fix: add trailing edge to scroll throttle

Ensures the chat scrolls to the bottom after streaming ends, even if
the last messages update arrives during the 150ms throttle window.

.gitignore

@@ -76,6 +76,3 @@ ai-models.json
 # local backups
 *.bak
 .gstack/
-
-# admin panel settings (contains secrets)
-data/

Dockerfile

@@ -61,9 +61,6 @@ COPY --from=builder /app/public ./public
 COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
 COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
 
-# Writable dir for admin panel settings (data/settings.json)
-RUN mkdir -p /app/data && chown nextjs:nodejs /app/data
-
 USER nextjs
 
 EXPOSE 3000

README.md

@@ -43,8 +43,6 @@ https://github.com/user-attachments/assets/9d60a3e8-4a1c-4b5e-acbb-26af2d3eabd1
     - [Deploy on Vercel](#deploy-on-vercel)
     - [Deploy on Cloudflare Workers](#deploy-on-cloudflare-workers)
   - [Multi-Provider Support](#multi-provider-support)
-    - [Server-Side Multi-Model Configuration](#server-side-multi-model-configuration)
-    - [Admin Panel](#admin-panel)
   - [How It Works](#how-it-works)
   - [Support \& Contact](#support--contact)
   - [FAQ](#faq)
@@ -65,24 +63,24 @@ Here are some example prompts and their generated diagrams:
   </tr>
   <tr>
     <td width="50%" valign="top">
-      <strong>RAG Technique Diagram</strong><br />
+      <strong>GCP architecture diagram</strong><br />
-      <p><strong>Prompt:</strong> Generate a RAG architecture diagram for **chat application**. Use connected diagram for data ingestion</p>
+      <p><strong>Prompt:</strong> Generate a GCP architecture diagram with **GCP icons**. In this diagram, users connect to a frontend hosted on an instance.</p>
-      <img src="./public/rag_prod.svg" alt="RAG Architecture Diagram" width="480" />
+      <img src="./public/gcp_demo.svg" alt="GCP Architecture Diagram" width="480" />
     </td>
     <td width="50%" valign="top">
-      <strong>Authentication using React and AWS</strong><br />
+      <strong>AWS architecture diagram</strong><br />
-      <p><strong>Prompt:</strong> Generate authentication process using React with **AWS**. Use Serverless architecture.</p>
+      <p><strong>Prompt:</strong> Generate a AWS architecture diagram with **AWS icons**. In this diagram, users connect to a frontend hosted on an instance.</p>
-      <img src="./public/auth.svg" alt="Authentication Architecture Diagram" width="480" />
+      <img src="./public/aws_demo.svg" alt="AWS Architecture Diagram" width="480" />
     </td>
   </tr>
   <tr>
     <td width="50%" valign="top">
-      <strong>Open Innovation</strong><br />
+      <strong>Azure architecture diagram</strong><br />
-      <p><strong>Prompt:</strong> Create visualization of Henry Chesbrough's Open Innovation model.</p>
+      <p><strong>Prompt:</strong> Generate a Azure architecture diagram with **Azure icons**. In this diagram, users connect to a frontend hosted on an instance.</p>
-      <img src="./public/inno.svg" alt="Open Innovation Diagram" width="480" />
+      <img src="./public/azure_demo.svg" alt="Azure Architecture Diagram" width="480" />
     </td>
     <td width="50%" valign="top">
-      <strong>Cat sketch</strong><br />
+      <strong>Cat sketch prompt</strong><br />
       <p><strong>Prompt:</strong> Draw a cute cat for me.</p>
       <img src="./public/cat_demo.svg" alt="Cat Drawing" width="240" />
     </td>
@@ -226,12 +224,6 @@ All providers except AWS Bedrock and OpenRouter support custom endpoints.
 
 Administrators can configure multiple server-side models that are available to all users without requiring personal API keys. Configure via `AI_MODELS_CONFIG` environment variable (JSON string) or `ai-models.json` file.
 
-### Admin Panel
-
-Set the `ADMIN_PASSWORD` environment variable and visit `/admin` to manage server settings (models, access codes, features, observability, quota) from a web panel instead of hand-editing `.env`.
-
-📖 **[Admin Panel Guide](./docs/en/admin-panel.md)** — setup, precedence rules, and notes.
-
 **Model Requirements**: This task requires strong model capabilities for generating long-form text with strict formatting constraints (draw.io XML). Recommended models include Claude Sonnet 4.5, GPT-5.1, Gemini 3 Pro, and DeepSeek V3.2/R1.
 
 Note that the `claude` series has been trained on draw.io diagrams with cloud architecture logos like AWS, Azure, GCP. So if you want to create cloud architecture diagrams, this is the best choice.

app/[lang]/about/cn/page.tsx

@@ -175,106 +175,92 @@ export default function AboutCN() {
                     </p>
 
                     <div className="space-y-8">
-                        {/* ResNet50 Architecture */}
+                        {/* Animated Transformer */}
                         <div className="text-center">
                             <h3 className="text-lg font-semibold text-gray-900 mb-2">
-                                ResNet50模型架构动画
+                                动画Transformer连接器
                             </h3>
                             <p className="text-gray-600 mb-4">
-                                <strong>Prompt:</strong> Give me an{" "}
+                                <strong>提示词：</strong> 给我一个带有
-                                <strong>animated</strong> architecture diagram
+                                <strong>动画连接器</strong>的Transformer架构图。
-                                of the ResNet50 model.
                             </p>
-                            <div className="bg-neutral-950 rounded-lg p-4 inline-block">
+                            <Image
-                                <Image
+                                src="/animated_connectors.svg"
-                                    src="/resnet50.svg"
+                                alt="带动画连接器的Transformer架构"
-                                    alt="ResNet50模型架构图"
+                                width={480}
-                                    width={480}
+                                height={360}
-                                    height={360}
+                                className="mx-auto"
-                                    className="mx-auto"
+                            />
-                                />
-                            </div>
                         </div>
 
-                        {/* Diagram Grid */}
+                        {/* Cloud Architecture Grid */}
                         <div className="grid md:grid-cols-2 gap-6">
                             <div className="text-center">
                                 <h3 className="text-lg font-semibold text-gray-900 mb-2">
-                                    RAG技术图
+                                    GCP架构图
                                 </h3>
                                 <p className="text-gray-600 text-sm mb-4">
-                                    <strong>Prompt:</strong> Generate a RAG
+                                    <strong>提示词：</strong> 使用
-                                    architecture diagram for{" "}
+                                    <strong>GCP图标</strong>
-                                    <strong>chat application</strong>. Use
+                                    生成一个GCP架构图。用户连接到托管在实例上的前端。
-                                    connected diagram for data ingestion
                                 </p>
-                                <div className="bg-neutral-950 rounded-lg p-4 flex items-center justify-center w-full h-[400px]">
+                                <Image
-                                    <Image
+                                    src="/gcp_demo.svg"
-                                        src="/rag_prod.svg"
+                                    alt="GCP架构图"
-                                        alt="RAG架构图"
+                                    width={400}
-                                        width={480}
+                                    height={300}
-                                        height={360}
+                                    className="mx-auto"
-                                        className="max-w-full max-h-full object-contain"
+                                />
-                                    />
-                                </div>
                             </div>
                             <div className="text-center">
                                 <h3 className="text-lg font-semibold text-gray-900 mb-2">
-                                    React和AWS认证流程
+                                    AWS架构图
                                 </h3>
                                 <p className="text-gray-600 text-sm mb-4">
-                                    <strong>Prompt:</strong> Generate
+                                    <strong>提示词：</strong> 使用
-                                    authentication process using React with{" "}
+                                    <strong>AWS图标</strong>
-                                    <strong>AWS</strong>. Use Serverless
+                                    生成一个AWS架构图。用户连接到托管在实例上的前端。
-                                    architecture.
                                 </p>
-                                <div className="bg-neutral-950 rounded-lg p-4 flex items-center justify-center w-full h-[400px]">
+                                <Image
-                                    <Image
+                                    src="/aws_demo.svg"
-                                        src="/auth.svg"
+                                    alt="AWS架构图"
-                                        alt="认证架构图"
+                                    width={400}
-                                        width={480}
+                                    height={300}
-                                        height={360}
+                                    className="mx-auto"
-                                        className="max-w-full max-h-full object-contain"
+                                />
-                                    />
-                                </div>
                             </div>
                             <div className="text-center">
                                 <h3 className="text-lg font-semibold text-gray-900 mb-2">
-                                    敏捷Scrum流程
+                                    Azure架构图
                                 </h3>
                                 <p className="text-gray-600 text-sm mb-4">
-                                    <strong>Prompt:</strong> Generate agile
+                                    <strong>提示词：</strong> 使用
-                                    scrum workflow diagram for software
+                                    <strong>Azure图标</strong>
-                                    development team.
+                                    生成一个Azure架构图。用户连接到托管在实例上的前端。
                                 </p>
-                                <div className="bg-neutral-950 rounded-lg p-4 flex items-center justify-center w-full h-[400px]">
+                                <Image
-                                    <Image
+                                    src="/azure_demo.svg"
-                                        src="/agile_scrum.svg"
+                                    alt="Azure架构图"
-                                        alt="敏捷Scrum流程图"
+                                    width={400}
-                                        width={480}
+                                    height={300}
-                                        height={360}
+                                    className="mx-auto"
-                                        className="max-w-full max-h-full object-contain"
+                                />
-                                    />
-                                </div>
                             </div>
                             <div className="text-center">
                                 <h3 className="text-lg font-semibold text-gray-900 mb-2">
-                                    开放式创新
+                                    猫咪素描
                                 </h3>
                                 <p className="text-gray-600 text-sm mb-4">
-                                    <strong>Prompt:</strong> Create
+                                    <strong>提示词：</strong>{" "}
-                                    visualization of Henry Chesbrough&apos;s
+                                    给我画一只可爱的猫。
-                                    Open Innovation model.
                                 </p>
-                                <div className="bg-neutral-950 rounded-lg p-4 flex items-center justify-center w-full h-[400px]">
+                                <Image
-                                    <Image
+                                    src="/cat_demo.svg"
-                                        src="/inno.svg"
+                                    alt="猫咪绘图"
-                                        alt="开放式创新图"
+                                    width={240}
-                                        width={480}
+                                    height={240}
-                                        height={360}
+                                    className="mx-auto"
-                                        className="max-w-full max-h-full object-contain"
+                                />
-                                    />
-                                </div>
                             </div>
                         </div>
                     </div>

app/[lang]/about/ja/page.tsx

@@ -168,106 +168,93 @@ export default function AboutJA() {
                     </p>
 
                     <div className="space-y-8">
-                        {/* ResNet50 Architecture */}
+                        {/* Animated Transformer */}
                         <div className="text-center">
                             <h3 className="text-lg font-semibold text-gray-900 mb-2">
-                                ResNet50モデルアーキテクチャアニメーション
+                                アニメーションTransformerコネクタ
                             </h3>
                             <p className="text-gray-600 mb-4">
-                                <strong>Prompt:</strong> Give me an{" "}
+                                <strong>プロンプト：</strong>{" "}
-                                <strong>animated</strong> architecture diagram
+                                <strong>アニメーションコネクタ</strong>
-                                of the ResNet50 model.
+                                付きのTransformerアーキテクチャ図を作成してください。
                             </p>
-                            <div className="bg-neutral-950 rounded-lg p-4 inline-block">
+                            <Image
-                                <Image
+                                src="/animated_connectors.svg"
-                                    src="/resnet50.svg"
+                                alt="アニメーションコネクタ付きTransformerアーキテクチャ"
-                                    alt="ResNet50モデルアーキテクチャ図"
+                                width={480}
-                                    width={480}
+                                height={360}
-                                    height={360}
+                                className="mx-auto"
-                                    className="mx-auto"
+                            />
-                                />
-                            </div>
                         </div>
 
-                        {/* Diagram Grid */}
+                        {/* Cloud Architecture Grid */}
                         <div className="grid md:grid-cols-2 gap-6">
                             <div className="text-center">
                                 <h3 className="text-lg font-semibold text-gray-900 mb-2">
-                                    RAG技術ダイアグラム
+                                    GCPアーキテクチャ図
                                 </h3>
                                 <p className="text-gray-600 text-sm mb-4">
-                                    <strong>Prompt:</strong> Generate a RAG
+                                    <strong>プロンプト：</strong>{" "}
-                                    architecture diagram for{" "}
+                                    <strong>GCPアイコン</strong>
-                                    <strong>chat application</strong>. Use
+                                    を使用してGCPアーキテクチャ図を生成してください。ユーザーがインスタンス上でホストされているフロントエンドに接続します。
-                                    connected diagram for data ingestion
                                 </p>
-                                <div className="bg-neutral-950 rounded-lg p-4 flex items-center justify-center w-full h-[400px]">
+                                <Image
-                                    <Image
+                                    src="/gcp_demo.svg"
-                                        src="/rag_prod.svg"
+                                    alt="GCPアーキテクチャ図"
-                                        alt="RAGアーキテクチャ図"
+                                    width={400}
-                                        width={480}
+                                    height={300}
-                                        height={360}
+                                    className="mx-auto"
-                                        className="max-w-full max-h-full object-contain"
+                                />
-                                    />
-                                </div>
                             </div>
                             <div className="text-center">
                                 <h3 className="text-lg font-semibold text-gray-900 mb-2">
-                                    ReactとAWSによる認証
+                                    AWSアーキテクチャ図
                                 </h3>
                                 <p className="text-gray-600 text-sm mb-4">
-                                    <strong>Prompt:</strong> Generate
+                                    <strong>プロンプト：</strong>{" "}
-                                    authentication process using React with{" "}
+                                    <strong>AWSアイコン</strong>
-                                    <strong>AWS</strong>. Use Serverless
+                                    を使用してAWSアーキテクチャ図を生成してください。ユーザーがインスタンス上でホストされているフロントエンドに接続します。
-                                    architecture.
                                 </p>
-                                <div className="bg-neutral-950 rounded-lg p-4 flex items-center justify-center w-full h-[400px]">
+                                <Image
-                                    <Image
+                                    src="/aws_demo.svg"
-                                        src="/auth.svg"
+                                    alt="AWSアーキテクチャ図"
-                                        alt="認証アーキテクチャ図"
+                                    width={400}
-                                        width={480}
+                                    height={300}
-                                        height={360}
+                                    className="mx-auto"
-                                        className="max-w-full max-h-full object-contain"
+                                />
-                                    />
-                                </div>
                             </div>
                             <div className="text-center">
                                 <h3 className="text-lg font-semibold text-gray-900 mb-2">
-                                    アジャイルスクラムプロセス
+                                    Azureアーキテクチャ図
                                 </h3>
                                 <p className="text-gray-600 text-sm mb-4">
-                                    <strong>Prompt:</strong> Generate agile
+                                    <strong>プロンプト：</strong>{" "}
-                                    scrum workflow diagram for software
+                                    <strong>Azureアイコン</strong>
-                                    development team.
+                                    を使用してAzureアーキテクチャ図を生成してください。ユーザーがインスタンス上でホストされているフロントエンドに接続します。
                                 </p>
-                                <div className="bg-neutral-950 rounded-lg p-4 flex items-center justify-center w-full h-[400px]">
+                                <Image
-                                    <Image
+                                    src="/azure_demo.svg"
-                                        src="/agile_scrum.svg"
+                                    alt="Azureアーキテクチャ図"
-                                        alt="アジャイルスクラム図"
+                                    width={400}
-                                        width={480}
+                                    height={300}
-                                        height={360}
+                                    className="mx-auto"
-                                        className="max-w-full max-h-full object-contain"
+                                />
-                                    />
-                                </div>
                             </div>
                             <div className="text-center">
                                 <h3 className="text-lg font-semibold text-gray-900 mb-2">
-                                    オープンイノベーション
+                                    猫のスケッチ
                                 </h3>
                                 <p className="text-gray-600 text-sm mb-4">
-                                    <strong>Prompt:</strong> Create
+                                    <strong>プロンプト：</strong>{" "}
-                                    visualization of Henry Chesbrough&apos;s
+                                    かわいい猫を描いてください。
-                                    Open Innovation model.
                                 </p>
-                                <div className="bg-neutral-950 rounded-lg p-4 flex items-center justify-center w-full h-[400px]">
+                                <Image
-                                    <Image
+                                    src="/cat_demo.svg"
-                                        src="/inno.svg"
+                                    alt="猫の絵"
-                                        alt="オープンイノベーション図"
+                                    width={240}
-                                        width={480}
+                                    height={240}
-                                        height={360}
+                                    className="mx-auto"
-                                        className="max-w-full max-h-full object-contain"
+                                />
-                                    />
-                                </div>
                             </div>
                         </div>
                     </div>

app/[lang]/about/page.tsx

@@ -182,106 +182,96 @@ export default function About() {
                     </p>
 
                     <div className="space-y-8">
-                        {/* ResNet50 Architecture */}
+                        {/* Animated Transformer */}
                         <div className="text-center">
                             <h3 className="text-lg font-semibold text-gray-900 mb-2">
-                                Animated ResNet50 Model Architecture
+                                Animated Transformer Connectors
                             </h3>
                             <p className="text-gray-600 mb-4">
                                 <strong>Prompt:</strong> Give me an{" "}
-                                <strong>animated</strong> architecture diagram
+                                <strong>animated connector</strong> diagram of
-                                of the ResNet50 model.
+                                transformer&apos;s architecture.
                             </p>
-                            <div className="bg-neutral-950 rounded-lg p-4 inline-block">
+                            <Image
-                                <Image
+                                src="/animated_connectors.svg"
-                                    src="/resnet50.svg"
+                                alt="Transformer Architecture with Animated Connectors"
-                                    alt="Architecture diagram for ResNet50 model"
+                                width={480}
-                                    width={480}
+                                height={360}
-                                    height={360}
+                                className="mx-auto"
-                                    className="mx-auto"
+                            />
-                                />
-                            </div>
                         </div>
 
-                        {/* Diagram Grid */}
+                        {/* Cloud Architecture Grid */}
                         <div className="grid md:grid-cols-2 gap-6">
                             <div className="text-center">
                                 <h3 className="text-lg font-semibold text-gray-900 mb-2">
-                                    RAG Technique Diagram
+                                    GCP Architecture Diagram
                                 </h3>
                                 <p className="text-gray-600 text-sm mb-4">
-                                    <strong>Prompt:</strong> Generate a RAG
+                                    <strong>Prompt:</strong> Generate a GCP
-                                    architecture diagram for{" "}
+                                    architecture diagram with{" "}
-                                    <strong>chat application</strong>. Use
+                                    <strong>GCP icons</strong>. Users connect to
-                                    connected diagram for data ingestion
+                                    a frontend hosted on an instance.
                                 </p>
-                                <div className="bg-neutral-950 rounded-lg p-4 flex items-center justify-center w-full h-[400px]">
+                                <Image
-                                    <Image
+                                    src="/gcp_demo.svg"
-                                        src="/rag_prod.svg"
+                                    alt="GCP Architecture Diagram"
-                                        alt="RAG Architecture Diagram"
+                                    width={400}
-                                        width={480}
+                                    height={300}
-                                        height={360}
+                                    className="mx-auto"
-                                        className="max-w-full max-h-full object-contain"
+                                />
-                                    />
-                                </div>
                             </div>
                             <div className="text-center">
                                 <h3 className="text-lg font-semibold text-gray-900 mb-2">
-                                    Authentication using React and AWS
+                                    AWS Architecture Diagram
                                 </h3>
                                 <p className="text-gray-600 text-sm mb-4">
-                                    <strong>Prompt:</strong> Generate
+                                    <strong>Prompt:</strong> Generate an AWS
-                                    authentication process using React with{" "}
+                                    architecture diagram with{" "}
-                                    <strong>AWS</strong>. Use Serverless
+                                    <strong>AWS icons</strong>. Users connect to
-                                    architecture.
+                                    a frontend hosted on an instance.
                                 </p>
-                                <div className="bg-neutral-950 rounded-lg p-4 flex items-center justify-center w-full h-[400px]">
+                                <Image
-                                    <Image
+                                    src="/aws_demo.svg"
-                                        src="/auth.svg"
+                                    alt="AWS Architecture Diagram"
-                                        alt="Authentication Architecture Diagram"
+                                    width={400}
-                                        width={480}
+                                    height={300}
-                                        height={360}
+                                    className="mx-auto"
-                                        className="max-w-full max-h-full object-contain"
+                                />
-                                    />
-                                </div>
                             </div>
                             <div className="text-center">
                                 <h3 className="text-lg font-semibold text-gray-900 mb-2">
-                                    Agile Scrum Process
+                                    Azure Architecture Diagram
                                 </h3>
                                 <p className="text-gray-600 text-sm mb-4">
-                                    <strong>Prompt:</strong> Generate agile
+                                    <strong>Prompt:</strong> Generate an Azure
-                                    scrum workflow diagram for software
+                                    architecture diagram with{" "}
-                                    development team.
+                                    <strong>Azure icons</strong>. Users connect
+                                    to a frontend hosted on an instance.
                                 </p>
-                                <div className="bg-neutral-950 rounded-lg p-4 flex items-center justify-center w-full h-[400px]">
+                                <Image
-                                    <Image
+                                    src="/azure_demo.svg"
-                                        src="/agile_scrum.svg"
+                                    alt="Azure Architecture Diagram"
-                                        alt="Agile Scrum Diagram"
+                                    width={400}
-                                        width={480}
+                                    height={300}
-                                        height={360}
+                                    className="mx-auto"
-                                        className="max-w-full max-h-full object-contain"
+                                />
-                                    />
-                                </div>
                             </div>
                             <div className="text-center">
                                 <h3 className="text-lg font-semibold text-gray-900 mb-2">
-                                    Open Innovation
+                                    Cat Sketch
                                 </h3>
                                 <p className="text-gray-600 text-sm mb-4">
-                                    <strong>Prompt:</strong> Create
+                                    <strong>Prompt:</strong> Draw a cute cat for
-                                    visualization of Henry Chesbrough&apos;s
+                                    me.
-                                    Open Innovation model.
                                 </p>
-                                <div className="bg-neutral-950 rounded-lg p-4 flex items-center justify-center w-full h-[400px]">
+                                <Image
-                                    <Image
+                                    src="/cat_demo.svg"
-                                        src="/inno.svg"
+                                    alt="Cat Drawing"
-                                        alt="Open Innovation Diagram"
+                                    width={240}
-                                        width={480}
+                                    height={240}
-                                        height={360}
+                                    className="mx-auto"
-                                        className="max-w-full max-h-full object-contain"
+                                />
-                                    />
-                                </div>
                             </div>
                         </div>
                     </div>

app/[lang]/admin/admin-shared.ts

@@ -1,65 +0,0 @@
-import { getApiEndpoint } from "@/lib/base-path"
-import type { ProviderName } from "@/lib/types/model-config"
-
-export const SESSION_PASSWORD_KEY = "next-ai-draw-io-admin-password"
-
-// ── Shared types ─────────────────────────────────────────────────────
-
-export type SecretValue = { isSet: true; hint: string }
-
-export function isSecretValue(v: unknown): v is SecretValue {
-    return typeof v === "object" && v !== null && "isSet" in v
-}
-
-export interface SettingState {
-    key: string
-    source: "file" | "env" | "default"
-    value: string | SecretValue | null
-}
-
-export type SettingsMap = Record<string, SettingState>
-
-// Editable text of a saved setting; secrets have none (write-only)
-export function savedTextOf(state: SettingState | undefined): string {
-    return state && !isSecretValue(state.value) ? (state.value ?? "") : ""
-}
-
-// Admin provider in client state. Secret fields hold either a masked
-// marker (unchanged) or a plaintext string (new value).
-export interface AdminProvider {
-    id: string
-    provider: ProviderName
-    name?: string
-    apiKey?: string | SecretValue
-    baseUrl?: string
-    awsAccessKeyId?: string | SecretValue
-    awsSecretAccessKey?: string | SecretValue
-    awsRegion?: string
-    vertexApiKey?: string | SecretValue
-    models: string[]
-    isDefault?: boolean
-}
-
-// Provider defined in AI_MODELS_CONFIG / ai-models.json — shown read-only
-export interface EnvProvider {
-    name: string
-    provider: ProviderName
-    models: string[]
-    isDefault: boolean
-}
-
-export async function adminFetch(path: string, pw: string, init?: RequestInit) {
-    const res = await fetch(getApiEndpoint(path), {
-        ...init,
-        headers: {
-            ...init?.headers,
-            "x-admin-password": pw,
-            ...(init?.body ? { "Content-Type": "application/json" } : {}),
-        },
-    })
-    const data = await res.json().catch(() => ({}))
-    if (!res.ok) {
-        throw new Error(data.error || `Request failed (${res.status})`)
-    }
-    return data
-}

app/[lang]/admin/models-section.tsx

@@ -1,609 +0,0 @@
-import {
-    AlertCircle,
-    Check,
-    Loader2,
-    Plus,
-    Star,
-    Trash2,
-    X,
-    Zap,
-} from "lucide-react"
-import { useState } from "react"
-import { ProviderCredentialsFields } from "@/components/provider-credentials-fields"
-import { ProviderLogo } from "@/components/provider-logo"
-import {
-    AlertDialog,
-    AlertDialogAction,
-    AlertDialogCancel,
-    AlertDialogContent,
-    AlertDialogDescription,
-    AlertDialogFooter,
-    AlertDialogHeader,
-    AlertDialogTitle,
-} from "@/components/ui/alert-dialog"
-import { Button } from "@/components/ui/button"
-import { Input } from "@/components/ui/input"
-import { Label } from "@/components/ui/label"
-import {
-    Select,
-    SelectContent,
-    SelectItem,
-    SelectTrigger,
-} from "@/components/ui/select"
-import { Switch } from "@/components/ui/switch"
-import { useDictionary } from "@/hooks/use-dictionary"
-import { formatMessage } from "@/lib/i18n/utils"
-import {
-    FIXED_CRED_PROVIDERS,
-    PROVIDER_INFO,
-    type ProviderName,
-    SUGGESTED_MODELS,
-} from "@/lib/types/model-config"
-import { cn } from "@/lib/utils"
-import {
-    type AdminProvider,
-    adminFetch,
-    type EnvProvider,
-} from "./admin-shared"
-import { SecretInput } from "./setting-field"
-
-// ── Models section (mirrors the user ModelConfigDialog) ──────────────
-
-function ProviderDetail({
-    provider,
-    disabled,
-    password,
-    onUpdate,
-    onDelete,
-}: {
-    provider: AdminProvider
-    disabled: boolean
-    password: string
-    onUpdate: (patch: Partial<AdminProvider>) => void
-    onDelete: () => void
-}) {
-    const dict = useDictionary()
-    const [modelInput, setModelInput] = useState("")
-    const [deleteOpen, setDeleteOpen] = useState(false)
-    const [testing, setTesting] = useState<string | null>(null)
-    const [testResults, setTestResults] = useState<
-        Record<string, { ok: boolean; message: string }>
-    >({})
-
-    const info = PROVIDER_INFO[provider.provider]
-    const suggestions = (SUGGESTED_MODELS[provider.provider] || []).filter(
-        (m) => !provider.models.includes(m),
-    )
-
-    const addModel = (modelId: string) => {
-        const trimmed = modelId.trim()
-        if (!trimmed || provider.models.includes(trimmed)) return
-        onUpdate({ models: [...provider.models, trimmed] })
-        setModelInput("")
-    }
-
-    const testModel = async (modelId: string) => {
-        setTesting(modelId)
-        try {
-            const data = await adminFetch("/api/admin/test-model", password, {
-                method: "POST",
-                body: JSON.stringify({ provider, modelId }),
-            })
-            setTestResults((prev) => ({
-                ...prev,
-                [modelId]: data.valid
-                    ? {
-                          ok: true,
-                          message: formatMessage(dict.admin.testOk, {
-                              ms: data.responseTime,
-                          }),
-                      }
-                    : {
-                          ok: false,
-                          message: data.error || dict.admin.testFailed,
-                      },
-            }))
-        } catch (err) {
-            setTestResults((prev) => ({
-                ...prev,
-                [modelId]: {
-                    ok: false,
-                    message:
-                        err instanceof Error
-                            ? err.message
-                            : dict.admin.testFailed,
-                },
-            }))
-        } finally {
-            setTesting(null)
-        }
-    }
-
-    return (
-        <div className="space-y-6">
-            <div className="flex items-center gap-3">
-                <div className="flex h-10 w-10 items-center justify-center rounded-lg bg-muted">
-                    <ProviderLogo
-                        provider={provider.provider}
-                        className="size-5"
-                    />
-                </div>
-                <div className="min-w-0 flex-1">
-                    <h3 className="font-semibold">{info.label}</h3>
-                    <p className="text-xs text-muted-foreground">
-                        {provider.models.length === 0
-                            ? dict.admin.noModelsConfigured
-                            : formatMessage(
-                                  provider.models.length === 1
-                                      ? dict.admin.modelCount
-                                      : dict.admin.modelCountPlural,
-                                  { count: provider.models.length },
-                              )}
-                    </p>
-                </div>
-                <label className="flex cursor-pointer items-center gap-1.5 text-xs text-muted-foreground">
-                    <Star
-                        className={cn(
-                            "h-3.5 w-3.5",
-                            provider.isDefault &&
-                                "fill-amber-400 text-amber-400",
-                        )}
-                        aria-hidden="true"
-                    />
-                    {dict.admin.default}
-                    <Switch
-                        checked={!!provider.isDefault}
-                        disabled={disabled}
-                        aria-label={dict.admin.setAsDefault}
-                        onCheckedChange={(checked) =>
-                            onUpdate({ isDefault: checked })
-                        }
-                    />
-                </label>
-                <Button
-                    type="button"
-                    variant="ghost"
-                    size="sm"
-                    disabled={disabled}
-                    className="text-destructive hover:bg-destructive/10 hover:text-destructive"
-                    onClick={() => setDeleteOpen(true)}
-                >
-                    <Trash2 className="mr-1.5 h-4 w-4" aria-hidden="true" />
-                    {dict.admin.delete}
-                </Button>
-            </div>
-
-            {/* Credentials (shared with the user ModelConfigDialog) */}
-            <ProviderCredentialsFields
-                provider={provider.provider}
-                name={provider.name}
-                baseUrl={provider.baseUrl}
-                awsRegion={provider.awsRegion}
-                disabled={disabled}
-                onChange={(field, value) => onUpdate({ [field]: value })}
-                renderSecret={({ field, id }) => (
-                    // Bare id keeps the shared component's <Label htmlFor={id}>
-                    // associated; only one ProviderDetail is mounted at a time.
-                    <SecretInput
-                        id={id}
-                        keepOnEmpty
-                        value={provider[field]}
-                        disabled={disabled}
-                        onChange={(v) => onUpdate({ [field]: v })}
-                    />
-                )}
-            />
-
-            {/* Models */}
-            <div>
-                <div className="mb-2 flex flex-wrap items-center justify-between gap-2">
-                    <Label className="text-xs font-medium uppercase tracking-wider text-muted-foreground">
-                        {dict.admin.models}
-                    </Label>
-                    <div className="flex items-center gap-1.5">
-                        <Input
-                            value={modelInput}
-                            disabled={disabled}
-                            placeholder={dict.admin.modelIdPlaceholder}
-                            spellCheck={false}
-                            className="h-8 w-48 font-mono text-xs"
-                            onChange={(e) => setModelInput(e.target.value)}
-                            onKeyDown={(e) => {
-                                if (e.key === "Enter") addModel(modelInput)
-                            }}
-                        />
-                        <Button
-                            type="button"
-                            variant="outline"
-                            size="sm"
-                            className="h-8"
-                            disabled={disabled || !modelInput.trim()}
-                            aria-label={dict.admin.addModel}
-                            onClick={() => addModel(modelInput)}
-                        >
-                            <Plus className="h-3.5 w-3.5" aria-hidden="true" />
-                        </Button>
-                        {suggestions.length > 0 && (
-                            <Select
-                                disabled={disabled}
-                                onValueChange={(v) => addModel(v)}
-                            >
-                                <SelectTrigger className="h-8 w-28 text-xs">
-                                    {dict.admin.suggested}
-                                </SelectTrigger>
-                                <SelectContent className="max-h-72">
-                                    {suggestions.map((m) => (
-                                        <SelectItem
-                                            key={m}
-                                            value={m}
-                                            className="font-mono text-xs"
-                                        >
-                                            {m}
-                                        </SelectItem>
-                                    ))}
-                                </SelectContent>
-                            </Select>
-                        )}
-                    </div>
-                </div>
-                <div className="overflow-hidden rounded-lg border">
-                    {provider.models.length === 0 ? (
-                        <p className="p-5 text-center text-sm text-muted-foreground">
-                            {dict.admin.addProviderToOfferModels}
-                        </p>
-                    ) : (
-                        <ul className="divide-y">
-                            {provider.models.map((modelId, index) => {
-                                const result = testResults[modelId]
-                                return (
-                                    <li
-                                        key={modelId}
-                                        className="flex items-center gap-2 px-3 py-2"
-                                    >
-                                        <span className="min-w-0 flex-1 truncate font-mono text-xs">
-                                            {modelId}
-                                            {provider.isDefault &&
-                                                index === 0 && (
-                                                    <span className="ml-2 rounded bg-amber-500/10 px-1.5 py-0.5 text-[10px] font-medium uppercase text-amber-600 dark:text-amber-400">
-                                                        {
-                                                            dict.admin
-                                                                .defaultModel
-                                                        }
-                                                    </span>
-                                                )}
-                                        </span>
-                                        {result && (
-                                            <span
-                                                className={cn(
-                                                    "flex items-center gap-1 text-xs",
-                                                    result.ok
-                                                        ? "text-green-600 dark:text-green-400"
-                                                        : "text-destructive",
-                                                )}
-                                            >
-                                                {result.ok ? (
-                                                    <Check
-                                                        className="h-3.5 w-3.5"
-                                                        aria-hidden="true"
-                                                    />
-                                                ) : (
-                                                    <AlertCircle
-                                                        className="h-3.5 w-3.5"
-                                                        aria-hidden="true"
-                                                    />
-                                                )}
-                                                <span className="max-w-48 truncate">
-                                                    {result.message}
-                                                </span>
-                                            </span>
-                                        )}
-                                        <Button
-                                            type="button"
-                                            variant="ghost"
-                                            size="sm"
-                                            className="h-7 px-2 text-xs"
-                                            disabled={
-                                                disabled || testing !== null
-                                            }
-                                            onClick={() =>
-                                                void testModel(modelId)
-                                            }
-                                        >
-                                            {testing === modelId ? (
-                                                <Loader2
-                                                    className="h-3.5 w-3.5 animate-spin motion-reduce:animate-none"
-                                                    aria-hidden="true"
-                                                />
-                                            ) : (
-                                                <Zap
-                                                    className="h-3.5 w-3.5"
-                                                    aria-hidden="true"
-                                                />
-                                            )}
-                                            <span className="ml-1">
-                                                {dict.admin.test}
-                                            </span>
-                                        </Button>
-                                        <Button
-                                            type="button"
-                                            variant="ghost"
-                                            size="icon"
-                                            className="h-7 w-7"
-                                            disabled={disabled}
-                                            aria-label={formatMessage(
-                                                dict.admin.removeModel,
-                                                { model: modelId },
-                                            )}
-                                            onClick={() =>
-                                                onUpdate({
-                                                    models: provider.models.filter(
-                                                        (m) => m !== modelId,
-                                                    ),
-                                                })
-                                            }
-                                        >
-                                            <X
-                                                className="h-3.5 w-3.5"
-                                                aria-hidden="true"
-                                            />
-                                        </Button>
-                                    </li>
-                                )
-                            })}
-                        </ul>
-                    )}
-                </div>
-            </div>
-
-            <AlertDialog open={deleteOpen} onOpenChange={setDeleteOpen}>
-                <AlertDialogContent>
-                    <AlertDialogHeader>
-                        <AlertDialogTitle>
-                            {formatMessage(dict.admin.deleteProviderTitle, {
-                                name: provider.name || info.label,
-                            })}
-                        </AlertDialogTitle>
-                        <AlertDialogDescription>
-                            {dict.admin.deleteProviderDesc}
-                        </AlertDialogDescription>
-                    </AlertDialogHeader>
-                    <AlertDialogFooter>
-                        <AlertDialogCancel>
-                            {dict.admin.cancel}
-                        </AlertDialogCancel>
-                        <AlertDialogAction
-                            className="bg-destructive text-destructive-foreground hover:bg-destructive/90"
-                            onClick={() => {
-                                setDeleteOpen(false)
-                                onDelete()
-                            }}
-                        >
-                            {dict.admin.delete}
-                        </AlertDialogAction>
-                    </AlertDialogFooter>
-                </AlertDialogContent>
-            </AlertDialog>
-        </div>
-    )
-}
-
-export function ModelsSection({
-    providers,
-    envProviders,
-    disabled,
-    password,
-    onChange,
-}: {
-    providers: AdminProvider[]
-    envProviders: EnvProvider[]
-    disabled: boolean
-    password: string
-    onChange: (providers: AdminProvider[]) => void
-}) {
-    const dict = useDictionary()
-    const [selectedId, setSelectedId] = useState<string | null>(
-        providers[0]?.id ?? null,
-    )
-    const selected = providers.find((p) => p.id === selectedId)
-    const selectedEnv = envProviders.find((p) => `env:${p.name}` === selectedId)
-
-    const addProvider = (provider: ProviderName) => {
-        const newProvider: AdminProvider = {
-            id: crypto.randomUUID(),
-            provider,
-            models: [],
-            isDefault: providers.length === 0,
-        }
-        onChange([...providers, newProvider])
-        setSelectedId(newProvider.id)
-    }
-
-    const updateProvider = (id: string, patch: Partial<AdminProvider>) => {
-        onChange(
-            providers.map((p) => {
-                if (p.id !== id) {
-                    // Only one default at a time
-                    return patch.isDefault ? { ...p, isDefault: false } : p
-                }
-                return { ...p, ...patch }
-            }),
-        )
-    }
-
-    const deleteProvider = (id: string) => {
-        const next = providers.filter((p) => p.id !== id)
-        onChange(next)
-        setSelectedId(next[0]?.id ?? null)
-    }
-
-    return (
-        <div className="flex min-h-72 flex-col sm:flex-row">
-            {/* Provider list */}
-            <div className="flex w-full shrink-0 flex-col border-b sm:w-52 sm:border-b-0 sm:border-r">
-                <div className="flex-1 space-y-1 p-2">
-                    {providers.length === 0 && envProviders.length === 0 && (
-                        <p className="px-2 py-6 text-center text-xs text-muted-foreground">
-                            {dict.admin.addProviderHint}
-                        </p>
-                    )}
-                    {envProviders.map((p) => (
-                        <button
-                            key={`env:${p.name}`}
-                            type="button"
-                            onClick={() => setSelectedId(`env:${p.name}`)}
-                            className={cn(
-                                "flex w-full items-center gap-2 rounded-md px-2.5 py-2 text-left text-sm hover:bg-muted/60 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring",
-                                selectedId === `env:${p.name}` &&
-                                    "bg-muted font-medium",
-                            )}
-                        >
-                            <ProviderLogo provider={p.provider} />
-                            <span className="min-w-0 flex-1 truncate">
-                                {p.name}
-                            </span>
-                            <span className="rounded bg-muted px-1 py-0.5 text-[10px] font-medium uppercase text-muted-foreground">
-                                {dict.admin.sourceEnv}
-                            </span>
-                            {p.isDefault && (
-                                <Star
-                                    className="h-3.5 w-3.5 shrink-0 fill-amber-400 text-amber-400"
-                                    aria-label={dict.admin.defaultProvider}
-                                />
-                            )}
-                        </button>
-                    ))}
-                    {providers.map((p) => (
-                        <button
-                            key={p.id}
-                            type="button"
-                            onClick={() => setSelectedId(p.id)}
-                            className={cn(
-                                "flex w-full items-center gap-2 rounded-md px-2.5 py-2 text-left text-sm hover:bg-muted/60 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring",
-                                selectedId === p.id && "bg-muted font-medium",
-                            )}
-                        >
-                            <ProviderLogo provider={p.provider} />
-                            <span className="min-w-0 flex-1 truncate">
-                                {p.name || PROVIDER_INFO[p.provider].label}
-                            </span>
-                            {p.isDefault && (
-                                <Star
-                                    className="h-3.5 w-3.5 shrink-0 fill-amber-400 text-amber-400"
-                                    aria-label={dict.admin.defaultProvider}
-                                />
-                            )}
-                        </button>
-                    ))}
-                </div>
-                <div className="border-t p-2">
-                    <Select
-                        disabled={disabled}
-                        onValueChange={(v) => addProvider(v as ProviderName)}
-                    >
-                        <SelectTrigger className="w-full">
-                            <Plus
-                                className="mr-1 h-4 w-4 text-muted-foreground"
-                                aria-hidden="true"
-                            />
-                            {dict.modelConfig.addProvider}
-                        </SelectTrigger>
-                        <SelectContent className="max-h-72">
-                            {(Object.keys(PROVIDER_INFO) as ProviderName[]).map(
-                                (p) => {
-                                    // Global-credential providers already in
-                                    // the env config can't be added here —
-                                    // panel credentials would override theirs
-                                    const envBlocked =
-                                        FIXED_CRED_PROVIDERS.includes(p) &&
-                                        envProviders.some(
-                                            (e) => e.provider === p,
-                                        )
-                                    return (
-                                        <SelectItem
-                                            key={p}
-                                            value={p}
-                                            disabled={envBlocked}
-                                        >
-                                            <div className="flex items-center gap-2">
-                                                <ProviderLogo provider={p} />
-                                                {PROVIDER_INFO[p].label}
-                                                {envBlocked && (
-                                                    <span className="text-xs text-muted-foreground">
-                                                        {
-                                                            dict.admin
-                                                                .managedViaEnv
-                                                        }
-                                                    </span>
-                                                )}
-                                            </div>
-                                        </SelectItem>
-                                    )
-                                },
-                            )}
-                        </SelectContent>
-                    </Select>
-                </div>
-            </div>
-
-            {/* Detail */}
-            <div className="min-w-0 flex-1 p-4">
-                {selected ? (
-                    <ProviderDetail
-                        key={selected.id}
-                        provider={selected}
-                        disabled={disabled}
-                        password={password}
-                        onUpdate={(patch) => updateProvider(selected.id, patch)}
-                        onDelete={() => deleteProvider(selected.id)}
-                    />
-                ) : selectedEnv ? (
-                    <div className="space-y-4">
-                        <div className="flex items-center gap-3">
-                            <div className="flex h-10 w-10 items-center justify-center rounded-lg bg-muted">
-                                <ProviderLogo
-                                    provider={selectedEnv.provider}
-                                    className="size-5"
-                                />
-                            </div>
-                            <div className="min-w-0 flex-1">
-                                <h3 className="font-semibold">
-                                    {selectedEnv.name}
-                                </h3>
-                                <p className="text-xs text-muted-foreground">
-                                    {dict.admin.envReadOnly}
-                                </p>
-                            </div>
-                        </div>
-                        <div className="overflow-hidden rounded-lg border">
-                            <ul className="divide-y">
-                                {selectedEnv.models.map((modelId, index) => (
-                                    <li
-                                        key={modelId}
-                                        className="flex items-center gap-2 px-3 py-2"
-                                    >
-                                        <span className="min-w-0 flex-1 truncate font-mono text-xs">
-                                            {modelId}
-                                            {selectedEnv.isDefault &&
-                                                index === 0 && (
-                                                    <span className="ml-2 rounded bg-amber-500/10 px-1.5 py-0.5 text-[10px] font-medium uppercase text-amber-600 dark:text-amber-400">
-                                                        {
-                                                            dict.admin
-                                                                .defaultModel
-                                                        }
-                                                    </span>
-                                                )}
-                                        </span>
-                                    </li>
-                                ))}
-                            </ul>
-                        </div>
-                    </div>
-                ) : (
-                    <p className="py-12 text-center text-sm text-muted-foreground">
-                        {dict.admin.selectProviderHint}
-                    </p>
-                )}
-            </div>
-        </div>
-    )
-}

app/[lang]/admin/page.tsx

@@ -1,610 +0,0 @@
-"use client"
-
-import {
-    AlertTriangle,
-    Check,
-    Loader2,
-    LockKeyhole,
-    ShieldCheck,
-} from "lucide-react"
-import { useCallback, useEffect, useState } from "react"
-import { Button } from "@/components/ui/button"
-import { Input } from "@/components/ui/input"
-import { Label } from "@/components/ui/label"
-import { Switch } from "@/components/ui/switch"
-import { useDictionary } from "@/hooks/use-dictionary"
-import {
-    SETTING_GROUPS,
-    SETTINGS_BY_GROUP,
-} from "@/lib/admin/settings-registry"
-import { getApiEndpoint } from "@/lib/base-path"
-import { formatMessage } from "@/lib/i18n/utils"
-import { cn } from "@/lib/utils"
-import {
-    type AdminProvider,
-    adminFetch,
-    type EnvProvider,
-    isSecretValue,
-    SESSION_PASSWORD_KEY,
-    type SettingState,
-    type SettingsMap,
-    savedTextOf,
-} from "./admin-shared"
-import { ModelsSection } from "./models-section"
-import { SettingField } from "./setting-field"
-
-// ── Page ─────────────────────────────────────────────────────────────
-
-const NAV_GROUP_IDS = ["models", ...SETTING_GROUPS.map((g) => g.id)]
-
-export default function AdminPage() {
-    const dict = useDictionary()
-    // Localized group title/description, keyed by group id
-    const groupText = (id: string) =>
-        (
-            dict.admin.groups as Record<
-                string,
-                { title: string; description: string } | undefined
-            >
-        )[id]
-    const navItems = NAV_GROUP_IDS.map((id) => ({
-        id,
-        title:
-            id === "models" ? dict.admin.models : (groupText(id)?.title ?? id),
-    }))
-    const [password, setPassword] = useState("")
-    const [authedPassword, setAuthedPassword] = useState<string | null>(null)
-    const [authError, setAuthError] = useState("")
-    const [authLoading, setAuthLoading] = useState(false)
-
-    const [writable, setWritable] = useState(true)
-
-    // Models section state
-    const [providers, setProviders] = useState<AdminProvider[]>([])
-    const [envProviders, setEnvProviders] = useState<EnvProvider[]>([])
-    const [savedProviders, setSavedProviders] = useState<string>("[]")
-    const providersDirty = JSON.stringify(providers) !== savedProviders
-
-    // General settings state
-    const [settings, setSettings] = useState<SettingsMap>({})
-    const [pending, setPending] = useState<Record<string, string | null>>({})
-    const [errors, setErrors] = useState<Record<string, string>>({})
-    const [enabledGroups, setEnabledGroups] = useState<Record<string, boolean>>(
-        {},
-    )
-
-    const [saving, setSaving] = useState(false)
-    const [saveMessage, setSaveMessage] = useState<{
-        ok: boolean
-        text: string
-    } | null>(null)
-    const [activeGroup, setActiveGroup] = useState("models")
-
-    const dirtyCount = Object.keys(pending).length + (providersDirty ? 1 : 0)
-
-    const applySettingsResponse = useCallback(
-        (data: { writable: boolean; settings: SettingState[] }) => {
-            setWritable(data.writable)
-            const map: SettingsMap = {}
-            for (const s of data.settings) map[s.key] = s
-            setSettings(map)
-            // Seed each toggle once from whether the group has configured
-            // values; don't stomp a user's explicit toggle on later saves
-            setEnabledGroups((prev) => {
-                const next = { ...prev }
-                for (const group of SETTING_GROUPS) {
-                    if (!group.toggleable || group.id in next) continue
-                    next[group.id] = !!SETTINGS_BY_GROUP.get(group.id)?.some(
-                        (d) => map[d.key]?.source !== "default",
-                    )
-                }
-                return next
-            })
-        },
-        [],
-    )
-
-    const applyProvidersResponse = useCallback(
-        (data: {
-            providers: AdminProvider[]
-            envProviders?: EnvProvider[]
-        }) => {
-            setProviders(data.providers)
-            setSavedProviders(JSON.stringify(data.providers))
-            setEnvProviders(data.envProviders ?? [])
-        },
-        [],
-    )
-
-    const login = useCallback(
-        async (pw: string) => {
-            setAuthLoading(true)
-            setAuthError("")
-            try {
-                const [settingsData, providersData] = await Promise.all([
-                    adminFetch("/api/admin/settings", pw),
-                    adminFetch("/api/admin/providers", pw),
-                ])
-                applySettingsResponse(settingsData)
-                applyProvidersResponse(providersData)
-                setAuthedPassword(pw)
-                sessionStorage.setItem(SESSION_PASSWORD_KEY, pw)
-            } catch (err) {
-                setAuthError(
-                    err instanceof Error ? err.message : dict.admin.loginFailed,
-                )
-            } finally {
-                setAuthLoading(false)
-            }
-        },
-        [applySettingsResponse, applyProvidersResponse, dict],
-    )
-
-    // Restore session on mount
-    useEffect(() => {
-        const stored = sessionStorage.getItem(SESSION_PASSWORD_KEY)
-        if (stored) void login(stored)
-    }, [login])
-
-    // Warn before leaving with unsaved changes
-    const hasDirty = dirtyCount > 0
-    useEffect(() => {
-        if (!hasDirty) return
-        const handler = (e: BeforeUnloadEvent) => {
-            e.preventDefault()
-            // Some browsers only show the prompt when returnValue is set
-            e.returnValue = ""
-        }
-        window.addEventListener("beforeunload", handler)
-        return () => window.removeEventListener("beforeunload", handler)
-    }, [hasDirty])
-
-    // Highlight the section currently in view in the sidebar
-    useEffect(() => {
-        if (!authedPassword) return
-        const observer = new IntersectionObserver(
-            (entries) => {
-                const visible = entries
-                    .filter((e) => e.isIntersecting)
-                    .sort(
-                        (a, b) =>
-                            a.boundingClientRect.top - b.boundingClientRect.top,
-                    )
-                if (visible[0]) setActiveGroup(visible[0].target.id)
-            },
-            { rootMargin: "-10% 0px -50% 0px" },
-        )
-        for (const id of NAV_GROUP_IDS) {
-            const el = document.getElementById(id)
-            if (el) observer.observe(el)
-        }
-        return () => observer.disconnect()
-    }, [authedPassword])
-
-    const handleChange = useCallback(
-        (key: string, value: string | null) => {
-            setSaveMessage(null)
-            setErrors((prev) => {
-                if (!(key in prev)) return prev
-                const next = { ...prev }
-                delete next[key]
-                return next
-            })
-            setPending((prev) => {
-                const state = settings[key]
-                const isRevert =
-                    value !== null &&
-                    state?.source === "file" &&
-                    !isSecretValue(state?.value) &&
-                    value === savedTextOf(state)
-                const isNoop =
-                    value === "" &&
-                    (!state || state.source !== "file") &&
-                    !isSecretValue(state?.value)
-                if (isRevert || isNoop) {
-                    const next = { ...prev }
-                    delete next[key]
-                    return next
-                }
-                return { ...prev, [key]: value === "" ? null : value }
-            })
-        },
-        [settings],
-    )
-
-    // Toggling a group off stages deletion of its saved values so the
-    // feature actually turns off on save; toggling on drops those deletions.
-    const handleGroupToggle = useCallback(
-        (groupId: string, enabled: boolean) => {
-            setSaveMessage(null)
-            setEnabledGroups((prev) => ({ ...prev, [groupId]: enabled }))
-            const keys = (SETTINGS_BY_GROUP.get(groupId) ?? []).map(
-                (d) => d.key,
-            )
-            setPending((prev) => {
-                const next = { ...prev }
-                for (const key of keys) {
-                    if (!enabled) {
-                        // Stage deletion only for values currently set
-                        if (settings[key]?.source !== "default")
-                            next[key] = null
-                    } else if (next[key] === null) {
-                        delete next[key]
-                    }
-                }
-                return next
-            })
-        },
-        [settings],
-    )
-
-    const handleSave = useCallback(async () => {
-        if (!authedPassword || dirtyCount === 0) return
-        setSaving(true)
-        setSaveMessage(null)
-        setErrors({})
-        try {
-            if (providersDirty) {
-                const data = await adminFetch(
-                    "/api/admin/providers",
-                    authedPassword,
-                    { method: "PUT", body: JSON.stringify({ providers }) },
-                )
-                applyProvidersResponse(data)
-            }
-            if (Object.keys(pending).length > 0) {
-                const res = await fetch(getApiEndpoint("/api/admin/settings"), {
-                    method: "PUT",
-                    headers: {
-                        "Content-Type": "application/json",
-                        "x-admin-password": authedPassword,
-                    },
-                    body: JSON.stringify({ values: pending }),
-                })
-                const data = await res.json().catch(() => ({}))
-                if (!res.ok) {
-                    // Per-field validation errors come back as {errors: {...}}
-                    if (data.errors) {
-                        setErrors(data.errors)
-                        const firstKey = Object.keys(data.errors)[0]
-                        document.getElementById(`setting-${firstKey}`)?.focus()
-                        throw new Error(dict.admin.invalidSettings)
-                    }
-                    throw new Error(
-                        data.error || `Request failed (${res.status})`,
-                    )
-                }
-                applySettingsResponse(data)
-                setPending({})
-            }
-            setSaveMessage({
-                ok: true,
-                text: dict.admin.saved,
-            })
-            setTimeout(() => setSaveMessage(null), 4000)
-        } catch (err) {
-            setSaveMessage({
-                ok: false,
-                text:
-                    err instanceof Error ? err.message : dict.admin.saveFailed,
-            })
-        } finally {
-            setSaving(false)
-        }
-    }, [
-        authedPassword,
-        pending,
-        providers,
-        providersDirty,
-        dirtyCount,
-        applySettingsResponse,
-        applyProvidersResponse,
-        dict,
-    ])
-
-    // ── Login screen ─────────────────────────────────────────────────
-    if (!authedPassword) {
-        return (
-            <div className="flex min-h-screen items-center justify-center bg-background p-4">
-                <form
-                    className="w-full max-w-sm space-y-4 rounded-lg border bg-card p-6 shadow-sm"
-                    onSubmit={(e) => {
-                        e.preventDefault()
-                        void login(password)
-                    }}
-                >
-                    <div className="flex items-center gap-2">
-                        <LockKeyhole
-                            className="h-5 w-5 text-muted-foreground"
-                            aria-hidden="true"
-                        />
-                        <h1 className="text-lg font-semibold">
-                            {dict.admin.title}
-                        </h1>
-                    </div>
-                    <p className="text-sm text-muted-foreground">
-                        {dict.admin.loginPrompt}
-                    </p>
-                    <div className="space-y-1.5">
-                        <Label htmlFor="admin-password">
-                            {dict.admin.password}
-                        </Label>
-                        <Input
-                            id="admin-password"
-                            name="admin-password"
-                            type="password"
-                            value={password}
-                            autoComplete="current-password"
-                            spellCheck={false}
-                            onChange={(e) => setPassword(e.target.value)}
-                        />
-                    </div>
-                    <p
-                        className={cn(
-                            "text-sm text-destructive",
-                            !authError && "sr-only",
-                        )}
-                        aria-live="polite"
-                    >
-                        {authError}
-                    </p>
-                    <Button
-                        type="submit"
-                        className="w-full"
-                        disabled={authLoading}
-                    >
-                        {authLoading ? (
-                            <>
-                                <Loader2
-                                    className="mr-2 h-4 w-4 animate-spin motion-reduce:animate-none"
-                                    aria-hidden="true"
-                                />
-                                {dict.admin.signingIn}
-                            </>
-                        ) : (
-                            dict.admin.signIn
-                        )}
-                    </Button>
-                </form>
-            </div>
-        )
-    }
-
-    // ── Settings screen ──────────────────────────────────────────────
-    return (
-        <div className="min-h-screen bg-background">
-            <header className="sticky top-0 z-20 border-b bg-background/95 backdrop-blur">
-                <div className="mx-auto flex max-w-6xl items-center justify-between px-4 py-3">
-                    <div className="flex items-center gap-2">
-                        <ShieldCheck
-                            className="h-5 w-5 text-primary"
-                            aria-hidden="true"
-                        />
-                        <h1 className="text-lg font-semibold">
-                            {dict.admin.title}
-                        </h1>
-                    </div>
-                    <p className="text-xs text-muted-foreground">
-                        {dict.admin.precedence}
-                    </p>
-                </div>
-            </header>
-
-            {!writable && (
-                <div className="border-b bg-amber-500/10">
-                    <div className="mx-auto flex max-w-6xl items-center gap-2 px-4 py-3 text-sm text-amber-700 dark:text-amber-400">
-                        <AlertTriangle
-                            className="h-4 w-4 shrink-0"
-                            aria-hidden="true"
-                        />
-                        {dict.admin.notWritable}
-                    </div>
-                </div>
-            )}
-
-            <div className="mx-auto flex max-w-6xl gap-8 px-4 py-6">
-                <nav
-                    aria-label={dict.admin.settingGroups}
-                    className="sticky top-20 hidden h-fit w-44 shrink-0 md:block"
-                >
-                    <ul className="space-y-1">
-                        {navItems.map((item) => (
-                            <li key={item.id}>
-                                <a
-                                    href={`#${item.id}`}
-                                    aria-current={
-                                        activeGroup === item.id
-                                            ? "true"
-                                            : undefined
-                                    }
-                                    className={cn(
-                                        "block rounded-md px-3 py-1.5 text-sm hover:bg-muted hover:text-foreground focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring",
-                                        activeGroup === item.id
-                                            ? "bg-muted font-medium text-foreground"
-                                            : "text-muted-foreground",
-                                    )}
-                                >
-                                    {item.title}
-                                </a>
-                            </li>
-                        ))}
-                    </ul>
-                </nav>
-
-                <main className="min-w-0 flex-1 pb-24">
-                    {/* Models section */}
-                    <section aria-labelledby="models" className="mb-10">
-                        <h2
-                            id="models"
-                            className="scroll-mt-20 text-base font-semibold"
-                        >
-                            {dict.admin.models}
-                        </h2>
-                        <p className="mb-3 mt-1 text-sm text-muted-foreground text-pretty">
-                            {dict.admin.modelsDescription}
-                        </p>
-                        <div className="overflow-hidden rounded-lg border bg-card">
-                            <ModelsSection
-                                providers={providers}
-                                envProviders={envProviders}
-                                disabled={!writable || saving}
-                                password={authedPassword}
-                                onChange={(next) => {
-                                    setSaveMessage(null)
-                                    setProviders(next)
-                                }}
-                            />
-                        </div>
-                    </section>
-
-                    {/* Registry-driven groups */}
-                    {SETTING_GROUPS.map((group) => {
-                        const defs = SETTINGS_BY_GROUP.get(group.id) ?? []
-                        const groupOff =
-                            group.toggleable && !enabledGroups[group.id]
-                        const fieldsDisabled = !writable || saving || !!groupOff
-                        const gt = groupText(group.id)
-                        const title = gt?.title ?? group.title
-                        return (
-                            <section
-                                key={group.id}
-                                aria-labelledby={group.id}
-                                className="mb-10"
-                            >
-                                <div className="flex items-center justify-between gap-4">
-                                    <h2
-                                        id={group.id}
-                                        className="scroll-mt-20 text-base font-semibold"
-                                    >
-                                        {title}
-                                    </h2>
-                                    {group.toggleable && (
-                                        <label
-                                            className={cn(
-                                                "flex cursor-pointer items-center gap-2 rounded-full border px-3 py-1.5 text-xs font-medium transition-colors motion-reduce:transition-none",
-                                                enabledGroups[group.id]
-                                                    ? "border-primary/30 bg-primary/5 text-primary"
-                                                    : "border-border bg-muted/50 text-muted-foreground hover:border-foreground/30 hover:text-foreground",
-                                            )}
-                                        >
-                                            {enabledGroups[group.id]
-                                                ? dict.admin.enabled
-                                                : dict.admin.disabled}
-                                            <Switch
-                                                checked={
-                                                    !!enabledGroups[group.id]
-                                                }
-                                                disabled={!writable || saving}
-                                                aria-label={formatMessage(
-                                                    dict.admin.enableGroup,
-                                                    { group: title },
-                                                )}
-                                                onCheckedChange={(checked) =>
-                                                    handleGroupToggle(
-                                                        group.id,
-                                                        checked,
-                                                    )
-                                                }
-                                            />
-                                        </label>
-                                    )}
-                                </div>
-                                <p className="mb-3 mt-1 text-sm text-muted-foreground text-pretty">
-                                    {gt?.description ?? group.description}
-                                </p>
-                                <div
-                                    className={cn(
-                                        "rounded-lg border bg-card px-4",
-                                        groupOff &&
-                                            "pointer-events-none opacity-50",
-                                    )}
-                                >
-                                    {defs.map((def) => (
-                                        <SettingField
-                                            key={def.key}
-                                            def={def}
-                                            state={settings[def.key]}
-                                            pendingValue={pending[def.key]}
-                                            error={errors[def.key]}
-                                            disabled={fieldsDisabled}
-                                            onChange={(v) =>
-                                                handleChange(def.key, v)
-                                            }
-                                        />
-                                    ))}
-                                </div>
-                            </section>
-                        )
-                    })}
-                </main>
-            </div>
-
-            {/* Always-mounted live region so save results are announced */}
-            <p aria-live="polite" className="sr-only">
-                {saveMessage?.text ?? ""}
-            </p>
-
-            {(dirtyCount > 0 || saveMessage) && (
-                <div className="fixed inset-x-0 bottom-0 z-30 border-t bg-background/95 backdrop-blur">
-                    <div className="mx-auto flex max-w-6xl items-center justify-between gap-4 px-4 py-3">
-                        <p
-                            className={cn(
-                                "flex min-w-0 items-center gap-1.5 truncate text-sm",
-                                saveMessage?.ok
-                                    ? "text-green-600 dark:text-green-400"
-                                    : saveMessage
-                                      ? "text-destructive"
-                                      : "text-muted-foreground",
-                            )}
-                        >
-                            {saveMessage?.ok && (
-                                <Check
-                                    className="h-4 w-4 shrink-0"
-                                    aria-hidden="true"
-                                />
-                            )}
-                            {saveMessage && !saveMessage.ok
-                                ? saveMessage.text
-                                : dirtyCount > 0
-                                  ? dict.admin.unsavedChanges
-                                  : saveMessage?.text}
-                        </p>
-                        {dirtyCount > 0 && (
-                            <div className="flex shrink-0 gap-2">
-                                <Button
-                                    type="button"
-                                    variant="outline"
-                                    disabled={saving}
-                                    onClick={() => {
-                                        setPending({})
-                                        setErrors({})
-                                        setProviders(JSON.parse(savedProviders))
-                                    }}
-                                >
-                                    {dict.admin.discard}
-                                </Button>
-                                <Button
-                                    type="button"
-                                    disabled={saving || !writable}
-                                    onClick={() => void handleSave()}
-                                >
-                                    {saving ? (
-                                        <>
-                                            <Loader2
-                                                className="mr-2 h-4 w-4 animate-spin motion-reduce:animate-none"
-                                                aria-hidden="true"
-                                            />
-                                            {dict.admin.saving}
-                                        </>
-                                    ) : (
-                                        dict.admin.saveChanges
-                                    )}
-                                </Button>
-                            </div>
-                        )}
-                    </div>
-                </div>
-            )}
-        </div>
-    )
-}

app/[lang]/admin/setting-field.tsx

@@ -1,312 +0,0 @@
-import { Eye, EyeOff, X } from "lucide-react"
-import { useState } from "react"
-import { Button } from "@/components/ui/button"
-import { Input } from "@/components/ui/input"
-import { Label } from "@/components/ui/label"
-import {
-    Select,
-    SelectContent,
-    SelectItem,
-    SelectTrigger,
-    SelectValue,
-} from "@/components/ui/select"
-import { Switch } from "@/components/ui/switch"
-import { useDictionary } from "@/hooks/use-dictionary"
-import type { SettingDef } from "@/lib/admin/settings-registry"
-import { formatMessage } from "@/lib/i18n/utils"
-import { cn } from "@/lib/utils"
-import {
-    isSecretValue,
-    type SecretValue,
-    type SettingState,
-    savedTextOf,
-} from "./admin-shared"
-
-// ── Small shared UI bits ─────────────────────────────────────────────
-
-export function SourceChip({ source }: { source: "file" | "env" | "default" }) {
-    const dict = useDictionary()
-    if (source === "default") return null
-    return (
-        <span
-            className={cn(
-                "rounded px-1.5 py-0.5 text-[10px] font-medium uppercase tracking-wide",
-                source === "file"
-                    ? "bg-primary/10 text-primary"
-                    : "bg-muted text-muted-foreground",
-            )}
-            title={
-                source === "file"
-                    ? dict.admin.sourceSavedTitle
-                    : dict.admin.sourceEnvTitle
-            }
-        >
-            {source === "file" ? dict.admin.sourceSaved : dict.admin.sourceEnv}
-        </span>
-    )
-}
-
-export function RestartBadge() {
-    const dict = useDictionary()
-    return (
-        <span className="rounded bg-amber-500/10 px-1.5 py-0.5 text-[10px] font-medium uppercase tracking-wide text-amber-600 dark:text-amber-400">
-            {dict.admin.restartRequired}
-        </span>
-    )
-}
-
-// Secret input: shows masked hint as placeholder, typing replaces.
-// With keepOnEmpty, clearing the field reverts to the stored value
-// ("keep") instead of deleting it — explicit deletion is via the X button.
-export function SecretInput({
-    id,
-    value,
-    disabled,
-    keepOnEmpty,
-    onChange,
-}: {
-    id: string
-    value: string | SecretValue | undefined
-    disabled?: boolean
-    keepOnEmpty?: boolean
-    onChange: (value: string | SecretValue) => void
-}) {
-    const dict = useDictionary()
-    const [show, setShow] = useState(false)
-    // The stored marker as it was at mount, to revert to on empty
-    const [original] = useState(value)
-    const hadStored = isSecretValue(original)
-    const text = typeof value === "string" ? value : ""
-    const placeholder = isSecretValue(value)
-        ? formatMessage(dict.admin.savedReplace, { hint: value.hint })
-        : dict.admin.notSet
-    const handleText = (t: string) => {
-        if (t === "" && keepOnEmpty && hadStored && original) {
-            onChange(original)
-        } else {
-            onChange(t)
-        }
-    }
-    return (
-        <div className="flex items-center gap-1">
-            <Input
-                id={id}
-                type={show ? "text" : "password"}
-                value={text}
-                disabled={disabled}
-                spellCheck={false}
-                autoComplete="off"
-                placeholder={placeholder}
-                className="h-9 font-mono text-xs"
-                onChange={(e) => handleText(e.target.value)}
-            />
-            <Button
-                type="button"
-                variant="ghost"
-                size="icon"
-                className="shrink-0"
-                aria-label={show ? dict.admin.hideValue : dict.admin.showValue}
-                onClick={() => setShow((s) => !s)}
-            >
-                {show ? (
-                    <EyeOff className="h-4 w-4" aria-hidden="true" />
-                ) : (
-                    <Eye className="h-4 w-4" aria-hidden="true" />
-                )}
-            </Button>
-            {keepOnEmpty && (hadStored || text) && !disabled && (
-                <Button
-                    type="button"
-                    variant="ghost"
-                    size="icon"
-                    className="shrink-0"
-                    aria-label={dict.admin.removeValue}
-                    title={dict.admin.removeValueTitle}
-                    onClick={() => onChange("")}
-                >
-                    <X className="h-4 w-4" aria-hidden="true" />
-                </Button>
-            )}
-        </div>
-    )
-}
-
-// ── General settings field (registry-driven) ─────────────────────────
-
-export function SettingField({
-    def,
-    state,
-    pendingValue,
-    error,
-    disabled,
-    onChange,
-}: {
-    def: SettingDef
-    state: SettingState | undefined
-    pendingValue: string | null | undefined
-    error?: string
-    disabled: boolean
-    onChange: (value: string | null) => void
-}) {
-    const dict = useDictionary()
-    const isDirty = pendingValue !== undefined
-    const source = state?.source ?? "default"
-    const currentValue = isDirty ? (pendingValue ?? "") : savedTextOf(state)
-    const secretState = state && isSecretValue(state.value) ? state.value : null
-
-    // Localized label/description keyed by env var name, falling back to the
-    // registry's English (the registry stays canonical for the server).
-    const t = (
-        dict.admin.settings as Record<
-            string,
-            { label?: string; description?: string } | undefined
-        >
-    )[def.key]
-    const label = t?.label ?? def.label
-    const description = t?.description ?? def.description
-
-    const inputId = `setting-${def.key}`
-    const errorId = `${inputId}-error`
-
-    let control: React.ReactNode
-    switch (def.type) {
-        case "boolean": {
-            // When unset, reflect the built-in runtime default so the toggle
-            // matches actual behavior (e.g. ALLOW_PRIVATE_URLS defaults on).
-            const effective =
-                currentValue !== "" ? currentValue : (def.default ?? "false")
-            // A saved boolean can be cleared back to its env/default value.
-            const canClear =
-                (isDirty && pendingValue !== null) || source === "file"
-            control = (
-                <div className="flex items-center gap-3">
-                    <Switch
-                        id={inputId}
-                        checked={effective === "true"}
-                        disabled={disabled}
-                        onCheckedChange={(checked) =>
-                            onChange(checked ? "true" : "false")
-                        }
-                    />
-                    {canClear && !disabled && (
-                        <Button
-                            type="button"
-                            variant="ghost"
-                            size="sm"
-                            className="h-7 px-2 text-xs text-muted-foreground"
-                            onClick={() => onChange(null)}
-                        >
-                            {dict.admin.resetToDefault}
-                        </Button>
-                    )}
-                </div>
-            )
-            break
-        }
-        case "enum":
-            control = (
-                <Select
-                    value={currentValue || undefined}
-                    disabled={disabled}
-                    onValueChange={onChange}
-                >
-                    <SelectTrigger id={inputId} className="w-full max-w-xs">
-                        <SelectValue placeholder={dict.admin.notSet} />
-                    </SelectTrigger>
-                    <SelectContent>
-                        {def.options?.map((opt) => (
-                            <SelectItem key={opt} value={opt}>
-                                {opt}
-                            </SelectItem>
-                        ))}
-                    </SelectContent>
-                </Select>
-            )
-            break
-        case "secret":
-            control = (
-                <div className="w-full max-w-md">
-                    <SecretInput
-                        id={inputId}
-                        value={
-                            isDirty
-                                ? (pendingValue ?? "")
-                                : (secretState ?? currentValue)
-                        }
-                        disabled={disabled}
-                        onChange={(v) =>
-                            onChange(typeof v === "string" ? v : "")
-                        }
-                    />
-                </div>
-            )
-            break
-        case "number":
-            control = (
-                <Input
-                    id={inputId}
-                    type="number"
-                    inputMode="numeric"
-                    min={def.min}
-                    max={def.max}
-                    value={currentValue}
-                    disabled={disabled}
-                    placeholder={def.placeholder ?? dict.admin.notSet}
-                    className="w-full max-w-xs tabular-nums"
-                    aria-invalid={!!error}
-                    aria-describedby={error ? errorId : undefined}
-                    onChange={(e) => onChange(e.target.value)}
-                />
-            )
-            break
-        default:
-            control = (
-                <Input
-                    id={inputId}
-                    type="text"
-                    value={currentValue}
-                    disabled={disabled}
-                    spellCheck={false}
-                    autoComplete="off"
-                    placeholder={def.placeholder ?? dict.admin.notSet}
-                    className="w-full max-w-md"
-                    aria-invalid={!!error}
-                    aria-describedby={error ? errorId : undefined}
-                    onChange={(e) => onChange(e.target.value)}
-                />
-            )
-    }
-
-    return (
-        <div className="border-b border-border/60 py-4 last:border-b-0">
-            <div className="mb-1.5 flex flex-wrap items-center gap-2">
-                <Label htmlFor={inputId} className="text-sm font-medium">
-                    {label}
-                </Label>
-                <SourceChip source={source} />
-                {def.restartRequired && <RestartBadge />}
-                {isDirty && (
-                    <span className="rounded bg-blue-500/10 px-1.5 py-0.5 text-[10px] font-medium uppercase tracking-wide text-blue-600 dark:text-blue-400">
-                        {dict.admin.modified}
-                    </span>
-                )}
-            </div>
-            {description && (
-                <p className="mb-2 max-w-prose text-xs text-muted-foreground">
-                    {description}
-                </p>
-            )}
-            {control}
-            <p
-                id={errorId}
-                className={cn(
-                    "text-xs text-destructive",
-                    error ? "mt-1.5" : "sr-only",
-                )}
-                aria-live="polite"
-            >
-                {error ?? ""}
-            </p>
-        </div>
-    )
-}

app/[lang]/page.tsx

@@ -10,8 +10,8 @@ import {
     ResizablePanelGroup,
 } from "@/components/ui/resizable"
 import { useDiagram } from "@/contexts/diagram-context"
-import { type DrawioTheme, isDrawioTheme } from "@/lib/drawio-themes"
 import { i18n, type Locale } from "@/lib/i18n/config"
+import { isIndexedDBUsable } from "@/lib/session-storage"
 
 export default function Home() {
     const {
@@ -27,11 +27,13 @@ export default function Home() {
     const currentLang = (pathname.split("/")[1] || i18n.defaultLocale) as Locale
     const [isMobile, setIsMobile] = useState(false)
     const [isChatVisible, setIsChatVisible] = useState(true)
-    const [drawioUi, setDrawioUi] = useState<DrawioTheme>("kennedy")
+    const [drawioUi, setDrawioUi] = useState<"min" | "sketch">("min")
     const [darkMode, setDarkMode] = useState(false)
     const [isLoaded, setIsLoaded] = useState(false)
     const [isDrawioReady, setIsDrawioReady] = useState(false)
     const [isElectron, setIsElectron] = useState(false)
+    const [canPersist, setCanPersist] = useState(false)
+    const [canPersistChecked, setCanPersistChecked] = useState(false)
     const [drawioBaseUrl, setDrawioBaseUrl] = useState(
         process.env.NEXT_PUBLIC_DRAWIO_BASE_URL || "https://embed.diagrams.net",
     )
@@ -54,7 +56,7 @@ export default function Home() {
         }
 
         const savedUi = localStorage.getItem("drawio-theme")
-        if (isDrawioTheme(savedUi)) {
+        if (savedUi === "min" || savedUi === "sketch") {
             setDrawioUi(savedUi)
         }
 
@@ -82,6 +84,11 @@ export default function Home() {
             setDrawioBaseUrl(`${window.location.origin}/drawio/index.html`)
         }
 
+        void (async () => {
+            const usable = await isIndexedDBUsable()
+            setCanPersist(usable)
+            setCanPersistChecked(true)
+        })()
         setIsLoaded(true)
     }, [pathname, router])
 
@@ -90,6 +97,13 @@ export default function Home() {
         onDrawioLoad()
     }, [onDrawioLoad])
 
+    const handleDrawioAutoSave = useCallback(
+        (data: { xml?: string }) => {
+            handleDiagramAutoSave(data)
+        },
+        [handleDiagramAutoSave],
+    )
+
     const handleDarkModeChange = () => {
         const newValue = !darkMode
         setDarkMode(newValue)
@@ -99,9 +113,10 @@ export default function Home() {
         resetDrawioReady()
     }
 
-    const handleDrawioUiChange = (theme: DrawioTheme) => {
+    const handleDrawioUiChange = () => {
-        localStorage.setItem("drawio-theme", theme)
+        const newUi = drawioUi === "min" ? "sketch" : "min"
-        setDrawioUi(theme)
+        localStorage.setItem("drawio-theme", newUi)
+        setDrawioUi(newUi)
         setIsDrawioReady(false)
         resetDrawioReady()
     }
@@ -172,7 +187,7 @@ export default function Home() {
                         }`}
                     >
                         <div className="h-full rounded-xl overflow-hidden shadow-soft-lg border border-border/30 relative">
-                            {isLoaded && (
+                            {isLoaded && canPersistChecked && (
                                 <div
                                     className={`h-full w-full ${isDrawioReady ? "" : "invisible absolute inset-0"}`}
                                 >
@@ -180,19 +195,28 @@ export default function Home() {
                                         key={`${drawioUi}-${darkMode}-${currentLang}-${isElectron}`}
                                         ref={drawioRef}
                                         autosave
-                                        onAutoSave={handleDiagramAutoSave}
+                                        onAutoSave={handleDrawioAutoSave}
                                         onExport={handleDiagramExport}
                                         onLoad={handleDrawioLoad}
                                         baseUrl={drawioBaseUrl}
+                                        configuration={
+                                            canPersist
+                                                ? { confirmExit: false }
+                                                : undefined
+                                        }
                                         urlParameters={{
                                             ui: drawioUi,
                                             spin: false,
                                             libraries: false,
+                                            // Disable modified tracking only when persistence is available
+                                            ...(canPersist && {
+                                                modified: false,
+                                                keepmodified: false,
+                                            }),
                                             saveAndExit: false,
                                             noSaveBtn: true,
                                             noExitBtn: true,
-                                            dark:
+                                            dark: darkMode,
-                                                darkMode || drawioUi === "dark",
                                             lang: currentLang,
                                             // Enable offline mode in Electron to disable external service calls
                                             ...(isElectron && {
@@ -240,7 +264,7 @@ export default function Home() {
                                 isVisible={isChatVisible}
                                 onToggleVisibility={toggleChatPanel}
                                 drawioUi={drawioUi}
-                                onDrawioUiChange={handleDrawioUiChange}
+                                onToggleDrawioUi={handleDrawioUiChange}
                                 darkMode={darkMode}
                                 onToggleDarkMode={handleDarkModeChange}
                                 isMobile={isMobile}

app/api/admin/providers/route.ts

@@ -1,89 +0,0 @@
-import { checkAdminAuth } from "@/lib/admin/auth"
-import {
-    AdminProvidersSchema,
-    deriveEnvUpdates,
-    loadAdminProviders,
-    maskAdminProviders,
-    mergeSecrets,
-    validateAdminProviders,
-} from "@/lib/admin/providers"
-import { isSettingsWritable, saveSettings } from "@/lib/admin/settings"
-import { loadEnvServerModelsConfig } from "@/lib/server-model-config"
-
-export const runtime = "nodejs"
-export const dynamic = "force-dynamic"
-
-async function payload() {
-    // Env-based providers (AI_MODELS_CONFIG / ai-models.json) are shown
-    // read-only in the panel; their credentials live in the environment
-    const envConfig = await loadEnvServerModelsConfig()
-    const adminProviders = loadAdminProviders()
-    // A panel default overrides any env default (matches the merge in
-    // loadRawServerModelsConfig), so env stars must reflect that
-    const adminHasDefault = adminProviders.some(
-        (p) => p.isDefault && p.models.length > 0,
-    )
-    return {
-        writable: isSettingsWritable(),
-        providers: maskAdminProviders(adminProviders),
-        envProviders:
-            envConfig?.providers.map((p) => ({
-                name: p.name,
-                provider: p.provider,
-                models: p.models,
-                isDefault: !!p.default && !adminHasDefault,
-            })) ?? [],
-    }
-}
-
-export async function GET(req: Request) {
-    const authError = checkAdminAuth(req)
-    if (authError) return authError
-    return Response.json(await payload())
-}
-
-export async function PUT(req: Request) {
-    const authError = checkAdminAuth(req)
-    if (authError) return authError
-
-    if (!isSettingsWritable()) {
-        return Response.json(
-            {
-                error: "Settings file is not writable on this deployment. Configure via environment variables instead.",
-            },
-            { status: 503 },
-        )
-    }
-
-    let body: unknown
-    try {
-        body = await req.json()
-    } catch {
-        return Response.json({ error: "Invalid JSON body" }, { status: 400 })
-    }
-
-    const parsed = AdminProvidersSchema.safeParse(
-        (body as { providers?: unknown })?.providers,
-    )
-    if (!parsed.success) {
-        return Response.json(
-            {
-                error: `Invalid providers: ${parsed.error.issues[0]?.message ?? "schema mismatch"}`,
-            },
-            { status: 400 },
-        )
-    }
-
-    const stored = loadAdminProviders()
-    const merged = mergeSecrets(parsed.data, stored)
-
-    const envConfig = await loadEnvServerModelsConfig()
-    const validationError = validateAdminProviders(merged, envConfig)
-    if (validationError) {
-        return Response.json({ error: validationError }, { status: 400 })
-    }
-
-    saveSettings(deriveEnvUpdates(merged, stored))
-
-    return Response.json(await payload())
-}

app/api/admin/settings/route.ts

@@ -1,126 +0,0 @@
-import { checkAdminAuth, maskSecret } from "@/lib/admin/auth"
-import {
-    getEnvFallback,
-    getValueSource,
-    isSettingsWritable,
-    loadSettings,
-    saveSettings,
-} from "@/lib/admin/settings"
-import {
-    SETTINGS_BY_KEY,
-    SETTINGS_REGISTRY,
-    type SettingDef,
-} from "@/lib/admin/settings-registry"
-
-export const runtime = "nodejs"
-export const dynamic = "force-dynamic"
-
-function serializeSettings() {
-    const fileValues = loadSettings()
-    return SETTINGS_REGISTRY.map((def) => {
-        const source = getValueSource(def.key)
-        const raw =
-            source === "file"
-                ? fileValues[def.key]
-                : (getEnvFallback(def.key) ?? null)
-        const value = def.type === "secret" && raw ? maskSecret(raw) : raw
-        return { key: def.key, source, value }
-    })
-}
-
-export async function GET(req: Request) {
-    const authError = checkAdminAuth(req)
-    if (authError) return authError
-
-    return Response.json({
-        writable: isSettingsWritable(),
-        settings: serializeSettings(),
-    })
-}
-
-function validateValue(def: SettingDef, value: string): string | null {
-    switch (def.type) {
-        case "number": {
-            const num = Number(value)
-            if (!Number.isFinite(num)) return "Must be a number"
-            if (def.min !== undefined && num < def.min)
-                return `Must be at least ${def.min}`
-            if (def.max !== undefined && num > def.max)
-                return `Must be at most ${def.max}`
-            return null
-        }
-        case "boolean":
-            return value === "true" || value === "false"
-                ? null
-                : 'Must be "true" or "false"'
-        case "enum":
-            return def.options?.includes(value)
-                ? null
-                : `Must be one of: ${def.options?.join(", ")}`
-        default:
-            return null
-    }
-}
-
-export async function PUT(req: Request) {
-    const authError = checkAdminAuth(req)
-    if (authError) return authError
-
-    if (!isSettingsWritable()) {
-        return Response.json(
-            {
-                error: "Settings file is not writable on this deployment. Configure via environment variables instead.",
-            },
-            { status: 503 },
-        )
-    }
-
-    let body: { values?: Record<string, unknown> }
-    try {
-        body = await req.json()
-    } catch {
-        return Response.json({ error: "Invalid JSON body" }, { status: 400 })
-    }
-    if (!body.values || typeof body.values !== "object") {
-        return Response.json(
-            { error: "Body must contain a values object" },
-            { status: 400 },
-        )
-    }
-
-    const updates: Record<string, string | null> = {}
-    const errors: Record<string, string> = {}
-
-    for (const [key, value] of Object.entries(body.values)) {
-        const def = SETTINGS_BY_KEY.get(key)
-        if (!def) {
-            errors[key] = "Unknown setting"
-            continue
-        }
-        if (value === null || value === "") {
-            updates[key] = null
-            continue
-        }
-        if (typeof value !== "string") {
-            errors[key] = "Value must be a string"
-            continue
-        }
-        const error = validateValue(def, value)
-        if (error) {
-            errors[key] = error
-            continue
-        }
-        updates[key] = value
-    }
-
-    if (Object.keys(errors).length > 0) {
-        return Response.json({ errors }, { status: 400 })
-    }
-
-    saveSettings(updates)
-
-    return Response.json({
-        writable: true,
-        settings: serializeSettings(),
-    })
-}

app/api/admin/test-model/route.ts

@@ -1,66 +0,0 @@
-import { POST as validateModel } from "@/app/api/validate-model/route"
-import { checkAdminAuth } from "@/lib/admin/auth"
-import {
-    AdminProviderSchema,
-    loadAdminProviders,
-    mergeSecrets,
-} from "@/lib/admin/providers"
-
-export const runtime = "nodejs"
-export const dynamic = "force-dynamic"
-
-// Test a model with the client's CURRENT provider state (which may be
-// unsaved). Secret fields arrive either as plaintext (newly typed) or as
-// masked {isSet} markers, which are resolved against settings.json — so
-// testing works both before and after saving.
-export async function POST(req: Request) {
-    const authError = checkAdminAuth(req)
-    if (authError) return authError
-
-    let body: { provider?: unknown; modelId?: string }
-    try {
-        body = await req.json()
-    } catch {
-        return Response.json({ error: "Invalid JSON body" }, { status: 400 })
-    }
-
-    const parsed = AdminProviderSchema.safeParse(body.provider)
-    if (!parsed.success || !body.modelId) {
-        return Response.json(
-            { valid: false, error: "Invalid provider or model" },
-            { status: 400 },
-        )
-    }
-
-    // SECURITY: a stored secret is only resolved from an {isSet} marker if
-    // the endpoint it would be sent to (provider + baseUrl) still matches
-    // the stored entry. Otherwise a tampered baseUrl could exfiltrate the
-    // stored key to an arbitrary host. Mismatches must re-supply plaintext.
-    const stored = loadAdminProviders().find((p) => p.id === parsed.data.id)
-    const sameEndpoint =
-        stored &&
-        stored.provider === parsed.data.provider &&
-        (stored.baseUrl ?? "") === (parsed.data.baseUrl ?? "") &&
-        (stored.awsRegion ?? "") === (parsed.data.awsRegion ?? "")
-    const [resolved] = mergeSecrets(
-        [parsed.data],
-        sameEndpoint && stored ? [stored] : [],
-    )
-
-    return validateModel(
-        new Request(new URL("/api/validate-model", req.url), {
-            method: "POST",
-            headers: { "Content-Type": "application/json" },
-            body: JSON.stringify({
-                provider: resolved.provider,
-                apiKey: resolved.apiKey,
-                baseUrl: resolved.baseUrl,
-                modelId: body.modelId,
-                awsAccessKeyId: resolved.awsAccessKeyId,
-                awsSecretAccessKey: resolved.awsSecretAccessKey,
-                awsRegion: resolved.awsRegion,
-                vertexApiKey: resolved.vertexApiKey,
-            }),
-        }),
-    )
-}

app/api/parse-url/route.ts

@@ -1,7 +1,7 @@
 import { extract } from "@extractus/article-extractor"
 import { NextResponse } from "next/server"
 import TurndownService from "turndown"
-import { isPrivateUrl } from "@/lib/ssrf-protection"
+import { allowPrivateUrls, isPrivateUrl } from "@/lib/ssrf-protection"
 
 const MAX_CONTENT_LENGTH = 150000 // Match PDF limit
 const EXTRACT_TIMEOUT_MS = 15000
@@ -28,10 +28,8 @@ export async function POST(req: Request) {
             )
         }
 
-        // SSRF protection: parse-url has no use case for fetching internal
+        // SSRF protection
-        // hosts, so private URLs are always rejected. ALLOW_PRIVATE_URLS only
+        if (!allowPrivateUrls && isPrivateUrl(url)) {
-        // governs LLM provider baseUrl overrides (validate-model, chat).
-        if (isPrivateUrl(url)) {
             return NextResponse.json(
                 { error: "Cannot access private/internal URLs" },
                 { status: 400 },

app/api/validate-model/route.ts

@@ -51,7 +51,7 @@ export async function POST(req: Request) {
         }
 
         // SECURITY: Block SSRF attacks via custom baseUrl
-        if (baseUrl && !allowPrivateUrls() && isPrivateUrl(baseUrl)) {
+        if (baseUrl && !allowPrivateUrls && isPrivateUrl(baseUrl)) {
             return NextResponse.json(
                 { valid: false, error: "Invalid base URL" },
                 { status: 400 },

biome.json

@@ -1,5 +1,5 @@
 {
-    "$schema": "https://biomejs.dev/schemas/2.4.14/schema.json",
+    "$schema": "https://biomejs.dev/schemas/2.4.4/schema.json",
     "vcs": {
         "enabled": true,
         "clientKind": "git",

components/chat-panel.tsx

@@ -32,7 +32,6 @@ import { useSessionManager } from "@/hooks/use-session-manager"
 import { useValidateDiagram } from "@/hooks/use-validate-diagram"
 import { getApiEndpoint } from "@/lib/base-path"
 import { findCachedResponse } from "@/lib/cached-responses"
-import type { DrawioTheme } from "@/lib/drawio-themes"
 import { formatMessage } from "@/lib/i18n/utils"
 import { isPdfFile, isTextFile } from "@/lib/pdf-utils"
 import { sanitizeMessages } from "@/lib/session-storage"
@@ -69,8 +68,8 @@ interface ChatMessage {
 interface ChatPanelProps {
     isVisible: boolean
     onToggleVisibility: () => void
-    drawioUi: DrawioTheme
+    drawioUi: "min" | "sketch"
-    onDrawioUiChange: (theme: DrawioTheme) => void
+    onToggleDrawioUi: () => void
     darkMode: boolean
     onToggleDarkMode: () => void
     isMobile?: boolean
@@ -111,7 +110,7 @@ export default function ChatPanel({
     isVisible,
     onToggleVisibility,
     drawioUi,
-    onDrawioUiChange,
+    onToggleDrawioUi,
     darkMode,
     onToggleDarkMode,
     isMobile = false,
@@ -1443,7 +1442,7 @@ export default function ChatPanel({
                 open={showSettingsDialog}
                 onOpenChange={setShowSettingsDialog}
                 drawioUi={drawioUi}
-                onDrawioUiChange={onDrawioUiChange}
+                onToggleDrawioUi={onToggleDrawioUi}
                 darkMode={darkMode}
                 onToggleDarkMode={onToggleDarkMode}
                 minimalStyle={minimalStyle}

components/chat/ChatLobby.tsx

@@ -107,8 +107,8 @@ export function ChatLobby({
     currentInput = "",
     dict,
 }: ChatLobbyProps) {
-    const [templatesExpanded, setTemplatesExpanded] = useState(true)
+    const [templatesExpanded, setTemplatesExpanded] = useState(false)
-    const [examplesExpanded, setExamplesExpanded] = useState(true)
+    const [examplesExpanded, setExamplesExpanded] = useState(false)
     const [panelVisibility, setPanelVisibility] = useState(getPanelVisibility)
     const [deleteDialogOpen, setDeleteDialogOpen] = useState(false)
     const [sessionToDelete, setSessionToDelete] = useState<string | null>(null)
@@ -125,25 +125,19 @@ export function ChatLobby({
     const hasHistory = sessions.length > 0
 
     if (!hasHistory) {
-        if (!panelVisibility.myTemplates && !panelVisibility.quickExamples) {
+        if (panelVisibility.myTemplates) {
-            return null
+            return (
+                <TemplatePanel
+                    setInput={setInput}
+                    onSendTemplate={onSendTemplate}
+                    currentInput={currentInput}
+                />
+            )
         }
-        return (
+        if (panelVisibility.quickExamples) {
-            <div className="animate-fade-in">
+            return <ExamplePanel setInput={setInput} setFiles={setFiles} />
-                {panelVisibility.myTemplates && (
+        }
-                    <TemplatePanel
+        return null
-                        setInput={setInput}
-                        onSendTemplate={onSendTemplate}
-                        currentInput={currentInput}
-                    />
-                )}
-                {panelVisibility.quickExamples && (
-                    <div className={panelVisibility.myTemplates ? "mt-6" : ""}>
-                        <ExamplePanel setInput={setInput} setFiles={setFiles} />
-                    </div>
-                )}
-            </div>
-        )
     }
 
     // Show history + collapsible examples when there are sessions

components/model-config-dialog.tsx

@@ -5,24 +5,22 @@ import {
     Check,
     ChevronRight,
     Clock,
+    Cloud,
     Eye,
     EyeOff,
     Key,
+    Link2,
     Loader2,
     Plus,
     Server,
     Settings2,
     Sparkles,
+    Tag,
     Trash2,
     X,
     Zap,
 } from "lucide-react"
 import { useCallback, useEffect, useRef, useState } from "react"
-import {
-    ProviderCredentialsFields,
-    type SecretField,
-} from "@/components/provider-credentials-fields"
-import { ProviderLogo } from "@/components/provider-logo"
 import {
     AlertDialog,
     AlertDialogAction,
@@ -56,7 +54,11 @@ import { useDictionary } from "@/hooks/use-dictionary"
 import type { UseModelConfigReturn } from "@/hooks/use-model-config"
 import { formatMessage } from "@/lib/i18n/utils"
 import type { ProviderConfig, ProviderName } from "@/lib/types/model-config"
-import { PROVIDER_INFO, SUGGESTED_MODELS } from "@/lib/types/model-config"
+import {
+    PROVIDER_INFO,
+    PROVIDER_LOGO_MAP,
+    SUGGESTED_MODELS,
+} from "@/lib/types/model-config"
 import { cn } from "@/lib/utils"
 
 interface ModelConfigDialogProps {
@@ -67,6 +69,38 @@ interface ModelConfigDialogProps {
 
 type ValidationStatus = "idle" | "validating" | "success" | "error"
 
+// Provider logo component
+function ProviderLogo({
+    provider,
+    className,
+}: {
+    provider: ProviderName
+    className?: string
+}) {
+    // Use Lucide icons for providers without models.dev logos
+    if (provider === "bedrock") {
+        return <Cloud className={cn("size-4", className)} />
+    }
+    if (provider === "sglang") {
+        return <Server className={cn("size-4", className)} />
+    }
+    if (provider === "doubao") {
+        return <Sparkles className={cn("size-4", className)} />
+    }
+
+    const logoName = PROVIDER_LOGO_MAP[provider] || provider
+    return (
+        // biome-ignore lint/performance/noImgElement: External URL from models.dev
+        <img
+            alt={`${provider} logo`}
+            className={cn("size-4 dark:invert", className)}
+            height={16}
+            src={`https://models.dev/logos/${logoName}.svg`}
+            width={16}
+        />
+    )
+}
+
 // Configuration section with title and optional action
 function ConfigSection({
     title,
@@ -345,104 +379,6 @@ export function ModelConfigDialog({
         return provider.name || PROVIDER_INFO[provider.provider].label
     }
 
-    // Inline Test button + error, shared across credential layouts. Disabled
-    // until the relevant credentials are present.
-    const renderTestButton = (canValidate: boolean) => (
-        <div className="flex items-center gap-2">
-            <Button
-                variant={validationStatus === "success" ? "outline" : "default"}
-                size="sm"
-                onClick={handleValidate}
-                disabled={!canValidate || validationStatus === "validating"}
-                className={cn(
-                    "h-9 px-4",
-                    validationStatus === "success" &&
-                        "text-success border-success/30 bg-success-muted hover:bg-success-muted",
-                )}
-            >
-                {validationStatus === "validating" ? (
-                    <Loader2 className="h-4 w-4 animate-spin" />
-                ) : validationStatus === "success" ? (
-                    <>
-                        <Check className="h-4 w-4 mr-1.5 animate-check-pop" />
-                        {dict.modelConfig.verified}
-                    </>
-                ) : (
-                    dict.modelConfig.test
-                )}
-            </Button>
-            {validationStatus === "error" && validationError && (
-                <p className="text-xs text-destructive flex items-center gap-1">
-                    <X className="h-3 w-3" />
-                    {validationError}
-                </p>
-            )}
-        </div>
-    )
-
-    // Plaintext secret input with show/hide toggle (the user dialog stores
-    // keys client-side, so values are shown directly — unlike the masked
-    // admin panel). The primary key field carries the inline Test button.
-    const renderProviderSecret = (field: SecretField, id: string) => {
-        if (!selectedProvider) return null
-        const value = (selectedProvider[field] as string | undefined) ?? ""
-        // The "primary" credential sits beside the Test button; for Bedrock
-        // the test lives below the region, so its inputs have no inline test.
-        const isBedrock = selectedProvider.provider === "bedrock"
-        const withInlineTest =
-            !isBedrock && (field === "apiKey" || field === "vertexApiKey")
-        const canValidate =
-            field === "vertexApiKey"
-                ? !!selectedProvider.vertexApiKey
-                : selectedProvider.provider === "ollama" ||
-                  !!selectedProvider.apiKey
-        const input = (
-            <div className="relative flex-1">
-                <Input
-                    id={id}
-                    type={showApiKey ? "text" : "password"}
-                    value={value}
-                    onChange={(e) =>
-                        handleProviderUpdate(field, e.target.value)
-                    }
-                    placeholder={
-                        field === "awsSecretAccessKey"
-                            ? dict.modelConfig.enterSecretKey
-                            : field === "awsAccessKeyId"
-                              ? "AKIA..."
-                              : dict.modelConfig.enterApiKey
-                    }
-                    className="h-9 pr-10 font-mono text-xs"
-                />
-                <button
-                    type="button"
-                    onClick={() => setShowApiKey(!showApiKey)}
-                    aria-label={
-                        showApiKey
-                            ? dict.modelConfig.hideValue
-                            : dict.modelConfig.showValue
-                    }
-                    className="absolute right-3 top-1/2 -translate-y-1/2 text-muted-foreground hover:text-foreground transition-colors focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2 rounded"
-                >
-                    {showApiKey ? (
-                        <EyeOff className="h-4 w-4" />
-                    ) : (
-                        <Eye className="h-4 w-4" />
-                    )}
-                </button>
-            </div>
-        )
-        if (!withInlineTest) return input
-        return (
-            <div className="space-y-2">
-                <div className="flex gap-2">
-                    {input}
-                    {renderTestButton(canValidate)}
-                </div>
-            </div>
-        )
-    }
-
     return (
         <Dialog open={open} onOpenChange={onOpenChange}>
             <DialogContent className="sm:max-w-4xl h-[80vh] max-h-[800px] overflow-hidden flex flex-col gap-0 p-0">
@@ -469,7 +405,7 @@ export function ModelConfigDialog({
                             </span>
                         </div>
 
-                        <ScrollArea className="flex-1 px-2 min-h-0">
+                        <ScrollArea className="flex-1 px-2">
                             <div className="space-y-1 pb-2">
                                 {config.providers.length === 0 ? (
                                     <div className="px-3 py-8 text-center">
@@ -643,45 +579,681 @@ export function ModelConfigDialog({
                                         icon={Settings2}
                                     >
                                         <ConfigCard>
-                                            <ProviderCredentialsFields
+                                            {/* Display Name */}
-                                                provider={
+                                            <div className="space-y-2">
-                                                    selectedProvider.provider
+                                                <Label
-                                                }
+                                                    htmlFor="provider-name"
-                                                name={selectedProvider.name}
+                                                    className="text-xs font-medium flex items-center gap-1.5"
-                                                baseUrl={
+                                                >
-                                                    selectedProvider.baseUrl
+                                                    <Tag className="h-3.5 w-3.5 text-muted-foreground" />
-                                                }
+                                                    {
-                                                awsRegion={
+                                                        dict.modelConfig
-                                                    selectedProvider.awsRegion
+                                                            .displayName
-                                                }
+                                                    }
-                                                onChange={(field, value) =>
+                                                </Label>
-                                                    handleProviderUpdate(
+                                                <Input
-                                                        field,
+                                                    id="provider-name"
-                                                        value,
+                                                    value={
-                                                    )
+                                                        selectedProvider.name ||
-                                                }
+                                                        ""
-                                                renderSecret={({ field, id }) =>
+                                                    }
-                                                    renderProviderSecret(
+                                                    onChange={(e) =>
-                                                        field,
+                                                        handleProviderUpdate(
-                                                        id,
+                                                            "name",
-                                                    )
+                                                            e.target.value,
-                                                }
+                                                        )
-                                                footer={
+                                                    }
-                                                    selectedProvider.provider ===
+                                                    placeholder={
-                                                    "bedrock"
+                                                        PROVIDER_INFO[
-                                                        ? renderTestButton(
+                                                            selectedProvider
-                                                              !!selectedProvider.awsAccessKeyId &&
+                                                                .provider
-                                                                  !!selectedProvider.awsSecretAccessKey &&
+                                                        ].label
-                                                                  !!selectedProvider.awsRegion,
+                                                    }
-                                                          )
+                                                    className="h-9"
-                                                        : selectedProvider.provider ===
+                                                />
-                                                            "edgeone"
+                                            </div>
-                                                          ? renderTestButton(
+
-                                                                true,
+                                            {/* Credentials - different for Bedrock vs other providers */}
-                                                            )
+                                            {selectedProvider.provider ===
-                                                          : undefined
+                                            "bedrock" ? (
-                                                }
+                                                <>
-                                            />
+                                                    {/* AWS Access Key ID */}
+                                                    <div className="space-y-2">
+                                                        <Label
+                                                            htmlFor="aws-access-key-id"
+                                                            className="text-xs font-medium flex items-center gap-1.5"
+                                                        >
+                                                            <Key className="h-3.5 w-3.5 text-muted-foreground" />
+                                                            {
+                                                                dict.modelConfig
+                                                                    .awsAccessKeyId
+                                                            }
+                                                        </Label>
+                                                        <Input
+                                                            id="aws-access-key-id"
+                                                            type={
+                                                                showApiKey
+                                                                    ? "text"
+                                                                    : "password"
+                                                            }
+                                                            value={
+                                                                selectedProvider.awsAccessKeyId ||
+                                                                ""
+                                                            }
+                                                            onChange={(e) =>
+                                                                handleProviderUpdate(
+                                                                    "awsAccessKeyId",
+                                                                    e.target
+                                                                        .value,
+                                                                )
+                                                            }
+                                                            placeholder="AKIA..."
+                                                            className="h-9 font-mono text-xs"
+                                                        />
+                                                    </div>
+
+                                                    {/* AWS Secret Access Key */}
+                                                    <div className="space-y-2">
+                                                        <Label
+                                                            htmlFor="aws-secret-access-key"
+                                                            className="text-xs font-medium flex items-center gap-1.5"
+                                                        >
+                                                            <Key className="h-3.5 w-3.5 text-muted-foreground" />
+                                                            {
+                                                                dict.modelConfig
+                                                                    .awsSecretAccessKey
+                                                            }
+                                                        </Label>
+                                                        <div className="relative">
+                                                            <Input
+                                                                id="aws-secret-access-key"
+                                                                type={
+                                                                    showApiKey
+                                                                        ? "text"
+                                                                        : "password"
+                                                                }
+                                                                value={
+                                                                    selectedProvider.awsSecretAccessKey ||
+                                                                    ""
+                                                                }
+                                                                onChange={(e) =>
+                                                                    handleProviderUpdate(
+                                                                        "awsSecretAccessKey",
+                                                                        e.target
+                                                                            .value,
+                                                                    )
+                                                                }
+                                                                placeholder={
+                                                                    dict
+                                                                        .modelConfig
+                                                                        .enterSecretKey
+                                                                }
+                                                                className="h-9 pr-10 font-mono text-xs"
+                                                            />
+                                                            <button
+                                                                type="button"
+                                                                onClick={() =>
+                                                                    setShowApiKey(
+                                                                        !showApiKey,
+                                                                    )
+                                                                }
+                                                                aria-label={
+                                                                    showApiKey
+                                                                        ? "Hide secret access key"
+                                                                        : "Show secret access key"
+                                                                }
+                                                                className="absolute right-3 top-1/2 -translate-y-1/2 text-muted-foreground hover:text-foreground transition-colors focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2 rounded"
+                                                            >
+                                                                {showApiKey ? (
+                                                                    <EyeOff className="h-4 w-4" />
+                                                                ) : (
+                                                                    <Eye className="h-4 w-4" />
+                                                                )}
+                                                            </button>
+                                                        </div>
+                                                    </div>
+
+                                                    {/* AWS Region */}
+                                                    <div className="space-y-2">
+                                                        <Label
+                                                            htmlFor="aws-region"
+                                                            className="text-xs font-medium flex items-center gap-1.5"
+                                                        >
+                                                            <Link2 className="h-3.5 w-3.5 text-muted-foreground" />
+                                                            {
+                                                                dict.modelConfig
+                                                                    .awsRegion
+                                                            }
+                                                        </Label>
+                                                        <Select
+                                                            value={
+                                                                selectedProvider.awsRegion ||
+                                                                ""
+                                                            }
+                                                            onValueChange={(
+                                                                v,
+                                                            ) =>
+                                                                handleProviderUpdate(
+                                                                    "awsRegion",
+                                                                    v,
+                                                                )
+                                                            }
+                                                        >
+                                                            <SelectTrigger className="h-9 font-mono text-xs hover:bg-accent">
+                                                                <SelectValue
+                                                                    placeholder={
+                                                                        dict
+                                                                            .modelConfig
+                                                                            .selectRegion
+                                                                    }
+                                                                />
+                                                            </SelectTrigger>
+                                                            <SelectContent className="max-h-64">
+                                                                <SelectItem value="us-east-1">
+                                                                    us-east-1
+                                                                    (N.
+                                                                    Virginia)
+                                                                </SelectItem>
+                                                                <SelectItem value="us-east-2">
+                                                                    us-east-2
+                                                                    (Ohio)
+                                                                </SelectItem>
+                                                                <SelectItem value="us-west-2">
+                                                                    us-west-2
+                                                                    (Oregon)
+                                                                </SelectItem>
+                                                                <SelectItem value="eu-west-1">
+                                                                    eu-west-1
+                                                                    (Ireland)
+                                                                </SelectItem>
+                                                                <SelectItem value="eu-west-2">
+                                                                    eu-west-2
+                                                                    (London)
+                                                                </SelectItem>
+                                                                <SelectItem value="eu-west-3">
+                                                                    eu-west-3
+                                                                    (Paris)
+                                                                </SelectItem>
+                                                                <SelectItem value="eu-central-1">
+                                                                    eu-central-1
+                                                                    (Frankfurt)
+                                                                </SelectItem>
+                                                                <SelectItem value="ap-south-1">
+                                                                    ap-south-1
+                                                                    (Mumbai)
+                                                                </SelectItem>
+                                                                <SelectItem value="ap-northeast-1">
+                                                                    ap-northeast-1
+                                                                    (Tokyo)
+                                                                </SelectItem>
+                                                                <SelectItem value="ap-northeast-2">
+                                                                    ap-northeast-2
+                                                                    (Seoul)
+                                                                </SelectItem>
+                                                                <SelectItem value="ap-southeast-1">
+                                                                    ap-southeast-1
+                                                                    (Singapore)
+                                                                </SelectItem>
+                                                                <SelectItem value="ap-southeast-2">
+                                                                    ap-southeast-2
+                                                                    (Sydney)
+                                                                </SelectItem>
+                                                                <SelectItem value="sa-east-1">
+                                                                    sa-east-1
+                                                                    (São Paulo)
+                                                                </SelectItem>
+                                                            </SelectContent>
+                                                        </Select>
+                                                    </div>
+
+                                                    {/* Test Button for Bedrock */}
+                                                    <div className="flex items-center gap-2">
+                                                        <Button
+                                                            variant={
+                                                                validationStatus ===
+                                                                "success"
+                                                                    ? "outline"
+                                                                    : "default"
+                                                            }
+                                                            size="sm"
+                                                            onClick={
+                                                                handleValidate
+                                                            }
+                                                            disabled={
+                                                                !selectedProvider.awsAccessKeyId ||
+                                                                !selectedProvider.awsSecretAccessKey ||
+                                                                !selectedProvider.awsRegion ||
+                                                                validationStatus ===
+                                                                    "validating"
+                                                            }
+                                                            className={cn(
+                                                                "h-9 px-4",
+                                                                validationStatus ===
+                                                                    "success" &&
+                                                                    "text-success border-success/30 bg-success-muted hover:bg-success-muted",
+                                                            )}
+                                                        >
+                                                            {validationStatus ===
+                                                            "validating" ? (
+                                                                <Loader2 className="h-4 w-4 animate-spin" />
+                                                            ) : validationStatus ===
+                                                              "success" ? (
+                                                                <>
+                                                                    <Check className="h-4 w-4 mr-1.5 animate-check-pop" />
+                                                                    {
+                                                                        dict
+                                                                            .modelConfig
+                                                                            .verified
+                                                                    }
+                                                                </>
+                                                            ) : (
+                                                                dict.modelConfig
+                                                                    .test
+                                                            )}
+                                                        </Button>
+                                                        {validationStatus ===
+                                                            "error" &&
+                                                            validationError && (
+                                                                <p className="text-xs text-destructive flex items-center gap-1">
+                                                                    <X className="h-3 w-3" />
+                                                                    {
+                                                                        validationError
+                                                                    }
+                                                                </p>
+                                                            )}
+                                                    </div>
+                                                </>
+                                            ) : selectedProvider.provider ===
+                                              "vertexai" ? (
+                                                <>
+                                                    {/* Vertex AI API Key */}
+                                                    <div className="space-y-2">
+                                                        <Label
+                                                            htmlFor="vertex-api-key"
+                                                            className="text-xs font-medium flex items-center gap-1.5"
+                                                        >
+                                                            <Key className="h-3.5 w-3.5 text-muted-foreground" />
+                                                            API Key
+                                                        </Label>
+                                                        <div className="flex gap-2">
+                                                            <div className="relative flex-1">
+                                                                <Input
+                                                                    id="vertex-api-key"
+                                                                    type={
+                                                                        showApiKey
+                                                                            ? "text"
+                                                                            : "password"
+                                                                    }
+                                                                    value={
+                                                                        selectedProvider.vertexApiKey ||
+                                                                        ""
+                                                                    }
+                                                                    onChange={(
+                                                                        e,
+                                                                    ) =>
+                                                                        handleProviderUpdate(
+                                                                            "vertexApiKey",
+                                                                            e
+                                                                                .target
+                                                                                .value,
+                                                                        )
+                                                                    }
+                                                                    placeholder="Enter your Vertex AI API key"
+                                                                    className="h-9 pr-10 font-mono text-xs"
+                                                                />
+                                                                <button
+                                                                    type="button"
+                                                                    onClick={() =>
+                                                                        setShowApiKey(
+                                                                            !showApiKey,
+                                                                        )
+                                                                    }
+                                                                    aria-label={
+                                                                        showApiKey
+                                                                            ? "Hide API key"
+                                                                            : "Show API key"
+                                                                    }
+                                                                    className="absolute right-3 top-1/2 -translate-y-1/2 text-muted-foreground hover:text-foreground transition-colors focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2 rounded"
+                                                                >
+                                                                    {showApiKey ? (
+                                                                        <EyeOff className="h-4 w-4" />
+                                                                    ) : (
+                                                                        <Eye className="h-4 w-4" />
+                                                                    )}
+                                                                </button>
+                                                            </div>
+                                                            <Button
+                                                                variant={
+                                                                    validationStatus ===
+                                                                    "success"
+                                                                        ? "outline"
+                                                                        : "default"
+                                                                }
+                                                                size="sm"
+                                                                onClick={
+                                                                    handleValidate
+                                                                }
+                                                                disabled={
+                                                                    !selectedProvider.vertexApiKey ||
+                                                                    validationStatus ===
+                                                                        "validating"
+                                                                }
+                                                                className={cn(
+                                                                    "h-9 px-4",
+                                                                    validationStatus ===
+                                                                        "success" &&
+                                                                        "text-success border-success/30 bg-success-muted hover:bg-success-muted",
+                                                                )}
+                                                            >
+                                                                {validationStatus ===
+                                                                "validating" ? (
+                                                                    <Loader2 className="h-4 w-4 animate-spin" />
+                                                                ) : validationStatus ===
+                                                                  "success" ? (
+                                                                    <>
+                                                                        <Check className="h-4 w-4 mr-1.5 animate-check-pop" />
+                                                                        {
+                                                                            dict
+                                                                                .modelConfig
+                                                                                .verified
+                                                                        }
+                                                                    </>
+                                                                ) : (
+                                                                    dict
+                                                                        .modelConfig
+                                                                        .test
+                                                                )}
+                                                            </Button>
+                                                        </div>
+                                                        {validationStatus ===
+                                                            "error" &&
+                                                            validationError && (
+                                                                <p className="text-xs text-destructive flex items-center gap-1">
+                                                                    <X className="h-3 w-3" />
+                                                                    {
+                                                                        validationError
+                                                                    }
+                                                                </p>
+                                                            )}
+                                                    </div>
+
+                                                    {/* Base URL (optional) */}
+                                                    <div className="space-y-2">
+                                                        <Label
+                                                            htmlFor="vertex-base-url"
+                                                            className="text-xs font-medium flex items-center gap-1.5"
+                                                        >
+                                                            <Link2 className="h-3.5 w-3.5 text-muted-foreground" />
+                                                            {formatMessage(
+                                                                dict.modelConfig
+                                                                    .baseUrlWithExample,
+                                                                {
+                                                                    example:
+                                                                        PROVIDER_INFO[
+                                                                            selectedProvider
+                                                                                .provider
+                                                                        ]
+                                                                            .defaultBaseUrl ||
+                                                                        "https://api.example.com/v1",
+                                                                },
+                                                            )}
+                                                        </Label>
+                                                        <Input
+                                                            id="vertex-base-url"
+                                                            value={
+                                                                selectedProvider.baseUrl ||
+                                                                ""
+                                                            }
+                                                            onChange={(e) =>
+                                                                handleProviderUpdate(
+                                                                    "baseUrl",
+                                                                    e.target
+                                                                        .value,
+                                                                )
+                                                            }
+                                                            placeholder="Custom endpoint URL"
+                                                            className="h-9 font-mono text-xs"
+                                                        />
+                                                    </div>
+                                                </>
+                                            ) : selectedProvider.provider ===
+                                              "edgeone" ? (
+                                                <div className="space-y-3">
+                                                    <div className="flex items-center gap-2">
+                                                        <Button
+                                                            variant={
+                                                                validationStatus ===
+                                                                "success"
+                                                                    ? "outline"
+                                                                    : "default"
+                                                            }
+                                                            size="sm"
+                                                            onClick={
+                                                                handleValidate
+                                                            }
+                                                            disabled={
+                                                                validationStatus ===
+                                                                "validating"
+                                                            }
+                                                            className={cn(
+                                                                "h-9 px-4",
+                                                                validationStatus ===
+                                                                    "success" &&
+                                                                    "text-success border-success/30 bg-success-muted hover:bg-success-muted",
+                                                            )}
+                                                        >
+                                                            {validationStatus ===
+                                                            "validating" ? (
+                                                                <Loader2 className="h-4 w-4 animate-spin" />
+                                                            ) : validationStatus ===
+                                                              "success" ? (
+                                                                <>
+                                                                    <Check className="h-4 w-4 mr-1.5" />
+                                                                    {
+                                                                        dict
+                                                                            .modelConfig
+                                                                            .verified
+                                                                    }
+                                                                </>
+                                                            ) : (
+                                                                dict.modelConfig
+                                                                    .test
+                                                            )}
+                                                        </Button>
+                                                        {validationStatus ===
+                                                            "error" &&
+                                                            validationError && (
+                                                                <p className="text-xs text-destructive flex items-center gap-1">
+                                                                    <X className="h-3 w-3" />
+                                                                    {
+                                                                        validationError
+                                                                    }
+                                                                </p>
+                                                            )}
+                                                    </div>
+                                                </div>
+                                            ) : (
+                                                <>
+                                                    {/* API Key */}
+                                                    <div className="space-y-2">
+                                                        <Label
+                                                            htmlFor="api-key"
+                                                            className="text-xs font-medium flex items-center gap-1.5"
+                                                        >
+                                                            <Key className="h-3.5 w-3.5 text-muted-foreground" />
+                                                            {
+                                                                dict.modelConfig
+                                                                    .apiKey
+                                                            }
+                                                            {selectedProvider.provider ===
+                                                                "ollama" &&
+                                                                ` ${dict.modelConfig.optional}`}
+                                                        </Label>
+                                                        <div className="flex gap-2">
+                                                            <div className="relative flex-1">
+                                                                <Input
+                                                                    id="api-key"
+                                                                    type={
+                                                                        showApiKey
+                                                                            ? "text"
+                                                                            : "password"
+                                                                    }
+                                                                    value={
+                                                                        selectedProvider.apiKey
+                                                                    }
+                                                                    onChange={(
+                                                                        e,
+                                                                    ) =>
+                                                                        handleProviderUpdate(
+                                                                            "apiKey",
+                                                                            e
+                                                                                .target
+                                                                                .value,
+                                                                        )
+                                                                    }
+                                                                    placeholder={
+                                                                        dict
+                                                                            .modelConfig
+                                                                            .enterApiKey
+                                                                    }
+                                                                    className="h-9 pr-10 font-mono text-xs"
+                                                                />
+                                                                <button
+                                                                    type="button"
+                                                                    onClick={() =>
+                                                                        setShowApiKey(
+                                                                            !showApiKey,
+                                                                        )
+                                                                    }
+                                                                    aria-label={
+                                                                        showApiKey
+                                                                            ? "Hide API key"
+                                                                            : "Show API key"
+                                                                    }
+                                                                    className="absolute right-3 top-1/2 -translate-y-1/2 text-muted-foreground hover:text-foreground transition-colors focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2 rounded"
+                                                                >
+                                                                    {showApiKey ? (
+                                                                        <EyeOff className="h-4 w-4" />
+                                                                    ) : (
+                                                                        <Eye className="h-4 w-4" />
+                                                                    )}
+                                                                </button>
+                                                            </div>
+                                                            <Button
+                                                                variant={
+                                                                    validationStatus ===
+                                                                    "success"
+                                                                        ? "outline"
+                                                                        : "default"
+                                                                }
+                                                                size="sm"
+                                                                onClick={
+                                                                    handleValidate
+                                                                }
+                                                                disabled={
+                                                                    (selectedProvider.provider !==
+                                                                        "ollama" &&
+                                                                        !selectedProvider.apiKey) ||
+                                                                    validationStatus ===
+                                                                        "validating"
+                                                                }
+                                                                className={cn(
+                                                                    "h-9 px-4",
+                                                                    validationStatus ===
+                                                                        "success" &&
+                                                                        "text-success border-success/30 bg-success-muted hover:bg-success-muted",
+                                                                )}
+                                                            >
+                                                                {validationStatus ===
+                                                                "validating" ? (
+                                                                    <Loader2 className="h-4 w-4 animate-spin" />
+                                                                ) : validationStatus ===
+                                                                  "success" ? (
+                                                                    <>
+                                                                        <Check className="h-4 w-4 mr-1.5 animate-check-pop" />
+                                                                        {
+                                                                            dict
+                                                                                .modelConfig
+                                                                                .verified
+                                                                        }
+                                                                    </>
+                                                                ) : (
+                                                                    dict
+                                                                        .modelConfig
+                                                                        .test
+                                                                )}
+                                                            </Button>
+                                                        </div>
+                                                        {validationStatus ===
+                                                            "error" &&
+                                                            validationError && (
+                                                                <p className="text-xs text-destructive flex items-center gap-1">
+                                                                    <X className="h-3 w-3" />
+                                                                    {
+                                                                        validationError
+                                                                    }
+                                                                </p>
+                                                            )}
+                                                    </div>
+
+                                                    {/* Base URL */}
+                                                    <div className="space-y-2">
+                                                        <Label
+                                                            htmlFor="base-url"
+                                                            className="text-xs font-medium flex items-center gap-1.5"
+                                                        >
+                                                            <Link2 className="h-3.5 w-3.5 text-muted-foreground" />
+                                                            {formatMessage(
+                                                                dict.modelConfig
+                                                                    .baseUrlWithExample,
+                                                                {
+                                                                    example:
+                                                                        PROVIDER_INFO[
+                                                                            selectedProvider
+                                                                                .provider
+                                                                        ]
+                                                                            .defaultBaseUrl ||
+                                                                        "https://api.example.com/v1",
+                                                                },
+                                                            )}
+                                                        </Label>
+                                                        <Input
+                                                            id="base-url"
+                                                            value={
+                                                                selectedProvider.baseUrl ||
+                                                                ""
+                                                            }
+                                                            onChange={(e) =>
+                                                                handleProviderUpdate(
+                                                                    "baseUrl",
+                                                                    e.target
+                                                                        .value,
+                                                                )
+                                                            }
+                                                            placeholder={
+                                                                PROVIDER_INFO[
+                                                                    selectedProvider
+                                                                        .provider
+                                                                ]
+                                                                    .defaultBaseUrl ||
+                                                                dict.modelConfig
+                                                                    .customEndpoint
+                                                            }
+                                                            className="h-9 rounded-xl font-mono text-xs"
+                                                        />
+                                                        {selectedProvider.provider ===
+                                                            "minimax" && (
+                                                            <p className="text-xs text-muted-foreground">
+                                                                {
+                                                                    dict
+                                                                        .modelConfig
+                                                                        .minimaxBaseUrlHint
+                                                                }
+                                                            </p>
+                                                        )}
+                                                    </div>
+                                                </>
+                                            )}
                                         </ConfigCard>
                                     </ConfigSection>
 

components/provider-credentials-fields.tsx

@@ -1,259 +0,0 @@
-"use client"
-
-import { Key, Link2, Tag } from "lucide-react"
-import type { ReactNode } from "react"
-import { Input } from "@/components/ui/input"
-import { Label } from "@/components/ui/label"
-import {
-    Select,
-    SelectContent,
-    SelectItem,
-    SelectTrigger,
-    SelectValue,
-} from "@/components/ui/select"
-import { useDictionary } from "@/hooks/use-dictionary"
-import { formatMessage } from "@/lib/i18n/utils"
-import { PROVIDER_INFO, type ProviderName } from "@/lib/types/model-config"
-
-// Logical secret field. The caller owns the actual input — plaintext for the
-// user dialog, write-only masked for the admin panel — supplied via
-// renderSecret. That (and the optional test action) are the only genuine
-// differences between the two screens; the field structure is shared here.
-export type SecretField =
-    | "apiKey"
-    | "awsAccessKeyId"
-    | "awsSecretAccessKey"
-    | "vertexApiKey"
-
-// AWS regions offered for Bedrock (shared by both screens)
-const AWS_REGIONS: Array<[string, string]> = [
-    ["us-east-1", "N. Virginia"],
-    ["us-east-2", "Ohio"],
-    ["us-west-2", "Oregon"],
-    ["eu-west-1", "Ireland"],
-    ["eu-west-2", "London"],
-    ["eu-west-3", "Paris"],
-    ["eu-central-1", "Frankfurt"],
-    ["ap-south-1", "Mumbai"],
-    ["ap-northeast-1", "Tokyo"],
-    ["ap-northeast-2", "Seoul"],
-    ["ap-southeast-1", "Singapore"],
-    ["ap-southeast-2", "Sydney"],
-    ["sa-east-1", "São Paulo"],
-]
-
-interface ProviderCredentialsFieldsProps {
-    provider: ProviderName
-    // Plain (non-secret) field values — secrets are owned by renderSecret
-    name?: string
-    baseUrl?: string
-    awsRegion?: string
-    disabled?: boolean
-    // Update a plain text field
-    onChange: (field: "name" | "baseUrl" | "awsRegion", value: string) => void
-    // Render the control for a secret field. The caller may include trailing
-    // UI (e.g. the user dialog's inline Test button + validation error); the
-    // shared component only supplies the label above it.
-    renderSecret: (opts: { field: SecretField; id: string }) => ReactNode
-    // Extra content after the fields — used for the Bedrock test row and the
-    // EdgeOne test button, which aren't beside a credential input.
-    footer?: ReactNode
-}
-
-// Display name + per-provider credential inputs, shared by the user
-// ModelConfigDialog and the admin Models panel.
-export function ProviderCredentialsFields({
-    provider,
-    name,
-    baseUrl,
-    awsRegion,
-    disabled,
-    onChange,
-    renderSecret,
-    footer,
-}: ProviderCredentialsFieldsProps) {
-    const dict = useDictionary()
-    const info = PROVIDER_INFO[provider]
-    const baseUrlLabel = formatMessage(dict.modelConfig.baseUrlWithExample, {
-        example: info.defaultBaseUrl || "https://api.example.com/v1",
-    })
-
-    // EdgeOne needs no credentials — the caller supplies just a test button
-    if (provider === "edgeone") {
-        return <div className="space-y-5">{footer}</div>
-    }
-
-    return (
-        <div className="space-y-5">
-            {/* Display Name */}
-            <div className="space-y-2">
-                <Label
-                    htmlFor="provider-name"
-                    className="text-xs font-medium flex items-center gap-1.5"
-                >
-                    <Tag className="h-3.5 w-3.5 text-muted-foreground" />
-                    {dict.modelConfig.displayName}
-                </Label>
-                <Input
-                    id="provider-name"
-                    value={name ?? ""}
-                    disabled={disabled}
-                    onChange={(e) => onChange("name", e.target.value)}
-                    placeholder={info.label}
-                    className="h-9"
-                />
-            </div>
-
-            {provider === "bedrock" ? (
-                <>
-                    {/* AWS Access Key ID */}
-                    <div className="space-y-2">
-                        <Label
-                            htmlFor="aws-access-key-id"
-                            className="text-xs font-medium flex items-center gap-1.5"
-                        >
-                            <Key className="h-3.5 w-3.5 text-muted-foreground" />
-                            {dict.modelConfig.awsAccessKeyId}
-                        </Label>
-                        {renderSecret({
-                            field: "awsAccessKeyId",
-                            id: "aws-access-key-id",
-                        })}
-                    </div>
-
-                    {/* AWS Secret Access Key */}
-                    <div className="space-y-2">
-                        <Label
-                            htmlFor="aws-secret-access-key"
-                            className="text-xs font-medium flex items-center gap-1.5"
-                        >
-                            <Key className="h-3.5 w-3.5 text-muted-foreground" />
-                            {dict.modelConfig.awsSecretAccessKey}
-                        </Label>
-                        {renderSecret({
-                            field: "awsSecretAccessKey",
-                            id: "aws-secret-access-key",
-                        })}
-                    </div>
-
-                    {/* AWS Region */}
-                    <div className="space-y-2">
-                        <Label
-                            htmlFor="aws-region"
-                            className="text-xs font-medium flex items-center gap-1.5"
-                        >
-                            <Link2 className="h-3.5 w-3.5 text-muted-foreground" />
-                            {dict.modelConfig.awsRegion}
-                        </Label>
-                        <Select
-                            value={awsRegion || ""}
-                            disabled={disabled}
-                            onValueChange={(v) => onChange("awsRegion", v)}
-                        >
-                            <SelectTrigger
-                                id="aws-region"
-                                className="h-9 font-mono text-xs hover:bg-accent"
-                            >
-                                <SelectValue
-                                    placeholder={dict.modelConfig.selectRegion}
-                                />
-                            </SelectTrigger>
-                            <SelectContent className="max-h-64">
-                                {AWS_REGIONS.map(([region, label]) => (
-                                    <SelectItem key={region} value={region}>
-                                        {region} ({label})
-                                    </SelectItem>
-                                ))}
-                            </SelectContent>
-                        </Select>
-                    </div>
-                </>
-            ) : provider === "vertexai" ? (
-                <>
-                    {/* Vertex AI API Key (Express Mode) */}
-                    <div className="space-y-2">
-                        <Label
-                            htmlFor="vertex-api-key"
-                            className="text-xs font-medium flex items-center gap-1.5"
-                        >
-                            <Key className="h-3.5 w-3.5 text-muted-foreground" />
-                            {dict.modelConfig.apiKey}
-                        </Label>
-                        {renderSecret({
-                            field: "vertexApiKey",
-                            id: "vertex-api-key",
-                        })}
-                    </div>
-
-                    {/* Base URL (optional) */}
-                    <div className="space-y-2">
-                        <Label
-                            htmlFor="vertex-base-url"
-                            className="text-xs font-medium flex items-center gap-1.5"
-                        >
-                            <Link2 className="h-3.5 w-3.5 text-muted-foreground" />
-                            {baseUrlLabel}
-                        </Label>
-                        <Input
-                            id="vertex-base-url"
-                            value={baseUrl ?? ""}
-                            disabled={disabled}
-                            onChange={(e) =>
-                                onChange("baseUrl", e.target.value)
-                            }
-                            placeholder={dict.modelConfig.customEndpoint}
-                            className="h-9 font-mono text-xs"
-                        />
-                    </div>
-                </>
-            ) : (
-                <>
-                    {/* API Key */}
-                    <div className="space-y-2">
-                        <Label
-                            htmlFor="api-key"
-                            className="text-xs font-medium flex items-center gap-1.5"
-                        >
-                            <Key className="h-3.5 w-3.5 text-muted-foreground" />
-                            {dict.modelConfig.apiKey}
-                            {provider === "ollama" &&
-                                ` ${dict.modelConfig.optional}`}
-                        </Label>
-                        {renderSecret({ field: "apiKey", id: "api-key" })}
-                    </div>
-
-                    {/* Base URL */}
-                    <div className="space-y-2">
-                        <Label
-                            htmlFor="base-url"
-                            className="text-xs font-medium flex items-center gap-1.5"
-                        >
-                            <Link2 className="h-3.5 w-3.5 text-muted-foreground" />
-                            {baseUrlLabel}
-                        </Label>
-                        <Input
-                            id="base-url"
-                            value={baseUrl ?? ""}
-                            disabled={disabled}
-                            onChange={(e) =>
-                                onChange("baseUrl", e.target.value)
-                            }
-                            placeholder={
-                                info.defaultBaseUrl ||
-                                dict.modelConfig.customEndpoint
-                            }
-                            className="h-9 rounded-xl font-mono text-xs"
-                        />
-                        {provider === "minimax" && (
-                            <p className="text-xs text-muted-foreground">
-                                {dict.modelConfig.minimaxBaseUrlHint}
-                            </p>
-                        )}
-                    </div>
-                </>
-            )}
-
-            {footer}
-        </div>
-    )
-}

components/provider-logo.tsx

@@ -1,36 +0,0 @@
-import { Cloud, Server, Sparkles } from "lucide-react"
-import { PROVIDER_LOGO_MAP, type ProviderName } from "@/lib/types/model-config"
-import { cn } from "@/lib/utils"
-
-// Provider logo from models.dev, with Lucide fallbacks for providers
-// that have no logo there
-export function ProviderLogo({
-    provider,
-    className,
-}: {
-    provider: ProviderName
-    className?: string
-}) {
-    if (provider === "bedrock") {
-        return <Cloud className={cn("size-4", className)} />
-    }
-    if (provider === "sglang") {
-        return <Server className={cn("size-4", className)} />
-    }
-    if (provider === "doubao") {
-        return <Sparkles className={cn("size-4", className)} />
-    }
-
-    const logoName = PROVIDER_LOGO_MAP[provider] || provider
-    return (
-        // biome-ignore lint/performance/noImgElement: External URL from models.dev
-        <img
-            alt=""
-            aria-hidden="true"
-            className={cn("size-4 dark:invert", className)}
-            height={16}
-            src={`https://models.dev/logos/${logoName}.svg`}
-            width={16}
-        />
-    )
-}

components/settings-dialog.tsx

@@ -25,7 +25,6 @@ import { Switch } from "@/components/ui/switch"
 import { Textarea } from "@/components/ui/textarea"
 import { useDictionary } from "@/hooks/use-dictionary"
 import { getApiEndpoint } from "@/lib/base-path"
-import type { DrawioTheme } from "@/lib/drawio-themes"
 import { i18n, type Locale } from "@/lib/i18n/config"
 import { STORAGE_KEYS } from "@/lib/storage"
 
@@ -64,8 +63,8 @@ const LANGUAGE_LABELS: Record<Locale, string> = {
 interface SettingsDialogProps {
     open: boolean
     onOpenChange: (open: boolean) => void
-    drawioUi: DrawioTheme
+    drawioUi: "min" | "sketch"
-    onDrawioUiChange: (theme: DrawioTheme) => void
+    onToggleDrawioUi: () => void
     darkMode: boolean
     onToggleDarkMode: () => void
     minimalStyle?: boolean
@@ -91,7 +90,7 @@ function SettingsContent({
     open,
     onOpenChange,
     drawioUi,
-    onDrawioUiChange,
+    onToggleDrawioUi,
     darkMode,
     onToggleDarkMode,
     minimalStyle = false,
@@ -135,11 +134,8 @@ function SettingsContent({
     const [isApplyingProxy, setIsApplyingProxy] = useState(false)
 
     useEffect(() => {
-        // Re-fetch config whenever the dialog opens to ensure we always show
+        // Only fetch if not cached in localStorage
-        // the access code input if the server requires it. This fixes the case
+        if (getStoredAccessCodeRequired() !== null) return
-        // where a stale localStorage cache (from before ACCESS_CODE_LIST was
-        // configured) would hide the access code input.
-        if (!open) return
 
         fetch(getApiEndpoint("/api/config"))
             .then((res) => {
@@ -155,9 +151,10 @@ function SettingsContent({
                 setAccessCodeRequired(required)
             })
             .catch(() => {
-                // Keep existing cached value on error
+                // Don't cache on error - allow retry on next mount
+                setAccessCodeRequired(false)
             })
-    }, [open])
+    }, [])
 
     // Detect current language from pathname
     useEffect(() => {
@@ -433,40 +430,23 @@ function SettingsContent({
                     {/* Draw.io Style */}
                     <SettingItem
                         label={dict.settings.drawioStyle}
-                        description={dict.settings.drawioStyleDescription}
+                        description={`${dict.settings.drawioStyleDescription} ${
+                            drawioUi === "min"
+                                ? dict.settings.minimal
+                                : dict.settings.sketch
+                        }`}
                     >
-                        <Select
+                        <Button
-                            value={drawioUi}
+                            id="drawio-ui"
-                            onValueChange={(v) =>
+                            variant="outline"
-                                onDrawioUiChange(v as DrawioTheme)
+                            onClick={onToggleDrawioUi}
-                            }
+                            className="h-9 w-[120px] rounded-xl border-border-subtle hover:bg-interactive-hover font-normal"
                         >
-                            <SelectTrigger
+                            {dict.settings.switchTo}{" "}
-                                id="drawio-ui-select"
+                            {drawioUi === "min"
-                                aria-label={dict.settings.drawioStyle}
+                                ? dict.settings.sketch
-                                className="w-[120px] h-9 rounded-xl"
+                                : dict.settings.minimal}
-                            >
+                        </Button>
-                                <SelectValue />
-                            </SelectTrigger>
-                            <SelectContent>
-                                <SelectItem value="kennedy">
-                                    {dict.settings.themeDefault}
-                                </SelectItem>
-                                <SelectItem value="atlas">Atlas</SelectItem>
-                                <SelectItem value="dark">
-                                    {dict.settings.themeDark}
-                                </SelectItem>
-                                <SelectItem value="min">
-                                    {dict.settings.themeMinimal}
-                                </SelectItem>
-                                <SelectItem value="sketch">
-                                    {dict.settings.themeSketch}
-                                </SelectItem>
-                                <SelectItem value="simple">
-                                    {dict.settings.themeSimple}
-                                </SelectItem>
-                            </SelectContent>
-                        </Select>
                     </SettingItem>
 
                     {/* Diagram Style */}

docker-compose.yml

@@ -11,9 +11,6 @@ services:
         # - NEXT_PUBLIC_BASE_PATH=/nextaidrawio
     ports: ["3000:3000"]
     env_file: .env
-    volumes:
-      # Persists admin panel settings (data/settings.json)
-      - ./data:/app/data
     # environment:
     #   # For subdirectory deployment, uncomment and set your path:
     #   NEXT_PUBLIC_BASE_PATH: /nextaidrawio

docs/cn/README_CN.md

@@ -56,31 +56,31 @@ https://github.com/user-attachments/assets/b2eef5f3-b335-4e71-a755-dc2e80931979
   <tr>
     <td colspan="2" valign="top" align="center">
       <strong>动画Transformer连接器</strong><br />
-      <p><strong>Prompt:</strong> Give me a **animated connector** diagram of transformer's architecture.</p>
+      <p><strong>提示词：</strong> 给我一个带有**动画连接器**的Transformer架构图。</p>
       <img src="../../public/animated_connectors.svg" alt="带动画连接器的Transformer架构" width="480" />
     </td>
   </tr>
   <tr>
     <td width="50%" valign="top">
-      <strong>RAG技术图</strong><br />
+      <strong>GCP架构图</strong><br />
-      <p><strong>Prompt:</strong> Generate a RAG architecture diagram for **chat application**. Use connected diagram for data ingestion</p>
+      <p><strong>提示词：</strong> 使用**GCP图标**生成一个GCP架构图。在这个图中，用户连接到托管在实例上的前端。</p>
-      <img src="../../public/rag_prod.svg" alt="RAG架构图" width="480" />
+      <img src="../../public/gcp_demo.svg" alt="GCP架构图" width="480" />
     </td>
     <td width="50%" valign="top">
-      <strong>React和AWS认证流程</strong><br />
+      <strong>AWS架构图</strong><br />
-      <p><strong>Prompt:</strong> Generate authentication process using React with **AWS**. Use Serverless architecture.</p>
+      <p><strong>提示词：</strong> 使用**AWS图标**生成一个AWS架构图。在这个图中，用户连接到托管在实例上的前端。</p>
-      <img src="../../public/auth.svg" alt="认证架构图" width="480" />
+      <img src="../../public/aws_demo.svg" alt="AWS架构图" width="480" />
     </td>
   </tr>
   <tr>
     <td width="50%" valign="top">
-      <strong>开放式创新</strong><br />
+      <strong>Azure架构图</strong><br />
-      <p><strong>Prompt:</strong> Create visualization of Henry Chesbrough's Open Innovation model.</p>
+      <p><strong>提示词：</strong> 使用**Azure图标**生成一个Azure架构图。在这个图中，用户连接到托管在实例上的前端。</p>
-      <img src="../../public/inno.svg" alt="开放式创新图" width="480" />
+      <img src="../../public/azure_demo.svg" alt="Azure架构图" width="480" />
     </td>
     <td width="50%" valign="top">
       <strong>猫咪素描</strong><br />
-      <p><strong>Prompt:</strong> Draw a cute cat for me.</p>
+      <p><strong>提示词：</strong> 给我画一只可爱的猫。</p>
       <img src="../../public/cat_demo.svg" alt="猫咪绘图" width="240" />
     </td>
   </tr>
@@ -222,12 +222,6 @@ npm run dev
 
 注意：`claude` 系列已在带有 AWS、Azure、GCP 等云架构 Logo 的 draw.io 图表上进行训练，因此如果您想创建云架构图，这是最佳选择。
 
-### 管理面板
-
-设置 `ADMIN_PASSWORD` 环境变量并访问 `/admin`，即可在 Web 面板中管理服务端设置（模型、访问码、功能开关、可观测性、配额），无需手动编辑 `.env`。
-
-📖 **[管理面板指南](./admin-panel.md)** — 启用方法、优先级规则和注意事项。
-
 
 ## 工作原理
 

docs/cn/admin-panel.md

@@ -1,24 +0,0 @@
-# 管理面板
-
-无需手动编辑 `.env`，您可以在 Web 管理面板中管理服务端设置。
-
-## 启用面板
-
-1. 设置 `ADMIN_PASSWORD` 环境变量（不设置则面板禁用）。
-2. 访问 `/admin` 并登录。
-
-## 可配置内容
-
-1. **Models（模型）** — 添加提供商及其 API Key 和模型列表，交互与应用内的模型设置相同。保存后这些模型成为所有用户可用的服务端模型，并在请求时与环境中的 `AI_MODELS_CONFIG` / `ai-models.json` 合并（面板不会修改这些环境文件）。
-2. **其余区块** — 访问码、生成参数、功能开关、可观测性和配额。保存的设置会写入 `data/settings.json` 并立即生效，无需重启（少数设置如 Langfuse 和 DynamoDB 标记为"需要重启"）。
-
-## 优先级
-
-面板中保存的设置覆盖环境变量，环境变量覆盖内置默认值。删除已保存的值会回退到环境变量。
-
-## 注意事项
-
-- 密钥以明文形式存储在 `data/settings.json` 中（文件权限 600），请妥善保管该文件。
-- 在无服务器平台（Vercel、Cloudflare Workers）上没有持久化磁盘，面板为只读 — 请改用环境变量配置。
-- 使用 Docker 时，`data/` 目录通过 `docker-compose.yml` 中的卷持久化。
-- `NEXT_PUBLIC_*` 变量在构建时固化，无法在面板中修改。

docs/cn/ai-providers.md

@@ -53,13 +53,6 @@ ANTHROPIC_API_KEY=your_api_key
 AI_MODEL=claude-sonnet-4-5-20250514
 ```
 
-或者使用 Bearer 认证令牌（例如通过会下发 OAuth 风格 token 的网关时）。`ANTHROPIC_AUTH_TOKEN` 会作为 `Authorization: Bearer <token>` 头发送，而 `ANTHROPIC_API_KEY` 会作为 `x-api-key` 头发送。两者互斥，只能设置其中之一：
-
-```bash
-ANTHROPIC_AUTH_TOKEN=your_auth_token
-AI_MODEL=claude-sonnet-4-5-20250514
-```
-
 可选的自定义端点：
 
 ```bash
@@ -222,7 +215,7 @@ MiniMax 支持两种 API 格式：
 
 ```bash
 MINIMAX_API_KEY=your_api_key
-AI_MODEL=MiniMax-M3
+AI_MODEL=MiniMax-M2.7
 ```
 
 可选配置：

docs/en/admin-panel.md

@@ -1,24 +0,0 @@
-# Admin Panel
-
-Instead of hand-editing `.env`, you can manage server settings in a web admin panel.
-
-## Enabling the panel
-
-1. Set the `ADMIN_PASSWORD` environment variable (leave unset to disable the panel).
-2. Visit `/admin` and sign in.
-
-## What you can configure
-
-1. **Models** — add providers with their API keys and model lists, using the same UI as the in-app model settings. Saved models become server-side models available to all users, merged with any `AI_MODELS_CONFIG` / `ai-models.json` from your environment at request time (the panel does not modify those env files).
-2. **Other sections** — access codes, generation parameters, features, observability, and quota. Saved settings are written to `data/settings.json` and apply immediately — no restart needed (a few settings such as Langfuse and DynamoDB are marked "Restart Required").
-
-## Precedence
-
-Settings saved in the panel override environment variables, which override built-in defaults. Removing a saved value falls back to the environment variable.
-
-## Notes
-
-- Secrets are stored in plaintext in `data/settings.json` (file mode 600). Keep the file private.
-- On serverless platforms (Vercel, Cloudflare Workers) there is no persistent disk, so the panel is read-only — configure via environment variables there.
-- With Docker, the `data/` directory is persisted via the volume in `docker-compose.yml`.
-- `NEXT_PUBLIC_*` variables are baked in at build time and cannot be changed in the panel.

docs/en/ai-providers.md

@@ -68,13 +68,6 @@ ANTHROPIC_API_KEY=your_api_key
 AI_MODEL=claude-sonnet-4-5-20250514
 ```
 
-Or use a Bearer auth token instead of an API key (e.g. when going through a gateway that issues OAuth-style tokens). `ANTHROPIC_AUTH_TOKEN` is sent as `Authorization: Bearer <token>`, while `ANTHROPIC_API_KEY` is sent as `x-api-key`. The two are mutually exclusive — set only one:
-
-```bash
-ANTHROPIC_AUTH_TOKEN=your_auth_token
-AI_MODEL=claude-sonnet-4-5-20250514
-```
-
 Optional custom endpoint:
 
 ```bash
@@ -237,7 +230,7 @@ MiniMax supports two API formats:
 
 ```bash
 MINIMAX_API_KEY=your_api_key
-AI_MODEL=MiniMax-M3
+AI_MODEL=MiniMax-M2.7
 ```
 
 Optional configuration:

docs/ja/README_JA.md

@@ -54,31 +54,31 @@ https://github.com/user-attachments/assets/b2eef5f3-b335-4e71-a755-dc2e80931979
   <tr>
     <td colspan="2" valign="top" align="center">
       <strong>アニメーションTransformerコネクタ</strong><br />
-      <p><strong>Prompt:</strong> Give me a **animated connector** diagram of transformer's architecture.</p>
+      <p><strong>プロンプト：</strong> **アニメーションコネクタ**付きのTransformerアーキテクチャ図を作成してください。</p>
       <img src="../../public/animated_connectors.svg" alt="アニメーションコネクタ付きTransformerアーキテクチャ" width="480" />
     </td>
   </tr>
   <tr>
     <td width="50%" valign="top">
-      <strong>RAG技術ダイアグラム</strong><br />
+      <strong>GCPアーキテクチャ図</strong><br />
-      <p><strong>Prompt:</strong> Generate a RAG architecture diagram for **chat application**. Use connected diagram for data ingestion</p>
+      <p><strong>プロンプト：</strong> **GCPアイコン**を使用してGCPアーキテクチャ図を生成してください。この図では、ユーザーがインスタンス上でホストされているフロントエンドに接続します。</p>
-      <img src="../../public/rag_prod.svg" alt="RAGアーキテクチャ図" width="480" />
+      <img src="../../public/gcp_demo.svg" alt="GCPアーキテクチャ図" width="480" />
     </td>
     <td width="50%" valign="top">
-      <strong>ReactとAWSによる認証</strong><br />
+      <strong>AWSアーキテクチャ図</strong><br />
-      <p><strong>Prompt:</strong> Generate authentication process using React with **AWS**. Use Serverless architecture.</p>
+      <p><strong>プロンプト：</strong> **AWSアイコン**を使用してAWSアーキテクチャ図を生成してください。この図では、ユーザーがインスタンス上でホストされているフロントエンドに接続します。</p>
-      <img src="../../public/auth.svg" alt="認証アーキテクチャ図" width="480" />
+      <img src="../../public/aws_demo.svg" alt="AWSアーキテクチャ図" width="480" />
     </td>
   </tr>
   <tr>
     <td width="50%" valign="top">
-      <strong>オープンイノベーション</strong><br />
+      <strong>Azureアーキテクチャ図</strong><br />
-      <p><strong>Prompt:</strong> Create visualization of Henry Chesbrough's Open Innovation model.</p>
+      <p><strong>プロンプト：</strong> **Azureアイコン**を使用してAzureアーキテクチャ図を生成してください。この図では、ユーザーがインスタンス上でホストされているフロントエンドに接続します。</p>
-      <img src="../../public/inno.svg" alt="オープンイノベーション図" width="480" />
+      <img src="../../public/azure_demo.svg" alt="Azureアーキテクチャ図" width="480" />
     </td>
     <td width="50%" valign="top">
       <strong>猫のスケッチ</strong><br />
-      <p><strong>Prompt:</strong> Draw a cute cat for me.</p>
+      <p><strong>プロンプト：</strong> かわいい猫を描いてください。</p>
       <img src="../../public/cat_demo.svg" alt="猫の絵" width="240" />
     </td>
   </tr>
@@ -221,12 +221,6 @@ AWS BedrockとOpenRouter以外のすべてのプロバイダーはカスタム
 
 注：`claude`シリーズはAWS、Azure、GCPなどのクラウドアーキテクチャロゴ付きのdraw.ioダイアグラムで学習されているため、クラウドアーキテクチャダイアグラムを作成したい場合は最適な選択です。
 
-### 管理パネル
-
-`ADMIN_PASSWORD` 環境変数を設定して `/admin` にアクセスすると、`.env` を手動で編集する代わりに Web パネルでサーバー設定（モデル、アクセスコード、機能、可観測性、クォータ）を管理できます。
-
-📖 **[管理パネルガイド](./admin-panel.md)** — 有効化の方法、優先順位ルール、注意事項。
-
 
 ## 仕組み
 

docs/ja/admin-panel.md

@@ -1,24 +0,0 @@
-# 管理パネル
-
-`.env` を手動で編集する代わりに、Web 管理パネルでサーバー設定を管理できます。
-
-## パネルの有効化
-
-1. `ADMIN_PASSWORD` 環境変数を設定します（未設定の場合、パネルは無効になります）。
-2. `/admin` にアクセスしてサインインします。
-
-## 設定できる項目
-
-1. **Models（モデル）** — アプリ内のモデル設定と同じ UI で、プロバイダーの API キーとモデルリストを追加します。保存するとそれらは全ユーザーが利用できるサーバーサイドモデルになり、リクエスト時に環境の `AI_MODELS_CONFIG` / `ai-models.json` とマージされます（パネルがこれらの環境ファイルを変更することはありません）。
-2. **その他のセクション** — アクセスコード、生成パラメータ、機能、可観測性、クォータ。保存された設定は `data/settings.json` に書き込まれ、即座に反映されます — 再起動は不要です（Langfuse や DynamoDB など一部の設定は「再起動が必要」と表示されます）。
-
-## 優先順位
-
-パネルで保存された設定は環境変数を上書きし、環境変数は組み込みのデフォルト値を上書きします。保存した値を削除すると環境変数にフォールバックします。
-
-## 注意事項
-
-- シークレットは `data/settings.json` に平文で保存されます（ファイルモード 600）。このファイルは非公開に保ってください。
-- サーバーレスプラットフォーム（Vercel、Cloudflare Workers）には永続ディスクがないため、パネルは読み取り専用です — その環境では環境変数で設定してください。
-- Docker 使用時は、`data/` ディレクトリが `docker-compose.yml` のボリュームで永続化されます。
-- `NEXT_PUBLIC_*` 変数はビルド時に固定され、パネルでは変更できません。

docs/ja/ai-providers.md

@@ -53,13 +53,6 @@ ANTHROPIC_API_KEY=your_api_key
 AI_MODEL=claude-sonnet-4-5-20250514
 ```
 
-または、Bearer 認証トークンを使用することもできます（OAuth スタイルのトークンを発行するゲートウェイ経由で利用する場合など）。`ANTHROPIC_AUTH_TOKEN` は `Authorization: Bearer <token>` ヘッダーで送信され、`ANTHROPIC_API_KEY` は `x-api-key` ヘッダーで送信されます。両者は排他的なので、いずれか一方のみを設定してください:
-
-```bash
-ANTHROPIC_AUTH_TOKEN=your_auth_token
-AI_MODEL=claude-sonnet-4-5-20250514
-```
-
 任意のカスタムエンドポイント:
 
 ```bash
@@ -222,7 +215,7 @@ MiniMax は 2 つの API 形式をサポートしています：
 
 ```bash
 MINIMAX_API_KEY=your_api_key
-AI_MODEL=MiniMax-M3
+AI_MODEL=MiniMax-M2.7
 ```
 
 オプション設定：

electron/electron-builder.yml

@@ -95,10 +95,6 @@ linux:
       arch:
         - x64
         - arm64
-    - target: rpm
-      arch:
-        - x64
-        - arm64
 
 # Publish configuration (optional)
 publish:

electron/electron.d.ts

@@ -101,8 +101,8 @@ declare global {
 }
 
 export type {
-    ApplyPresetResult,
     ConfigPreset,
+    ApplyPresetResult,
     ProxyConfig,
     SetProxyResult,
     SetUserLocaleResult,

electron/main/window-manager.ts

@@ -60,13 +60,6 @@ export function createWindow(serverUrl: string): BrowserWindow {
         mainWindow.webContents.openDevTools()
     }
 
-    // Override the draw.io iframe's beforeunload handler so the window can
-    // close after the user edits text in a shape (fixes #815). Diagrams are
-    // already persisted via autosave, so the prompt is unnecessary.
-    mainWindow.webContents.on("will-prevent-unload", (event) => {
-        event.preventDefault()
-    })
-
     mainWindow.on("closed", () => {
         mainWindow = null
     })

env.example

@@ -25,8 +25,7 @@ AI_MODEL=global.anthropic.claude-sonnet-4-5-20250929-v1:0
 # OPENAI_REASONING_SUMMARY=detailed  # Optional: Override reasoning summary (none/brief/detailed)
 
 # Anthropic (Direct) Configuration
-# ANTHROPIC_API_KEY=sk-ant-...                 # Sent as `x-api-key` header
+# ANTHROPIC_API_KEY=sk-ant-...
-# ANTHROPIC_AUTH_TOKEN=                        # Alternative to ANTHROPIC_API_KEY; sent as `Authorization: Bearer` header (mutually exclusive)
 # ANTHROPIC_BASE_URL=https://your-custom-anthropic/v1
 # ANTHROPIC_THINKING_TYPE=enabled            # Optional: Anthropic extended thinking (enabled)
 # ANTHROPIC_THINKING_BUDGET_TOKENS=12000     # Optional: Budget for extended thinking in tokens
@@ -116,14 +115,6 @@ AI_MODEL=global.anthropic.claude-sonnet-4-5-20250929-v1:0
 # Access Control (Optional)
 # ACCESS_CODE_LIST=your-secret-code,another-code
 
-# Admin Panel (Optional)
-# Set a password to enable the web admin panel at /admin, where most of the
-# settings in this file can be edited at runtime (stored in data/settings.json,
-# which takes precedence over environment variables).
-# Leave unset to disable the admin panel entirely.
-# ADMIN_PASSWORD=your-admin-password
-# SETTINGS_FILE=./data/settings.json  # Optional: custom settings file location
-
 # Draw.io Configuration (Optional)
 # NEXT_PUBLIC_DRAWIO_BASE_URL=https://embed.diagrams.net  # Default: https://embed.diagrams.net
 # Use this to point to a self-hosted draw.io instance

instrumentation.ts

@@ -1,17 +1,7 @@
 import { LangfuseSpanProcessor } from "@langfuse/otel"
 import { NodeTracerProvider } from "@opentelemetry/sdk-trace-node"
 
-export async function register() {
+export function register() {
-    // Overlay admin settings file onto process.env before anything reads config
-    if (process.env.NEXT_RUNTIME === "nodejs") {
-        try {
-            const { applyToEnv } = await import("@/lib/admin/settings")
-            applyToEnv()
-        } catch (err) {
-            console.error("[admin-settings] Failed to apply settings:", err)
-        }
-    }
-
     // Skip telemetry if Langfuse env vars are not configured
     if (!process.env.LANGFUSE_PUBLIC_KEY || !process.env.LANGFUSE_SECRET_KEY) {
         console.warn(

lib/admin/auth.ts

@@ -1,37 +0,0 @@
-import { timingSafeEqual } from "crypto"
-
-// Shared auth for admin API routes: compares x-admin-password header
-// against the ADMIN_PASSWORD env var. Unset password = panel disabled.
-export function checkAdminAuth(req: Request): Response | null {
-    const password = process.env.ADMIN_PASSWORD
-    if (!password) {
-        return Response.json(
-            {
-                error: "Admin panel is disabled. Set the ADMIN_PASSWORD environment variable to enable it.",
-            },
-            { status: 403 },
-        )
-    }
-    const provided = req.headers.get("x-admin-password") || ""
-    const a = Buffer.from(provided)
-    const b = Buffer.from(password)
-    if (a.length !== b.length || !timingSafeEqual(a, b)) {
-        return Response.json(
-            { error: "Invalid admin password" },
-            { status: 401 },
-        )
-    }
-    return null
-}
-
-export interface MaskedSecret {
-    isSet: true
-    hint: string
-}
-
-export function maskSecret(value: string): MaskedSecret {
-    return {
-        isSet: true,
-        hint: value.length > 8 ? `…${value.slice(-4)}` : "••••",
-    }
-}

lib/admin/providers.ts

@@ -1,303 +0,0 @@
-import { z } from "zod"
-import {
-    ProviderNameSchema,
-    type ServerModelsConfig,
-} from "@/lib/server-model-config"
-import {
-    FIXED_CRED_PROVIDERS,
-    PROVIDER_INFO,
-    type ProviderName,
-} from "@/lib/types/model-config"
-import { type MaskedSecret, maskSecret } from "./auth"
-import { loadSettings } from "./settings"
-
-// Admin-configured providers, mirroring the user ModelConfigDialog's data
-// model but stored server-side (settings.json, ADMIN_PROVIDERS key).
-//
-// They COEXIST with an env-based AI_MODELS_CONFIG / ai-models.json:
-// loadRawServerModelsConfig() merges the env baseline with the panel's
-// providers at read time, so .env stays authoritative for its own entries.
-// Panel credentials are written to ADMIN_-prefixed env vars (wired up via
-// apiKeyEnv/baseUrlEnv) so they never shadow standard vars like
-// OPENAI_API_KEY that env-based entries may rely on.
-
-export const ADMIN_PROVIDERS_KEY = "ADMIN_PROVIDERS"
-
-// A secret field in transit: plaintext string (new value) or an
-// {isSet} marker meaning "keep the stored value".
-const SecretInputSchema = z
-    .union([z.string(), z.object({ isSet: z.literal(true), hint: z.string() })])
-    .optional()
-
-export const AdminProviderSchema = z.object({
-    id: z.string().min(1),
-    provider: ProviderNameSchema,
-    name: z.string().optional(),
-    apiKey: SecretInputSchema,
-    baseUrl: z.string().optional(),
-    awsAccessKeyId: SecretInputSchema,
-    awsSecretAccessKey: SecretInputSchema,
-    awsRegion: z.string().optional(),
-    vertexApiKey: SecretInputSchema,
-    models: z.array(z.string().min(1)),
-    isDefault: z.boolean().optional(),
-})
-
-export const AdminProvidersSchema = z.array(AdminProviderSchema)
-
-// Stored shape: secrets are plain strings (never {isSet} markers, which
-// only exist in transit). Used to validate ADMIN_PROVIDERS on load so a
-// hand-edited/corrupted value can't slip a marker object past maskSecret.
-const StoredAdminProviderSchema = AdminProviderSchema.extend({
-    apiKey: z.string().optional(),
-    awsAccessKeyId: z.string().optional(),
-    awsSecretAccessKey: z.string().optional(),
-    vertexApiKey: z.string().optional(),
-})
-
-export type AdminProviderInput = z.infer<typeof AdminProviderSchema>
-
-// Stored form: secrets are plain strings
-export interface StoredAdminProvider {
-    id: string
-    provider: ProviderName
-    name?: string
-    apiKey?: string
-    baseUrl?: string
-    awsAccessKeyId?: string
-    awsSecretAccessKey?: string
-    awsRegion?: string
-    vertexApiKey?: string
-    models: string[]
-    isDefault?: boolean
-}
-
-const SECRET_FIELDS = [
-    "apiKey",
-    "awsAccessKeyId",
-    "awsSecretAccessKey",
-    "vertexApiKey",
-] as const
-
-// ADMIN_-prefixed env var names for instance `index` (0-based) of a provider
-function credEnvNames(
-    provider: ProviderName,
-    index: number,
-): { key?: string; url?: string } {
-    if (FIXED_CRED_PROVIDERS.includes(provider) || provider === "edgeone") {
-        return {}
-    }
-    const prefix =
-        provider === "gateway" ? "AI_GATEWAY" : provider.toUpperCase()
-    const suffix = index === 0 ? "" : `_${index + 1}`
-    return {
-        key: `ADMIN_${prefix}_API_KEY${suffix}`,
-        url: `ADMIN_${prefix}_BASE_URL${suffix}`,
-    }
-}
-
-export function loadAdminProviders(): StoredAdminProvider[] {
-    const raw = loadSettings()[ADMIN_PROVIDERS_KEY]
-    if (!raw) return []
-    try {
-        const parsed = JSON.parse(raw)
-        if (!Array.isArray(parsed)) return []
-        // Validate each entry's shape — a malformed/hand-edited value must
-        // not reach runtime code that assumes provider/models exist.
-        return parsed.flatMap((entry) => {
-            const result = StoredAdminProviderSchema.safeParse(entry)
-            return result.success ? [result.data as StoredAdminProvider] : []
-        })
-    } catch {
-        console.error("[admin-providers] Failed to parse stored providers")
-        return []
-    }
-}
-
-export type MaskedAdminProvider = Omit<
-    StoredAdminProvider,
-    (typeof SECRET_FIELDS)[number]
-> & {
-    apiKey?: MaskedSecret
-    awsAccessKeyId?: MaskedSecret
-    awsSecretAccessKey?: MaskedSecret
-    vertexApiKey?: MaskedSecret
-}
-
-export function maskAdminProviders(
-    list: StoredAdminProvider[],
-): MaskedAdminProvider[] {
-    return list.map((p) => {
-        const masked: MaskedAdminProvider = { ...p } as MaskedAdminProvider
-        for (const field of SECRET_FIELDS) {
-            const value = p[field]
-            masked[field] = value ? maskSecret(value) : undefined
-        }
-        return masked
-    })
-}
-
-// Resolve {isSet} markers in incoming secrets against the stored list
-export function mergeSecrets(
-    incoming: AdminProviderInput[],
-    stored: StoredAdminProvider[],
-): StoredAdminProvider[] {
-    const storedById = new Map(stored.map((p) => [p.id, p]))
-    return incoming.map((p) => {
-        const prev = storedById.get(p.id)
-        const merged = { ...p } as StoredAdminProvider
-        for (const field of SECRET_FIELDS) {
-            const value = p[field]
-            if (typeof value === "string") {
-                merged[field] = value || undefined
-            } else if (value?.isSet) {
-                merged[field] = prev?.[field]
-            } else {
-                merged[field] = undefined
-            }
-        }
-        return merged
-    })
-}
-
-function displayName(p: StoredAdminProvider): string {
-    return p.name?.trim() || PROVIDER_INFO[p.provider].label
-}
-
-export function validateAdminProviders(
-    list: StoredAdminProvider[],
-    envConfig: ServerModelsConfig | null = null,
-): string | null {
-    const envProviders = envConfig?.providers ?? []
-    for (const single of FIXED_CRED_PROVIDERS) {
-        if (list.filter((p) => p.provider === single).length > 1) {
-            return `Only one ${PROVIDER_INFO[single].label} provider is supported (its credentials use fixed environment variables).`
-        }
-        // Its credentials are global; a panel instance would silently
-        // override the credentials env-configured models rely on
-        if (
-            list.some((p) => p.provider === single) &&
-            envProviders.some((p) => p.provider === single)
-        ) {
-            return `${PROVIDER_INFO[single].label} is already configured in AI_MODELS_CONFIG / ai-models.json and shares global credentials. Manage it via the environment configuration instead.`
-        }
-    }
-    const names = list.map((p) => displayName(p))
-    if (new Set(names).size !== names.length) {
-        return "Provider display names must be unique."
-    }
-    const envNames = new Set(envProviders.map((p) => p.name))
-    const clash = names.find((n) => envNames.has(n))
-    if (clash) {
-        return `"${clash}" is already defined in AI_MODELS_CONFIG / ai-models.json. Use a different display name.`
-    }
-    if (list.filter((p) => p.isDefault).length > 1) {
-        return "Only one provider can be the default."
-    }
-    return null
-}
-
-// The panel's contribution to the server models config, derived at read
-// time and merged with the env baseline by loadRawServerModelsConfig().
-export function adminProvidersToConfig(
-    list: StoredAdminProvider[],
-): ServerModelsConfig {
-    const config: ServerModelsConfig = { providers: [] }
-    const indexByProvider = new Map<ProviderName, number>()
-    for (const p of list) {
-        const index = indexByProvider.get(p.provider) ?? 0
-        indexByProvider.set(p.provider, index + 1)
-        if (p.models.length === 0) continue
-        const env = credEnvNames(p.provider, index)
-        config.providers.push({
-            name: displayName(p),
-            provider: p.provider,
-            models: p.models,
-            ...(env.key && p.apiKey ? { apiKeyEnv: env.key } : {}),
-            ...(env.url && p.baseUrl ? { baseUrlEnv: env.url } : {}),
-            ...(p.isDefault ? { default: true } : {}),
-        })
-    }
-    return config
-}
-
-// Settings updates derived from the provider list: credential env vars,
-// the stored list itself, and AI_PROVIDER/AI_MODEL when a default is set.
-// Keys derived from `previous` but absent now are set to null (removed,
-// falling back to the environment).
-export function deriveEnvUpdates(
-    list: StoredAdminProvider[],
-    previous: StoredAdminProvider[],
-): Record<string, string | null> {
-    const updates: Record<string, string | null> = {}
-
-    // Clear everything the previous list owned, then overwrite below
-    for (const key of derivedEnvKeys(previous)) updates[key] = null
-
-    const indexByProvider = new Map<ProviderName, number>()
-    for (const p of list) {
-        const index = indexByProvider.get(p.provider) ?? 0
-        indexByProvider.set(p.provider, index + 1)
-
-        if (p.provider === "bedrock") {
-            if (p.awsAccessKeyId) updates.AWS_ACCESS_KEY_ID = p.awsAccessKeyId
-            if (p.awsSecretAccessKey)
-                updates.AWS_SECRET_ACCESS_KEY = p.awsSecretAccessKey
-            if (p.awsRegion) updates.AWS_REGION = p.awsRegion
-        } else if (p.provider === "vertexai") {
-            if (p.vertexApiKey) updates.GOOGLE_VERTEX_API_KEY = p.vertexApiKey
-            if (p.baseUrl) updates.GOOGLE_VERTEX_BASE_URL = p.baseUrl
-        } else if (p.provider === "ollama") {
-            if (p.apiKey) updates.OLLAMA_API_KEY = p.apiKey
-            if (p.baseUrl) updates.OLLAMA_BASE_URL = p.baseUrl
-        } else {
-            const env = credEnvNames(p.provider, index)
-            if (env.key && p.apiKey) updates[env.key] = p.apiKey
-            if (env.url && p.baseUrl) updates[env.url] = p.baseUrl
-        }
-    }
-
-    updates[ADMIN_PROVIDERS_KEY] = list.length > 0 ? JSON.stringify(list) : null
-
-    // The panel's default also becomes the server-wide default model;
-    // without one, the env-configured default applies.
-    const defaultEntry = list.find((p) => p.isDefault && p.models.length > 0)
-    if (defaultEntry) {
-        updates.AI_PROVIDER = defaultEntry.provider
-        updates.AI_MODEL = defaultEntry.models[0]
-    }
-
-    return updates
-}
-
-// Every settings key the panel may have written for a given list.
-// AI_MODELS_CONFIG is included to clean up values written by older
-// versions of the panel (it is no longer written).
-function derivedEnvKeys(list: StoredAdminProvider[]): string[] {
-    const keys = new Set<string>([
-        "AI_MODELS_CONFIG",
-        "AI_PROVIDER",
-        "AI_MODEL",
-    ])
-    const indexByProvider = new Map<ProviderName, number>()
-    for (const p of list) {
-        const index = indexByProvider.get(p.provider) ?? 0
-        indexByProvider.set(p.provider, index + 1)
-        if (p.provider === "bedrock") {
-            keys.add("AWS_ACCESS_KEY_ID")
-            keys.add("AWS_SECRET_ACCESS_KEY")
-            keys.add("AWS_REGION")
-        } else if (p.provider === "vertexai") {
-            keys.add("GOOGLE_VERTEX_API_KEY")
-            keys.add("GOOGLE_VERTEX_BASE_URL")
-        } else if (p.provider === "ollama") {
-            keys.add("OLLAMA_API_KEY")
-            keys.add("OLLAMA_BASE_URL")
-        } else {
-            const env = credEnvNames(p.provider, index)
-            if (env.key) keys.add(env.key)
-            if (env.url) keys.add(env.url)
-        }
-    }
-    return [...keys]
-}

lib/admin/settings-registry.ts

@@ -1,229 +0,0 @@
-// Declarative registry of the general env vars editable in the admin panel.
-// Drives both server-side validation (app/api/admin/settings) and UI
-// rendering (app/[lang]/admin). Keys are exactly the env var names.
-//
-// AI providers and models are managed separately in the panel's Models
-// section (lib/admin/providers.ts), not here.
-//
-// Not listed here (and therefore rejected by the API):
-// - NEXT_PUBLIC_* vars: baked into the client bundle at build time
-// - ADMIN_PASSWORD / SETTINGS_FILE: bootstrap values, env-only to avoid lockout
-// - Per-provider reasoning/thinking tuning vars: env-only (see env.example)
-
-export type SettingType = "string" | "secret" | "number" | "boolean" | "enum"
-
-export interface SettingDef {
-    key: string
-    group: string
-    type: SettingType
-    label: string
-    description?: string
-    options?: string[]
-    min?: number
-    max?: number
-    placeholder?: string
-    // Built-in default applied at runtime when the value is unset, so the UI
-    // can reflect actual behavior (e.g. ALLOW_PRIVATE_URLS defaults to "true").
-    default?: string
-    // Value is only picked up at process start (module-load readers)
-    restartRequired?: boolean
-}
-
-export interface SettingGroup {
-    id: string
-    title: string
-    description: string
-    // Optional sections gated by an on/off switch in the panel; fields are
-    // grayed out until enabled. Starts on when any field is already set.
-    toggleable?: boolean
-}
-
-export const SETTING_GROUPS: SettingGroup[] = [
-    {
-        id: "generation",
-        title: "Generation",
-        description: "Output parameters applied to all chat requests.",
-    },
-    {
-        id: "access",
-        title: "Access Control",
-        description: "Restrict who can use this deployment.",
-    },
-    {
-        id: "features",
-        title: "Features",
-        description: "Optional features and security toggles.",
-    },
-    {
-        id: "observability",
-        title: "Observability",
-        description: "Langfuse tracing for LLM calls.",
-        toggleable: true,
-    },
-    {
-        id: "quota",
-        title: "Quota & Rate Limits",
-        description:
-            "Per-IP usage limits. Enforcement requires a DynamoDB table.",
-        toggleable: true,
-    },
-]
-
-export const SETTINGS_REGISTRY: SettingDef[] = [
-    // ── Generation ───────────────────────────────────────────────────
-    {
-        key: "TEMPERATURE",
-        group: "generation",
-        type: "number",
-        label: "Temperature",
-        description:
-            "Leave unset for reasoning models that reject temperature.",
-        min: 0,
-        max: 2,
-    },
-    {
-        key: "MAX_OUTPUT_TOKENS",
-        group: "generation",
-        type: "number",
-        label: "Max Output Tokens",
-        min: 1,
-    },
-
-    // ── Access Control ───────────────────────────────────────────────
-    {
-        key: "ACCESS_CODE_LIST",
-        group: "access",
-        type: "string",
-        label: "Access Codes",
-        description:
-            "Comma-separated list. Users must enter one to chat. Empty = open access.",
-        placeholder: "code1,code2",
-    },
-
-    // ── Features ─────────────────────────────────────────────────────
-    {
-        key: "ENABLE_VLM_VALIDATION",
-        group: "features",
-        type: "boolean",
-        label: "VLM Diagram Validation",
-        description:
-            "Visually validate generated diagrams with a vision model.",
-    },
-    {
-        key: "VALIDATION_MODEL",
-        group: "features",
-        type: "string",
-        label: "Validation Model",
-        description: "Falls back to the default AI model when empty.",
-    },
-    {
-        key: "VALIDATION_TIMEOUT",
-        group: "features",
-        type: "number",
-        label: "Validation Timeout (ms)",
-        min: 1000,
-    },
-    {
-        key: "ENABLE_HISTORY_XML_REPLACE",
-        group: "features",
-        type: "boolean",
-        label: "History XML Compression",
-        description: "Replace old diagram XML in history with placeholders.",
-    },
-    {
-        key: "ALLOW_PRIVATE_URLS",
-        group: "features",
-        type: "boolean",
-        label: "Allow Private URLs",
-        description:
-            "Turn off to block requests to private IPs and internal hostnames (SSRF protection).",
-        // Unset means allowed at runtime (ssrf-protection: !== "false")
-        default: "true",
-    },
-
-    // ── Observability ────────────────────────────────────────────────
-    {
-        key: "LANGFUSE_PUBLIC_KEY",
-        group: "observability",
-        type: "string",
-        label: "Langfuse Public Key",
-        placeholder: "pk-lf-…",
-        restartRequired: true,
-    },
-    {
-        key: "LANGFUSE_SECRET_KEY",
-        group: "observability",
-        type: "secret",
-        label: "Langfuse Secret Key",
-        restartRequired: true,
-    },
-    {
-        key: "LANGFUSE_BASEURL",
-        group: "observability",
-        type: "string",
-        label: "Langfuse Base URL",
-        placeholder: "https://cloud.langfuse.com",
-        restartRequired: true,
-    },
-
-    // ── Quota ────────────────────────────────────────────────────────
-    {
-        key: "DAILY_REQUEST_LIMIT",
-        group: "quota",
-        type: "number",
-        label: "Daily Request Limit",
-        description: "Per IP per day.",
-        min: 1,
-    },
-    {
-        key: "DAILY_TOKEN_LIMIT",
-        group: "quota",
-        type: "number",
-        label: "Daily Token Limit",
-        description: "Per IP per day.",
-        min: 1,
-    },
-    {
-        key: "TPM_LIMIT",
-        group: "quota",
-        type: "number",
-        label: "Tokens Per Minute",
-        min: 1,
-    },
-    {
-        key: "DYNAMODB_QUOTA_TABLE",
-        group: "quota",
-        type: "string",
-        label: "DynamoDB Table",
-        description: "Quota enforcement is disabled when empty.",
-        restartRequired: true,
-    },
-    {
-        key: "DYNAMODB_REGION",
-        group: "quota",
-        type: "string",
-        label: "DynamoDB Region",
-        placeholder: "ap-northeast-1",
-        restartRequired: true,
-    },
-    {
-        key: "QUOTA_TIMEZONE",
-        group: "quota",
-        type: "string",
-        label: "Quota Timezone",
-        description: "Timezone for the daily reset boundary.",
-        placeholder: "UTC",
-        restartRequired: true,
-    },
-]
-
-export const SETTINGS_BY_KEY: Map<string, SettingDef> = new Map(
-    SETTINGS_REGISTRY.map((def) => [def.key, def]),
-)
-
-export const SETTINGS_BY_GROUP: Map<string, SettingDef[]> = new Map(
-    SETTING_GROUPS.map((g) => [
-        g.id,
-        SETTINGS_REGISTRY.filter((d) => d.group === g.id),
-    ]),
-)

lib/admin/settings.ts

@@ -1,134 +0,0 @@
-import fs from "fs"
-import path from "path"
-
-// File-based admin settings, overlaid onto process.env (dotenv-style).
-// Precedence: settings file > env var > built-in default.
-// Keys are exactly the env var names.
-
-interface SettingsFile {
-    version: 1
-    values: Record<string, string>
-}
-
-// Original env values snapshotted before the first overlay, so removing a
-// key from the settings file restores the env default. null = was unset.
-const originalEnv: Record<string, string | null> = {}
-// Keys currently overlaid, so we can restore ones removed from the file.
-let overlaidKeys = new Set<string>()
-
-let cachedSettings: Record<string, string> | null = null
-
-export function getSettingsPath(): string {
-    const custom = process.env.SETTINGS_FILE
-    if (custom && custom.trim().length > 0) return custom
-    return path.join(process.cwd(), "data", "settings.json")
-}
-
-export function loadSettings(): Record<string, string> {
-    if (cachedSettings) return cachedSettings
-    try {
-        const raw = fs.readFileSync(getSettingsPath(), "utf8")
-        const parsed = JSON.parse(raw) as SettingsFile
-        // Keep only string values — a hand-edited or corrupted file could
-        // hold null/arrays/numbers that would otherwise be overlaid onto
-        // process.env and coerce to junk like "[object Object]".
-        const values: Record<string, string> = {}
-        const rawValues =
-            parsed &&
-            typeof parsed.values === "object" &&
-            parsed.values &&
-            !Array.isArray(parsed.values)
-                ? parsed.values
-                : {}
-        for (const [key, value] of Object.entries(rawValues)) {
-            if (typeof value === "string") values[key] = value
-        }
-        cachedSettings = values
-    } catch (err: any) {
-        if (err?.code !== "ENOENT") {
-            console.error("[admin-settings] Failed to read settings file:", err)
-        }
-        cachedSettings = {}
-    }
-    return cachedSettings
-}
-
-export function applyToEnv(): void {
-    const values = loadSettings()
-
-    // Restore env for keys that were overlaid before but are now gone
-    for (const key of overlaidKeys) {
-        if (!(key in values)) {
-            const original = originalEnv[key]
-            if (original === null) delete process.env[key]
-            else process.env[key] = original
-        }
-    }
-
-    for (const [key, value] of Object.entries(values)) {
-        if (!(key in originalEnv)) {
-            originalEnv[key] = process.env[key] ?? null
-        }
-        process.env[key] = value
-    }
-
-    overlaidKeys = new Set(Object.keys(values))
-}
-
-// The effective env value if the file entry were removed (for fallback display)
-export function getEnvFallback(key: string): string | null {
-    if (overlaidKeys.has(key)) return originalEnv[key] ?? null
-    return process.env[key] ?? null
-}
-
-// Whether a key's current value comes from the file, the environment, or is unset
-export function getValueSource(key: string): "file" | "env" | "default" {
-    if (key in loadSettings()) return "file"
-    return getEnvFallback(key) !== null ? "env" : "default"
-}
-
-export function saveSettings(updates: Record<string, string | null>): void {
-    const current = { ...loadSettings() }
-    for (const [key, value] of Object.entries(updates)) {
-        if (value === null) delete current[key]
-        else current[key] = value
-    }
-
-    const filePath = getSettingsPath()
-    fs.mkdirSync(path.dirname(filePath), { recursive: true })
-    const tmpPath = `${filePath}.tmp`
-    const data: SettingsFile = { version: 1, values: current }
-    fs.writeFileSync(tmpPath, JSON.stringify(data, null, 2), { mode: 0o600 })
-    fs.renameSync(tmpPath, filePath)
-
-    cachedSettings = current
-    applyToEnv()
-}
-
-let writableCache: boolean | null = null
-
-export function isSettingsWritable(): boolean {
-    if (writableCache !== null) return writableCache
-    try {
-        const dir = path.dirname(getSettingsPath())
-        fs.mkdirSync(dir, { recursive: true })
-        fs.accessSync(dir, fs.constants.W_OK)
-        writableCache = true
-    } catch {
-        writableCache = false
-    }
-    return writableCache
-}
-
-// Test-only: reset module state
-export function _resetForTests(): void {
-    cachedSettings = null
-    writableCache = null
-    for (const key of overlaidKeys) {
-        const original = originalEnv[key]
-        if (original === null) delete process.env[key]
-        else if (original !== undefined) process.env[key] = original
-    }
-    overlaidKeys = new Set()
-    for (const key of Object.keys(originalEnv)) delete originalEnv[key]
-}

lib/ai-providers.ts

@@ -537,7 +537,7 @@ function buildProviderOptions(
 }
 
 // Map of provider to required environment variable
-export const PROVIDER_ENV_VARS: Record<ProviderName, string | null> = {
+const PROVIDER_ENV_VARS: Record<ProviderName, string | null> = {
     bedrock: null, // AWS SDK auto-uses IAM role on AWS, or env vars locally
     openai: "OPENAI_API_KEY",
     anthropic: "ANTHROPIC_API_KEY",
@@ -573,15 +573,7 @@ function detectProvider(): ProviderName | null {
             // Skip ollama - it doesn't require credentials
             continue
         }
-        // Anthropic accepts ANTHROPIC_AUTH_TOKEN (Bearer auth) as alternative to ANTHROPIC_API_KEY
+        if (process.env[envVar]) {
-        const hasCredential =
-            provider === "anthropic"
-                ? !!(
-                      process.env.ANTHROPIC_API_KEY ||
-                      process.env.ANTHROPIC_AUTH_TOKEN
-                  )
-                : !!process.env[envVar]
-        if (hasCredential) {
             // Azure requires additional config (baseURL or resourceName)
             if (provider === "azure") {
                 const hasBaseUrl = !!process.env.AZURE_BASE_URL
@@ -623,26 +615,13 @@ function validateProviderCredentials(
         return
     }
 
-    // Anthropic accepts ANTHROPIC_AUTH_TOKEN (Bearer auth) as alternative to ANTHROPIC_API_KEY
+    // Use custom env var name if provided, otherwise use default
-    if (provider === "anthropic" && !customApiKeyEnv) {
+    const requiredVar = customApiKeyEnv || PROVIDER_ENV_VARS[provider]
-        const hasCredential = !!(
+    if (requiredVar && !process.env[requiredVar]) {
-            process.env.ANTHROPIC_API_KEY || process.env.ANTHROPIC_AUTH_TOKEN
+        throw new Error(
+            `${requiredVar} environment variable is required for ${provider} provider. ` +
+                `Please set it in your .env.local file.`,
         )
-        if (!hasCredential) {
-            throw new Error(
-                `Either ANTHROPIC_API_KEY or ANTHROPIC_AUTH_TOKEN environment variable is required for anthropic provider. ` +
-                    `Please set one in your .env.local file.`,
-            )
-        }
-    } else {
-        // Use custom env var name if provided, otherwise use default
-        const requiredVar = customApiKeyEnv || PROVIDER_ENV_VARS[provider]
-        if (requiredVar && !process.env[requiredVar]) {
-            throw new Error(
-                `${requiredVar} environment variable is required for ${provider} provider. ` +
-                    `Please set it in your .env.local file.`,
-            )
-        }
     }
 
     // Azure requires either AZURE_BASE_URL or AZURE_RESOURCE_NAME in addition to API key
@@ -866,16 +845,8 @@ export function getAIModel(overrides?: ClientOverrides): ModelConfig {
                 serverBaseUrl,
                 "https://api.anthropic.com/v1",
             )
-            // Anthropic supports two auth methods (mutually exclusive):
-            // - apiKey: sends as `x-api-key` header
-            // - authToken: sends as `Authorization: Bearer <token>` header
-            // Prefer apiKey if present (including client overrides); fall back
-            // to ANTHROPIC_AUTH_TOKEN env var only when no apiKey is available.
-            const authToken = !apiKey
-                ? process.env.ANTHROPIC_AUTH_TOKEN
-                : undefined
             const customProvider = createAnthropic({
-                ...(authToken ? { authToken } : { apiKey }),
+                apiKey,
                 baseURL,
                 headers: ANTHROPIC_BETA_HEADERS,
             })
@@ -1291,6 +1262,7 @@ export function getAIModel(overrides?: ClientOverrides): ModelConfig {
         case "glm":
         case "qwen":
         case "qiniu":
+        case "kimi":
         case "novita": {
             const envVar = PROVIDER_ENV_VARS[provider]
             if (!envVar) {
@@ -1316,23 +1288,6 @@ export function getAIModel(overrides?: ClientOverrides): ModelConfig {
             break
         }
 
-        case "kimi": {
-            const apiKey = resolveApiKey(overrides, "KIMI_API_KEY")
-            const baseURL = resolveBaseURL(
-                overrides?.apiKey,
-                overrides?.baseUrl,
-                resolveBaseUrlEnv(overrides, "KIMI_BASE_URL"),
-                PROVIDER_INFO["kimi"]?.defaultBaseUrl,
-            )
-            // Use createDeepSeek to properly handle reasoning_content for Kimi
-            // thinking models (e.g., kimi-k2.6). Kimi's API uses the same
-            // reasoning_content field as DeepSeek, so this provider correctly
-            // captures and replays reasoning in multi-turn conversations.
-            const customProvider = createDeepSeek({ apiKey, baseURL })
-            model = customProvider(modelId)
-            break
-        }
-
         default:
             throw new Error(
                 `Unknown AI provider: ${provider}. Supported providers: bedrock, openai, anthropic, google, azure, ollama, openrouter, deepseek, siliconflow, sglang, gateway, edgeone, doubao, modelscope, glm, qwen, qiniu, kimi, minimax, novita`,
@@ -1390,12 +1345,8 @@ export function supportsImageInput(modelId: string): boolean {
         return false
     }
 
-    // MiniMax text models (MiniMax-M2.x series are text-only; M3 supports image input)
+    // MiniMax text models (MiniMax-M2.x series are text-only)
-    if (
+    if (lowerModelId.includes("minimax") && !hasVisionIndicator) {
-        lowerModelId.includes("minimax") &&
-        !hasVisionIndicator &&
-        !lowerModelId.includes("m3")
-    ) {
         return false
     }
 
@@ -1406,12 +1357,10 @@ export function supportsImageInput(modelId: string): boolean {
 
     // Qwen text models (not vision variants like qwen-vl)
     // Qwen3.5 series (qwen3.5, qwen3.5-plus, qwen3.5-flash) natively support image input
-    // QvQ (Qwen Visual QA) models are vision models — exclude them even when prefixed with "qwen/"
     if (
         lowerModelId.includes("qwen") &&
         !hasVisionIndicator &&
-        !lowerModelId.includes("qwen3.5") &&
+        !lowerModelId.includes("qwen3.5")
-        !lowerModelId.includes("qvq")
     ) {
         return false
     }

lib/drawio-themes.ts

@@ -1,17 +0,0 @@
-export const DRAWIO_THEMES = [
-    "kennedy",
-    "atlas",
-    "dark",
-    "min",
-    "sketch",
-    "simple",
-] as const
-
-export type DrawioTheme = (typeof DRAWIO_THEMES)[number]
-
-export function isDrawioTheme(value: unknown): value is DrawioTheme {
-    return (
-        typeof value === "string" &&
-        (DRAWIO_THEMES as readonly string[]).includes(value)
-    )
-}

lib/i18n/dictionaries/en.json

@@ -102,12 +102,10 @@
         "theme": "Theme",
         "themeDescription": "Dark/Light mode for interface and DrawIO canvas.",
         "drawioStyle": "DrawIO Style",
-        "drawioStyleDescription": "Canvas style",
+        "drawioStyleDescription": "Canvas style:",
-        "themeDefault": "Default",
+        "switchTo": "Switch to",
-        "themeDark": "Dark",
+        "minimal": "Minimal",
-        "themeMinimal": "Minimal",
+        "sketch": "Sketch",
-        "themeSketch": "Sketch",
-        "themeSimple": "Simple",
         "diagramStyle": "Diagram Style",
         "diagramStyleDescription": "Toggle between minimal and styled diagram output.",
         "sendShortcut": "Send Shortcut",
@@ -402,152 +400,6 @@
         "showUnvalidatedModels": "Show unvalidated models",
         "allModelsShown": "All models are shown (including unvalidated)",
         "unvalidatedModelWarning": "This model has not been validated",
-        "serverDefaultModel": "Server default model",
+        "serverDefaultModel": "Server default model"
-        "showValue": "Show value",
-        "hideValue": "Hide value"
-    },
-    "admin": {
-        "title": "Admin Settings",
-        "loginPrompt": "Enter the admin password (the ADMIN_PASSWORD environment variable) to manage server settings.",
-        "password": "Password",
-        "signIn": "Sign In",
-        "signingIn": "Signing In…",
-        "loginFailed": "Login failed",
-        "precedence": "File overrides env · env overrides defaults",
-        "notWritable": "The settings file is not writable on this deployment (serverless platforms have no persistent disk). Settings are shown read-only — configure via environment variables instead.",
-        "settingGroups": "Setting groups",
-        "enabled": "Enabled",
-        "disabled": "Disabled",
-        "enableGroup": "Enable {group}",
-        "unsavedChanges": "Unsaved changes",
-        "saved": "Settings saved. Changes apply immediately.",
-        "saveFailed": "Save failed. Check your connection and try again.",
-        "invalidSettings": "Some settings are invalid.",
-        "discard": "Discard",
-        "saveChanges": "Save Changes",
-        "saving": "Saving…",
-        "sourceSaved": "Saved",
-        "sourceEnv": "Env",
-        "sourceSavedTitle": "Set in the admin settings file",
-        "sourceEnvTitle": "Set by an environment variable",
-        "restartRequired": "Restart Required",
-        "modified": "Modified",
-        "notSet": "Not set",
-        "savedReplace": "Saved ({hint}) — type to replace",
-        "showValue": "Show value",
-        "hideValue": "Hide value",
-        "removeValue": "Remove value",
-        "removeValueTitle": "Remove the stored value",
-        "resetToDefault": "Reset to default",
-        "models": "Models",
-        "modelsDescription": "Server-side providers and models available to all users — no personal API key needed. The default provider's first model is used when users don't pick one.",
-        "addProviderHint": "Add a provider to offer server-side models to all users.",
-        "selectProviderHint": "Select or add a provider to configure its credentials and models.",
-        "addProviderToOfferModels": "Add at least one model to expose this provider to users.",
-        "managedViaEnv": "(managed via env)",
-        "envReadOnly": "Defined in AI_MODELS_CONFIG / ai-models.json — read-only here. Edit the environment configuration to change it.",
-        "defaultModel": "Default Model",
-        "noModelsConfigured": "No models configured",
-        "modelCount": "{count} model",
-        "modelCountPlural": "{count} models",
-        "default": "Default",
-        "setAsDefault": "Set as default provider",
-        "defaultProvider": "Default provider",
-        "modelIdPlaceholder": "Model ID…",
-        "addModel": "Add model",
-        "suggested": "Suggested",
-        "test": "Test",
-        "testOk": "OK ({ms}ms)",
-        "testFailed": "Failed",
-        "removeModel": "Remove {model}",
-        "deleteProviderTitle": "Delete {name}?",
-        "deleteProviderDesc": "Its credentials and models will be removed from the server after you save.",
-        "cancel": "Cancel",
-        "delete": "Delete",
-        "groups": {
-            "generation": {
-                "title": "Generation",
-                "description": "Output parameters applied to all chat requests."
-            },
-            "access": {
-                "title": "Access Control",
-                "description": "Restrict who can use this deployment."
-            },
-            "features": {
-                "title": "Features",
-                "description": "Optional features and security toggles."
-            },
-            "observability": {
-                "title": "Observability",
-                "description": "Langfuse tracing for LLM calls."
-            },
-            "quota": {
-                "title": "Quota & Rate Limits",
-                "description": "Per-IP usage limits. Enforcement requires a DynamoDB table."
-            }
-        },
-        "settings": {
-            "TEMPERATURE": {
-                "label": "Temperature",
-                "description": "Leave unset for reasoning models that reject temperature."
-            },
-            "MAX_OUTPUT_TOKENS": {
-                "label": "Max Output Tokens"
-            },
-            "ACCESS_CODE_LIST": {
-                "label": "Access Codes",
-                "description": "Comma-separated list. Users must enter one to chat. Empty = open access."
-            },
-            "ENABLE_VLM_VALIDATION": {
-                "label": "VLM Diagram Validation",
-                "description": "Visually validate generated diagrams with a vision model."
-            },
-            "VALIDATION_MODEL": {
-                "label": "Validation Model",
-                "description": "Falls back to the default AI model when empty."
-            },
-            "VALIDATION_TIMEOUT": {
-                "label": "Validation Timeout (ms)"
-            },
-            "ENABLE_HISTORY_XML_REPLACE": {
-                "label": "History XML Compression",
-                "description": "Replace old diagram XML in history with placeholders."
-            },
-            "ALLOW_PRIVATE_URLS": {
-                "label": "Allow Private URLs",
-                "description": "Turn off to block requests to private IPs and internal hostnames (SSRF protection)."
-            },
-            "LANGFUSE_PUBLIC_KEY": {
-                "label": "Langfuse Public Key"
-            },
-            "LANGFUSE_SECRET_KEY": {
-                "label": "Langfuse Secret Key"
-            },
-            "LANGFUSE_BASEURL": {
-                "label": "Langfuse Base URL"
-            },
-            "DAILY_REQUEST_LIMIT": {
-                "label": "Daily Request Limit",
-                "description": "Per IP per day."
-            },
-            "DAILY_TOKEN_LIMIT": {
-                "label": "Daily Token Limit",
-                "description": "Per IP per day."
-            },
-            "TPM_LIMIT": {
-                "label": "Tokens Per Minute"
-            },
-            "DYNAMODB_QUOTA_TABLE": {
-                "label": "DynamoDB Table",
-                "description": "Quota enforcement is disabled when empty."
-            },
-            "DYNAMODB_REGION": {
-                "label": "DynamoDB Region"
-            },
-            "QUOTA_TIMEZONE": {
-                "label": "Quota Timezone",
-                "description": "Timezone for the daily reset boundary."
-            }
-        }
     }
 }

lib/i18n/dictionaries/ja.json

@@ -102,12 +102,10 @@
         "theme": "テーマ",
         "themeDescription": "インターフェースと DrawIO キャンバスのダーク/ライトモード。",
         "drawioStyle": "DrawIO スタイル",
-        "drawioStyleDescription": "キャンバススタイル",
+        "drawioStyleDescription": "キャンバススタイル：",
-        "themeDefault": "デフォルト",
+        "switchTo": "切り替え",
-        "themeDark": "ダーク",
+        "minimal": "ミニマル",
-        "themeMinimal": "ミニマル",
+        "sketch": "スケッチ",
-        "themeSketch": "スケッチ",
-        "themeSimple": "シンプル",
         "diagramStyle": "ダイアグラムスタイル",
         "diagramStyleDescription": "ミニマルとスタイル付きの出力を切り替えます。",
         "sendShortcut": "送信ショートカット",
@@ -356,9 +354,7 @@
         "showUnvalidatedModels": "未検証のモデルを表示",
         "allModelsShown": "すべてのモデルを表示（未検証を含む）",
         "unvalidatedModelWarning": "このモデルは検証されていません",
-        "serverDefaultModel": "サーバーデフォルトモデル",
+        "serverDefaultModel": "サーバーデフォルトモデル"
-        "showValue": "値を表示",
-        "hideValue": "値を非表示"
     },
     "templates": {
         "title": "マイテンプレート",
@@ -405,149 +401,5 @@
         "importNoFile": "JSON ファイルを選択してください",
         "importFailed": "インポートに失敗しました：{error}",
         "importSuccess": "{imported} 件インポート、{skipped} 件の重複をスキップしました"
-    },
-    "admin": {
-        "title": "管理者設定",
-        "loginPrompt": "サーバー設定を管理するには、管理者パスワード（ADMIN_PASSWORD 環境変数）を入力してください。",
-        "password": "パスワード",
-        "signIn": "ログイン",
-        "signingIn": "ログイン中…",
-        "loginFailed": "ログインに失敗しました",
-        "precedence": "ファイルが環境変数を上書き · 環境変数がデフォルトを上書き",
-        "notWritable": "このデプロイ環境では設定ファイルに書き込めません（サーバーレス環境には永続ディスクがありません）。設定は読み取り専用で表示されます——代わりに環境変数で構成してください。",
-        "settingGroups": "設定グループ",
-        "enabled": "有効",
-        "disabled": "無効",
-        "enableGroup": "{group} を有効化",
-        "unsavedChanges": "未保存の変更があります",
-        "saved": "設定を保存しました。変更は即座に反映されます。",
-        "saveFailed": "保存に失敗しました。接続を確認して再試行してください。",
-        "invalidSettings": "一部の設定が無効です。",
-        "discard": "破棄",
-        "saveChanges": "変更を保存",
-        "saving": "保存中…",
-        "sourceSaved": "保存済み",
-        "sourceEnv": "環境変数",
-        "sourceSavedTitle": "管理者設定ファイルで設定",
-        "sourceEnvTitle": "環境変数で設定",
-        "restartRequired": "再起動が必要",
-        "modified": "変更済み",
-        "notSet": "未設定",
-        "savedReplace": "保存済み（{hint}）——入力して置き換え",
-        "showValue": "値を表示",
-        "hideValue": "値を非表示",
-        "removeValue": "値を削除",
-        "removeValueTitle": "保存された値を削除",
-        "resetToDefault": "デフォルトに戻す",
-        "models": "モデル",
-        "modelsDescription": "全ユーザーが利用できるサーバー側のプロバイダーとモデル——個人の API キーは不要です。ユーザーがモデルを選択しない場合、デフォルトプロバイダーの最初のモデルが使用されます。",
-        "addProviderHint": "プロバイダーを追加して、全ユーザーにサーバー側モデルを提供します。",
-        "selectProviderHint": "プロバイダーを選択または追加して、その資格情報とモデルを構成します。",
-        "addProviderToOfferModels": "ユーザーにこのプロバイダーを公開するには、モデルを少なくとも 1 つ追加してください。",
-        "managedViaEnv": "（環境変数で管理）",
-        "envReadOnly": "AI_MODELS_CONFIG / ai-models.json で定義——ここでは読み取り専用です。変更するには環境構成を編集してください。",
-        "defaultModel": "デフォルトモデル",
-        "noModelsConfigured": "モデルが構成されていません",
-        "modelCount": "{count} 個のモデル",
-        "modelCountPlural": "{count} 個のモデル",
-        "default": "デフォルト",
-        "setAsDefault": "デフォルトプロバイダーに設定",
-        "defaultProvider": "デフォルトプロバイダー",
-        "modelIdPlaceholder": "モデル ID…",
-        "addModel": "モデルを追加",
-        "suggested": "おすすめ",
-        "test": "テスト",
-        "testOk": "正常（{ms}ms）",
-        "testFailed": "失敗",
-        "removeModel": "{model} を削除",
-        "deleteProviderTitle": "{name} を削除しますか？",
-        "deleteProviderDesc": "保存後、その資格情報とモデルはサーバーから削除されます。",
-        "cancel": "キャンセル",
-        "delete": "削除",
-        "groups": {
-            "generation": {
-                "title": "生成",
-                "description": "すべてのチャットリクエストに適用される出力パラメーター。"
-            },
-            "access": {
-                "title": "アクセス制御",
-                "description": "このデプロイを使用できるユーザーを制限します。"
-            },
-            "features": {
-                "title": "機能",
-                "description": "オプション機能とセキュリティの切り替え。"
-            },
-            "observability": {
-                "title": "オブザーバビリティ",
-                "description": "LLM 呼び出しの Langfuse トレース。"
-            },
-            "quota": {
-                "title": "クォータとレート制限",
-                "description": "IP ごとの使用制限。強制には DynamoDB テーブルが必要です。"
-            }
-        },
-        "settings": {
-            "TEMPERATURE": {
-                "label": "温度",
-                "description": "温度を受け付けない推論モデルの場合は未設定のままにしてください。"
-            },
-            "MAX_OUTPUT_TOKENS": {
-                "label": "最大出力トークン数"
-            },
-            "ACCESS_CODE_LIST": {
-                "label": "アクセスコード",
-                "description": "カンマ区切りのリスト。チャットにはいずれかの入力が必要です。空 = オープンアクセス。"
-            },
-            "ENABLE_VLM_VALIDATION": {
-                "label": "VLM 図検証",
-                "description": "ビジョンモデルで生成された図を視覚的に検証します。"
-            },
-            "VALIDATION_MODEL": {
-                "label": "検証モデル",
-                "description": "空の場合はデフォルトの AI モデルにフォールバックします。"
-            },
-            "VALIDATION_TIMEOUT": {
-                "label": "検証タイムアウト（ms）"
-            },
-            "ENABLE_HISTORY_XML_REPLACE": {
-                "label": "履歴 XML 圧縮",
-                "description": "履歴内の古い図 XML をプレースホルダーで置き換えます。"
-            },
-            "ALLOW_PRIVATE_URLS": {
-                "label": "プライベート URL を許可",
-                "description": "オフにすると、プライベート IP や内部ホスト名へのリクエストをブロックします（SSRF 保護）。"
-            },
-            "LANGFUSE_PUBLIC_KEY": {
-                "label": "Langfuse Public Key"
-            },
-            "LANGFUSE_SECRET_KEY": {
-                "label": "Langfuse Secret Key"
-            },
-            "LANGFUSE_BASEURL": {
-                "label": "Langfuse Base URL"
-            },
-            "DAILY_REQUEST_LIMIT": {
-                "label": "1 日あたりのリクエスト上限",
-                "description": "IP ごと 1 日あたり。"
-            },
-            "DAILY_TOKEN_LIMIT": {
-                "label": "1 日あたりのトークン上限",
-                "description": "IP ごと 1 日あたり。"
-            },
-            "TPM_LIMIT": {
-                "label": "1 分あたりのトークン数"
-            },
-            "DYNAMODB_QUOTA_TABLE": {
-                "label": "DynamoDB テーブル",
-                "description": "空の場合、クォータの強制は無効になります。"
-            },
-            "DYNAMODB_REGION": {
-                "label": "DynamoDB リージョン"
-            },
-            "QUOTA_TIMEZONE": {
-                "label": "クォータタイムゾーン",
-                "description": "1 日のリセット境界に使用するタイムゾーン。"
-            }
-        }
     }
 }

lib/i18n/dictionaries/zh-Hant.json

@@ -102,12 +102,10 @@
         "theme": "主題",
         "themeDescription": "介面和 DrawIO 畫布的深色/淺色模式。",
         "drawioStyle": "DrawIO 樣式",
-        "drawioStyleDescription": "畫布樣式",
+        "drawioStyleDescription": "畫布樣式：",
-        "themeDefault": "預設",
+        "switchTo": "切換到",
-        "themeDark": "深色",
+        "minimal": "簡約",
-        "themeMinimal": "簡約",
+        "sketch": "草圖",
-        "themeSketch": "草圖",
-        "themeSimple": "簡單",
         "diagramStyle": "圖表樣式",
         "diagramStyleDescription": "切換簡約與精緻圖表輸出模式。",
         "sendShortcut": "傳送快捷鍵",
@@ -402,152 +400,6 @@
         "showUnvalidatedModels": "顯示未驗證的模型",
         "allModelsShown": "顯示所有模型（包括未驗證的）",
         "unvalidatedModelWarning": "此模型尚未驗證",
-        "serverDefaultModel": "伺服器預設模型",
+        "serverDefaultModel": "伺服器預設模型"
-        "showValue": "顯示值",
-        "hideValue": "隱藏值"
-    },
-    "admin": {
-        "title": "管理員設定",
-        "loginPrompt": "輸入管理員密碼（即 ADMIN_PASSWORD 環境變數）以管理伺服器設定。",
-        "password": "密碼",
-        "signIn": "登入",
-        "signingIn": "正在登入…",
-        "loginFailed": "登入失敗",
-        "precedence": "檔案覆蓋環境變數 · 環境變數覆蓋預設值",
-        "notWritable": "此部署環境下設定檔不可寫入（無伺服器平台沒有持久化磁碟）。設定以唯讀方式顯示——請改用環境變數進行設定。",
-        "settingGroups": "設定分組",
-        "enabled": "已啟用",
-        "disabled": "已停用",
-        "enableGroup": "啟用 {group}",
-        "unsavedChanges": "有未儲存的變更",
-        "saved": "設定已儲存，變更立即生效。",
-        "saveFailed": "儲存失敗。請檢查網路連線後重試。",
-        "invalidSettings": "部分設定無效。",
-        "discard": "捨棄",
-        "saveChanges": "儲存變更",
-        "saving": "正在儲存…",
-        "sourceSaved": "已儲存",
-        "sourceEnv": "環境變數",
-        "sourceSavedTitle": "在管理員設定檔中設定",
-        "sourceEnvTitle": "透過環境變數設定",
-        "restartRequired": "需要重新啟動",
-        "modified": "已修改",
-        "notSet": "未設定",
-        "savedReplace": "已儲存（{hint}）——輸入以取代",
-        "showValue": "顯示值",
-        "hideValue": "隱藏值",
-        "removeValue": "移除值",
-        "removeValueTitle": "移除已儲存的值",
-        "resetToDefault": "重設為預設",
-        "models": "模型",
-        "modelsDescription": "面向所有使用者的伺服器端 provider 與模型——無需個人 API 金鑰。當使用者未選擇模型時，使用預設 provider 的第一個模型。",
-        "addProviderHint": "新增一個 provider，為所有使用者提供伺服器端模型。",
-        "selectProviderHint": "選擇或新增一個 provider 以設定其憑證和模型。",
-        "addProviderToOfferModels": "至少新增一個模型，才能向使用者開放此 provider。",
-        "managedViaEnv": "（透過環境變數管理）",
-        "envReadOnly": "在 AI_MODELS_CONFIG / ai-models.json 中定義——此處唯讀。請編輯環境設定以變更。",
-        "defaultModel": "預設模型",
-        "noModelsConfigured": "未設定模型",
-        "modelCount": "{count} 個模型",
-        "modelCountPlural": "{count} 個模型",
-        "default": "預設",
-        "setAsDefault": "設為預設 provider",
-        "defaultProvider": "預設 provider",
-        "modelIdPlaceholder": "模型 ID…",
-        "addModel": "新增模型",
-        "suggested": "推薦",
-        "test": "測試",
-        "testOk": "正常（{ms} 毫秒）",
-        "testFailed": "失敗",
-        "removeModel": "移除 {model}",
-        "deleteProviderTitle": "刪除 {name}？",
-        "deleteProviderDesc": "儲存後，其憑證和模型將從伺服器上移除。",
-        "cancel": "取消",
-        "delete": "刪除",
-        "groups": {
-            "generation": {
-                "title": "生成",
-                "description": "套用於所有聊天請求的輸出參數。"
-            },
-            "access": {
-                "title": "存取控制",
-                "description": "限制誰可以使用此部署。"
-            },
-            "features": {
-                "title": "功能",
-                "description": "選用功能和安全開關。"
-            },
-            "observability": {
-                "title": "可觀測性",
-                "description": "對 LLM 呼叫進行 Langfuse 追蹤。"
-            },
-            "quota": {
-                "title": "配額與速率限制",
-                "description": "按 IP 的用量限制。強制執行需要 DynamoDB 表。"
-            }
-        },
-        "settings": {
-            "TEMPERATURE": {
-                "label": "溫度",
-                "description": "對於拒絕溫度參數的推理模型，請留空。"
-            },
-            "MAX_OUTPUT_TOKENS": {
-                "label": "最大輸出 token 數"
-            },
-            "ACCESS_CODE_LIST": {
-                "label": "存取碼",
-                "description": "以逗號分隔的清單。使用者需輸入其中之一才能聊天。留空 = 開放存取。"
-            },
-            "ENABLE_VLM_VALIDATION": {
-                "label": "VLM 圖表驗證",
-                "description": "使用視覺模型對產生的圖表進行視覺化驗證。"
-            },
-            "VALIDATION_MODEL": {
-                "label": "驗證模型",
-                "description": "留空時回退到預設 AI 模型。"
-            },
-            "VALIDATION_TIMEOUT": {
-                "label": "驗證逾時（毫秒）"
-            },
-            "ENABLE_HISTORY_XML_REPLACE": {
-                "label": "歷史 XML 壓縮",
-                "description": "用占位符取代歷史記錄中的舊圖表 XML。"
-            },
-            "ALLOW_PRIVATE_URLS": {
-                "label": "允許私有 URL",
-                "description": "關閉以阻擋對私有 IP 和內部主機名的請求（SSRF 防護）。"
-            },
-            "LANGFUSE_PUBLIC_KEY": {
-                "label": "Langfuse Public Key"
-            },
-            "LANGFUSE_SECRET_KEY": {
-                "label": "Langfuse Secret Key"
-            },
-            "LANGFUSE_BASEURL": {
-                "label": "Langfuse Base URL"
-            },
-            "DAILY_REQUEST_LIMIT": {
-                "label": "每日請求上限",
-                "description": "每個 IP 每天。"
-            },
-            "DAILY_TOKEN_LIMIT": {
-                "label": "每日 token 上限",
-                "description": "每個 IP 每天。"
-            },
-            "TPM_LIMIT": {
-                "label": "每分鐘 token 數"
-            },
-            "DYNAMODB_QUOTA_TABLE": {
-                "label": "DynamoDB 表",
-                "description": "留空時配額強制執行被停用。"
-            },
-            "DYNAMODB_REGION": {
-                "label": "DynamoDB 區域"
-            },
-            "QUOTA_TIMEZONE": {
-                "label": "配額時區",
-                "description": "每日重置邊界所用的時區。"
-            }
-        }
     }
 }

lib/i18n/dictionaries/zh.json

@@ -102,12 +102,10 @@
         "theme": "主题",
         "themeDescription": "界面和 DrawIO 画布的深色/浅色模式。",
         "drawioStyle": "DrawIO 样式",
-        "drawioStyleDescription": "画布样式",
+        "drawioStyleDescription": "画布样式：",
-        "themeDefault": "默认",
+        "switchTo": "切换到",
-        "themeDark": "深色",
+        "minimal": "简约",
-        "themeMinimal": "简约",
+        "sketch": "草图",
-        "themeSketch": "草图",
-        "themeSimple": "简单",
         "diagramStyle": "图表样式",
         "diagramStyleDescription": "切换简约与精致图表输出模式。",
         "sendShortcut": "发送快捷键",
@@ -402,152 +400,6 @@
         "showUnvalidatedModels": "显示未验证的模型",
         "allModelsShown": "显示所有模型（包括未验证的）",
         "unvalidatedModelWarning": "此模型尚未验证",
-        "serverDefaultModel": "服务器默认模型",
+        "serverDefaultModel": "服务器默认模型"
-        "showValue": "显示值",
-        "hideValue": "隐藏值"
-    },
-    "admin": {
-        "title": "管理员设置",
-        "loginPrompt": "输入管理员密码（即 ADMIN_PASSWORD 环境变量）以管理服务器设置。",
-        "password": "密码",
-        "signIn": "登录",
-        "signingIn": "正在登录…",
-        "loginFailed": "登录失败",
-        "precedence": "文件覆盖环境变量 · 环境变量覆盖默认值",
-        "notWritable": "此部署环境下设置文件不可写（无服务器平台没有持久化磁盘）。设置以只读方式显示——请改用环境变量进行配置。",
-        "settingGroups": "设置分组",
-        "enabled": "已启用",
-        "disabled": "已禁用",
-        "enableGroup": "启用 {group}",
-        "unsavedChanges": "有未保存的更改",
-        "saved": "设置已保存，更改立即生效。",
-        "saveFailed": "保存失败。请检查网络连接后重试。",
-        "invalidSettings": "部分设置无效。",
-        "discard": "放弃",
-        "saveChanges": "保存更改",
-        "saving": "正在保存…",
-        "sourceSaved": "已保存",
-        "sourceEnv": "环境变量",
-        "sourceSavedTitle": "在管理员设置文件中设置",
-        "sourceEnvTitle": "通过环境变量设置",
-        "restartRequired": "需要重启",
-        "modified": "已修改",
-        "notSet": "未设置",
-        "savedReplace": "已保存（{hint}）——输入以替换",
-        "showValue": "显示值",
-        "hideValue": "隐藏值",
-        "removeValue": "移除值",
-        "removeValueTitle": "移除已保存的值",
-        "resetToDefault": "恢复默认",
-        "models": "模型",
-        "modelsDescription": "面向所有用户的服务端 provider 和模型——无需个人 API 密钥。当用户未选择模型时，使用默认 provider 的第一个模型。",
-        "addProviderHint": "添加一个 provider，为所有用户提供服务端模型。",
-        "selectProviderHint": "选择或添加一个 provider 以配置其凭证和模型。",
-        "addProviderToOfferModels": "至少添加一个模型，才能向用户开放此 provider。",
-        "managedViaEnv": "（通过环境变量管理）",
-        "envReadOnly": "在 AI_MODELS_CONFIG / ai-models.json 中定义——此处只读。请编辑环境配置以更改。",
-        "defaultModel": "默认模型",
-        "noModelsConfigured": "未配置模型",
-        "modelCount": "{count} 个模型",
-        "modelCountPlural": "{count} 个模型",
-        "default": "默认",
-        "setAsDefault": "设为默认 provider",
-        "defaultProvider": "默认 provider",
-        "modelIdPlaceholder": "模型 ID…",
-        "addModel": "添加模型",
-        "suggested": "推荐",
-        "test": "测试",
-        "testOk": "正常（{ms} 毫秒）",
-        "testFailed": "失败",
-        "removeModel": "移除 {model}",
-        "deleteProviderTitle": "删除 {name}？",
-        "deleteProviderDesc": "保存后，其凭证和模型将从服务器上移除。",
-        "cancel": "取消",
-        "delete": "删除",
-        "groups": {
-            "generation": {
-                "title": "生成",
-                "description": "应用于所有聊天请求的输出参数。"
-            },
-            "access": {
-                "title": "访问控制",
-                "description": "限制谁可以使用此部署。"
-            },
-            "features": {
-                "title": "功能",
-                "description": "可选功能和安全开关。"
-            },
-            "observability": {
-                "title": "可观测性",
-                "description": "对 LLM 调用进行 Langfuse 追踪。"
-            },
-            "quota": {
-                "title": "配额与速率限制",
-                "description": "按 IP 的用量限制。强制执行需要 DynamoDB 表。"
-            }
-        },
-        "settings": {
-            "TEMPERATURE": {
-                "label": "温度",
-                "description": "对于拒绝温度参数的推理模型，请留空。"
-            },
-            "MAX_OUTPUT_TOKENS": {
-                "label": "最大输出 token 数"
-            },
-            "ACCESS_CODE_LIST": {
-                "label": "访问码",
-                "description": "以逗号分隔的列表。用户需输入其中之一才能聊天。留空 = 开放访问。"
-            },
-            "ENABLE_VLM_VALIDATION": {
-                "label": "VLM 图表验证",
-                "description": "使用视觉模型对生成的图表进行可视化验证。"
-            },
-            "VALIDATION_MODEL": {
-                "label": "验证模型",
-                "description": "留空时回退到默认 AI 模型。"
-            },
-            "VALIDATION_TIMEOUT": {
-                "label": "验证超时（毫秒）"
-            },
-            "ENABLE_HISTORY_XML_REPLACE": {
-                "label": "历史 XML 压缩",
-                "description": "用占位符替换历史记录中的旧图表 XML。"
-            },
-            "ALLOW_PRIVATE_URLS": {
-                "label": "允许私有 URL",
-                "description": "关闭以阻止对私有 IP 和内部主机名的请求（SSRF 防护）。"
-            },
-            "LANGFUSE_PUBLIC_KEY": {
-                "label": "Langfuse Public Key"
-            },
-            "LANGFUSE_SECRET_KEY": {
-                "label": "Langfuse Secret Key"
-            },
-            "LANGFUSE_BASEURL": {
-                "label": "Langfuse Base URL"
-            },
-            "DAILY_REQUEST_LIMIT": {
-                "label": "每日请求上限",
-                "description": "每个 IP 每天。"
-            },
-            "DAILY_TOKEN_LIMIT": {
-                "label": "每日 token 上限",
-                "description": "每个 IP 每天。"
-            },
-            "TPM_LIMIT": {
-                "label": "每分钟 token 数"
-            },
-            "DYNAMODB_QUOTA_TABLE": {
-                "label": "DynamoDB 表",
-                "description": "留空时配额强制执行被禁用。"
-            },
-            "DYNAMODB_REGION": {
-                "label": "DynamoDB 区域"
-            },
-            "QUOTA_TIMEZONE": {
-                "label": "配额时区",
-                "description": "每日重置边界所用的时区。"
-            }
-        }
     }
 }

lib/server-model-config.ts

@@ -62,7 +62,7 @@ function getConfigPath(): string {
     return path.join(process.cwd(), "ai-models.json")
 }
 
-export async function loadEnvServerModelsConfig(): Promise<ServerModelsConfig | null> {
+export async function loadRawServerModelsConfig(): Promise<ServerModelsConfig | null> {
     // Priority 1: AI_MODELS_CONFIG env var (JSON string) - for cloud deployments
     const envConfig = process.env.AI_MODELS_CONFIG
     if (envConfig && envConfig.trim().length > 0) {
@@ -96,40 +96,6 @@ export async function loadEnvServerModelsConfig(): Promise<ServerModelsConfig |
     }
 }
 
-export async function loadRawServerModelsConfig(): Promise<ServerModelsConfig | null> {
-    const envConfig = await loadEnvServerModelsConfig()
-
-    // Merge in providers managed via the admin panel (settings.json).
-    // Dynamic import to avoid a module-init cycle with lib/admin/providers.
-    let adminConfig: ServerModelsConfig | null = null
-    try {
-        const { adminProvidersToConfig, loadAdminProviders } = await import(
-            "./admin/providers"
-        )
-        const adminProviders = loadAdminProviders()
-        if (adminProviders.length > 0) {
-            adminConfig = adminProvidersToConfig(adminProviders)
-        }
-    } catch (err) {
-        console.error(
-            "[server-model-config] Failed to load admin providers:",
-            err,
-        )
-    }
-
-    if (!adminConfig || adminConfig.providers.length === 0) return envConfig
-    if (!envConfig) return adminConfig
-
-    // A panel default overrides an env default
-    const adminHasDefault = adminConfig.providers.some((p) => p.default)
-    const envProviders = adminHasDefault
-        ? envConfig.providers.map((p) =>
-              p.default ? { ...p, default: undefined } : p,
-          )
-        : envConfig.providers
-    return { providers: [...envProviders, ...adminConfig.providers] }
-}
-
 export async function loadFlattenedServerModels(): Promise<
     FlattenedServerModel[]
 > {

lib/session-storage.ts

@@ -58,6 +58,33 @@ interface ChatSessionDB extends DBSchema {
 
 // Database singleton
 let dbPromise: Promise<IDBPDatabase<ChatSessionDB>> | null = null
+const resetDBPromise = () => {
+    dbPromise = null
+}
+
+const isClosingError = (error: unknown): boolean => {
+    return (
+        error instanceof DOMException &&
+        error.name === "InvalidStateError" &&
+        /closing/i.test(error.message)
+    )
+}
+
+const withDB = async <T>(
+    action: (db: IDBPDatabase<ChatSessionDB>) => Promise<T>,
+): Promise<T> => {
+    try {
+        const db = await getDB()
+        return await action(db)
+    } catch (error) {
+        if (isClosingError(error)) {
+            resetDBPromise()
+            const db = await getDB()
+            return await action(db)
+        }
+        throw error
+    }
+}
 
 async function getDB(): Promise<IDBPDatabase<ChatSessionDB>> {
     if (!dbPromise) {
@@ -88,7 +115,23 @@ async function getDB(): Promise<IDBPDatabase<ChatSessionDB>> {
                     }
                 }
             },
+            terminated() {
+                resetDBPromise()
+            },
         })
+        dbPromise
+            .then((db) => {
+                db.onversionchange = () => {
+                    db.close()
+                    resetDBPromise()
+                }
+                db.onclose = () => {
+                    resetDBPromise()
+                }
+            })
+            .catch(() => {
+                resetDBPromise()
+            })
     }
     return dbPromise
 }
@@ -103,31 +146,46 @@ export function isIndexedDBAvailable(): boolean {
     }
 }
 
+// Check if IndexedDB is actually usable (not just present).
+// Note: Do NOT close the db here - getDB() returns a shared singleton connection
+// that other code depends on.
+export async function isIndexedDBUsable(): Promise<boolean> {
+    if (!isIndexedDBAvailable()) return false
+    try {
+        await getDB()
+        return true
+    } catch {
+        return false
+    }
+}
+
 // CRUD Operations
 export async function getAllSessionMetadata(): Promise<SessionMetadata[]> {
     if (!isIndexedDBAvailable()) return []
     try {
-        const db = await getDB()
+        return await withDB(async (db) => {
-        const tx = db.transaction(STORE_NAME, "readonly")
+            const tx = db.transaction(STORE_NAME, "readonly")
-        const index = tx.store.index("by-updated")
+            const index = tx.store.index("by-updated")
-        const metadata: SessionMetadata[] = []
+            const metadata: SessionMetadata[] = []
 
-        // Use cursor to read only metadata fields (avoids loading full messages/XML)
+            // Use cursor to read only metadata fields (avoids loading full messages/XML)
-        let cursor = await index.openCursor(null, "prev") // newest first
+            let cursor = await index.openCursor(null, "prev") // newest first
-        while (cursor) {
+            while (cursor) {
-            const s = cursor.value
+                const s = cursor.value
-            metadata.push({
+                metadata.push({
-                id: s.id,
+                    id: s.id,
-                title: s.title,
+                    title: s.title,
-                createdAt: s.createdAt,
+                    createdAt: s.createdAt,
-                updatedAt: s.updatedAt,
+                    updatedAt: s.updatedAt,
-                messageCount: s.messages.length,
+                    messageCount: s.messages.length,
-                hasDiagram: !!s.diagramXml && s.diagramXml.trim().length > 0,
+                    hasDiagram:
-                thumbnailDataUrl: s.thumbnailDataUrl,
+                        !!s.diagramXml && s.diagramXml.trim().length > 0,
-            })
+                    thumbnailDataUrl: s.thumbnailDataUrl,
-            cursor = await cursor.continue()
+                })
-        }
+                cursor = await cursor.continue()
-        return metadata
+            }
+            return metadata
+        })
     } catch (error) {
         console.error("Failed to get session metadata:", error)
         return []
@@ -137,8 +195,9 @@ export async function getAllSessionMetadata(): Promise<SessionMetadata[]> {
 export async function getSession(id: string): Promise<ChatSession | null> {
     if (!isIndexedDBAvailable()) return null
     try {
-        const db = await getDB()
+        return await withDB(async (db) => {
-        return (await db.get(STORE_NAME, id)) || null
+            return (await db.get(STORE_NAME, id)) || null
+        })
     } catch (error) {
         console.error("Failed to get session:", error)
         return null
@@ -148,8 +207,9 @@ export async function getSession(id: string): Promise<ChatSession | null> {
 export async function saveSession(session: ChatSession): Promise<boolean> {
     if (!isIndexedDBAvailable()) return false
     try {
-        const db = await getDB()
+        await withDB(async (db) => {
-        await db.put(STORE_NAME, session)
+            await db.put(STORE_NAME, session)
+        })
         return true
     } catch (error) {
         // Handle quota exceeded
@@ -161,8 +221,9 @@ export async function saveSession(session: ChatSession): Promise<boolean> {
             await deleteOldestSession()
             // Retry once
             try {
-                const db = await getDB()
+                await withDB(async (db) => {
-                await db.put(STORE_NAME, session)
+                    await db.put(STORE_NAME, session)
+                })
                 return true
             } catch (retryError) {
                 console.error(
@@ -181,8 +242,9 @@ export async function saveSession(session: ChatSession): Promise<boolean> {
 export async function deleteSession(id: string): Promise<void> {
     if (!isIndexedDBAvailable()) return
     try {
-        const db = await getDB()
+        await withDB(async (db) => {
-        await db.delete(STORE_NAME, id)
+            await db.delete(STORE_NAME, id)
+        })
     } catch (error) {
         console.error("Failed to delete session:", error)
     }
@@ -191,8 +253,9 @@ export async function deleteSession(id: string): Promise<void> {
 export async function getSessionCount(): Promise<number> {
     if (!isIndexedDBAvailable()) return 0
     try {
-        const db = await getDB()
+        return await withDB(async (db) => {
-        return await db.count(STORE_NAME)
+            return await db.count(STORE_NAME)
+        })
     } catch (error) {
         console.error("Failed to get session count:", error)
         return 0
@@ -202,14 +265,15 @@ export async function getSessionCount(): Promise<number> {
 export async function deleteOldestSession(): Promise<void> {
     if (!isIndexedDBAvailable()) return
     try {
-        const db = await getDB()
+        await withDB(async (db) => {
-        const tx = db.transaction(STORE_NAME, "readwrite")
+            const tx = db.transaction(STORE_NAME, "readwrite")
-        const index = tx.store.index("by-updated")
+            const index = tx.store.index("by-updated")
-        const cursor = await index.openCursor()
+            const cursor = await index.openCursor()
-        if (cursor) {
+            if (cursor) {
-            await cursor.delete()
+                await cursor.delete()
-        }
+            }
-        await tx.done
+            await tx.done
+        })
     } catch (error) {
         console.error("Failed to delete oldest session:", error)
     }

lib/ssrf-protection.ts

@@ -9,40 +9,17 @@
 export function isPrivateUrl(urlString: string): boolean {
     try {
         const url = new URL(urlString)
-        // Strip a trailing dot so FQDN forms like "localhost." (which still
+        const hostname = url.hostname.toLowerCase()
-        // resolve to 127.0.0.1) cannot bypass the equality checks below.
-        const hostname = url.hostname
-            .toLowerCase()
-            .replace(/^\[|\]$/g, "")
-            .replace(/\.$/, "")
 
         // Block localhost
         if (
             hostname === "localhost" ||
             hostname === "127.0.0.1" ||
-            hostname === "::1" ||
+            hostname === "::1"
-            hostname === "::"
         ) {
             return true
         }
 
-        // Block IPv6 unique-local (fc00::/7), link-local (fe80::/10),
-        // and IPv4-mapped (::ffff:0:0/96) hosts.
-        if (hostname.includes(":")) {
-            if (
-                hostname.startsWith("fc") ||
-                hostname.startsWith("fd") ||
-                hostname.startsWith("::ffff:")
-            ) {
-                return true
-            }
-            const linkLocal = hostname.match(/^fe([0-9a-f]{2}):/)
-            if (linkLocal) {
-                const high = parseInt(linkLocal[1], 16)
-                if (high >= 0x80 && high <= 0xbf) return true
-            }
-        }
-
         // Block AWS/cloud metadata endpoints
         if (
             hostname === "169.254.169.254" ||
@@ -82,8 +59,5 @@ export function isPrivateUrl(urlString: string): boolean {
 /**
  * Whether private URLs are allowed (defaults to true)
  * Set ALLOW_PRIVATE_URLS=false to block private URLs
- * Read per call so admin-panel changes apply without restart
  */
-export function allowPrivateUrls(): boolean {
+export const allowPrivateUrls = process.env.ALLOW_PRIVATE_URLS !== "false"
-    return process.env.ALLOW_PRIVATE_URLS !== "false"
-}

lib/template-storage.ts

@@ -57,6 +57,33 @@ export function generateDefaultTitle(prompt: string): string {
 
 // Database singleton
 let dbPromise: Promise<IDBPDatabase<TemplateDB>> | null = null
+const resetDBPromise = () => {
+    dbPromise = null
+}
+
+const isClosingError = (error: unknown): boolean => {
+    return (
+        error instanceof DOMException &&
+        error.name === "InvalidStateError" &&
+        /closing/i.test(error.message)
+    )
+}
+
+const withDB = async <T>(
+    action: (db: IDBPDatabase<TemplateDB>) => Promise<T>,
+): Promise<T> => {
+    try {
+        const db = await getDB()
+        return await action(db)
+    } catch (error) {
+        if (isClosingError(error)) {
+            resetDBPromise()
+            const db = await getDB()
+            return await action(db)
+        }
+        throw error
+    }
+}
 
 async function getDB(): Promise<IDBPDatabase<TemplateDB>> {
     if (!dbPromise) {
@@ -74,7 +101,23 @@ async function getDB(): Promise<IDBPDatabase<TemplateDB>> {
                     }
                 }
             },
+            terminated() {
+                resetDBPromise()
+            },
         })
+        dbPromise
+            .then((db) => {
+                db.onversionchange = () => {
+                    db.close()
+                    resetDBPromise()
+                }
+                db.onclose = () => {
+                    resetDBPromise()
+                }
+            })
+            .catch(() => {
+                resetDBPromise()
+            })
     }
     return dbPromise
 }
@@ -94,9 +137,10 @@ export function isIndexedDBAvailable(): boolean {
 export async function getAllTemplates(): Promise<Template[]> {
     if (!isIndexedDBAvailable()) return []
     try {
-        const db = await getDB()
+        return await withDB(async (db) => {
-        const templates = await db.getAll(STORE_NAME)
+            const templates = await db.getAll(STORE_NAME)
-        return sortTemplates(templates)
+            return sortTemplates(templates)
+        })
     } catch (error) {
         console.error("Failed to get templates:", error)
         return []
@@ -106,8 +150,9 @@ export async function getAllTemplates(): Promise<Template[]> {
 export async function getTemplate(id: string): Promise<Template | null> {
     if (!isIndexedDBAvailable()) return null
     try {
-        const db = await getDB()
+        return await withDB(async (db) => {
-        return (await db.get(STORE_NAME, id)) || null
+            return (await db.get(STORE_NAME, id)) || null
+        })
     } catch (error) {
         console.error("Failed to get template:", error)
         return null
@@ -137,8 +182,9 @@ export async function createTemplate(
     }
 
     try {
-        const db = await getDB()
+        await withDB(async (db) => {
-        await db.put(STORE_NAME, template)
+            await db.put(STORE_NAME, template)
+        })
         return template
     } catch (error) {
         console.error("Failed to create template:", error)
@@ -152,19 +198,20 @@ export async function updateTemplate(
 ): Promise<Template | null> {
     if (!isIndexedDBAvailable()) return null
     try {
-        const db = await getDB()
+        return await withDB(async (db) => {
-        const existing = await db.get(STORE_NAME, id)
+            const existing = await db.get(STORE_NAME, id)
-        if (!existing) return null
+            if (!existing) return null
 
-        const updated: Template = {
+            const updated: Template = {
-            ...existing,
+                ...existing,
-            ...updates,
+                ...updates,
-            id: existing.id,
+                id: existing.id,
-            createdAt: existing.createdAt,
+                createdAt: existing.createdAt,
-            updatedAt: Date.now(),
+                updatedAt: Date.now(),
-        }
+            }
-        await db.put(STORE_NAME, updated)
+            await db.put(STORE_NAME, updated)
-        return updated
+            return updated
+        })
     } catch (error) {
         console.error("Failed to update template:", error)
         return null
@@ -174,8 +221,9 @@ export async function updateTemplate(
 export async function deleteTemplate(id: string): Promise<boolean> {
     if (!isIndexedDBAvailable()) return false
     try {
-        const db = await getDB()
+        await withDB(async (db) => {
-        await db.delete(STORE_NAME, id)
+            await db.delete(STORE_NAME, id)
+        })
         return true
     } catch (error) {
         console.error("Failed to delete template:", error)
@@ -189,24 +237,25 @@ export async function duplicateTemplate(
 ): Promise<Template | null> {
     if (!isIndexedDBAvailable()) return null
     try {
-        const db = await getDB()
+        return await withDB(async (db) => {
-        const existing = await db.get(STORE_NAME, id)
+            const existing = await db.get(STORE_NAME, id)
-        if (!existing) return null
+            if (!existing) return null
 
-        const now = Date.now()
+            const now = Date.now()
-        const duplicate: Template = {
+            const duplicate: Template = {
-            ...existing,
+                ...existing,
-            id: nanoid(),
+                id: nanoid(),
-            title: `${existing.title} ${copySuffix}`,
+                title: `${existing.title} ${copySuffix}`,
-            createdAt: now,
+                createdAt: now,
-            updatedAt: now,
+                updatedAt: now,
-            clickCount: 0,
+                clickCount: 0,
-            runCount: 0,
+                runCount: 0,
-            lastUsedAt: 0,
+                lastUsedAt: 0,
-            pinned: false,
+                pinned: false,
-        }
+            }
-        await db.put(STORE_NAME, duplicate)
+            await db.put(STORE_NAME, duplicate)
-        return duplicate
+            return duplicate
+        })
     } catch (error) {
         console.error("Failed to duplicate template:", error)
         return null
@@ -218,12 +267,13 @@ export async function duplicateTemplate(
 export async function incrementClickCount(id: string): Promise<void> {
     if (!isIndexedDBAvailable()) return
     try {
-        const db = await getDB()
+        await withDB(async (db) => {
-        const template = await db.get(STORE_NAME, id)
+            const template = await db.get(STORE_NAME, id)
-        if (!template) return
+            if (!template) return
-        template.clickCount += 1
+            template.clickCount += 1
-        template.updatedAt = Date.now()
+            template.updatedAt = Date.now()
-        await db.put(STORE_NAME, template)
+            await db.put(STORE_NAME, template)
+        })
     } catch (error) {
         console.error("Failed to increment click count:", error)
     }
@@ -232,14 +282,15 @@ export async function incrementClickCount(id: string): Promise<void> {
 export async function incrementRunCount(id: string): Promise<void> {
     if (!isIndexedDBAvailable()) return
     try {
-        const db = await getDB()
+        await withDB(async (db) => {
-        const template = await db.get(STORE_NAME, id)
+            const template = await db.get(STORE_NAME, id)
-        if (!template) return
+            if (!template) return
-        const now = Date.now()
+            const now = Date.now()
-        template.runCount += 1
+            template.runCount += 1
-        template.lastUsedAt = now
+            template.lastUsedAt = now
-        template.updatedAt = now
+            template.updatedAt = now
-        await db.put(STORE_NAME, template)
+            await db.put(STORE_NAME, template)
+        })
     } catch (error) {
         console.error("Failed to increment run count:", error)
     }
@@ -372,8 +423,9 @@ export async function importTemplates(
             pinned: typeof t.pinned === "boolean" ? t.pinned : false,
         }
         try {
-            const db = await getDB()
+            await withDB(async (db) => {
-            await db.put(STORE_NAME, newTemplate)
+                await db.put(STORE_NAME, newTemplate)
+            })
             existingKeys.add(key)
             imported++
         } catch (error) {

lib/types/model-config.ts

@@ -85,15 +85,6 @@ export interface FlattenedModel {
     baseUrlEnv?: string
 }
 
-// Providers whose server credentials live in fixed env vars
-// (AWS_ACCESS_KEY_ID, GOOGLE_VERTEX_API_KEY, OLLAMA_API_KEY) with no
-// apiKeyEnv redirection support — their credentials are global
-export const FIXED_CRED_PROVIDERS: ProviderName[] = [
-    "bedrock",
-    "vertexai",
-    "ollama",
-]
-
 // Map provider names to models.dev logo names
 export const PROVIDER_LOGO_MAP: Record<string, string> = {
     openai: "openai",
@@ -199,202 +190,177 @@ export const PROVIDER_INFO: Record<
 // Suggested models per provider for quick add
 export const SUGGESTED_MODELS: Partial<Record<ProviderName, string[]>> = {
     openai: [
-        "gpt-5.5-pro",
+        "gpt-5.2-pro",
-        "gpt-5.5",
+        "gpt-5.2-chat-latest",
-        "gpt-5.4-pro",
+        "gpt-5.2",
-        "gpt-5.4",
+        "gpt-5.1-codex-mini",
-        "gpt-5.4-mini",
+        "gpt-5.1-codex",
-        "gpt-5.4-nano",
+        "gpt-5.1-chat-latest",
-        "gpt-5-codex-mini",
+        "gpt-5.1",
+        "gpt-5-pro",
+        "gpt-5",
+        "gpt-5-mini",
+        "gpt-5-nano",
+        "gpt-5-codex",
+        "gpt-5-chat-latest",
         "gpt-4.1",
         "gpt-4.1-mini",
+        "gpt-4.1-nano",
         "gpt-4o",
         "gpt-4o-mini",
     ],
     anthropic: [
-        // Claude 4.8 / 4.7 / 4.6 series (latest, dateless pinned IDs)
+        // Claude 4.5 series (latest)
-        "claude-opus-4-8",
+        "claude-opus-4-5-20250514",
-        "claude-sonnet-4-6",
+        "claude-sonnet-4-5-20250514",
-        "claude-haiku-4-5",
+        // Claude 4 series
-        "claude-opus-4-7",
+        "claude-opus-4-20250514",
-        "claude-opus-4-6",
+        "claude-sonnet-4-20250514",
-        // Claude 4.5 series
-        "claude-sonnet-4-5-20250929",
-        "claude-opus-4-5-20251101",
         // Claude 3.7 series
         "claude-3-7-sonnet-20250219",
         // Claude 3.5 series
         "claude-3-5-sonnet-20241022",
         "claude-3-5-haiku-20241022",
+        // Claude 3 series
+        "claude-3-opus-20240229",
+        "claude-3-sonnet-20240229",
+        "claude-3-haiku-20240307",
     ],
     google: [
-        // Gemini 3 series
-        "gemini-3.1-pro",
-        "gemini-3.5-flash",
-        "gemini-3-flash",
-        "gemini-3.1-flash-lite",
         // Gemini 2.5 series
         "gemini-2.5-pro",
         "gemini-2.5-flash",
-        "gemini-2.5-flash-lite",
+        "gemini-2.5-flash-preview-05-20",
+        // Gemini 2.0 series
+        "gemini-2.0-flash",
+        "gemini-2.0-flash-exp",
+        "gemini-2.0-flash-lite",
+        // Gemini 1.5 series
+        "gemini-1.5-pro",
+        "gemini-1.5-flash",
+        // Legacy
+        "gemini-pro",
     ],
     vertexai: [
-        // Gemini 3 series
-        "gemini-3.1-pro-preview",
-        "gemini-3.5-flash",
-        "gemini-3-flash-preview",
-        "gemini-3.1-flash-lite",
         // Gemini 2.5 series
         "gemini-2.5-pro",
         "gemini-2.5-flash",
-        "gemini-2.5-flash-lite",
+        // Gemini 2.0 series
-    ],
+        "gemini-2.0-flash",
-    azure: [
+        "gemini-2.0-flash-exp",
-        "gpt-5.5",
+        // Gemini 1.5 series
-        "gpt-5.4",
+        "gemini-1.5-pro",
-        "gpt-5.1",
+        "gemini-1.5-flash",
-        "gpt-5",
-        "gpt-5-mini",
-        "gpt-4.1",
-        "gpt-4o",
-        "gpt-4o-mini",
-        "o3",
-        "o4-mini",
     ],
+    azure: ["gpt-4o", "gpt-4o-mini", "gpt-4-turbo", "gpt-4", "gpt-35-turbo"],
     bedrock: [
         // Anthropic Claude
-        "anthropic.claude-opus-4-8",
+        "anthropic.claude-opus-4-5-20250514-v1:0",
-        "anthropic.claude-opus-4-7",
+        "anthropic.claude-sonnet-4-5-20250514-v1:0",
-        "anthropic.claude-sonnet-4-6",
-        "anthropic.claude-opus-4-6-v1",
-        "anthropic.claude-opus-4-5-20251101-v1:0",
-        "anthropic.claude-sonnet-4-5-20250929-v1:0",
-        "anthropic.claude-haiku-4-5-20251001-v1:0",
-        "anthropic.claude-opus-4-1-20250805-v1:0",
         "anthropic.claude-opus-4-20250514-v1:0",
         "anthropic.claude-sonnet-4-20250514-v1:0",
+        "anthropic.claude-3-7-sonnet-20250219-v1:0",
+        "anthropic.claude-3-5-sonnet-20241022-v2:0",
         "anthropic.claude-3-5-haiku-20241022-v1:0",
+        "anthropic.claude-3-opus-20240229-v1:0",
+        "anthropic.claude-3-sonnet-20240229-v1:0",
+        "anthropic.claude-3-haiku-20240307-v1:0",
         // Amazon Nova
-        "amazon.nova-2-lite-v1:0",
-        "amazon.nova-premier-v1:0",
         "amazon.nova-pro-v1:0",
         "amazon.nova-lite-v1:0",
         "amazon.nova-micro-v1:0",
         // Meta Llama
-        "meta.llama4-maverick-17b-instruct-v1:0",
-        "meta.llama4-scout-17b-instruct-v1:0",
         "meta.llama3-3-70b-instruct-v1:0",
+        "meta.llama3-1-405b-instruct-v1:0",
+        "meta.llama3-1-70b-instruct-v1:0",
         // Mistral
-        "mistral.mistral-large-3-675b-instruct",
+        "mistral.mistral-large-2411-v1:0",
-        "mistral.pixtral-large-2502-v1:0",
+        "mistral.mistral-small-2503-v1:0",
     ],
     openrouter: [
         // Anthropic
-        "anthropic/claude-opus-4.8",
+        "anthropic/claude-sonnet-4",
-        "anthropic/claude-sonnet-4.6",
+        "anthropic/claude-opus-4",
-        "anthropic/claude-haiku-4.5",
+        "anthropic/claude-3.5-sonnet",
+        "anthropic/claude-3.5-haiku",
         // OpenAI
-        "openai/gpt-5.5",
+        "openai/gpt-4o",
-        "openai/gpt-5.4",
-        "openai/gpt-5.4-mini",
         "openai/gpt-4o-mini",
+        "openai/o1",
+        "openai/o3-mini",
         // Google
-        "google/gemini-3.1-pro-preview",
+        "google/gemini-2.5-pro",
-        "google/gemini-3.5-flash",
+        "google/gemini-2.5-flash",
-        "google/gemini-2.5-flash-lite",
+        "google/gemini-2.0-flash-exp:free",
-        // xAI
-        "x-ai/grok-4.3",
         // Meta Llama
-        "meta-llama/llama-4-maverick",
-        "meta-llama/llama-4-scout",
         "meta-llama/llama-3.3-70b-instruct",
+        "meta-llama/llama-3.1-405b-instruct",
+        "meta-llama/llama-3.1-70b-instruct",
         // DeepSeek
-        "deepseek/deepseek-v4-pro",
+        "deepseek/deepseek-chat",
-        "deepseek/deepseek-v3.2",
+        "deepseek/deepseek-r1",
         // Qwen
-        "qwen/qwen3.7-max",
+        "qwen/qwen-2.5-72b-instruct",
-        "qwen/qwen3-coder",
-        // MiniMax
-        "minimax/minimax-m3",
-    ],
-    deepseek: [
-        "deepseek-v4-pro",
-        "deepseek-v4-flash",
-        "deepseek-chat",
-        "deepseek-reasoner",
     ],
+    deepseek: ["deepseek-chat", "deepseek-reasoner", "deepseek-coder"],
     siliconflow: [
         // DeepSeek
-        "deepseek-ai/DeepSeek-V4-Pro",
+        "deepseek-ai/DeepSeek-V3",
-        "deepseek-ai/DeepSeek-V4-Flash",
+        "deepseek-ai/DeepSeek-R1",
-        "deepseek-ai/DeepSeek-V3.2",
+        "deepseek-ai/DeepSeek-V2.5",
-        // MiniMax
-        "MiniMaxAI/MiniMax-M3",
-        // Moonshot
-        "moonshotai/Kimi-K2.6",
-        // Z.ai
-        "zai-org/GLM-5",
         // Qwen
-        "Qwen/Qwen3.6-35B-A3B",
+        "Qwen/Qwen2.5-72B-Instruct",
-        "Qwen/Qwen3-Coder-480B-A35B-Instruct",
+        "Qwen/Qwen2.5-32B-Instruct",
-        "Qwen/Qwen3-30B-A3B-Instruct-2507",
+        "Qwen/Qwen2.5-Coder-32B-Instruct",
-        "Qwen/Qwen3-VL-32B-Instruct",
+        "Qwen/Qwen2.5-7B-Instruct",
-        // OpenAI open-weights
+        "Qwen/Qwen2-VL-72B-Instruct",
-        "openai/gpt-oss-120b",
+        "qwen3.5-plus",
     ],
     sglang: [
         // SGLang is OpenAI-compatible, models depend on deployment
         "default",
     ],
     gateway: [
-        "openai/gpt-5.5",
+        "openai/gpt-4o",
-        "anthropic/claude-opus-4.7",
+        "openai/gpt-4o-mini",
-        "google/gemini-3.1-pro-preview",
+        "anthropic/claude-sonnet-4-5",
-        "xai/grok-4.3",
+        "anthropic/claude-3-5-sonnet",
-        "anthropic/claude-sonnet-4.6",
+        "google/gemini-2.0-flash",
-        "anthropic/claude-haiku-4.5",
-        "openai/gpt-5.4-mini",
     ],
     edgeone: ["@tx/deepseek-ai/deepseek-v32"],
     doubao: [
-        // ByteDance Doubao models (Volcengine Ark IDs use dash form)
+        // ByteDance Doubao models
-        "doubao-seed-2-0-pro-260215",
+        "doubao-1.5-thinking-pro-250415",
-        "doubao-seed-2-0-lite-260428",
+        "doubao-1.5-thinking-pro-m-250428",
-        "doubao-seed-2-0-mini-260428",
+        "doubao-1.5-pro-32k-250115",
-        "doubao-seed-1-8-251228",
+        "doubao-1.5-pro-256k-250115",
-        "doubao-seed-1-6-251015",
+        "doubao-pro-32k-241215",
-        "doubao-seed-1-6-flash-250828",
+        "doubao-pro-256k-241215",
-        "doubao-seed-1-6-vision-250815",
-        "doubao-1-5-pro-32k-250115",
-        "doubao-1-5-lite-32k-250115",
     ],
     modelscope: [
-        // DeepSeek
-        "deepseek-ai/DeepSeek-V4-Pro",
-        "deepseek-ai/DeepSeek-V3.2",
-        "deepseek-ai/DeepSeek-R1-0528",
-        "deepseek-ai/DeepSeek-R1",
         // Qwen
+        "Qwen/Qwen2.5-72B-Instruct",
+        "Qwen/Qwen2.5-32B-Instruct",
         "Qwen/Qwen3-235B-A22B-Instruct-2507",
         "Qwen/Qwen3-VL-235B-A22B-Instruct",
-        "Qwen/Qwen3-Coder-30B-A3B-Instruct",
         "Qwen/Qwen3-32B",
-        "Qwen/Qwen2.5-72B-Instruct",
+        "qwen3.5-plus",
+        // DeepSeek
+        "deepseek-ai/DeepSeek-R1-0528",
+        "deepseek-ai/DeepSeek-V3.2",
     ],
     minimax: [
         // MiniMax models (Anthropic-compatible API)
-        "MiniMax-M3",
         "MiniMax-M2.7",
         "MiniMax-M2.7-highspeed",
         "MiniMax-M2.5",
+        "MiniMax-M2.5-highspeed",
     ],
     novita: [
         // Novita AI models (OpenAI-compatible API)
-        "minimax/minimax-m3",
+        "moonshotai/kimi-k2.5",
-        "deepseek/deepseek-v4-pro",
+        "zai-org/glm-5",
-        "zai-org/glm-5.1",
+        "minimax/minimax-m2.5",
-        "moonshotai/kimi-k2.6",
-        "deepseek/deepseek-v4-flash",
     ],
 }
 

package.json

@@ -1,6 +1,6 @@
 {
     "name": "next-ai-draw-io",
-    "version": "0.4.16",
+    "version": "0.4.14",
     "license": "Apache-2.0",
     "private": true,
     "main": "dist-electron/main/index.js",
@@ -49,9 +49,9 @@
         "@langfuse/tracing": "^4.4.9",
         "@next/third-parties": "^16.0.6",
         "@opennextjs/cloudflare": "^1.17.1",
-        "@openrouter/ai-sdk-provider": "^2.0.0",
+        "@openrouter/ai-sdk-provider": "^1.5.4",
         "@opentelemetry/api": "^1.9.0",
-        "@opentelemetry/exporter-trace-otlp-http": "^0.216.0",
+        "@opentelemetry/exporter-trace-otlp-http": "^0.214.0",
         "@opentelemetry/sdk-trace-node": "^2.2.0",
         "@radix-ui/react-alert-dialog": "^1.1.15",
         "@radix-ui/react-collapsible": "^1.1.12",
@@ -77,7 +77,7 @@
         "nanoid": "^5.0.0",
         "negotiator": "^1.0.0",
         "next": "^16.0.7",
-        "ollama-ai-provider-v2": "^3.0.0",
+        "ollama-ai-provider-v2": "^2.0.0",
         "pako": "^2.1.0",
         "prism-react-renderer": "^2.4.1",
         "react": "^19.1.2",
@@ -108,7 +108,7 @@
     },
     "devDependencies": {
         "@anthropic-ai/tokenizer": "^0.0.4",
-        "@biomejs/biome": "2.4.13",
+        "@biomejs/biome": "2.4.10",
         "@playwright/test": "^1.57.0",
         "@tailwindcss/postcss": "^4",
         "@tailwindcss/typography": "^0.5.19",
@@ -127,7 +127,7 @@
         "cross-env": "^10.1.0",
         "electron": "^39.2.7",
         "electron-builder": "^26.0.12",
-        "esbuild": "^0.28.0",
+        "esbuild": "^0.27.2",
         "eslint": "9.39.4",
         "eslint-config-next": "16.1.6",
         "husky": "^9.1.7",

packages/mcp-server/package-lock.json

@@ -1,12 +1,12 @@
 {
     "name": "@next-ai-drawio/mcp-server",
-    "version": "0.2.0",
+    "version": "0.1.17",
     "lockfileVersion": 3,
     "requires": true,
     "packages": {
         "": {
             "name": "@next-ai-drawio/mcp-server",
-            "version": "0.2.0",
+            "version": "0.1.17",
             "license": "Apache-2.0",
             "dependencies": {
                 "@modelcontextprotocol/sdk": "^1.0.4",
@@ -521,9 +521,9 @@
             }
         },
         "node_modules/@types/node": {
-            "version": "24.12.2",
+            "version": "24.12.0",
-            "resolved": "https://registry.npmjs.org/@types/node/-/node-24.12.2.tgz",
+            "resolved": "https://registry.npmjs.org/@types/node/-/node-24.12.0.tgz",
-            "integrity": "sha512-A1sre26ke7HDIuY/M23nd9gfB+nrmhtYyMINbjI1zHJxYteKR6qSMX56FsmjMcDb3SMcjJg5BiRRgOCC/yBD0g==",
+            "integrity": "sha512-GYDxsZi3ChgmckRT9HPU0WEhKLP08ev/Yfcq2AstjrDASOYCSXeyjDsHg4v5t4jOj7cyDX3vmprafKlWIG9MXQ==",
             "dev": true,
             "license": "MIT",
             "dependencies": {
@@ -2062,9 +2062,9 @@
             }
         },
         "node_modules/zod": {
-            "version": "4.4.1",
+            "version": "4.3.6",
-            "resolved": "https://registry.npmjs.org/zod/-/zod-4.4.1.tgz",
+            "resolved": "https://registry.npmjs.org/zod/-/zod-4.3.6.tgz",
-            "integrity": "sha512-a6ENMBBGZBsnlSebQ/eKCguSBeGKSf4O7BPnqVPmYGtpBYI7VSqoVqw+QcB7kPRjbqPwhYTpFbVj/RqNz/CT0Q==",
+            "integrity": "sha512-rftlrkhHZOcjDwkGlnUtZZkvaPHCsDATp4pGpuOOMDaTdDDXF91wuVDJoWoPsKX/3YPQ5fHuF3STjcYyKr+Qhg==",
             "license": "MIT",
             "funding": {
                 "url": "https://github.com/sponsors/colinhacks"

packages/mcp-server/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@next-ai-drawio/mcp-server",
-    "version": "0.2.0",
+    "version": "0.1.19",
     "description": "MCP server for Next AI Draw.io - AI-powered diagram generation with real-time browser preview",
     "type": "module",
     "main": "dist/index.js",

packages/mcp-server/src/index.ts

@@ -155,22 +155,19 @@ server.registerTool(
 server.registerTool(
     "create_new_diagram",
     {
-        description: `Create a NEW diagram from mxGraphModel XML. ONLY use this when creating a diagram from scratch.
+        description: `Create a NEW diagram from mxGraphModel XML. Use this when creating a diagram from scratch or replacing the current diagram entirely.
-
-⚠️ DO NOT use this tool to modify an existing diagram — it will DESTROY all existing content and user changes. Use edit_diagram instead for ANY modifications to an existing diagram.
 
 CRITICAL: You MUST provide the 'xml' argument in EVERY call. Do NOT call this tool without xml.
 
 When to use this tool:
-- Creating a new diagram from scratch (no existing diagram)
+- Creating a new diagram from scratch
-- The user explicitly asks to "start over" or "create a new diagram"
+- Replacing the current diagram with a completely different one
+- Major structural changes that require regenerating the diagram
 
-When to use edit_diagram instead (ALWAYS prefer edit_diagram if a diagram already exists):
+When to use edit_diagram instead:
-- ANY modifications to an existing diagram
+- Small modifications to existing diagram
-- Adding/removing/moving elements
+- Adding/removing individual elements
-- Changing labels, colors, styles, or positions
+- Changing labels, colors, or positions
-- Restructuring or reorganizing existing content
-- Adding new elements to an existing diagram
 
 XML FORMAT - Full mxGraphModel structure:
 <mxGraphModel>

packages/mcp-server/tsconfig.json

@@ -12,8 +12,7 @@
         "declaration": true,
         "declarationMap": true,
         "sourceMap": true,
-        "resolveJsonModule": true,
+        "resolveJsonModule": true
-        "types": ["node"]
     },
     "include": ["src/**/*"],
     "exclude": ["node_modules", "dist"]

tests/e2e/iframe-interaction.spec.ts

@@ -35,10 +35,8 @@ test.describe("Iframe Interaction", () => {
         await expect(
             frame
                 .locator('text="Diagram"')
-                .or(frame.locator('[title*="Diagram"]'))
+                .or(frame.locator('[title*="Diagram"]')),
-                .filter({ visible: true })
+        ).toBeVisible({ timeout: 10000 })
-                .first(),
-        ).toBeVisible({ timeout: 30000 })
     })
 
     test("diagram XML is rendered in iframe after generation", async ({

tests/unit/admin-providers.test.ts

@@ -1,398 +0,0 @@
-import fs from "fs"
-import os from "os"
-import path from "path"
-import { afterEach, beforeEach, describe, expect, it } from "vitest"
-import {
-    ADMIN_PROVIDERS_KEY,
-    adminProvidersToConfig,
-    deriveEnvUpdates,
-    loadAdminProviders,
-    maskAdminProviders,
-    mergeSecrets,
-    type StoredAdminProvider,
-    validateAdminProviders,
-} from "@/lib/admin/providers"
-import { _resetForTests, saveSettings } from "@/lib/admin/settings"
-import { loadRawServerModelsConfig } from "@/lib/server-model-config"
-
-let tmpDir: string
-
-beforeEach(() => {
-    tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "admin-providers-"))
-    process.env.SETTINGS_FILE = path.join(tmpDir, "settings.json")
-    _resetForTests()
-})
-
-afterEach(() => {
-    _resetForTests()
-    delete process.env.SETTINGS_FILE
-    delete process.env.AI_MODELS_CONFIG
-    fs.rmSync(tmpDir, { recursive: true, force: true })
-})
-
-function provider(
-    overrides: Partial<StoredAdminProvider> = {},
-): StoredAdminProvider {
-    return {
-        id: "p1",
-        provider: "openai",
-        apiKey: "sk-test",
-        models: ["gpt-5.2"],
-        ...overrides,
-    }
-}
-
-describe("deriveEnvUpdates", () => {
-    it("writes credentials to ADMIN_-prefixed env vars (never shadows standard vars)", () => {
-        const updates = deriveEnvUpdates([provider()], [])
-        expect(updates.ADMIN_OPENAI_API_KEY).toBe("sk-test")
-        expect(updates.OPENAI_API_KEY).toBeUndefined()
-        expect(JSON.parse(updates.ADMIN_PROVIDERS as string)).toHaveLength(1)
-        // AI_MODELS_CONFIG is no longer written (merged at read time)
-        expect(updates.AI_MODELS_CONFIG).toBeNull()
-    })
-
-    it("suffixes env vars for a second instance of the same provider", () => {
-        const updates = deriveEnvUpdates(
-            [
-                provider({ id: "p1", name: "First" }),
-                provider({
-                    id: "p2",
-                    name: "Second",
-                    apiKey: "sk-second",
-                    models: ["gpt-5-mini"],
-                }),
-            ],
-            [],
-        )
-        expect(updates.ADMIN_OPENAI_API_KEY).toBe("sk-test")
-        expect(updates.ADMIN_OPENAI_API_KEY_2).toBe("sk-second")
-    })
-
-    it("maps bedrock credentials to AWS env vars", () => {
-        const updates = deriveEnvUpdates(
-            [
-                provider({
-                    provider: "bedrock",
-                    apiKey: undefined,
-                    awsAccessKeyId: "AKIA123",
-                    awsSecretAccessKey: "secret",
-                    awsRegion: "us-west-2",
-                    models: ["claude-x"],
-                }),
-            ],
-            [],
-        )
-        expect(updates.AWS_ACCESS_KEY_ID).toBe("AKIA123")
-        expect(updates.AWS_SECRET_ACCESS_KEY).toBe("secret")
-        expect(updates.AWS_REGION).toBe("us-west-2")
-    })
-
-    it("clears keys owned by the previous list when providers are removed", () => {
-        const prev = [provider()]
-        const updates = deriveEnvUpdates([], prev)
-        expect(updates.ADMIN_OPENAI_API_KEY).toBeNull()
-        expect(updates.AI_MODELS_CONFIG).toBeNull()
-        expect(updates.ADMIN_PROVIDERS).toBeNull()
-    })
-
-    it("sets AI_PROVIDER/AI_MODEL only when a default is flagged", () => {
-        const noDefault = deriveEnvUpdates([provider()], [])
-        expect(noDefault.AI_PROVIDER).toBeNull()
-        expect(noDefault.AI_MODEL).toBeNull()
-
-        const updates = deriveEnvUpdates(
-            [
-                provider({ id: "p1" }),
-                provider({
-                    id: "p2",
-                    provider: "deepseek",
-                    models: ["deepseek-chat"],
-                    isDefault: true,
-                }),
-            ],
-            [],
-        )
-        expect(updates.AI_PROVIDER).toBe("deepseek")
-        expect(updates.AI_MODEL).toBe("deepseek-chat")
-    })
-})
-
-describe("adminProvidersToConfig", () => {
-    it("builds a config with ADMIN_-prefixed apiKeyEnv wiring", () => {
-        const config = adminProvidersToConfig([provider()])
-        expect(config.providers).toHaveLength(1)
-        expect(config.providers[0].models).toEqual(["gpt-5.2"])
-        expect(config.providers[0].apiKeyEnv).toBe("ADMIN_OPENAI_API_KEY")
-    })
-
-    it("wires suffixed env vars for a second instance", () => {
-        const config = adminProvidersToConfig([
-            provider({ id: "p1", name: "First" }),
-            provider({
-                id: "p2",
-                name: "Second",
-                apiKey: "sk-second",
-                models: ["gpt-5-mini"],
-            }),
-        ])
-        expect(config.providers[1].apiKeyEnv).toBe("ADMIN_OPENAI_API_KEY_2")
-    })
-
-    it("skips providers without models and carries the default flag", () => {
-        const config = adminProvidersToConfig([
-            provider({ id: "p1", models: [] }),
-            provider({ id: "p2", name: "D", isDefault: true }),
-        ])
-        expect(config.providers).toHaveLength(1)
-        expect(config.providers[0].default).toBe(true)
-    })
-})
-
-describe("mergeSecrets", () => {
-    it("keeps stored secret when client sends an isSet marker", () => {
-        const stored = [provider({ apiKey: "sk-original" })]
-        const merged = mergeSecrets(
-            [
-                {
-                    ...provider(),
-                    apiKey: { isSet: true, hint: "…test" },
-                },
-            ],
-            stored,
-        )
-        expect(merged[0].apiKey).toBe("sk-original")
-    })
-
-    it("replaces secret when client sends a plaintext string", () => {
-        const stored = [provider({ apiKey: "sk-original" })]
-        const merged = mergeSecrets(
-            [{ ...provider(), apiKey: "sk-new" }],
-            stored,
-        )
-        expect(merged[0].apiKey).toBe("sk-new")
-    })
-
-    it("clears secret when client sends undefined", () => {
-        const stored = [provider({ apiKey: "sk-original" })]
-        const merged = mergeSecrets(
-            [{ ...provider(), apiKey: undefined }],
-            stored,
-        )
-        expect(merged[0].apiKey).toBeUndefined()
-    })
-})
-
-describe("loadRawServerModelsConfig merge", () => {
-    it("combines env AI_MODELS_CONFIG with panel providers", async () => {
-        process.env.AI_MODELS_CONFIG = JSON.stringify({
-            providers: [
-                {
-                    name: "Env OpenAI",
-                    provider: "openai",
-                    models: ["gpt-from-env"],
-                    default: true,
-                },
-            ],
-        })
-        saveSettings(deriveEnvUpdates([provider({ name: "Panel" })], []))
-
-        const merged = await loadRawServerModelsConfig()
-        expect(merged?.providers.map((p) => p.name)).toEqual([
-            "Env OpenAI",
-            "Panel",
-        ])
-        // Env default kept because panel set none
-        expect(merged?.providers[0].default).toBe(true)
-    })
-
-    it("panel default overrides the env default", async () => {
-        process.env.AI_MODELS_CONFIG = JSON.stringify({
-            providers: [
-                {
-                    name: "Env OpenAI",
-                    provider: "openai",
-                    models: ["gpt-from-env"],
-                    default: true,
-                },
-            ],
-        })
-        saveSettings(
-            deriveEnvUpdates(
-                [provider({ name: "Panel", isDefault: true })],
-                [],
-            ),
-        )
-
-        const merged = await loadRawServerModelsConfig()
-        expect(merged?.providers[0].default).toBeFalsy()
-        expect(merged?.providers[1].default).toBe(true)
-    })
-
-    it("returns only env config when the panel has no providers", async () => {
-        process.env.AI_MODELS_CONFIG = JSON.stringify({
-            providers: [
-                {
-                    name: "Env Only",
-                    provider: "openai",
-                    models: ["gpt-from-env"],
-                },
-            ],
-        })
-        const merged = await loadRawServerModelsConfig()
-        expect(merged?.providers.map((p) => p.name)).toEqual(["Env Only"])
-    })
-})
-
-describe("validateAdminProviders", () => {
-    it("rejects names clashing with env-configured providers", () => {
-        expect(
-            validateAdminProviders([provider({ name: "Env OpenAI" })], {
-                providers: [
-                    {
-                        name: "Env OpenAI",
-                        provider: "openai",
-                        models: ["gpt-x"],
-                    },
-                ],
-            }),
-        ).toMatch(/already defined/)
-    })
-
-    it("rejects a global-credential provider already in the env config", () => {
-        expect(
-            validateAdminProviders(
-                [
-                    provider({
-                        provider: "bedrock",
-                        apiKey: undefined,
-                        awsAccessKeyId: "AKIA-panel",
-                        awsSecretAccessKey: "panel-secret",
-                        awsRegion: "us-east-1",
-                        models: ["claude-x"],
-                    }),
-                ],
-                {
-                    providers: [
-                        {
-                            name: "Env Bedrock",
-                            provider: "bedrock",
-                            models: ["claude-env"],
-                        },
-                    ],
-                },
-            ),
-        ).toMatch(/shares global credentials/)
-    })
-
-    it("allows a normal provider type alongside the same env type", () => {
-        expect(
-            validateAdminProviders([provider({ name: "Panel OpenAI" })], {
-                providers: [
-                    {
-                        name: "Env OpenAI",
-                        provider: "openai",
-                        models: ["gpt-x"],
-                    },
-                ],
-            }),
-        ).toBeNull()
-    })
-
-    it("rejects two bedrock instances", () => {
-        const list = [
-            provider({ id: "p1", provider: "bedrock" }),
-            provider({ id: "p2", provider: "bedrock" }),
-        ]
-        expect(validateAdminProviders(list)).toMatch(/Only one/)
-    })
-
-    it("rejects duplicate display names", () => {
-        const list = [
-            provider({ id: "p1", name: "Same" }),
-            provider({ id: "p2", name: "Same" }),
-        ]
-        expect(validateAdminProviders(list)).toMatch(/unique/)
-    })
-
-    it("rejects multiple defaults", () => {
-        const list = [
-            provider({ id: "p1", isDefault: true }),
-            provider({ id: "p2", name: "Other", isDefault: true }),
-        ]
-        expect(validateAdminProviders(list)).toMatch(/default/)
-    })
-
-    it("accepts a valid list", () => {
-        const list = [
-            provider({ id: "p1", isDefault: true }),
-            provider({ id: "p2", name: "Backup" }),
-        ]
-        expect(validateAdminProviders(list)).toBeNull()
-    })
-})
-
-describe("loadAdminProviders", () => {
-    it("returns [] when nothing is stored", () => {
-        expect(loadAdminProviders()).toEqual([])
-    })
-
-    it("loads valid stored providers", () => {
-        saveSettings({ [ADMIN_PROVIDERS_KEY]: JSON.stringify([provider()]) })
-        expect(loadAdminProviders()).toHaveLength(1)
-    })
-
-    it("round-trips a bedrock provider with multiple string secrets", () => {
-        const bedrock = provider({
-            provider: "bedrock",
-            apiKey: undefined,
-            awsAccessKeyId: "AKIA123",
-            awsSecretAccessKey: "secret",
-            awsRegion: "us-west-2",
-            models: ["claude-x"],
-        })
-        saveSettings({ [ADMIN_PROVIDERS_KEY]: JSON.stringify([bedrock]) })
-        const loaded = loadAdminProviders()
-        expect(loaded).toHaveLength(1)
-        expect(loaded[0].awsAccessKeyId).toBe("AKIA123")
-        expect(loaded[0].awsSecretAccessKey).toBe("secret")
-    })
-
-    it("drops malformed entries and keeps valid ones", () => {
-        saveSettings({
-            [ADMIN_PROVIDERS_KEY]: JSON.stringify([
-                provider({ id: "good" }),
-                { id: "missing-fields" }, // no provider/models
-                { provider: "openai", models: ["x"] }, // no id
-                "not-an-object",
-            ]),
-        })
-        const loaded = loadAdminProviders()
-        expect(loaded).toHaveLength(1)
-        expect(loaded[0].id).toBe("good")
-    })
-
-    it("returns [] when the stored value is not an array", () => {
-        saveSettings({ [ADMIN_PROVIDERS_KEY]: JSON.stringify({ nope: true }) })
-        expect(loadAdminProviders()).toEqual([])
-    })
-
-    it("returns [] on invalid JSON", () => {
-        saveSettings({ [ADMIN_PROVIDERS_KEY]: "{ broken" })
-        expect(loadAdminProviders()).toEqual([])
-    })
-
-    it("drops entries whose secret is an {isSet} marker, not a string", () => {
-        // A hand-edited file could hold a transit-only marker object; if it
-        // slipped through, maskSecret() would throw on a non-string value.
-        saveSettings({
-            [ADMIN_PROVIDERS_KEY]: JSON.stringify([
-                { ...provider(), apiKey: { isSet: true, hint: "…1234" } },
-            ]),
-        })
-        const loaded = loadAdminProviders()
-        expect(loaded).toEqual([])
-        // Masking the loaded list must not throw
-        expect(() => maskAdminProviders(loaded)).not.toThrow()
-    })
-})

tests/unit/admin-settings.test.ts

@@ -1,158 +0,0 @@
-import fs from "fs"
-import os from "os"
-import path from "path"
-import { afterEach, beforeEach, describe, expect, it } from "vitest"
-import {
-    _resetForTests,
-    applyToEnv,
-    getEnvFallback,
-    getValueSource,
-    isSettingsWritable,
-    loadSettings,
-    saveSettings,
-} from "@/lib/admin/settings"
-
-let tmpDir: string
-
-beforeEach(() => {
-    tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "admin-settings-"))
-    process.env.SETTINGS_FILE = path.join(tmpDir, "settings.json")
-    _resetForTests()
-})
-
-afterEach(() => {
-    _resetForTests()
-    delete process.env.SETTINGS_FILE
-    fs.rmSync(tmpDir, { recursive: true, force: true })
-    delete process.env.TEST_ADMIN_VAR
-})
-
-describe("loadSettings", () => {
-    it("returns empty object when file does not exist", () => {
-        expect(loadSettings()).toEqual({})
-    })
-
-    it("reads values from the settings file", () => {
-        fs.writeFileSync(
-            process.env.SETTINGS_FILE!,
-            JSON.stringify({ version: 1, values: { TEST_ADMIN_VAR: "abc" } }),
-        )
-        expect(loadSettings()).toEqual({ TEST_ADMIN_VAR: "abc" })
-    })
-
-    it("drops non-string values from a corrupted file", () => {
-        fs.writeFileSync(
-            process.env.SETTINGS_FILE!,
-            JSON.stringify({
-                version: 1,
-                values: {
-                    GOOD: "ok",
-                    NUM: 5,
-                    OBJ: { nested: true },
-                    ARR: [1, 2],
-                    NULL: null,
-                },
-            }),
-        )
-        expect(loadSettings()).toEqual({ GOOD: "ok" })
-    })
-
-    it("returns empty object when values is null", () => {
-        fs.writeFileSync(
-            process.env.SETTINGS_FILE!,
-            JSON.stringify({ version: 1, values: null }),
-        )
-        expect(loadSettings()).toEqual({})
-    })
-
-    it("returns empty object when values is an array (no numeric keys)", () => {
-        fs.writeFileSync(
-            process.env.SETTINGS_FILE!,
-            JSON.stringify({ version: 1, values: ["a", "b"] }),
-        )
-        // Without the Array.isArray guard this would yield { "0": "a", ... }
-        expect(loadSettings()).toEqual({})
-    })
-})
-
-describe("applyToEnv / saveSettings", () => {
-    it("overlays file values onto process.env", () => {
-        saveSettings({ TEST_ADMIN_VAR: "from-file" })
-        expect(process.env.TEST_ADMIN_VAR).toBe("from-file")
-    })
-
-    it("file value wins over pre-existing env value", () => {
-        process.env.TEST_ADMIN_VAR = "from-env"
-        saveSettings({ TEST_ADMIN_VAR: "from-file" })
-        expect(process.env.TEST_ADMIN_VAR).toBe("from-file")
-    })
-
-    it("deleting a key restores the original env value", () => {
-        process.env.TEST_ADMIN_VAR = "from-env"
-        saveSettings({ TEST_ADMIN_VAR: "from-file" })
-        saveSettings({ TEST_ADMIN_VAR: null })
-        expect(process.env.TEST_ADMIN_VAR).toBe("from-env")
-    })
-
-    it("deleting a key unsets env when there was no original value", () => {
-        saveSettings({ TEST_ADMIN_VAR: "from-file" })
-        saveSettings({ TEST_ADMIN_VAR: null })
-        expect(process.env.TEST_ADMIN_VAR).toBeUndefined()
-    })
-
-    it("persists across cache reset (file round-trip)", () => {
-        saveSettings({ TEST_ADMIN_VAR: "persisted" })
-        _resetForTests()
-        applyToEnv()
-        expect(process.env.TEST_ADMIN_VAR).toBe("persisted")
-    })
-})
-
-describe("getValueSource / getEnvFallback", () => {
-    it("reports file source when key is in settings", () => {
-        saveSettings({ TEST_ADMIN_VAR: "x" })
-        expect(getValueSource("TEST_ADMIN_VAR")).toBe("file")
-    })
-
-    it("reports env source when only env is set", () => {
-        process.env.TEST_ADMIN_VAR = "from-env"
-        applyToEnv()
-        expect(getValueSource("TEST_ADMIN_VAR")).toBe("env")
-    })
-
-    it("reports default when neither is set", () => {
-        expect(getValueSource("TEST_ADMIN_VAR")).toBe("default")
-    })
-
-    it("returns the shadowed env value as fallback", () => {
-        process.env.TEST_ADMIN_VAR = "from-env"
-        saveSettings({ TEST_ADMIN_VAR: "from-file" })
-        expect(getEnvFallback("TEST_ADMIN_VAR")).toBe("from-env")
-    })
-})
-
-describe("isSettingsWritable", () => {
-    it("returns true for a writable temp dir", () => {
-        expect(isSettingsWritable()).toBe(true)
-    })
-
-    it("returns false for an unwritable path", () => {
-        _resetForTests()
-        process.env.SETTINGS_FILE = "/nonexistent-root-dir/settings.json"
-        expect(isSettingsWritable()).toBe(false)
-    })
-})
-
-describe("settings file on disk", () => {
-    it("writes valid JSON with restrictive permissions", () => {
-        saveSettings({ TEST_ADMIN_VAR: "secret" })
-        const filePath = process.env.SETTINGS_FILE!
-        const parsed = JSON.parse(fs.readFileSync(filePath, "utf8"))
-        expect(parsed).toEqual({
-            version: 1,
-            values: { TEST_ADMIN_VAR: "secret" },
-        })
-        const mode = fs.statSync(filePath).mode & 0o777
-        expect(mode).toBe(0o600)
-    })
-})

tests/unit/ai-providers.test.ts

@@ -180,14 +180,11 @@ describe("supportsImageInput", () => {
         expect(supportsImageInput("moonshot-v1-128k")).toBe(false)
     })
 
-    it("returns false for MiniMax M2 text models", () => {
+    it("returns false for MiniMax text models", () => {
         expect(supportsImageInput("MiniMax-M2.7")).toBe(false)
-        expect(supportsImageInput("MiniMax-M2.7-highspeed")).toBe(false)
+        expect(supportsImageInput("MiniMax-M2.5")).toBe(false)
         expect(supportsImageInput("MiniMax-M2")).toBe(false)
-    })
+        expect(supportsImageInput("MiniMax-M2.5-highspeed")).toBe(false)
-
-    it("returns true for MiniMax M3 (supports image input)", () => {
-        expect(supportsImageInput("MiniMax-M3")).toBe(true)
     })
 
     it("returns false for DeepSeek text models", () => {
@@ -211,13 +208,6 @@ describe("supportsImageInput", () => {
         expect(supportsImageInput("qwen3-vl-flash")).toBe(true)
     })
 
-    it("returns true for QvQ (Qwen Visual QA) models including OpenRouter-prefixed names", () => {
-        expect(supportsImageInput("qvq-72b-preview")).toBe(true)
-        expect(supportsImageInput("qvq-max")).toBe(true)
-        expect(supportsImageInput("qwen/qvq-72b-preview")).toBe(true)
-        expect(supportsImageInput("qwen/qvq-max")).toBe(true)
-    })
-
     it("returns false for GLM text models", () => {
         expect(supportsImageInput("glm-4")).toBe(false)
         expect(supportsImageInput("glm-4-plus")).toBe(false)
@@ -248,67 +238,6 @@ vi.mock("ollama-ai-provider-v2", () => {
     return { createOllama: mockCreateOllama, ollama: mockOllama }
 })
 
-vi.mock("@ai-sdk/deepseek", () => {
-    const mockModel = { modelId: "test-model" }
-    const mockProviderFn = vi.fn(() => mockModel)
-    const mockCreateDeepSeek = vi.fn(() => mockProviderFn)
-    const mockDeepseek = vi.fn(() => mockModel)
-    return { createDeepSeek: mockCreateDeepSeek, deepseek: mockDeepseek }
-})
-
-describe("Kimi provider uses createDeepSeek for reasoning_content support", () => {
-    let createDeepSeekMock: ReturnType<typeof vi.fn>
-    const savedEnv: Record<string, string | undefined> = {}
-
-    beforeEach(async () => {
-        savedEnv.KIMI_API_KEY = process.env.KIMI_API_KEY
-        savedEnv.KIMI_BASE_URL = process.env.KIMI_BASE_URL
-        delete process.env.KIMI_BASE_URL
-
-        const mod = await import("@ai-sdk/deepseek")
-        createDeepSeekMock = mod.createDeepSeek as ReturnType<typeof vi.fn>
-        createDeepSeekMock.mockClear()
-    })
-
-    afterEach(() => {
-        process.env.KIMI_API_KEY = savedEnv.KIMI_API_KEY
-        process.env.KIMI_BASE_URL = savedEnv.KIMI_BASE_URL
-    })
-
-    it("uses createDeepSeek with Kimi default base URL for reasoning_content support", () => {
-        process.env.KIMI_API_KEY = "test-kimi-key"
-
-        getAIModel({
-            provider: "kimi",
-            apiKey: "test-kimi-key",
-            modelId: "moonshot-v1-8k",
-        })
-
-        expect(createDeepSeekMock).toHaveBeenCalledWith(
-            expect.objectContaining({
-                baseURL: "https://api.moonshot.cn/v1",
-            }),
-        )
-    })
-
-    it("uses custom base URL when provided for kimi provider", () => {
-        process.env.KIMI_API_KEY = "test-kimi-key"
-
-        getAIModel({
-            provider: "kimi",
-            apiKey: "test-kimi-key",
-            baseUrl: "https://custom-kimi-endpoint.com/v1",
-            modelId: "kimi-k2.6",
-        })
-
-        expect(createDeepSeekMock).toHaveBeenCalledWith(
-            expect.objectContaining({
-                baseURL: "https://custom-kimi-endpoint.com/v1",
-            }),
-        )
-    })
-})
-
 describe("Ollama API key security", () => {
     let createOllamaMock: ReturnType<typeof vi.fn>
     const savedEnv: Record<string, string | undefined> = {}

tests/unit/server-model-config.test.ts

@@ -1,5 +1,4 @@
-import { afterEach, beforeEach, describe, expect, it } from "vitest"
+import { afterEach, describe, expect, it } from "vitest"
-import { _resetForTests } from "@/lib/admin/settings"
 import {
     loadFlattenedServerModels,
     type ServerModelsConfig,
@@ -8,20 +7,11 @@ import {
 
 const ORIGINAL_ENV = { ...process.env }
 
-beforeEach(() => {
-    // Isolate from any local data/settings.json (admin panel providers
-    // are merged into the server models config)
-    process.env.SETTINGS_FILE = "/nonexistent/settings.json"
-    _resetForTests()
-})
-
 afterEach(() => {
-    _resetForTests()
     process.env.AI_PROVIDER = ORIGINAL_ENV.AI_PROVIDER
     process.env.AI_MODEL = ORIGINAL_ENV.AI_MODEL
     process.env.AI_MODELS_CONFIG_PATH = ORIGINAL_ENV.AI_MODELS_CONFIG_PATH
     process.env.AI_MODELS_CONFIG = ORIGINAL_ENV.AI_MODELS_CONFIG
-    delete process.env.SETTINGS_FILE
 })
 
 describe("ServerModelsConfigSchema", () => {

tests/unit/ssrf-protection.test.ts

@@ -1,21 +0,0 @@
-import { describe, expect, it } from "vitest"
-import { isPrivateUrl } from "@/lib/ssrf-protection"
-
-describe("isPrivateUrl", () => {
-    it("blocks private IPv6 URLs", () => {
-        expect(isPrivateUrl("http://[::1]/")).toBe(true)
-        expect(isPrivateUrl("http://[0:0:0:0:0:0:0:1]/")).toBe(true)
-        expect(isPrivateUrl("http://[::]/")).toBe(true)
-        expect(isPrivateUrl("http://[::ffff:127.0.0.1]/")).toBe(true)
-        expect(isPrivateUrl("http://[fc00::1]/")).toBe(true)
-        expect(isPrivateUrl("http://[fd12:3456:789a::1]/")).toBe(true)
-        expect(isPrivateUrl("http://[fe80::1]/")).toBe(true)
-        expect(isPrivateUrl("http://[fe9f::1]/")).toBe(true)
-        expect(isPrivateUrl("http://[febf::1]/")).toBe(true)
-    })
-
-    it("allows public URLs", () => {
-        expect(isPrivateUrl("https://example.com/article")).toBe(false)
-        expect(isPrivateUrl("https://fc00.example.com/article")).toBe(false)
-    })
-})