zevairouter 1.0.109 → 1.0.111

package/src/lib/oauth/services/codebuddyCnBulkImportManager.js

@@ -835,10 +835,16 @@ export class CodeBuddyCnBulkImportManager extends KiroBulkImportManager {
         apiKeyResult = await createKeyOnPage(PERSONAL_ENTERPRISE_ID).catch(() => null);
       }
 
-      // One more full nudge cycle if key creation returned 401/403 (session half-baked)
-      const status = apiKeyResult?.status;
-      if (!apiKeyResult?.ok && (status === 401 || status === 403 || status === 0 || !apiKeyResult)) {
-        this.setAccountStep(account, "retrying_api_key", "API key 401/403 — re-running OIDC handoff then retry");
+      // Retry loop on 401/403 — openresty edge blocks create-key when Keycloak
+      // cookies are half-synced (common on slow proxies). Nudge OIDC handoff,
+      // wait for strong session, then retry. Up to 3 rounds with backoff.
+      const isAuthBlocked = (r) => !r?.ok && (r?.status === 401 || r?.status === 403 || r?.status === 0 || !r);
+      for (let round = 1; round <= 3 && isAuthBlocked(apiKeyResult); round += 1) {
+        this.setAccountStep(
+          account,
+          "retrying_api_key",
+          `API key 401/403 — OIDC re-handoff round ${round}/3 (waiting strong session)`,
+        );
         await this.persistJobSnapshot(job, { forcePreview: true });
         for (const path of [
           "https://www.codebuddy.cn/",
@@ -848,14 +854,26 @@ export class CodeBuddyCnBulkImportManager extends KiroBulkImportManager {
           await page.goto(path, { waitUntil: "domcontentloaded", timeout: 45_000 }).catch(() => null);
           await waitAfterNav();
         }
+        // Wait for strong Keycloak cookie — openresty accepts api-keys only after full session.
+        await waitUntil(async () => {
+          const snap = await cookieSnapshot();
+          return hasStrongKeycloak(snap.names);
+        }, { timeout: 8_000 * round, interval: 300 }).catch(() => null);
         apiKeyResult = await createKeyOnPage(PERSONAL_ENTERPRISE_ID).catch(() => null);
       }
 
       const businessCode = apiKeyResult?.data?.code;
       const businessOk = businessCode === 0 || businessCode === 200 || typeof businessCode === "undefined";
       if (!apiKeyResult || !apiKeyResult.ok || !apiKeyResult.data || !businessOk) {
+        // Surface openresty HTML block (_raw) clearly instead of opaque "code=n/a".
+        const rawSnippet = typeof apiKeyResult?.data?._raw === "string"
+          ? apiKeyResult.data._raw.replace(/\s+/g, " ").slice(0, 120)
+          : null;
+        const edgeNote = rawSnippet && /openresty|nginx|Authorization Required/i.test(rawSnippet)
+          ? " [edge proxy blocked — session half-baked]"
+          : "";
         throw new Error(
-          `API key creation failed (HTTP ${apiKeyResult?.status ?? "no-response"}, code=${businessCode ?? "n/a"}): ${JSON.stringify(apiKeyResult?.data ?? null).slice(0, 200)}`,
+          `API key creation failed (HTTP ${apiKeyResult?.status ?? "no-response"}, code=${businessCode ?? "n/a"})${edgeNote}: ${JSON.stringify(apiKeyResult?.data ?? null).slice(0, 200)}`,
         );
       }
 

package/src/lib/oauth/services/codebuddyCnPhoneAutomation.js

@@ -65,6 +65,14 @@ const SPA_READY_SELECTORS = [
   ".login-phone-box",
 ];
 
+// Tencent privacy-consent dialog that gates the login UI behind a 同意 button.
+// Some proxy egress IPs trigger it every load; others never see it.
+const CONSENT_BUTTON_SELECTORS = [
+  "button:has-text('同意')",
+  "text=同意并继续",
+  "text=同意",
+];
+
 // Iframe selector
 const PHONE_IFRAME_SELECTOR = "#phone-iframe";
 
@@ -204,11 +212,19 @@ export async function runCodeBuddyCnPhoneRegistration({
         });
         throwIfCancelled();
 
-        // Give the SPA a short moment to mount React/Vue after document commit
-        await page.waitForTimeout(1_500);
+        // Wait for document to finish parsing (readyState interactive/complete) — scales to
+        // proxy speed instead of a fixed 1.5s that fires too early on slow China proxies
+        await page.waitForFunction(() => document.readyState !== "loading", { timeout: 10_000 }).catch(() => {});
         throwIfCancelled();
 
-        // SPA shell loads first; wait for any login UI marker (not networkidle — long-lived sockets)
+        // SPA shell loads first; dismiss privacy-consent dialog if it gates the login UI,
+        // then wait for any login UI marker (not networkidle — long-lived sockets)
+        const consentBtn = await waitForFirstVisibleLocator(page, CONSENT_BUTTON_SELECTORS, { timeout: 6_000 });
+        if (consentBtn) {
+          await consentBtn.click().catch(() => {});
+          reportStep("cn_consent_dismissed", "Privacy consent dialog dismissed (同意)");
+          await page.waitForTimeout(1_000);
+        }
         const spaReady = await waitForAnyVisible(page, SPA_READY_SELECTORS, SPA_TIMEOUT_MS);
         throwIfCancelled();
         if (!spaReady) {

package/src/shared/components/ModelSelectModal.js

@@ -120,6 +120,12 @@ export default function ModelSelectModal({
   const groupedModels = useMemo(() => {
     const groups = {};
 
+    // Performance: when the modal is closed the parent (Modal) renders null, but
+    // hooks still run. With many connections (hundreds of accounts) the loop below
+    // would do heavy per-provider work on every parent render and can freeze the
+    // page during hydration. Bail out cheaply until the modal is actually opened.
+    if (!isOpen) return groups;
+
     // Kinds where the provider IS the model (no per-model selection needed)
     const PROVIDER_AS_MODEL_KINDS = new Set(["webSearch", "webFetch"]);
     // Kinds that map directly to model.type field
@@ -312,7 +318,7 @@ export default function ModelSelectModal({
     });
 
     return groups;
-  }, [filteredActiveProviders, modelAliases, allProviders, providerNodes, customModels, disabledModels, kindFilter, activeProviders]);
+  }, [isOpen, filteredActiveProviders, modelAliases, allProviders, providerNodes, customModels, disabledModels, kindFilter, activeProviders]);
 
   // Filter combos by search query (and hide combos when kindFilter is set — combos are LLM-only by design)
   const filteredCombos = useMemo(() => {