_threshold > 1
  
  **Fix duplicate select_providers() call**
  - Store providers list in RequestContext, pass to forward_with_retry()
  - Avoid consuming HalfOpen quota twice per request
  - Single call to select_providers() per request lifecycle
  
  **Add per-provider retry with exponential backoff**
  - Implement forward_with_provider_retry() with configurable max_retries
  - Backoff delays: 100ms, 200ms, 400ms, etc.

  Jason · 2025-12-13 22:47:49 +08:00
  5a5ca2a989
• fix(proxy): auto-recover live config after abnormal exit

  When the app crashes or is force-killed while proxy mode is active,
  the live config files remain pointing to the dead proxy server with
  placeholder tokens, causing CLI tools to fail.
  
  This change adds startup detection:
  - Check `live_takeover_active` flag on app launch
  - If flag is true but proxy is not running → abnormal exit detected
  - Automatically restore live configs from database backup
  - Clear takeover flag and delete backups
  
  The recovery runs before auto-start, ensuring correct sequence even
  when proxy auto-start is enabled.

  Jason · 2025-12-12 10:43:01 +08:00
  c42a0dccaf
• fix(proxy): update live backup when hot-switching provider in proxy mode

  When proxy is active, switching providers only updated the database flags
  but not the live backup. This caused the wrong provider config to be
  restored when stopping the proxy.
  
  Added `update_live_backup_from_provider()` method to ProxyService that
  generates backup from provider's settings_config instead of reading from
  live files (which are already taken over by proxy).

  Jason · 2025-12-11 21:14:22 +08:00
  1926af4988
• Feat/provider icon color (#385)

  * feat(ui): add color prop support to ProviderIcon component
  
  * feat(health): add stream check core functionality
  
  Add new stream-based health check module to replace model_test:
  - Add stream_check command layer with single and batch provider checks
  - Add stream_check DAO layer for config and log persistence
  - Add stream_check service layer with retry mechanism and health status evaluation
  - Add frontend HealthStatusIndicator component
  - Add frontend useStreamCheck hook
  
  This provides more comprehensive health checking capabilities.
  
  * refactor(health): replace model_test with stream_check
  
  Replace model_test module with stream_check across the codebase:
  - Remove model_test command and service modules
  - Update command registry in lib.rs to use stream_check commands
  - Update module exports in commands/mod.rs and services/mod.rs
  - Remove frontend useModelTest hook
  - Update stream_check command implementation
  
  This refactoring provides clearer naming and better separation of concerns.
  
  * refactor(db): clean up unused database tables and optimize schema
  
  Remove deprecated and unused database tables:
  - Remove proxy_usage table (replaced by proxy_request_logs)
  - Remove usage_daily_stats table (aggregation done on-the-fly)
  - Rename model_test_logs to stream_check_logs with updated schema
  - Remove related DAO methods for proxy_usage
  - Update usage_stats service to use proxy_request_logs only
  - Refactor usage_script to work with new schema
  
  This simplifies the database schema and removes redundant data storage.
  
  * refactor(ui): update frontend components for stream check
  
  Update frontend components to use stream check API:
  - Refactor ModelTestConfigPanel to use stream check config
  - Update API layer to use stream_check commands
  - Add HealthStatus type and StreamCheckResult interface
  - Update ProviderList to use new health check integration
  - Update AutoFailoverConfigPanel with stream check references
  - Improve UI layout and configuration options
  
  This completes the frontend migration from model_test to stream_check.
  
  * feat(health): add configurable test models and reasoning effort support
  
  Enhance stream check service with configurable test models:
  - Add claude_model, codex_model, gemini_model to StreamCheckConfig
  - Support reasoning effort syntax (model@level or model#level)
  - Parse and apply reasoning_effort for OpenAI-compatible models
  - Remove hardcoded model names from check functions
  - Add unit tests for model parsing logic
  - Remove obsolete model_test source files
  
  This allows users to customize which models are used for health checks.

  YoVinchen · 2025-12-11 17:20:44 +08:00
  395783e22a
• fix(proxy): disable auto-start on app launch by resetting enabled flag on stop

  Previously, when proxy was started, the enabled flag was set to true and
  persisted to database. However, stopping the proxy didn't reset this flag,
  causing the proxy to auto-start on every subsequent app launch.
  
  Now the enabled flag is set to false when proxy stops, ensuring the proxy
  remains off after restart unless explicitly started by the user.

  Jason · 2025-12-11 12:32:02 +08:00
  404ab5a1ae
• style(rust): apply cargo fmt formatting
  Jason · 2025-12-11 12:13:27 +08:00
  9a8f12a490
• fix(proxy): sync live config tokens to database before takeover

  When proxy takeover is activated, tokens are replaced with placeholders
  in live config files. However, the proxy reads tokens from the database,
  not from live files. If the user's token only exists in the live config
  (e.g., manually added), the database won't have it, causing auth failures.
  
  Changes:
  - Add sync_live_to_providers() to sync tokens from live configs to DB
  - Add update_provider_settings_config() DAO method for partial updates
  - Use "PROXY_MANAGED" placeholder instead of empty string to avoid
    "missing API key" warnings in Claude Code status bar
  - Integrate sync step into start_with_takeover() flow before clearing tokens
  
  The new takeover flow:
  1. setup_proxy_targets()
  2. backup_live_configs()
  3. sync_live_to_providers() <- NEW
  4. takeover_live_configs()
  5. Start proxy server

  Jason · 2025-12-11 11:57:53 +08:00
  6a7c2df2d2
• refactor(proxy): simplify provider selection to use is_current directly

  Changes:
  - Modify provider_router to select provider based on is_current flag
    instead of is_proxy_target queue
  - Remove proxy target toggle UI from ProviderCard
  - Remove proxyPriority and allProviders props from ProviderList
  - Remove isProxyTarget prop from ProviderHealthBadge
  - Use start_with_takeover() for auto-start to ensure proper setup
  
  This simplifies the proxy architecture by directly using the current
  provider for proxying, eliminating the need for separate proxy target
  management. Switching providers now immediately takes effect in proxy
  mode.

  Jason · 2025-12-10 21:08:41 +08:00
  2a541cfda4