feat: add OAuth model policy configuration UI

Author: ssfun

README.md

@@ -88,6 +88,7 @@ CLIProxyAPI Pro 是对两个 upstream 项目的最小化定制层集合：
 - 新增 `/account-inspection` 账号巡检页面。
 - 新增 `/routing` 路由策略页面。
 - 新增 `/proxy-pool` 代理池页面，负责节点配置、连通性测试、运行统计和全局代理接管/恢复。
+- 新增 `/oauth-model-policy` 可视化配置页，按 xAI OAuth 套餐编辑模型排除规则、回退策略和套餐探测缓存。
 - 请求量、成功率、延迟、token 和成本统计。
 - 模型价格 SQLite 持久化。
 - quota cache SQLite 持久化。

README_EN.md

@@ -88,6 +88,7 @@ Main capabilities:
 - Adds the `/account-inspection` account inspection page.
 - Adds the `/routing` routing-policy page.
 - Adds the `/proxy-pool` page for node configuration, connectivity tests, runtime statistics, and global-proxy takeover/restoration.
+- Adds the `/oauth-model-policy` visual editor for xAI OAuth plan rules, fallback policies, and plan-discovery caching.
 - Shows request count, success rate, latency, token, and cost metrics.
 - Persists model prices through SQLite.
 - Persists quota cache through SQLite.

cliproxyapi-pro-management/README.md

@@ -10,6 +10,8 @@
 
 新增 `/proxy-pool` 顶级页面，管理预打包的 `proxy-pool` 动态插件。页面可配置 HTTP/HTTPS/SOCKS5/SOCKS5H 节点、轮询策略、权重、健康检查、隔离和故障转移，并提供批量粘贴导入、节点搜索、筛选结果批量启停、快速复制、未保存草稿测试和手动解除隔离。运行区展示成功率、失败数、活动连接、最近成功/失败、配置代次和健康检查时间，并在插件未注册、端口占用或热重载失败时给出诊断。
 
+新增 `/oauth-model-policy` 顶级页面，管理预打包的 `oauth-model-policy` 动态插件。页面以套餐卡片分别编辑 xAI `free`、`supergrok`、`x-premium-plus`、`supergrok-heavy`、`paid-unknown` 模型排除规则，并区分套餐识别失败使用的 `_unknown` 与已识别套餐缺少专属规则时使用的 `_default`。同时可配置缓存时间、billing 探测超时和插件优先级；保存时自动启用插件运行时。
+
 页面负责在插件监听就绪后把 Core 的全局 `proxy-url` 切换到固定回环 SOCKS5 地址。停止接管时恢复此前的全局代理；带独立 `proxy-url` 的凭证会作为绕过项明确列出。插件配置随 Core 配置持久化，健康状态和连接统计属于进程级运行数据，不写入 usage 业务备份。
 
 轮换粒度是 SOCKS5 TCP tunnel，不保证每个复用的 HTTP 请求都切换节点。默认 `fail-open=false`，避免所有代理失效时静默直连。

cliproxyapi-pro-management/README_EN.md

@@ -10,6 +10,8 @@ This directory does not vendor the upstream application. It keeps overlay files
 
 Adds a top-level `/proxy-pool` page for the prebundled `proxy-pool` dynamic plugin. It manages HTTP/HTTPS/SOCKS5/SOCKS5H nodes, selection strategy, weights, health checks, isolation, and failover. It also supports batch paste, node search, filtered enable/disable, quick duplication, unsaved-draft tests, and manual isolation recovery. Runtime details include success rate, failures, active tunnels, last success/failure, config generation, and health-cycle timestamps, with explicit diagnostics for registration, listener, and hot-reload failures.
 
+Adds a top-level `/oauth-model-policy` page for the prebundled `oauth-model-policy` dynamic plugin. Plan cards edit model exclusions for xAI `free`, `supergrok`, `x-premium-plus`, `supergrok-heavy`, and `paid-unknown`, while keeping `_unknown` plan-discovery failures separate from the `_default` fallback for recognized plans without a dedicated rule. The page also controls cache TTL, billing timeout, and plugin priority, and enables the plugin runtime when saving.
+
 After the listener is ready, the page can point Core's global `proxy-url` at the fixed loopback SOCKS5 endpoint; stopping takeover restores the previous global proxy. Credentials with their own `proxy-url` are listed explicitly as bypasses. Plugin configuration persists with the normal Core configuration, while health state and connection counters remain process-local runtime data and are not mixed into usage backups.
 
 Rotation is per SOCKS5 TCP tunnel, not necessarily per multiplexed HTTP request. `fail-open=false` is the default to prevent silent direct traffic leakage.

cliproxyapi-pro-management/apply_customizations.py

@@ -250,6 +250,13 @@
     'zh-TW.json': {'label': '代理管理', 'meta': '多節點輪詢與故障轉移'},
 }
 
+OAUTH_MODEL_POLICY_NAV_LOCALE_KEYS = {
+    'en.json': {'label': 'OAuth Model Policy', 'meta': 'Per-plan model availability rules'},
+    'ru.json': {'label': 'Политика OAuth-моделей', 'meta': 'Правила доступности моделей по тарифам'},
+    'zh-CN.json': {'label': 'OAuth 模型策略', 'meta': '按账号套餐配置模型可用范围'},
+    'zh-TW.json': {'label': 'OAuth 模型策略', 'meta': '依帳號套餐設定模型可用範圍'},
+}
+
 def load_overlay_replacement_manifest(path: Path) -> dict[str, set[str]]:
     payload = json.loads(path.read_text())
     if payload.get('schemaVersion') != 1 or not isinstance(payload.get('replacements'), list):
@@ -693,12 +700,12 @@ def patch_routes(target: Path) -> None:
     replace_once(
         path,
         "import { QuotaPage } from '@/pages/QuotaPage';\n",
-        "import { QuotaPage } from '@/pages/QuotaPage';\nimport { MonitoringCenterPage } from '@/pages/MonitoringCenterPage';\nimport { AccountInspectionPage } from '@/pages/AccountInspectionPage';\nimport { RoutingPolicyPage } from '@/pages/RoutingPolicyPage';\nimport { ProxyPoolPage } from '@/pages/ProxyPoolPage';\n",
+        "import { QuotaPage } from '@/pages/QuotaPage';\nimport { MonitoringCenterPage } from '@/pages/MonitoringCenterPage';\nimport { AccountInspectionPage } from '@/pages/AccountInspectionPage';\nimport { RoutingPolicyPage } from '@/pages/RoutingPolicyPage';\nimport { ProxyPoolPage } from '@/pages/ProxyPoolPage';\nimport { OAuthModelPolicyPage } from '@/pages/OAuthModelPolicyPage';\n",
     )
     replace_once(
         path,
         "  { path: '/quota', element: <QuotaPage /> },\n",
-        "  { path: '/quota', element: <QuotaPage /> },\n  { path: '/monitoring', element: <MonitoringCenterPage /> },\n  { path: '/account-inspection', element: <AccountInspectionPage /> },\n  { path: '/routing', element: <RoutingPolicyPage /> },\n  { path: '/proxy-pool', element: <ProxyPoolPage /> },\n",
+        "  { path: '/quota', element: <QuotaPage /> },\n  { path: '/monitoring', element: <MonitoringCenterPage /> },\n  { path: '/account-inspection', element: <AccountInspectionPage /> },\n  { path: '/routing', element: <RoutingPolicyPage /> },\n  { path: '/proxy-pool', element: <ProxyPoolPage /> },\n  { path: '/oauth-model-policy', element: <OAuthModelPolicyPage /> },\n",
     )
 
 
@@ -713,13 +720,13 @@ def patch_layout(target: Path) -> None:
     insert_once(
         path,
         "  IconSidebarProviders,\n",
-        "  IconSidebarAccountInspection,\n  IconSidebarMonitor,\n  IconSidebarProxyPool,\n  IconSidebarRouting,\n  IconSidebarProviders,\n",
+        "  IconModelCluster,\n  IconSidebarAccountInspection,\n  IconSidebarMonitor,\n  IconSidebarProxyPool,\n  IconSidebarRouting,\n  IconSidebarProviders,\n",
         "  IconSidebarAccountInspection,\n",
     )
     replace_once(
         path,
         "  oauth: <IconSidebarOauth size={18} />,\n  quota: <IconSidebarQuota size={18} />,\n",
-        "  oauth: <IconSidebarOauth size={18} />,\n  quota: <IconSidebarQuota size={18} />,\n  monitoring: <IconSidebarMonitor size={18} />,\n  accountInspection: <IconSidebarAccountInspection size={18} />,\n  routing: <IconSidebarRouting size={18} />,\n  proxyPool: <IconSidebarProxyPool size={18} />,\n",
+        "  oauth: <IconSidebarOauth size={18} />,\n  quota: <IconSidebarQuota size={18} />,\n  monitoring: <IconSidebarMonitor size={18} />,\n  accountInspection: <IconSidebarAccountInspection size={18} />,\n  routing: <IconSidebarRouting size={18} />,\n  proxyPool: <IconSidebarProxyPool size={18} />,\n  oauthModelPolicy: <IconModelCluster size={18} />,\n",
     )
     insert_once(
         path,
@@ -731,6 +738,12 @@ def patch_layout(target: Path) -> None:
         "                icon: sidebarIcons.proxyPool,\n"
         "              },\n"
         "              {\n"
+        "                path: '/oauth-model-policy',\n"
+        "                labelKey: 'nav.oauth_model_policy',\n"
+        "                metaKey: 'nav_meta.oauth_model_policy',\n"
+        "                icon: sidebarIcons.oauthModelPolicy,\n"
+        "              },\n"
+        "              {\n"
         "                path: '/plugins',\n",
         "path: '/proxy-pool',",
     )
@@ -2809,6 +2822,11 @@ def patch_locales(target: Path) -> None:
             PROXY_POOL_NAV_LOCALE_KEYS['en.json'],
         )
         data.setdefault('nav', {})['proxy_pool'] = proxy_pool_nav['label']
+        oauth_model_policy_nav = OAUTH_MODEL_POLICY_NAV_LOCALE_KEYS.get(
+            locale_path.name,
+            OAUTH_MODEL_POLICY_NAV_LOCALE_KEYS['en.json'],
+        )
+        data.setdefault('nav', {})['oauth_model_policy'] = oauth_model_policy_nav['label']
         nav_additions = additions.get('nav', {})
         data.setdefault('nav_meta', {}).update(
             additions.get(
@@ -2821,6 +2839,7 @@ def patch_locales(target: Path) -> None:
             )
         )
         data.setdefault('nav_meta', {})['proxy_pool'] = proxy_pool_nav['meta']
+        data.setdefault('nav_meta', {})['oauth_model_policy'] = oauth_model_policy_nav['meta']
         data['monitoring'] = additions.get('monitoring', data.get('monitoring', {}))
         data['account_usage'] = additions.get('account_usage', data.get('account_usage', {}))
         data['usage_stats'] = additions.get('usage_stats', data.get('usage_stats', {}))
@@ -2829,6 +2848,13 @@ def patch_locales(target: Path) -> None:
             'proxy_pool',
             monitoring.get('en.json', {}).get('proxy_pool', data.get('proxy_pool', {})),
         )
+        data['oauth_model_policy'] = additions.get(
+            'oauth_model_policy',
+            monitoring.get('en.json', {}).get(
+                'oauth_model_policy',
+                data.get('oauth_model_policy', {}),
+            ),
+        )
         data.setdefault('quota_management', {}).update(QUOTA_LOCALE_KEYS.get(locale_path.name, {}))
         gemini_cli_locale = GEMINI_CLI_LOCALE_KEYS.get(locale_path.name, GEMINI_CLI_LOCALE_KEYS['en.json'])
         data.setdefault('auth_files', {})['filter_gemini-cli'] = gemini_cli_locale['auth_filter']