优化代码结构、前端逻辑、认证提示、前端添加原生axios和系统提示词收集配置的配置

config.json

@@ -31,6 +31,7 @@
     "timeout": 300000,
     "retryTimes": 3,
     "skipProjectIdFetch": false,
-    "useNativeAxios": false
+    "useNativeAxios": false,
+    "useContextSystemPrompt": false
   }
 }

public/app.js

@@ -1,1362 +0,0 @@
-let authToken = localStorage.getItem('authToken');
-let oauthPort = null;
-
-// 字体大小设置
-function initFontSize() {
-    const savedSize = localStorage.getItem('fontSize') || '18';
-    document.documentElement.style.setProperty('--font-size-base', savedSize + 'px');
-    updateFontSizeInputs(savedSize);
-}
-
-function changeFontSize(size) {
-    // 限制范围
-    size = Math.max(10, Math.min(24, parseInt(size) || 14));
-    document.documentElement.style.setProperty('--font-size-base', size + 'px');
-    localStorage.setItem('fontSize', size);
-    updateFontSizeInputs(size);
-}
-
-function updateFontSizeInputs(size) {
-    const rangeInput = document.getElementById('fontSizeRange');
-    const numberInput = document.getElementById('fontSizeInput');
-    if (rangeInput) rangeInput.value = size;
-    if (numberInput) numberInput.value = size;
-}
-
-// 页面加载时初始化字体大小
-initFontSize();
-
-// 敏感信息隐藏功能 - 默认隐藏
-// localStorage 存储的是字符串 'true' 或 'false'
-// 如果没有存储过，默认为隐藏状态
-let sensitiveInfoHidden = localStorage.getItem('sensitiveInfoHidden') !== 'false';
-
-function initSensitiveInfo() {
-    updateSensitiveInfoDisplay();
-    updateSensitiveBtn();
-}
-
-function toggleSensitiveInfo() {
-    sensitiveInfoHidden = !sensitiveInfoHidden;
-    localStorage.setItem('sensitiveInfoHidden', sensitiveInfoHidden);
-    updateSensitiveInfoDisplay();
-    updateSensitiveBtn();
-}
-
-function updateSensitiveBtn() {
-    const btn = document.getElementById('toggleSensitiveBtn');
-    if (btn) {
-        if (sensitiveInfoHidden) {
-            btn.innerHTML = '🙈 隐藏';
-            btn.title = '点击显示敏感信息';
-            btn.classList.remove('btn-info');
-            btn.classList.add('btn-secondary');
-        } else {
-            btn.innerHTML = '👁️ 显示';
-            btn.title = '点击隐藏敏感信息';
-            btn.classList.remove('btn-secondary');
-            btn.classList.add('btn-info');
-        }
-    }
-}
-
-function updateSensitiveInfoDisplay() {
-    document.querySelectorAll('.sensitive-info').forEach(el => {
-        if (sensitiveInfoHidden) {
-            el.dataset.original = el.textContent;
-            el.textContent = '••••••';
-            el.classList.add('blurred');
-        } else if (el.dataset.original) {
-            el.textContent = el.dataset.original;
-            el.classList.remove('blurred');
-        }
-    });
-}
-
-// 页面加载时初始化敏感信息状态
-initSensitiveInfo();
-const CLIENT_ID = '1071006060591-tmhssin2h21lcre235vtolojh4g403ep.apps.googleusercontent.com';
-const SCOPES = [
-    'https://www.googleapis.com/auth/cloud-platform',
-    'https://www.googleapis.com/auth/userinfo.email',
-    'https://www.googleapis.com/auth/userinfo.profile',
-    'https://www.googleapis.com/auth/cclog',
-    'https://www.googleapis.com/auth/experimentsandconfigs'
-].join(' ');
-
-// 封装fetch，自动处理401
-const authFetch = async (url, options = {}) => {
-    const response = await fetch(url, options);
-    if (response.status === 401) {
-        silentLogout();
-        showToast('登录已过期，请重新登录', 'warning');
-        throw new Error('Unauthorized');
-    }
-    return response;
-};
-
-function showToast(message, type = 'info', title = '') {
-    const icons = { success: '✅', error: '❌', warning: '⚠️', info: 'ℹ️' };
-    const titles = { success: '成功', error: '错误', warning: '警告', info: '提示' };
-    const toast = document.createElement('div');
-    toast.className = `toast ${type}`;
-    toast.innerHTML = `
-        <div class="toast-icon">${icons[type]}</div>
-        <div class="toast-content">
-            <div class="toast-title">${title || titles[type]}</div>
-            <div class="toast-message">${message}</div>
-        </div>
-    `;
-    document.body.appendChild(toast);
-    setTimeout(() => {
-        toast.style.animation = 'slideOut 0.3s ease';
-        setTimeout(() => toast.remove(), 300);
-    }, 3000);
-}
-
-function showConfirm(message, title = '确认操作') {
-    return new Promise((resolve) => {
-        const modal = document.createElement('div');
-        modal.className = 'modal';
-        modal.innerHTML = `
-            <div class="modal-content">
-                <div class="modal-title">${title}</div>
-                <div class="modal-message">${message}</div>
-                <div class="modal-actions">
-                    <button class="btn btn-secondary" onclick="this.closest('.modal').remove(); window.modalResolve(false)">取消</button>
-                    <button class="btn btn-danger" onclick="this.closest('.modal').remove(); window.modalResolve(true)">确定</button>
-                </div>
-            </div>
-        `;
-        document.body.appendChild(modal);
-        modal.onclick = (e) => { if (e.target === modal) { modal.remove(); resolve(false); } };
-        window.modalResolve = resolve;
-    });
-}
-
-function showLoading(text = '处理中...') {
-    const overlay = document.createElement('div');
-    overlay.className = 'loading-overlay';
-    overlay.id = 'loadingOverlay';
-    overlay.innerHTML = `<div class="spinner"></div><div class="loading-text">${text}</div>`;
-    document.body.appendChild(overlay);
-}
-
-function hideLoading() {
-    const overlay = document.getElementById('loadingOverlay');
-    if (overlay) overlay.remove();
-}
-
-if (authToken) {
-    showMainContent();
-    loadTokens();
-    loadConfig();
-}
-
-document.getElementById('login').addEventListener('submit', async (e) => {
-    e.preventDefault();
-    const btn = e.target.querySelector('button[type="submit"]');
-    if (btn.disabled) return;
-    
-    const username = document.getElementById('username').value;
-    const password = document.getElementById('password').value;
-    
-    btn.disabled = true;
-    btn.classList.add('loading');
-    const originalText = btn.textContent;
-    btn.textContent = '登录中';
-    
-    try {
-        const response = await fetch('/admin/login', {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify({ username, password })
-        });
-        
-        const data = await response.json();
-        if (data.success) {
-            authToken = data.token;
-            localStorage.setItem('authToken', authToken);
-            showToast('登录成功', 'success');
-            showMainContent();
-            loadTokens();
-            loadConfig();
-        } else {
-            showToast(data.message || '用户名或密码错误', 'error');
-        }
-    } catch (error) {
-        showToast('登录失败: ' + error.message, 'error');
-    } finally {
-        btn.disabled = false;
-        btn.classList.remove('loading');
-        btn.textContent = originalText;
-    }
-});
-
-function showOAuthModal() {
-    showToast('点击后请在新窗口完成授权', 'info');
-    const modal = document.createElement('div');
-    modal.className = 'modal form-modal';
-    modal.innerHTML = `
-        <div class="modal-content">
-            <div class="modal-title">🔐 OAuth授权登录</div>
-            <div class="oauth-steps">
-                <p><strong>📝 授权流程：</strong></p>
-                <p>1️⃣ 点击下方按钮打开Google授权页面</p>
-                <p>2️⃣ 完成授权后，复制浏览器地址栏的完整URL</p>
-                <p>3️⃣ 粘贴URL到下方输入框并提交</p>
-            </div>
-            <div style="display: flex; gap: 8px; margin-bottom: 12px;">
-                <button type="button" onclick="openOAuthWindow()" class="btn btn-success" style="flex: 1;">🔐 打开授权页面</button>
-                <button type="button" onclick="copyOAuthUrl()" class="btn btn-info" style="flex: 1;">📋 复制授权链接</button>
-            </div>
-            <input type="text" id="modalCallbackUrl" placeholder="粘贴完整的回调URL (http://localhost:xxxxx/oauth-callback?code=...)">
-            <div class="modal-actions">
-                <button class="btn btn-secondary" onclick="this.closest('.modal').remove()">取消</button>
-                <button class="btn btn-success" onclick="processOAuthCallbackModal()">✅ 提交</button>
-            </div>
-        </div>
-    `;
-    document.body.appendChild(modal);
-    modal.onclick = (e) => { if (e.target === modal) modal.remove(); };
-}
-
-function createTokenFormBody({
-    title,
-    showAccess = true,
-    showRefresh = true,
-    showExpires = true
-} = {}) {
-    const parts = [];
-    if (showAccess) {
-        parts.push('<input type="text" id="modalAccessToken" placeholder="Access Token (必填)">');
-    }
-    if (showRefresh) {
-        parts.push('<input type="text" id="modalRefreshToken" placeholder="Refresh Token (必填)">');
-    }
-    if (showExpires) {
-        parts.push('<input type="number" id="modalExpiresIn" placeholder="过期时间(秒)" value="3599">');
-    }
-    return `
-        <div class="modal-content">
-            <div class="modal-title">${title}</div>
-            <div class="form-row">${parts.join('')}</div>
-            <p style="font-size: 0.8rem; color: var(--text-light); margin-bottom: 12px;">💡 过期时间默认3599秒(约1小时)</p>
-            <div class="modal-actions">
-                <button class="btn btn-secondary" onclick="this.closest('.modal').remove()">取消</button>
-                <button class="btn btn-success" onclick="addTokenFromModal()">✅ 添加</button>
-            </div>
-        </div>
-    `;
-}
-
-function showManualModal() {
-    const modal = document.createElement('div');
-    modal.className = 'modal form-modal';
-    modal.innerHTML = createTokenFormBody({ title: '✏️ 手动填入Token' });
-    document.body.appendChild(modal);
-    modal.onclick = (e) => { if (e.target === modal) modal.remove(); };
-}
-
-function getOAuthUrl() {
-    if (!oauthPort) oauthPort = Math.floor(Math.random() * 10000) + 50000;
-    const redirectUri = `http://localhost:${oauthPort}/oauth-callback`;
-    return `https://accounts.google.com/o/oauth2/v2/auth?` +
-        `access_type=offline&client_id=${CLIENT_ID}&prompt=consent&` +
-        `redirect_uri=${encodeURIComponent(redirectUri)}&response_type=code&` +
-        `scope=${encodeURIComponent(SCOPES)}&state=${Date.now()}`;
-}
-
-function openOAuthWindow() {
-    window.open(getOAuthUrl(), '_blank');
-}
-
-function copyOAuthUrl() {
-    const url = getOAuthUrl();
-    navigator.clipboard.writeText(url).then(() => {
-        showToast('授权链接已复制', 'success');
-    }).catch(() => {
-        showToast('复制失败', 'error');
-    });
-}
-
-async function processOAuthCallbackModal() {
-    const modal = document.querySelector('.form-modal');
-    const callbackUrl = document.getElementById('modalCallbackUrl').value.trim();
-    if (!callbackUrl) {
-        showToast('请输入回调URL', 'warning');
-        return;
-    }
-    
-    showLoading('正在处理授权...');
-    
-    try {
-        const url = new URL(callbackUrl);
-        const code = url.searchParams.get('code');
-        const port = new URL(url.origin).port || (url.protocol === 'https:' ? 443 : 80);
-        
-        if (!code) {
-            hideLoading();
-            showToast('URL中未找到授权码', 'error');
-            return;
-        }
-        
-        const response = await authFetch('/admin/oauth/exchange', {
-            method: 'POST',
-            headers: {
-                'Content-Type': 'application/json',
-                'Authorization': `Bearer ${authToken}`
-            },
-            body: JSON.stringify({ code, port })
-        });
-        
-        const result = await response.json();
-        if (result.success) {
-            const account = result.data;
-            const addResponse = await authFetch('/admin/tokens', {
-                method: 'POST',
-                headers: {
-                    'Content-Type': 'application/json',
-                    'Authorization': `Bearer ${authToken}`
-                },
-                body: JSON.stringify(account)
-            });
-            
-            const addResult = await addResponse.json();
-            hideLoading();
-            if (addResult.success) {
-                modal.remove();
-                showToast('Token添加成功', 'success');
-                loadTokens();
-            } else {
-                showToast('添加失败: ' + addResult.message, 'error');
-            }
-        } else {
-            hideLoading();
-            showToast('交换失败: ' + result.message, 'error');
-        }
-    } catch (error) {
-        hideLoading();
-        showToast('处理失败: ' + error.message, 'error');
-    }
-}
-
-async function addTokenFromModal() {
-    const modal = document.querySelector('.form-modal');
-    const accessToken = document.getElementById('modalAccessToken').value.trim();
-    const refreshToken = document.getElementById('modalRefreshToken').value.trim();
-    const expiresIn = parseInt(document.getElementById('modalExpiresIn').value);
-    
-    if (!accessToken || !refreshToken) {
-        showToast('请填写完整的Token信息', 'warning');
-        return;
-    }
-    
-    showLoading('正在添加Token...');
-    try {
-        const response = await authFetch('/admin/tokens', {
-            method: 'POST',
-            headers: {
-                'Content-Type': 'application/json',
-                'Authorization': `Bearer ${authToken}`
-            },
-            body: JSON.stringify({ access_token: accessToken, refresh_token: refreshToken, expires_in: expiresIn })
-        });
-        
-        const data = await response.json();
-        hideLoading();
-        if (data.success) {
-            modal.remove();
-            showToast('Token添加成功', 'success');
-            loadTokens();
-        } else {
-            showToast(data.message || '添加失败', 'error');
-        }
-    } catch (error) {
-        hideLoading();
-        showToast('添加失败: ' + error.message, 'error');
-    }
-}
-
-function showMainContent() {
-    document.getElementById('loginForm').classList.add('hidden');
-    document.getElementById('mainContent').classList.remove('hidden');
-}
-
-function switchTab(tab) {
-    document.querySelectorAll('.tab').forEach(t => t.classList.remove('active'));
-    event.target.classList.add('active');
-    
-    document.getElementById('tokensPage').classList.add('hidden');
-    document.getElementById('settingsPage').classList.add('hidden');
-    
-    if (tab === 'tokens') {
-        document.getElementById('tokensPage').classList.remove('hidden');
-    } else if (tab === 'settings') {
-        document.getElementById('settingsPage').classList.remove('hidden');
-        loadConfig();
-    }
-}
-
-function silentLogout() {
-    localStorage.removeItem('authToken');
-    authToken = null;
-    document.getElementById('loginForm').classList.remove('hidden');
-    document.getElementById('mainContent').classList.add('hidden');
-}
-
-async function logout() {
-    const confirmed = await showConfirm('确定要退出登录吗？', '退出确认');
-    if (!confirmed) return;
-    
-    silentLogout();
-    showToast('已退出登录', 'info');
-}
-
-async function loadTokens() {
-    try {
-        const response = await authFetch('/admin/tokens', {
-            headers: { 'Authorization': `Bearer ${authToken}` }
-        });
-        
-        const data = await response.json();
-        if (data.success) {
-            renderTokens(data.data);
-        } else {
-            showToast('加载失败: ' + (data.message || '未知错误'), 'error');
-        }
-    } catch (error) {
-        showToast('加载Token失败: ' + error.message, 'error');
-    }
-}
-
-function renderTokens(tokens) {
-    // 缓存tokens用于额度弹窗
-    cachedTokens = tokens;
-    
-    document.getElementById('totalTokens').textContent = tokens.length;
-    document.getElementById('enabledTokens').textContent = tokens.filter(t => t.enable).length;
-    document.getElementById('disabledTokens').textContent = tokens.filter(t => !t.enable).length;
-    
-    const tokenList = document.getElementById('tokenList');
-    if (tokens.length === 0) {
-        tokenList.innerHTML = `
-            <div class="empty-state">
-                <div class="empty-state-icon">📦</div>
-                <div class="empty-state-text">暂无Token</div>
-                <div class="empty-state-hint">点击上方OAuth按钮添加Token</div>
-            </div>
-        `;
-        return;
-    }
-    
-    tokenList.innerHTML = tokens.map(token => {
-        const expireTime = new Date(token.timestamp + token.expires_in * 1000);
-        const isExpired = expireTime < new Date();
-        const expireStr = expireTime.toLocaleString('zh-CN', {month: '2-digit', day: '2-digit', hour: '2-digit', minute: '2-digit'});
-        const cardId = token.refresh_token.substring(0, 8);
-        
-        return `
-        <div class="token-card ${!token.enable ? 'disabled' : ''} ${isExpired ? 'expired' : ''}">
-            <div class="token-header">
-                <span class="status ${token.enable ? 'enabled' : 'disabled'}">
-                    ${token.enable ? '✅ 启用' : '❌ 禁用'}
-                </span>
-                <div class="token-header-right">
-                    <button class="btn-icon" onclick="showTokenDetail('${token.refresh_token}')" title="编辑全部">✏️</button>
-                    <span class="token-id">#${token.refresh_token.substring(0, 6)}</span>
-                </div>
-            </div>
-            <div class="token-info">
-                <div class="info-row">
-                    <span class="info-label">🎫</span>
-                    <span class="info-value sensitive-info" title="${token.access_token_suffix}">${token.access_token_suffix}</span>
-                </div>
-                <div class="info-row editable" onclick="editField(event, '${token.refresh_token}', 'projectId', '${(token.projectId || '').replace(/'/g, "\\'")}')" title="点击编辑">
-                    <span class="info-label">📦</span>
-                    <span class="info-value sensitive-info">${token.projectId || '点击设置'}</span>
-                    <span class="info-edit-icon">✏️</span>
-                </div>
-                <div class="info-row editable" onclick="editField(event, '${token.refresh_token}', 'email', '${(token.email || '').replace(/'/g, "\\'")}')" title="点击编辑">
-                    <span class="info-label">📧</span>
-                    <span class="info-value sensitive-info">${token.email || '点击设置'}</span>
-                    <span class="info-edit-icon">✏️</span>
-                </div>
-                <div class="info-row ${isExpired ? 'expired-text' : ''}">
-                    <span class="info-label">⏰</span>
-                    <span class="info-value">${expireStr}${isExpired ? ' (已过期)' : ''}</span>
-                </div>
-            </div>
-            <!-- 内嵌额度显示 -->
-            <div class="token-quota-inline" id="quota-inline-${cardId}">
-                <div class="quota-inline-header" onclick="toggleQuotaExpand('${cardId}', '${token.refresh_token}')">
-                    <span class="quota-inline-summary" id="quota-summary-${cardId}">📊 加载中...</span>
-                    <span class="quota-inline-toggle" id="quota-toggle-${cardId}">▼</span>
-                </div>
-                <div class="quota-inline-detail hidden" id="quota-detail-${cardId}"></div>
-            </div>
-            <div class="token-actions">
-                <button class="btn btn-info btn-xs" onclick="showQuotaModal('${token.refresh_token}')" title="查看额度">📊 详情</button>
-                <button class="btn ${token.enable ? 'btn-warning' : 'btn-success'} btn-xs" onclick="toggleToken('${token.refresh_token}', ${!token.enable})" title="${token.enable ? '禁用' : '启用'}">
-                    ${token.enable ? '⏸️ 禁用' : '▶️ 启用'}
-                </button>
-                <button class="btn btn-danger btn-xs" onclick="deleteToken('${token.refresh_token}')" title="删除">���️ 删除</button>
-            </div>
-        </div>
-    `}).join('');
-    
-    // 自动加载所有token的额度摘要
-    tokens.forEach(token => {
-        loadTokenQuotaSummary(token.refresh_token);
-    });
-    
-    // 应用敏感信息隐藏状态
-    updateSensitiveInfoDisplay();
-}
-
-// 加载token额度摘要（只显示最低额度的模型）
-async function loadTokenQuotaSummary(refreshToken) {
-    const cardId = refreshToken.substring(0, 8);
-    const summaryEl = document.getElementById(`quota-summary-${cardId}`);
-    if (!summaryEl) return;
-    
-    // 先检查缓存
-    const cached = quotaCache.get(refreshToken);
-    if (cached) {
-        renderQuotaSummary(summaryEl, cached);
-        return;
-    }
-    
-    try {
-        const response = await authFetch(`/admin/tokens/${encodeURIComponent(refreshToken)}/quotas`, {
-            headers: { 'Authorization': `Bearer ${authToken}` }
-        });
-        const data = await response.json();
-        
-        if (data.success && data.data && data.data.models) {
-            // 缓存数据
-            quotaCache.set(refreshToken, data.data);
-            renderQuotaSummary(summaryEl, data.data);
-        } else {
-            const errMsg = data.message || '未知错误';
-            summaryEl.innerHTML = `<span class="quota-summary-error">📊 ${errMsg}</span>`;
-        }
-    } catch (error) {
-        if (error.message !== 'Unauthorized') {
-            console.error('加载额度摘要失败:', error);
-            summaryEl.innerHTML = `<span class="quota-summary-error">📊 加载失败</span>`;
-        }
-    }
-}
-
-// 渲染额度摘要
-function renderQuotaSummary(summaryEl, quotaData) {
-    const models = quotaData.models;
-    const modelEntries = Object.entries(models);
-    
-    if (modelEntries.length === 0) {
-        summaryEl.textContent = '📊 暂无额度';
-        return;
-    }
-    
-    // 找到额度最低的模型
-    let minModel = modelEntries[0][0];
-    let minQuota = modelEntries[0][1];
-    modelEntries.forEach(([modelId, quota]) => {
-        if (quota.remaining < minQuota.remaining) {
-            minQuota = quota;
-            minModel = modelId;
-        }
-    });
-    
-    const percentage = minQuota.remaining * 100;
-    const percentageText = `${percentage.toFixed(2)}%`;
-    const shortName = minModel.replace('models/', '').replace('publishers/google/', '').split('/').pop();
-    const barColor = percentage > 50 ? '#10b981' : percentage > 20 ? '#f59e0b' : '#ef4444';
-    
-    // 简洁的一行显示
-    summaryEl.innerHTML = `
-        <span class="quota-summary-icon">📊</span>
-        <span class="quota-summary-model" title="${minModel}">${shortName}</span>
-        <span class="quota-summary-bar"><span style="width:${percentage}%;background:${barColor}"></span></span>
-        <span class="quota-summary-pct">${percentageText}</span>
-    `;
-}
-
-// 展开/收起额度详情
-async function toggleQuotaExpand(cardId, refreshToken) {
-    const detailEl = document.getElementById(`quota-detail-${cardId}`);
-    const toggleEl = document.getElementById(`quota-toggle-${cardId}`);
-    if (!detailEl || !toggleEl) return;
-    
-    const isHidden = detailEl.classList.contains('hidden');
-    
-    if (isHidden) {
-        // 展开
-        detailEl.classList.remove('hidden');
-        toggleEl.textContent = '▲';
-        
-        // 如果还没加载过详情，加载它
-        if (!detailEl.dataset.loaded) {
-            detailEl.innerHTML = '<div class="quota-loading-small">加载中...</div>';
-            await loadQuotaDetail(cardId, refreshToken);
-            detailEl.dataset.loaded = 'true';
-        }
-    } else {
-        // 收起
-        detailEl.classList.add('hidden');
-        toggleEl.textContent = '▼';
-    }
-}
-
-// 加载额度详情
-async function loadQuotaDetail(cardId, refreshToken) {
-    const detailEl = document.getElementById(`quota-detail-${cardId}`);
-    if (!detailEl) return;
-    
-    try {
-        const response = await authFetch(`/admin/tokens/${encodeURIComponent(refreshToken)}/quotas`, {
-            headers: { 'Authorization': `Bearer ${authToken}` }
-        });
-        const data = await response.json();
-        
-        if (data.success && data.data && data.data.models) {
-            const models = data.data.models;
-            const modelEntries = Object.entries(models);
-            
-            if (modelEntries.length === 0) {
-                detailEl.innerHTML = '<div class="quota-empty-small">暂无额度信息</div>';
-                return;
-            }
-            
-            // 按模型类型分组
-            const grouped = { claude: [], gemini: [], other: [] };
-            modelEntries.forEach(([modelId, quota]) => {
-                const item = { modelId, quota };
-                if (modelId.toLowerCase().includes('claude')) grouped.claude.push(item);
-                else if (modelId.toLowerCase().includes('gemini')) grouped.gemini.push(item);
-                else grouped.other.push(item);
-            });
-            
-            let html = '<div class="quota-detail-grid">';
-            
-            const renderGroup = (items, icon) => {
-                if (items.length === 0) return '';
-                let groupHtml = '';
-                items.forEach(({ modelId, quota }) => {
-                    const percentage = quota.remaining * 100;
-                    const percentageText = `${percentage.toFixed(2)}%`;
-                    const barColor = percentage > 50 ? '#10b981' : percentage > 20 ? '#f59e0b' : '#ef4444';
-                    const shortName = modelId.replace('models/', '').replace('publishers/google/', '').split('/').pop();
-                    // 紧凑的一行显示
-                    groupHtml += `
-                        <div class="quota-detail-row" title="${modelId} - 重置: ${quota.resetTime}">
-                            <span class="quota-detail-icon">${icon}</span>
-                            <span class="quota-detail-name">${shortName}</span>
-                            <span class="quota-detail-bar"><span style="width:${percentage}%;background:${barColor}"></span></span>
-                            <span class="quota-detail-pct">${percentageText}</span>
-                        </div>
-                    `;
-                });
-                return groupHtml;
-            };
-            
-            html += renderGroup(grouped.claude, '🤖');
-            html += renderGroup(grouped.gemini, '💎');
-            html += renderGroup(grouped.other, '🔧');
-            html += '</div>';
-            
-            // 添加刷新按钮
-            html += `<button class="btn btn-info btn-xs quota-refresh-btn" onclick="refreshInlineQuota('${cardId}', '${refreshToken}')">🔄 刷新额度</button>`;
-            
-            detailEl.innerHTML = html;
-        } else {
-            const errMsg = data.message || '未知错误';
-            detailEl.innerHTML = `<div class="quota-error-small">加载失败: ${errMsg}</div>`;
-        }
-    } catch (error) {
-        if (error.message !== 'Unauthorized') {
-            detailEl.innerHTML = `<div class="quota-error-small">网络错误</div>`;
-        }
-    }
-}
-
-// 刷新内嵌额度
-async function refreshInlineQuota(cardId, refreshToken) {
-    const detailEl = document.getElementById(`quota-detail-${cardId}`);
-    const summaryEl = document.getElementById(`quota-summary-${cardId}`);
-    
-    if (detailEl) {
-        detailEl.innerHTML = '<div class="quota-loading-small">刷新中...</div>';
-    }
-    if (summaryEl) {
-        summaryEl.textContent = '📊 刷新中...';
-    }
-    
-    // 清除缓存
-    quotaCache.clear(refreshToken);
-    
-    // 强制刷新
-    try {
-        const response = await authFetch(`/admin/tokens/${encodeURIComponent(refreshToken)}/quotas?refresh=true`, {
-            headers: { 'Authorization': `Bearer ${authToken}` }
-        });
-        const data = await response.json();
-        if (data.success && data.data) {
-            quotaCache.set(refreshToken, data.data);
-        }
-    } catch (e) {}
-    
-    // 重新加载摘要和详情
-    await loadTokenQuotaSummary(refreshToken);
-    await loadQuotaDetail(cardId, refreshToken);
-}
-
-// 内联编辑字段
-function editField(event, refreshToken, field, currentValue) {
-    event.stopPropagation();
-    const row = event.currentTarget;
-    const valueSpan = row.querySelector('.info-value');
-    
-    // 如果已经在编辑状态，不重复创建
-    if (row.querySelector('input')) return;
-    
-    const fieldLabels = {
-        projectId: 'Project ID',
-        email: '邮箱'
-    };
-    
-    // 创建输入框
-    const input = document.createElement('input');
-    input.type = field === 'email' ? 'email' : 'text';
-    input.value = currentValue;
-    input.className = 'inline-edit-input';
-    input.placeholder = `输入${fieldLabels[field]}`;
-    
-    // 保存原始内容
-    const originalContent = valueSpan.textContent;
-    valueSpan.style.display = 'none';
-    row.insertBefore(input, valueSpan.nextSibling);
-    input.focus();
-    input.select();
-    
-    // 保存函数
-    const save = async () => {
-        const newValue = input.value.trim();
-        input.disabled = true;
-        
-        try {
-            const response = await authFetch(`/admin/tokens/${encodeURIComponent(refreshToken)}`, {
-                method: 'PUT',
-                headers: {
-                    'Content-Type': 'application/json',
-                    'Authorization': `Bearer ${authToken}`
-                },
-                body: JSON.stringify({ [field]: newValue })
-            });
-            
-            const data = await response.json();
-            if (data.success) {
-                showToast('已保存', 'success');
-                loadTokens();
-            } else {
-                showToast(data.message || '保存失败', 'error');
-                cancel();
-            }
-        } catch (error) {
-            showToast('保存失败', 'error');
-            cancel();
-        }
-    };
-    
-    // 取消函数
-    const cancel = () => {
-        input.remove();
-        valueSpan.style.display = '';
-    };
-    
-    // 事件监听
-    input.addEventListener('blur', () => {
-        setTimeout(() => {
-            if (document.activeElement !== input) {
-                if (input.value.trim() !== currentValue) {
-                    save();
-                } else {
-                    cancel();
-                }
-            }
-        }, 100);
-    });
-    
-    input.addEventListener('keydown', (e) => {
-        if (e.key === 'Enter') {
-            e.preventDefault();
-            save();
-        } else if (e.key === 'Escape') {
-            cancel();
-        }
-    });
-}
-
-// 显示Token详情编辑弹窗
-function showTokenDetail(refreshToken) {
-    const token = cachedTokens.find(t => t.refresh_token === refreshToken);
-    if (!token) {
-        showToast('Token不存在', 'error');
-        return;
-    }
-    
-    const modal = document.createElement('div');
-    modal.className = 'modal form-modal';
-    modal.innerHTML = `
-        <div class="modal-content">
-            <div class="modal-title">📝 Token详情</div>
-            <div class="form-group compact">
-                <label>🎫 Access Token (只读)</label>
-                <div class="token-display">${token.access_token || ''}</div>
-            </div>
-            <div class="form-group compact">
-                <label>🔄 Refresh Token (只读)</label>
-                <div class="token-display">${token.refresh_token}</div>
-            </div>
-            <div class="form-group compact">
-                <label>📦 Project ID</label>
-                <input type="text" id="editProjectId" value="${token.projectId || ''}" placeholder="项目ID">
-            </div>
-            <div class="form-group compact">
-                <label>📧 邮箱</label>
-                <input type="email" id="editEmail" value="${token.email || ''}" placeholder="账号邮箱">
-            </div>
-            <div class="form-group compact">
-                <label>⏰ 过期时间</label>
-                <input type="text" value="${new Date(token.timestamp + token.expires_in * 1000).toLocaleString('zh-CN')}" readonly style="background: var(--bg); cursor: not-allowed;">
-            </div>
-            <div class="modal-actions">
-                <button class="btn btn-secondary" onclick="this.closest('.modal').remove()">取消</button>
-                <button class="btn btn-success" onclick="saveTokenDetail('${refreshToken}')">💾 保存</button>
-            </div>
-        </div>
-    `;
-    document.body.appendChild(modal);
-    modal.onclick = (e) => { if (e.target === modal) modal.remove(); };
-}
-
-// 保存Token详情
-async function saveTokenDetail(refreshToken) {
-    const projectId = document.getElementById('editProjectId').value.trim();
-    const email = document.getElementById('editEmail').value.trim();
-    
-    showLoading('保存中...');
-    try {
-        const response = await authFetch(`/admin/tokens/${encodeURIComponent(refreshToken)}`, {
-            method: 'PUT',
-            headers: {
-                'Content-Type': 'application/json',
-                'Authorization': `Bearer ${authToken}`
-            },
-            body: JSON.stringify({ projectId, email })
-        });
-        
-        const data = await response.json();
-        hideLoading();
-        if (data.success) {
-            document.querySelector('.form-modal').remove();
-            showToast('保存成功', 'success');
-            loadTokens();
-        } else {
-            showToast(data.message || '保存失败', 'error');
-        }
-    } catch (error) {
-        hideLoading();
-        showToast('保存失败: ' + error.message, 'error');
-    }
-}
-
-async function toggleToken(refreshToken, enable) {
-    const action = enable ? '启用' : '禁用';
-    const confirmed = await showConfirm(`确定要${action}这个Token吗？`, `${action}确认`);
-    if (!confirmed) return;
-    
-    showLoading(`正在${action}...`);
-    try {
-        const response = await authFetch(`/admin/tokens/${encodeURIComponent(refreshToken)}`, {
-            method: 'PUT',
-            headers: {
-                'Content-Type': 'application/json',
-                'Authorization': `Bearer ${authToken}`
-            },
-            body: JSON.stringify({ enable })
-        });
-        
-        const data = await response.json();
-        hideLoading();
-        if (data.success) {
-            showToast(`已${action}`, 'success');
-            loadTokens();
-        } else {
-            showToast(data.message || '操作失败', 'error');
-        }
-    } catch (error) {
-        hideLoading();
-        showToast('操作失败: ' + error.message, 'error');
-    }
-}
-
-async function deleteToken(refreshToken) {
-    const confirmed = await showConfirm('删除后无法恢复，确定删除？', '⚠️ 删除确认');
-    if (!confirmed) return;
-    
-    showLoading('正在删除...');
-    try {
-        const response = await authFetch(`/admin/tokens/${encodeURIComponent(refreshToken)}`, {
-            method: 'DELETE',
-            headers: { 'Authorization': `Bearer ${authToken}` }
-        });
-        
-        const data = await response.json();
-        hideLoading();
-        if (data.success) {
-            showToast('已删除', 'success');
-            loadTokens();
-        } else {
-            showToast(data.message || '删除失败', 'error');
-        }
-    } catch (error) {
-        hideLoading();
-        showToast('删除失败: ' + error.message, 'error');
-    }
-}
-
-// 存储token数据用于额度弹窗显示邮箱
-let cachedTokens = [];
-// 当前选中的token（用于额度弹窗）
-let currentQuotaToken = null;
-
-// 额度数据缓存 - 避免频繁请求
-const quotaCache = {
-    data: {},  // { refreshToken: { data, timestamp } }
-    ttl: 5 * 60 * 1000,  // 缓存5分钟
-    
-    get(refreshToken) {
-        const cached = this.data[refreshToken];
-        if (!cached) return null;
-        if (Date.now() - cached.timestamp > this.ttl) {
-            delete this.data[refreshToken];
-            return null;
-        }
-        return cached.data;
-    },
-    
-    set(refreshToken, data) {
-        this.data[refreshToken] = {
-            data,
-            timestamp: Date.now()
-        };
-    },
-    
-    clear(refreshToken) {
-        if (refreshToken) {
-            delete this.data[refreshToken];
-        } else {
-            this.data = {};
-        }
-    }
-};
-
-async function showQuotaModal(refreshToken) {
-    currentQuotaToken = refreshToken;
-    
-    // 找到当前token的索引
-    const activeIndex = cachedTokens.findIndex(t => t.refresh_token === refreshToken);
-    
-    // 生成邮箱标签 - 使用索引来确保只有一个active
-    const emailTabs = cachedTokens.map((t, index) => {
-        const email = t.email || '未知';
-        const shortEmail = email.length > 20 ? email.substring(0, 17) + '...' : email;
-        const isActive = index === activeIndex;
-        return `<button type="button" class="quota-tab${isActive ? ' active' : ''}" data-index="${index}" onclick="switchQuotaAccountByIndex(${index})" title="${email}">${shortEmail}</button>`;
-    }).join('');
-    
-    const modal = document.createElement('div');
-    modal.className = 'modal';
-    modal.id = 'quotaModal';
-    modal.innerHTML = `
-        <div class="modal-content modal-xl">
-            <div class="quota-modal-header">
-                <div class="modal-title">📊 模型额度</div>
-                <div class="quota-update-time" id="quotaUpdateTime"></div>
-            </div>
-            <div class="quota-tabs" id="quotaEmailList">
-                ${emailTabs}
-            </div>
-            <div id="quotaContent" class="quota-container">
-                <div class="quota-loading">加载中...</div>
-            </div>
-            <div class="modal-actions">
-                <button class="btn btn-info btn-sm" id="quotaRefreshBtn" onclick="refreshQuotaData()">🔄 刷新</button>
-                <button class="btn btn-secondary btn-sm" onclick="this.closest('.modal').remove()">关闭</button>
-            </div>
-        </div>
-    `;
-    document.body.appendChild(modal);
-    modal.onclick = (e) => { if (e.target === modal) modal.remove(); };
-    
-    await loadQuotaData(refreshToken);
-    
-    // 添加鼠标滚轮横向滚动支持
-    const tabsContainer = document.getElementById('quotaEmailList');
-    if (tabsContainer) {
-        tabsContainer.addEventListener('wheel', (e) => {
-            if (e.deltaY !== 0) {
-                e.preventDefault();
-                tabsContainer.scrollLeft += e.deltaY;
-            }
-        }, { passive: false });
-    }
-}
-
-// 切换账号（通过索引）
-async function switchQuotaAccountByIndex(index) {
-    if (index < 0 || index >= cachedTokens.length) return;
-    
-    const token = cachedTokens[index];
-    currentQuotaToken = token.refresh_token;
-    
-    // 更新标签的激活状态
-    document.querySelectorAll('.quota-tab').forEach((tab, i) => {
-        if (i === index) {
-            tab.classList.add('active');
-        } else {
-            tab.classList.remove('active');
-        }
-    });
-    
-    // 加载新账号的额度
-    await loadQuotaData(token.refresh_token);
-}
-
-// 保留旧函数以兼容
-async function switchQuotaAccount(refreshToken) {
-    const index = cachedTokens.findIndex(t => t.refresh_token === refreshToken);
-    if (index >= 0) {
-        await switchQuotaAccountByIndex(index);
-    }
-}
-
-async function loadQuotaData(refreshToken, forceRefresh = false) {
-    const quotaContent = document.getElementById('quotaContent');
-    if (!quotaContent) return;
-    
-    const refreshBtn = document.getElementById('quotaRefreshBtn');
-    if (refreshBtn) {
-        refreshBtn.disabled = true;
-        refreshBtn.textContent = '⏳ 加载中...';
-    }
-    
-    // 如果不是强制刷新，先检查缓存
-    if (!forceRefresh) {
-        const cached = quotaCache.get(refreshToken);
-        if (cached) {
-            renderQuotaModal(quotaContent, cached);
-            if (refreshBtn) {
-                refreshBtn.disabled = false;
-                refreshBtn.textContent = '🔄 刷新';
-            }
-            return;
-        }
-    } else {
-        // 强制刷新时清除缓存
-        quotaCache.clear(refreshToken);
-    }
-    
-    quotaContent.innerHTML = '<div class="quota-loading">加载中...</div>';
-    
-    try {
-        const url = `/admin/tokens/${encodeURIComponent(refreshToken)}/quotas${forceRefresh ? '?refresh=true' : ''}`;
-        const response = await fetch(url, {
-            headers: { 'Authorization': `Bearer ${authToken}` }
-        });
-        
-        const data = await response.json();
-        
-        if (data.success) {
-            // 缓存数据
-            quotaCache.set(refreshToken, data.data);
-            renderQuotaModal(quotaContent, data.data);
-        } else {
-            quotaContent.innerHTML = `<div class="quota-error">加载失败: ${data.message}</div>`;
-        }
-    } catch (error) {
-        if (quotaContent) {
-            quotaContent.innerHTML = `<div class="quota-error">加载失败: ${error.message}</div>`;
-        }
-    } finally {
-        if (refreshBtn) {
-            refreshBtn.disabled = false;
-            refreshBtn.textContent = '🔄 刷新';
-        }
-    }
-}
-
-async function refreshQuotaData() {
-    if (currentQuotaToken) {
-        await loadQuotaData(currentQuotaToken, true);
-    }
-}
-
-// 渲染额度弹窗内容
-function renderQuotaModal(quotaContent, quotaData) {
-    const models = quotaData.models;
-    
-    // 更新时间显示
-    const updateTimeEl = document.getElementById('quotaUpdateTime');
-    if (updateTimeEl && quotaData.lastUpdated) {
-        const lastUpdated = new Date(quotaData.lastUpdated).toLocaleString('zh-CN', {
-            month: '2-digit', day: '2-digit', hour: '2-digit', minute: '2-digit'
-        });
-        updateTimeEl.textContent = `更新于 ${lastUpdated}`;
-    }
-    
-    if (Object.keys(models).length === 0) {
-        quotaContent.innerHTML = '<div class="quota-empty">暂无额度信息</div>';
-        return;
-    }
-    
-    // 按模型类型分组
-    const grouped = { claude: [], gemini: [], other: [] };
-    Object.entries(models).forEach(([modelId, quota]) => {
-        const item = { modelId, quota };
-        if (modelId.toLowerCase().includes('claude')) grouped.claude.push(item);
-        else if (modelId.toLowerCase().includes('gemini')) grouped.gemini.push(item);
-        else grouped.other.push(item);
-    });
-    
-    let html = '';
-    
-    const renderGroup = (items, title) => {
-        if (items.length === 0) return '';
-        let groupHtml = `<div class="quota-group-title">${title}</div><div class="quota-grid">`;
-        items.forEach(({ modelId, quota }) => {
-            const percentage = quota.remaining * 100;
-            const percentageText = `${percentage.toFixed(2)}%`;
-            const barColor = percentage > 50 ? '#10b981' : percentage > 20 ? '#f59e0b' : '#ef4444';
-            const shortName = modelId.replace('models/', '').replace('publishers/google/', '');
-            groupHtml += `
-                <div class="quota-item">
-                    <div class="quota-model-name" title="${modelId}">${shortName}</div>
-                    <div class="quota-bar-container">
-                        <div class="quota-bar" style="width: ${percentage}%; background: ${barColor};"></div>
-                    </div>
-                    <div class="quota-info-row">
-                        <span class="quota-reset">重置: ${quota.resetTime}</span>
-                        <span class="quota-percentage">${percentageText}</span>
-                    </div>
-                </div>
-            `;
-        });
-        groupHtml += '</div>';
-        return groupHtml;
-    };
-    
-    html += renderGroup(grouped.claude, '🤖 Claude');
-    html += renderGroup(grouped.gemini, '💎 Gemini');
-    html += renderGroup(grouped.other, '🔧 其他');
-    
-    quotaContent.innerHTML = html;
-}
-
-// 切换请求次数输入框的显示
-function toggleRequestCountInput() {
-    const strategy = document.getElementById('rotationStrategy').value;
-    const requestCountGroup = document.getElementById('requestCountGroup');
-    if (requestCountGroup) {
-        requestCountGroup.style.display = strategy === 'request_count' ? 'block' : 'none';
-    }
-}
-
-// 加载轮询策略状态
-async function loadRotationStatus() {
-    try {
-        const response = await authFetch('/admin/rotation', {
-            headers: { 'Authorization': `Bearer ${authToken}` }
-        });
-        const data = await response.json();
-        if (data.success) {
-            const { strategy, requestCount, currentIndex, tokenCounts } = data.data;
-            const strategyNames = {
-                'round_robin': '均衡负载',
-                'quota_exhausted': '额度耗尽切换',
-                'request_count': '自定义次数'
-            };
-            const statusEl = document.getElementById('currentRotationInfo');
-            if (statusEl) {
-                let statusText = `${strategyNames[strategy] || strategy}`;
-                if (strategy === 'request_count') {
-                    statusText += ` (每${requestCount}次)`;
-                }
-                statusText += ` | 当前索引: ${currentIndex}`;
-                statusEl.textContent = statusText;
-            }
-        }
-    } catch (error) {
-        console.error('加载轮询状态失败:', error);
-    }
-}
-
-async function loadConfig() {
-    try {
-        const response = await authFetch('/admin/config', {
-            headers: { 'Authorization': `Bearer ${authToken}` }
-        });
-        const data = await response.json();
-        if (data.success) {
-            const form = document.getElementById('configForm');
-            const { env, json } = data.data;
-            
-            // 更新服务器信息显示
-            const serverInfo = document.getElementById('serverInfo');
-            if (serverInfo && json.server) {
-                serverInfo.textContent = `${json.server.host || '0.0.0.0'}:${json.server.port || 8045}`;
-            }
-            
-            // 加载 .env 配置
-            Object.entries(env).forEach(([key, value]) => {
-                const input = form.elements[key];
-                if (input) input.value = value || '';
-            });
-            
-            // 加载 config.json 配置
-            if (json.server) {
-                if (form.elements['PORT']) form.elements['PORT'].value = json.server.port || '';
-                if (form.elements['HOST']) form.elements['HOST'].value = json.server.host || '';
-                if (form.elements['MAX_REQUEST_SIZE']) form.elements['MAX_REQUEST_SIZE'].value = json.server.maxRequestSize || '';
-                if (form.elements['HEARTBEAT_INTERVAL']) form.elements['HEARTBEAT_INTERVAL'].value = json.server.heartbeatInterval || '';
-                if (form.elements['MEMORY_THRESHOLD']) form.elements['MEMORY_THRESHOLD'].value = json.server.memoryThreshold || '';
-            }
-            if (json.defaults) {
-                if (form.elements['DEFAULT_TEMPERATURE']) form.elements['DEFAULT_TEMPERATURE'].value = json.defaults.temperature ?? '';
-                if (form.elements['DEFAULT_TOP_P']) form.elements['DEFAULT_TOP_P'].value = json.defaults.topP ?? '';
-                if (form.elements['DEFAULT_TOP_K']) form.elements['DEFAULT_TOP_K'].value = json.defaults.topK ?? '';
-                if (form.elements['DEFAULT_MAX_TOKENS']) form.elements['DEFAULT_MAX_TOKENS'].value = json.defaults.maxTokens ?? '';
-                if (form.elements['DEFAULT_THINKING_BUDGET']) form.elements['DEFAULT_THINKING_BUDGET'].value = json.defaults.thinkingBudget ?? '';
-            }
-            if (json.other) {
-                if (form.elements['TIMEOUT']) form.elements['TIMEOUT'].value = json.other.timeout ?? '';
-                if (form.elements['RETRY_TIMES']) form.elements['RETRY_TIMES'].value = json.other.retryTimes ?? '';
-                if (form.elements['SKIP_PROJECT_ID_FETCH']) form.elements['SKIP_PROJECT_ID_FETCH'].value = json.other.skipProjectIdFetch ? 'true' : 'false';
-            }
-            // 加载轮询策略配置
-            if (json.rotation) {
-                if (form.elements['ROTATION_STRATEGY']) {
-                    form.elements['ROTATION_STRATEGY'].value = json.rotation.strategy || 'round_robin';
-                }
-                if (form.elements['ROTATION_REQUEST_COUNT']) {
-                    form.elements['ROTATION_REQUEST_COUNT'].value = json.rotation.requestCount || 10;
-                }
-                toggleRequestCountInput();
-            }
-            
-            // 加载轮询状态
-            loadRotationStatus();
-        }
-    } catch (error) {
-        showToast('加载配置失败: ' + error.message, 'error');
-    }
-}
-
-document.getElementById('configForm').addEventListener('submit', async (e) => {
-    e.preventDefault();
-    const formData = new FormData(e.target);
-    const allConfig = Object.fromEntries(formData);
-    
-    // 分离敏感和非敏感配置
-    const sensitiveKeys = ['API_KEY', 'ADMIN_USERNAME', 'ADMIN_PASSWORD', 'JWT_SECRET', 'PROXY', 'SYSTEM_INSTRUCTION', 'IMAGE_BASE_URL'];
-    const envConfig = {};
-    const jsonConfig = {
-        server: {},
-        api: {},
-        defaults: {},
-        other: {},
-        rotation: {}
-    };
-    
-    Object.entries(allConfig).forEach(([key, value]) => {
-        if (sensitiveKeys.includes(key)) {
-            envConfig[key] = value;
-        } else {
-            // 映射到 config.json 结构
-            if (key === 'PORT') jsonConfig.server.port = parseInt(value) || undefined;
-            else if (key === 'HOST') jsonConfig.server.host = value || undefined;
-            else if (key === 'MAX_REQUEST_SIZE') jsonConfig.server.maxRequestSize = value || undefined;
-            else if (key === 'HEARTBEAT_INTERVAL') jsonConfig.server.heartbeatInterval = parseInt(value) || undefined;
-            else if (key === 'MEMORY_THRESHOLD') jsonConfig.server.memoryThreshold = parseInt(value) || undefined;
-            else if (key === 'DEFAULT_TEMPERATURE') jsonConfig.defaults.temperature = parseFloat(value) || undefined;
-            else if (key === 'DEFAULT_TOP_P') jsonConfig.defaults.topP = parseFloat(value) || undefined;
-            else if (key === 'DEFAULT_TOP_K') jsonConfig.defaults.topK = parseInt(value) || undefined;
-            else if (key === 'DEFAULT_MAX_TOKENS') jsonConfig.defaults.maxTokens = parseInt(value) || undefined;
-            else if (key === 'DEFAULT_THINKING_BUDGET') {
-                const num = parseInt(value);
-                jsonConfig.defaults.thinkingBudget = Number.isNaN(num) ? undefined : num;
-            }
-            else if (key === 'TIMEOUT') jsonConfig.other.timeout = parseInt(value) || undefined;
-            else if (key === 'RETRY_TIMES') {
-                const num = parseInt(value);
-                jsonConfig.other.retryTimes = Number.isNaN(num) ? undefined : num;
-            }
-            else if (key === 'SKIP_PROJECT_ID_FETCH') jsonConfig.other.skipProjectIdFetch = value === 'true';
-            else if (key === 'ROTATION_STRATEGY') jsonConfig.rotation.strategy = value || undefined;
-            else if (key === 'ROTATION_REQUEST_COUNT') jsonConfig.rotation.requestCount = parseInt(value) || undefined;
-            else envConfig[key] = value;
-        }
-    });
-    
-    // 清理undefined值
-    Object.keys(jsonConfig).forEach(section => {
-        Object.keys(jsonConfig[section]).forEach(key => {
-            if (jsonConfig[section][key] === undefined) {
-                delete jsonConfig[section][key];
-            }
-        });
-        if (Object.keys(jsonConfig[section]).length === 0) {
-            delete jsonConfig[section];
-        }
-    });
-    
-    showLoading('正在保存配置...');
-    try {
-        // 先保存通用配置
-        const response = await authFetch('/admin/config', {
-            method: 'PUT',
-            headers: {
-                'Content-Type': 'application/json',
-                'Authorization': `Bearer ${authToken}`
-            },
-            body: JSON.stringify({ env: envConfig, json: jsonConfig })
-        });
-        
-        const data = await response.json();
-        
-        // 如果有轮询配置，单独更新轮询策略（触发热更新）
-        if (jsonConfig.rotation && Object.keys(jsonConfig.rotation).length > 0) {
-            await authFetch('/admin/rotation', {
-                method: 'PUT',
-                headers: {
-                    'Content-Type': 'application/json',
-                    'Authorization': `Bearer ${authToken}`
-                },
-                body: JSON.stringify(jsonConfig.rotation)
-            });
-        }
-        
-        hideLoading();
-        if (data.success) {
-            showToast('配置已保存', 'success');
-            loadConfig(); // 重新加载以更新显示
-        } else {
-            showToast(data.message || '保存失败', 'error');
-        }
-    } catch (error) {
-        hideLoading();
-        showToast('保存失败: ' + error.message, 'error');
-    }
-});

public/index.html

@@ -138,7 +138,7 @@
                                     </div>
                                 </div>
                                 <div class="form-group compact highlight">
-                                    <label>思考预算 <span class="help-tip" title="思考模型的思考token预算，影响推理深度">?</span></label>
+                                    <label>思考预算 <span class="help-tip" data-tooltip="思考模型的思考token预算，影响推理深度">?</span></label>
                                     <input type="number" name="DEFAULT_THINKING_BUDGET" placeholder="16000">
                                 </div>
                                 <div class="form-group compact">
@@ -152,7 +152,7 @@
                                 <h4>🔄 轮询与性能</h4>
                                 <div class="form-row-inline">
                                     <div class="form-group compact">
-                                        <label>策略模式 <span class="help-tip" title="均衡负载：每次请求切换Token&#10;额度耗尽：用完额度才切换&#10;自定义次数：指定次数后切换">?</span></label>
+                                        <label>策略模式 <span class="help-tip" data-tooltip="均衡负载：每次请求切换Token&#10;额度耗尽：用完额度才切换&#10;自定义次数：指定次数后切换">?</span></label>
                                         <select name="ROTATION_STRATEGY" id="rotationStrategy" onchange="toggleRequestCountInput()">
                                             <option value="round_robin">均衡负载</option>
                                             <option value="quota_exhausted">额度耗尽切换</option>
@@ -160,7 +160,7 @@
                                         </select>
                                     </div>
                                     <div class="form-group compact" id="requestCountGroup">
-                                        <label>每Token请求次数 <span class="help-tip" title="自定义次数模式下，每个Token处理多少次请求后切换">?</span></label>
+                                        <label>每Token请求次数 <span class="help-tip" data-tooltip="自定义次数模式下，每个Token处理多少次请求后切换">?</span></label>
                                         <input type="number" name="ROTATION_REQUEST_COUNT" min="1" placeholder="10">
                                     </div>
                                 </div>
@@ -187,11 +187,27 @@
                                 </div>
                                 <div class="form-row-inline">
                                     <div class="form-group compact">
-                                        <label>心跳间隔(ms) <span class="help-tip" title="SSE心跳间隔，防止CF超时断连">?</span></label>
+                                        <label>原生Axios <span class="help-tip" data-tooltip="使用原生axios而非TLS指纹请求器">?</span></label>
+                                        <select name="USE_NATIVE_AXIOS">
+                                            <option value="true">是</option>
+                                            <option value="false">否</option>
+                                        </select>
+                                    </div>
+                                    <div class="form-group compact">
+                                        <label>上下文System <span class="help-tip" data-tooltip="合并开头连续的system消息到SystemInstruction">?</span></label>
+                                        <select name="USE_CONTEXT_SYSTEM_PROMPT">
+                                            <option value="false">否</option>
+                                            <option value="true">是</option>
+                                        </select>
+                                    </div>
+                                </div>
+                                <div class="form-row-inline">
+                                    <div class="form-group compact">
+                                        <label>心跳间隔(ms) <span class="help-tip" data-tooltip="SSE心跳间隔，防止CF超时断连">?</span></label>
                                         <input type="number" name="HEARTBEAT_INTERVAL" placeholder="15000">
                                     </div>
                                     <div class="form-group compact">
-                                        <label>内存阈值(MB) <span class="help-tip" title="超过此值触发GC清理">?</span></label>
+                                        <label>内存阈值(MB) <span class="help-tip" data-tooltip="超过此值触发GC清理">?</span></label>
                                         <input type="number" name="MEMORY_THRESHOLD" placeholder="100">
                                     </div>
                                 </div>
@@ -214,6 +230,13 @@
         </div>
     </div>
 
-    <script src="app.js"></script>
+    <!-- 按依赖顺序加载模块 -->
+    <script src="js/utils.js"></script>
+    <script src="js/ui.js"></script>
+    <script src="js/auth.js"></script>
+    <script src="js/quota.js"></script>
+    <script src="js/tokens.js"></script>
+    <script src="js/config.js"></script>
+    <script src="js/main.js"></script>
 </body>
 </html>

public/js/README.md

@@ -0,0 +1,96 @@
+# 前端模块说明
+
+原 `app.js` (1300+ 行) 已拆分为以下模块：
+
+## 模块结构
+
+```
+js/
+├── utils.js    - 工具函数（字体大小、敏感信息隐藏）
+├── ui.js       - UI组件（Toast、Modal、Loading、Tab切换）
+├── auth.js     - 认证相关（登录、登出、OAuth授权）
+├── tokens.js   - Token管理（增删改查、启用禁用、内联编辑）
+├── quota.js    - 额度管理（查看、刷新、缓存、内嵌显示）
+├── config.js   - 配置管理（加载、保存、轮询策略）
+└── main.js     - 主入口（初始化、事件绑定）
+```
+
+## 加载顺序
+
+模块按依赖关系加载（在 `index.html` 中）：
+
+1. **utils.js** - 基础工具函数
+2. **ui.js** - UI组件（依赖 utils）
+3. **auth.js** - 认证模块（依赖 ui）
+4. **quota.js** - 额度模块（依赖 auth）
+5. **tokens.js** - Token模块（依赖 auth、quota、ui）
+6. **config.js** - 配置模块（依赖 auth、ui）
+7. **main.js** - 主入口（依赖所有模块）
+
+## 模块职责
+
+### utils.js
+- 字体大小设置和持久化
+- 敏感信息显示/隐藏切换
+- localStorage 管理
+
+### ui.js
+- Toast 提示框
+- Confirm 确认框
+- Loading 加载遮罩
+- Tab 页面切换
+
+### auth.js
+- 用户登录/登出
+- OAuth 授权流程
+- authFetch 封装（自动处理401）
+- Token 认证状态管理
+
+### tokens.js
+- Token 列表加载和渲染
+- Token 增删改查操作
+- 内联字段编辑（projectId、email）
+- Token 详情弹窗
+
+### quota.js
+- 额度数据缓存（5分钟TTL）
+- 内嵌额度摘要显示
+- 额度详情展开/收起
+- 额度弹窗（多账号切换）
+- 强制刷新额度
+
+### config.js
+- 配置加载（.env + config.json）
+- 配置保存（分离敏感/非敏感）
+- 轮询策略管理
+- 轮询状态显示
+
+### main.js
+- 页面初始化
+- 登录表单事件绑定
+- 配置表单事件绑定
+- 自动登录检测
+
+## 全局变量
+
+跨模块共享的全局变量：
+
+- `authToken` - 认证令牌（auth.js）
+- `cachedTokens` - Token列表缓存（tokens.js）
+- `currentQuotaToken` - 当前查看的额度Token（quota.js）
+- `quotaCache` - 额度数据缓存对象（quota.js）
+- `sensitiveInfoHidden` - 敏感信息隐藏状态（utils.js）
+
+## 优势
+
+1. **可维护性** - 每个模块职责单一，易于定位和修改
+2. **可读性** - 文件大小合理（200-400行），代码结构清晰
+3. **可扩展性** - 新增功能只需修改对应模块
+4. **可测试性** - 模块独立，便于单元测试
+5. **协作友好** - 多人开发时减少冲突
+
+## 注意事项
+
+1. 模块间通过全局变量和函数通信
+2. 保持加载顺序，避免依赖问题
+3. 修改时注意跨模块调用的函数

public/js/auth.js

@@ -0,0 +1,158 @@
+// 认证相关：登录、登出、OAuth
+
+let authToken = localStorage.getItem('authToken');
+let oauthPort = null;
+
+const CLIENT_ID = '1071006060591-tmhssin2h21lcre235vtolojh4g403ep.apps.googleusercontent.com';
+const SCOPES = [
+    'https://www.googleapis.com/auth/cloud-platform',
+    'https://www.googleapis.com/auth/userinfo.email',
+    'https://www.googleapis.com/auth/userinfo.profile',
+    'https://www.googleapis.com/auth/cclog',
+    'https://www.googleapis.com/auth/experimentsandconfigs'
+].join(' ');
+
+// 封装fetch，自动处理401
+const authFetch = async (url, options = {}) => {
+    const response = await fetch(url, options);
+    if (response.status === 401) {
+        silentLogout();
+        showToast('登录已过期，请重新登录', 'warning');
+        throw new Error('Unauthorized');
+    }
+    return response;
+};
+
+function showMainContent() {
+    document.getElementById('loginForm').classList.add('hidden');
+    document.getElementById('mainContent').classList.remove('hidden');
+}
+
+function silentLogout() {
+    localStorage.removeItem('authToken');
+    authToken = null;
+    document.getElementById('loginForm').classList.remove('hidden');
+    document.getElementById('mainContent').classList.add('hidden');
+}
+
+async function logout() {
+    const confirmed = await showConfirm('确定要退出登录吗？', '退出确认');
+    if (!confirmed) return;
+    
+    silentLogout();
+    showToast('已退出登录', 'info');
+}
+
+function getOAuthUrl() {
+    if (!oauthPort) oauthPort = Math.floor(Math.random() * 10000) + 50000;
+    const redirectUri = `http://localhost:${oauthPort}/oauth-callback`;
+    return `https://accounts.google.com/o/oauth2/v2/auth?` +
+        `access_type=offline&client_id=${CLIENT_ID}&prompt=consent&` +
+        `redirect_uri=${encodeURIComponent(redirectUri)}&response_type=code&` +
+        `scope=${encodeURIComponent(SCOPES)}&state=${Date.now()}`;
+}
+
+function openOAuthWindow() {
+    window.open(getOAuthUrl(), '_blank');
+}
+
+function copyOAuthUrl() {
+    const url = getOAuthUrl();
+    navigator.clipboard.writeText(url).then(() => {
+        showToast('授权链接已复制', 'success');
+    }).catch(() => {
+        showToast('复制失败', 'error');
+    });
+}
+
+function showOAuthModal() {
+    showToast('点击后请在新窗口完成授权', 'info');
+    const modal = document.createElement('div');
+    modal.className = 'modal form-modal';
+    modal.innerHTML = `
+        <div class="modal-content">
+            <div class="modal-title">🔐 OAuth授权登录</div>
+            <div class="oauth-steps">
+                <p><strong>📝 授权流程：</strong></p>
+                <p>1️⃣ 点击下方按钮打开Google授权页面</p>
+                <p>2️⃣ 完成授权后，复制浏览器地址栏的完整URL</p>
+                <p>3️⃣ 粘贴URL到下方输入框并提交</p>
+            </div>
+            <div style="display: flex; gap: 8px; margin-bottom: 12px;">
+                <button type="button" onclick="openOAuthWindow()" class="btn btn-success" style="flex: 1;">🔐 打开授权页面</button>
+                <button type="button" onclick="copyOAuthUrl()" class="btn btn-info" style="flex: 1;">📋 复制授权链接</button>
+            </div>
+            <input type="text" id="modalCallbackUrl" placeholder="粘贴完整的回调URL (http://localhost:xxxxx/oauth-callback?code=...)">
+            <div class="modal-actions">
+                <button class="btn btn-secondary" onclick="this.closest('.modal').remove()">取消</button>
+                <button class="btn btn-success" onclick="processOAuthCallbackModal()">✅ 提交</button>
+            </div>
+        </div>
+    `;
+    document.body.appendChild(modal);
+    modal.onclick = (e) => { if (e.target === modal) modal.remove(); };
+}
+
+async function processOAuthCallbackModal() {
+    const modal = document.querySelector('.form-modal');
+    const callbackUrl = document.getElementById('modalCallbackUrl').value.trim();
+    if (!callbackUrl) {
+        showToast('请输入回调URL', 'warning');
+        return;
+    }
+    
+    showLoading('正在处理授权...');
+    
+    try {
+        const url = new URL(callbackUrl);
+        const code = url.searchParams.get('code');
+        const port = new URL(url.origin).port || (url.protocol === 'https:' ? 443 : 80);
+        
+        if (!code) {
+            hideLoading();
+            showToast('URL中未找到授权码', 'error');
+            return;
+        }
+        
+        const response = await authFetch('/admin/oauth/exchange', {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                'Authorization': `Bearer ${authToken}`
+            },
+            body: JSON.stringify({ code, port })
+        });
+        
+        const result = await response.json();
+        if (result.success) {
+            const account = result.data;
+            const addResponse = await authFetch('/admin/tokens', {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                    'Authorization': `Bearer ${authToken}`
+                },
+                body: JSON.stringify(account)
+            });
+            
+            const addResult = await addResponse.json();
+            hideLoading();
+            if (addResult.success) {
+                modal.remove();
+                const message = result.fallbackMode 
+                    ? 'Token添加成功（该账号无资格，已自动使用随机ProjectId）' 
+                    : 'Token添加成功';
+                showToast(message, result.fallbackMode ? 'warning' : 'success');
+                loadTokens();
+            } else {
+                showToast('添加失败: ' + addResult.message, 'error');
+            }
+        } else {
+            hideLoading();
+            showToast('交换失败: ' + result.message, 'error');
+        }
+    } catch (error) {
+        hideLoading();
+        showToast('处理失败: ' + error.message, 'error');
+    }
+}

public/js/config.js

@@ -0,0 +1,189 @@
+// 配置管理：加载、保存
+
+function toggleRequestCountInput() {
+    const strategy = document.getElementById('rotationStrategy').value;
+    const requestCountGroup = document.getElementById('requestCountGroup');
+    if (requestCountGroup) {
+        requestCountGroup.style.display = strategy === 'request_count' ? 'block' : 'none';
+    }
+}
+
+async function loadRotationStatus() {
+    try {
+        const response = await authFetch('/admin/rotation', {
+            headers: { 'Authorization': `Bearer ${authToken}` }
+        });
+        const data = await response.json();
+        if (data.success) {
+            const { strategy, requestCount, currentIndex } = data.data;
+            const strategyNames = {
+                'round_robin': '均衡负载',
+                'quota_exhausted': '额度耗尽切换',
+                'request_count': '自定义次数'
+            };
+            const statusEl = document.getElementById('currentRotationInfo');
+            if (statusEl) {
+                let statusText = `${strategyNames[strategy] || strategy}`;
+                if (strategy === 'request_count') {
+                    statusText += ` (每${requestCount}次)`;
+                }
+                statusText += ` | 当前索引: ${currentIndex}`;
+                statusEl.textContent = statusText;
+            }
+        }
+    } catch (error) {
+        console.error('加载轮询状态失败:', error);
+    }
+}
+
+async function loadConfig() {
+    try {
+        const response = await authFetch('/admin/config', {
+            headers: { 'Authorization': `Bearer ${authToken}` }
+        });
+        const data = await response.json();
+        if (data.success) {
+            const form = document.getElementById('configForm');
+            const { env, json } = data.data;
+            
+            const serverInfo = document.getElementById('serverInfo');
+            if (serverInfo && json.server) {
+                serverInfo.textContent = `${json.server.host || '0.0.0.0'}:${json.server.port || 8045}`;
+            }
+            
+            Object.entries(env).forEach(([key, value]) => {
+                const input = form.elements[key];
+                if (input) input.value = value || '';
+            });
+            
+            if (json.server) {
+                if (form.elements['PORT']) form.elements['PORT'].value = json.server.port || '';
+                if (form.elements['HOST']) form.elements['HOST'].value = json.server.host || '';
+                if (form.elements['MAX_REQUEST_SIZE']) form.elements['MAX_REQUEST_SIZE'].value = json.server.maxRequestSize || '';
+                if (form.elements['HEARTBEAT_INTERVAL']) form.elements['HEARTBEAT_INTERVAL'].value = json.server.heartbeatInterval || '';
+                if (form.elements['MEMORY_THRESHOLD']) form.elements['MEMORY_THRESHOLD'].value = json.server.memoryThreshold || '';
+            }
+            if (json.defaults) {
+                if (form.elements['DEFAULT_TEMPERATURE']) form.elements['DEFAULT_TEMPERATURE'].value = json.defaults.temperature ?? '';
+                if (form.elements['DEFAULT_TOP_P']) form.elements['DEFAULT_TOP_P'].value = json.defaults.topP ?? '';
+                if (form.elements['DEFAULT_TOP_K']) form.elements['DEFAULT_TOP_K'].value = json.defaults.topK ?? '';
+                if (form.elements['DEFAULT_MAX_TOKENS']) form.elements['DEFAULT_MAX_TOKENS'].value = json.defaults.maxTokens ?? '';
+                if (form.elements['DEFAULT_THINKING_BUDGET']) form.elements['DEFAULT_THINKING_BUDGET'].value = json.defaults.thinkingBudget ?? '';
+            }
+            if (json.other) {
+                if (form.elements['TIMEOUT']) form.elements['TIMEOUT'].value = json.other.timeout ?? '';
+                if (form.elements['RETRY_TIMES']) form.elements['RETRY_TIMES'].value = json.other.retryTimes ?? '';
+                if (form.elements['SKIP_PROJECT_ID_FETCH']) form.elements['SKIP_PROJECT_ID_FETCH'].value = json.other.skipProjectIdFetch ? 'true' : 'false';
+                if (form.elements['USE_NATIVE_AXIOS']) form.elements['USE_NATIVE_AXIOS'].value = json.other.useNativeAxios === false ? 'false' : 'true';
+                if (form.elements['USE_CONTEXT_SYSTEM_PROMPT']) form.elements['USE_CONTEXT_SYSTEM_PROMPT'].value = json.other.useContextSystemPrompt ? 'true' : 'false';
+            }
+            if (json.rotation) {
+                if (form.elements['ROTATION_STRATEGY']) {
+                    form.elements['ROTATION_STRATEGY'].value = json.rotation.strategy || 'round_robin';
+                }
+                if (form.elements['ROTATION_REQUEST_COUNT']) {
+                    form.elements['ROTATION_REQUEST_COUNT'].value = json.rotation.requestCount || 10;
+                }
+                toggleRequestCountInput();
+            }
+            
+            loadRotationStatus();
+        }
+    } catch (error) {
+        showToast('加载配置失败: ' + error.message, 'error');
+    }
+}
+
+async function saveConfig(e) {
+    e.preventDefault();
+    const formData = new FormData(e.target);
+    const allConfig = Object.fromEntries(formData);
+    
+    const sensitiveKeys = ['API_KEY', 'ADMIN_USERNAME', 'ADMIN_PASSWORD', 'JWT_SECRET', 'PROXY', 'SYSTEM_INSTRUCTION', 'IMAGE_BASE_URL'];
+    const envConfig = {};
+    const jsonConfig = {
+        server: {},
+        api: {},
+        defaults: {},
+        other: {},
+        rotation: {}
+    };
+    
+    Object.entries(allConfig).forEach(([key, value]) => {
+        if (sensitiveKeys.includes(key)) {
+            envConfig[key] = value;
+        } else {
+            if (key === 'PORT') jsonConfig.server.port = parseInt(value) || undefined;
+            else if (key === 'HOST') jsonConfig.server.host = value || undefined;
+            else if (key === 'MAX_REQUEST_SIZE') jsonConfig.server.maxRequestSize = value || undefined;
+            else if (key === 'HEARTBEAT_INTERVAL') jsonConfig.server.heartbeatInterval = parseInt(value) || undefined;
+            else if (key === 'MEMORY_THRESHOLD') jsonConfig.server.memoryThreshold = parseInt(value) || undefined;
+            else if (key === 'DEFAULT_TEMPERATURE') jsonConfig.defaults.temperature = parseFloat(value) || undefined;
+            else if (key === 'DEFAULT_TOP_P') jsonConfig.defaults.topP = parseFloat(value) || undefined;
+            else if (key === 'DEFAULT_TOP_K') jsonConfig.defaults.topK = parseInt(value) || undefined;
+            else if (key === 'DEFAULT_MAX_TOKENS') jsonConfig.defaults.maxTokens = parseInt(value) || undefined;
+            else if (key === 'DEFAULT_THINKING_BUDGET') {
+                const num = parseInt(value);
+                jsonConfig.defaults.thinkingBudget = Number.isNaN(num) ? undefined : num;
+            }
+            else if (key === 'TIMEOUT') jsonConfig.other.timeout = parseInt(value) || undefined;
+            else if (key === 'RETRY_TIMES') {
+                const num = parseInt(value);
+                jsonConfig.other.retryTimes = Number.isNaN(num) ? undefined : num;
+            }
+            else if (key === 'SKIP_PROJECT_ID_FETCH') jsonConfig.other.skipProjectIdFetch = value === 'true';
+            else if (key === 'USE_NATIVE_AXIOS') jsonConfig.other.useNativeAxios = value !== 'false';
+            else if (key === 'USE_CONTEXT_SYSTEM_PROMPT') jsonConfig.other.useContextSystemPrompt = value === 'true';
+            else if (key === 'ROTATION_STRATEGY') jsonConfig.rotation.strategy = value || undefined;
+            else if (key === 'ROTATION_REQUEST_COUNT') jsonConfig.rotation.requestCount = parseInt(value) || undefined;
+            else envConfig[key] = value;
+        }
+    });
+    
+    Object.keys(jsonConfig).forEach(section => {
+        Object.keys(jsonConfig[section]).forEach(key => {
+            if (jsonConfig[section][key] === undefined) {
+                delete jsonConfig[section][key];
+            }
+        });
+        if (Object.keys(jsonConfig[section]).length === 0) {
+            delete jsonConfig[section];
+        }
+    });
+    
+    showLoading('正在保存配置...');
+    try {
+        const response = await authFetch('/admin/config', {
+            method: 'PUT',
+            headers: {
+                'Content-Type': 'application/json',
+                'Authorization': `Bearer ${authToken}`
+            },
+            body: JSON.stringify({ env: envConfig, json: jsonConfig })
+        });
+        
+        const data = await response.json();
+        
+        if (jsonConfig.rotation && Object.keys(jsonConfig.rotation).length > 0) {
+            await authFetch('/admin/rotation', {
+                method: 'PUT',
+                headers: {
+                    'Content-Type': 'application/json',
+                    'Authorization': `Bearer ${authToken}`
+                },
+                body: JSON.stringify(jsonConfig.rotation)
+            });
+        }
+        
+        hideLoading();
+        if (data.success) {
+            showToast('配置已保存', 'success');
+            loadConfig();
+        } else {
+            showToast(data.message || '保存失败', 'error');
+        }
+    } catch (error) {
+        hideLoading();
+        showToast('保存失败: ' + error.message, 'error');
+    }
+}

public/js/main.js

@@ -0,0 +1,56 @@
+// 主入口：初始化和事件绑定
+
+// 页面加载时初始化
+initFontSize();
+initSensitiveInfo();
+
+// 如果已登录，显示主内容
+if (authToken) {
+    showMainContent();
+    loadTokens();
+    loadConfig();
+}
+
+// 登录表单提交
+document.getElementById('login').addEventListener('submit', async (e) => {
+    e.preventDefault();
+    const btn = e.target.querySelector('button[type="submit"]');
+    if (btn.disabled) return;
+    
+    const username = document.getElementById('username').value;
+    const password = document.getElementById('password').value;
+    
+    btn.disabled = true;
+    btn.classList.add('loading');
+    const originalText = btn.textContent;
+    btn.textContent = '登录中';
+    
+    try {
+        const response = await fetch('/admin/login', {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ username, password })
+        });
+        
+        const data = await response.json();
+        if (data.success) {
+            authToken = data.token;
+            localStorage.setItem('authToken', authToken);
+            showToast('登录成功', 'success');
+            showMainContent();
+            loadTokens();
+            loadConfig();
+        } else {
+            showToast(data.message || '用户名或密码错误', 'error');
+        }
+    } catch (error) {
+        showToast('登录失败: ' + error.message, 'error');
+    } finally {
+        btn.disabled = false;
+        btn.classList.remove('loading');
+        btn.textContent = originalText;
+    }
+});
+
+// 配置表单提交
+document.getElementById('configForm').addEventListener('submit', saveConfig);

public/js/quota.js

@@ -0,0 +1,394 @@
+// 额度管理：查看、刷新、缓存
+
+let currentQuotaToken = null;
+
+const quotaCache = {
+    data: {},
+    ttl: 5 * 60 * 1000,
+    
+    get(refreshToken) {
+        const cached = this.data[refreshToken];
+        if (!cached) return null;
+        if (Date.now() - cached.timestamp > this.ttl) {
+            delete this.data[refreshToken];
+            return null;
+        }
+        return cached.data;
+    },
+    
+    set(refreshToken, data) {
+        this.data[refreshToken] = { data, timestamp: Date.now() };
+    },
+    
+    clear(refreshToken) {
+        if (refreshToken) {
+            delete this.data[refreshToken];
+        } else {
+            this.data = {};
+        }
+    }
+};
+
+async function loadTokenQuotaSummary(refreshToken) {
+    const cardId = refreshToken.substring(0, 8);
+    const summaryEl = document.getElementById(`quota-summary-${cardId}`);
+    if (!summaryEl) return;
+    
+    const cached = quotaCache.get(refreshToken);
+    if (cached) {
+        renderQuotaSummary(summaryEl, cached);
+        return;
+    }
+    
+    try {
+        const response = await authFetch(`/admin/tokens/${encodeURIComponent(refreshToken)}/quotas`, {
+            headers: { 'Authorization': `Bearer ${authToken}` }
+        });
+        const data = await response.json();
+        
+        if (data.success && data.data && data.data.models) {
+            quotaCache.set(refreshToken, data.data);
+            renderQuotaSummary(summaryEl, data.data);
+        } else {
+            const errMsg = data.message || '未知错误';
+            summaryEl.innerHTML = `<span class="quota-summary-error">📊 ${errMsg}</span>`;
+        }
+    } catch (error) {
+        if (error.message !== 'Unauthorized') {
+            console.error('加载额度摘要失败:', error);
+            summaryEl.innerHTML = `<span class="quota-summary-error">📊 加载失败</span>`;
+        }
+    }
+}
+
+function renderQuotaSummary(summaryEl, quotaData) {
+    const models = quotaData.models;
+    const modelEntries = Object.entries(models);
+    
+    if (modelEntries.length === 0) {
+        summaryEl.textContent = '📊 暂无额度';
+        return;
+    }
+    
+    let minModel = modelEntries[0][0];
+    let minQuota = modelEntries[0][1];
+    modelEntries.forEach(([modelId, quota]) => {
+        if (quota.remaining < minQuota.remaining) {
+            minQuota = quota;
+            minModel = modelId;
+        }
+    });
+    
+    const percentage = minQuota.remaining * 100;
+    const percentageText = `${percentage.toFixed(2)}%`;
+    const shortName = minModel.replace('models/', '').replace('publishers/google/', '').split('/').pop();
+    const barColor = percentage > 50 ? '#10b981' : percentage > 20 ? '#f59e0b' : '#ef4444';
+    
+    summaryEl.innerHTML = `
+        <span class="quota-summary-icon">📊</span>
+        <span class="quota-summary-model" title="${minModel}">${shortName}</span>
+        <span class="quota-summary-bar"><span style="width:${percentage}%;background:${barColor}"></span></span>
+        <span class="quota-summary-pct">${percentageText}</span>
+    `;
+}
+
+async function toggleQuotaExpand(cardId, refreshToken) {
+    const detailEl = document.getElementById(`quota-detail-${cardId}`);
+    const toggleEl = document.getElementById(`quota-toggle-${cardId}`);
+    if (!detailEl || !toggleEl) return;
+    
+    const isHidden = detailEl.classList.contains('hidden');
+    
+    if (isHidden) {
+        detailEl.classList.remove('hidden');
+        toggleEl.textContent = '▲';
+        
+        if (!detailEl.dataset.loaded) {
+            detailEl.innerHTML = '<div class="quota-loading-small">加载中...</div>';
+            await loadQuotaDetail(cardId, refreshToken);
+            detailEl.dataset.loaded = 'true';
+        }
+    } else {
+        detailEl.classList.add('hidden');
+        toggleEl.textContent = '▼';
+    }
+}
+
+async function loadQuotaDetail(cardId, refreshToken) {
+    const detailEl = document.getElementById(`quota-detail-${cardId}`);
+    if (!detailEl) return;
+    
+    try {
+        const response = await authFetch(`/admin/tokens/${encodeURIComponent(refreshToken)}/quotas`, {
+            headers: { 'Authorization': `Bearer ${authToken}` }
+        });
+        const data = await response.json();
+        
+        if (data.success && data.data && data.data.models) {
+            const models = data.data.models;
+            const modelEntries = Object.entries(models);
+            
+            if (modelEntries.length === 0) {
+                detailEl.innerHTML = '<div class="quota-empty-small">暂无额度信息</div>';
+                return;
+            }
+            
+            const grouped = { claude: [], gemini: [], other: [] };
+            modelEntries.forEach(([modelId, quota]) => {
+                const item = { modelId, quota };
+                if (modelId.toLowerCase().includes('claude')) grouped.claude.push(item);
+                else if (modelId.toLowerCase().includes('gemini')) grouped.gemini.push(item);
+                else grouped.other.push(item);
+            });
+            
+            let html = '<div class="quota-detail-grid">';
+            
+            const renderGroup = (items, icon) => {
+                if (items.length === 0) return '';
+                let groupHtml = '';
+                items.forEach(({ modelId, quota }) => {
+                    const percentage = quota.remaining * 100;
+                    const percentageText = `${percentage.toFixed(2)}%`;
+                    const barColor = percentage > 50 ? '#10b981' : percentage > 20 ? '#f59e0b' : '#ef4444';
+                    const shortName = modelId.replace('models/', '').replace('publishers/google/', '').split('/').pop();
+                    groupHtml += `
+                        <div class="quota-detail-row" title="${modelId} - 重置: ${quota.resetTime}">
+                            <span class="quota-detail-icon">${icon}</span>
+                            <span class="quota-detail-name">${shortName}</span>
+                            <span class="quota-detail-bar"><span style="width:${percentage}%;background:${barColor}"></span></span>
+                            <span class="quota-detail-pct">${percentageText}</span>
+                        </div>
+                    `;
+                });
+                return groupHtml;
+            };
+            
+            html += renderGroup(grouped.claude, '🤖');
+            html += renderGroup(grouped.gemini, '💎');
+            html += renderGroup(grouped.other, '🔧');
+            html += '</div>';
+            html += `<button class="btn btn-info btn-xs quota-refresh-btn" onclick="refreshInlineQuota('${cardId}', '${refreshToken}')">🔄 刷新额度</button>`;
+            
+            detailEl.innerHTML = html;
+        } else {
+            const errMsg = data.message || '未知错误';
+            detailEl.innerHTML = `<div class="quota-error-small">加载失败: ${errMsg}</div>`;
+        }
+    } catch (error) {
+        if (error.message !== 'Unauthorized') {
+            detailEl.innerHTML = `<div class="quota-error-small">网络错误</div>`;
+        }
+    }
+}
+
+async function refreshInlineQuota(cardId, refreshToken) {
+    const detailEl = document.getElementById(`quota-detail-${cardId}`);
+    const summaryEl = document.getElementById(`quota-summary-${cardId}`);
+    
+    if (detailEl) detailEl.innerHTML = '<div class="quota-loading-small">刷新中...</div>';
+    if (summaryEl) summaryEl.textContent = '📊 刷新中...';
+    
+    quotaCache.clear(refreshToken);
+    
+    try {
+        const response = await authFetch(`/admin/tokens/${encodeURIComponent(refreshToken)}/quotas?refresh=true`, {
+            headers: { 'Authorization': `Bearer ${authToken}` }
+        });
+        const data = await response.json();
+        if (data.success && data.data) {
+            quotaCache.set(refreshToken, data.data);
+        }
+    } catch (e) {}
+    
+    await loadTokenQuotaSummary(refreshToken);
+    await loadQuotaDetail(cardId, refreshToken);
+}
+
+async function showQuotaModal(refreshToken) {
+    currentQuotaToken = refreshToken;
+    
+    const activeIndex = cachedTokens.findIndex(t => t.refresh_token === refreshToken);
+    
+    const emailTabs = cachedTokens.map((t, index) => {
+        const email = t.email || '未知';
+        const shortEmail = email.length > 20 ? email.substring(0, 17) + '...' : email;
+        const isActive = index === activeIndex;
+        return `<button type="button" class="quota-tab${isActive ? ' active' : ''}" data-index="${index}" onclick="switchQuotaAccountByIndex(${index})" title="${email}">${shortEmail}</button>`;
+    }).join('');
+    
+    const modal = document.createElement('div');
+    modal.className = 'modal';
+    modal.id = 'quotaModal';
+    modal.innerHTML = `
+        <div class="modal-content modal-xl">
+            <div class="quota-modal-header">
+                <div class="modal-title">📊 模型额度</div>
+                <div class="quota-update-time" id="quotaUpdateTime"></div>
+            </div>
+            <div class="quota-tabs" id="quotaEmailList">
+                ${emailTabs}
+            </div>
+            <div id="quotaContent" class="quota-container">
+                <div class="quota-loading">加载中...</div>
+            </div>
+            <div class="modal-actions">
+                <button class="btn btn-info btn-sm" id="quotaRefreshBtn" onclick="refreshQuotaData()">🔄 刷新</button>
+                <button class="btn btn-secondary btn-sm" onclick="this.closest('.modal').remove()">关闭</button>
+            </div>
+        </div>
+    `;
+    document.body.appendChild(modal);
+    modal.onclick = (e) => { if (e.target === modal) modal.remove(); };
+    
+    await loadQuotaData(refreshToken);
+    
+    const tabsContainer = document.getElementById('quotaEmailList');
+    if (tabsContainer) {
+        tabsContainer.addEventListener('wheel', (e) => {
+            if (e.deltaY !== 0) {
+                e.preventDefault();
+                tabsContainer.scrollLeft += e.deltaY;
+            }
+        }, { passive: false });
+    }
+}
+
+async function switchQuotaAccountByIndex(index) {
+    if (index < 0 || index >= cachedTokens.length) return;
+    
+    const token = cachedTokens[index];
+    currentQuotaToken = token.refresh_token;
+    
+    document.querySelectorAll('.quota-tab').forEach((tab, i) => {
+        if (i === index) {
+            tab.classList.add('active');
+        } else {
+            tab.classList.remove('active');
+        }
+    });
+    
+    await loadQuotaData(token.refresh_token);
+}
+
+async function switchQuotaAccount(refreshToken) {
+    const index = cachedTokens.findIndex(t => t.refresh_token === refreshToken);
+    if (index >= 0) {
+        await switchQuotaAccountByIndex(index);
+    }
+}
+
+async function loadQuotaData(refreshToken, forceRefresh = false) {
+    const quotaContent = document.getElementById('quotaContent');
+    if (!quotaContent) return;
+    
+    const refreshBtn = document.getElementById('quotaRefreshBtn');
+    if (refreshBtn) {
+        refreshBtn.disabled = true;
+        refreshBtn.textContent = '⏳ 加载中...';
+    }
+    
+    if (!forceRefresh) {
+        const cached = quotaCache.get(refreshToken);
+        if (cached) {
+            renderQuotaModal(quotaContent, cached);
+            if (refreshBtn) {
+                refreshBtn.disabled = false;
+                refreshBtn.textContent = '🔄 刷新';
+            }
+            return;
+        }
+    } else {
+        quotaCache.clear(refreshToken);
+    }
+    
+    quotaContent.innerHTML = '<div class="quota-loading">加载中...</div>';
+    
+    try {
+        const url = `/admin/tokens/${encodeURIComponent(refreshToken)}/quotas${forceRefresh ? '?refresh=true' : ''}`;
+        const response = await fetch(url, {
+            headers: { 'Authorization': `Bearer ${authToken}` }
+        });
+        
+        const data = await response.json();
+        
+        if (data.success) {
+            quotaCache.set(refreshToken, data.data);
+            renderQuotaModal(quotaContent, data.data);
+        } else {
+            quotaContent.innerHTML = `<div class="quota-error">加载失败: ${data.message}</div>`;
+        }
+    } catch (error) {
+        if (quotaContent) {
+            quotaContent.innerHTML = `<div class="quota-error">加载失败: ${error.message}</div>`;
+        }
+    } finally {
+        if (refreshBtn) {
+            refreshBtn.disabled = false;
+            refreshBtn.textContent = '🔄 刷新';
+        }
+    }
+}
+
+async function refreshQuotaData() {
+    if (currentQuotaToken) {
+        await loadQuotaData(currentQuotaToken, true);
+    }
+}
+
+function renderQuotaModal(quotaContent, quotaData) {
+    const models = quotaData.models;
+    
+    const updateTimeEl = document.getElementById('quotaUpdateTime');
+    if (updateTimeEl && quotaData.lastUpdated) {
+        const lastUpdated = new Date(quotaData.lastUpdated).toLocaleString('zh-CN', {
+            month: '2-digit', day: '2-digit', hour: '2-digit', minute: '2-digit'
+        });
+        updateTimeEl.textContent = `更新于 ${lastUpdated}`;
+    }
+    
+    if (Object.keys(models).length === 0) {
+        quotaContent.innerHTML = '<div class="quota-empty">暂无额度信息</div>';
+        return;
+    }
+    
+    const grouped = { claude: [], gemini: [], other: [] };
+    Object.entries(models).forEach(([modelId, quota]) => {
+        const item = { modelId, quota };
+        if (modelId.toLowerCase().includes('claude')) grouped.claude.push(item);
+        else if (modelId.toLowerCase().includes('gemini')) grouped.gemini.push(item);
+        else grouped.other.push(item);
+    });
+    
+    let html = '';
+    
+    const renderGroup = (items, title) => {
+        if (items.length === 0) return '';
+        let groupHtml = `<div class="quota-group-title">${title}</div><div class="quota-grid">`;
+        items.forEach(({ modelId, quota }) => {
+            const percentage = quota.remaining * 100;
+            const percentageText = `${percentage.toFixed(2)}%`;
+            const barColor = percentage > 50 ? '#10b981' : percentage > 20 ? '#f59e0b' : '#ef4444';
+            const shortName = modelId.replace('models/', '').replace('publishers/google/', '');
+            groupHtml += `
+                <div class="quota-item">
+                    <div class="quota-model-name" title="${modelId}">${shortName}</div>
+                    <div class="quota-bar-container">
+                        <div class="quota-bar" style="width: ${percentage}%; background: ${barColor};"></div>
+                    </div>
+                    <div class="quota-info-row">
+                        <span class="quota-reset">重置: ${quota.resetTime}</span>
+                        <span class="quota-percentage">${percentageText}</span>
+                    </div>
+                </div>
+            `;
+        });
+        groupHtml += '</div>';
+        return groupHtml;
+    };
+    
+    html += renderGroup(grouped.claude, '🤖 Claude');
+    html += renderGroup(grouped.gemini, '💎 Gemini');
+    html += renderGroup(grouped.other, '🔧 其他');
+    
+    quotaContent.innerHTML = html;
+}

public/js/tokens.js

@@ -0,0 +1,361 @@
+// Token管理：增删改查、启用禁用
+
+let cachedTokens = [];
+
+async function loadTokens() {
+    try {
+        const response = await authFetch('/admin/tokens', {
+            headers: { 'Authorization': `Bearer ${authToken}` }
+        });
+        
+        const data = await response.json();
+        if (data.success) {
+            renderTokens(data.data);
+        } else {
+            showToast('加载失败: ' + (data.message || '未知错误'), 'error');
+        }
+    } catch (error) {
+        showToast('加载Token失败: ' + error.message, 'error');
+    }
+}
+
+function renderTokens(tokens) {
+    cachedTokens = tokens;
+    
+    document.getElementById('totalTokens').textContent = tokens.length;
+    document.getElementById('enabledTokens').textContent = tokens.filter(t => t.enable).length;
+    document.getElementById('disabledTokens').textContent = tokens.filter(t => !t.enable).length;
+    
+    const tokenList = document.getElementById('tokenList');
+    if (tokens.length === 0) {
+        tokenList.innerHTML = `
+            <div class="empty-state">
+                <div class="empty-state-icon">📦</div>
+                <div class="empty-state-text">暂无Token</div>
+                <div class="empty-state-hint">点击上方OAuth按钮添加Token</div>
+            </div>
+        `;
+        return;
+    }
+    
+    tokenList.innerHTML = tokens.map(token => {
+        const expireTime = new Date(token.timestamp + token.expires_in * 1000);
+        const isExpired = expireTime < new Date();
+        const expireStr = expireTime.toLocaleString('zh-CN', {month: '2-digit', day: '2-digit', hour: '2-digit', minute: '2-digit'});
+        const cardId = token.refresh_token.substring(0, 8);
+        
+        return `
+        <div class="token-card ${!token.enable ? 'disabled' : ''} ${isExpired ? 'expired' : ''}">
+            <div class="token-header">
+                <span class="status ${token.enable ? 'enabled' : 'disabled'}">
+                    ${token.enable ? '✅ 启用' : '❌ 禁用'}
+                </span>
+                <div class="token-header-right">
+                    <button class="btn-icon" onclick="showTokenDetail('${token.refresh_token}')" title="编辑全部">✏️</button>
+                    <span class="token-id">#${token.refresh_token.substring(0, 6)}</span>
+                </div>
+            </div>
+            <div class="token-info">
+                <div class="info-row">
+                    <span class="info-label">🎫</span>
+                    <span class="info-value sensitive-info" title="${token.access_token_suffix}">${token.access_token_suffix}</span>
+                </div>
+                <div class="info-row editable" onclick="editField(event, '${token.refresh_token}', 'projectId', '${(token.projectId || '').replace(/'/g, "\\'")}')" title="点击编辑">
+                    <span class="info-label">📦</span>
+                    <span class="info-value sensitive-info">${token.projectId || '点击设置'}</span>
+                    <span class="info-edit-icon">✏️</span>
+                </div>
+                <div class="info-row editable" onclick="editField(event, '${token.refresh_token}', 'email', '${(token.email || '').replace(/'/g, "\\'")}')" title="点击编辑">
+                    <span class="info-label">📧</span>
+                    <span class="info-value sensitive-info">${token.email || '点击设置'}</span>
+                    <span class="info-edit-icon">✏️</span>
+                </div>
+                <div class="info-row ${isExpired ? 'expired-text' : ''}">
+                    <span class="info-label">⏰</span>
+                    <span class="info-value">${expireStr}${isExpired ? ' (已过期)' : ''}</span>
+                </div>
+            </div>
+            <div class="token-quota-inline" id="quota-inline-${cardId}">
+                <div class="quota-inline-header" onclick="toggleQuotaExpand('${cardId}', '${token.refresh_token}')">
+                    <span class="quota-inline-summary" id="quota-summary-${cardId}">📊 加载中...</span>
+                    <span class="quota-inline-toggle" id="quota-toggle-${cardId}">▼</span>
+                </div>
+                <div class="quota-inline-detail hidden" id="quota-detail-${cardId}"></div>
+            </div>
+            <div class="token-actions">
+                <button class="btn btn-info btn-xs" onclick="showQuotaModal('${token.refresh_token}')" title="查看额度">📊 详情</button>
+                <button class="btn ${token.enable ? 'btn-warning' : 'btn-success'} btn-xs" onclick="toggleToken('${token.refresh_token}', ${!token.enable})" title="${token.enable ? '禁用' : '启用'}">
+                    ${token.enable ? '⏸️ 禁用' : '▶️ 启用'}
+                </button>
+                <button class="btn btn-danger btn-xs" onclick="deleteToken('${token.refresh_token}')" title="删除">🗑️ 删除</button>
+            </div>
+        </div>
+    `}).join('');
+    
+    tokens.forEach(token => {
+        loadTokenQuotaSummary(token.refresh_token);
+    });
+    
+    updateSensitiveInfoDisplay();
+}
+
+function showManualModal() {
+    const modal = document.createElement('div');
+    modal.className = 'modal form-modal';
+    modal.innerHTML = `
+        <div class="modal-content">
+            <div class="modal-title">✏️ 手动填入Token</div>
+            <div class="form-row">
+                <input type="text" id="modalAccessToken" placeholder="Access Token (必填)">
+                <input type="text" id="modalRefreshToken" placeholder="Refresh Token (必填)">
+                <input type="number" id="modalExpiresIn" placeholder="过期时间(秒)" value="3599">
+            </div>
+            <p style="font-size: 0.8rem; color: var(--text-light); margin-bottom: 12px;">💡 过期时间默认3599秒(约1小时)</p>
+            <div class="modal-actions">
+                <button class="btn btn-secondary" onclick="this.closest('.modal').remove()">取消</button>
+                <button class="btn btn-success" onclick="addTokenFromModal()">✅ 添加</button>
+            </div>
+        </div>
+    `;
+    document.body.appendChild(modal);
+    modal.onclick = (e) => { if (e.target === modal) modal.remove(); };
+}
+
+async function addTokenFromModal() {
+    const modal = document.querySelector('.form-modal');
+    const accessToken = document.getElementById('modalAccessToken').value.trim();
+    const refreshToken = document.getElementById('modalRefreshToken').value.trim();
+    const expiresIn = parseInt(document.getElementById('modalExpiresIn').value);
+    
+    if (!accessToken || !refreshToken) {
+        showToast('请填写完整的Token信息', 'warning');
+        return;
+    }
+    
+    showLoading('正在添加Token...');
+    try {
+        const response = await authFetch('/admin/tokens', {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                'Authorization': `Bearer ${authToken}`
+            },
+            body: JSON.stringify({ access_token: accessToken, refresh_token: refreshToken, expires_in: expiresIn })
+        });
+        
+        const data = await response.json();
+        hideLoading();
+        if (data.success) {
+            modal.remove();
+            showToast('Token添加成功', 'success');
+            loadTokens();
+        } else {
+            showToast(data.message || '添加失败', 'error');
+        }
+    } catch (error) {
+        hideLoading();
+        showToast('添加失败: ' + error.message, 'error');
+    }
+}
+
+function editField(event, refreshToken, field, currentValue) {
+    event.stopPropagation();
+    const row = event.currentTarget;
+    const valueSpan = row.querySelector('.info-value');
+    
+    if (row.querySelector('input')) return;
+    
+    const fieldLabels = { projectId: 'Project ID', email: '邮箱' };
+    
+    const input = document.createElement('input');
+    input.type = field === 'email' ? 'email' : 'text';
+    input.value = currentValue;
+    input.className = 'inline-edit-input';
+    input.placeholder = `输入${fieldLabels[field]}`;
+    
+    valueSpan.style.display = 'none';
+    row.insertBefore(input, valueSpan.nextSibling);
+    input.focus();
+    input.select();
+    
+    const save = async () => {
+        const newValue = input.value.trim();
+        input.disabled = true;
+        
+        try {
+            const response = await authFetch(`/admin/tokens/${encodeURIComponent(refreshToken)}`, {
+                method: 'PUT',
+                headers: {
+                    'Content-Type': 'application/json',
+                    'Authorization': `Bearer ${authToken}`
+                },
+                body: JSON.stringify({ [field]: newValue })
+            });
+            
+            const data = await response.json();
+            if (data.success) {
+                showToast('已保存', 'success');
+                loadTokens();
+            } else {
+                showToast(data.message || '保存失败', 'error');
+                cancel();
+            }
+        } catch (error) {
+            showToast('保存失败', 'error');
+            cancel();
+        }
+    };
+    
+    const cancel = () => {
+        input.remove();
+        valueSpan.style.display = '';
+    };
+    
+    input.addEventListener('blur', () => {
+        setTimeout(() => {
+            if (document.activeElement !== input) {
+                if (input.value.trim() !== currentValue) {
+                    save();
+                } else {
+                    cancel();
+                }
+            }
+        }, 100);
+    });
+    
+    input.addEventListener('keydown', (e) => {
+        if (e.key === 'Enter') {
+            e.preventDefault();
+            save();
+        } else if (e.key === 'Escape') {
+            cancel();
+        }
+    });
+}
+
+function showTokenDetail(refreshToken) {
+    const token = cachedTokens.find(t => t.refresh_token === refreshToken);
+    if (!token) {
+        showToast('Token不存在', 'error');
+        return;
+    }
+    
+    const modal = document.createElement('div');
+    modal.className = 'modal form-modal';
+    modal.innerHTML = `
+        <div class="modal-content">
+            <div class="modal-title">📝 Token详情</div>
+            <div class="form-group compact">
+                <label>🎫 Access Token (只读)</label>
+                <div class="token-display">${token.access_token || ''}</div>
+            </div>
+            <div class="form-group compact">
+                <label>🔄 Refresh Token (只读)</label>
+                <div class="token-display">${token.refresh_token}</div>
+            </div>
+            <div class="form-group compact">
+                <label>📦 Project ID</label>
+                <input type="text" id="editProjectId" value="${token.projectId || ''}" placeholder="项目ID">
+            </div>
+            <div class="form-group compact">
+                <label>📧 邮箱</label>
+                <input type="email" id="editEmail" value="${token.email || ''}" placeholder="账号邮箱">
+            </div>
+            <div class="form-group compact">
+                <label>⏰ 过期时间</label>
+                <input type="text" value="${new Date(token.timestamp + token.expires_in * 1000).toLocaleString('zh-CN')}" readonly style="background: var(--bg); cursor: not-allowed;">
+            </div>
+            <div class="modal-actions">
+                <button class="btn btn-secondary" onclick="this.closest('.modal').remove()">取消</button>
+                <button class="btn btn-success" onclick="saveTokenDetail('${refreshToken}')">💾 保存</button>
+            </div>
+        </div>
+    `;
+    document.body.appendChild(modal);
+    modal.onclick = (e) => { if (e.target === modal) modal.remove(); };
+}
+
+async function saveTokenDetail(refreshToken) {
+    const projectId = document.getElementById('editProjectId').value.trim();
+    const email = document.getElementById('editEmail').value.trim();
+    
+    showLoading('保存中...');
+    try {
+        const response = await authFetch(`/admin/tokens/${encodeURIComponent(refreshToken)}`, {
+            method: 'PUT',
+            headers: {
+                'Content-Type': 'application/json',
+                'Authorization': `Bearer ${authToken}`
+            },
+            body: JSON.stringify({ projectId, email })
+        });
+        
+        const data = await response.json();
+        hideLoading();
+        if (data.success) {
+            document.querySelector('.form-modal').remove();
+            showToast('保存成功', 'success');
+            loadTokens();
+        } else {
+            showToast(data.message || '保存失败', 'error');
+        }
+    } catch (error) {
+        hideLoading();
+        showToast('保存失败: ' + error.message, 'error');
+    }
+}
+
+async function toggleToken(refreshToken, enable) {
+    const action = enable ? '启用' : '禁用';
+    const confirmed = await showConfirm(`确定要${action}这个Token吗？`, `${action}确认`);
+    if (!confirmed) return;
+    
+    showLoading(`正在${action}...`);
+    try {
+        const response = await authFetch(`/admin/tokens/${encodeURIComponent(refreshToken)}`, {
+            method: 'PUT',
+            headers: {
+                'Content-Type': 'application/json',
+                'Authorization': `Bearer ${authToken}`
+            },
+            body: JSON.stringify({ enable })
+        });
+        
+        const data = await response.json();
+        hideLoading();
+        if (data.success) {
+            showToast(`已${action}`, 'success');
+            loadTokens();
+        } else {
+            showToast(data.message || '操作失败', 'error');
+        }
+    } catch (error) {
+        hideLoading();
+        showToast('操作失败: ' + error.message, 'error');
+    }
+}
+
+async function deleteToken(refreshToken) {
+    const confirmed = await showConfirm('删除后无法恢复，确定删除？', '⚠️ 删除确认');
+    if (!confirmed) return;
+    
+    showLoading('正在删除...');
+    try {
+        const response = await authFetch(`/admin/tokens/${encodeURIComponent(refreshToken)}`, {
+            method: 'DELETE',
+            headers: { 'Authorization': `Bearer ${authToken}` }
+        });
+        
+        const data = await response.json();
+        hideLoading();
+        if (data.success) {
+            showToast('已删除', 'success');
+            loadTokens();
+        } else {
+            showToast(data.message || '删除失败', 'error');
+        }
+    } catch (error) {
+        hideLoading();
+        showToast('删除失败: ' + error.message, 'error');
+    }
+}

public/js/ui.js

@@ -0,0 +1,68 @@
+// UI组件：Toast、Modal、Loading
+
+function showToast(message, type = 'info', title = '') {
+    const icons = { success: '✅', error: '❌', warning: '⚠️', info: 'ℹ️' };
+    const titles = { success: '成功', error: '错误', warning: '警告', info: '提示' };
+    const toast = document.createElement('div');
+    toast.className = `toast ${type}`;
+    toast.innerHTML = `
+        <div class="toast-icon">${icons[type]}</div>
+        <div class="toast-content">
+            <div class="toast-title">${title || titles[type]}</div>
+            <div class="toast-message">${message}</div>
+        </div>
+    `;
+    document.body.appendChild(toast);
+    setTimeout(() => {
+        toast.style.animation = 'slideOut 0.3s ease';
+        setTimeout(() => toast.remove(), 300);
+    }, 3000);
+}
+
+function showConfirm(message, title = '确认操作') {
+    return new Promise((resolve) => {
+        const modal = document.createElement('div');
+        modal.className = 'modal';
+        modal.innerHTML = `
+            <div class="modal-content">
+                <div class="modal-title">${title}</div>
+                <div class="modal-message">${message}</div>
+                <div class="modal-actions">
+                    <button class="btn btn-secondary" onclick="this.closest('.modal').remove(); window.modalResolve(false)">取消</button>
+                    <button class="btn btn-danger" onclick="this.closest('.modal').remove(); window.modalResolve(true)">确定</button>
+                </div>
+            </div>
+        `;
+        document.body.appendChild(modal);
+        modal.onclick = (e) => { if (e.target === modal) { modal.remove(); resolve(false); } };
+        window.modalResolve = resolve;
+    });
+}
+
+function showLoading(text = '处理中...') {
+    const overlay = document.createElement('div');
+    overlay.className = 'loading-overlay';
+    overlay.id = 'loadingOverlay';
+    overlay.innerHTML = `<div class="spinner"></div><div class="loading-text">${text}</div>`;
+    document.body.appendChild(overlay);
+}
+
+function hideLoading() {
+    const overlay = document.getElementById('loadingOverlay');
+    if (overlay) overlay.remove();
+}
+
+function switchTab(tab) {
+    document.querySelectorAll('.tab').forEach(t => t.classList.remove('active'));
+    event.target.classList.add('active');
+    
+    document.getElementById('tokensPage').classList.add('hidden');
+    document.getElementById('settingsPage').classList.add('hidden');
+    
+    if (tab === 'tokens') {
+        document.getElementById('tokensPage').classList.remove('hidden');
+    } else if (tab === 'settings') {
+        document.getElementById('settingsPage').classList.remove('hidden');
+        loadConfig();
+    }
+}

public/js/utils.js

@@ -0,0 +1,65 @@
+// 字体大小设置
+function initFontSize() {
+    const savedSize = localStorage.getItem('fontSize') || '18';
+    document.documentElement.style.setProperty('--font-size-base', savedSize + 'px');
+    updateFontSizeInputs(savedSize);
+}
+
+function changeFontSize(size) {
+    size = Math.max(10, Math.min(24, parseInt(size) || 14));
+    document.documentElement.style.setProperty('--font-size-base', size + 'px');
+    localStorage.setItem('fontSize', size);
+    updateFontSizeInputs(size);
+}
+
+function updateFontSizeInputs(size) {
+    const rangeInput = document.getElementById('fontSizeRange');
+    const numberInput = document.getElementById('fontSizeInput');
+    if (rangeInput) rangeInput.value = size;
+    if (numberInput) numberInput.value = size;
+}
+
+// 敏感信息隐藏功能
+let sensitiveInfoHidden = localStorage.getItem('sensitiveInfoHidden') !== 'false';
+
+function initSensitiveInfo() {
+    updateSensitiveInfoDisplay();
+    updateSensitiveBtn();
+}
+
+function toggleSensitiveInfo() {
+    sensitiveInfoHidden = !sensitiveInfoHidden;
+    localStorage.setItem('sensitiveInfoHidden', sensitiveInfoHidden);
+    updateSensitiveInfoDisplay();
+    updateSensitiveBtn();
+}
+
+function updateSensitiveBtn() {
+    const btn = document.getElementById('toggleSensitiveBtn');
+    if (btn) {
+        if (sensitiveInfoHidden) {
+            btn.innerHTML = '🙈 隐藏';
+            btn.title = '点击显示敏感信息';
+            btn.classList.remove('btn-info');
+            btn.classList.add('btn-secondary');
+        } else {
+            btn.innerHTML = '👁️ 显示';
+            btn.title = '点击隐藏敏感信息';
+            btn.classList.remove('btn-secondary');
+            btn.classList.add('btn-info');
+        }
+    }
+}
+
+function updateSensitiveInfoDisplay() {
+    document.querySelectorAll('.sensitive-info').forEach(el => {
+        if (sensitiveInfoHidden) {
+            el.dataset.original = el.textContent;
+            el.textContent = '••••••';
+            el.classList.add('blurred');
+        } else if (el.dataset.original) {
+            el.textContent = el.dataset.original;
+            el.classList.remove('blurred');
+        }
+    });
+}

public/style.css

@@ -161,7 +161,7 @@ label {
 input, select, textarea { 
     width: 100%; 
     min-height: 40px; 
-    padding: 0.5rem 0.75rem; 
+    padding: 0.5rem 0.75rem 0.5rem 0.5rem !important; 
     border: 1.5px solid var(--border); 
     border-radius: 0.5rem; 
     font-size: 0.875rem; 
@@ -357,6 +357,7 @@ button.loading::after {
     display: grid;
     grid-template-columns: repeat(auto-fill, minmax(280px, 1fr));
     gap: 0.75rem;
+    align-items: start;
 }
 .token-card {
     background: rgba(255, 255, 255, 0.6);
@@ -464,7 +465,7 @@ button.loading::after {
 .inline-edit-input {
     flex: 1;
     min-height: 24px;
-    padding: 0.125rem 0.375rem;
+    padding: 0.125rem 0.375rem 0.125rem 0.5rem;
     font-size: 0.75rem;
     border: 1px solid var(--primary);
     border-radius: 0.25rem;
@@ -544,6 +545,7 @@ button.loading::after {
     grid-template-columns: repeat(auto-fit, minmax(280px, 1fr)); 
     gap: 1rem; 
     margin-bottom: 1rem; 
+    align-items: start;
 }
 .config-section {
     background: rgba(255, 255, 255, 0.6);
@@ -577,13 +579,13 @@ button.loading::after {
 .form-group.compact input,
 .form-group.compact select {
     min-height: 36px;
-    padding: 0.375rem 0.5rem;
+    padding: 0.375rem 0.5rem 0.375rem 0.75rem;
     font-size: 0.8rem;
 }
 .form-group.compact textarea {
     min-height: 60px;
     max-height: 300px;
-    padding: 0.375rem 0.5rem;
+    padding: 0.375rem 0.5rem 0.375rem 0.75rem;
     font-size: 0.8rem;
     resize: vertical;
     height: auto;
@@ -783,6 +785,56 @@ button.loading::after {
     font-weight: 600; 
     cursor: help; 
     margin-left: 4px; 
+    position: relative;
+}
+.help-tip::before {
+    content: attr(data-tooltip);
+    position: absolute;
+    bottom: calc(100% + 8px);
+    left: 50%;
+    transform: translateX(-50%);
+    background: rgba(0, 0, 0, 0.9);
+    color: white;
+    padding: 0.5rem 0.75rem;
+    border-radius: 0.375rem;
+    font-size: 0.75rem;
+    font-weight: 400;
+    white-space: pre-line;
+    min-width: 200px;
+    max-width: 300px;
+    text-align: left;
+    line-height: 1.4;
+    opacity: 0;
+    pointer-events: none;
+    transition: opacity 0.2s;
+    z-index: 1000;
+    box-shadow: 0 4px 12px rgba(0, 0, 0, 0.3);
+}
+.help-tip::after {
+    content: '';
+    position: absolute;
+    bottom: calc(100% + 2px);
+    left: 50%;
+    transform: translateX(-50%);
+    border: 6px solid transparent;
+    border-top-color: rgba(0, 0, 0, 0.9);
+    opacity: 0;
+    pointer-events: none;
+    transition: opacity 0.2s;
+    z-index: 1000;
+}
+.help-tip:hover::before,
+.help-tip:hover::after {
+    opacity: 1;
+}
+@media (prefers-color-scheme: dark) {
+    .help-tip::before {
+        background: rgba(255, 255, 255, 0.95);
+        color: var(--text);
+    }
+    .help-tip::after {
+        border-top-color: rgba(255, 255, 255, 0.95);
+    }
 }
 
 /* 额度弹窗头部 */

scripts/oauth-server.js

@@ -1,72 +1,14 @@
 import http from 'http';
 import { URL } from 'url';
-import crypto from 'crypto';
-import fs from 'fs';
 import path from 'path';
 import { fileURLToPath } from 'url';
-import axios from 'axios';
 import log from '../src/utils/logger.js';
-import config from '../src/config/config.js';
-import { generateProjectId } from '../src/utils/idGenerator.js';
 import tokenManager from '../src/auth/token_manager.js';
-import { OAUTH_CONFIG, OAUTH_SCOPES } from '../src/constants/oauth.js';
-import { buildAxiosRequestConfig } from '../src/utils/httpClient.js';
+import oauthManager from '../src/auth/oauth_manager.js';
 
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
-// 账号文件路径保持不变，仅用于日志展示，具体读写交给 TokenManager 处理
 const ACCOUNTS_FILE = path.join(__dirname, '..', 'data', 'accounts.json');
-const STATE = crypto.randomUUID();
-
-const SCOPES = OAUTH_SCOPES;
-
-function generateAuthUrl(port) {
-  const params = new URLSearchParams({
-    access_type: 'offline',
-    client_id: OAUTH_CONFIG.CLIENT_ID,
-    prompt: 'consent',
-    redirect_uri: `http://localhost:${port}/oauth-callback`,
-    response_type: 'code',
-    scope: SCOPES.join(' '),
-    state: STATE
-  });
-  return `${OAUTH_CONFIG.AUTH_URL}?${params.toString()}`;
-}
-
-async function exchangeCodeForToken(code, port) {
-  const postData = new URLSearchParams({
-    code,
-    client_id: OAUTH_CONFIG.CLIENT_ID,
-    client_secret: OAUTH_CONFIG.CLIENT_SECRET,
-    redirect_uri: `http://localhost:${port}/oauth-callback`,
-    grant_type: 'authorization_code'
-  });
-  
-  const response = await axios(buildAxiosRequestConfig({
-    method: 'POST',
-    url: OAUTH_CONFIG.TOKEN_URL,
-    headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
-    data: postData.toString(),
-    timeout: config.timeout
-  }));
-  
-  return response.data;
-}
-
-async function fetchUserEmail(accessToken) {
-  const response = await axios(buildAxiosRequestConfig({
-    method: 'GET',
-    url: 'https://www.googleapis.com/oauth2/v2/userinfo',
-    headers: {
-      'Host': 'www.googleapis.com',
-      'User-Agent': 'Go-http-client/1.1',
-      'Authorization': `Bearer ${accessToken}`,
-      'Accept-Encoding': 'gzip'
-    },
-    timeout: config.timeout
-  }));
-  return response.data?.email;
-}
 
 const server = http.createServer((req, res) => {
   const port = server.address().port;
@@ -78,68 +20,25 @@ const server = http.createServer((req, res) => {
     
     if (code) {
       log.info('收到授权码，正在交换 Token...');
-      exchangeCodeForToken(code, port).then(async (tokenData) => {
-        const account = {
-          access_token: tokenData.access_token,
-          refresh_token: tokenData.refresh_token,
-          expires_in: tokenData.expires_in,
-          timestamp: Date.now()
-        };
-        
-        try {
-          const email = await fetchUserEmail(account.access_token);
-          if (email) {
-            account.email = email;
-            log.info('获取到用户邮箱: ' + email);
-          }
-        } catch (err) {
-          log.warn('获取用户邮箱失败:', err.message);
-        }
-        
-        if (config.skipProjectIdFetch) {
-          account.projectId = generateProjectId();
-          account.enable = true;
-          log.info('已跳过API验证，使用随机生成的projectId: ' + account.projectId);
-        } else {
-          log.info('正在验证账号资格...');
-          try {
-            const projectId = await tokenManager.fetchProjectId({ access_token: account.access_token });
-            if (projectId === undefined) {
-              log.warn('该账号无资格使用（无法获取projectId），已跳过保存');
-              res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
-              res.end('<h1>账号无资格</h1><p>该账号无法获取projectId，未保存。</p>');
-              setTimeout(() => server.close(), 1000);
-              return;
-            }
-            account.projectId = projectId;
-            account.enable = true;
-            log.info('账号验证通过');
-          } catch (err) {
-            log.error('验证账号资格失败:', err.message);
-            res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
-            res.end('<h1>验证失败</h1><p>无法验证账号资格，请查看控制台。</p>');
-            setTimeout(() => server.close(), 1000);
-            return;
-          }
-        }
-        
+      oauthManager.authenticate(code, port).then(account => {
         const result = tokenManager.addToken(account);
         if (result.success) {
           log.info(`Token 已保存到 ${ACCOUNTS_FILE}`);
+          if (!account.hasQuota) {
+            log.warn('该账号无资格，已自动使用随机ProjectId');
+          }
         } else {
           log.error('保存 Token 失败:', result.message);
         }
         
+        const statusMsg = account.hasQuota ? '' : '<p style="color: orange;">⚠️ ���账号无资格，已自动使用随机ProjectId</p>';
         res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
-        res.end('<h1>授权成功！</h1><p>Token 已保存，可以关闭此页面。</p>');
-        
+        res.end(`<h1>授权成功！</h1><p>Token 已保存，可以关闭此页面。</p>${statusMsg}`);
         setTimeout(() => server.close(), 1000);
       }).catch(err => {
-        log.error('Token 交换失败:', err.message);
-        
+        log.error('认证失败:', err.message);
         res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
-        res.end('<h1>Token 获取失败</h1><p>查看控制台错误信息</p>');
-        
+        res.end('<h1>认证失败</h1><p>查看控制台错误信息</p>');
         setTimeout(() => server.close(), 1000);
       });
     } else {
@@ -156,7 +55,7 @@ const server = http.createServer((req, res) => {
 
 server.listen(0, () => {
   const port = server.address().port;
-  const authUrl = generateAuthUrl(port);
+  const authUrl = oauthManager.generateAuthUrl(port);
   log.info(`服务器运行在 http://localhost:${port}`);
   log.info('请在浏览器中打开以下链接进行登录：');
   console.log(`\n${authUrl}\n`);

src/auth/oauth_manager.js

@@ -0,0 +1,146 @@
+import axios from 'axios';
+import crypto from 'crypto';
+import log from '../utils/logger.js';
+import config from '../config/config.js';
+import { generateProjectId } from '../utils/idGenerator.js';
+import tokenManager from './token_manager.js';
+import { OAUTH_CONFIG, OAUTH_SCOPES } from '../constants/oauth.js';
+import { buildAxiosRequestConfig } from '../utils/httpClient.js';
+
+class OAuthManager {
+  constructor() {
+    this.state = crypto.randomUUID();
+  }
+
+  /**
+   * 生成授权URL
+   */
+  generateAuthUrl(port) {
+    const params = new URLSearchParams({
+      access_type: 'offline',
+      client_id: OAUTH_CONFIG.CLIENT_ID,
+      prompt: 'consent',
+      redirect_uri: `http://localhost:${port}/oauth-callback`,
+      response_type: 'code',
+      scope: OAUTH_SCOPES.join(' '),
+      state: this.state
+    });
+    return `${OAUTH_CONFIG.AUTH_URL}?${params.toString()}`;
+  }
+
+  /**
+   * 交换授权码获取Token
+   */
+  async exchangeCodeForToken(code, port) {
+    const postData = new URLSearchParams({
+      code,
+      client_id: OAUTH_CONFIG.CLIENT_ID,
+      client_secret: OAUTH_CONFIG.CLIENT_SECRET,
+      redirect_uri: `http://localhost:${port}/oauth-callback`,
+      grant_type: 'authorization_code'
+    });
+    
+    const response = await axios(buildAxiosRequestConfig({
+      method: 'POST',
+      url: OAUTH_CONFIG.TOKEN_URL,
+      headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+      data: postData.toString(),
+      timeout: config.timeout
+    }));
+    
+    return response.data;
+  }
+
+  /**
+   * 获取用户邮箱
+   */
+  async fetchUserEmail(accessToken) {
+    try {
+      const response = await axios(buildAxiosRequestConfig({
+        method: 'GET',
+        url: 'https://www.googleapis.com/oauth2/v2/userinfo',
+        headers: {
+          'Host': 'www.googleapis.com',
+          'User-Agent': 'Go-http-client/1.1',
+          'Authorization': `Bearer ${accessToken}`,
+          'Accept-Encoding': 'gzip'
+        },
+        timeout: config.timeout
+      }));
+      return response.data?.email;
+    } catch (err) {
+      log.warn('获取用户邮箱失败:', err.message);
+      return null;
+    }
+  }
+
+  /**
+   * 资格校验：尝试获取projectId，失败则自动回退到随机projectId
+   */
+  async validateAndGetProjectId(accessToken) {
+    // 如果配置跳过API验证，直接返回随机projectId
+    if (config.skipProjectIdFetch) {
+      const projectId = generateProjectId();
+      log.info('已跳过API验证，使用随机生成的projectId: ' + projectId);
+      return { projectId, hasQuota: false };
+    }
+
+    // 尝试从API获取projectId
+    try {
+      log.info('正在验证账号资格...');
+      const projectId = await tokenManager.fetchProjectId({ access_token: accessToken });
+      
+      if (projectId === undefined) {
+        // 无资格，自动回退到随机projectId
+        const randomProjectId = generateProjectId();
+        log.warn('该账号无资格使用，已自动退回无资格模式，使用随机projectId: ' + randomProjectId);
+        return { projectId: randomProjectId, hasQuota: false };
+      }
+      
+      log.info('账号验证通过，projectId: ' + projectId);
+      return { projectId, hasQuota: true };
+    } catch (err) {
+      // 获取失败时也退回到随机projectId
+      const randomProjectId = generateProjectId();
+      log.warn('验证账号资格失败: ' + err.message + '，已自动退回无资格模式');
+      log.info('使用随机生成的projectId: ' + randomProjectId);
+      return { projectId: randomProjectId, hasQuota: false };
+    }
+  }
+
+  /**
+   * 完整的OAuth认证流程：交换Token -> 获取邮箱 -> 资格校验
+   */
+  async authenticate(code, port) {
+    // 1. 交换授权码获取Token
+    const tokenData = await this.exchangeCodeForToken(code, port);
+    
+    if (!tokenData.access_token) {
+      throw new Error('Token交换失败：未获取到access_token');
+    }
+
+    const account = {
+      access_token: tokenData.access_token,
+      refresh_token: tokenData.refresh_token,
+      expires_in: tokenData.expires_in,
+      timestamp: Date.now()
+    };
+
+    // 2. 获取用户邮箱
+    const email = await this.fetchUserEmail(account.access_token);
+    if (email) {
+      account.email = email;
+      log.info('获取到用户邮箱: ' + email);
+    }
+
+    // 3. 资格校验并获取projectId
+    const { projectId, hasQuota } = await this.validateAndGetProjectId(account.access_token);
+    account.projectId = projectId;
+    account.hasQuota = hasQuota;
+    account.enable = true;
+
+    return account;
+  }
+}
+
+export default new OAuthManager();

src/config/config.js

@@ -3,6 +3,7 @@ import fs from 'fs';
 import path from 'path';
 import { fileURLToPath } from 'url';
 import log from '../utils/logger.js';
+import { deepMerge } from '../utils/deepMerge.js';
 
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
@@ -97,53 +98,60 @@ export function getProxyConfig() {
   return systemProxy || null;
 }
 
-const config = {
-  server: {
-    port: jsonConfig.server?.port || 8045,
-    host: jsonConfig.server?.host || '0.0.0.0',
-    heartbeatInterval: jsonConfig.server?.heartbeatInterval || 15000,  // 心跳间隔(ms)，防止CF超时
-    memoryThreshold: jsonConfig.server?.memoryThreshold || 500  // 内存阈值(MB)，超过触发GC
-  },
-  cache: {
-    modelListTTL: jsonConfig.cache?.modelListTTL || 60 * 60 * 1000  // 模型列表缓存时间(ms)，默认60分钟
-  },
-  rotation: {
-    strategy: jsonConfig.rotation?.strategy || 'round_robin',  // 轮询策略: round_robin, quota_exhausted, request_count
-    requestCount: jsonConfig.rotation?.requestCount || 10  // request_count策略下每个token的请求次数
-  },
-  imageBaseUrl: process.env.IMAGE_BASE_URL || null,
-  maxImages: jsonConfig.other?.maxImages || 10,
-  api: {
-    url: jsonConfig.api?.url || 'https://daily-cloudcode-pa.sandbox.googleapis.com/v1internal:streamGenerateContent?alt=sse',
-    modelsUrl: jsonConfig.api?.modelsUrl || 'https://daily-cloudcode-pa.sandbox.googleapis.com/v1internal:fetchAvailableModels',
-    noStreamUrl: jsonConfig.api?.noStreamUrl || 'https://daily-cloudcode-pa.sandbox.googleapis.com/v1internal:generateContent',
-    host: jsonConfig.api?.host || 'daily-cloudcode-pa.sandbox.googleapis.com',
-    userAgent: jsonConfig.api?.userAgent || 'antigravity/1.11.3 windows/amd64'
-  },
-  defaults: {
-    temperature: jsonConfig.defaults?.temperature || 1,
-    top_p: jsonConfig.defaults?.topP || 0.85,
-    top_k: jsonConfig.defaults?.topK || 50,
-    max_tokens: jsonConfig.defaults?.maxTokens || 32000,
-    thinking_budget: jsonConfig.defaults?.thinkingBudget ?? 1024
-  },
-  security: {
-    maxRequestSize: jsonConfig.server?.maxRequestSize || '50mb',
-    apiKey: process.env.API_KEY || null
-  },
-  admin: {
-    username: process.env.ADMIN_USERNAME || 'admin',
-    password: process.env.ADMIN_PASSWORD || 'admin123',
-    jwtSecret: process.env.JWT_SECRET || 'your-jwt-secret-key-change-this-in-production'
-  },
-  useNativeAxios: jsonConfig.other?.useNativeAxios !== false,
-  timeout: jsonConfig.other?.timeout || 300000,
-  // 默认 429 重试次数（统一配置，0 表示不重试，默认 3 次）
-  retryTimes: Number.isFinite(jsonConfig.other?.retryTimes) ? jsonConfig.other.retryTimes : 3,
-  proxy: getProxyConfig(),
-  systemInstruction: process.env.SYSTEM_INSTRUCTION || '',
-  skipProjectIdFetch: jsonConfig.other?.skipProjectIdFetch === true
-};
+/**
+ * 从 JSON 和环境变量构建配置对象
+ */
+export function buildConfig(jsonConfig) {
+  return {
+    server: {
+      port: jsonConfig.server?.port || 8045,
+      host: jsonConfig.server?.host || '0.0.0.0',
+      heartbeatInterval: jsonConfig.server?.heartbeatInterval || 15000,
+      memoryThreshold: jsonConfig.server?.memoryThreshold || 500
+    },
+    cache: {
+      modelListTTL: jsonConfig.cache?.modelListTTL || 60 * 60 * 1000
+    },
+    rotation: {
+      strategy: jsonConfig.rotation?.strategy || 'round_robin',
+      requestCount: jsonConfig.rotation?.requestCount || 10
+    },
+    imageBaseUrl: process.env.IMAGE_BASE_URL || null,
+    maxImages: jsonConfig.other?.maxImages || 10,
+    api: {
+      url: jsonConfig.api?.url || 'https://daily-cloudcode-pa.sandbox.googleapis.com/v1internal:streamGenerateContent?alt=sse',
+      modelsUrl: jsonConfig.api?.modelsUrl || 'https://daily-cloudcode-pa.sandbox.googleapis.com/v1internal:fetchAvailableModels',
+      noStreamUrl: jsonConfig.api?.noStreamUrl || 'https://daily-cloudcode-pa.sandbox.googleapis.com/v1internal:generateContent',
+      host: jsonConfig.api?.host || 'daily-cloudcode-pa.sandbox.googleapis.com',
+      userAgent: jsonConfig.api?.userAgent || 'antigravity/1.11.3 windows/amd64'
+    },
+    defaults: {
+      temperature: jsonConfig.defaults?.temperature || 1,
+      top_p: jsonConfig.defaults?.topP || 0.85,
+      top_k: jsonConfig.defaults?.topK || 50,
+      max_tokens: jsonConfig.defaults?.maxTokens || 32000,
+      thinking_budget: jsonConfig.defaults?.thinkingBudget ?? 1024
+    },
+    security: {
+      maxRequestSize: jsonConfig.server?.maxRequestSize || '50mb',
+      apiKey: process.env.API_KEY || null
+    },
+    admin: {
+      username: process.env.ADMIN_USERNAME || 'admin',
+      password: process.env.ADMIN_PASSWORD || 'admin123',
+      jwtSecret: process.env.JWT_SECRET || 'your-jwt-secret-key-change-this-in-production'
+    },
+    useNativeAxios: jsonConfig.other?.useNativeAxios !== false,
+    timeout: jsonConfig.other?.timeout || 300000,
+    retryTimes: Number.isFinite(jsonConfig.other?.retryTimes) ? jsonConfig.other.retryTimes : 3,
+    proxy: getProxyConfig(),
+    systemInstruction: process.env.SYSTEM_INSTRUCTION || '',
+    skipProjectIdFetch: jsonConfig.other?.skipProjectIdFetch === true,
+    useContextSystemPrompt: jsonConfig.other?.useContextSystemPrompt === true
+  };
+}
+
+const config = buildConfig(jsonConfig);
 
 log.info('✓ 配置加载成功');
 
@@ -157,5 +165,7 @@ export function getConfigJson() {
 }
 
 export function saveConfigJson(data) {
-  fs.writeFileSync(configJsonPath, JSON.stringify(data, null, 2), 'utf8');
-}
+  const existing = getConfigJson();
+  const merged = deepMerge(existing, data);
+  fs.writeFileSync(configJsonPath, JSON.stringify(merged, null, 2), 'utf8');
+}

src/routes/admin.js

@@ -3,12 +3,11 @@ import fs from 'fs';
 import { generateToken, authMiddleware } from '../auth/jwt.js';
 import tokenManager from '../auth/token_manager.js';
 import quotaManager from '../auth/quota_manager.js';
+import oauthManager from '../auth/oauth_manager.js';
 import config, { getConfigJson, saveConfigJson } from '../config/config.js';
 import logger from '../utils/logger.js';
-import { generateProjectId } from '../utils/idGenerator.js';
 import { parseEnvFile, updateEnvFile } from '../utils/envParser.js';
 import { reloadConfig } from '../utils/configReloader.js';
-import { OAUTH_CONFIG } from '../constants/oauth.js';
 import { deepMerge } from '../utils/deepMerge.js';
 import { getModelsWithQuotas } from '../api/client.js';
 import path from 'path';
@@ -110,77 +109,13 @@ router.post('/oauth/exchange', authMiddleware, async (req, res) => {
   }
   
   try {
-    const postData = new URLSearchParams({
-      code,
-      client_id: OAUTH_CONFIG.CLIENT_ID,
-      client_secret: OAUTH_CONFIG.CLIENT_SECRET,
-      redirect_uri: `http://localhost:${port}/oauth-callback`,
-      grant_type: 'authorization_code'
-    });
-    
-    const response = await fetch(OAUTH_CONFIG.TOKEN_URL, {
-      method: 'POST',
-      headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
-      body: postData.toString()
-    });
-    
-    const tokenData = await response.json();
-    
-    if (!tokenData.access_token) {
-      return res.status(400).json({ success: false, message: 'Token交换失败' });
-    }
-    
-    const account = {
-      access_token: tokenData.access_token,
-      refresh_token: tokenData.refresh_token,
-      expires_in: tokenData.expires_in,
-      timestamp: Date.now(),
-      enable: true
-    };
-    
-    try {
-      const emailResponse = await fetch('https://www.googleapis.com/oauth2/v2/userinfo', {
-        headers: {
-          'Host': 'www.googleapis.com',
-          'User-Agent': 'Go-http-client/1.1',
-          'Authorization': `Bearer ${account.access_token}`,
-          'Accept-Encoding': 'gzip'
-        }
-      });
-      const userInfo = await emailResponse.json();
-      if (userInfo.email) {
-        account.email = userInfo.email;
-        logger.info('获取到用户邮箱: ' + userInfo.email);
-      }
-    } catch (err) {
-      logger.warn('获取用户邮箱失败:', err.message);
-    }
-    
-    // 始终尝试获取 projectId 进行资格校验
-    // 如果无资格，自动退回到无资格模式使用随机 projectId
-    try {
-      const projectId = await tokenManager.fetchProjectId(account);
-      if (projectId === undefined) {
-        // 无资格，自动退回到无资格模式
-        account.projectId = generateProjectId();
-        account.hasQuota = false;
-        logger.warn('该账号无资格使用，已自动退回无资格模式，使用随机projectId: ' + account.projectId);
-      } else {
-        account.projectId = projectId;
-        account.hasQuota = true;
-        logger.info('账号验证通过，projectId: ' + projectId);
-      }
-    } catch (error) {
-      // 获取失败时也退回到无资格模式
-      logger.warn('验证账号资格失败: ' + error.message + '，已自动退回无资格模式');
-      account.projectId = generateProjectId();
-      account.hasQuota = false;
-      logger.info('使用随机生成的projectId: ' + account.projectId);
-    }
-    
-    res.json({ success: true, data: account });
+    const account = await oauthManager.authenticate(code, port);
+    const message = account.hasQuota 
+      ? 'Token添加成功' 
+      : 'Token添加成功（该账号无资格，已自动使用随机ProjectId）';
+    res.json({ success: true, data: account, message, fallbackMode: !account.hasQuota });
   } catch (error) {
-    logger.error('Token交换失败:', error.message);
+    logger.error('认证失败:', error.message);
     res.status(500).json({ success: false, message: error.message });
   }
 });
@@ -202,15 +137,8 @@ router.put('/config', authMiddleware, (req, res) => {
   try {
     const { env: envUpdates, json: jsonUpdates } = req.body;
     
-    if (envUpdates) {
-      updateEnvFile(envPath, envUpdates);
-    }
-    
-    if (jsonUpdates) {
-      const currentConfig = getConfigJson();
-      const mergedConfig = deepMerge(currentConfig, jsonUpdates);
-      saveConfigJson(mergedConfig);
-    }
+    if (envUpdates) updateEnvFile(envPath, envUpdates);
+    if (jsonUpdates) saveConfigJson(deepMerge(getConfigJson(), jsonUpdates));
     
     dotenv.config({ override: true });
     reloadConfig();
@@ -251,13 +179,16 @@ router.put('/rotation', authMiddleware, (req, res) => {
     // 更新内存中的配置
     tokenManager.updateRotationConfig(strategy, requestCount);
     
-    // 同时保存到config.json
+    // 保存到config.json
     const currentConfig = getConfigJson();
     if (!currentConfig.rotation) currentConfig.rotation = {};
     if (strategy) currentConfig.rotation.strategy = strategy;
     if (requestCount) currentConfig.rotation.requestCount = requestCount;
     saveConfigJson(currentConfig);
     
+    // 重载配置到内存
+    reloadConfig();
+    
     logger.info(`轮询策略已更新: ${strategy || '未变'}, 请求次数: ${requestCount || '未变'}`);
     res.json({ success: true, message: '轮询策略已更新', data: tokenManager.getRotationConfig() });
   } catch (error) {

src/utils/configReloader.js

@@ -1,68 +1,9 @@
-import config, { getConfigJson, getProxyConfig } from '../config/config.js';
-
-/**
- * 配置字段映射表：config对象路径 -> config.json路径 / 环境变量
- */
-const CONFIG_MAPPING = [
-  { target: 'server.port', source: 'server.port', default: 8045 },
-  { target: 'server.host', source: 'server.host', default: '0.0.0.0' },
-  { target: 'defaults.temperature', source: 'defaults.temperature', default: 1 },
-  { target: 'defaults.top_p', source: 'defaults.topP', default: 0.85 },
-  { target: 'defaults.top_k', source: 'defaults.topK', default: 50 },
-  { target: 'defaults.max_tokens', source: 'defaults.maxTokens', default: 32000 },
-  { target: 'defaults.thinking_budget', source: 'defaults.thinkingBudget', default: 1024 },
-  { target: 'timeout', source: 'other.timeout', default: 300000 },
-  { target: 'skipProjectIdFetch', source: 'other.skipProjectIdFetch', default: false, transform: v => v === true },
-  { target: 'maxImages', source: 'other.maxImages', default: 10 },
-  { target: 'useNativeAxios', source: 'other.useNativeAxios', default: true, transform: v => v !== false },
-  { target: 'api.url', source: 'api.url', default: 'https://daily-cloudcode-pa.sandbox.googleapis.com/v1internal:streamGenerateContent?alt=sse' },
-  { target: 'api.modelsUrl', source: 'api.modelsUrl', default: 'https://daily-cloudcode-pa.sandbox.googleapis.com/v1internal:fetchAvailableModels' },
-  { target: 'api.noStreamUrl', source: 'api.noStreamUrl', default: 'https://daily-cloudcode-pa.sandbox.googleapis.com/v1internal:generateContent' },
-  { target: 'api.host', source: 'api.host', default: 'daily-cloudcode-pa.sandbox.googleapis.com' },
-  { target: 'api.userAgent', source: 'api.userAgent', default: 'antigravity/1.11.3 windows/amd64' }
-];
-
-const ENV_MAPPING = [
-  { target: 'security.apiKey', env: 'API_KEY', default: null },
-  { target: 'systemInstruction', env: 'SYSTEM_INSTRUCTION', default: '' }
-];
-
-/**
- * 从嵌套路径获取值
- */
-function getNestedValue(obj, path) {
-  return path.split('.').reduce((acc, key) => acc?.[key], obj);
-}
-
-/**
- * 设置嵌套路径的值
- */
-function setNestedValue(obj, path, value) {
-  const keys = path.split('.');
-  const lastKey = keys.pop();
-  const target = keys.reduce((acc, key) => acc[key], obj);
-  target[lastKey] = value;
-}
+import config, { getConfigJson, buildConfig } from '../config/config.js';
 
 /**
  * 重新加载配置到 config 对象
  */
 export function reloadConfig() {
-  const jsonConfig = getConfigJson();
-  
-  // 更新 JSON 配置
-  CONFIG_MAPPING.forEach(({ target, source, default: defaultValue, transform }) => {
-    let value = getNestedValue(jsonConfig, source) ?? defaultValue;
-    if (transform) value = transform(value);
-    setNestedValue(config, target, value);
-  });
-  
-  // 更新环境变量配置
-  ENV_MAPPING.forEach(({ target, env, default: defaultValue }) => {
-    const value = process.env[env] || defaultValue;
-    setNestedValue(config, target, value);
-  });
-  
-  // 单独处理代理配置（支持系统代理环境变量）
-  config.proxy = getProxyConfig();
+  const newConfig = buildConfig(getConfigJson());
+  Object.assign(config, newConfig);
 }

src/utils/utils.js

@@ -205,11 +205,8 @@ function handleToolCall(message, antigravityMessages){
 function openaiMessageToAntigravity(openaiMessages, enableThinking, actualModelName, sessionId){
   const antigravityMessages = [];
   for (const message of openaiMessages) {
-    if (message.role === "user") {
-      const extracted = extractImagesFromContent(message.content);
-      handleUserMessage(extracted, antigravityMessages);
-    } else if (message.role === "system") {
-      // 中间的 system 消息作为 user 处理（开头的 system 已在 generateRequestBody 中过滤）
+    if (message.role === "user" || message.role === "system") {
+      // system 消息作为 user 处理（开头的 system 已在 generateRequestBody 中过滤）
       const extracted = extractImagesFromContent(message.content);
       handleUserMessage(extracted, antigravityMessages);
     } else if (message.role === "assistant") {
@@ -226,13 +223,18 @@ function openaiMessageToAntigravity(openaiMessages, enableThinking, actualModelN
  * 从 OpenAI 消息中提取并合并 system 指令
  * 规则：
  * 1. SYSTEM_INSTRUCTION 作为基础 system，可为空
- * 2. 保留用户首条 system 信息，合并在基础 system 后面
- * 3. 如果连续多条 system，合并成一条 system
- * 4. 避免把真正的 system 重复作为 user 发送
+ * 2. 根据 useContextSystemPrompt 配置决定是否收集请求中的 system 消息
+ * 3. 如果 useContextSystemPrompt=true，收集开头连续的 system 消息并合并
+ * 4. 如果 useContextSystemPrompt=false，只使用基础 SYSTEM_INSTRUCTION
  */
 function extractSystemInstruction(openaiMessages) {
   const baseSystem = config.systemInstruction || '';
   
+  // 如果不使用上下文 system，只返回基础 system
+  if (!config.useContextSystemPrompt) {
+    return baseSystem;
+  }
+  
   // 收集开头连续的 system 消息
   const systemTexts = [];
   for (const message of openaiMessages) {
@@ -414,13 +416,16 @@ function generateRequestBody(openaiMessages,modelName,parameters,openaiTools,tok
   // 提取合并后的 system 指令
   const mergedSystemInstruction = extractSystemInstruction(openaiMessages);
   
-  // 过滤掉开头连续的 system 消息，避免重复作为 user 发送
+  // 根据 useContextSystemPrompt 配置决定如何处理 system 消息
   let startIndex = 0;
-  for (let i = 0; i < openaiMessages.length; i++) {
-    if (openaiMessages[i].role === 'system') {
-      startIndex = i + 1;
-    } else {
-      break;
+  if (config.useContextSystemPrompt) {
+    // 过滤掉开头连续的 system 消息，避免重复作为 user 发送
+    for (let i = 0; i < openaiMessages.length; i++) {
+      if (openaiMessages[i].role === 'system') {
+        startIndex = i + 1;
+      } else {
+        break;
+      }
     }
   }
   const filteredMessages = openaiMessages.slice(startIndex);