zevairouter 1.0.131 → 1.0.133

package/cli/app/.next-cli-build/static/chunks/app/(dashboard)/dashboard/profile/page-3daabb58a77d3b0d.js

@@ -0,0 +1 @@
+(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[3471],{52424:(e,t,s)=>{Promise.resolve().then(s.bind(s,64561))},64561:(e,t,s)=>{"use strict";s.r(t),s.d(t,{default:()=>p});var a=s(95155),r=s(12115),o=s(73321),l=s(35497),i=s(81127),n=s(21931),d=s(1620),c=s(31474),m=s(90620),x=s(93308),u=s(38202);function p(){let e=(0,o.useRouter)(),{theme:t,setTheme:s,isDark:p}=(0,d.D)(),[h,b]=(0,r.useState)("en"),[g,y]=(0,r.useState)(!1),[f,j]=(0,r.useState)(!1),[N,w]=(0,r.useState)(!1),[v,C]=(0,r.useState)({fallbackStrategy:"fill-first"}),[k,S]=(0,r.useState)(!0),[P,O]=(0,r.useState)({current:"",new:"",confirm:""}),[I,L]=(0,r.useState)({type:"",message:""}),[T,R]=(0,r.useState)(!1),[D,U]=(0,r.useState)(!1),[M,A]=(0,r.useState)({type:"",message:""}),[E,$]=(0,r.useState)({authMode:"password",oidcIssuerUrl:"",oidcClientId:"",oidcScopes:"openid profile email",oidcLoginLabel:"Sign in with OIDC"}),[q,F]=(0,r.useState)(""),[J,H]=(0,r.useState)({type:"",message:""}),[_,W]=(0,r.useState)(!1),[z,B]=(0,r.useState)(!1),[Z,K]=(0,r.useState)({type:"",message:""}),[Q,V]=(0,r.useState)("/api/auth/oidc/callback"),[G,Y]=(0,r.useState)(!1),X=(0,r.useRef)(null),[ee,et]=(0,r.useState)({outboundProxyEnabled:!1,outboundProxyUrl:"",outboundNoProxy:""}),[es,ea]=(0,r.useState)({type:"",message:""}),[er,eo]=(0,r.useState)(!1),[el,ei]=(0,r.useState)(!1);(0,r.useEffect)(()=>{b(function(){if("u"<typeof document)return"en";let e=document.cookie.split(";").find(e=>e.trim().startsWith(`${x.CL}=`)),t=e?decodeURIComponent(e.split("=")[1]):"en";return(0,x.QC)(t)}())},[g]),(0,r.useEffect)(()=>{fetch("/api/settings").then(e=>e.json()).then(e=>{C(e),$({authMode:e?.authMode||"password",oidcIssuerUrl:e?.oidcIssuerUrl||"",oidcClientId:e?.oidcClientId||"",oidcScopes:e?.oidcScopes||"openid profile email",oidcLoginLabel:e?.oidcLoginLabel||"Sign in with OIDC"}),F(""),(e?.authMode==="oidc"||e?.authMode==="both")&&Y(!0),et({outboundProxyEnabled:e?.outboundProxyEnabled===!0,outboundProxyUrl:e?.outboundProxyUrl||"",outboundNoProxy:e?.outboundNoProxy||""}),S(!1)}).catch(e=>{console.error("Failed to fetch settings:",e),S(!1)})},[]),(0,r.useEffect)(()=>{V(`${window.location.origin}/api/auth/oidc/callback`)},[]);let en=async e=>{if(e.preventDefault(),!0===v.outboundProxyEnabled){eo(!0),ea({type:"",message:""});try{let e=await fetch("/api/settings",{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify({outboundProxyUrl:ee.outboundProxyUrl,outboundNoProxy:ee.outboundNoProxy})}),t=await e.json();e.ok?(C(e=>({...e,...t})),ea({type:"success",message:"Proxy settings applied"})):ea({type:"error",message:t.error||"Failed to update proxy settings"})}catch(e){ea({type:"error",message:"An error occurred"})}finally{eo(!1)}}},ed=async()=>{if(!0!==v.outboundProxyEnabled)return;let e=(ee.outboundProxyUrl||"").trim();if(!e)return void ea({type:"error",message:"Please enter a Proxy URL to test"});ei(!0),ea({type:"",message:""});try{let t=await fetch("/api/settings/proxy-test",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({proxyUrl:e})}),s=await t.json();t.ok&&s?.ok?ea({type:"success",message:`Proxy test OK (${s.status}) in ${s.elapsedMs}ms`}):ea({type:"error",message:s?.error||"Proxy test failed"})}catch(e){ea({type:"error",message:"An error occurred"})}finally{ei(!1)}},ec=async e=>{eo(!0),ea({type:"",message:""});try{let t=await fetch("/api/settings",{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify({outboundProxyEnabled:e})}),s=await t.json();t.ok?(C(e=>({...e,...s})),et(e=>({...e,outboundProxyEnabled:s?.outboundProxyEnabled===!0})),ea({type:"success",message:e?"Proxy enabled":"Proxy disabled"})):ea({type:"error",message:s.error||"Failed to update proxy settings"})}catch(e){ea({type:"error",message:"An error occurred"})}finally{eo(!1)}},em=async e=>{if(e.preventDefault(),P.new!==P.confirm)return void L({type:"error",message:"Passwords do not match"});R(!0),L({type:"",message:""});try{let e=await fetch("/api/settings",{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify({currentPassword:P.current,newPassword:P.new})}),t=await e.json();e.ok?(L({type:"success",message:"Password updated successfully"}),O({current:"",new:"",confirm:""})):L({type:"error",message:t.error||"Failed to update password"})}catch(e){L({type:"error",message:"An error occurred"})}finally{R(!1)}},ex=async e=>{try{(await fetch("/api/settings",{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify({fallbackStrategy:e})})).ok&&C(t=>({...t,fallbackStrategy:e}))}catch(e){console.error("Failed to update settings:",e)}},eu=async e=>{try{(await fetch("/api/settings",{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify({responseCacheEnabled:e})})).ok&&C(t=>({...t,responseCacheEnabled:e}))}catch(e){console.error("Failed to update settings:",e)}},ep=async e=>{try{(await fetch("/api/settings",{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify(e)})).ok&&C(t=>({...t,...e}))}catch(e){console.error("Failed to update alert settings:",e)}},eh=async e=>{try{(await fetch("/api/settings",{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify({comboStrategy:e})})).ok&&C(t=>({...t,comboStrategy:e}))}catch(e){console.error("Failed to update combo strategy:",e)}},eb=async e=>{let t=parseInt(e);if(!isNaN(t)&&!(t<1))try{(await fetch("/api/settings",{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify({stickyRoundRobinLimit:t})})).ok&&C(e=>({...e,stickyRoundRobinLimit:t}))}catch(e){console.error("Failed to update sticky limit:",e)}},eg=async e=>{let t=parseInt(e);if(!isNaN(t)&&!(t<1))try{(await fetch("/api/settings",{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify({comboStickyRoundRobinLimit:t})})).ok&&C(e=>({...e,comboStickyRoundRobinLimit:t}))}catch(e){console.error("Failed to update combo sticky limit:",e)}},ey=async e=>{try{(await fetch("/api/settings",{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify({requireLogin:e})})).ok&&C(t=>({...t,requireLogin:e}))}catch(e){console.error("Failed to update require login:",e)}},ef=(e,t)=>{$(s=>({...s,[e]:t}))},ej=async(e=E.authMode||"password")=>{let t=E.oidcIssuerUrl.trim(),s=E.oidcClientId.trim(),a=E.oidcScopes.trim(),r=E.oidcLoginLabel.trim(),o=q.trim();if("password"!==e&&(!t||!s||!o)&&!v.oidcConfigured)return void H({type:"error",message:"Issuer URL, client ID, and client secret are required to enable OIDC."});W(!0),H({type:"",message:""}),K({type:"",message:""});try{let l={authMode:e,oidcIssuerUrl:t,oidcClientId:s,oidcScopes:a||"openid profile email",oidcLoginLabel:r||"Sign in with OIDC"};o&&(l.oidcClientSecret=o);let i=await fetch("/api/settings",{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify(l)}),n=await i.json();i.ok?(C(e=>({...e,...n})),$({authMode:n?.authMode||e,oidcIssuerUrl:n?.oidcIssuerUrl||t,oidcClientId:n?.oidcClientId||s,oidcScopes:n?.oidcScopes||a||"openid profile email",oidcLoginLabel:n?.oidcLoginLabel||r||"Sign in with OIDC"}),F(""),H({type:"success",message:"oidc"===e?"OIDC login enabled":"both"===e?"Password and OIDC login enabled":"OIDC settings saved"})):H({type:"error",message:n.error||"Failed to save OIDC settings"})}catch(e){H({type:"error",message:"An error occurred"})}finally{W(!1)}},eN=async()=>{let e=E.oidcIssuerUrl.trim(),t=E.oidcClientId.trim(),s=E.oidcScopes.trim(),a=q.trim();if(!e||!t)return void K({type:"error",message:"Issuer URL and client ID are required to test the connection."});B(!0),H({type:"",message:""}),K({type:"",message:""});try{let r=await fetch("/api/settings",{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify({authMode:E.authMode||v.authMode||"password",oidcIssuerUrl:e,oidcClientId:t,oidcScopes:s||"openid profile email",oidcLoginLabel:E.oidcLoginLabel.trim()||"Sign in with OIDC",...a?{oidcClientSecret:a}:{}})}),o=await r.json().catch(()=>({}));if(!r.ok)return void K({type:"error",message:o.error||"Failed to save OIDC settings before testing"});let l=await fetch("/api/auth/oidc/test",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({issuerUrl:o.oidcIssuerUrl||e,clientId:o.oidcClientId||t,scopes:o.oidcScopes||s||"openid profile email"})}),i=await l.json().catch(()=>({}));if(l.ok&&i?.ok){let e=i.clientSecretTested?!0===i.clientSecretValid?`Connection OK. Discovery loaded from ${i.issuerUrl}. Client secret validated too.`:`Connection OK. Discovery loaded from ${i.issuerUrl}. Client secret was not checked.`:`Connection OK. Discovery loaded from ${i.issuerUrl}.`;K({type:"success",message:e})}else K({type:"error",message:i.error||"OIDC connection test failed"})}catch(e){K({type:"error",message:"An error occurred"})}finally{B(!1)}},ew=async e=>{try{(await fetch("/api/settings",{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify({enableObservability:e})})).ok&&C(t=>({...t,enableObservability:e}))}catch(e){console.error("Failed to update enableObservability:",e)}},ev=async()=>{try{let e=await fetch("/api/settings");if(!e.ok)return;let t=await e.json();C(t)}catch(e){console.error("Failed to reload settings:",e)}},eC=async()=>{U(!0),A({type:"",message:""});try{let e=await fetch("/api/settings/database");if(!e.ok){let t=await e.json().catch(()=>({}));throw Error(t.error||"Failed to export database")}let t=await e.json(),s=JSON.stringify(t),a=new Blob([s],{type:"application/json"}),r=URL.createObjectURL(a),o=document.createElement("a"),l=new Date().toISOString().replace(/[.:]/g,"-");o.href=r,o.download=`zevairouter-backup-${l}.json`,document.body.appendChild(o),o.click(),document.body.removeChild(o),URL.revokeObjectURL(r);let i=(a.size/1048576).toFixed(2),n=Array.isArray(t?.excludedTables)&&t.excludedTables.length?` (config only — skipped ${t.excludedTables.join(", ")})`:"";A({type:"success",message:`Database backup downloaded (${i} MB)${n}`})}catch(e){A({type:"error",message:e.message||"Failed to export database"})}finally{U(!1)}},ek=async e=>{let t=e.target.files?.[0];if(t){U(!0),A({type:"",message:""});try{let e=await t.text(),s=JSON.parse(e),a=await fetch("/api/settings/database",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(s)}),r=await a.json().catch(()=>({}));if(!a.ok)throw Error(r.error||"Failed to import database");await ev(),A({type:"success",message:"Database imported successfully"})}catch(e){A({type:"error",message:e.message||"Invalid backup file"})}finally{X.current&&(X.current.value=""),U(!1)}}},eS=!0===v.enableObservability,eP=async()=>{w(!0);try{await fetch("/api/version/shutdown",{method:"POST"})}catch(e){}w(!1),j(!1)},eO=async()=>{try{(await fetch("/api/auth/logout",{method:"POST"})).ok&&(e.push("/login"),e.refresh())}catch(e){console.error("Failed to logout:",e)}};return(0,a.jsxs)("div",{className:"max-w-2xl mx-auto px-4 sm:px-0",children:[(0,a.jsxs)("div",{className:"flex flex-col gap-6",children:[(0,a.jsxs)(l.Zp,{children:[(0,a.jsxs)("div",{className:"flex flex-col sm:flex-row sm:items-center sm:justify-between gap-4 mb-4",children:[(0,a.jsxs)("div",{className:"flex items-center gap-3 sm:gap-4",children:[(0,a.jsx)("div",{className:"size-10 sm:size-12 rounded-lg bg-green-500/10 text-green-500 flex items-center justify-center shrink-0",children:(0,a.jsx)("span",{className:"material-symbols-outlined text-xl sm:text-2xl",children:"computer"})}),(0,a.jsxs)("div",{children:[(0,a.jsx)("h2",{className:"text-lg sm:text-xl font-semibold",children:"Local Mode"}),(0,a.jsx)("p",{className:"text-sm text-text-muted",children:"Running on your machine"})]})]}),(0,a.jsx)("div",{className:"inline-flex p-1 rounded-lg bg-black/5 dark:bg-white/5 w-full sm:w-auto",children:["light","dark","system"].map(e=>(0,a.jsxs)("button",{type:"button",onClick:()=>s(e),className:(0,c.cn)("flex items-center justify-center gap-1 sm:gap-1.5 px-2 sm:px-3 py-1.5 rounded-md font-medium transition-all flex-1 sm:flex-initial",t===e?"bg-white dark:bg-white/10 text-text-main shadow-sm":"text-text-muted hover:text-text-main"),children:[(0,a.jsx)("span",{className:"material-symbols-outlined text-[18px]",children:"light"===e?"light_mode":"dark"===e?"dark_mode":"contrast"}),(0,a.jsx)("span",{className:"capitalize text-xs sm:text-sm",children:e})]},e))})]}),(0,a.jsxs)("div",{className:"flex flex-col gap-3 pt-4 border-t border-border",children:[(0,a.jsx)("div",{className:"flex flex-col sm:flex-row sm:items-center sm:justify-between p-3 rounded-lg bg-bg border border-border gap-2",children:(0,a.jsxs)("div",{children:[(0,a.jsx)("p",{className:"font-medium text-sm sm:text-base",children:"Database Location"}),(0,a.jsx)("p",{className:"text-xs sm:text-sm text-text-muted font-mono break-all",children:"~/.zevai/db/data.sqlite"})]})}),(0,a.jsxs)("div",{className:"flex flex-col sm:flex-row gap-2",children:[(0,a.jsx)(l.$n,{variant:"secondary",icon:"download",onClick:eC,loading:D,className:"w-full sm:w-auto",children:"Download Backup"}),(0,a.jsx)(l.$n,{variant:"outline",icon:"upload",onClick:()=>X.current?.click(),disabled:D,className:"w-full sm:w-auto",children:"Import Backup"}),(0,a.jsx)("input",{ref:X,type:"file",accept:"application/json,.json",className:"hidden",onChange:ek})]}),M.message&&(0,a.jsx)("p",{className:`text-sm ${"error"===M.type?"text-red-500":"text-green-600 dark:text-green-400"}`,children:M.message})]})]}),(0,a.jsxs)(l.Zp,{children:[(0,a.jsxs)("div",{className:"flex items-center gap-3 mb-4",children:[(0,a.jsx)("div",{className:"size-10 rounded-lg bg-blue-500/10 text-blue-500 flex items-center justify-center shrink-0",children:(0,a.jsx)("span",{className:"material-symbols-outlined text-[20px]",children:"language"})}),(0,a.jsx)("h3",{className:"text-base sm:text-lg font-semibold",children:"Language"})]}),(0,a.jsxs)("button",{onClick:()=>y(!0),className:"flex items-center justify-between w-full p-3 rounded-lg bg-bg border border-border hover:border-primary/50 transition-colors","data-i18n-skip":"true",children:[(0,a.jsx)("span",{className:"text-sm text-text-muted",children:"Display language"}),(0,a.jsx)("span",{className:"text-2xl",children:u.h[h]||"\uD83C\uDF10"})]})]}),(0,a.jsxs)(l.Zp,{children:[(0,a.jsxs)("div",{className:"flex items-center gap-3 mb-4",children:[(0,a.jsx)("div",{className:"p-2 rounded-lg bg-primary/10 text-primary shrink-0",children:(0,a.jsx)("span",{className:"material-symbols-outlined text-[20px]",children:"shield"})}),(0,a.jsx)("h3",{className:"text-base sm:text-lg font-semibold",children:"Security"})]}),(0,a.jsxs)("div",{className:"flex flex-col gap-4",children:[(0,a.jsxs)("div",{className:"flex items-start sm:items-center justify-between gap-4",children:[(0,a.jsxs)("div",{className:"flex-1 min-w-0",children:[(0,a.jsx)("p",{className:"font-medium text-sm sm:text-base",children:"Require login"}),(0,a.jsx)("p",{className:"text-xs sm:text-sm text-text-muted",children:"When ON, dashboard requires password. When OFF, access without login."})]}),(0,a.jsx)(l.lM,{checked:!0===v.requireLogin,onChange:()=>ey(!v.requireLogin),disabled:k})]}),!0===v.requireLogin&&(0,a.jsxs)("form",{onSubmit:em,className:"flex flex-col gap-4 pt-4 border-t border-border/50",children:[v.hasPassword&&(0,a.jsxs)("div",{className:"flex flex-col gap-2",children:[(0,a.jsx)("label",{className:"text-xs sm:text-sm font-medium",children:"Current Password"}),(0,a.jsx)(l.pd,{type:"password",placeholder:"Enter current password",value:P.current,onChange:e=>O({...P,current:e.target.value}),required:!0})]}),(0,a.jsxs)("div",{className:"grid grid-cols-1 sm:grid-cols-2 gap-4",children:[(0,a.jsxs)("div",{className:"flex flex-col gap-2",children:[(0,a.jsx)("label",{className:"text-xs sm:text-sm font-medium",children:"New Password"}),(0,a.jsx)(l.pd,{type:"password",placeholder:"Enter new password",value:P.new,onChange:e=>O({...P,new:e.target.value}),required:!0})]}),(0,a.jsxs)("div",{className:"flex flex-col gap-2",children:[(0,a.jsx)("label",{className:"text-xs sm:text-sm font-medium",children:"Confirm New Password"}),(0,a.jsx)(l.pd,{type:"password",placeholder:"Confirm new password",value:P.confirm,onChange:e=>O({...P,confirm:e.target.value}),required:!0})]})]}),I.message&&(0,a.jsx)("p",{className:`text-xs sm:text-sm ${"error"===I.type?"text-red-500":"text-green-500"}`,children:I.message}),(0,a.jsx)("div",{className:"pt-2",children:(0,a.jsx)(l.$n,{type:"submit",variant:"primary",loading:T,className:"w-full sm:w-auto",children:v.hasPassword?"Update Password":"Set Password"})})]})]})]}),(0,a.jsxs)(l.Zp,{children:[(0,a.jsxs)("button",{type:"button",onClick:()=>Y(e=>!e),className:"w-full flex items-center gap-3 text-left",children:[(0,a.jsx)("div",{className:"p-2 rounded-lg bg-indigo-500/10 text-indigo-500 shrink-0",children:(0,a.jsx)("span",{className:"material-symbols-outlined text-[20px]",children:"lock_open"})}),(0,a.jsxs)("div",{className:"flex-1 min-w-0",children:[(0,a.jsx)("h3",{className:"text-base sm:text-lg font-semibold",children:"OIDC Dashboard Login"}),(0,a.jsx)("p",{className:"text-xs text-text-muted",children:"oidc"===v.authMode?"OIDC active":"both"===v.authMode?"Password + OIDC active":"Optional SSO via Authentik/Keycloak/Google"})]}),(0,a.jsx)("span",{className:"material-symbols-outlined text-text-muted shrink-0",children:G?"expand_less":"expand_more"})]}),G&&(0,a.jsxs)("div",{className:"flex flex-col gap-4 mt-4",children:[(0,a.jsx)("p",{className:"text-xs sm:text-sm text-text-muted",children:"Use Authentik or any OIDC provider to sign in to the dashboard. You can enable password-only, OIDC-only, or both for the dashboard; model API access still uses API keys."}),(0,a.jsxs)("div",{className:"flex flex-col gap-2",children:[(0,a.jsx)("label",{className:"font-medium text-sm sm:text-base",children:"Auth Mode"}),(0,a.jsx)("div",{className:"grid grid-cols-1 sm:grid-cols-3 gap-2",children:[{value:"password",title:"Password only",desc:"Keep the legacy password login."},{value:"oidc",title:"OIDC only",desc:"Require OIDC for dashboard access."},{value:"both",title:"Both",desc:"Allow either password or OIDC."}].map(e=>{let t=E.authMode===e.value;return(0,a.jsxs)("button",{type:"button",onClick:()=>ef("authMode",e.value),className:(0,c.cn)("text-left rounded-lg border p-3 transition-colors",t?"border-primary bg-primary/5":"border-border bg-bg hover:bg-black/5 dark:hover:bg-white/5"),disabled:k||_,children:[(0,a.jsx)("p",{className:"font-medium text-sm sm:text-base",children:e.title}),(0,a.jsx)("p",{className:"text-xs sm:text-sm text-text-muted mt-1",children:e.desc})]},e.value)})})]}),(0,a.jsxs)("div",{className:"grid grid-cols-1 gap-4",children:[(0,a.jsxs)("div",{className:"flex flex-col gap-2",children:[(0,a.jsx)("label",{className:"font-medium text-sm sm:text-base",children:"Issuer URL"}),(0,a.jsx)(l.pd,{placeholder:"https://auth.example.com/application/o/zevairouter/",value:E.oidcIssuerUrl,onChange:e=>ef("oidcIssuerUrl",e.target.value),disabled:k||_})]}),(0,a.jsxs)("div",{className:"flex flex-col gap-2",children:[(0,a.jsx)("label",{className:"font-medium text-sm sm:text-base",children:"Client ID"}),(0,a.jsx)(l.pd,{placeholder:"zevairouter-dashboard",value:E.oidcClientId,onChange:e=>ef("oidcClientId",e.target.value),disabled:k||_})]}),(0,a.jsxs)("div",{className:"flex flex-col gap-2",children:[(0,a.jsx)("label",{className:"font-medium text-sm sm:text-base",children:"Client Secret"}),(0,a.jsx)(l.pd,{type:"password",placeholder:"Leave blank to keep existing secret",value:q,onChange:e=>F(e.target.value),disabled:k||_}),(0,a.jsx)("p",{className:"text-xs sm:text-sm text-text-muted",children:"This value is write-only after saving."})]}),(0,a.jsxs)("div",{className:"flex flex-col gap-2",children:[(0,a.jsx)("label",{className:"font-medium text-sm sm:text-base",children:"Scopes"}),(0,a.jsx)(l.pd,{placeholder:"openid profile email",value:E.oidcScopes,onChange:e=>ef("oidcScopes",e.target.value),disabled:k||_})]}),(0,a.jsxs)("div",{className:"flex flex-col gap-2",children:[(0,a.jsx)("label",{className:"font-medium text-sm sm:text-base",children:"Login Button Label"}),(0,a.jsx)(l.pd,{placeholder:"Sign in with OIDC",value:E.oidcLoginLabel,onChange:e=>ef("oidcLoginLabel",e.target.value),disabled:k||_})]})]}),(0,a.jsxs)("div",{className:"rounded-lg border border-border bg-bg p-3 text-xs sm:text-sm text-text-muted",children:[(0,a.jsx)("p",{className:"font-medium text-text-main mb-1",children:"Redirect URI"}),(0,a.jsx)("code",{className:"block break-all font-mono",children:Q})]}),(0,a.jsxs)("div",{className:"flex flex-col sm:flex-row gap-2 pt-2 border-t border-border/50",children:[(0,a.jsx)(l.$n,{type:"button",variant:"primary",loading:_,onClick:()=>ej(),className:"w-full sm:w-auto",children:"Save auth mode"}),(0,a.jsx)(l.$n,{type:"button",variant:"outline",loading:z,onClick:eN,className:"w-full sm:w-auto",children:"Test connection"})]}),Z.message&&(0,a.jsx)("p",{className:`text-xs sm:text-sm ${"error"===Z.type?"text-red-500":"text-green-500"}`,children:Z.message}),J.message&&(0,a.jsx)("p",{className:`text-xs sm:text-sm ${"error"===J.type?"text-red-500":"text-green-500"}`,children:J.message}),"oidc"===v.authMode&&(0,a.jsx)("p",{className:"text-xs sm:text-sm text-amber-600 dark:text-amber-400",children:"OIDC login is currently active. Password login is disabled until you switch back."}),"both"===v.authMode&&(0,a.jsx)("p",{className:"text-xs sm:text-sm text-amber-600 dark:text-amber-400",children:"Password and OIDC login are both active."})]})]}),(0,a.jsxs)(l.Zp,{children:[(0,a.jsxs)("div",{className:"flex items-center gap-3 mb-4",children:[(0,a.jsx)("div",{className:"p-2 rounded-lg bg-blue-500/10 text-blue-500 shrink-0",children:(0,a.jsx)("span",{className:"material-symbols-outlined text-[20px]",children:"route"})}),(0,a.jsx)("h3",{className:"text-base sm:text-lg font-semibold",children:"Routing Strategy"})]}),(0,a.jsxs)("div",{className:"flex flex-col gap-4",children:[(0,a.jsxs)("div",{className:"flex items-start sm:items-center justify-between gap-4",children:[(0,a.jsxs)("div",{className:"flex-1 min-w-0",children:[(0,a.jsx)("p",{className:"font-medium text-sm sm:text-base",children:"Round Robin"}),(0,a.jsx)("p",{className:"text-xs sm:text-sm text-text-muted",children:"Cycle through accounts to distribute load"})]}),(0,a.jsx)(l.lM,{checked:"round-robin"===v.fallbackStrategy,onChange:()=>ex("round-robin"===v.fallbackStrategy?"fill-first":"round-robin"),disabled:k})]}),"round-robin"===v.fallbackStrategy&&(0,a.jsxs)("div",{className:"flex items-start sm:items-center justify-between gap-4 pt-2 border-t border-border/50",children:[(0,a.jsxs)("div",{className:"flex-1 min-w-0",children:[(0,a.jsx)("p",{className:"font-medium text-sm sm:text-base",children:"Sticky Limit"}),(0,a.jsx)("p",{className:"text-xs sm:text-sm text-text-muted",children:"Calls per account before switching"})]}),(0,a.jsx)(l.pd,{type:"number",min:"1",max:"10",value:v.stickyRoundRobinLimit||3,onChange:e=>eb(e.target.value),disabled:k,className:"w-16 sm:w-20 text-center shrink-0"})]}),(0,a.jsxs)("div",{className:"flex items-start sm:items-center justify-between gap-4 pt-4 border-t border-border/50",children:[(0,a.jsxs)("div",{className:"flex-1 min-w-0",children:[(0,a.jsx)("p",{className:"font-medium text-sm sm:text-base",children:"Most Quota"}),(0,a.jsx)("p",{className:"text-xs sm:text-sm text-text-muted",children:"Pick the account with the most remaining quota (uses cached usage)"})]}),(0,a.jsx)(l.lM,{checked:"most-quota"===v.fallbackStrategy,onChange:()=>ex("most-quota"===v.fallbackStrategy?"fill-first":"most-quota"),disabled:k})]}),(0,a.jsxs)("div",{className:"flex items-start sm:items-center justify-between gap-4 pt-4 border-t border-border/50",children:[(0,a.jsxs)("div",{className:"flex-1 min-w-0",children:[(0,a.jsx)("p",{className:"font-medium text-sm sm:text-base",children:"Lowest Latency"}),(0,a.jsx)("p",{className:"text-xs sm:text-sm text-text-muted",children:"Route to the fastest account by recent avg response time"})]}),(0,a.jsx)(l.lM,{checked:"lowest-latency"===v.fallbackStrategy,onChange:()=>ex("lowest-latency"===v.fallbackStrategy?"fill-first":"lowest-latency"),disabled:k})]}),(0,a.jsxs)("div",{className:"flex items-start sm:items-center justify-between gap-4 pt-4 border-t border-border/50",children:[(0,a.jsxs)("div",{className:"flex-1 min-w-0",children:[(0,a.jsx)("p",{className:"font-medium text-sm sm:text-base",children:"Response Cache"}),(0,a.jsx)("p",{className:"text-xs sm:text-sm text-text-muted",children:"Serve identical non-streaming requests from memory (saves cost)"})]}),(0,a.jsx)(l.lM,{checked:!1!==v.responseCacheEnabled,onChange:()=>eu(!1===v.responseCacheEnabled),disabled:k})]}),(0,a.jsxs)("div",{className:"flex items-start sm:items-center justify-between gap-4 pt-4 border-t border-border/50",children:[(0,a.jsxs)("div",{className:"flex-1 min-w-0",children:[(0,a.jsx)("p",{className:"font-medium text-sm sm:text-base",children:"Webhook Alerts"}),(0,a.jsx)("p",{className:"text-xs sm:text-sm text-text-muted",children:"Notify on provider down / quota exhausted (Discord, Telegram, or generic webhook)"})]}),(0,a.jsx)(l.lM,{checked:!0===v.alertEnabled,onChange:()=>ep({alertEnabled:!0!==v.alertEnabled}),disabled:k})]}),!0===v.alertEnabled&&(0,a.jsxs)("div",{className:"flex flex-col gap-3 pt-2 border-t border-border/50",children:[(0,a.jsxs)("div",{children:[(0,a.jsx)("label",{className:"text-xs text-text-muted block mb-1",children:"Webhook URL"}),(0,a.jsx)(l.pd,{type:"url",placeholder:"https://discord.com/api/webhooks/… or https://api.telegram.org/bot<token>/sendMessage",defaultValue:v.alertWebhookUrl||"",onBlur:e=>ep({alertWebhookUrl:e.target.value.trim()}),disabled:k})]}),(0,a.jsxs)("div",{className:"flex gap-3",children:[(0,a.jsxs)("div",{className:"flex-1",children:[(0,a.jsx)("label",{className:"text-xs text-text-muted block mb-1",children:"Type"}),(0,a.jsxs)("select",{defaultValue:v.alertWebhookType||"discord",onChange:e=>ep({alertWebhookType:e.target.value}),disabled:k,className:"w-full px-2 py-1.5 text-sm bg-transparent border border-border rounded",children:[(0,a.jsx)("option",{value:"discord",children:"Discord"}),(0,a.jsx)("option",{value:"telegram",children:"Telegram"}),(0,a.jsx)("option",{value:"generic",children:"Generic JSON"})]})]}),"telegram"===v.alertWebhookType&&(0,a.jsxs)("div",{className:"flex-1",children:[(0,a.jsx)("label",{className:"text-xs text-text-muted block mb-1",children:"Telegram Chat ID"}),(0,a.jsx)(l.pd,{type:"text",placeholder:"-1001234567890",defaultValue:v.alertTelegramChatId||"",onBlur:e=>ep({alertTelegramChatId:e.target.value.trim()}),disabled:k})]})]})]}),(0,a.jsxs)("div",{className:"flex items-start sm:items-center justify-between gap-4 pt-4 border-t border-border/50",children:[(0,a.jsxs)("div",{className:"flex-1 min-w-0",children:[(0,a.jsx)("p",{className:"font-medium text-sm sm:text-base",children:"Combo Round Robin"}),(0,a.jsx)("p",{className:"text-xs sm:text-sm text-text-muted",children:"Cycle through providers in combos instead of always starting with first"})]}),(0,a.jsx)(l.lM,{checked:"round-robin"===v.comboStrategy,onChange:()=>eh("round-robin"===v.comboStrategy?"fallback":"round-robin"),disabled:k})]}),"round-robin"===v.comboStrategy&&(0,a.jsxs)("div",{className:"flex items-center justify-between pt-2 border-t border-border/50",children:[(0,a.jsxs)("div",{children:[(0,a.jsx)("p",{className:"font-medium",children:"Combo Sticky Limit"}),(0,a.jsx)("p",{className:"text-sm text-text-muted",children:"Calls per combo model before switching"})]}),(0,a.jsx)(l.pd,{type:"number",min:"1",max:"100",value:v.comboStickyRoundRobinLimit||1,onChange:e=>eg(e.target.value),disabled:k,className:"w-20 text-center"})]}),(0,a.jsxs)("p",{className:"text-xs text-text-muted italic pt-2 border-t border-border/50",children:["round-robin"===v.fallbackStrategy?`Currently distributing requests across all available accounts with ${v.stickyRoundRobinLimit||3} calls per account.`:"most-quota"===v.fallbackStrategy?"Currently routing to the account with the most remaining quota.":"lowest-latency"===v.fallbackStrategy?"Currently routing to the fastest account by recent avg latency.":"Currently using accounts in priority order (Fill First).","round-robin"===v.comboStrategy?` Combos rotate after ${v.comboStickyRoundRobinLimit||1} call${1===(v.comboStickyRoundRobinLimit||1)?"":"s"} per model.`:" Combos always start with their first model."]})]})]}),(0,a.jsxs)(l.Zp,{children:[(0,a.jsxs)("div",{className:"flex items-center gap-3 mb-4",children:[(0,a.jsx)("div",{className:"p-2 rounded-lg bg-purple-500/10 text-purple-500 shrink-0",children:(0,a.jsx)("span",{className:"material-symbols-outlined text-[20px]",children:"wifi"})}),(0,a.jsx)("h3",{className:"text-base sm:text-lg font-semibold",children:"Network"})]}),(0,a.jsxs)("div",{className:"flex flex-col gap-4",children:[(0,a.jsxs)("div",{className:"flex items-start sm:items-center justify-between gap-4",children:[(0,a.jsxs)("div",{className:"flex-1 min-w-0",children:[(0,a.jsx)("p",{className:"font-medium text-sm sm:text-base",children:"Outbound Proxy"}),(0,a.jsx)("p",{className:"text-xs sm:text-sm text-text-muted",children:"Enable proxy for OAuth + provider outbound requests."})]}),(0,a.jsx)(l.lM,{checked:!0===v.outboundProxyEnabled,onChange:()=>ec(!0!==v.outboundProxyEnabled),disabled:k||er})]}),!0===v.outboundProxyEnabled&&(0,a.jsxs)("form",{onSubmit:en,className:"flex flex-col gap-4 pt-2 border-t border-border/50",children:[(0,a.jsxs)("div",{className:"flex flex-col gap-2",children:[(0,a.jsx)("label",{className:"font-medium text-sm sm:text-base",children:"Proxy URL"}),(0,a.jsx)(l.pd,{placeholder:"http://127.0.0.1:7897",value:ee.outboundProxyUrl,onChange:e=>et(t=>({...t,outboundProxyUrl:e.target.value})),disabled:k||er}),(0,a.jsx)("p",{className:"text-xs sm:text-sm text-text-muted",children:"Leave empty to inherit existing env proxy (if any)."})]}),(0,a.jsxs)("div",{className:"flex flex-col gap-2 pt-2 border-t border-border/50",children:[(0,a.jsx)("label",{className:"font-medium text-sm sm:text-base",children:"No Proxy"}),(0,a.jsx)(l.pd,{placeholder:"localhost,127.0.0.1",value:ee.outboundNoProxy,onChange:e=>et(t=>({...t,outboundNoProxy:e.target.value})),disabled:k||er}),(0,a.jsx)("p",{className:"text-xs sm:text-sm text-text-muted",children:"Comma-separated hostnames/domains to bypass the proxy."})]}),(0,a.jsxs)("div",{className:"pt-2 border-t border-border/50 flex flex-col sm:flex-row items-stretch sm:items-center gap-2",children:[(0,a.jsx)(l.$n,{type:"button",variant:"secondary",loading:el,disabled:k||er,onClick:ed,className:"w-full sm:w-auto",children:"Test proxy URL"}),(0,a.jsx)(l.$n,{type:"submit",variant:"primary",loading:er,className:"w-full sm:w-auto",children:"Apply"})]})]}),es.message&&(0,a.jsx)("p",{className:`text-xs sm:text-sm ${"error"===es.type?"text-red-500":"text-green-500"} pt-2 border-t border-border/50`,children:es.message})]})]}),(0,a.jsxs)(l.Zp,{children:[(0,a.jsxs)("div",{className:"flex items-center gap-3 mb-4",children:[(0,a.jsx)("div",{className:"p-2 rounded-lg bg-orange-500/10 text-orange-500 shrink-0",children:(0,a.jsx)("span",{className:"material-symbols-outlined text-[20px]",children:"monitoring"})}),(0,a.jsx)("h3",{className:"text-base sm:text-lg font-semibold",children:"Observability"})]}),(0,a.jsxs)("div",{className:"flex items-start sm:items-center justify-between gap-4",children:[(0,a.jsxs)("div",{className:"flex-1 min-w-0",children:[(0,a.jsx)("p",{className:"font-medium text-sm sm:text-base",children:"Enable Observability"}),(0,a.jsx)("p",{className:"text-xs sm:text-sm text-text-muted",children:"Record request details for inspection in the logs view"})]}),(0,a.jsx)(l.lM,{checked:eS,onChange:ew,disabled:k})]})]}),(0,a.jsxs)("div",{className:"flex flex-col sm:flex-row gap-2",children:[(0,a.jsx)(l.$n,{variant:"outline",fullWidth:!0,icon:"power_settings_new",onClick:()=>j(!0),className:"text-red-500 border-red-200 hover:bg-red-50 hover:border-red-300",children:"Shutdown"}),(0,a.jsx)(l.$n,{variant:"outline",fullWidth:!0,icon:"logout",onClick:eO,children:"Logout"})]}),(0,a.jsxs)("div",{className:"text-center text-xs sm:text-sm text-text-muted py-4",children:[(0,a.jsxs)("p",{children:[m.vQ.name," v",m.vQ.version]}),(0,a.jsx)("p",{className:"mt-1",children:"Local Mode - All data stored on your machine"})]})]}),(0,a.jsx)(n.default,{hideTrigger:!0,isOpen:g,onClose:e=>{y(!1),b(e)}}),(0,a.jsx)(i.ConfirmModal,{isOpen:f,onClose:()=>j(!1),onConfirm:eP,title:"Close Proxy",message:"Are you sure you want to close the proxy server?",confirmText:"Close",cancelText:"Cancel",variant:"danger",loading:N})]})}}},e=>{e.O(0,[2574,3862,4343,85,5497,8441,3794,7358],()=>e(e.s=52424)),_N_E=e.O()}]);

package/cli/app/CHANGELOG.md

@@ -1,3 +1,8 @@
+# v1.0.133 (2026-07-26)
+
+## Improvements
+- **CodeBuddy CN per-account Chromium fingerprint**: each bulk-import account now gets a seeded fingerprint (real desktop viewport sizes, deviceScaleFactor, hardwareConcurrency, deviceMemory, and screen metrics) so sticky residential IPs no longer share the same 900×700 + identical navigator.* cluster that Tencent risk scoring can ban after OTP.
+
 # v1.0.128 (2026-07-25)
 
 ## Improvements

package/cli/app/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zevairouter",
-  "version": "1.0.131",
+  "version": "1.0.133",
   "description": "Self-hosted AI router: many providers, one OpenAI-compatible /v1 endpoint and dashboard",
   "bin": {
     "zevai": "./cli/cli.js"

package/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zevairouter-cli",
-  "version": "1.0.131",
+  "version": "1.0.133",
   "description": "ZevaiRouter CLI - Start and manage ZevaiRouter server",
   "bin": {
     "zevai": "./cli.js"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zevairouter",
-  "version": "1.0.131",
+  "version": "1.0.133",
   "description": "Self-hosted AI router: many providers, one OpenAI-compatible /v1 endpoint and dashboard",
   "bin": {
     "zevai": "./cli/cli.js"

package/src/app/(dashboard)/dashboard/profile/page.js

@@ -512,7 +512,8 @@ export default function ProfilePage() {
       }
 
       const payload = await res.json();
-      const content = JSON.stringify(payload, null, 2);
+      // Compact JSON (no pretty-print) — backup is config-only; pretty-print bloats multi‑MB files
+      const content = JSON.stringify(payload);
       const blob = new Blob([content], { type: "application/json" });
       const url = URL.createObjectURL(blob);
       const anchor = document.createElement("a");
@@ -524,7 +525,14 @@ export default function ProfilePage() {
       document.body.removeChild(anchor);
       URL.revokeObjectURL(url);
 
-      setDbStatus({ type: "success", message: "Database backup downloaded" });
+      const sizeMb = (blob.size / (1024 * 1024)).toFixed(2);
+      const excluded = Array.isArray(payload?.excludedTables) && payload.excludedTables.length
+        ? ` (config only — skipped ${payload.excludedTables.join(", ")})`
+        : "";
+      setDbStatus({
+        type: "success",
+        message: `Database backup downloaded (${sizeMb} MB)${excluded}`,
+      });
     } catch (err) {
       setDbStatus({ type: "error", message: err.message || "Failed to export database" });
     } finally {

package/src/lib/db/index.js

@@ -82,12 +82,24 @@ export {
   saveRequestDetail, getRequestDetails, getRequestDetailById,
 } from "./repos/requestDetailsRepo.js";
 
+// Telemetry/history tables — huge and not needed for config restore (settings,
+// connections, API keys, proxies, combos). Including them made "Download backup"
+// multi‑MB JSON after long usage (usageHistory alone often 20MB+).
+const BACKUP_EXCLUDE_TABLES = new Set([
+  "usageHistory",
+  "requestDetails",
+  "quotaCache",
+]);
+
 // Export/import full DB
 export async function exportDb() {
   const db = await getAdapter();
   const { exportSettings } = await import("./repos/settingsRepo.js");
 
+  const tableNames = Object.keys(TABLES).filter((table) => !BACKUP_EXCLUDE_TABLES.has(table));
+
   const out = {
+    // Config-oriented export (legacy top-level fields for older importers)
     settings: await exportSettings(),
     providerConnections: db.all(`SELECT * FROM providerConnections`).map((r) => ({ ...parseJson(r.data, {}), id: r.id, provider: r.provider, authType: r.authType, name: r.name, email: r.email, priority: r.priority, isActive: r.isActive === 1, createdAt: r.createdAt, updatedAt: r.updatedAt })),
     providerNodes: db.all(`SELECT * FROM providerNodes`).map((r) => ({ ...parseJson(r.data, {}), id: r.id, type: r.type, name: r.name, createdAt: r.createdAt, updatedAt: r.updatedAt })),
@@ -98,7 +110,10 @@ export async function exportDb() {
     customModels: [],
     mitmAlias: {},
     pricing: {},
-    tables: Object.fromEntries(Object.keys(TABLES).map((table) => [table, db.all(`SELECT * FROM "${table}"`)])),
+    // Modern path: only config tables (no usage/request dump)
+    tables: Object.fromEntries(tableNames.map((table) => [table, db.all(`SELECT * FROM "${table}"`)])),
+    // Hint for UI / future full-export option
+    excludedTables: [...BACKUP_EXCLUDE_TABLES],
   };
 
   for (const r of db.all(`SELECT key, value FROM kv WHERE scope = 'modelAliases'`)) out.modelAliases[r.key] = parseJson(r.value);

package/src/lib/oauth/services/bulkImportBrowserEngine.js

@@ -1,3 +1,4 @@
+import { createHash } from "node:crypto";
 import { createRequire } from "node:module";
 
 const requireFromHere = createRequire(import.meta.url);
@@ -50,11 +51,83 @@ function getStealthPlatformProfile() {
   };
 }
 
+/**
+ * Seeded fingerprint so each account/session looks like a different real desktop
+ * instead of the same 900x700 + identical navigator.* cluster (Tencent risk signal).
+ * WebGL stays OS-native (spoofing Mac GPU on Linux UA is worse).
+ *
+ * @param {string|number} [seed]
+ * @returns {{
+ *   viewport: { width: number, height: number },
+ *   deviceScaleFactor: number,
+ *   hardwareConcurrency: number,
+ *   deviceMemory: number,
+ *   maxTouchPoints: number,
+ *   screen: { width: number, height: number, availWidth: number, availHeight: number, colorDepth: number, pixelDepth: number },
+ *   seed: string,
+ * }}
+ */
+export function buildAccountFingerprint(seed) {
+  // Deterministic byte stream from seed (stable retry of same account = same fingerprint).
+  let buf = createHash("sha256").update(String(seed ?? `${Date.now()}-${Math.random()}`)).digest();
+  let i = 0;
+  const nextByte = () => {
+    if (i >= buf.length) {
+      buf = createHash("sha256").update(buf).digest();
+      i = 0;
+    }
+    return buf[i++];
+  };
+  const next = () => nextByte() / 256;
+  const pick = (arr) => arr[Math.floor(next() * arr.length) % arr.length];
+
+  // Common real desktop resolutions (avoid Playwright default 900x700 bot shape).
+  const base = pick([
+    { width: 1366, height: 768 },
+    { width: 1440, height: 900 },
+    { width: 1536, height: 864 },
+    { width: 1920, height: 1080 },
+    { width: 1280, height: 800 },
+    { width: 1600, height: 900 },
+    { width: 1280, height: 720 },
+    { width: 1680, height: 1050 },
+    { width: 2560, height: 1440 },
+  ]);
+  // Tiny noise so two accounts with same base size still differ slightly.
+  const width = base.width - (nextByte() % 17);
+  const height = base.height - (nextByte() % 13);
+  const taskbar = pick([0, 30, 40, 48]);
+  const colorDepth = pick([24, 30, 32]);
+  const hardwareConcurrency = pick([4, 6, 8, 8, 12, 16]);
+  const deviceMemory = pick([4, 8, 8, 16]);
+  const deviceScaleFactor = pick([1, 1, 1.25, 1.5, 2]);
+
+  return {
+    seed: String(seed ?? ""),
+    viewport: { width, height },
+    deviceScaleFactor,
+    hardwareConcurrency,
+    deviceMemory,
+    maxTouchPoints: 0,
+    screen: {
+      width,
+      height,
+      availWidth: width,
+      availHeight: Math.max(height - taskbar, Math.floor(height * 0.92)),
+      colorDepth,
+      pixelDepth: colorDepth,
+    },
+  };
+}
+
 function buildStealthInitScript(overrides = {}) {
   const p = getStealthPlatformProfile();
   const languages = Array.isArray(overrides.languages) && overrides.languages.length
     ? overrides.languages
     : p.languages;
+  const fp = overrides.fingerprint && typeof overrides.fingerprint === "object"
+    ? overrides.fingerprint
+    : null;
   // Inject as JSON so quotes in renderer strings stay safe.
   return `
   (() => {
@@ -62,6 +135,10 @@ function buildStealthInitScript(overrides = {}) {
       languages,
       webglVendor: p.webglVendor,
       webglRenderer: p.webglRenderer,
+      hardwareConcurrency: fp?.hardwareConcurrency ?? null,
+      deviceMemory: fp?.deviceMemory ?? null,
+      maxTouchPoints: fp?.maxTouchPoints ?? null,
+      screen: fp?.screen ?? null,
     })};
     try {
       Object.defineProperty(navigator, 'webdriver', { get: () => undefined });
@@ -69,6 +146,31 @@ function buildStealthInitScript(overrides = {}) {
     try {
       Object.defineProperty(navigator, 'languages', { get: () => profile.languages.slice() });
     } catch {}
+    try {
+      if (typeof profile.hardwareConcurrency === 'number') {
+        Object.defineProperty(navigator, 'hardwareConcurrency', { get: () => profile.hardwareConcurrency });
+      }
+    } catch {}
+    try {
+      if (typeof profile.deviceMemory === 'number') {
+        Object.defineProperty(navigator, 'deviceMemory', { get: () => profile.deviceMemory });
+      }
+    } catch {}
+    try {
+      if (typeof profile.maxTouchPoints === 'number') {
+        Object.defineProperty(navigator, 'maxTouchPoints', { get: () => profile.maxTouchPoints });
+      }
+    } catch {}
+    try {
+      if (profile.screen && typeof profile.screen === 'object') {
+        const s = profile.screen;
+        for (const key of ['width', 'height', 'availWidth', 'availHeight', 'colorDepth', 'pixelDepth']) {
+          if (typeof s[key] === 'number') {
+            try { Object.defineProperty(screen, key, { get: () => s[key] }); } catch {}
+          }
+        }
+      }
+    } catch {}
     try {
       Object.defineProperty(navigator, 'plugins', {
         get: () => {
@@ -150,9 +252,9 @@ function wrapBrowserWithStealth(browser) {
         languages = ["en-US", "en"];
       }
     }
-    // Playwright accepts locale/timezoneId/geolocation natively; languages is only for init script.
-    const { languages: _drop, ...pwOptions } = { ...options, languages };
-    const stealthScript = buildStealthInitScript({ languages });
+    // `fingerprint` / `languages` are ours — strip before Playwright newContext.
+    const { languages: _drop, fingerprint, ...pwOptions } = { ...options, languages };
+    const stealthScript = buildStealthInitScript({ languages, fingerprint });
     const ctx = await origNewContext(pwOptions);
     await ctx.addInitScript(stealthScript);
     return ctx;

package/src/lib/oauth/services/codebuddyCnBulkImportManager.js

@@ -278,6 +278,8 @@ export class CodeBuddyCnBulkImportManager extends KiroBulkImportManager {
         phone: null,
         fiveSimOrderId: null,
         fiveSimActivationId: null,
+        // Unique Chromium fingerprint seed per account (viewport/HW/screen noise).
+        fingerprintSeed: randomUUID(),
         proxyUrl: null,
         abortController: new AbortController(),
         status: "queued",
@@ -355,9 +357,13 @@ export class CodeBuddyCnBulkImportManager extends KiroBulkImportManager {
       // Chromium-only stack: use zh-CN locale + HK/CN timezone so Tencent risk
       // scoring does not see EN-US browser on residential CN/HK egress (common
       // cause of 账号访问受限 right after OTP). Engine stays Playwright Chromium.
+      // Also apply a unique per-account fingerprint seed — sticky residential IP
+      // alone still clusters if every session shares the same 900x700 + HW profile.
+      if (!account.fingerprintSeed) account.fingerprintSeed = randomUUID();
       const freshContext = await createFreshContext(job.browser, account.proxyUrl, {
         profile: "codebuddy-cn",
         region: job.region || "hongkong",
+        fingerprintSeed: account.fingerprintSeed,
       });
       context = freshContext.context;
       const page = freshContext.page;

package/src/lib/oauth/services/kiroBulkImportManager.js

@@ -380,6 +380,8 @@ export { parsePlaywrightProxy };
  * @param {object} [opts]
  * @param {"default"|"codebuddy-cn"} [opts.profile]
  * @param {"hongkong"|"china"|string} [opts.region]  Used by codebuddy-cn profile
+ * @param {string|number} [opts.fingerprintSeed]  Per-account seed for viewport/HW fingerprint
+ * @param {boolean} [opts.randomizeFingerprint]   Force fingerprint even outside codebuddy-cn
  */
 export async function createFreshContext(browser, proxy, opts = {}) {
   let effectiveProxy = proxy;
@@ -398,6 +400,32 @@ export async function createFreshContext(browser, proxy, opts = {}) {
 
   const parsedProxy = parsePlaywrightProxy(effectiveProxy);
   const contextOptions = parsedProxy ? { proxy: parsedProxy } : {};
+
+  // Per-account Chromium fingerprint (viewport + navigator.* + screen).
+  // Sticky residential IP alone still clusters if every session is 900x700 + same HW.
+  const wantFingerprint =
+    opts.profile === "codebuddy-cn" ||
+    opts.randomizeFingerprint === true ||
+    opts.fingerprintSeed != null;
+  let fingerprint = null;
+  if (wantFingerprint) {
+    try {
+      const { buildAccountFingerprint } = await import("./bulkImportBrowserEngine.js");
+      fingerprint = buildAccountFingerprint(
+        opts.fingerprintSeed ?? randomUUID(),
+      );
+      contextOptions.viewport = { ...fingerprint.viewport };
+      contextOptions.deviceScaleFactor = fingerprint.deviceScaleFactor;
+      contextOptions.fingerprint = {
+        hardwareConcurrency: fingerprint.hardwareConcurrency,
+        deviceMemory: fingerprint.deviceMemory,
+        maxTouchPoints: fingerprint.maxTouchPoints,
+        screen: fingerprint.screen,
+      };
+    } catch {
+      fingerprint = null;
+    }
+  }
   if (!contextOptions.viewport) {
     contextOptions.viewport = { width: 900, height: 700 };
   }
@@ -426,6 +454,10 @@ export async function createFreshContext(browser, proxy, opts = {}) {
   if (opts.timezoneId) contextOptions.timezoneId = opts.timezoneId;
   if (opts.geolocation) contextOptions.geolocation = opts.geolocation;
   if (Array.isArray(opts.languages)) contextOptions.languages = opts.languages;
+  if (opts.viewport) contextOptions.viewport = opts.viewport;
+  if (typeof opts.deviceScaleFactor === "number") {
+    contextOptions.deviceScaleFactor = opts.deviceScaleFactor;
+  }
   if (opts.extraHTTPHeaders) {
     contextOptions.extraHTTPHeaders = {
       ...(contextOptions.extraHTTPHeaders || {}),

package/cli/app/.next-cli-build/static/chunks/app/(dashboard)/dashboard/profile/page-e95034d5b34bc360.js

@@ -1 +0,0 @@
-(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[3471],{52424:(e,t,s)=>{Promise.resolve().then(s.bind(s,64561))},64561:(e,t,s)=>{"use strict";s.r(t),s.d(t,{default:()=>p});var a=s(95155),r=s(12115),o=s(73321),l=s(35497),i=s(81127),n=s(21931),d=s(1620),c=s(31474),m=s(90620),x=s(93308),u=s(38202);function p(){let e=(0,o.useRouter)(),{theme:t,setTheme:s,isDark:p}=(0,d.D)(),[h,b]=(0,r.useState)("en"),[g,y]=(0,r.useState)(!1),[f,j]=(0,r.useState)(!1),[N,w]=(0,r.useState)(!1),[v,C]=(0,r.useState)({fallbackStrategy:"fill-first"}),[k,S]=(0,r.useState)(!0),[P,O]=(0,r.useState)({current:"",new:"",confirm:""}),[I,L]=(0,r.useState)({type:"",message:""}),[T,R]=(0,r.useState)(!1),[D,U]=(0,r.useState)(!1),[M,E]=(0,r.useState)({type:"",message:""}),[A,$]=(0,r.useState)({authMode:"password",oidcIssuerUrl:"",oidcClientId:"",oidcScopes:"openid profile email",oidcLoginLabel:"Sign in with OIDC"}),[q,F]=(0,r.useState)(""),[J,H]=(0,r.useState)({type:"",message:""}),[_,W]=(0,r.useState)(!1),[z,B]=(0,r.useState)(!1),[Z,K]=(0,r.useState)({type:"",message:""}),[Q,V]=(0,r.useState)("/api/auth/oidc/callback"),[G,Y]=(0,r.useState)(!1),X=(0,r.useRef)(null),[ee,et]=(0,r.useState)({outboundProxyEnabled:!1,outboundProxyUrl:"",outboundNoProxy:""}),[es,ea]=(0,r.useState)({type:"",message:""}),[er,eo]=(0,r.useState)(!1),[el,ei]=(0,r.useState)(!1);(0,r.useEffect)(()=>{b(function(){if("u"<typeof document)return"en";let e=document.cookie.split(";").find(e=>e.trim().startsWith(`${x.CL}=`)),t=e?decodeURIComponent(e.split("=")[1]):"en";return(0,x.QC)(t)}())},[g]),(0,r.useEffect)(()=>{fetch("/api/settings").then(e=>e.json()).then(e=>{C(e),$({authMode:e?.authMode||"password",oidcIssuerUrl:e?.oidcIssuerUrl||"",oidcClientId:e?.oidcClientId||"",oidcScopes:e?.oidcScopes||"openid profile email",oidcLoginLabel:e?.oidcLoginLabel||"Sign in with OIDC"}),F(""),(e?.authMode==="oidc"||e?.authMode==="both")&&Y(!0),et({outboundProxyEnabled:e?.outboundProxyEnabled===!0,outboundProxyUrl:e?.outboundProxyUrl||"",outboundNoProxy:e?.outboundNoProxy||""}),S(!1)}).catch(e=>{console.error("Failed to fetch settings:",e),S(!1)})},[]),(0,r.useEffect)(()=>{V(`${window.location.origin}/api/auth/oidc/callback`)},[]);let en=async e=>{if(e.preventDefault(),!0===v.outboundProxyEnabled){eo(!0),ea({type:"",message:""});try{let e=await fetch("/api/settings",{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify({outboundProxyUrl:ee.outboundProxyUrl,outboundNoProxy:ee.outboundNoProxy})}),t=await e.json();e.ok?(C(e=>({...e,...t})),ea({type:"success",message:"Proxy settings applied"})):ea({type:"error",message:t.error||"Failed to update proxy settings"})}catch(e){ea({type:"error",message:"An error occurred"})}finally{eo(!1)}}},ed=async()=>{if(!0!==v.outboundProxyEnabled)return;let e=(ee.outboundProxyUrl||"").trim();if(!e)return void ea({type:"error",message:"Please enter a Proxy URL to test"});ei(!0),ea({type:"",message:""});try{let t=await fetch("/api/settings/proxy-test",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({proxyUrl:e})}),s=await t.json();t.ok&&s?.ok?ea({type:"success",message:`Proxy test OK (${s.status}) in ${s.elapsedMs}ms`}):ea({type:"error",message:s?.error||"Proxy test failed"})}catch(e){ea({type:"error",message:"An error occurred"})}finally{ei(!1)}},ec=async e=>{eo(!0),ea({type:"",message:""});try{let t=await fetch("/api/settings",{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify({outboundProxyEnabled:e})}),s=await t.json();t.ok?(C(e=>({...e,...s})),et(e=>({...e,outboundProxyEnabled:s?.outboundProxyEnabled===!0})),ea({type:"success",message:e?"Proxy enabled":"Proxy disabled"})):ea({type:"error",message:s.error||"Failed to update proxy settings"})}catch(e){ea({type:"error",message:"An error occurred"})}finally{eo(!1)}},em=async e=>{if(e.preventDefault(),P.new!==P.confirm)return void L({type:"error",message:"Passwords do not match"});R(!0),L({type:"",message:""});try{let e=await fetch("/api/settings",{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify({currentPassword:P.current,newPassword:P.new})}),t=await e.json();e.ok?(L({type:"success",message:"Password updated successfully"}),O({current:"",new:"",confirm:""})):L({type:"error",message:t.error||"Failed to update password"})}catch(e){L({type:"error",message:"An error occurred"})}finally{R(!1)}},ex=async e=>{try{(await fetch("/api/settings",{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify({fallbackStrategy:e})})).ok&&C(t=>({...t,fallbackStrategy:e}))}catch(e){console.error("Failed to update settings:",e)}},eu=async e=>{try{(await fetch("/api/settings",{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify({responseCacheEnabled:e})})).ok&&C(t=>({...t,responseCacheEnabled:e}))}catch(e){console.error("Failed to update settings:",e)}},ep=async e=>{try{(await fetch("/api/settings",{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify(e)})).ok&&C(t=>({...t,...e}))}catch(e){console.error("Failed to update alert settings:",e)}},eh=async e=>{try{(await fetch("/api/settings",{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify({comboStrategy:e})})).ok&&C(t=>({...t,comboStrategy:e}))}catch(e){console.error("Failed to update combo strategy:",e)}},eb=async e=>{let t=parseInt(e);if(!isNaN(t)&&!(t<1))try{(await fetch("/api/settings",{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify({stickyRoundRobinLimit:t})})).ok&&C(e=>({...e,stickyRoundRobinLimit:t}))}catch(e){console.error("Failed to update sticky limit:",e)}},eg=async e=>{let t=parseInt(e);if(!isNaN(t)&&!(t<1))try{(await fetch("/api/settings",{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify({comboStickyRoundRobinLimit:t})})).ok&&C(e=>({...e,comboStickyRoundRobinLimit:t}))}catch(e){console.error("Failed to update combo sticky limit:",e)}},ey=async e=>{try{(await fetch("/api/settings",{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify({requireLogin:e})})).ok&&C(t=>({...t,requireLogin:e}))}catch(e){console.error("Failed to update require login:",e)}},ef=(e,t)=>{$(s=>({...s,[e]:t}))},ej=async(e=A.authMode||"password")=>{let t=A.oidcIssuerUrl.trim(),s=A.oidcClientId.trim(),a=A.oidcScopes.trim(),r=A.oidcLoginLabel.trim(),o=q.trim();if("password"!==e&&(!t||!s||!o)&&!v.oidcConfigured)return void H({type:"error",message:"Issuer URL, client ID, and client secret are required to enable OIDC."});W(!0),H({type:"",message:""}),K({type:"",message:""});try{let l={authMode:e,oidcIssuerUrl:t,oidcClientId:s,oidcScopes:a||"openid profile email",oidcLoginLabel:r||"Sign in with OIDC"};o&&(l.oidcClientSecret=o);let i=await fetch("/api/settings",{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify(l)}),n=await i.json();i.ok?(C(e=>({...e,...n})),$({authMode:n?.authMode||e,oidcIssuerUrl:n?.oidcIssuerUrl||t,oidcClientId:n?.oidcClientId||s,oidcScopes:n?.oidcScopes||a||"openid profile email",oidcLoginLabel:n?.oidcLoginLabel||r||"Sign in with OIDC"}),F(""),H({type:"success",message:"oidc"===e?"OIDC login enabled":"both"===e?"Password and OIDC login enabled":"OIDC settings saved"})):H({type:"error",message:n.error||"Failed to save OIDC settings"})}catch(e){H({type:"error",message:"An error occurred"})}finally{W(!1)}},eN=async()=>{let e=A.oidcIssuerUrl.trim(),t=A.oidcClientId.trim(),s=A.oidcScopes.trim(),a=q.trim();if(!e||!t)return void K({type:"error",message:"Issuer URL and client ID are required to test the connection."});B(!0),H({type:"",message:""}),K({type:"",message:""});try{let r=await fetch("/api/settings",{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify({authMode:A.authMode||v.authMode||"password",oidcIssuerUrl:e,oidcClientId:t,oidcScopes:s||"openid profile email",oidcLoginLabel:A.oidcLoginLabel.trim()||"Sign in with OIDC",...a?{oidcClientSecret:a}:{}})}),o=await r.json().catch(()=>({}));if(!r.ok)return void K({type:"error",message:o.error||"Failed to save OIDC settings before testing"});let l=await fetch("/api/auth/oidc/test",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({issuerUrl:o.oidcIssuerUrl||e,clientId:o.oidcClientId||t,scopes:o.oidcScopes||s||"openid profile email"})}),i=await l.json().catch(()=>({}));if(l.ok&&i?.ok){let e=i.clientSecretTested?!0===i.clientSecretValid?`Connection OK. Discovery loaded from ${i.issuerUrl}. Client secret validated too.`:`Connection OK. Discovery loaded from ${i.issuerUrl}. Client secret was not checked.`:`Connection OK. Discovery loaded from ${i.issuerUrl}.`;K({type:"success",message:e})}else K({type:"error",message:i.error||"OIDC connection test failed"})}catch(e){K({type:"error",message:"An error occurred"})}finally{B(!1)}},ew=async e=>{try{(await fetch("/api/settings",{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify({enableObservability:e})})).ok&&C(t=>({...t,enableObservability:e}))}catch(e){console.error("Failed to update enableObservability:",e)}},ev=async()=>{try{let e=await fetch("/api/settings");if(!e.ok)return;let t=await e.json();C(t)}catch(e){console.error("Failed to reload settings:",e)}},eC=async()=>{U(!0),E({type:"",message:""});try{let e=await fetch("/api/settings/database");if(!e.ok){let t=await e.json().catch(()=>({}));throw Error(t.error||"Failed to export database")}let t=await e.json(),s=JSON.stringify(t,null,2),a=new Blob([s],{type:"application/json"}),r=URL.createObjectURL(a),o=document.createElement("a"),l=new Date().toISOString().replace(/[.:]/g,"-");o.href=r,o.download=`zevairouter-backup-${l}.json`,document.body.appendChild(o),o.click(),document.body.removeChild(o),URL.revokeObjectURL(r),E({type:"success",message:"Database backup downloaded"})}catch(e){E({type:"error",message:e.message||"Failed to export database"})}finally{U(!1)}},ek=async e=>{let t=e.target.files?.[0];if(t){U(!0),E({type:"",message:""});try{let e=await t.text(),s=JSON.parse(e),a=await fetch("/api/settings/database",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(s)}),r=await a.json().catch(()=>({}));if(!a.ok)throw Error(r.error||"Failed to import database");await ev(),E({type:"success",message:"Database imported successfully"})}catch(e){E({type:"error",message:e.message||"Invalid backup file"})}finally{X.current&&(X.current.value=""),U(!1)}}},eS=!0===v.enableObservability,eP=async()=>{w(!0);try{await fetch("/api/version/shutdown",{method:"POST"})}catch(e){}w(!1),j(!1)},eO=async()=>{try{(await fetch("/api/auth/logout",{method:"POST"})).ok&&(e.push("/login"),e.refresh())}catch(e){console.error("Failed to logout:",e)}};return(0,a.jsxs)("div",{className:"max-w-2xl mx-auto px-4 sm:px-0",children:[(0,a.jsxs)("div",{className:"flex flex-col gap-6",children:[(0,a.jsxs)(l.Zp,{children:[(0,a.jsxs)("div",{className:"flex flex-col sm:flex-row sm:items-center sm:justify-between gap-4 mb-4",children:[(0,a.jsxs)("div",{className:"flex items-center gap-3 sm:gap-4",children:[(0,a.jsx)("div",{className:"size-10 sm:size-12 rounded-lg bg-green-500/10 text-green-500 flex items-center justify-center shrink-0",children:(0,a.jsx)("span",{className:"material-symbols-outlined text-xl sm:text-2xl",children:"computer"})}),(0,a.jsxs)("div",{children:[(0,a.jsx)("h2",{className:"text-lg sm:text-xl font-semibold",children:"Local Mode"}),(0,a.jsx)("p",{className:"text-sm text-text-muted",children:"Running on your machine"})]})]}),(0,a.jsx)("div",{className:"inline-flex p-1 rounded-lg bg-black/5 dark:bg-white/5 w-full sm:w-auto",children:["light","dark","system"].map(e=>(0,a.jsxs)("button",{type:"button",onClick:()=>s(e),className:(0,c.cn)("flex items-center justify-center gap-1 sm:gap-1.5 px-2 sm:px-3 py-1.5 rounded-md font-medium transition-all flex-1 sm:flex-initial",t===e?"bg-white dark:bg-white/10 text-text-main shadow-sm":"text-text-muted hover:text-text-main"),children:[(0,a.jsx)("span",{className:"material-symbols-outlined text-[18px]",children:"light"===e?"light_mode":"dark"===e?"dark_mode":"contrast"}),(0,a.jsx)("span",{className:"capitalize text-xs sm:text-sm",children:e})]},e))})]}),(0,a.jsxs)("div",{className:"flex flex-col gap-3 pt-4 border-t border-border",children:[(0,a.jsx)("div",{className:"flex flex-col sm:flex-row sm:items-center sm:justify-between p-3 rounded-lg bg-bg border border-border gap-2",children:(0,a.jsxs)("div",{children:[(0,a.jsx)("p",{className:"font-medium text-sm sm:text-base",children:"Database Location"}),(0,a.jsx)("p",{className:"text-xs sm:text-sm text-text-muted font-mono break-all",children:"~/.zevai/db/data.sqlite"})]})}),(0,a.jsxs)("div",{className:"flex flex-col sm:flex-row gap-2",children:[(0,a.jsx)(l.$n,{variant:"secondary",icon:"download",onClick:eC,loading:D,className:"w-full sm:w-auto",children:"Download Backup"}),(0,a.jsx)(l.$n,{variant:"outline",icon:"upload",onClick:()=>X.current?.click(),disabled:D,className:"w-full sm:w-auto",children:"Import Backup"}),(0,a.jsx)("input",{ref:X,type:"file",accept:"application/json,.json",className:"hidden",onChange:ek})]}),M.message&&(0,a.jsx)("p",{className:`text-sm ${"error"===M.type?"text-red-500":"text-green-600 dark:text-green-400"}`,children:M.message})]})]}),(0,a.jsxs)(l.Zp,{children:[(0,a.jsxs)("div",{className:"flex items-center gap-3 mb-4",children:[(0,a.jsx)("div",{className:"size-10 rounded-lg bg-blue-500/10 text-blue-500 flex items-center justify-center shrink-0",children:(0,a.jsx)("span",{className:"material-symbols-outlined text-[20px]",children:"language"})}),(0,a.jsx)("h3",{className:"text-base sm:text-lg font-semibold",children:"Language"})]}),(0,a.jsxs)("button",{onClick:()=>y(!0),className:"flex items-center justify-between w-full p-3 rounded-lg bg-bg border border-border hover:border-primary/50 transition-colors","data-i18n-skip":"true",children:[(0,a.jsx)("span",{className:"text-sm text-text-muted",children:"Display language"}),(0,a.jsx)("span",{className:"text-2xl",children:u.h[h]||"\uD83C\uDF10"})]})]}),(0,a.jsxs)(l.Zp,{children:[(0,a.jsxs)("div",{className:"flex items-center gap-3 mb-4",children:[(0,a.jsx)("div",{className:"p-2 rounded-lg bg-primary/10 text-primary shrink-0",children:(0,a.jsx)("span",{className:"material-symbols-outlined text-[20px]",children:"shield"})}),(0,a.jsx)("h3",{className:"text-base sm:text-lg font-semibold",children:"Security"})]}),(0,a.jsxs)("div",{className:"flex flex-col gap-4",children:[(0,a.jsxs)("div",{className:"flex items-start sm:items-center justify-between gap-4",children:[(0,a.jsxs)("div",{className:"flex-1 min-w-0",children:[(0,a.jsx)("p",{className:"font-medium text-sm sm:text-base",children:"Require login"}),(0,a.jsx)("p",{className:"text-xs sm:text-sm text-text-muted",children:"When ON, dashboard requires password. When OFF, access without login."})]}),(0,a.jsx)(l.lM,{checked:!0===v.requireLogin,onChange:()=>ey(!v.requireLogin),disabled:k})]}),!0===v.requireLogin&&(0,a.jsxs)("form",{onSubmit:em,className:"flex flex-col gap-4 pt-4 border-t border-border/50",children:[v.hasPassword&&(0,a.jsxs)("div",{className:"flex flex-col gap-2",children:[(0,a.jsx)("label",{className:"text-xs sm:text-sm font-medium",children:"Current Password"}),(0,a.jsx)(l.pd,{type:"password",placeholder:"Enter current password",value:P.current,onChange:e=>O({...P,current:e.target.value}),required:!0})]}),(0,a.jsxs)("div",{className:"grid grid-cols-1 sm:grid-cols-2 gap-4",children:[(0,a.jsxs)("div",{className:"flex flex-col gap-2",children:[(0,a.jsx)("label",{className:"text-xs sm:text-sm font-medium",children:"New Password"}),(0,a.jsx)(l.pd,{type:"password",placeholder:"Enter new password",value:P.new,onChange:e=>O({...P,new:e.target.value}),required:!0})]}),(0,a.jsxs)("div",{className:"flex flex-col gap-2",children:[(0,a.jsx)("label",{className:"text-xs sm:text-sm font-medium",children:"Confirm New Password"}),(0,a.jsx)(l.pd,{type:"password",placeholder:"Confirm new password",value:P.confirm,onChange:e=>O({...P,confirm:e.target.value}),required:!0})]})]}),I.message&&(0,a.jsx)("p",{className:`text-xs sm:text-sm ${"error"===I.type?"text-red-500":"text-green-500"}`,children:I.message}),(0,a.jsx)("div",{className:"pt-2",children:(0,a.jsx)(l.$n,{type:"submit",variant:"primary",loading:T,className:"w-full sm:w-auto",children:v.hasPassword?"Update Password":"Set Password"})})]})]})]}),(0,a.jsxs)(l.Zp,{children:[(0,a.jsxs)("button",{type:"button",onClick:()=>Y(e=>!e),className:"w-full flex items-center gap-3 text-left",children:[(0,a.jsx)("div",{className:"p-2 rounded-lg bg-indigo-500/10 text-indigo-500 shrink-0",children:(0,a.jsx)("span",{className:"material-symbols-outlined text-[20px]",children:"lock_open"})}),(0,a.jsxs)("div",{className:"flex-1 min-w-0",children:[(0,a.jsx)("h3",{className:"text-base sm:text-lg font-semibold",children:"OIDC Dashboard Login"}),(0,a.jsx)("p",{className:"text-xs text-text-muted",children:"oidc"===v.authMode?"OIDC active":"both"===v.authMode?"Password + OIDC active":"Optional SSO via Authentik/Keycloak/Google"})]}),(0,a.jsx)("span",{className:"material-symbols-outlined text-text-muted shrink-0",children:G?"expand_less":"expand_more"})]}),G&&(0,a.jsxs)("div",{className:"flex flex-col gap-4 mt-4",children:[(0,a.jsx)("p",{className:"text-xs sm:text-sm text-text-muted",children:"Use Authentik or any OIDC provider to sign in to the dashboard. You can enable password-only, OIDC-only, or both for the dashboard; model API access still uses API keys."}),(0,a.jsxs)("div",{className:"flex flex-col gap-2",children:[(0,a.jsx)("label",{className:"font-medium text-sm sm:text-base",children:"Auth Mode"}),(0,a.jsx)("div",{className:"grid grid-cols-1 sm:grid-cols-3 gap-2",children:[{value:"password",title:"Password only",desc:"Keep the legacy password login."},{value:"oidc",title:"OIDC only",desc:"Require OIDC for dashboard access."},{value:"both",title:"Both",desc:"Allow either password or OIDC."}].map(e=>{let t=A.authMode===e.value;return(0,a.jsxs)("button",{type:"button",onClick:()=>ef("authMode",e.value),className:(0,c.cn)("text-left rounded-lg border p-3 transition-colors",t?"border-primary bg-primary/5":"border-border bg-bg hover:bg-black/5 dark:hover:bg-white/5"),disabled:k||_,children:[(0,a.jsx)("p",{className:"font-medium text-sm sm:text-base",children:e.title}),(0,a.jsx)("p",{className:"text-xs sm:text-sm text-text-muted mt-1",children:e.desc})]},e.value)})})]}),(0,a.jsxs)("div",{className:"grid grid-cols-1 gap-4",children:[(0,a.jsxs)("div",{className:"flex flex-col gap-2",children:[(0,a.jsx)("label",{className:"font-medium text-sm sm:text-base",children:"Issuer URL"}),(0,a.jsx)(l.pd,{placeholder:"https://auth.example.com/application/o/zevairouter/",value:A.oidcIssuerUrl,onChange:e=>ef("oidcIssuerUrl",e.target.value),disabled:k||_})]}),(0,a.jsxs)("div",{className:"flex flex-col gap-2",children:[(0,a.jsx)("label",{className:"font-medium text-sm sm:text-base",children:"Client ID"}),(0,a.jsx)(l.pd,{placeholder:"zevairouter-dashboard",value:A.oidcClientId,onChange:e=>ef("oidcClientId",e.target.value),disabled:k||_})]}),(0,a.jsxs)("div",{className:"flex flex-col gap-2",children:[(0,a.jsx)("label",{className:"font-medium text-sm sm:text-base",children:"Client Secret"}),(0,a.jsx)(l.pd,{type:"password",placeholder:"Leave blank to keep existing secret",value:q,onChange:e=>F(e.target.value),disabled:k||_}),(0,a.jsx)("p",{className:"text-xs sm:text-sm text-text-muted",children:"This value is write-only after saving."})]}),(0,a.jsxs)("div",{className:"flex flex-col gap-2",children:[(0,a.jsx)("label",{className:"font-medium text-sm sm:text-base",children:"Scopes"}),(0,a.jsx)(l.pd,{placeholder:"openid profile email",value:A.oidcScopes,onChange:e=>ef("oidcScopes",e.target.value),disabled:k||_})]}),(0,a.jsxs)("div",{className:"flex flex-col gap-2",children:[(0,a.jsx)("label",{className:"font-medium text-sm sm:text-base",children:"Login Button Label"}),(0,a.jsx)(l.pd,{placeholder:"Sign in with OIDC",value:A.oidcLoginLabel,onChange:e=>ef("oidcLoginLabel",e.target.value),disabled:k||_})]})]}),(0,a.jsxs)("div",{className:"rounded-lg border border-border bg-bg p-3 text-xs sm:text-sm text-text-muted",children:[(0,a.jsx)("p",{className:"font-medium text-text-main mb-1",children:"Redirect URI"}),(0,a.jsx)("code",{className:"block break-all font-mono",children:Q})]}),(0,a.jsxs)("div",{className:"flex flex-col sm:flex-row gap-2 pt-2 border-t border-border/50",children:[(0,a.jsx)(l.$n,{type:"button",variant:"primary",loading:_,onClick:()=>ej(),className:"w-full sm:w-auto",children:"Save auth mode"}),(0,a.jsx)(l.$n,{type:"button",variant:"outline",loading:z,onClick:eN,className:"w-full sm:w-auto",children:"Test connection"})]}),Z.message&&(0,a.jsx)("p",{className:`text-xs sm:text-sm ${"error"===Z.type?"text-red-500":"text-green-500"}`,children:Z.message}),J.message&&(0,a.jsx)("p",{className:`text-xs sm:text-sm ${"error"===J.type?"text-red-500":"text-green-500"}`,children:J.message}),"oidc"===v.authMode&&(0,a.jsx)("p",{className:"text-xs sm:text-sm text-amber-600 dark:text-amber-400",children:"OIDC login is currently active. Password login is disabled until you switch back."}),"both"===v.authMode&&(0,a.jsx)("p",{className:"text-xs sm:text-sm text-amber-600 dark:text-amber-400",children:"Password and OIDC login are both active."})]})]}),(0,a.jsxs)(l.Zp,{children:[(0,a.jsxs)("div",{className:"flex items-center gap-3 mb-4",children:[(0,a.jsx)("div",{className:"p-2 rounded-lg bg-blue-500/10 text-blue-500 shrink-0",children:(0,a.jsx)("span",{className:"material-symbols-outlined text-[20px]",children:"route"})}),(0,a.jsx)("h3",{className:"text-base sm:text-lg font-semibold",children:"Routing Strategy"})]}),(0,a.jsxs)("div",{className:"flex flex-col gap-4",children:[(0,a.jsxs)("div",{className:"flex items-start sm:items-center justify-between gap-4",children:[(0,a.jsxs)("div",{className:"flex-1 min-w-0",children:[(0,a.jsx)("p",{className:"font-medium text-sm sm:text-base",children:"Round Robin"}),(0,a.jsx)("p",{className:"text-xs sm:text-sm text-text-muted",children:"Cycle through accounts to distribute load"})]}),(0,a.jsx)(l.lM,{checked:"round-robin"===v.fallbackStrategy,onChange:()=>ex("round-robin"===v.fallbackStrategy?"fill-first":"round-robin"),disabled:k})]}),"round-robin"===v.fallbackStrategy&&(0,a.jsxs)("div",{className:"flex items-start sm:items-center justify-between gap-4 pt-2 border-t border-border/50",children:[(0,a.jsxs)("div",{className:"flex-1 min-w-0",children:[(0,a.jsx)("p",{className:"font-medium text-sm sm:text-base",children:"Sticky Limit"}),(0,a.jsx)("p",{className:"text-xs sm:text-sm text-text-muted",children:"Calls per account before switching"})]}),(0,a.jsx)(l.pd,{type:"number",min:"1",max:"10",value:v.stickyRoundRobinLimit||3,onChange:e=>eb(e.target.value),disabled:k,className:"w-16 sm:w-20 text-center shrink-0"})]}),(0,a.jsxs)("div",{className:"flex items-start sm:items-center justify-between gap-4 pt-4 border-t border-border/50",children:[(0,a.jsxs)("div",{className:"flex-1 min-w-0",children:[(0,a.jsx)("p",{className:"font-medium text-sm sm:text-base",children:"Most Quota"}),(0,a.jsx)("p",{className:"text-xs sm:text-sm text-text-muted",children:"Pick the account with the most remaining quota (uses cached usage)"})]}),(0,a.jsx)(l.lM,{checked:"most-quota"===v.fallbackStrategy,onChange:()=>ex("most-quota"===v.fallbackStrategy?"fill-first":"most-quota"),disabled:k})]}),(0,a.jsxs)("div",{className:"flex items-start sm:items-center justify-between gap-4 pt-4 border-t border-border/50",children:[(0,a.jsxs)("div",{className:"flex-1 min-w-0",children:[(0,a.jsx)("p",{className:"font-medium text-sm sm:text-base",children:"Lowest Latency"}),(0,a.jsx)("p",{className:"text-xs sm:text-sm text-text-muted",children:"Route to the fastest account by recent avg response time"})]}),(0,a.jsx)(l.lM,{checked:"lowest-latency"===v.fallbackStrategy,onChange:()=>ex("lowest-latency"===v.fallbackStrategy?"fill-first":"lowest-latency"),disabled:k})]}),(0,a.jsxs)("div",{className:"flex items-start sm:items-center justify-between gap-4 pt-4 border-t border-border/50",children:[(0,a.jsxs)("div",{className:"flex-1 min-w-0",children:[(0,a.jsx)("p",{className:"font-medium text-sm sm:text-base",children:"Response Cache"}),(0,a.jsx)("p",{className:"text-xs sm:text-sm text-text-muted",children:"Serve identical non-streaming requests from memory (saves cost)"})]}),(0,a.jsx)(l.lM,{checked:!1!==v.responseCacheEnabled,onChange:()=>eu(!1===v.responseCacheEnabled),disabled:k})]}),(0,a.jsxs)("div",{className:"flex items-start sm:items-center justify-between gap-4 pt-4 border-t border-border/50",children:[(0,a.jsxs)("div",{className:"flex-1 min-w-0",children:[(0,a.jsx)("p",{className:"font-medium text-sm sm:text-base",children:"Webhook Alerts"}),(0,a.jsx)("p",{className:"text-xs sm:text-sm text-text-muted",children:"Notify on provider down / quota exhausted (Discord, Telegram, or generic webhook)"})]}),(0,a.jsx)(l.lM,{checked:!0===v.alertEnabled,onChange:()=>ep({alertEnabled:!0!==v.alertEnabled}),disabled:k})]}),!0===v.alertEnabled&&(0,a.jsxs)("div",{className:"flex flex-col gap-3 pt-2 border-t border-border/50",children:[(0,a.jsxs)("div",{children:[(0,a.jsx)("label",{className:"text-xs text-text-muted block mb-1",children:"Webhook URL"}),(0,a.jsx)(l.pd,{type:"url",placeholder:"https://discord.com/api/webhooks/… or https://api.telegram.org/bot<token>/sendMessage",defaultValue:v.alertWebhookUrl||"",onBlur:e=>ep({alertWebhookUrl:e.target.value.trim()}),disabled:k})]}),(0,a.jsxs)("div",{className:"flex gap-3",children:[(0,a.jsxs)("div",{className:"flex-1",children:[(0,a.jsx)("label",{className:"text-xs text-text-muted block mb-1",children:"Type"}),(0,a.jsxs)("select",{defaultValue:v.alertWebhookType||"discord",onChange:e=>ep({alertWebhookType:e.target.value}),disabled:k,className:"w-full px-2 py-1.5 text-sm bg-transparent border border-border rounded",children:[(0,a.jsx)("option",{value:"discord",children:"Discord"}),(0,a.jsx)("option",{value:"telegram",children:"Telegram"}),(0,a.jsx)("option",{value:"generic",children:"Generic JSON"})]})]}),"telegram"===v.alertWebhookType&&(0,a.jsxs)("div",{className:"flex-1",children:[(0,a.jsx)("label",{className:"text-xs text-text-muted block mb-1",children:"Telegram Chat ID"}),(0,a.jsx)(l.pd,{type:"text",placeholder:"-1001234567890",defaultValue:v.alertTelegramChatId||"",onBlur:e=>ep({alertTelegramChatId:e.target.value.trim()}),disabled:k})]})]})]}),(0,a.jsxs)("div",{className:"flex items-start sm:items-center justify-between gap-4 pt-4 border-t border-border/50",children:[(0,a.jsxs)("div",{className:"flex-1 min-w-0",children:[(0,a.jsx)("p",{className:"font-medium text-sm sm:text-base",children:"Combo Round Robin"}),(0,a.jsx)("p",{className:"text-xs sm:text-sm text-text-muted",children:"Cycle through providers in combos instead of always starting with first"})]}),(0,a.jsx)(l.lM,{checked:"round-robin"===v.comboStrategy,onChange:()=>eh("round-robin"===v.comboStrategy?"fallback":"round-robin"),disabled:k})]}),"round-robin"===v.comboStrategy&&(0,a.jsxs)("div",{className:"flex items-center justify-between pt-2 border-t border-border/50",children:[(0,a.jsxs)("div",{children:[(0,a.jsx)("p",{className:"font-medium",children:"Combo Sticky Limit"}),(0,a.jsx)("p",{className:"text-sm text-text-muted",children:"Calls per combo model before switching"})]}),(0,a.jsx)(l.pd,{type:"number",min:"1",max:"100",value:v.comboStickyRoundRobinLimit||1,onChange:e=>eg(e.target.value),disabled:k,className:"w-20 text-center"})]}),(0,a.jsxs)("p",{className:"text-xs text-text-muted italic pt-2 border-t border-border/50",children:["round-robin"===v.fallbackStrategy?`Currently distributing requests across all available accounts with ${v.stickyRoundRobinLimit||3} calls per account.`:"most-quota"===v.fallbackStrategy?"Currently routing to the account with the most remaining quota.":"lowest-latency"===v.fallbackStrategy?"Currently routing to the fastest account by recent avg latency.":"Currently using accounts in priority order (Fill First).","round-robin"===v.comboStrategy?` Combos rotate after ${v.comboStickyRoundRobinLimit||1} call${1===(v.comboStickyRoundRobinLimit||1)?"":"s"} per model.`:" Combos always start with their first model."]})]})]}),(0,a.jsxs)(l.Zp,{children:[(0,a.jsxs)("div",{className:"flex items-center gap-3 mb-4",children:[(0,a.jsx)("div",{className:"p-2 rounded-lg bg-purple-500/10 text-purple-500 shrink-0",children:(0,a.jsx)("span",{className:"material-symbols-outlined text-[20px]",children:"wifi"})}),(0,a.jsx)("h3",{className:"text-base sm:text-lg font-semibold",children:"Network"})]}),(0,a.jsxs)("div",{className:"flex flex-col gap-4",children:[(0,a.jsxs)("div",{className:"flex items-start sm:items-center justify-between gap-4",children:[(0,a.jsxs)("div",{className:"flex-1 min-w-0",children:[(0,a.jsx)("p",{className:"font-medium text-sm sm:text-base",children:"Outbound Proxy"}),(0,a.jsx)("p",{className:"text-xs sm:text-sm text-text-muted",children:"Enable proxy for OAuth + provider outbound requests."})]}),(0,a.jsx)(l.lM,{checked:!0===v.outboundProxyEnabled,onChange:()=>ec(!0!==v.outboundProxyEnabled),disabled:k||er})]}),!0===v.outboundProxyEnabled&&(0,a.jsxs)("form",{onSubmit:en,className:"flex flex-col gap-4 pt-2 border-t border-border/50",children:[(0,a.jsxs)("div",{className:"flex flex-col gap-2",children:[(0,a.jsx)("label",{className:"font-medium text-sm sm:text-base",children:"Proxy URL"}),(0,a.jsx)(l.pd,{placeholder:"http://127.0.0.1:7897",value:ee.outboundProxyUrl,onChange:e=>et(t=>({...t,outboundProxyUrl:e.target.value})),disabled:k||er}),(0,a.jsx)("p",{className:"text-xs sm:text-sm text-text-muted",children:"Leave empty to inherit existing env proxy (if any)."})]}),(0,a.jsxs)("div",{className:"flex flex-col gap-2 pt-2 border-t border-border/50",children:[(0,a.jsx)("label",{className:"font-medium text-sm sm:text-base",children:"No Proxy"}),(0,a.jsx)(l.pd,{placeholder:"localhost,127.0.0.1",value:ee.outboundNoProxy,onChange:e=>et(t=>({...t,outboundNoProxy:e.target.value})),disabled:k||er}),(0,a.jsx)("p",{className:"text-xs sm:text-sm text-text-muted",children:"Comma-separated hostnames/domains to bypass the proxy."})]}),(0,a.jsxs)("div",{className:"pt-2 border-t border-border/50 flex flex-col sm:flex-row items-stretch sm:items-center gap-2",children:[(0,a.jsx)(l.$n,{type:"button",variant:"secondary",loading:el,disabled:k||er,onClick:ed,className:"w-full sm:w-auto",children:"Test proxy URL"}),(0,a.jsx)(l.$n,{type:"submit",variant:"primary",loading:er,className:"w-full sm:w-auto",children:"Apply"})]})]}),es.message&&(0,a.jsx)("p",{className:`text-xs sm:text-sm ${"error"===es.type?"text-red-500":"text-green-500"} pt-2 border-t border-border/50`,children:es.message})]})]}),(0,a.jsxs)(l.Zp,{children:[(0,a.jsxs)("div",{className:"flex items-center gap-3 mb-4",children:[(0,a.jsx)("div",{className:"p-2 rounded-lg bg-orange-500/10 text-orange-500 shrink-0",children:(0,a.jsx)("span",{className:"material-symbols-outlined text-[20px]",children:"monitoring"})}),(0,a.jsx)("h3",{className:"text-base sm:text-lg font-semibold",children:"Observability"})]}),(0,a.jsxs)("div",{className:"flex items-start sm:items-center justify-between gap-4",children:[(0,a.jsxs)("div",{className:"flex-1 min-w-0",children:[(0,a.jsx)("p",{className:"font-medium text-sm sm:text-base",children:"Enable Observability"}),(0,a.jsx)("p",{className:"text-xs sm:text-sm text-text-muted",children:"Record request details for inspection in the logs view"})]}),(0,a.jsx)(l.lM,{checked:eS,onChange:ew,disabled:k})]})]}),(0,a.jsxs)("div",{className:"flex flex-col sm:flex-row gap-2",children:[(0,a.jsx)(l.$n,{variant:"outline",fullWidth:!0,icon:"power_settings_new",onClick:()=>j(!0),className:"text-red-500 border-red-200 hover:bg-red-50 hover:border-red-300",children:"Shutdown"}),(0,a.jsx)(l.$n,{variant:"outline",fullWidth:!0,icon:"logout",onClick:eO,children:"Logout"})]}),(0,a.jsxs)("div",{className:"text-center text-xs sm:text-sm text-text-muted py-4",children:[(0,a.jsxs)("p",{children:[m.vQ.name," v",m.vQ.version]}),(0,a.jsx)("p",{className:"mt-1",children:"Local Mode - All data stored on your machine"})]})]}),(0,a.jsx)(n.default,{hideTrigger:!0,isOpen:g,onClose:e=>{y(!1),b(e)}}),(0,a.jsx)(i.ConfirmModal,{isOpen:f,onClose:()=>j(!1),onConfirm:eP,title:"Close Proxy",message:"Are you sure you want to close the proxy server?",confirmText:"Close",cancelText:"Cancel",variant:"danger",loading:N})]})}}},e=>{e.O(0,[2574,3862,4343,85,5497,8441,3794,7358],()=>e(e.s=52424)),_N_E=e.O()}]);