diff --git a/admin/account_groups.go b/admin/account_groups.go
new file mode 100644
index 00000000..aa3e4ea3
--- /dev/null
+++ b/admin/account_groups.go
@@ -0,0 +1,279 @@
+package admin
+
+import (
+	"context"
+	"database/sql"
+	"errors"
+	"net/http"
+	"strconv"
+	"strings"
+	"time"
+	"unicode/utf8"
+
+	"github.com/codex2api/database"
+	"github.com/gin-gonic/gin"
+)
+
+const (
+	maxAccountGroups            = 64
+	maxAccountGroupNameRuneSize = 80
+)
+
+type accountGroupResponse struct {
+	ID          int64  `json:"id"`
+	Name        string `json:"name"`
+	Description string `json:"description"`
+	Color       string `json:"color"`
+	SortOrder   int64  `json:"sort_order"`
+	MemberCount int64  `json:"member_count"`
+	CreatedAt   string `json:"created_at"`
+	UpdatedAt   string `json:"updated_at"`
+}
+
+func toAccountGroupResponse(g database.AccountGroup) accountGroupResponse {
+	return accountGroupResponse{
+		ID:          g.ID,
+		Name:        g.Name,
+		Description: g.Description,
+		Color:       g.Color,
+		SortOrder:   g.SortOrder,
+		MemberCount: g.MemberCount,
+		CreatedAt:   g.CreatedAt.Format(time.RFC3339),
+		UpdatedAt:   g.UpdatedAt.Format(time.RFC3339),
+	}
+}
+
+func (h *Handler) ListAccountGroups(c *gin.Context) {
+	ctx, cancel := context.WithTimeout(c.Request.Context(), 5*time.Second)
+	defer cancel()
+	groups, err := h.db.ListAccountGroups(ctx)
+	if err != nil {
+		writeInternalError(c, err)
+		return
+	}
+	out := make([]accountGroupResponse, 0, len(groups))
+	for _, group := range groups {
+		out = append(out, toAccountGroupResponse(group))
+	}
+	c.JSON(http.StatusOK, gin.H{"groups": out})
+}
+
+type createAccountGroupReq struct {
+	Name        string `json:"name"`
+	Description string `json:"description"`
+	Color       string `json:"color"`
+	SortOrder   *int64 `json:"sort_order"`
+}
+
+func (h *Handler) CreateAccountGroup(c *gin.Context) {
+	var req createAccountGroupReq
+	if err := c.ShouldBindJSON(&req); err != nil {
+		writeError(c, http.StatusBadRequest, "请求格式错误")
+		return
+	}
+	name, err := sanitizeAccountGroupName(req.Name)
+	if err != nil {
+		writeError(c, http.StatusBadRequest, err.Error())
+		return
+	}
+	description := strings.TrimSpace(req.Description)
+	if utf8.RuneCountInString(description) > 240 {
+		writeError(c, http.StatusBadRequest, "描述长度不能超过 240 字符")
+		return
+	}
+	color := strings.TrimSpace(req.Color)
+	if utf8.RuneCountInString(color) > 20 {
+		writeError(c, http.StatusBadRequest, "颜色长度不能超过 20 字符")
+		return
+	}
+	sortOrder := int64(0)
+	if req.SortOrder != nil {
+		sortOrder = *req.SortOrder
+	}
+	ctx, cancel := context.WithTimeout(c.Request.Context(), 5*time.Second)
+	defer cancel()
+	groups, err := h.db.ListAccountGroups(ctx)
+	if err != nil {
+		writeInternalError(c, err)
+		return
+	}
+	if len(groups) >= maxAccountGroups {
+		writeError(c, http.StatusBadRequest, "分组数量已达上限")
+		return
+	}
+	id, err := h.db.CreateAccountGroup(ctx, name, description, color, sortOrder)
+	if err != nil {
+		if errors.Is(err, database.ErrDuplicateAccountGroupName) {
+			writeError(c, http.StatusConflict, err.Error())
+			return
+		}
+		writeInternalError(c, err)
+		return
+	}
+	c.JSON(http.StatusOK, gin.H{"id": id, "message": "分组已创建"})
+}
+
+type updateAccountGroupReq struct {
+	Name        *string `json:"name"`
+	Description *string `json:"description"`
+	Color       *string `json:"color"`
+	SortOrder   *int64  `json:"sort_order"`
+}
+
+func (h *Handler) UpdateAccountGroup(c *gin.Context) {
+	id, err := strconv.ParseInt(c.Param("id"), 10, 64)
+	if err != nil {
+		writeError(c, http.StatusBadRequest, "无效的分组 ID")
+		return
+	}
+	var req updateAccountGroupReq
+	if err := c.ShouldBindJSON(&req); err != nil {
+		writeError(c, http.StatusBadRequest, "请求格式错误")
+		return
+	}
+	if req.Name != nil {
+		name, err := sanitizeAccountGroupName(*req.Name)
+		if err != nil {
+			writeError(c, http.StatusBadRequest, err.Error())
+			return
+		}
+		req.Name = &name
+	}
+	if req.Description != nil {
+		desc := strings.TrimSpace(*req.Description)
+		if utf8.RuneCountInString(desc) > 240 {
+			writeError(c, http.StatusBadRequest, "描述长度不能超过 240 字符")
+			return
+		}
+		req.Description = &desc
+	}
+	if req.Color != nil {
+		color := strings.TrimSpace(*req.Color)
+		if utf8.RuneCountInString(color) > 20 {
+			writeError(c, http.StatusBadRequest, "颜色长度不能超过 20 字符")
+			return
+		}
+		req.Color = &color
+	}
+	ctx, cancel := context.WithTimeout(c.Request.Context(), 5*time.Second)
+	defer cancel()
+	if err := h.db.UpdateAccountGroup(ctx, id, req.Name, req.Description, req.Color, req.SortOrder); err != nil {
+		if errors.Is(err, sql.ErrNoRows) {
+			writeError(c, http.StatusNotFound, "分组不存在")
+			return
+		}
+		if errors.Is(err, database.ErrDuplicateAccountGroupName) {
+			writeError(c, http.StatusConflict, err.Error())
+			return
+		}
+		writeInternalError(c, err)
+		return
+	}
+	writeMessage(c, http.StatusOK, "分组已更新")
+}
+
+func (h *Handler) DeleteAccountGroup(c *gin.Context) {
+	id, err := strconv.ParseInt(c.Param("id"), 10, 64)
+	if err != nil {
+		writeError(c, http.StatusBadRequest, "无效的分组 ID")
+		return
+	}
+	force := strings.EqualFold(c.Query("force"), "true")
+	ctx, cancel := context.WithTimeout(c.Request.Context(), 5*time.Second)
+	defer cancel()
+	if err := h.db.DeleteAccountGroup(ctx, id, force); err != nil {
+		if errors.Is(err, sql.ErrNoRows) {
+			writeError(c, http.StatusNotFound, "分组不存在")
+			return
+		}
+		if errors.Is(err, database.ErrAccountGroupNotEmpty) {
+			writeError(c, http.StatusConflict, err.Error())
+			return
+		}
+		writeInternalError(c, err)
+		return
+	}
+	if h.store != nil {
+		for _, acc := range h.store.Accounts() {
+			acc.Mu().RLock()
+			groups := removeInt64(acc.GroupIDs, id)
+			acc.Mu().RUnlock()
+			h.store.ApplyAccountGroups(acc.DBID, groups)
+		}
+	}
+	h.refreshAPIKeyAllowedGroupsAfterGroupDelete(ctx, id)
+	writeMessage(c, http.StatusOK, "分组已删除")
+}
+
+func (h *Handler) refreshAPIKeyAllowedGroupsAfterGroupDelete(ctx context.Context, groupID int64) {
+	if h == nil || h.db == nil || groupID <= 0 {
+		return
+	}
+	keys, err := h.db.ListAPIKeys(ctx)
+	if err != nil {
+		return
+	}
+	for _, key := range keys {
+		if key == nil {
+			continue
+		}
+		if h.store != nil {
+			h.store.SetAPIKeyAllowedGroups(key.ID, key.AllowedGroupIDs)
+		}
+		h.invalidateAPIKeyRuntimeCaches(ctx, key.Key)
+	}
+}
+
+func sanitizeAccountGroupName(raw string) (string, error) {
+	name := strings.TrimSpace(raw)
+	if name == "" {
+		return "", errors.New("分组名称不能为空")
+	}
+	if utf8.RuneCountInString(name) > maxAccountGroupNameRuneSize {
+		return "", errors.New("分组名称长度超过 80 字符")
+	}
+	for _, r := range name {
+		if r < 0x20 || r == 0x7f {
+			return "", errors.New("分组名称包含非法控制字符")
+		}
+	}
+	return name, nil
+}
+
+func removeInt64(slice []int64, target int64) []int64 {
+	out := make([]int64, 0, len(slice))
+	for _, v := range slice {
+		if v != target {
+			out = append(out, v)
+		}
+	}
+	return out
+}
+
+func containsInt64(slice []int64, target int64) bool {
+	for _, v := range slice {
+		if v == target {
+			return true
+		}
+	}
+	return false
+}
+
+func dedupeInt64(ids []int64) []int64 {
+	if len(ids) == 0 {
+		return nil
+	}
+	seen := make(map[int64]struct{}, len(ids))
+	out := make([]int64, 0, len(ids))
+	for _, id := range ids {
+		if id <= 0 {
+			continue
+		}
+		if _, ok := seen[id]; ok {
+			continue
+		}
+		seen[id] = struct{}{}
+		out = append(out, id)
+	}
+	return out
+}
diff --git a/admin/handler.go b/admin/handler.go
index e92d6f7a..2fffe307 100644
--- a/admin/handler.go
+++ b/admin/handler.go
@@ -9,6 +9,7 @@ import (
 	"encoding/base64"
 	"encoding/hex"
 	"encoding/json"
+	"errors"
 	"fmt"
 	"io"
 	"log"
@@ -223,7 +224,12 @@ func (h *Handler) RegisterRoutes(r *gin.Engine) {
 	api.DELETE("/usage/logs", h.ClearUsageLogs)
 	api.GET("/keys", h.ListAPIKeys)
 	api.POST("/keys", h.CreateAPIKey)
+	api.PATCH("/keys/:id", h.UpdateAPIKey)
 	api.DELETE("/keys/:id", h.DeleteAPIKey)
+	api.GET("/account-groups", h.ListAccountGroups)
+	api.POST("/account-groups", h.CreateAccountGroup)
+	api.PATCH("/account-groups/:id", h.UpdateAccountGroup)
+	api.DELETE("/account-groups/:id", h.DeleteAccountGroup)
 	api.GET("/health", h.GetHealth)
 	api.GET("/system/update", h.GetSelfUpdateStatus)
 	api.POST("/system/update", h.StartSelfUpdate)
@@ -422,6 +428,8 @@ type accountResponse struct {
 	Enabled                  bool                       `json:"enabled"`
 	Locked                   bool                       `json:"locked"`
 	AllowedAPIKeyIDs         []int64                    `json:"allowed_api_key_ids"`
+	Tags                     []string                   `json:"tags"`
+	GroupIDs                 []int64                    `json:"group_ids"`
 	// 图片配额信息
 	ImageQuotaRemaining *int   `json:"image_quota_remaining,omitempty"`
 	ImageQuotaTotal     *int   `json:"image_quota_total,omitempty"`
@@ -509,6 +517,7 @@ func (h *Handler) ListAccounts(c *gin.Context) {
 			Enabled:                  row.Enabled,
 			Locked:                   row.Locked,
 			AllowedAPIKeyIDs:         row.GetCredentialInt64Slice("allowed_api_key_ids"),
+			Tags:                     append([]string(nil), row.Tags...),
 			ScoreBiasOverride:        nullableInt64Pointer(row.ScoreBiasOverride),
 			ScoreBiasEffective:       effectiveScoreBias(planType, row.ScoreBiasOverride),
 			BaseConcurrencyOverride:  nullableInt64Pointer(row.BaseConcurrencyOverride),
@@ -517,6 +526,9 @@ func (h *Handler) ListAccounts(c *gin.Context) {
 			UpdatedAt:                row.UpdatedAt.Format(time.RFC3339),
 		}
 		if acc, ok := accountMap[row.ID]; ok {
+			acc.Mu().RLock()
+			resp.GroupIDs = append([]int64(nil), acc.GroupIDs...)
+			acc.Mu().RUnlock()
 			resp.ActiveRequests = acc.GetActiveRequests()
 			resp.TotalRequests = acc.GetTotalRequests()
 			debug := acc.GetSchedulerDebugSnapshot(int64(h.store.GetMaxConcurrency()))
@@ -628,6 +640,9 @@ type updateAccountSchedulerReq struct {
 	ScoreBiasOverride       json.RawMessage `json:"score_bias_override"`
 	BaseConcurrencyOverride json.RawMessage `json:"base_concurrency_override"`
 	AllowedAPIKeyIDs        json.RawMessage `json:"allowed_api_key_ids"`
+	Tags                    json.RawMessage `json:"tags"`
+	GroupIDs                json.RawMessage `json:"group_ids"`
+	ProxyURL                *string         `json:"proxy_url"`
 }
 
 // UpdateAccountScheduler 更新账号调度配置。
@@ -661,6 +676,16 @@ func (h *Handler) UpdateAccountScheduler(c *gin.Context) {
 		writeError(c, http.StatusBadRequest, err.Error())
 		return
 	}
+	tags, err := parseOptionalStringSliceField(req.Tags, "tags")
+	if err != nil {
+		writeError(c, http.StatusBadRequest, err.Error())
+		return
+	}
+	groupIDs, err := parseOptionalIntegerSliceField(req.GroupIDs, "group_ids")
+	if err != nil {
+		writeError(c, http.StatusBadRequest, err.Error())
+		return
+	}
 
 	ctx, cancel := context.WithTimeout(c.Request.Context(), 5*time.Second)
 	defer cancel()
@@ -680,9 +705,28 @@ func (h *Handler) UpdateAccountScheduler(c *gin.Context) {
 			return
 		}
 	}
+	if groupIDs.Set {
+		missingGroupIDs, err := h.db.VerifyAccountGroupIDs(ctx, groupIDs.Values)
+		if err != nil {
+			writeError(c, http.StatusInternalServerError, "校验账号分组失败: "+err.Error())
+			return
+		}
+		if len(missingGroupIDs) > 0 {
+			values := make([]string, 0, len(missingGroupIDs))
+			for _, value := range missingGroupIDs {
+				values = append(values, strconv.FormatInt(value, 10))
+			}
+			writeError(c, http.StatusBadRequest, "group_ids 包含不存在的分组 ID: "+strings.Join(values, ", "))
+			return
+		}
+	}
 
-	if err := h.db.UpdateAccountSchedulerConfig(ctx, id, scoreBiasOverride, baseConcurrencyOverride, allowedAPIKeyIDs); err != nil {
-		if err == sql.ErrNoRows {
+	proxyURL := database.OptionalString{}
+	if req.ProxyURL != nil {
+		proxyURL = database.OptionalString{Set: true, Value: *req.ProxyURL}
+	}
+	if err := h.db.UpdateAccountSchedulerMetadata(ctx, id, scoreBiasOverride, baseConcurrencyOverride, allowedAPIKeyIDs, database.OptionalStringSlice{Set: tags.Set, Values: tags.Values}, groupIDs, proxyURL); err != nil {
+		if errors.Is(err, sql.ErrNoRows) {
 			writeError(c, http.StatusNotFound, "账号不存在")
 			return
 		}
@@ -690,32 +734,106 @@ func (h *Handler) UpdateAccountScheduler(c *gin.Context) {
 		return
 	}
 	if h.store != nil {
-		h.store.ApplyAccountSchedulerOverrides(id, nullableInt64Pointer(scoreBiasOverride), nullableInt64Pointer(baseConcurrencyOverride))
+		if scoreBiasOverride.Set || baseConcurrencyOverride.Set {
+			current := h.store.FindByID(id)
+			var score *int64
+			var concurrency *int64
+			if current != nil {
+				current.Mu().RLock()
+				if current.ScoreBiasOverride != nil {
+					value := *current.ScoreBiasOverride
+					score = &value
+				}
+				if current.BaseConcurrencyOverride != nil {
+					value := *current.BaseConcurrencyOverride
+					concurrency = &value
+				}
+				current.Mu().RUnlock()
+			}
+			if scoreBiasOverride.Set {
+				score = nullableInt64Pointer(scoreBiasOverride.Value)
+			}
+			if baseConcurrencyOverride.Set {
+				concurrency = nullableInt64Pointer(baseConcurrencyOverride.Value)
+			}
+			h.store.ApplyAccountSchedulerOverrides(id, score, concurrency)
+		}
 		if allowedAPIKeyIDs.Set {
 			h.store.ApplyAccountAllowedAPIKeys(id, allowedAPIKeyIDs.Values)
 		}
 	}
+	if h.store != nil && tags.Set {
+		h.store.ApplyAccountTags(id, tags.Values)
+	}
+	if h.store != nil && groupIDs.Set {
+		h.store.ApplyAccountGroups(id, groupIDs.Values)
+	}
+	if h.store != nil && req.ProxyURL != nil {
+		h.store.ApplyAccountProxyURL(id, *req.ProxyURL)
+	}
 
 	writeMessage(c, http.StatusOK, "账号调度配置已更新")
 }
 
-func parseOptionalIntegerField(raw json.RawMessage, field string, minValue, maxValue int64) (sql.NullInt64, error) {
-	if len(raw) == 0 || string(raw) == "null" {
-		return sql.NullInt64{}, nil
+type optionalStringSlice struct {
+	Set    bool
+	Values []string
+}
+
+func parseOptionalStringSliceField(raw json.RawMessage, field string) (optionalStringSlice, error) {
+	if len(raw) == 0 {
+		return optionalStringSlice{}, nil
+	}
+	if string(raw) == "null" {
+		return optionalStringSlice{Set: true, Values: []string{}}, nil
+	}
+	var values []string
+	if err := json.Unmarshal(raw, &values); err != nil {
+		return optionalStringSlice{}, fmt.Errorf("%s 必须是字符串数组或 null", field)
+	}
+	out := make([]string, 0, len(values))
+	seen := make(map[string]struct{}, len(values))
+	for _, value := range values {
+		clean := strings.TrimSpace(value)
+		if clean == "" {
+			continue
+		}
+		if utf8.RuneCountInString(clean) > 40 {
+			return optionalStringSlice{}, fmt.Errorf("%s 单个标签不能超过 40 字符", field)
+		}
+		key := strings.ToLower(clean)
+		if _, ok := seen[key]; ok {
+			continue
+		}
+		seen[key] = struct{}{}
+		out = append(out, clean)
+	}
+	if len(out) > 32 {
+		return optionalStringSlice{}, fmt.Errorf("%s 最多 32 个标签", field)
+	}
+	return optionalStringSlice{Set: true, Values: out}, nil
+}
+
+func parseOptionalIntegerField(raw json.RawMessage, field string, minValue, maxValue int64) (database.OptionalNullInt64, error) {
+	if len(raw) == 0 {
+		return database.OptionalNullInt64{}, nil
+	}
+	if string(raw) == "null" {
+		return database.OptionalNullInt64{Set: true}, nil
 	}
 
 	var number json.Number
 	if err := json.Unmarshal(raw, &number); err != nil {
-		return sql.NullInt64{}, fmt.Errorf("%s 必须是整数或 null", field)
+		return database.OptionalNullInt64{}, fmt.Errorf("%s 必须是整数或 null", field)
 	}
 	value, err := number.Int64()
 	if err != nil {
-		return sql.NullInt64{}, fmt.Errorf("%s 必须是整数或 null", field)
+		return database.OptionalNullInt64{}, fmt.Errorf("%s 必须是整数或 null", field)
 	}
 	if value < minValue || value > maxValue {
-		return sql.NullInt64{}, fmt.Errorf("%s 超出范围，必须在 %d..%d 之间", field, minValue, maxValue)
+		return database.OptionalNullInt64{}, fmt.Errorf("%s 超出范围，必须在 %d..%d 之间", field, minValue, maxValue)
 	}
-	return sql.NullInt64{Int64: value, Valid: true}, nil
+	return database.OptionalNullInt64{Set: true, Value: sql.NullInt64{Int64: value, Valid: true}}, nil
 }
 
 func parseOptionalIntegerSliceField(raw json.RawMessage, field string) (database.OptionalInt64Slice, error) {
@@ -1284,7 +1402,7 @@ func (h *Handler) FetchOpenAIResponsesModels(c *gin.Context) {
 	if req.AccountID > 0 && req.APIKey == "" {
 		row, err := h.db.GetAccountByID(c.Request.Context(), req.AccountID)
 		if err != nil {
-			if err == sql.ErrNoRows {
+			if errors.Is(err, sql.ErrNoRows) {
 				writeError(c, http.StatusNotFound, "账号不存在")
 				return
 			}
@@ -1350,7 +1468,7 @@ func (h *Handler) UpdateOpenAIResponsesAccount(c *gin.Context) {
 	defer cancel()
 	row, err := h.db.GetAccountByID(ctx, id)
 	if err != nil {
-		if err == sql.ErrNoRows {
+		if errors.Is(err, sql.ErrNoRows) {
 			writeError(c, http.StatusNotFound, "账号不存在")
 			return
 		}
@@ -1415,7 +1533,7 @@ func (h *Handler) UpdateOpenAIResponsesAccount(c *gin.Context) {
 	}
 
 	if err := h.db.UpdateOpenAIResponsesAccount(ctx, id, name, credentials, req.ProxyURL); err != nil {
-		if err == sql.ErrNoRows {
+		if errors.Is(err, sql.ErrNoRows) {
 			writeError(c, http.StatusNotFound, "账号不存在")
 			return
 		}
@@ -2195,6 +2313,10 @@ func (h *Handler) DeleteAccount(c *gin.Context) {
 
 	// 软删除：保留账号数据与事件记录，但从运行时池和 active 列表中移除。
 	if err := h.db.SoftDeleteAccount(ctx, id); err != nil {
+		if errors.Is(err, sql.ErrNoRows) {
+			writeError(c, http.StatusNotFound, "账号不存在")
+			return
+		}
 		writeError(c, http.StatusInternalServerError, "删除失败: "+err.Error())
 		return
 	}
@@ -2255,7 +2377,7 @@ func (h *Handler) ToggleAccountEnabled(c *gin.Context) {
 	defer cancel()
 
 	if err := h.db.SetAccountEnabled(ctx, id, *req.Enabled); err != nil {
-		if err == sql.ErrNoRows {
+		if errors.Is(err, sql.ErrNoRows) {
 			writeError(c, http.StatusNotFound, "账号不存在")
 			return
 		}
@@ -3008,12 +3130,13 @@ func (h *Handler) ListAPIKeys(c *gin.Context) {
 }
 
 type createKeyReq struct {
-	Name          string   `json:"name"`
-	Key           string   `json:"key"`
-	QuotaLimit    *float64 `json:"quota_limit"`
-	Quota         *float64 `json:"quota"`
-	ExpiresAt     string   `json:"expires_at"`
-	ExpiresInDays *int     `json:"expires_in_days"`
+	Name            string          `json:"name"`
+	Key             string          `json:"key"`
+	QuotaLimit      *float64        `json:"quota_limit"`
+	Quota           *float64        `json:"quota"`
+	ExpiresAt       string          `json:"expires_at"`
+	ExpiresInDays   *int            `json:"expires_in_days"`
+	AllowedGroupIDs json.RawMessage `json:"allowed_group_ids"`
 }
 
 // generateKey 生成随机 API Key
@@ -3069,6 +3192,11 @@ func (h *Handler) CreateAPIKey(c *gin.Context) {
 		writeError(c, http.StatusBadRequest, err.Error())
 		return
 	}
+	allowedGroupIDs, err := parseOptionalIntegerSliceField(req.AllowedGroupIDs, "allowed_group_ids")
+	if err != nil {
+		writeError(c, http.StatusBadRequest, err.Error())
+		return
+	}
 
 	key := req.Key
 	if key == "" {
@@ -3084,17 +3212,39 @@ func (h *Handler) CreateAPIKey(c *gin.Context) {
 
 	ctx, cancel := context.WithTimeout(c.Request.Context(), 5*time.Second)
 	defer cancel()
+	if allowedGroupIDs.Set {
+		missing, err := h.db.VerifyAccountGroupIDs(ctx, allowedGroupIDs.Values)
+		if err != nil {
+			writeInternalError(c, err)
+			return
+		}
+		if len(missing) > 0 {
+			values := make([]string, 0, len(missing))
+			for _, value := range missing {
+				values = append(values, strconv.FormatInt(value, 10))
+			}
+			writeError(c, http.StatusBadRequest, "allowed_group_ids 包含不存在的分组 ID: "+strings.Join(values, ", "))
+			return
+		}
+	}
 
 	id, err := h.db.InsertAPIKeyWithOptions(ctx, database.APIKeyInput{
-		Name:       req.Name,
-		Key:        key,
-		QuotaLimit: quotaLimit,
-		ExpiresAt:  expiresAt,
+		Name:            req.Name,
+		Key:             key,
+		QuotaLimit:      quotaLimit,
+		ExpiresAt:       expiresAt,
+		AllowedGroupIDs: allowedGroupIDs.Values,
 	})
 	if err != nil {
 		writeError(c, http.StatusInternalServerError, "创建失败: "+err.Error())
 		return
 	}
+	if allowedGroupIDs.Set {
+		values := dedupeInt64(allowedGroupIDs.Values)
+		if h.store != nil {
+			h.store.SetAPIKeyAllowedGroups(id, values)
+		}
+	}
 	h.invalidateAPIKeyRuntimeCaches(ctx, key)
 
 	// 记录安全审计日志
@@ -3106,15 +3256,166 @@ func (h *Handler) CreateAPIKey(c *gin.Context) {
 		expiresAtResponse = &formatted
 	}
 	c.JSON(http.StatusOK, createAPIKeyResponse{
-		ID:         id,
-		Key:        key,
-		Name:       req.Name,
-		QuotaLimit: quotaLimit,
-		QuotaUsed:  0,
-		ExpiresAt:  expiresAtResponse,
+		ID:              id,
+		Key:             key,
+		Name:            req.Name,
+		QuotaLimit:      quotaLimit,
+		QuotaUsed:       0,
+		ExpiresAt:       expiresAtResponse,
+		AllowedGroupIDs: dedupeInt64(allowedGroupIDs.Values),
 	})
 }
 
+type updateAPIKeyReq struct {
+	Name            *string         `json:"name"`
+	QuotaLimit      json.RawMessage `json:"quota_limit"`
+	Quota           json.RawMessage `json:"quota"`
+	ExpiresAt       json.RawMessage `json:"expires_at"`
+	ExpiresInDays   *int            `json:"expires_in_days"`
+	AllowedGroupIDs json.RawMessage `json:"allowed_group_ids"`
+}
+
+func (h *Handler) UpdateAPIKey(c *gin.Context) {
+	id, err := strconv.ParseInt(c.Param("id"), 10, 64)
+	if err != nil {
+		writeError(c, http.StatusBadRequest, "无效 ID")
+		return
+	}
+	var req updateAPIKeyReq
+	decoder := json.NewDecoder(c.Request.Body)
+	decoder.DisallowUnknownFields()
+	if err := decoder.Decode(&req); err != nil {
+		writeError(c, http.StatusBadRequest, "请求格式错误")
+		return
+	}
+	allowedGroupIDs, err := parseOptionalIntegerSliceField(req.AllowedGroupIDs, "allowed_group_ids")
+	if err != nil {
+		writeError(c, http.StatusBadRequest, err.Error())
+		return
+	}
+	quotaLimit, quotaLimitSet, err := parseOptionalAPIKeyQuota(req.QuotaLimit, req.Quota)
+	if err != nil {
+		writeError(c, http.StatusBadRequest, err.Error())
+		return
+	}
+	expiresAt, expiresAtSet, err := parseOptionalAPIKeyExpiration(req.ExpiresAt, req.ExpiresInDays)
+	if err != nil {
+		writeError(c, http.StatusBadRequest, err.Error())
+		return
+	}
+	ctx, cancel := context.WithTimeout(c.Request.Context(), 5*time.Second)
+	defer cancel()
+	row, err := h.db.GetAPIKeyByID(ctx, id)
+	if err != nil {
+		if errors.Is(err, sql.ErrNoRows) {
+			writeError(c, http.StatusNotFound, "API Key 不存在")
+			return
+		}
+		writeInternalError(c, err)
+		return
+	}
+	if req.Name != nil {
+		name := security.SanitizeInput(*req.Name)
+		if strings.TrimSpace(name) == "" {
+			writeError(c, http.StatusBadRequest, "名称不能为空")
+			return
+		}
+		if utf8.RuneCountInString(name) > 100 {
+			writeError(c, http.StatusBadRequest, "名称长度不能超过100字符")
+			return
+		}
+		if security.ContainsXSS(name) {
+			writeError(c, http.StatusBadRequest, "名称包含非法字符")
+			return
+		}
+		req.Name = &name
+	}
+	if quotaLimitSet {
+		if quotaLimit > 1000000000 {
+			writeError(c, http.StatusBadRequest, "额度限制不能超过 1000000000")
+			return
+		}
+	}
+	var allowedGroupValues []int64
+	if allowedGroupIDs.Set {
+		missing, err := h.db.VerifyAccountGroupIDs(ctx, allowedGroupIDs.Values)
+		if err != nil {
+			writeInternalError(c, err)
+			return
+		}
+		if len(missing) > 0 {
+			values := make([]string, 0, len(missing))
+			for _, value := range missing {
+				values = append(values, strconv.FormatInt(value, 10))
+			}
+			writeError(c, http.StatusBadRequest, "allowed_group_ids 包含不存在的分组 ID: "+strings.Join(values, ", "))
+			return
+		}
+		allowedGroupValues = dedupeInt64(allowedGroupIDs.Values)
+	}
+	update := database.APIKeyUpdate{
+		QuotaLimit:         quotaLimit,
+		QuotaLimitSet:      quotaLimitSet,
+		ExpiresAt:          expiresAt,
+		ExpiresAtSet:       expiresAtSet,
+		AllowedGroupIDs:    allowedGroupValues,
+		AllowedGroupIDsSet: allowedGroupIDs.Set,
+	}
+	if req.Name != nil {
+		update.Name = *req.Name
+		update.NameSet = true
+	}
+	if err := h.db.UpdateAPIKey(ctx, id, update); err != nil {
+		writeInternalError(c, err)
+		return
+	}
+	if allowedGroupIDs.Set && h.store != nil {
+		h.store.SetAPIKeyAllowedGroups(id, allowedGroupValues)
+	}
+	h.invalidateAPIKeyRuntimeCaches(ctx, row.Key)
+	writeMessage(c, http.StatusOK, "API Key 已更新")
+}
+
+func parseOptionalAPIKeyQuota(quotaLimitRaw, quotaRaw json.RawMessage) (float64, bool, error) {
+	raw := quotaLimitRaw
+	if len(raw) == 0 {
+		raw = quotaRaw
+	}
+	if len(raw) == 0 {
+		return 0, false, nil
+	}
+	if bytes.Equal(bytes.TrimSpace(raw), []byte("null")) {
+		return 0, true, nil
+	}
+	var value float64
+	if err := json.Unmarshal(raw, &value); err != nil {
+		return 0, true, fmt.Errorf("额度限制必须是数字")
+	}
+	if value < 0 {
+		return 0, true, fmt.Errorf("额度限制不能小于 0")
+	}
+	return value, true, nil
+}
+
+func parseOptionalAPIKeyExpiration(raw json.RawMessage, expiresInDays *int) (sql.NullTime, bool, error) {
+	if expiresInDays != nil {
+		expiresAt, err := parseAPIKeyExpiresAt("", expiresInDays)
+		return expiresAt, true, err
+	}
+	if len(raw) == 0 {
+		return sql.NullTime{}, false, nil
+	}
+	if bytes.Equal(bytes.TrimSpace(raw), []byte("null")) {
+		return sql.NullTime{}, true, nil
+	}
+	var value string
+	if err := json.Unmarshal(raw, &value); err != nil {
+		return sql.NullTime{}, true, fmt.Errorf("过期时间格式无效")
+	}
+	expiresAt, err := parseAPIKeyExpiresAt(value, nil)
+	return expiresAt, true, err
+}
+
 func parseAPIKeyExpiresAt(raw string, expiresInDays *int) (sql.NullTime, error) {
 	if expiresInDays != nil {
 		if *expiresInDays < 0 {
@@ -3172,6 +3473,9 @@ func (h *Handler) DeleteAPIKey(c *gin.Context) {
 		writeError(c, http.StatusInternalServerError, "删除失败: "+err.Error())
 		return
 	}
+	if h.store != nil {
+		h.store.SetAPIKeyAllowedGroups(id, nil)
+	}
 	h.invalidateAPIKeyRuntimeCaches(ctx, keyToInvalidate)
 	writeMessage(c, http.StatusOK, "已删除")
 }
@@ -3615,10 +3919,13 @@ func (h *Handler) UpdateSettings(c *gin.Context) {
 	}
 
 	if req.ProxyPoolEnabled != nil {
-		h.store.SetProxyPoolEnabled(*req.ProxyPoolEnabled)
 		if *req.ProxyPoolEnabled {
-			_ = h.store.ReloadProxyPool()
+			if err := h.store.ReloadProxyPool(); err != nil {
+				writeError(c, http.StatusInternalServerError, "代理池刷新失败: "+err.Error())
+				return
+			}
 		}
+		h.store.SetProxyPoolEnabled(*req.ProxyPoolEnabled)
 		log.Printf("设置已更新: proxy_pool_enabled = %t", *req.ProxyPoolEnabled)
 	}
 
@@ -4061,7 +4368,7 @@ func (h *Handler) GetAccountAuthJSON(c *gin.Context) {
 
 	row, err := h.db.GetAccountByID(ctx, id)
 	if err != nil {
-		if err == sql.ErrNoRows {
+		if errors.Is(err, sql.ErrNoRows) {
 			writeError(c, http.StatusNotFound, "账号不存在")
 			return
 		}
@@ -4434,12 +4741,13 @@ func (h *Handler) AddProxies(c *gin.Context) {
 
 	inserted, err := h.db.InsertProxies(ctx, cleaned, req.Label)
 	if err != nil {
-		writeError(c, http.StatusInternalServerError, "添加代理失败")
+		writeError(c, http.StatusInternalServerError, "添加代理失败: "+err.Error())
 		return
 	}
 
-	// 刷新代理池
-	_ = h.store.ReloadProxyPool()
+	if err := h.store.ReloadProxyPool(); err != nil {
+		log.Printf("代理已添加，但代理池刷新失败: %v", err)
+	}
 
 	c.JSON(http.StatusOK, gin.H{
 		"message":  fmt.Sprintf("成功添加 %d 个代理", inserted),
@@ -4460,11 +4768,17 @@ func (h *Handler) DeleteProxy(c *gin.Context) {
 	defer cancel()
 
 	if err := h.db.DeleteProxy(ctx, id); err != nil {
+		if errors.Is(err, sql.ErrNoRows) {
+			writeError(c, http.StatusNotFound, "代理不存在")
+			return
+		}
 		writeError(c, http.StatusInternalServerError, "删除代理失败")
 		return
 	}
 
-	_ = h.store.ReloadProxyPool()
+	if err := h.store.ReloadProxyPool(); err != nil {
+		log.Printf("代理已删除，但代理池刷新失败: %v", err)
+	}
 	c.JSON(http.StatusOK, gin.H{"message": "代理已删除"})
 }
 
@@ -4477,6 +4791,7 @@ func (h *Handler) UpdateProxy(c *gin.Context) {
 	}
 
 	var req struct {
+		URL     *string `json:"url"`
 		Label   *string `json:"label"`
 		Enabled *bool   `json:"enabled"`
 	}
@@ -4488,12 +4803,18 @@ func (h *Handler) UpdateProxy(c *gin.Context) {
 	ctx, cancel := context.WithTimeout(c.Request.Context(), 5*time.Second)
 	defer cancel()
 
-	if err := h.db.UpdateProxy(ctx, id, req.Label, req.Enabled); err != nil {
+	if err := h.db.UpdateProxy(ctx, id, req.URL, req.Label, req.Enabled); err != nil {
+		if errors.Is(err, sql.ErrNoRows) {
+			writeError(c, http.StatusNotFound, "代理不存在")
+			return
+		}
 		writeError(c, http.StatusInternalServerError, "更新代理失败")
 		return
 	}
 
-	_ = h.store.ReloadProxyPool()
+	if err := h.store.ReloadProxyPool(); err != nil {
+		log.Printf("代理已更新，但代理池刷新失败: %v", err)
+	}
 	c.JSON(http.StatusOK, gin.H{"message": "代理已更新"})
 }
 
@@ -4575,7 +4896,10 @@ func (h *Handler) TestProxy(c *gin.Context) {
 	if req.ID > 0 {
 		ctx, cancel := context.WithTimeout(c.Request.Context(), 3*time.Second)
 		defer cancel()
-		_ = h.db.UpdateProxyTestResult(ctx, req.ID, ip, location, latencyMs)
+		if err := h.db.UpdateProxyTestResult(ctx, req.ID, ip, location, latencyMs); err != nil {
+			c.JSON(http.StatusOK, gin.H{"success": false, "error": "代理测试结果保存失败: " + err.Error(), "latency_ms": latencyMs})
+			return
+		}
 	}
 
 	c.JSON(http.StatusOK, gin.H{
diff --git a/admin/handler_test.go b/admin/handler_test.go
index 43193237..346e1acf 100644
--- a/admin/handler_test.go
+++ b/admin/handler_test.go
@@ -12,8 +12,10 @@ import (
 	"path/filepath"
 	"strings"
 	"testing"
+	"time"
 
 	"github.com/codex2api/auth"
+	"github.com/codex2api/cache"
 	"github.com/codex2api/database"
 	"github.com/gin-gonic/gin"
 )
@@ -185,6 +187,124 @@ func TestCreateAPIKeyPersistsQuotaAndExpiration(t *testing.T) {
 	}
 }
 
+func TestUpdateAPIKeyPreservesOmittedFieldsAndUpdatesLimits(t *testing.T) {
+	gin.SetMode(gin.TestMode)
+
+	dbPath := filepath.Join(t.TempDir(), "codex2api.db")
+	db, err := database.New("sqlite", dbPath)
+	if err != nil {
+		t.Fatalf("database.New 返回错误: %v", err)
+	}
+	defer db.Close()
+
+	expiresAt := sql.NullTime{Time: time.Now().AddDate(0, 0, 3), Valid: true}
+	id, err := db.InsertAPIKeyWithOptions(context.Background(), database.APIKeyInput{
+		Name:       "Client A",
+		Key:        "sk-test-update-client-1234567890",
+		QuotaLimit: 0.25,
+		ExpiresAt:  expiresAt,
+	})
+	if err != nil {
+		t.Fatalf("InsertAPIKeyWithOptions 返回错误: %v", err)
+	}
+
+	handler := &Handler{db: db}
+	recorder := httptest.NewRecorder()
+	ctx, _ := gin.CreateTestContext(recorder)
+	ctx.Params = gin.Params{{Key: "id", Value: fmt.Sprintf("%d", id)}}
+	ctx.Request = httptest.NewRequest(http.MethodPatch, "/api/admin/keys/1", strings.NewReader(`{"name":"Client B"}`))
+	ctx.Request.Header.Set("Content-Type", "application/json")
+
+	handler.UpdateAPIKey(ctx)
+
+	if recorder.Code != http.StatusOK {
+		t.Fatalf("status = %d, want %d, body=%s", recorder.Code, http.StatusOK, recorder.Body.String())
+	}
+	row, err := db.GetAPIKeyByID(context.Background(), id)
+	if err != nil {
+		t.Fatalf("GetAPIKeyByID 返回错误: %v", err)
+	}
+	if row.Name != "Client B" || row.QuotaLimit != 0.25 || !row.ExpiresAt.Valid {
+		t.Fatalf("row = %#v, want renamed with quota/expiration preserved", row)
+	}
+
+	recorder = httptest.NewRecorder()
+	ctx, _ = gin.CreateTestContext(recorder)
+	ctx.Params = gin.Params{{Key: "id", Value: fmt.Sprintf("%d", id)}}
+	ctx.Request = httptest.NewRequest(http.MethodPatch, "/api/admin/keys/1", strings.NewReader(`{"quota_limit":0,"expires_at":null}`))
+	ctx.Request.Header.Set("Content-Type", "application/json")
+
+	handler.UpdateAPIKey(ctx)
+
+	if recorder.Code != http.StatusOK {
+		t.Fatalf("status = %d, want %d, body=%s", recorder.Code, http.StatusOK, recorder.Body.String())
+	}
+	row, err = db.GetAPIKeyByID(context.Background(), id)
+	if err != nil {
+		t.Fatalf("GetAPIKeyByID 返回错误: %v", err)
+	}
+	if row.Name != "Client B" || row.QuotaLimit != 0 || row.ExpiresAt.Valid {
+		t.Fatalf("row = %#v, want quota/expiration cleared with name preserved", row)
+	}
+}
+
+func TestUpdateAPIKeyRefreshesRuntimeStoreAndCache(t *testing.T) {
+	gin.SetMode(gin.TestMode)
+
+	dbPath := filepath.Join(t.TempDir(), "codex2api.db")
+	db, err := database.New("sqlite", dbPath)
+	if err != nil {
+		t.Fatalf("database.New 返回错误: %v", err)
+	}
+	defer db.Close()
+
+	ctx := context.Background()
+	groupID, err := db.CreateAccountGroup(ctx, "Team", "", "#2563eb", 0)
+	if err != nil {
+		t.Fatalf("CreateAccountGroup 返回错误: %v", err)
+	}
+	key := "sk-test-runtime-refresh-1234567890"
+	keyID, err := db.InsertAPIKey(ctx, "Client A", key)
+	if err != nil {
+		t.Fatalf("InsertAPIKey 返回错误: %v", err)
+	}
+	store := auth.NewStore(nil, nil, nil)
+	tc := cache.NewMemory(1)
+	handler := &Handler{db: db, store: store, cache: tc}
+	payload, err := json.Marshal(map[string]interface{}{
+		"id":         keyID,
+		"name":       "Client A",
+		"created_at": time.Now().UTC(),
+	})
+	if err != nil {
+		t.Fatalf("marshal runtime cache: %v", err)
+	}
+	if err := tc.SetRuntime(ctx, adminAPIKeyCacheNamespace, key, payload, time.Minute); err != nil {
+		t.Fatalf("SetRuntime api key: %v", err)
+	}
+
+	recorder := httptest.NewRecorder()
+	ginCtx, _ := gin.CreateTestContext(recorder)
+	ginCtx.Params = gin.Params{{Key: "id", Value: fmt.Sprintf("%d", keyID)}}
+	ginCtx.Request = httptest.NewRequest(http.MethodPatch, "/api/admin/keys/1", strings.NewReader(fmt.Sprintf(`{"allowed_group_ids":[%d]}`, groupID)))
+	ginCtx.Request.Header.Set("Content-Type", "application/json")
+
+	handler.UpdateAPIKey(ginCtx)
+
+	if recorder.Code != http.StatusOK {
+		t.Fatalf("status = %d, want %d, body=%s", recorder.Code, http.StatusOK, recorder.Body.String())
+	}
+	if got := store.GetAPIKeyAllowedGroups(keyID); len(got) != 1 || got[0] != groupID {
+		t.Fatalf("runtime store allowed groups = %v, want [%d]", got, groupID)
+	}
+	if _, ok, err := tc.GetRuntime(ctx, adminAPIKeyCacheNamespace, key); err != nil || ok {
+		t.Fatalf("runtime api key cache after update ok=%v err=%v, want miss", ok, err)
+	}
+	if _, ok, err := tc.GetRuntime(ctx, adminAPIKeyCountNamespace, "all"); err != nil || ok {
+		t.Fatalf("runtime api key count cache after update ok=%v err=%v, want miss", ok, err)
+	}
+}
+
 func TestGetAccountAuthJSONRejectsInvalidID(t *testing.T) {
 	gin.SetMode(gin.TestMode)
 
@@ -491,7 +611,7 @@ func TestUpdateAccountSchedulerResetsToAutoOnNull(t *testing.T) {
 	db := newTestAdminDB(t)
 	accountID := insertTestAccount(t, db)
 	ctx := context.Background()
-	if err := db.UpdateAccountSchedulerConfig(ctx, accountID, sql.NullInt64{Int64: 20, Valid: true}, sql.NullInt64{Int64: 4, Valid: true}, database.OptionalInt64Slice{}); err != nil {
+	if err := db.UpdateAccountSchedulerConfig(ctx, accountID, database.OptionalNullInt64{Set: true, Value: sql.NullInt64{Int64: 20, Valid: true}}, database.OptionalNullInt64{Set: true, Value: sql.NullInt64{Int64: 4, Valid: true}}, database.OptionalInt64Slice{}); err != nil {
 		t.Fatalf("seed scheduler config: %v", err)
 	}
 
@@ -523,6 +643,49 @@ func TestUpdateAccountSchedulerResetsToAutoOnNull(t *testing.T) {
 	}
 }
 
+func TestUpdateAccountSchedulerPartialMetadataPatchPreservesSchedulerConfig(t *testing.T) {
+	gin.SetMode(gin.TestMode)
+
+	db := newTestAdminDB(t)
+	accountID := insertTestAccount(t, db)
+	keyID := insertTestAPIKey(t, db, "Team A")
+	ctx := context.Background()
+	if err := db.UpdateAccountSchedulerConfig(ctx, accountID,
+		database.OptionalNullInt64{Set: true, Value: sql.NullInt64{Int64: 20, Valid: true}},
+		database.OptionalNullInt64{Set: true, Value: sql.NullInt64{Int64: 4, Valid: true}},
+		database.OptionalInt64Slice{Set: true, Values: []int64{keyID}},
+	); err != nil {
+		t.Fatalf("seed scheduler config: %v", err)
+	}
+
+	handler := &Handler{db: db}
+	recorder := httptest.NewRecorder()
+	ginCtx, _ := gin.CreateTestContext(recorder)
+	ginCtx.Params = gin.Params{{Key: "id", Value: fmt.Sprintf("%d", accountID)}}
+	ginCtx.Request = httptest.NewRequest(http.MethodPatch, fmt.Sprintf("/api/admin/accounts/%d/scheduler", accountID), strings.NewReader(`{"tags":["ops"]}`))
+	ginCtx.Request.Header.Set("Content-Type", "application/json")
+
+	handler.UpdateAccountScheduler(ginCtx)
+
+	if recorder.Code != http.StatusOK {
+		t.Fatalf("status = %d, want %d", recorder.Code, http.StatusOK)
+	}
+
+	rows, err := db.ListActive(context.Background())
+	if err != nil {
+		t.Fatalf("ListActive: %v", err)
+	}
+	if !rows[0].ScoreBiasOverride.Valid || rows[0].ScoreBiasOverride.Int64 != 20 {
+		t.Fatalf("score_bias_override = %+v, want 20", rows[0].ScoreBiasOverride)
+	}
+	if !rows[0].BaseConcurrencyOverride.Valid || rows[0].BaseConcurrencyOverride.Int64 != 4 {
+		t.Fatalf("base_concurrency_override = %+v, want 4", rows[0].BaseConcurrencyOverride)
+	}
+	if got := rows[0].GetCredentialInt64Slice("allowed_api_key_ids"); len(got) != 1 || got[0] != keyID {
+		t.Fatalf("allowed_api_key_ids = %v, want [%d]", got, keyID)
+	}
+}
+
 func TestUpdateAccountSchedulerClearsAllowedAPIKeyIDsOnNull(t *testing.T) {
 	gin.SetMode(gin.TestMode)
 
diff --git a/admin/image_studio.go b/admin/image_studio.go
index 40ee1c10..cafe9c1f 100644
--- a/admin/image_studio.go
+++ b/admin/image_studio.go
@@ -6,6 +6,7 @@ import (
 	"database/sql"
 	"encoding/base64"
 	"encoding/json"
+	"errors"
 	"fmt"
 	"image"
 	_ "image/gif"
@@ -137,7 +138,7 @@ func (h *Handler) UpdateImagePromptTemplate(c *gin.Context) {
 	ctx, cancel := context.WithTimeout(c.Request.Context(), 10*time.Second)
 	defer cancel()
 	existing, err := h.db.GetImagePromptTemplate(ctx, id)
-	if err == sql.ErrNoRows {
+	if errors.Is(err, sql.ErrNoRows) {
 		writeError(c, http.StatusNotFound, "模板不存在")
 		return
 	}
@@ -343,7 +344,7 @@ func (h *Handler) GetImageGenerationJob(c *gin.Context) {
 	ctx, cancel := context.WithTimeout(c.Request.Context(), 10*time.Second)
 	defer cancel()
 	job, err := h.db.GetImageGenerationJob(ctx, id)
-	if err == sql.ErrNoRows {
+	if errors.Is(err, sql.ErrNoRows) {
 		writeError(c, http.StatusNotFound, "任务不存在")
 		return
 	}
@@ -415,7 +416,7 @@ func (h *Handler) GetImageAssetFile(c *gin.Context) {
 	ctx, cancel := context.WithTimeout(c.Request.Context(), 10*time.Second)
 	defer cancel()
 	asset, err := h.db.GetImageAsset(ctx, id)
-	if err == sql.ErrNoRows {
+	if errors.Is(err, sql.ErrNoRows) {
 		writeError(c, http.StatusNotFound, "图片不存在")
 		return
 	}
@@ -449,7 +450,7 @@ func (h *Handler) GetSignedImageAssetFile(c *gin.Context) {
 	ctx, cancel := context.WithTimeout(c.Request.Context(), 10*time.Second)
 	defer cancel()
 	asset, err := h.db.GetImageAsset(ctx, id)
-	if err == sql.ErrNoRows {
+	if errors.Is(err, sql.ErrNoRows) {
 		writeError(c, http.StatusNotFound, "图片不存在")
 		return
 	}
@@ -603,7 +604,7 @@ func (h *Handler) DeleteImageAsset(c *gin.Context) {
 	ctx, cancel := context.WithTimeout(c.Request.Context(), 10*time.Second)
 	defer cancel()
 	asset, err := h.db.GetImageAsset(ctx, id)
-	if err == sql.ErrNoRows {
+	if errors.Is(err, sql.ErrNoRows) {
 		writeError(c, http.StatusNotFound, "图片不存在")
 		return
 	}
@@ -981,13 +982,13 @@ func (h *Handler) upscaleImageJobAsset(ctx context.Context, jobID int64, assetIn
 func (h *Handler) resolveImageJobAPIKey(ctx context.Context, id int64) (*database.APIKeyRow, error) {
 	if id > 0 {
 		key, err := h.db.GetAPIKeyByID(ctx, id)
-		if err == sql.ErrNoRows {
+		if errors.Is(err, sql.ErrNoRows) {
 			return nil, fmt.Errorf("API Key 不存在")
 		}
 		return key, err
 	}
 	key, err := h.db.FirstAPIKey(ctx)
-	if err == sql.ErrNoRows {
+	if errors.Is(err, sql.ErrNoRows) {
 		return nil, nil
 	}
 	return key, err
diff --git a/admin/responses.go b/admin/responses.go
index d4dfc994..69432b78 100644
--- a/admin/responses.go
+++ b/admin/responses.go
@@ -49,15 +49,16 @@ type apiKeysResponse struct {
 
 // MaskedAPIKeyRow API Key 响应（含脱敏和完整 key）
 type MaskedAPIKeyRow struct {
-	ID         int64   `json:"id"`
-	Name       string  `json:"name"`
-	Key        string  `json:"key"`
-	RawKey     string  `json:"raw_key"`
-	QuotaLimit float64 `json:"quota_limit"`
-	QuotaUsed  float64 `json:"quota_used"`
-	ExpiresAt  *string `json:"expires_at"`
-	Status     string  `json:"status"`
-	CreatedAt  string  `json:"created_at"`
+	ID              int64   `json:"id"`
+	Name            string  `json:"name"`
+	Key             string  `json:"key"`
+	RawKey          string  `json:"raw_key"`
+	QuotaLimit      float64 `json:"quota_limit"`
+	QuotaUsed       float64 `json:"quota_used"`
+	ExpiresAt       *string `json:"expires_at"`
+	AllowedGroupIDs []int64 `json:"allowed_group_ids"`
+	Status          string  `json:"status"`
+	CreatedAt       string  `json:"created_at"`
 }
 
 // NewMaskedAPIKeyRow 创建 API Key 响应
@@ -74,25 +75,27 @@ func NewMaskedAPIKeyRow(row *database.APIKeyRow) *MaskedAPIKeyRow {
 		status = "quota_exhausted"
 	}
 	return &MaskedAPIKeyRow{
-		ID:         row.ID,
-		Name:       row.Name,
-		Key:        security.MaskAPIKey(row.Key),
-		RawKey:     row.Key,
-		QuotaLimit: row.QuotaLimit,
-		QuotaUsed:  row.QuotaUsed,
-		ExpiresAt:  expiresAt,
-		Status:     status,
-		CreatedAt:  row.CreatedAt.Format(time.RFC3339),
+		ID:              row.ID,
+		Name:            row.Name,
+		Key:             security.MaskAPIKey(row.Key),
+		RawKey:          row.Key,
+		QuotaLimit:      row.QuotaLimit,
+		QuotaUsed:       row.QuotaUsed,
+		ExpiresAt:       expiresAt,
+		AllowedGroupIDs: append([]int64(nil), row.AllowedGroupIDs...),
+		Status:          status,
+		CreatedAt:       row.CreatedAt.Format(time.RFC3339),
 	}
 }
 
 type createAPIKeyResponse struct {
-	ID         int64   `json:"id"`
-	Key        string  `json:"key"`
-	Name       string  `json:"name"`
-	QuotaLimit float64 `json:"quota_limit"`
-	QuotaUsed  float64 `json:"quota_used"`
-	ExpiresAt  *string `json:"expires_at"`
+	ID              int64   `json:"id"`
+	Key             string  `json:"key"`
+	Name            string  `json:"name"`
+	QuotaLimit      float64 `json:"quota_limit"`
+	QuotaUsed       float64 `json:"quota_used"`
+	ExpiresAt       *string `json:"expires_at"`
+	AllowedGroupIDs []int64 `json:"allowed_group_ids"`
 }
 
 type opsOverviewResponse struct {
diff --git a/auth/fast_scheduler.go b/auth/fast_scheduler.go
index f496e054..992644c8 100644
--- a/auth/fast_scheduler.go
+++ b/auth/fast_scheduler.go
@@ -33,11 +33,12 @@ type fastSchedulerPosition struct {
 // 调度策略：按健康层级分桶，桶内按调度分排序后 round-robin。
 // 验证过的账号只作为同分 tie-breaker，避免历史请求量盖过额度快重置优先级。
 type FastScheduler struct {
-	mu        sync.RWMutex
-	baseLimit int64
-	buckets   map[AccountHealthTier][]fastSchedulerEntry
-	positions map[int64]fastSchedulerPosition
-	cursors   [3]atomic.Uint64
+	mu         sync.RWMutex
+	baseLimit  int64
+	buckets    map[AccountHealthTier][]fastSchedulerEntry
+	positions  map[int64]fastSchedulerPosition
+	cursors    [3]atomic.Uint64
+	groupCheck func(apiKeyID int64, account *Account) bool
 }
 
 func NewFastScheduler(baseLimit int64) *FastScheduler {
@@ -55,6 +56,15 @@ func NewFastScheduler(baseLimit int64) *FastScheduler {
 	}
 }
 
+func (s *FastScheduler) SetGroupCheck(check func(apiKeyID int64, account *Account) bool) {
+	if s == nil {
+		return
+	}
+	s.mu.Lock()
+	s.groupCheck = check
+	s.mu.Unlock()
+}
+
 // BuildFastScheduler 用当前 Store 快照构建一个独立 scheduler。
 // 该方法不会影响现有生产流量路径，只用于 POC/benchmark/灰度验证。
 func (s *Store) BuildFastScheduler() *FastScheduler {
@@ -226,6 +236,9 @@ func (s *FastScheduler) scanRangeLocked(expectedTier AccountHealthTier, rangeSta
 		if !entry.acc.AllowsAPIKey(apiKeyID) {
 			continue
 		}
+		if s.groupCheck != nil && !s.groupCheck(apiKeyID, entry.acc) {
+			continue
+		}
 		if filter != nil && !filter(entry.acc) {
 			continue
 		}
diff --git a/auth/fast_scheduler_test.go b/auth/fast_scheduler_test.go
index 44d846bd..915f5f2d 100644
--- a/auth/fast_scheduler_test.go
+++ b/auth/fast_scheduler_test.go
@@ -147,6 +147,29 @@ func TestStoreNextExcludingRespectsAPIKeyWhitelist(t *testing.T) {
 	}
 }
 
+func TestStoreNextExcludingRespectsAPIKeyAllowedGroups(t *testing.T) {
+	restricted := newFastSchedulerTestAccount(1, HealthTierHealthy, 120, 1)
+	restricted.GroupIDs = []int64{10}
+	fallback := newFastSchedulerTestAccount(2, HealthTierHealthy, 80, 1)
+	fallback.GroupIDs = []int64{20}
+
+	store := &Store{
+		accounts:       []*Account{restricted, fallback},
+		maxConcurrency: 1,
+	}
+	store.SetAPIKeyAllowedGroups(1, []int64{20})
+
+	got := store.NextExcluding(1, nil)
+	if got == nil {
+		t.Fatal("NextExcluding() returned nil")
+	}
+	defer store.Release(got)
+
+	if got.DBID != 2 {
+		t.Fatalf("NextExcluding() picked dbID=%d, want 2", got.DBID)
+	}
+}
+
 func TestStoreNextSkipsDispatchPausedAccount(t *testing.T) {
 	paused := newFastSchedulerTestAccount(1, HealthTierHealthy, 120, 1)
 	atomic.StoreInt32(&paused.DispatchPaused, 1)
diff --git a/auth/session_affinity_test.go b/auth/session_affinity_test.go
index c9c337d3..b69f93cb 100644
--- a/auth/session_affinity_test.go
+++ b/auth/session_affinity_test.go
@@ -316,3 +316,26 @@ func TestNextForSessionFallsBackWhenAPIKeyNotAllowed(t *testing.T) {
 		t.Fatalf("proxyURL = %q, want empty fallback proxy", proxyURL)
 	}
 }
+
+func TestNextForSessionFallsBackWhenAPIKeyGroupNotAllowed(t *testing.T) {
+	store := &Store{
+		accounts: []*Account{
+			{DBID: 1, AccessToken: "tok-1", GroupIDs: []int64{20}},
+			{DBID: 2, AccessToken: "tok-2", GroupIDs: []int64{10}},
+		},
+		maxConcurrency: 2,
+	}
+	store.SetAPIKeyAllowedGroups(1, []int64{20})
+	store.bindSessionAffinity("session-1", store.accounts[1], "http://proxy-2")
+
+	acc, proxyURL := store.NextForSession("session-1", 1, nil)
+	if acc == nil {
+		t.Fatal("expected fallback account")
+	}
+	if acc.DBID != 1 {
+		t.Fatalf("account DBID = %d, want %d", acc.DBID, 1)
+	}
+	if proxyURL != "" {
+		t.Fatalf("proxyURL = %q, want empty fallback proxy", proxyURL)
+	}
+}
diff --git a/auth/store.go b/auth/store.go
index e0973576..4420b744 100644
--- a/auth/store.go
+++ b/auth/store.go
@@ -112,6 +112,8 @@ type Account struct {
 	BaseConcurrencyOverride *int64
 	AllowedAPIKeyIDs        []int64
 	allowedAPIKeySet        map[int64]struct{}
+	Tags                    []string
+	GroupIDs                []int64
 	ModelCooldowns          map[string]ModelCooldown
 }
 
@@ -1452,6 +1454,9 @@ type Store struct {
 	testModel                 atomic.Value // 测试连接使用的模型（string）
 	db                        *database.DB
 	tokenCache                cache.TokenCache
+	apiKeyGroupsMu            sync.RWMutex
+	apiKeyAllowedGroups       map[int64][]int64
+	apiKeyAllowedGroupSets    map[int64]map[int64]struct{}
 	usageProbeMu              sync.RWMutex
 	usageProbe                func(context.Context, *Account) error
 	usageProbeBatch           atomic.Bool
@@ -1909,7 +1914,9 @@ func (s *Store) rebuildFastScheduler() {
 	if s == nil || !s.fastSchedulerEnabled.Load() {
 		return
 	}
-	s.fastScheduler.Store(s.BuildFastScheduler())
+	scheduler := s.BuildFastScheduler()
+	scheduler.SetGroupCheck(s.APIKeyAllowsAccount)
+	s.fastScheduler.Store(scheduler)
 }
 
 func (s *Store) recomputeAllAccountSchedulerState() {
@@ -2267,6 +2274,7 @@ func (s *Store) loadFromDB(ctx context.Context) error {
 		account.ScoreBiasOverride = reflectOptionalInt64Field(row, "ScoreBiasOverride")
 		account.BaseConcurrencyOverride = reflectOptionalInt64Field(row, "BaseConcurrencyOverride")
 		account.setAllowedAPIKeyIDsLocked(row.GetCredentialInt64Slice("allowed_api_key_ids"))
+		account.Tags = cloneStringSlice(row.Tags)
 		if row.Locked {
 			atomic.StoreInt32(&account.Locked, 1)
 		}
@@ -2349,6 +2357,14 @@ func (s *Store) loadFromDB(ctx context.Context) error {
 	}
 
 	log.Printf("从数据库加载了 %d 个账号", len(s.accounts))
+	if memberships, err := s.db.ListAccountGroupMemberships(ctx); err == nil {
+		s.ApplyAccountGroupMemberships(memberships)
+	} else {
+		log.Printf("加载账号分组失败: %v", err)
+	}
+	if err := s.LoadAPIKeyAllowedGroups(ctx); err != nil {
+		log.Printf("加载 API Key 分组限制失败: %v", err)
+	}
 	return nil
 }
 
@@ -2500,7 +2516,7 @@ func (s *Store) NextExcludingWithFilter(apiKeyID int64, exclude map[int64]bool,
 			if !acc.IsAvailable() {
 				continue
 			}
-			if !acc.AllowsAPIKey(apiKeyID) {
+			if !s.accountAllowedForAPIKey(acc, apiKeyID) {
 				continue
 			}
 			if filter != nil && !filter(acc) {
@@ -2694,7 +2710,7 @@ func (s *Store) takeByIDExcluding(id int64, apiKeyID int64, exclude map[int64]bo
 	if s.accountHasCachedCooldown(target) {
 		return nil
 	}
-	if !target.AllowsAPIKey(apiKeyID) {
+	if !s.accountAllowedForAPIKey(target, apiKeyID) {
 		return nil
 	}
 	if filter != nil && !filter(target) {
@@ -2746,7 +2762,7 @@ func (s *Store) hasDispatchCandidateWithFilter(apiKeyID int64, exclude map[int64
 		if s.accountHasCachedCooldown(acc) {
 			continue
 		}
-		if !acc.AllowsAPIKey(apiKeyID) {
+		if !s.accountAllowedForAPIKey(acc, apiKeyID) {
 			continue
 		}
 		if filter != nil && !filter(acc) {
@@ -3031,6 +3047,145 @@ func (s *Store) ApplyAccountAllowedAPIKeys(dbID int64, allowedAPIKeyIDs []int64)
 	return true
 }
 
+func (s *Store) ApplyAccountTags(dbID int64, tags []string) bool {
+	acc := s.FindByID(dbID)
+	if acc == nil {
+		return false
+	}
+	acc.mu.Lock()
+	acc.Tags = cloneStringSlice(tags)
+	acc.mu.Unlock()
+	return true
+}
+
+func (s *Store) ApplyAccountGroups(dbID int64, groupIDs []int64) bool {
+	acc := s.FindByID(dbID)
+	if acc == nil {
+		return false
+	}
+	acc.mu.Lock()
+	acc.GroupIDs = cloneInt64Slice(groupIDs)
+	acc.mu.Unlock()
+	s.fastSchedulerUpdate(acc)
+	return true
+}
+
+func (s *Store) ApplyAccountGroupMemberships(memberships map[int64][]int64) {
+	for _, acc := range s.Accounts() {
+		acc.mu.Lock()
+		acc.GroupIDs = cloneInt64Slice(memberships[acc.DBID])
+		acc.mu.Unlock()
+		s.fastSchedulerUpdate(acc)
+	}
+}
+
+func (s *Store) SetAPIKeyAllowedGroups(apiKeyID int64, groupIDs []int64) {
+	if apiKeyID <= 0 {
+		return
+	}
+	normalized := normalizeAllowedGroupIDs(groupIDs)
+	s.apiKeyGroupsMu.Lock()
+	if s.apiKeyAllowedGroups == nil {
+		s.apiKeyAllowedGroups = make(map[int64][]int64)
+	}
+	if s.apiKeyAllowedGroupSets == nil {
+		s.apiKeyAllowedGroupSets = make(map[int64]map[int64]struct{})
+	}
+	if len(normalized) == 0 {
+		delete(s.apiKeyAllowedGroups, apiKeyID)
+		delete(s.apiKeyAllowedGroupSets, apiKeyID)
+	} else {
+		s.apiKeyAllowedGroups[apiKeyID] = cloneInt64Slice(normalized)
+		s.apiKeyAllowedGroupSets[apiKeyID] = int64Set(normalized)
+	}
+	s.apiKeyGroupsMu.Unlock()
+	s.rebuildFastScheduler()
+}
+
+func (s *Store) GetAPIKeyAllowedGroups(apiKeyID int64) []int64 {
+	if apiKeyID <= 0 {
+		return nil
+	}
+	s.apiKeyGroupsMu.RLock()
+	defer s.apiKeyGroupsMu.RUnlock()
+	return cloneInt64Slice(s.apiKeyAllowedGroups[apiKeyID])
+}
+
+func (s *Store) LoadAPIKeyAllowedGroups(ctx context.Context) error {
+	if s == nil || s.db == nil {
+		return nil
+	}
+	keys, err := s.db.ListAPIKeys(ctx)
+	if err != nil {
+		return err
+	}
+	s.apiKeyGroupsMu.Lock()
+	s.apiKeyAllowedGroups = make(map[int64][]int64, len(keys))
+	s.apiKeyAllowedGroupSets = make(map[int64]map[int64]struct{}, len(keys))
+	for _, key := range keys {
+		normalized := normalizeAllowedGroupIDs(key.AllowedGroupIDs)
+		if len(normalized) > 0 {
+			s.apiKeyAllowedGroups[key.ID] = cloneInt64Slice(normalized)
+			s.apiKeyAllowedGroupSets[key.ID] = int64Set(normalized)
+		}
+	}
+	s.apiKeyGroupsMu.Unlock()
+	s.rebuildFastScheduler()
+	return nil
+}
+
+func (s *Store) APIKeyAllowsAccount(apiKeyID int64, acc *Account) bool {
+	if s == nil || apiKeyID <= 0 || acc == nil {
+		return true
+	}
+	s.apiKeyGroupsMu.RLock()
+	allowedSet := s.apiKeyAllowedGroupSets[apiKeyID]
+	s.apiKeyGroupsMu.RUnlock()
+	if len(allowedSet) == 0 {
+		return true
+	}
+	acc.mu.RLock()
+	defer acc.mu.RUnlock()
+	for _, id := range acc.GroupIDs {
+		if _, ok := allowedSet[id]; ok {
+			return true
+		}
+	}
+	return false
+}
+
+func normalizeAllowedGroupIDs(groupIDs []int64) []int64 {
+	out := make([]int64, 0, len(groupIDs))
+	seen := make(map[int64]struct{}, len(groupIDs))
+	for _, id := range groupIDs {
+		if id <= 0 {
+			continue
+		}
+		if _, ok := seen[id]; ok {
+			continue
+		}
+		seen[id] = struct{}{}
+		out = append(out, id)
+	}
+	sort.Slice(out, func(i, j int) bool { return out[i] < out[j] })
+	return out
+}
+
+func int64Set(values []int64) map[int64]struct{} {
+	out := make(map[int64]struct{}, len(values))
+	for _, value := range values {
+		out[value] = struct{}{}
+	}
+	return out
+}
+
+func (s *Store) accountAllowedForAPIKey(acc *Account, apiKeyID int64) bool {
+	if acc == nil {
+		return false
+	}
+	return acc.AllowsAPIKey(apiKeyID) && s.APIKeyAllowsAccount(apiKeyID, acc)
+}
+
 func (s *Store) ApplyOpenAIResponsesConfig(dbID int64, baseURL, apiKey string, models []string, proxyURL string) bool {
 	acc := s.FindByID(dbID)
 	if acc == nil {
@@ -3056,6 +3211,17 @@ func (s *Store) ApplyOpenAIResponsesConfig(dbID int64, baseURL, apiKey string, m
 	return true
 }
 
+func (s *Store) ApplyAccountProxyURL(dbID int64, proxyURL string) bool {
+	acc := s.FindByID(dbID)
+	if acc == nil {
+		return false
+	}
+	acc.mu.Lock()
+	acc.ProxyURL = strings.TrimSpace(proxyURL)
+	acc.mu.Unlock()
+	return true
+}
+
 func (s *Store) ApplyAccountEnabled(dbID int64, enabled bool) bool {
 	acc := s.FindByID(dbID)
 	if acc == nil {
diff --git a/database/account_groups.go b/database/account_groups.go
new file mode 100644
index 00000000..52d49c11
--- /dev/null
+++ b/database/account_groups.go
@@ -0,0 +1,446 @@
+package database
+
+import (
+	"context"
+	"database/sql"
+	"fmt"
+	"strings"
+	"time"
+)
+
+type AccountGroup struct {
+	ID          int64
+	Name        string
+	Description string
+	Color       string
+	SortOrder   int64
+	MemberCount int64
+	CreatedAt   time.Time
+	UpdatedAt   time.Time
+}
+
+func (db *DB) ListAccountGroups(ctx context.Context) ([]AccountGroup, error) {
+	rows, err := db.conn.QueryContext(ctx, `
+		SELECT g.id, g.name, g.description, g.color, g.sort_order,
+			COALESCE(COUNT(a.id), 0), g.created_at, g.updated_at
+		FROM account_groups g
+		LEFT JOIN account_group_members m ON m.group_id = g.id
+		LEFT JOIN accounts a ON a.id = m.account_id
+			AND a.status <> 'deleted'
+			AND COALESCE(a.error_message, '') <> 'deleted'
+		GROUP BY g.id, g.name, g.description, g.color, g.sort_order, g.created_at, g.updated_at
+		ORDER BY g.sort_order, g.name`)
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+	groups := make([]AccountGroup, 0)
+	for rows.Next() {
+		var g AccountGroup
+		var createdRaw, updatedRaw interface{}
+		if err := rows.Scan(&g.ID, &g.Name, &g.Description, &g.Color, &g.SortOrder, &g.MemberCount, &createdRaw, &updatedRaw); err != nil {
+			return nil, err
+		}
+		var parseErr error
+		g.CreatedAt, parseErr = parseDBTimeValue(createdRaw)
+		if parseErr != nil {
+			return nil, parseErr
+		}
+		g.UpdatedAt, parseErr = parseDBTimeValue(updatedRaw)
+		if parseErr != nil {
+			return nil, parseErr
+		}
+		groups = append(groups, g)
+	}
+	return groups, rows.Err()
+}
+
+func (db *DB) CreateAccountGroup(ctx context.Context, name, description, color string, sortOrder ...int64) (int64, error) {
+	name = strings.TrimSpace(name)
+	if name == "" {
+		return 0, fmt.Errorf("group name is required")
+	}
+	order := int64(0)
+	if len(sortOrder) > 0 {
+		order = sortOrder[0]
+	}
+	if db.isSQLite() {
+		res, err := db.conn.ExecContext(ctx, `INSERT INTO account_groups (name, description, color, sort_order) VALUES (?, ?, ?, ?)`, name, description, color, order)
+		if err != nil {
+			if isUniqueViolation(err) {
+				return 0, ErrDuplicateAccountGroupName
+			}
+			return 0, err
+		}
+		return res.LastInsertId()
+	}
+	var id int64
+	err := db.conn.QueryRowContext(ctx, `INSERT INTO account_groups (name, description, color, sort_order) VALUES ($1, $2, $3, $4) RETURNING id`, name, description, color, order).Scan(&id)
+	if err != nil {
+		if isUniqueViolation(err) {
+			return 0, ErrDuplicateAccountGroupName
+		}
+		return 0, err
+	}
+	return id, nil
+}
+
+func (db *DB) UpdateAccountGroup(ctx context.Context, id int64, name, description, color *string, sortOrder ...*int64) error {
+	sets := make([]string, 0, 5)
+	args := make([]interface{}, 0, 6)
+	add := func(col string, value interface{}) {
+		args = append(args, value)
+		ph := "?"
+		if !db.isSQLite() {
+			ph = fmt.Sprintf("$%d", len(args))
+		}
+		sets = append(sets, col+" = "+ph)
+	}
+	if name != nil {
+		clean := strings.TrimSpace(*name)
+		if clean == "" {
+			return fmt.Errorf("group name is required")
+		}
+		add("name", clean)
+	}
+	if description != nil {
+		add("description", *description)
+	}
+	if color != nil {
+		add("color", *color)
+	}
+	if len(sortOrder) > 0 && sortOrder[0] != nil {
+		add("sort_order", *sortOrder[0])
+	}
+	if len(sets) == 0 {
+		return nil
+	}
+	sets = append(sets, "updated_at = CURRENT_TIMESTAMP")
+	args = append(args, id)
+	ph := "?"
+	if !db.isSQLite() {
+		ph = fmt.Sprintf("$%d", len(args))
+	}
+	res, err := db.conn.ExecContext(ctx, "UPDATE account_groups SET "+strings.Join(sets, ", ")+" WHERE id = "+ph, args...)
+	if err != nil {
+		if isUniqueViolation(err) {
+			return ErrDuplicateAccountGroupName
+		}
+		return err
+	}
+	affected, err := res.RowsAffected()
+	if err != nil {
+		return err
+	}
+	if affected == 0 {
+		return sql.ErrNoRows
+	}
+	return nil
+}
+
+func (db *DB) DeleteAccountGroup(ctx context.Context, id int64, force ...bool) error {
+	allowMembers := len(force) > 0 && force[0]
+	tx, err := db.conn.BeginTx(ctx, nil)
+	if err != nil {
+		return err
+	}
+	defer tx.Rollback()
+	ph := "$1"
+	if db.isSQLite() {
+		ph = "?"
+	}
+	var count int64
+	memberCountQuery := `
+		SELECT COUNT(*)
+		FROM account_group_members m
+		JOIN accounts a ON a.id = m.account_id
+		WHERE m.group_id = ` + ph + ` AND a.status <> 'deleted' AND COALESCE(a.error_message, '') <> 'deleted'`
+	if err := tx.QueryRowContext(ctx, memberCountQuery, id).Scan(&count); err != nil {
+		return err
+	}
+	if count > 0 && !allowMembers {
+		return ErrAccountGroupNotEmpty
+	}
+	if _, err := tx.ExecContext(ctx, "DELETE FROM account_group_members WHERE group_id = "+ph, id); err != nil {
+		return err
+	}
+	if err := pruneDeletedGroupFromAPIKeyScopes(ctx, tx, db.isSQLite(), id); err != nil {
+		return err
+	}
+	res, err := tx.ExecContext(ctx, "DELETE FROM account_groups WHERE id = "+ph, id)
+	if err != nil {
+		return err
+	}
+	affected, err := res.RowsAffected()
+	if err != nil {
+		return err
+	}
+	if affected == 0 {
+		return sql.ErrNoRows
+	}
+	return tx.Commit()
+}
+
+func pruneDeletedGroupFromAPIKeyScopes(ctx context.Context, tx *sql.Tx, sqlite bool, groupID int64) error {
+	rows, err := tx.QueryContext(ctx, `SELECT id, COALESCE(allowed_group_ids, '[]') FROM api_keys`)
+	if err != nil {
+		return err
+	}
+	defer rows.Close()
+
+	type update struct {
+		id     int64
+		groups []int64
+	}
+	updates := make([]update, 0)
+	for rows.Next() {
+		var id int64
+		var raw interface{}
+		if err := rows.Scan(&id, &raw); err != nil {
+			return err
+		}
+		groups := decodeInt64SliceValue(raw)
+		if !containsInt64(groups, groupID) {
+			continue
+		}
+		nextGroups := removeInt64(groups, groupID)
+		// If the deleted group was the key's only allowed group, keep the stale
+		// ID instead of broadening the key into an unrestricted key.
+		if len(nextGroups) == 0 && len(groups) > 0 {
+			continue
+		}
+		updates = append(updates, update{id: id, groups: nextGroups})
+	}
+	if err := rows.Err(); err != nil {
+		return err
+	}
+
+	query := `UPDATE api_keys SET allowed_group_ids = $1::jsonb WHERE id = $2`
+	if sqlite {
+		query = `UPDATE api_keys SET allowed_group_ids = ? WHERE id = ?`
+	}
+	for _, item := range updates {
+		if _, err := tx.ExecContext(ctx, query, encodeInt64SliceJSON(item.groups), item.id); err != nil {
+			return err
+		}
+	}
+	return nil
+}
+
+func removeInt64(slice []int64, target int64) []int64 {
+	out := make([]int64, 0, len(slice))
+	for _, v := range slice {
+		if v != target {
+			out = append(out, v)
+		}
+	}
+	return out
+}
+
+func containsInt64(slice []int64, target int64) bool {
+	for _, v := range slice {
+		if v == target {
+			return true
+		}
+	}
+	return false
+}
+
+func (db *DB) SetAccountGroups(ctx context.Context, accountID int64, groupIDs []int64) error {
+	tx, err := db.conn.BeginTx(ctx, nil)
+	if err != nil {
+		return err
+	}
+	defer tx.Rollback()
+	ph := "$1"
+	insertQ := "INSERT INTO account_group_members (account_id, group_id) VALUES ($1, $2)"
+	if db.isSQLite() {
+		ph = "?"
+		insertQ = "INSERT INTO account_group_members (account_id, group_id) VALUES (?, ?)"
+	}
+	if _, err := tx.ExecContext(ctx, "DELETE FROM account_group_members WHERE account_id = "+ph, accountID); err != nil {
+		return err
+	}
+	seen := make(map[int64]struct{}, len(groupIDs))
+	for _, gid := range groupIDs {
+		if gid <= 0 {
+			continue
+		}
+		if _, ok := seen[gid]; ok {
+			continue
+		}
+		seen[gid] = struct{}{}
+		if _, err := tx.ExecContext(ctx, insertQ, accountID, gid); err != nil {
+			return err
+		}
+	}
+	return tx.Commit()
+}
+
+func (db *DB) GetAccountGroupIDs(ctx context.Context, accountID int64) ([]int64, error) {
+	query := "SELECT group_id FROM account_group_members WHERE account_id = $1 ORDER BY group_id"
+	if db.isSQLite() {
+		query = "SELECT group_id FROM account_group_members WHERE account_id = ? ORDER BY group_id"
+	}
+	rows, err := db.conn.QueryContext(ctx, query, accountID)
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+	var ids []int64
+	for rows.Next() {
+		var id int64
+		if err := rows.Scan(&id); err != nil {
+			return nil, err
+		}
+		ids = append(ids, id)
+	}
+	return ids, rows.Err()
+}
+
+func (db *DB) ListAccountIDsInGroups(ctx context.Context, groupIDs []int64) ([]int64, error) {
+	groupIDs = normalizeIDSlice(groupIDs)
+	if len(groupIDs) == 0 {
+		return nil, nil
+	}
+	placeholders := make([]string, len(groupIDs))
+	args := make([]interface{}, len(groupIDs))
+	for i, id := range groupIDs {
+		if db.isSQLite() {
+			placeholders[i] = "?"
+		} else {
+			placeholders[i] = fmt.Sprintf("$%d", i+1)
+		}
+		args[i] = id
+	}
+	rows, err := db.conn.QueryContext(ctx, fmt.Sprintf("SELECT DISTINCT account_id FROM account_group_members WHERE group_id IN (%s) ORDER BY account_id", strings.Join(placeholders, ",")), args...)
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+	var ids []int64
+	for rows.Next() {
+		var id int64
+		if err := rows.Scan(&id); err != nil {
+			return nil, err
+		}
+		ids = append(ids, id)
+	}
+	return ids, rows.Err()
+}
+
+func (db *DB) ListAccountGroupMemberships(ctx context.Context) (map[int64][]int64, error) {
+	rows, err := db.conn.QueryContext(ctx, `SELECT account_id, group_id FROM account_group_members ORDER BY account_id, group_id`)
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+	out := make(map[int64][]int64)
+	for rows.Next() {
+		var accountID, groupID int64
+		if err := rows.Scan(&accountID, &groupID); err != nil {
+			return nil, err
+		}
+		out[accountID] = append(out[accountID], groupID)
+	}
+	return out, rows.Err()
+}
+
+func (db *DB) VerifyAccountGroupIDs(ctx context.Context, ids []int64) ([]int64, error) {
+	ids = normalizeIDSlice(ids)
+	if len(ids) == 0 {
+		return nil, nil
+	}
+	placeholders := make([]string, len(ids))
+	args := make([]interface{}, len(ids))
+	for i, id := range ids {
+		if db.isSQLite() {
+			placeholders[i] = "?"
+		} else {
+			placeholders[i] = fmt.Sprintf("$%d", i+1)
+		}
+		args[i] = id
+	}
+	rows, err := db.conn.QueryContext(ctx, fmt.Sprintf("SELECT id FROM account_groups WHERE id IN (%s)", strings.Join(placeholders, ",")), args...)
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+	exists := make(map[int64]struct{}, len(ids))
+	for rows.Next() {
+		var id int64
+		if err := rows.Scan(&id); err != nil {
+			return nil, err
+		}
+		exists[id] = struct{}{}
+	}
+	missing := make([]int64, 0)
+	for _, id := range ids {
+		if _, ok := exists[id]; !ok {
+			missing = append(missing, id)
+		}
+	}
+	return missing, rows.Err()
+}
+
+func (db *DB) UpdateAccountTags(ctx context.Context, id int64, tags []string) error {
+	payload := encodeTagsJSON(tags)
+	query := `UPDATE accounts SET tags = $1, updated_at = CURRENT_TIMESTAMP WHERE id = $2`
+	if !db.isSQLite() {
+		query = `UPDATE accounts SET tags = $1::jsonb, updated_at = CURRENT_TIMESTAMP WHERE id = $2`
+	}
+	res, err := db.conn.ExecContext(ctx, query, payload, id)
+	if err != nil {
+		return err
+	}
+	affected, err := res.RowsAffected()
+	if err != nil {
+		return err
+	}
+	if affected == 0 {
+		return sql.ErrNoRows
+	}
+	return nil
+}
+
+func (db *DB) UpdateAccountProxyURL(ctx context.Context, id int64, proxyURL string) error {
+	res, err := db.conn.ExecContext(ctx, `UPDATE accounts SET proxy_url = $1, updated_at = CURRENT_TIMESTAMP WHERE id = $2`, strings.TrimSpace(proxyURL), id)
+	if err != nil {
+		return err
+	}
+	affected, err := res.RowsAffected()
+	if err != nil {
+		return err
+	}
+	if affected == 0 {
+		return sql.ErrNoRows
+	}
+	return nil
+}
+
+func normalizeIDSlice(ids []int64) []int64 {
+	seen := make(map[int64]struct{}, len(ids))
+	out := make([]int64, 0, len(ids))
+	for _, id := range ids {
+		if id <= 0 {
+			continue
+		}
+		if _, ok := seen[id]; ok {
+			continue
+		}
+		seen[id] = struct{}{}
+		out = append(out, id)
+	}
+	return out
+}
+
+var ErrDuplicateAccountGroupName = fmt.Errorf("account group name already exists")
+var ErrAccountGroupNotEmpty = fmt.Errorf("account group still has members")
+
+func isUniqueViolation(err error) bool {
+	if err == nil {
+		return false
+	}
+	msg := strings.ToLower(err.Error())
+	return strings.Contains(msg, "unique") || strings.Contains(msg, "duplicate key") || strings.Contains(msg, "23505")
+}
diff --git a/database/helpers.go b/database/helpers.go
index 3f3e3579..7e249ca2 100644
--- a/database/helpers.go
+++ b/database/helpers.go
@@ -359,3 +359,53 @@ func (db *DB) insertRowID(ctx context.Context, postgresQuery string, sqliteQuery
 	err := db.conn.QueryRowContext(ctx, postgresQuery, args...).Scan(&id)
 	return id, err
 }
+
+// decodeInt64SliceValue parses a JSON array of integers from a JSONB or TEXT column.
+func decodeInt64SliceValue(raw interface{}) []int64 {
+	data := bytesFromDBValue(raw)
+	if len(data) == 0 {
+		return nil
+	}
+	var out []int64
+	if err := json.Unmarshal(data, &out); err != nil {
+		return nil
+	}
+	return out
+}
+
+// encodeInt64SliceJSON marshals []int64 to JSON. Returns "[]" for nil/empty.
+func encodeInt64SliceJSON(values []int64) string {
+	if len(values) == 0 {
+		return "[]"
+	}
+	b, err := json.Marshal(values)
+	if err != nil {
+		return "[]"
+	}
+	return string(b)
+}
+
+// decodeTagsValue parses a tags column value (from JSONB on PG, TEXT on SQLite) into []string.
+func decodeTagsValue(raw interface{}) []string {
+	data := bytesFromDBValue(raw)
+	if len(data) == 0 {
+		return nil
+	}
+	var out []string
+	if err := json.Unmarshal(data, &out); err != nil {
+		return nil
+	}
+	return out
+}
+
+// encodeTagsJSON marshals a []string to JSON array string. Returns "[]" for nil/empty.
+func encodeTagsJSON(tags []string) string {
+	if len(tags) == 0 {
+		return "[]"
+	}
+	b, err := json.Marshal(tags)
+	if err != nil {
+		return "[]"
+	}
+	return string(b)
+}
diff --git a/database/image_studio.go b/database/image_studio.go
index c45fb7b1..ede2d6e2 100644
--- a/database/image_studio.go
+++ b/database/image_studio.go
@@ -586,8 +586,8 @@ func scanAPIKeyRow(scanner interface {
 	Scan(dest ...interface{}) error
 }) (*APIKeyRow, error) {
 	row := &APIKeyRow{}
-	var createdAtRaw, expiresAtRaw interface{}
-	if err := scanner.Scan(&row.ID, &row.Name, &row.Key, &createdAtRaw, &row.QuotaLimit, &row.QuotaUsed, &expiresAtRaw); err != nil {
+	var createdAtRaw, expiresAtRaw, allowedGroupsRaw interface{}
+	if err := scanner.Scan(&row.ID, &row.Name, &row.Key, &createdAtRaw, &row.QuotaLimit, &row.QuotaUsed, &expiresAtRaw, &allowedGroupsRaw); err != nil {
 		return nil, err
 	}
 	createdAt, err := parseDBTimeValue(createdAtRaw)
@@ -600,5 +600,6 @@ func scanAPIKeyRow(scanner interface {
 	}
 	row.CreatedAt = createdAt
 	row.ExpiresAt = expiresAt
+	row.AllowedGroupIDs = decodeInt64SliceValue(allowedGroupsRaw)
 	return row, nil
 }
diff --git a/database/models.go b/database/models.go
index e501db71..d198d723 100644
--- a/database/models.go
+++ b/database/models.go
@@ -3,6 +3,7 @@ package database
 import (
 	"context"
 	"database/sql"
+	"errors"
 	"time"
 )
 
@@ -134,7 +135,7 @@ func (db *DB) GetModelRegistrySyncState(ctx context.Context) (*ModelRegistrySync
 	err := db.conn.QueryRowContext(ctx, `
 		SELECT source_url, last_synced_at FROM model_registry_sync WHERE id = 1
 	`).Scan(&sourceURL, &syncedRaw)
-	if err == sql.ErrNoRows {
+	if errors.Is(err, sql.ErrNoRows) {
 		return nil, nil
 	}
 	if err != nil {
diff --git a/database/postgres.go b/database/postgres.go
index cdc7ad79..f34811c4 100644
--- a/database/postgres.go
+++ b/database/postgres.go
@@ -4,6 +4,7 @@ import (
 	"context"
 	"database/sql"
 	"encoding/json"
+	"errors"
 	"fmt"
 	"log"
 	"strings"
@@ -31,6 +32,7 @@ type AccountRow struct {
 	Locked                  bool
 	ScoreBiasOverride       sql.NullInt64
 	BaseConcurrencyOverride sql.NullInt64
+	Tags                    []string
 	CreatedAt               time.Time
 	UpdatedAt               time.Time
 }
@@ -48,6 +50,29 @@ type OptionalInt64Slice struct {
 	Values []int64
 }
 
+type OptionalStringSlice struct {
+	Set    bool
+	Values []string
+}
+
+type OptionalString struct {
+	Set   bool
+	Value string
+}
+
+type OptionalNullInt64 struct {
+	Set   bool
+	Value sql.NullInt64
+}
+
+// AccountCredentialIndex holds pre-built sets of existing credentials for fast import dedup.
+type AccountCredentialIndex struct {
+	RefreshTokens map[string]bool
+	AccessTokens  map[string]bool
+	SessionTokens map[string]bool
+	AccountIDs    map[string]bool
+}
+
 // GetCredential 从 credentials JSONB 获取字符串字段
 func (a *AccountRow) GetCredential(key string) string {
 	if a.Credentials == nil {
@@ -104,6 +129,7 @@ type DB struct {
 	usageLogBatchSize     int64
 	usageLogFlushInterval int64 // ns
 	logFlushNotify        chan struct{}
+	accountInsertMu       sync.Mutex
 }
 
 const (
@@ -120,6 +146,8 @@ const (
 	maxUsageLogFlushIntervalSeconds     = 300
 )
 
+var ErrDuplicateAccountCredential = errors.New("duplicate account credential")
+
 func NormalizeUsageLogMode(mode string) string {
 	switch strings.ToLower(strings.TrimSpace(mode)) {
 	case "", UsageLogModeFull:
@@ -281,6 +309,9 @@ func New(driver string, dsn string, schema ...string) (*DB, error) {
 				prompt_tokens   BIGINT NOT NULL DEFAULT 0,
 				completion_tokens BIGINT NOT NULL DEFAULT 0,
 				cached_tokens   BIGINT NOT NULL DEFAULT 0,
+				cache_hit_requests BIGINT NOT NULL DEFAULT 0,
+				first_token_ms_sum DOUBLE PRECISION NOT NULL DEFAULT 0,
+				first_token_samples BIGINT NOT NULL DEFAULT 0,
 				account_billed  DOUBLE PRECISION NOT NULL DEFAULT 0,
 				user_billed     DOUBLE PRECISION NOT NULL DEFAULT 0
 			)
@@ -313,6 +344,9 @@ func (db *DB) ensureUsageStatsBaselineBillingColumns(ctx context.Context) error
 		}{
 			{name: "account_billed", def: "REAL NOT NULL DEFAULT 0"},
 			{name: "user_billed", def: "REAL NOT NULL DEFAULT 0"},
+			{name: "cache_hit_requests", def: "INTEGER NOT NULL DEFAULT 0"},
+			{name: "first_token_ms_sum", def: "REAL NOT NULL DEFAULT 0"},
+			{name: "first_token_samples", def: "INTEGER NOT NULL DEFAULT 0"},
 		} {
 			if _, ok := columns[column.name]; ok {
 				continue
@@ -326,6 +360,9 @@ func (db *DB) ensureUsageStatsBaselineBillingColumns(ctx context.Context) error
 	_, err := db.conn.ExecContext(ctx, `
 		ALTER TABLE usage_stats_baseline ADD COLUMN IF NOT EXISTS account_billed DOUBLE PRECISION NOT NULL DEFAULT 0;
 		ALTER TABLE usage_stats_baseline ADD COLUMN IF NOT EXISTS user_billed DOUBLE PRECISION NOT NULL DEFAULT 0;
+		ALTER TABLE usage_stats_baseline ADD COLUMN IF NOT EXISTS cache_hit_requests BIGINT NOT NULL DEFAULT 0;
+		ALTER TABLE usage_stats_baseline ADD COLUMN IF NOT EXISTS first_token_ms_sum DOUBLE PRECISION NOT NULL DEFAULT 0;
+		ALTER TABLE usage_stats_baseline ADD COLUMN IF NOT EXISTS first_token_samples BIGINT NOT NULL DEFAULT 0;
 	`)
 	return err
 }
@@ -443,6 +480,30 @@ func (db *DB) migrate(ctx context.Context) error {
 	ALTER TABLE accounts ADD COLUMN IF NOT EXISTS image_quota_total INT NULL;
 	ALTER TABLE accounts ADD COLUMN IF NOT EXISTS today_used_count INT DEFAULT 0;
 	ALTER TABLE accounts ADD COLUMN IF NOT EXISTS image_quota_reset_at TIMESTAMPTZ NULL;
+	ALTER TABLE accounts ADD COLUMN IF NOT EXISTS tags JSONB DEFAULT '[]'::jsonb;
+
+	CREATE TABLE IF NOT EXISTS account_groups (
+		id          SERIAL PRIMARY KEY,
+		name        VARCHAR(80) UNIQUE NOT NULL,
+		description TEXT DEFAULT '',
+		color       VARCHAR(20) DEFAULT '',
+		sort_order  INT DEFAULT 0,
+		created_at  TIMESTAMPTZ DEFAULT NOW(),
+		updated_at  TIMESTAMPTZ DEFAULT NOW()
+	);
+	ALTER TABLE account_groups ADD COLUMN IF NOT EXISTS description TEXT DEFAULT '';
+	ALTER TABLE account_groups ADD COLUMN IF NOT EXISTS color VARCHAR(20) DEFAULT '';
+	ALTER TABLE account_groups ADD COLUMN IF NOT EXISTS sort_order INT DEFAULT 0;
+	ALTER TABLE account_groups ADD COLUMN IF NOT EXISTS created_at TIMESTAMPTZ DEFAULT NOW();
+	ALTER TABLE account_groups ADD COLUMN IF NOT EXISTS updated_at TIMESTAMPTZ DEFAULT NOW();
+
+	CREATE TABLE IF NOT EXISTS account_group_members (
+		account_id BIGINT NOT NULL,
+		group_id   BIGINT NOT NULL,
+		PRIMARY KEY (account_id, group_id)
+	);
+	CREATE INDEX IF NOT EXISTS idx_account_group_members_group ON account_group_members(group_id);
+	CREATE INDEX IF NOT EXISTS idx_account_group_members_account ON account_group_members(account_id);
 
 	UPDATE accounts
 	SET status = 'deleted',
@@ -519,6 +580,8 @@ func (db *DB) migrate(ctx context.Context) error {
 	ALTER TABLE api_keys ADD COLUMN IF NOT EXISTS expires_at TIMESTAMPTZ NULL;
 	CREATE INDEX IF NOT EXISTS idx_api_keys_expires_at ON api_keys(expires_at);
 
+	ALTER TABLE api_keys ADD COLUMN IF NOT EXISTS allowed_group_ids JSONB DEFAULT '[]'::jsonb;
+
 			CREATE TABLE IF NOT EXISTS system_settings (
 				id                 INTEGER PRIMARY KEY DEFAULT 1 CHECK (id = 1),
 				site_name          TEXT DEFAULT 'CodexProxy',
@@ -738,24 +801,37 @@ func (db *DB) migrate(ctx context.Context) error {
 
 // APIKeyRow API 密钥行
 type APIKeyRow struct {
-	ID         int64        `json:"id"`
-	Name       string       `json:"name"`
-	Key        string       `json:"key"`
-	QuotaLimit float64      `json:"quota_limit"`
-	QuotaUsed  float64      `json:"quota_used"`
-	ExpiresAt  sql.NullTime `json:"expires_at"`
-	CreatedAt  time.Time    `json:"created_at"`
+	ID              int64        `json:"id"`
+	Name            string       `json:"name"`
+	Key             string       `json:"key"`
+	QuotaLimit      float64      `json:"quota_limit"`
+	QuotaUsed       float64      `json:"quota_used"`
+	ExpiresAt       sql.NullTime `json:"expires_at"`
+	AllowedGroupIDs []int64      `json:"allowed_group_ids"`
+	CreatedAt       time.Time    `json:"created_at"`
 }
 
 type APIKeyInput struct {
-	Name       string
-	Key        string
-	QuotaLimit float64
-	QuotaUsed  float64
-	ExpiresAt  sql.NullTime
+	Name            string
+	Key             string
+	QuotaLimit      float64
+	QuotaUsed       float64
+	ExpiresAt       sql.NullTime
+	AllowedGroupIDs []int64
 }
 
-const apiKeySelectColumns = `id, name, key, created_at, COALESCE(quota_limit, 0), COALESCE(quota_used, 0), expires_at`
+type APIKeyUpdate struct {
+	Name               string
+	NameSet            bool
+	QuotaLimit         float64
+	QuotaLimitSet      bool
+	ExpiresAt          sql.NullTime
+	ExpiresAtSet       bool
+	AllowedGroupIDs    []int64
+	AllowedGroupIDsSet bool
+}
+
+const apiKeySelectColumns = `id, name, key, created_at, COALESCE(quota_limit, 0), COALESCE(quota_used, 0), expires_at, COALESCE(allowed_group_ids, '[]')`
 
 // ListAPIKeys 获取所有 API 密钥
 func (db *DB) ListAPIKeys(ctx context.Context) ([]*APIKeyRow, error) {
@@ -811,9 +887,9 @@ func (db *DB) InsertAPIKeyWithOptions(ctx context.Context, input APIKeyInput) (i
 		input.QuotaUsed = 0
 	}
 	return db.insertRowID(ctx,
-		`INSERT INTO api_keys (name, key, quota_limit, quota_used, expires_at) VALUES ($1, $2, $3, $4, $5) RETURNING id`,
-		`INSERT INTO api_keys (name, key, quota_limit, quota_used, expires_at) VALUES ($1, $2, $3, $4, $5)`,
-		input.Name, input.Key, input.QuotaLimit, input.QuotaUsed, nullableTimeArg(input.ExpiresAt),
+		`INSERT INTO api_keys (name, key, quota_limit, quota_used, expires_at, allowed_group_ids) VALUES ($1, $2, $3, $4, $5, $6::jsonb) RETURNING id`,
+		`INSERT INTO api_keys (name, key, quota_limit, quota_used, expires_at, allowed_group_ids) VALUES ($1, $2, $3, $4, $5, $6)`,
+		input.Name, input.Key, input.QuotaLimit, input.QuotaUsed, nullableTimeArg(input.ExpiresAt), encodeInt64SliceJSON(input.AllowedGroupIDs),
 	)
 }
 
@@ -833,7 +909,146 @@ func (row *APIKeyRow) IsQuotaExhausted() bool {
 }
 
 func (row *APIKeyRow) HasAccessConstraints() bool {
-	return row != nil && (row.QuotaLimit > 0 || row.ExpiresAt.Valid)
+	return row != nil && (row.QuotaLimit > 0 || row.ExpiresAt.Valid || len(row.AllowedGroupIDs) > 0)
+}
+
+// UpdateAPIKeyName updates the display name of an API key without changing the key value.
+func (db *DB) UpdateAPIKeyName(ctx context.Context, id int64, name string) error {
+	res, err := db.conn.ExecContext(ctx, `UPDATE api_keys SET name = $1 WHERE id = $2`, name, id)
+	if err != nil {
+		return err
+	}
+	affected, err := res.RowsAffected()
+	if err != nil {
+		return err
+	}
+	if affected == 0 {
+		return sql.ErrNoRows
+	}
+	return nil
+}
+
+// UpdateAPIKeyQuotaLimit updates the quota ceiling. A non-positive value clears the limit.
+func (db *DB) UpdateAPIKeyQuotaLimit(ctx context.Context, id int64, quotaLimit float64) error {
+	if quotaLimit < 0 {
+		quotaLimit = 0
+	}
+	res, err := db.conn.ExecContext(ctx, `UPDATE api_keys SET quota_limit = $1 WHERE id = $2`, quotaLimit, id)
+	if err != nil {
+		return err
+	}
+	affected, err := res.RowsAffected()
+	if err != nil {
+		return err
+	}
+	if affected == 0 {
+		return sql.ErrNoRows
+	}
+	return nil
+}
+
+// UpdateAPIKeyExpiresAt updates or clears the key expiration.
+func (db *DB) UpdateAPIKeyExpiresAt(ctx context.Context, id int64, expiresAt sql.NullTime) error {
+	res, err := db.conn.ExecContext(ctx, `UPDATE api_keys SET expires_at = $1 WHERE id = $2`, nullableTimeArg(expiresAt), id)
+	if err != nil {
+		return err
+	}
+	affected, err := res.RowsAffected()
+	if err != nil {
+		return err
+	}
+	if affected == 0 {
+		return sql.ErrNoRows
+	}
+	return nil
+}
+
+// UpdateAPIKeyAllowedGroups persists the allowed-group scope for an API key.
+// Empty slice clears the scope (key may schedule any account).
+func (db *DB) UpdateAPIKeyAllowedGroups(ctx context.Context, id int64, groupIDs []int64) error {
+	payload := encodeInt64SliceJSON(groupIDs)
+	var (
+		res sql.Result
+		err error
+	)
+	if db.isSQLite() {
+		res, err = db.conn.ExecContext(ctx, `UPDATE api_keys SET allowed_group_ids = $1 WHERE id = $2`, payload, id)
+	} else {
+		res, err = db.conn.ExecContext(ctx, `UPDATE api_keys SET allowed_group_ids = $1::jsonb WHERE id = $2`, payload, id)
+	}
+	if err != nil {
+		return err
+	}
+	affected, err := res.RowsAffected()
+	if err != nil {
+		return err
+	}
+	if affected == 0 {
+		return sql.ErrNoRows
+	}
+	return nil
+}
+
+func (db *DB) UpdateAPIKeyAllowedGroupIDs(ctx context.Context, id int64, groupIDs []int64) error {
+	return db.UpdateAPIKeyAllowedGroups(ctx, id, groupIDs)
+}
+
+// UpdateAPIKey applies multiple editable fields in one transaction.
+// Omitted fields keep their existing values.
+func (db *DB) UpdateAPIKey(ctx context.Context, id int64, update APIKeyUpdate) error {
+	sets := make([]string, 0, 4)
+	args := make([]interface{}, 0, 5)
+	placeholder := func() string {
+		args = append(args, nil)
+		if db.isSQLite() {
+			return "?"
+		}
+		return fmt.Sprintf("$%d", len(args))
+	}
+	setArg := func(value interface{}) string {
+		ph := placeholder()
+		args[len(args)-1] = value
+		return ph
+	}
+	if update.NameSet {
+		sets = append(sets, "name = "+setArg(update.Name))
+	}
+	if update.QuotaLimitSet {
+		quotaLimit := update.QuotaLimit
+		if quotaLimit < 0 {
+			quotaLimit = 0
+		}
+		sets = append(sets, "quota_limit = "+setArg(quotaLimit))
+	}
+	if update.ExpiresAtSet {
+		sets = append(sets, "expires_at = "+setArg(nullableTimeArg(update.ExpiresAt)))
+	}
+	if update.AllowedGroupIDsSet {
+		payload := encodeInt64SliceJSON(update.AllowedGroupIDs)
+		ph := setArg(payload)
+		if db.isSQLite() {
+			sets = append(sets, "allowed_group_ids = "+ph)
+		} else {
+			sets = append(sets, "allowed_group_ids = "+ph+"::jsonb")
+		}
+	}
+	if len(sets) == 0 {
+		return nil
+	}
+	idPlaceholder := placeholder()
+	args[len(args)-1] = id
+	res, err := db.conn.ExecContext(ctx, "UPDATE api_keys SET "+strings.Join(sets, ", ")+" WHERE id = "+idPlaceholder, args...)
+	if err != nil {
+		return err
+	}
+	affected, err := res.RowsAffected()
+	if err != nil {
+		return err
+	}
+	if affected == 0 {
+		return sql.ErrNoRows
+	}
+	return nil
 }
 
 // ==================== System Settings ====================
@@ -952,7 +1167,7 @@ func (db *DB) GetSystemSettings(ctx context.Context) (*SystemSettings, error) {
 		&s.UsageLogFlushIntervalSeconds, &s.StreamFlushPolicy, &s.StreamFlushIntervalMS,
 		&s.ImageStorageConfig,
 	)
-	if err == sql.ErrNoRows {
+	if errors.Is(err, sql.ErrNoRows) {
 		return nil, nil
 	}
 	s.SiteName = NormalizeSiteName(s.SiteName)
@@ -1141,9 +1356,12 @@ func (db *DB) InsertProxies(ctx context.Context, urls []string, label string) (i
 		if db.isSQLite() {
 			res, err := db.conn.ExecContext(ctx, `INSERT INTO proxies (url, label) VALUES ($1, $2) ON CONFLICT(url) DO NOTHING`, u, label)
 			if err != nil {
-				continue
+				return inserted, err
+			}
+			affected, err := res.RowsAffected()
+			if err != nil {
+				return inserted, err
 			}
-			affected, _ := res.RowsAffected()
 			if affected > 0 {
 				inserted++
 			}
@@ -1154,6 +1372,10 @@ func (db *DB) InsertProxies(ctx context.Context, urls []string, label string) (i
 			`INSERT INTO proxies (url, label) VALUES ($1, $2) ON CONFLICT (url) DO NOTHING RETURNING id`, u, label).Scan(&id)
 		if err == nil {
 			inserted++
+			continue
+		}
+		if !errors.Is(err, sql.ErrNoRows) {
+			return inserted, err
 		}
 	}
 	return inserted, nil
@@ -1161,8 +1383,18 @@ func (db *DB) InsertProxies(ctx context.Context, urls []string, label string) (i
 
 // DeleteProxy 删除单个代理
 func (db *DB) DeleteProxy(ctx context.Context, id int64) error {
-	_, err := db.conn.ExecContext(ctx, `DELETE FROM proxies WHERE id = $1`, id)
-	return err
+	res, err := db.conn.ExecContext(ctx, `DELETE FROM proxies WHERE id = $1`, id)
+	if err != nil {
+		return err
+	}
+	affected, err := res.RowsAffected()
+	if err != nil {
+		return err
+	}
+	if affected == 0 {
+		return sql.ErrNoRows
+	}
+	return nil
 }
 
 // DeleteProxies 批量删除代理
@@ -1187,16 +1419,43 @@ func (db *DB) DeleteProxies(ctx context.Context, ids []int64) (int, error) {
 }
 
 // UpdateProxy 更新代理
-func (db *DB) UpdateProxy(ctx context.Context, id int64, label *string, enabled *bool) error {
-	if label != nil {
-		if _, err := db.conn.ExecContext(ctx, `UPDATE proxies SET label = $1 WHERE id = $2`, *label, id); err != nil {
+func (db *DB) UpdateProxy(ctx context.Context, id int64, urlValue *string, label *string, enabled *bool) error {
+	if urlValue == nil && label == nil && enabled == nil {
+		var exists int
+		if err := db.conn.QueryRowContext(ctx, `SELECT 1 FROM proxies WHERE id = $1`, id).Scan(&exists); err != nil {
+			if errors.Is(err, sql.ErrNoRows) {
+				return sql.ErrNoRows
+			}
 			return err
 		}
+		return nil
+	}
+	assignments := make([]string, 0, 3)
+	args := make([]interface{}, 0, 4)
+	if urlValue != nil {
+		args = append(args, *urlValue)
+		assignments = append(assignments, fmt.Sprintf("url = $%d", len(args)))
+	}
+	if label != nil {
+		args = append(args, *label)
+		assignments = append(assignments, fmt.Sprintf("label = $%d", len(args)))
 	}
 	if enabled != nil {
-		if _, err := db.conn.ExecContext(ctx, `UPDATE proxies SET enabled = $1 WHERE id = $2`, *enabled, id); err != nil {
-			return err
-		}
+		args = append(args, *enabled)
+		assignments = append(assignments, fmt.Sprintf("enabled = $%d", len(args)))
+	}
+	args = append(args, id)
+	query := fmt.Sprintf("UPDATE proxies SET %s WHERE id = $%d", strings.Join(assignments, ", "), len(args))
+	res, err := db.conn.ExecContext(ctx, query, args...)
+	if err != nil {
+		return err
+	}
+	affected, err := res.RowsAffected()
+	if err != nil {
+		return err
+	}
+	if affected == 0 {
+		return sql.ErrNoRows
 	}
 	return nil
 }
@@ -1583,16 +1842,20 @@ type UsageStats struct {
 	TotalPrompt        int64               `json:"total_prompt_tokens"`
 	TotalCompletion    int64               `json:"total_completion_tokens"`
 	TotalCachedTokens  int64               `json:"total_cached_tokens"`
+	TotalCacheRate     float64             `json:"total_cache_rate"`
 	TotalAccountBilled float64             `json:"total_account_billed"`
 	TotalUserBilled    float64             `json:"total_user_billed"`
 	AvgAccountBilled   float64             `json:"avg_account_billed_per_request"`
 	AvgUserBilled      float64             `json:"avg_user_billed_per_request"`
 	TodayRequests      int64               `json:"today_requests"`
 	TodayTokens        int64               `json:"today_tokens"`
+	TodayCachedTokens  int64               `json:"today_cached_tokens"`
+	TodayCacheRate     float64             `json:"today_cache_rate"`
 	TodayAccountBilled float64             `json:"today_account_billed"`
 	TodayUserBilled    float64             `json:"today_user_billed"`
 	RPM                float64             `json:"rpm"`
 	TPM                float64             `json:"tpm"`
+	AvgFirstTokenMs    float64             `json:"avg_first_token_ms"`
 	AvgDurationMs      float64             `json:"avg_duration_ms"`
 	ErrorRate          float64             `json:"error_rate"`
 	FeatureStats       UsageFeatureStat    `json:"feature_stats"`
@@ -1668,14 +1931,16 @@ func (db *DB) GetUsageStats(ctx context.Context) (*UsageStats, error) {
 	SELECT
 		COUNT(*) AS today_requests,
 		COALESCE(SUM(total_tokens), 0) AS today_tokens,
-			COALESCE(SUM(prompt_tokens), 0) AS today_prompt,
-			COALESCE(SUM(completion_tokens), 0) AS today_completion,
-			COALESCE(SUM(cached_tokens), 0) AS today_cached,
-			COALESCE(SUM(account_billed), 0) AS today_account_billed,
-			COALESCE(SUM(user_billed), 0) AS today_user_billed,
-			COALESCE(SUM(CASE WHEN created_at >= $2 THEN 1 ELSE 0 END), 0) AS rpm,
-			COALESCE(SUM(CASE WHEN created_at >= $2 THEN total_tokens ELSE 0 END), 0) AS tpm,
-			COALESCE(AVG(duration_ms), 0) AS avg_duration_ms,
+		COALESCE(SUM(prompt_tokens), 0) AS today_prompt,
+		COALESCE(SUM(completion_tokens), 0) AS today_completion,
+		COALESCE(SUM(cached_tokens), 0) AS today_cached,
+		COALESCE(SUM(account_billed), 0) AS today_account_billed,
+		COALESCE(SUM(user_billed), 0) AS today_user_billed,
+		COALESCE(SUM(CASE WHEN created_at >= $2 THEN 1 ELSE 0 END), 0) AS rpm,
+		COALESCE(SUM(CASE WHEN created_at >= $2 THEN total_tokens ELSE 0 END), 0) AS tpm,
+		COALESCE(AVG(NULLIF(first_token_ms, 0)), 0) AS avg_first_token_ms,
+		COALESCE(AVG(duration_ms), 0) AS avg_duration_ms,
+		COALESCE(SUM(CASE WHEN cached_tokens > 0 THEN 1 ELSE 0 END), 0) AS today_cache_hit_requests,
 		COALESCE(SUM(CASE WHEN status_code >= 400 THEN 1 ELSE 0 END), 0) AS today_errors
 	FROM usage_logs
 	WHERE created_at >= $1
@@ -1683,12 +1948,15 @@ func (db *DB) GetUsageStats(ctx context.Context) (*UsageStats, error) {
 	`
 
 	var todayErrors int64
+	var todayCacheHitRequests int64
 	var todayPrompt, todayCompletion, todayCached int64
 	err := db.conn.QueryRowContext(ctx, todayQuery, todayStart, minuteAgo).Scan(
 		&stats.TodayRequests, &stats.TodayTokens, &todayPrompt, &todayCompletion, &todayCached,
 		&stats.TodayAccountBilled, &stats.TodayUserBilled,
 		&stats.RPM, &stats.TPM,
+		&stats.AvgFirstTokenMs,
 		&stats.AvgDurationMs,
+		&todayCacheHitRequests,
 		&todayErrors,
 	)
 	if err != nil {
@@ -1697,7 +1965,10 @@ func (db *DB) GetUsageStats(ctx context.Context) (*UsageStats, error) {
 
 	// 统计当前可见请求总数和计费总额（排除 499，保证与使用统计列表口径一致）
 	var visibleTotal int64
+	var visibleCacheHitRequests int64
+	var visibleFirstTokenSamples int64
 	var currentTokens, currentPrompt, currentCompletion, currentCached int64
+	var currentFirstTokenMsSum float64
 	var currentAccountBilled, currentUserBilled float64
 	_ = db.conn.QueryRowContext(ctx, `
 			SELECT
@@ -1706,27 +1977,41 @@ func (db *DB) GetUsageStats(ctx context.Context) (*UsageStats, error) {
 				COALESCE(SUM(prompt_tokens), 0),
 				COALESCE(SUM(completion_tokens), 0),
 				COALESCE(SUM(cached_tokens), 0),
+				COALESCE(SUM(CASE WHEN cached_tokens > 0 THEN 1 ELSE 0 END), 0),
+				COALESCE(SUM(CASE WHEN first_token_ms > 0 THEN first_token_ms ELSE 0 END), 0),
+				COALESCE(SUM(CASE WHEN first_token_ms > 0 THEN 1 ELSE 0 END), 0),
 				COALESCE(SUM(account_billed), 0),
 				COALESCE(SUM(user_billed), 0)
 			FROM usage_logs
 			WHERE status_code <> 499
-		`).Scan(&visibleTotal, &currentTokens, &currentPrompt, &currentCompletion, &currentCached, &currentAccountBilled, &currentUserBilled)
+		`).Scan(&visibleTotal, &currentTokens, &currentPrompt, &currentCompletion, &currentCached, &visibleCacheHitRequests, &currentFirstTokenMsSum, &visibleFirstTokenSamples, &currentAccountBilled, &currentUserBilled)
 
 	// 加上基线值（清空日志前保存的累计值）
-	var bReq, bTok, bPrompt, bComp, bCached int64
+	var bReq, bTok, bPrompt, bComp, bCached, bCacheHitRequests, bFirstTokenSamples int64
+	var bFirstTokenMsSum float64
 	var bAccountBilled, bUserBilled float64
 	_ = db.conn.QueryRowContext(ctx, `
-			SELECT total_requests, total_tokens, prompt_tokens, completion_tokens, cached_tokens, account_billed, user_billed
+			SELECT total_requests, total_tokens, prompt_tokens, completion_tokens, cached_tokens, cache_hit_requests, first_token_ms_sum, first_token_samples, account_billed, user_billed
 			FROM usage_stats_baseline WHERE id = 1
-		`).Scan(&bReq, &bTok, &bPrompt, &bComp, &bCached, &bAccountBilled, &bUserBilled)
+		`).Scan(&bReq, &bTok, &bPrompt, &bComp, &bCached, &bCacheHitRequests, &bFirstTokenMsSum, &bFirstTokenSamples, &bAccountBilled, &bUserBilled)
 
 	stats.TotalRequests = visibleTotal + bReq
 	stats.TotalTokens = currentTokens + bTok
 	stats.TotalPrompt = currentPrompt + bPrompt
 	stats.TotalCompletion = currentCompletion + bComp
 	stats.TotalCachedTokens = currentCached + bCached
+	stats.TodayCachedTokens = todayCached
 	stats.TotalAccountBilled = currentAccountBilled + bAccountBilled
 	stats.TotalUserBilled = currentUserBilled + bUserBilled
+	if stats.TodayRequests > 0 {
+		stats.TodayCacheRate = float64(todayCacheHitRequests) / float64(stats.TodayRequests) * 100
+	}
+	if stats.TotalRequests > 0 {
+		stats.TotalCacheRate = float64(visibleCacheHitRequests+bCacheHitRequests) / float64(stats.TotalRequests) * 100
+	}
+	if totalFirstTokenSamples := visibleFirstTokenSamples + bFirstTokenSamples; totalFirstTokenSamples > 0 {
+		stats.AvgFirstTokenMs = (currentFirstTokenMsSum + bFirstTokenMsSum) / float64(totalFirstTokenSamples)
+	}
 	if stats.TotalRequests > 0 {
 		stats.AvgAccountBilled = stats.TotalAccountBilled / float64(stats.TotalRequests)
 		stats.AvgUserBilled = stats.TotalUserBilled / float64(stats.TotalRequests)
@@ -2523,12 +2808,15 @@ func (db *DB) ClearUsageLogs(ctx context.Context) error {
 	_, err := db.conn.ExecContext(ctx, `
 		UPDATE usage_stats_baseline SET
 			total_requests  = total_requests  + COALESCE((SELECT COUNT(*) FROM usage_logs WHERE status_code <> 499), 0),
-				total_tokens    = total_tokens    + COALESCE((SELECT SUM(total_tokens) FROM usage_logs WHERE status_code <> 499), 0),
-				prompt_tokens   = prompt_tokens   + COALESCE((SELECT SUM(prompt_tokens) FROM usage_logs WHERE status_code <> 499), 0),
-				completion_tokens = completion_tokens + COALESCE((SELECT SUM(completion_tokens) FROM usage_logs WHERE status_code <> 499), 0),
-				cached_tokens   = cached_tokens   + COALESCE((SELECT SUM(cached_tokens) FROM usage_logs WHERE status_code <> 499), 0),
-				account_billed  = account_billed  + COALESCE((SELECT SUM(account_billed) FROM usage_logs WHERE status_code <> 499), 0),
-				user_billed     = user_billed     + COALESCE((SELECT SUM(user_billed) FROM usage_logs WHERE status_code <> 499), 0)
+			total_tokens    = total_tokens    + COALESCE((SELECT SUM(total_tokens) FROM usage_logs WHERE status_code <> 499), 0),
+			prompt_tokens   = prompt_tokens   + COALESCE((SELECT SUM(prompt_tokens) FROM usage_logs WHERE status_code <> 499), 0),
+			completion_tokens = completion_tokens + COALESCE((SELECT SUM(completion_tokens) FROM usage_logs WHERE status_code <> 499), 0),
+			cached_tokens   = cached_tokens   + COALESCE((SELECT SUM(cached_tokens) FROM usage_logs WHERE status_code <> 499), 0),
+			cache_hit_requests = cache_hit_requests + COALESCE((SELECT SUM(CASE WHEN cached_tokens > 0 THEN 1 ELSE 0 END) FROM usage_logs WHERE status_code <> 499), 0),
+			first_token_ms_sum = first_token_ms_sum + COALESCE((SELECT SUM(CASE WHEN first_token_ms > 0 THEN first_token_ms ELSE 0 END) FROM usage_logs WHERE status_code <> 499), 0),
+			first_token_samples = first_token_samples + COALESCE((SELECT SUM(CASE WHEN first_token_ms > 0 THEN 1 ELSE 0 END) FROM usage_logs WHERE status_code <> 499), 0),
+			account_billed  = account_billed  + COALESCE((SELECT SUM(account_billed) FROM usage_logs WHERE status_code <> 499), 0),
+			user_billed     = user_billed     + COALESCE((SELECT SUM(user_billed) FROM usage_logs WHERE status_code <> 499), 0)
 			WHERE id = 1
 		`)
 	if err != nil {
@@ -2645,7 +2933,7 @@ func (db *DB) GetAccountTimeRangeUsage(ctx context.Context, since time.Time) (ma
 // ListActive 获取所有未删除账号。
 func (db *DB) ListActive(ctx context.Context) ([]*AccountRow, error) {
 	query := `
-		SELECT id, name, platform, type, credentials, proxy_url, status, cooldown_reason, cooldown_until, error_message, COALESCE(enabled, true), COALESCE(locked, false), score_bias_override, base_concurrency_override, created_at, updated_at
+		SELECT id, name, platform, type, credentials, proxy_url, status, cooldown_reason, cooldown_until, error_message, COALESCE(enabled, true), COALESCE(locked, false), score_bias_override, base_concurrency_override, COALESCE(tags, '[]'), created_at, updated_at
 		FROM accounts
 		WHERE status <> 'deleted' AND COALESCE(error_message, '') <> 'deleted'
 		ORDER BY id
@@ -2661,6 +2949,7 @@ func (db *DB) ListActive(ctx context.Context) ([]*AccountRow, error) {
 		a := &AccountRow{}
 		var credRaw interface{}
 		var cooldownUntilRaw interface{}
+		var tagsRaw interface{}
 		var createdAtRaw interface{}
 		var updatedAtRaw interface{}
 		if err := rows.Scan(
@@ -2678,12 +2967,14 @@ func (db *DB) ListActive(ctx context.Context) ([]*AccountRow, error) {
 			&a.Locked,
 			&a.ScoreBiasOverride,
 			&a.BaseConcurrencyOverride,
+			&tagsRaw,
 			&createdAtRaw,
 			&updatedAtRaw,
 		); err != nil {
 			return nil, fmt.Errorf("扫描账号行失败: %w", err)
 		}
 		a.Credentials = decodeCredentials(credRaw)
+		a.Tags = decodeTagsValue(tagsRaw)
 		a.CooldownUntil, err = parseDBNullTimeValue(cooldownUntilRaw)
 		if err != nil {
 			return nil, fmt.Errorf("解析 cooldown_until 失败: %w", err)
@@ -2783,7 +3074,7 @@ func (db *DB) ClearExpiredModelCooldowns(ctx context.Context) error {
 // GetAccountByID 获取未删除账号的完整数据库行。
 func (db *DB) GetAccountByID(ctx context.Context, id int64) (*AccountRow, error) {
 	query := `
-		SELECT id, name, platform, type, credentials, proxy_url, status, cooldown_reason, cooldown_until, error_message, COALESCE(enabled, true), COALESCE(locked, false), score_bias_override, base_concurrency_override, created_at, updated_at
+		SELECT id, name, platform, type, credentials, proxy_url, status, cooldown_reason, cooldown_until, error_message, COALESCE(enabled, true), COALESCE(locked, false), score_bias_override, base_concurrency_override, COALESCE(tags, '[]'), created_at, updated_at
 		FROM accounts
 		WHERE id = $1 AND status <> 'deleted' AND COALESCE(error_message, '') <> 'deleted'
 		LIMIT 1
@@ -2791,6 +3082,7 @@ func (db *DB) GetAccountByID(ctx context.Context, id int64) (*AccountRow, error)
 	a := &AccountRow{}
 	var credRaw interface{}
 	var cooldownUntilRaw interface{}
+	var tagsRaw interface{}
 	var createdAtRaw interface{}
 	var updatedAtRaw interface{}
 	err := db.conn.QueryRowContext(ctx, query, id).Scan(
@@ -2808,16 +3100,18 @@ func (db *DB) GetAccountByID(ctx context.Context, id int64) (*AccountRow, error)
 		&a.Locked,
 		&a.ScoreBiasOverride,
 		&a.BaseConcurrencyOverride,
+		&tagsRaw,
 		&createdAtRaw,
 		&updatedAtRaw,
 	)
 	if err != nil {
-		if err == sql.ErrNoRows {
+		if errors.Is(err, sql.ErrNoRows) {
 			return nil, sql.ErrNoRows
 		}
 		return nil, fmt.Errorf("查询账号失败: %w", err)
 	}
 	a.Credentials = decodeCredentials(credRaw)
+	a.Tags = decodeTagsValue(tagsRaw)
 	a.CooldownUntil, err = parseDBNullTimeValue(cooldownUntilRaw)
 	if err != nil {
 		return nil, fmt.Errorf("解析 cooldown_until 失败: %w", err)
@@ -2834,35 +3128,65 @@ func (db *DB) GetAccountByID(ctx context.Context, id int64) (*AccountRow, error)
 }
 
 // UpdateAccountSchedulerConfig 更新账号调度配置。
-func (db *DB) UpdateAccountSchedulerConfig(ctx context.Context, id int64, scoreBiasOverride sql.NullInt64, baseConcurrencyOverride sql.NullInt64, allowedAPIKeyIDs OptionalInt64Slice) error {
+func (db *DB) UpdateAccountSchedulerConfig(ctx context.Context, id int64, scoreBiasOverride OptionalNullInt64, baseConcurrencyOverride OptionalNullInt64, allowedAPIKeyIDs OptionalInt64Slice) error {
 	tx, err := db.conn.BeginTx(ctx, nil)
 	if err != nil {
 		return err
 	}
 	defer tx.Rollback()
 
-	result, err := tx.ExecContext(ctx, `
-		UPDATE accounts
-		SET score_bias_override = $1,
-		    base_concurrency_override = $2,
-		    updated_at = CURRENT_TIMESTAMP
-		WHERE id = $3
-	`, nullableInt64Value(scoreBiasOverride), nullableInt64Value(baseConcurrencyOverride), id)
-	if err != nil {
-		return err
-	}
-	rowsAffected, err := result.RowsAffected()
-	if err != nil {
-		return err
-	}
-	if rowsAffected == 0 {
-		return sql.ErrNoRows
+	if scoreBiasOverride.Set || baseConcurrencyOverride.Set {
+		sets := make([]string, 0, 3)
+		args := make([]interface{}, 0, 3)
+		add := func(column string, value interface{}) {
+			args = append(args, value)
+			ph := "?"
+			if !db.isSQLite() {
+				ph = fmt.Sprintf("$%d", len(args))
+			}
+			sets = append(sets, column+" = "+ph)
+		}
+		if scoreBiasOverride.Set {
+			add("score_bias_override", nullableInt64Value(scoreBiasOverride.Value))
+		}
+		if baseConcurrencyOverride.Set {
+			add("base_concurrency_override", nullableInt64Value(baseConcurrencyOverride.Value))
+		}
+		sets = append(sets, "updated_at = CURRENT_TIMESTAMP")
+		args = append(args, id)
+		ph := "?"
+		if !db.isSQLite() {
+			ph = fmt.Sprintf("$%d", len(args))
+		}
+		result, err := tx.ExecContext(ctx, "UPDATE accounts SET "+strings.Join(sets, ", ")+" WHERE id = "+ph+" AND status <> 'deleted' AND COALESCE(error_message, '') <> 'deleted'", args...)
+		if err != nil {
+			return err
+		}
+		rowsAffected, err := result.RowsAffected()
+		if err != nil {
+			return err
+		}
+		if rowsAffected == 0 {
+			return sql.ErrNoRows
+		}
+	} else {
+		query := `SELECT 1 FROM accounts WHERE id = $1 AND status <> 'deleted' AND COALESCE(error_message, '') <> 'deleted'`
+		if db.isSQLite() {
+			query = `SELECT 1 FROM accounts WHERE id = ? AND status <> 'deleted' AND COALESCE(error_message, '') <> 'deleted'`
+		}
+		var exists int
+		if err := tx.QueryRowContext(ctx, query, id).Scan(&exists); err != nil {
+			if errors.Is(err, sql.ErrNoRows) {
+				return sql.ErrNoRows
+			}
+			return err
+		}
 	}
 
 	if allowedAPIKeyIDs.Set {
-		selectQuery := `SELECT credentials FROM accounts WHERE id = $1`
+		selectQuery := `SELECT credentials FROM accounts WHERE id = $1 AND status <> 'deleted' AND COALESCE(error_message, '') <> 'deleted'`
 		if db.isSQLite() {
-			selectQuery = `SELECT credentials FROM accounts WHERE id = ?`
+			selectQuery = `SELECT credentials FROM accounts WHERE id = ? AND status <> 'deleted' AND COALESCE(error_message, '') <> 'deleted'`
 		} else {
 			selectQuery += ` FOR UPDATE`
 		}
@@ -2892,6 +3216,101 @@ func (db *DB) UpdateAccountSchedulerConfig(ctx context.Context, id int64, scoreB
 	return tx.Commit()
 }
 
+// UpdateAccountSchedulerMetadata applies scheduler overrides and UI metadata in
+// one transaction. Runtime store updates should happen only after this returns.
+func (db *DB) UpdateAccountSchedulerMetadata(ctx context.Context, id int64, scoreBiasOverride OptionalNullInt64, baseConcurrencyOverride OptionalNullInt64, allowedAPIKeyIDs OptionalInt64Slice, tags OptionalStringSlice, groupIDs OptionalInt64Slice, proxyURL OptionalString) error {
+	tx, err := db.conn.BeginTx(ctx, nil)
+	if err != nil {
+		return err
+	}
+	defer tx.Rollback()
+
+	query := `SELECT credentials FROM accounts WHERE id = $1 AND status <> 'deleted' AND COALESCE(error_message, '') <> 'deleted'`
+	if db.isSQLite() {
+		query = `SELECT credentials FROM accounts WHERE id = ? AND status <> 'deleted' AND COALESCE(error_message, '') <> 'deleted'`
+	} else {
+		query += ` FOR UPDATE`
+	}
+	var currentRaw interface{}
+	if err := tx.QueryRowContext(ctx, query, id).Scan(&currentRaw); err != nil {
+		if errors.Is(err, sql.ErrNoRows) {
+			return sql.ErrNoRows
+		}
+		return err
+	}
+
+	sets := make([]string, 0, 6)
+	args := make([]interface{}, 0, 8)
+	add := func(column string, value interface{}) {
+		args = append(args, value)
+		ph := "?"
+		if !db.isSQLite() {
+			ph = fmt.Sprintf("$%d", len(args))
+		}
+		sets = append(sets, column+" = "+ph)
+	}
+	if scoreBiasOverride.Set {
+		add("score_bias_override", nullableInt64Value(scoreBiasOverride.Value))
+	}
+	if baseConcurrencyOverride.Set {
+		add("base_concurrency_override", nullableInt64Value(baseConcurrencyOverride.Value))
+	}
+	if tags.Set {
+		if db.isSQLite() {
+			add("tags", encodeTagsJSON(tags.Values))
+		} else {
+			args = append(args, encodeTagsJSON(tags.Values))
+			sets = append(sets, fmt.Sprintf("tags = $%d::jsonb", len(args)))
+		}
+	}
+	if proxyURL.Set {
+		add("proxy_url", strings.TrimSpace(proxyURL.Value))
+	}
+	if allowedAPIKeyIDs.Set {
+		merged := mergeCredentialMaps(decodeCredentials(currentRaw), map[string]interface{}{
+			"allowed_api_key_ids": normalizePositiveInt64Slice(allowedAPIKeyIDs.Values),
+		})
+		credJSON, err := json.Marshal(merged)
+		if err != nil {
+			return fmt.Errorf("序列化 credentials 失败: %w", err)
+		}
+		if db.isSQLite() {
+			add("credentials", credJSON)
+		} else {
+			args = append(args, credJSON)
+			sets = append(sets, fmt.Sprintf("credentials = $%d::jsonb", len(args)))
+		}
+	}
+	if len(sets) > 0 {
+		sets = append(sets, "updated_at = CURRENT_TIMESTAMP")
+		args = append(args, id)
+		ph := "?"
+		if !db.isSQLite() {
+			ph = fmt.Sprintf("$%d", len(args))
+		}
+		if _, err := tx.ExecContext(ctx, "UPDATE accounts SET "+strings.Join(sets, ", ")+" WHERE id = "+ph, args...); err != nil {
+			return err
+		}
+	}
+	if groupIDs.Set {
+		ph := "$1"
+		insertQ := "INSERT INTO account_group_members (account_id, group_id) VALUES ($1, $2)"
+		if db.isSQLite() {
+			ph = "?"
+			insertQ = "INSERT INTO account_group_members (account_id, group_id) VALUES (?, ?)"
+		}
+		if _, err := tx.ExecContext(ctx, "DELETE FROM account_group_members WHERE account_id = "+ph, id); err != nil {
+			return err
+		}
+		for _, gid := range normalizeIDSlice(groupIDs.Values) {
+			if _, err := tx.ExecContext(ctx, insertQ, id, gid); err != nil {
+				return err
+			}
+		}
+	}
+	return tx.Commit()
+}
+
 func nullableInt64Value(v sql.NullInt64) interface{} {
 	if !v.Valid {
 		return nil
@@ -3056,6 +3475,12 @@ func (db *DB) BatchSetError(ctx context.Context, ids []int64, errorMsg string) e
 
 // SoftDeleteAccount 将账号标记为 deleted，保留数据用于审计和事件追溯。
 func (db *DB) SoftDeleteAccount(ctx context.Context, id int64) error {
+	tx, err := db.conn.BeginTx(ctx, nil)
+	if err != nil {
+		return err
+	}
+	defer tx.Rollback()
+
 	query := `
 		UPDATE accounts
 		SET status = 'deleted',
@@ -3066,8 +3491,21 @@ func (db *DB) SoftDeleteAccount(ctx context.Context, id int64) error {
 			updated_at = CURRENT_TIMESTAMP
 		WHERE id = $1 AND status <> 'deleted'
 	`
-	_, err := db.conn.ExecContext(ctx, query, id)
-	return err
+	res, err := tx.ExecContext(ctx, query, id)
+	if err != nil {
+		return err
+	}
+	affected, err := res.RowsAffected()
+	if err != nil {
+		return err
+	}
+	if affected == 0 {
+		return sql.ErrNoRows
+	}
+	if _, err := tx.ExecContext(ctx, `DELETE FROM account_group_members WHERE account_id = $1`, id); err != nil {
+		return err
+	}
+	return tx.Commit()
 }
 
 // BatchSoftDeleteAccounts 批量软删除账号，分批执行避免 SQL 参数过多。
diff --git a/database/sqlite.go b/database/sqlite.go
index e681d376..5609e81f 100644
--- a/database/sqlite.go
+++ b/database/sqlite.go
@@ -80,9 +80,24 @@ func (db *DB) migrateSQLite(ctx context.Context) error {
 			key TEXT NOT NULL UNIQUE,
 			quota_limit REAL DEFAULT 0,
 			quota_used REAL DEFAULT 0,
+			allowed_group_ids TEXT DEFAULT '[]',
 			expires_at TIMESTAMP NULL,
 			created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
 		);`,
+		`CREATE TABLE IF NOT EXISTS account_groups (
+			id INTEGER PRIMARY KEY AUTOINCREMENT,
+			name TEXT UNIQUE NOT NULL,
+			description TEXT DEFAULT '',
+			color TEXT DEFAULT '',
+			sort_order INTEGER DEFAULT 0,
+			created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+			updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
+		);`,
+		`CREATE TABLE IF NOT EXISTS account_group_members (
+			account_id INTEGER NOT NULL,
+			group_id INTEGER NOT NULL,
+			PRIMARY KEY (account_id, group_id)
+		);`,
 		`CREATE TABLE IF NOT EXISTS account_model_cooldowns (
 			account_id INTEGER NOT NULL,
 			model TEXT NOT NULL,
@@ -240,6 +255,7 @@ func (db *DB) migrateSQLite(ctx context.Context) error {
 		{"accounts", "cooldown_until", "TIMESTAMP NULL"},
 		{"accounts", "score_bias_override", "INTEGER NULL"},
 		{"accounts", "base_concurrency_override", "INTEGER NULL"},
+		{"accounts", "tags", "TEXT DEFAULT '[]'"},
 		{"accounts", "deleted_at", "TIMESTAMP NULL"},
 		{"usage_logs", "input_tokens", "INTEGER DEFAULT 0"},
 		{"usage_logs", "output_tokens", "INTEGER DEFAULT 0"},
@@ -269,7 +285,13 @@ func (db *DB) migrateSQLite(ctx context.Context) error {
 		{"usage_logs", "error_message", "TEXT DEFAULT ''"},
 		{"api_keys", "quota_limit", "REAL DEFAULT 0"},
 		{"api_keys", "quota_used", "REAL DEFAULT 0"},
+		{"api_keys", "allowed_group_ids", "TEXT DEFAULT '[]'"},
 		{"api_keys", "expires_at", "TIMESTAMP NULL"},
+		{"account_groups", "description", "TEXT DEFAULT ''"},
+		{"account_groups", "color", "TEXT DEFAULT ''"},
+		{"account_groups", "sort_order", "INTEGER DEFAULT 0"},
+		{"account_groups", "created_at", "TIMESTAMP DEFAULT CURRENT_TIMESTAMP"},
+		{"account_groups", "updated_at", "TIMESTAMP DEFAULT CURRENT_TIMESTAMP"},
 		{"system_settings", "site_name", "TEXT DEFAULT 'CodexProxy'"},
 		{"system_settings", "site_logo", "TEXT DEFAULT ''"},
 		{"system_settings", "pg_max_conns", "INTEGER DEFAULT 50"},
@@ -334,6 +356,8 @@ func (db *DB) migrateSQLite(ctx context.Context) error {
 		`CREATE INDEX IF NOT EXISTS idx_usage_logs_account_status ON usage_logs(account_id, status_code);`,
 		`CREATE INDEX IF NOT EXISTS idx_usage_logs_api_key_created_at ON usage_logs(api_key_id, created_at);`,
 		`CREATE INDEX IF NOT EXISTS idx_api_keys_expires_at ON api_keys(expires_at);`,
+		`CREATE INDEX IF NOT EXISTS idx_account_group_members_group ON account_group_members(group_id);`,
+		`CREATE INDEX IF NOT EXISTS idx_account_group_members_account ON account_group_members(account_id);`,
 		`CREATE INDEX IF NOT EXISTS idx_account_model_cooldowns_reset_at ON account_model_cooldowns(reset_at);`,
 		`CREATE INDEX IF NOT EXISTS idx_account_events_created ON account_events(created_at);`,
 		`CREATE INDEX IF NOT EXISTS idx_account_events_type_created ON account_events(event_type, created_at);`,
@@ -679,7 +703,7 @@ func (db *DB) getUsageStatsSQLite(ctx context.Context) (*UsageStats, error) {
 
 	rows, err := db.conn.QueryContext(ctx, `
 			SELECT created_at, total_tokens, prompt_tokens, completion_tokens,
-			       cached_tokens, duration_ms, status_code, account_billed, user_billed
+			       cached_tokens, first_token_ms, duration_ms, status_code, account_billed, user_billed
 			FROM usage_logs
 			WHERE created_at >= $1 AND status_code <> 499
 		`, db.timeArg(todayStart))
@@ -691,15 +715,18 @@ func (db *DB) getUsageStatsSQLite(ctx context.Context) (*UsageStats, error) {
 	stats := &UsageStats{}
 	var todayErrors int64
 	var totalDuration float64
+	var totalFirstTokenMs float64
+	var totalFirstTokenSamples int64
+	var todayCacheHitRequests int64
 
 	for rows.Next() {
 		var createdRaw interface{}
 		var totalTokens, promptTokens, completionTokens, cachedTokens int64
-		var durationMs int
+		var firstTokenMs, durationMs int
 		var statusCode int
 		var accountBilled, userBilled float64
 		if err := rows.Scan(&createdRaw, &totalTokens, &promptTokens, &completionTokens,
-			&cachedTokens, &durationMs, &statusCode, &accountBilled, &userBilled); err != nil {
+			&cachedTokens, &firstTokenMs, &durationMs, &statusCode, &accountBilled, &userBilled); err != nil {
 			return nil, err
 		}
 		createdAt, err := parseDBTimeValue(createdRaw)
@@ -712,9 +739,17 @@ func (db *DB) getUsageStatsSQLite(ctx context.Context) (*UsageStats, error) {
 		stats.TotalPrompt += promptTokens
 		stats.TotalCompletion += completionTokens
 		stats.TotalCachedTokens += cachedTokens
+		stats.TodayCachedTokens += cachedTokens
 		stats.TodayAccountBilled += accountBilled
 		stats.TodayUserBilled += userBilled
 		totalDuration += float64(durationMs)
+		if firstTokenMs > 0 {
+			totalFirstTokenMs += float64(firstTokenMs)
+			totalFirstTokenSamples++
+		}
+		if cachedTokens > 0 {
+			todayCacheHitRequests++
+		}
 
 		if statusCode >= 400 {
 			todayErrors++
@@ -732,11 +767,16 @@ func (db *DB) getUsageStatsSQLite(ctx context.Context) (*UsageStats, error) {
 	if stats.TodayRequests > 0 {
 		stats.AvgDurationMs = totalDuration / float64(stats.TodayRequests)
 		stats.ErrorRate = float64(todayErrors) / float64(stats.TodayRequests) * 100
+		stats.TodayCacheRate = float64(todayCacheHitRequests) / float64(stats.TodayRequests) * 100
+	}
+	if totalFirstTokenSamples > 0 {
+		stats.AvgFirstTokenMs = totalFirstTokenMs / float64(totalFirstTokenSamples)
 	}
 
 	// 可见请求总数（排除 499）
-	var visibleTotal int64
+	var visibleTotal, visibleCacheHitRequests, visibleFirstTokenSamples int64
 	var currentTokens, currentPrompt, currentCompletion, currentCached int64
+	var currentFirstTokenMsSum float64
 	var currentAccountBilled, currentUserBilled float64
 	_ = db.conn.QueryRowContext(ctx, `
 		SELECT
@@ -745,19 +785,23 @@ func (db *DB) getUsageStatsSQLite(ctx context.Context) (*UsageStats, error) {
 			COALESCE(SUM(prompt_tokens), 0),
 			COALESCE(SUM(completion_tokens), 0),
 			COALESCE(SUM(cached_tokens), 0),
+			COALESCE(SUM(CASE WHEN cached_tokens > 0 THEN 1 ELSE 0 END), 0),
+			COALESCE(SUM(CASE WHEN first_token_ms > 0 THEN first_token_ms ELSE 0 END), 0),
+			COALESCE(SUM(CASE WHEN first_token_ms > 0 THEN 1 ELSE 0 END), 0),
 			COALESCE(SUM(account_billed), 0),
 			COALESCE(SUM(user_billed), 0)
 		FROM usage_logs
 		WHERE status_code <> 499
-	`).Scan(&visibleTotal, &currentTokens, &currentPrompt, &currentCompletion, &currentCached, &currentAccountBilled, &currentUserBilled)
+	`).Scan(&visibleTotal, &currentTokens, &currentPrompt, &currentCompletion, &currentCached, &visibleCacheHitRequests, &currentFirstTokenMsSum, &visibleFirstTokenSamples, &currentAccountBilled, &currentUserBilled)
 
 	// 基线值
-	var bReq, bTok, bPrompt, bComp, bCached int64
+	var bReq, bTok, bPrompt, bComp, bCached, bCacheHitRequests, bFirstTokenSamples int64
+	var bFirstTokenMsSum float64
 	var bAccountBilled, bUserBilled float64
 	_ = db.conn.QueryRowContext(ctx, `
-		SELECT total_requests, total_tokens, prompt_tokens, completion_tokens, cached_tokens, account_billed, user_billed
+		SELECT total_requests, total_tokens, prompt_tokens, completion_tokens, cached_tokens, cache_hit_requests, first_token_ms_sum, first_token_samples, account_billed, user_billed
 		FROM usage_stats_baseline WHERE id = 1
-	`).Scan(&bReq, &bTok, &bPrompt, &bComp, &bCached, &bAccountBilled, &bUserBilled)
+	`).Scan(&bReq, &bTok, &bPrompt, &bComp, &bCached, &bCacheHitRequests, &bFirstTokenMsSum, &bFirstTokenSamples, &bAccountBilled, &bUserBilled)
 
 	stats.TotalRequests = visibleTotal + bReq
 	stats.TotalTokens = currentTokens + bTok
@@ -766,6 +810,12 @@ func (db *DB) getUsageStatsSQLite(ctx context.Context) (*UsageStats, error) {
 	stats.TotalCachedTokens = currentCached + bCached
 	stats.TotalAccountBilled = currentAccountBilled + bAccountBilled
 	stats.TotalUserBilled = currentUserBilled + bUserBilled
+	if stats.TotalRequests > 0 {
+		stats.TotalCacheRate = float64(visibleCacheHitRequests+bCacheHitRequests) / float64(stats.TotalRequests) * 100
+	}
+	if visibleFirstTokenSamples+bFirstTokenSamples > 0 {
+		stats.AvgFirstTokenMs = (currentFirstTokenMsSum + bFirstTokenMsSum) / float64(visibleFirstTokenSamples+bFirstTokenSamples)
+	}
 	if stats.TotalRequests > 0 {
 		stats.AvgAccountBilled = stats.TotalAccountBilled / float64(stats.TotalRequests)
 		stats.AvgUserBilled = stats.TotalUserBilled / float64(stats.TotalRequests)
diff --git a/database/sqlite_test.go b/database/sqlite_test.go
index 9db2ea4a..46045fbf 100644
--- a/database/sqlite_test.go
+++ b/database/sqlite_test.go
@@ -107,6 +107,95 @@ func TestSQLiteAPIKeyQuotaAndExpiration(t *testing.T) {
 	}
 }
 
+func TestSQLiteUpdateAPIKeyPatchesSelectedFields(t *testing.T) {
+	dbPath := filepath.Join(t.TempDir(), "codex2api.db")
+
+	db, err := New("sqlite", dbPath)
+	if err != nil {
+		t.Fatalf("New(sqlite) 返回错误: %v", err)
+	}
+	defer db.Close()
+
+	ctx := context.Background()
+	key := "sk-test-patch-1234567890"
+	expiresAt := time.Now().Add(24 * time.Hour).UTC().Truncate(time.Second)
+	id, err := db.InsertAPIKeyWithOptions(ctx, APIKeyInput{
+		Name:            "patch",
+		Key:             key,
+		QuotaLimit:      1,
+		ExpiresAt:       sql.NullTime{Time: expiresAt, Valid: true},
+		AllowedGroupIDs: []int64{1, 2},
+	})
+	if err != nil {
+		t.Fatalf("InsertAPIKeyWithOptions 返回错误: %v", err)
+	}
+
+	if err := db.UpdateAPIKey(ctx, id, APIKeyUpdate{Name: "patched", NameSet: true}); err != nil {
+		t.Fatalf("UpdateAPIKey name 返回错误: %v", err)
+	}
+	row, err := db.GetAPIKeyByValue(ctx, key)
+	if err != nil {
+		t.Fatalf("GetAPIKeyByValue 返回错误: %v", err)
+	}
+	if row.Name != "patched" || row.QuotaLimit != 1 || !row.ExpiresAt.Valid || len(row.AllowedGroupIDs) != 2 {
+		t.Fatalf("row = %#v, want only name patched", row)
+	}
+
+	if err := db.UpdateAPIKey(ctx, id, APIKeyUpdate{
+		QuotaLimitSet:      true,
+		QuotaLimit:         0,
+		ExpiresAtSet:       true,
+		ExpiresAt:          sql.NullTime{},
+		AllowedGroupIDsSet: true,
+		AllowedGroupIDs:    []int64{3},
+	}); err != nil {
+		t.Fatalf("UpdateAPIKey limits 返回错误: %v", err)
+	}
+	row, err = db.GetAPIKeyByValue(ctx, key)
+	if err != nil {
+		t.Fatalf("GetAPIKeyByValue after patch 返回错误: %v", err)
+	}
+	if row.Name != "patched" || row.QuotaLimit != 0 || row.ExpiresAt.Valid || len(row.AllowedGroupIDs) != 1 || row.AllowedGroupIDs[0] != 3 {
+		t.Fatalf("row = %#v, want limits/groups patched", row)
+	}
+}
+
+func TestSQLiteMigratesLegacyAPIKeysColumns(t *testing.T) {
+	dbPath := filepath.Join(t.TempDir(), "legacy.db")
+	raw, err := sql.Open("sqlite", dbPath)
+	if err != nil {
+		t.Fatalf("open legacy sqlite: %v", err)
+	}
+	if _, err := raw.Exec(`CREATE TABLE api_keys (
+		id INTEGER PRIMARY KEY AUTOINCREMENT,
+		name TEXT NOT NULL,
+		key TEXT UNIQUE NOT NULL,
+		created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
+	)`); err != nil {
+		t.Fatalf("create legacy api_keys: %v", err)
+	}
+	if _, err := raw.Exec(`INSERT INTO api_keys (name, key) VALUES ('legacy', 'sk-legacy-1234567890')`); err != nil {
+		t.Fatalf("insert legacy api key: %v", err)
+	}
+	if err := raw.Close(); err != nil {
+		t.Fatalf("close legacy sqlite: %v", err)
+	}
+
+	db, err := New("sqlite", dbPath)
+	if err != nil {
+		t.Fatalf("New(sqlite legacy) 返回错误: %v", err)
+	}
+	defer db.Close()
+
+	row, err := db.GetAPIKeyByValue(context.Background(), "sk-legacy-1234567890")
+	if err != nil {
+		t.Fatalf("GetAPIKeyByValue legacy 返回错误: %v", err)
+	}
+	if row.Name != "legacy" || row.QuotaLimit != 0 || row.QuotaUsed != 0 || row.ExpiresAt.Valid || len(row.AllowedGroupIDs) != 0 {
+		t.Fatalf("legacy row = %#v, want migrated defaults", row)
+	}
+}
+
 func TestSQLiteAccountsEnabledDefaultsAndCanToggle(t *testing.T) {
 	dbPath := filepath.Join(t.TempDir(), "codex2api.db")
 
@@ -455,13 +544,71 @@ func TestSQLiteUsageStatsBaselineHasBillingColumns(t *testing.T) {
 		t.Fatalf("sqliteTableColumns 返回错误: %v", err)
 	}
 
-	for _, name := range []string{"account_billed", "user_billed"} {
+	for _, name := range []string{"account_billed", "user_billed", "cache_hit_requests", "first_token_ms_sum", "first_token_samples"} {
 		if _, ok := columns[name]; !ok {
 			t.Fatalf("usage_stats_baseline 缺少列 %q", name)
 		}
 	}
 }
 
+func TestDeleteAccountGroupDoesNotBroadenScopedAPIKey(t *testing.T) {
+	dbPath := filepath.Join(t.TempDir(), "codex2api.db")
+
+	db, err := New("sqlite", dbPath)
+	if err != nil {
+		t.Fatalf("New(sqlite) 返回错误: %v", err)
+	}
+	defer db.Close()
+
+	ctx := context.Background()
+	groupA, err := db.CreateAccountGroup(ctx, "Group A", "", "#2563eb", 0)
+	if err != nil {
+		t.Fatalf("CreateAccountGroup A 返回错误: %v", err)
+	}
+	groupB, err := db.CreateAccountGroup(ctx, "Group B", "", "#16a34a", 1)
+	if err != nil {
+		t.Fatalf("CreateAccountGroup B 返回错误: %v", err)
+	}
+
+	keyOnlyA, err := db.InsertAPIKeyWithOptions(ctx, APIKeyInput{
+		Name:            "Only A",
+		Key:             "sk-only-a-1234567890",
+		AllowedGroupIDs: []int64{groupA},
+	})
+	if err != nil {
+		t.Fatalf("InsertAPIKeyWithOptions only-a 返回错误: %v", err)
+	}
+	keyAB, err := db.InsertAPIKeyWithOptions(ctx, APIKeyInput{
+		Name:            "A and B",
+		Key:             "sk-a-b-1234567890",
+		AllowedGroupIDs: []int64{groupA, groupB},
+	})
+	if err != nil {
+		t.Fatalf("InsertAPIKeyWithOptions a-b 返回错误: %v", err)
+	}
+
+	if err := db.DeleteAccountGroup(ctx, groupA, true); err != nil {
+		t.Fatalf("DeleteAccountGroup 返回错误: %v", err)
+	}
+
+	rows, err := db.ListAPIKeys(ctx)
+	if err != nil {
+		t.Fatalf("ListAPIKeys 返回错误: %v", err)
+	}
+
+	got := make(map[int64][]int64)
+	for _, row := range rows {
+		got[row.ID] = row.AllowedGroupIDs
+	}
+
+	if actual := got[keyOnlyA]; len(actual) != 1 || actual[0] != groupA {
+		t.Fatalf("keyOnlyA allowed groups = %v, want stale [%d] to preserve deny-all semantics", actual, groupA)
+	}
+	if actual := got[keyAB]; len(actual) != 1 || actual[0] != groupB {
+		t.Fatalf("keyAB allowed groups = %v, want [%d]", actual, groupB)
+	}
+}
+
 func TestUsageLogsPersistEffectiveModel(t *testing.T) {
 	dbPath := filepath.Join(t.TempDir(), "codex2api.db")
 
@@ -709,6 +856,7 @@ func TestUsageStatsIncludeCodex2APIBreakdowns(t *testing.T) {
 			Stream:          true,
 			ServiceTier:     "fast",
 			CachedTokens:    128,
+			FirstTokenMs:    820,
 			ReasoningTokens: 32,
 			APIKeyID:        7,
 			APIKeyName:      "Claude Code",
@@ -764,6 +912,18 @@ func TestUsageStatsIncludeCodex2APIBreakdowns(t *testing.T) {
 	if stats.TotalRequests != 3 {
 		t.Fatalf("TotalRequests = %d, want 3", stats.TotalRequests)
 	}
+	if stats.TodayCachedTokens != 128 {
+		t.Fatalf("TodayCachedTokens = %d, want 128", stats.TodayCachedTokens)
+	}
+	if stats.TodayCacheRate < 33.3 || stats.TodayCacheRate > 33.4 {
+		t.Fatalf("TodayCacheRate = %.4f, want about 33.33", stats.TodayCacheRate)
+	}
+	if stats.TotalCacheRate < 33.3 || stats.TotalCacheRate > 33.4 {
+		t.Fatalf("TotalCacheRate = %.4f, want about 33.33", stats.TotalCacheRate)
+	}
+	if stats.AvgFirstTokenMs != 820 {
+		t.Fatalf("AvgFirstTokenMs = %.2f, want 820", stats.AvgFirstTokenMs)
+	}
 	features := stats.FeatureStats
 	if features.StreamRequests != 1 || features.SyncRequests != 2 || features.FastRequests != 1 ||
 		features.CacheHitRequests != 1 || features.ReasoningRequests != 1 || features.ImageRequests != 1 ||
@@ -791,6 +951,64 @@ func TestUsageStatsIncludeCodex2APIBreakdowns(t *testing.T) {
 	}
 }
 
+func TestUsageStatsBaselinePreservesCacheRateAndFirstTokenAfterClear(t *testing.T) {
+	dbPath := filepath.Join(t.TempDir(), "codex2api.db")
+
+	db, err := New("sqlite", dbPath)
+	if err != nil {
+		t.Fatalf("New(sqlite) 返回错误: %v", err)
+	}
+	defer db.Close()
+
+	ctx := context.Background()
+	for _, usageLog := range []*UsageLogInput{
+		{
+			AccountID:    1,
+			Endpoint:     "/v1/responses",
+			Model:        "gpt-5.5",
+			StatusCode:   200,
+			InputTokens:  100,
+			OutputTokens: 50,
+			TotalTokens:  150,
+			CachedTokens: 32,
+			FirstTokenMs: 600,
+		},
+		{
+			AccountID:    1,
+			Endpoint:     "/v1/responses",
+			Model:        "gpt-5.5",
+			StatusCode:   200,
+			InputTokens:  80,
+			OutputTokens: 20,
+			TotalTokens:  100,
+			FirstTokenMs: 300,
+		},
+	} {
+		if err := db.InsertUsageLog(ctx, usageLog); err != nil {
+			t.Fatalf("InsertUsageLog 返回错误: %v", err)
+		}
+	}
+	db.flushLogs()
+
+	if err := db.ClearUsageLogs(ctx); err != nil {
+		t.Fatalf("ClearUsageLogs 返回错误: %v", err)
+	}
+
+	stats, err := db.GetUsageStats(ctx)
+	if err != nil {
+		t.Fatalf("GetUsageStats 返回错误: %v", err)
+	}
+	if stats.TotalRequests != 2 {
+		t.Fatalf("TotalRequests = %d, want 2", stats.TotalRequests)
+	}
+	if stats.TotalCacheRate < 49.9 || stats.TotalCacheRate > 50.1 {
+		t.Fatalf("TotalCacheRate = %.4f, want about 50.00", stats.TotalCacheRate)
+	}
+	if stats.AvgFirstTokenMs < 449.9 || stats.AvgFirstTokenMs > 450.1 {
+		t.Fatalf("AvgFirstTokenMs = %.4f, want about 450.00", stats.AvgFirstTokenMs)
+	}
+}
+
 func TestSoftDeleteAccountMarksDeletedStatus(t *testing.T) {
 	dbPath := filepath.Join(t.TempDir(), "codex2api.db")
 
diff --git a/docs/API.md b/docs/API.md
index 1bf1839c..b0d8097f 100644
--- a/docs/API.md
+++ b/docs/API.md
@@ -35,6 +35,7 @@ Codex2API 提供兼容 OpenAI 风格的 API 接口，同时包含完整的管理
 **Base URL:** `http://localhost:8080` (默认端口)
 
 **请求格式:**
+
 - 请求头: `Content-Type: application/json`
 - 认证头: `Authorization: Bearer <api_key>`
 
@@ -47,11 +48,13 @@ Codex2API 提供兼容 OpenAI 风格的 API 接口，同时包含完整的管理
 公共 API (`/v1/*`) 需要 API Key 进行认证。
 
 **请求头:**
+
 ```http
 Authorization: Bearer sk-xxxxxxxxxxxxxxxxxxxxxxxx
 ```
 
 **配置方式:**
+
 1. 通过管理后台 `/admin/settings` 页面配置
 2. 如果没有配置任何 API Key，则 `/v1/*` 接口跳过鉴权（开发模式）
 
@@ -60,6 +63,7 @@ Authorization: Bearer sk-xxxxxxxxxxxxxxxxxxxxxxxx
 管理 API (`/api/admin/*`) 需要 Admin Secret 进行认证。
 
 **请求头:**
+
 ```http
 X-Admin-Key: your-admin-secret
 ```
@@ -71,6 +75,7 @@ Authorization: Bearer your-admin-secret
 ```
 
 **配置方式:**
+
 - 环境变量: `ADMIN_SECRET`
 - 数据库: 通过管理后台设置
 
@@ -85,12 +90,13 @@ Authorization: Bearer your-admin-secret
 **说明:** OpenAI 风格的 Chat Completions 接口，支持流式和非流式响应。
 
 **请求示例:**
+
 ```json
 {
   "model": "gpt-5.4",
   "messages": [
-    {"role": "system", "content": "You are a helpful assistant."},
-    {"role": "user", "content": "Hello!"}
+    { "role": "system", "content": "You are a helpful assistant." },
+    { "role": "user", "content": "Hello!" }
   ],
   "stream": false,
   "reasoning_effort": "medium",
@@ -100,17 +106,18 @@ Authorization: Bearer your-admin-secret
 
 **参数说明:**
 
-| 参数 | 类型 | 必填 | 说明 |
-|------|------|------|------|
-| model | string | 是 | 模型名称，见 [支持模型](#支持模型) |
-| messages | array | 是 | 消息列表 |
-| stream | boolean | 否 | 是否启用流式响应，默认 false |
-| reasoning_effort | string | 否 | 推理强度: low/medium/high |
-| service_tier | string | 否 | 服务等级: fast/auto |
-| max_tokens | integer | 否 | 最大输出 token 数（Codex 不支持，会被过滤） |
-| temperature | float | 否 | 温度参数（Codex 不支持，会被过滤） |
+| 参数             | 类型    | 必填 | 说明                                        |
+| ---------------- | ------- | ---- | ------------------------------------------- |
+| model            | string  | 是   | 模型名称，见 [支持模型](#支持模型)          |
+| messages         | array   | 是   | 消息列表                                    |
+| stream           | boolean | 否   | 是否启用流式响应，默认 false                |
+| reasoning_effort | string  | 否   | 推理强度: low/medium/high                   |
+| service_tier     | string  | 否   | 服务等级: fast/auto                         |
+| max_tokens       | integer | 否   | 最大输出 token 数（Codex 不支持，会被过滤） |
+| temperature      | float   | 否   | 温度参数（Codex 不支持，会被过滤）          |
 
 **非流式响应示例:**
+
 ```json
 {
   "id": "chatcmpl-xxxxxxxx",
@@ -136,6 +143,7 @@ Authorization: Bearer your-admin-secret
 ```
 
 **流式响应示例:**
+
 ```
 data: {"id":"chatcmpl-xxx","object":"chat.completion.chunk","created":1712345678,"model":"gpt-5.4","choices":[{"index":0,"delta":{"role":"assistant"},"finish_reason":null}]}
 
@@ -155,12 +163,13 @@ data: [DONE]
 **说明:** Codex 原生 Responses 接口，直接透传，无需协议翻译。
 
 **请求示例:**
+
 ```json
 {
   "model": "gpt-5.4",
   "input": [
-    {"role": "system", "content": "You are a helpful assistant."},
-    {"role": "user", "content": "Hello!"}
+    { "role": "system", "content": "You are a helpful assistant." },
+    { "role": "user", "content": "Hello!" }
   ],
   "stream": false,
   "reasoning": {
@@ -173,17 +182,18 @@ data: [DONE]
 
 **参数说明:**
 
-| 参数 | 类型 | 必填 | 说明 |
-|------|------|------|------|
-| model | string | 是 | 模型名称 |
-| input | array/string | 是 | 输入内容（支持数组或字符串） |
-| stream | boolean | 否 | 是否启用流式响应，默认 false。仅当显式传 `stream=true` 时返回 SSE（流式响应），否则返回普通 JSON。 |
-| reasoning.effort | string | 否 | 推理强度: low/medium/high |
-| service_tier | string | 否 | 服务等级: fast/auto |
-| include | array | 否 | 包含的额外字段 |
-| previous_response_id | string | 否 | 上一响应 ID，用于上下文连续 |
+| 参数                 | 类型         | 必填 | 说明                                                                                               |
+| -------------------- | ------------ | ---- | -------------------------------------------------------------------------------------------------- |
+| model                | string       | 是   | 模型名称                                                                                           |
+| input                | array/string | 是   | 输入内容（支持数组或字符串）                                                                       |
+| stream               | boolean      | 否   | 是否启用流式响应，默认 false。仅当显式传 `stream=true` 时返回 SSE（流式响应），否则返回普通 JSON。 |
+| reasoning.effort     | string       | 否   | 推理强度: low/medium/high                                                                          |
+| service_tier         | string       | 否   | 服务等级: fast/auto                                                                                |
+| include              | array        | 否   | 包含的额外字段                                                                                     |
+| previous_response_id | string       | 否   | 上一响应 ID，用于上下文连续                                                                        |
 
 **响应示例:**
+
 ```json
 {
   "id": "resp_xxxxxxxx",
@@ -219,6 +229,7 @@ data: [DONE]
 **说明:** OpenAI Images 兼容入口。外部请求使用 `gpt-image-2`，内部按 `CLIProxyAPI/` 与 `sub2api/` 的链路转换为 Codex `/responses`：主模型为 `gpt-5.4-mini`，图像模型写入 `tools[0].model`。
 
 **请求示例:**
+
 ```json
 {
   "model": "gpt-image-2",
@@ -236,18 +247,18 @@ data: [DONE]
 **说明:** 支持 JSON `images[].image_url` 和 multipart `image` / `image[]` 上传。`mask.image_url` 或 multipart `mask` 可用于遮罩编辑。
 
 **JSON 请求示例:**
+
 ```json
 {
   "model": "gpt-image-2",
   "prompt": "Replace the background with aurora lights",
-  "images": [
-    {"image_url": "https://example.com/source.png"}
-  ],
+  "images": [{ "image_url": "https://example.com/source.png" }],
   "output_format": "png"
 }
 ```
 
 **响应示例:**
+
 ```json
 {
   "created": 1710000000,
@@ -270,17 +281,18 @@ data: [DONE]
 **说明:** 获取支持的模型列表。
 
 **响应示例:**
+
 ```json
 {
   "object": "list",
   "data": [
-    {"id": "gpt-5.5", "object": "model", "owned_by": "openai"},
-    {"id": "gpt-5.4", "object": "model", "owned_by": "openai"},
-    {"id": "gpt-5.4-mini", "object": "model", "owned_by": "openai"},
-    {"id": "gpt-5.3-codex", "object": "model", "owned_by": "openai"},
-    {"id": "gpt-5.3-codex-spark", "object": "model", "owned_by": "openai"},
-    {"id": "gpt-5.2", "object": "model", "owned_by": "openai"},
-    {"id": "gpt-image-2", "object": "model", "owned_by": "openai"}
+    { "id": "gpt-5.5", "object": "model", "owned_by": "openai" },
+    { "id": "gpt-5.4", "object": "model", "owned_by": "openai" },
+    { "id": "gpt-5.4-mini", "object": "model", "owned_by": "openai" },
+    { "id": "gpt-5.3-codex", "object": "model", "owned_by": "openai" },
+    { "id": "gpt-5.3-codex-spark", "object": "model", "owned_by": "openai" },
+    { "id": "gpt-5.2", "object": "model", "owned_by": "openai" },
+    { "id": "gpt-image-2", "object": "model", "owned_by": "openai" }
   ]
 }
 ```
@@ -292,6 +304,7 @@ data: [DONE]
 **说明:** 健康检查端点，返回服务状态。
 
 **响应示例:**
+
 ```json
 {
   "status": "ok",
@@ -313,6 +326,7 @@ data: [DONE]
 获取仪表盘统计数据。
 
 **响应:**
+
 ```json
 {
   "total": 10,
@@ -327,6 +341,7 @@ data: [DONE]
 系统健康检查（扩展版）。
 
 **响应:**
+
 ```json
 {
   "status": "ok",
@@ -342,6 +357,7 @@ data: [DONE]
 获取账号列表。
 
 **响应:**
+
 ```json
 {
   "accounts": [
@@ -391,21 +407,22 @@ data: [DONE]
 
 字段说明补充：
 
-| 字段 | 类型 | 说明 |
-|------|------|------|
-| scheduler_score | number | 原始健康分，仅反映动态调度健康状态 |
-| dispatch_score | number | 最终用于调度排序的分数；优先读取运行时快照 |
-| score_bias_override | integer/null | 手工配置的总加权分覆盖值，`null` 表示跟随套餐默认 |
-| score_bias_effective | integer | 当前生效的加权分 |
-| base_concurrency_override | integer/null | 手工配置的基础并发覆盖值，`null` 表示跟随全局 `max_concurrency` |
-| base_concurrency_effective | integer | 当前生效的基础并发值 |
-| allowed_api_key_ids | integer[] | 允许调用该账号的 API Key ID 列表；空数组表示所有 API Key 均可调用 |
+| 字段                       | 类型         | 说明                                                              |
+| -------------------------- | ------------ | ----------------------------------------------------------------- |
+| scheduler_score            | number       | 原始健康分，仅反映动态调度健康状态                                |
+| dispatch_score             | number       | 最终用于调度排序的分数；优先读取运行时快照                        |
+| score_bias_override        | integer/null | 手工配置的总加权分覆盖值，`null` 表示跟随套餐默认                 |
+| score_bias_effective       | integer      | 当前生效的加权分                                                  |
+| base_concurrency_override  | integer/null | 手工配置的基础并发覆盖值，`null` 表示跟随全局 `max_concurrency`   |
+| base_concurrency_effective | integer      | 当前生效的基础并发值                                              |
+| allowed_api_key_ids        | integer[]    | 允许调用该账号的 API Key ID 列表；空数组表示所有 API Key 均可调用 |
 
 #### PATCH /api/admin/accounts/:id/scheduler
 
 更新账号调度配置。
 
 **请求:**
+
 ```json
 {
   "score_bias_override": 80,
@@ -426,13 +443,14 @@ data: [DONE]
 
 **参数说明:**
 
-| 参数 | 类型 | 必填 | 说明 |
-|------|------|------|------|
-| score_bias_override | integer/null | 否 | 总加权分覆盖值，范围 `-200..200`，`null` 表示恢复套餐默认 |
-| base_concurrency_override | integer/null | 否 | 基础并发覆盖值，范围 `1..50`，`null` 表示恢复全局默认 |
-| allowed_api_key_ids | integer[]/null | 否 | 允许调用该账号的 API Key ID 列表，去重升序保存；字段省略时保持原值，传 `null` 或 `[]` 表示恢复为全部可调用 |
+| 参数                      | 类型           | 必填 | 说明                                                                                                       |
+| ------------------------- | -------------- | ---- | ---------------------------------------------------------------------------------------------------------- |
+| score_bias_override       | integer/null   | 否   | 总加权分覆盖值，范围 `-200..200`，`null` 表示恢复套餐默认                                                  |
+| base_concurrency_override | integer/null   | 否   | 基础并发覆盖值，范围 `1..50`，`null` 表示恢复全局默认                                                      |
+| allowed_api_key_ids       | integer[]/null | 否   | 允许调用该账号的 API Key ID 列表，去重升序保存；字段省略时保持原值，传 `null` 或 `[]` 表示恢复为全部可调用 |
 
 **响应:**
+
 ```json
 {
   "message": "账号调度配置已更新"
@@ -444,6 +462,7 @@ data: [DONE]
 添加 Refresh Token 账号（支持批量）。
 
 **请求:**
+
 ```json
 {
   "name": "my-account",
@@ -454,13 +473,14 @@ data: [DONE]
 
 **参数说明:**
 
-| 参数 | 类型 | 必填 | 说明 |
-|------|------|------|------|
-| name | string | 否 | 账号名称，批量时自动追加序号，默认 `account-{n}` |
-| refresh_token | string | 是 | Refresh Token，多个用 `\n` 换行分隔（单次最多 100 个） |
-| proxy_url | string | 否 | 代理 URL |
+| 参数          | 类型   | 必填 | 说明                                                   |
+| ------------- | ------ | ---- | ------------------------------------------------------ |
+| name          | string | 否   | 账号名称，批量时自动追加序号，默认 `account-{n}`       |
+| refresh_token | string | 是   | Refresh Token，多个用 `\n` 换行分隔（单次最多 100 个） |
+| proxy_url     | string | 否   | 代理 URL                                               |
 
 批量添加（使用换行分隔）:
+
 ```json
 {
   "name": "batch",
@@ -470,6 +490,7 @@ data: [DONE]
 ```
 
 **响应:**
+
 ```json
 {
   "message": "成功添加 3 个账号",
@@ -481,6 +502,7 @@ data: [DONE]
 **curl 示例:**
 
 单个添加:
+
 ```bash
 curl -X POST http://localhost:8080/api/admin/accounts \
   -H "X-Admin-Key: your-admin-secret" \
@@ -489,6 +511,7 @@ curl -X POST http://localhost:8080/api/admin/accounts \
 ```
 
 批量添加（换行分隔）:
+
 ```bash
 curl -X POST http://localhost:8080/api/admin/accounts \
   -H "X-Admin-Key: your-admin-secret" \
@@ -503,6 +526,7 @@ curl -X POST http://localhost:8080/api/admin/accounts \
 添加 Access Token（AT-only）账号（支持批量）。适用于只有 AT 没有 RT 的场景。
 
 **请求:**
+
 ```json
 {
   "name": "my-at-account",
@@ -513,13 +537,14 @@ curl -X POST http://localhost:8080/api/admin/accounts \
 
 **参数说明:**
 
-| 参数 | 类型 | 必填 | 说明 |
-|------|------|------|------|
-| name | string | 否 | 账号名称，批量时自动追加序号，默认 `at-account-{n}` |
-| access_token | string | 是 | Access Token，多个用 `\n` 换行分隔（单次最多 100 个） |
-| proxy_url | string | 否 | 代理 URL |
+| 参数         | 类型   | 必填 | 说明                                                  |
+| ------------ | ------ | ---- | ----------------------------------------------------- |
+| name         | string | 否   | 账号名称，批量时自动追加序号，默认 `at-account-{n}`   |
+| access_token | string | 是   | Access Token，多个用 `\n` 换行分隔（单次最多 100 个） |
+| proxy_url    | string | 否   | 代理 URL                                              |
 
 批量添加:
+
 ```json
 {
   "name": "batch-at",
@@ -529,6 +554,7 @@ curl -X POST http://localhost:8080/api/admin/accounts \
 ```
 
 **响应:**
+
 ```json
 {
   "message": "成功添加 3 个 AT 账号",
@@ -553,6 +579,7 @@ curl -X POST http://localhost:8080/api/admin/accounts/at \
 删除账号（软删除，标记为 deleted）。
 
 **响应:**
+
 ```json
 {
   "message": "账号已删除"
@@ -564,6 +591,7 @@ curl -X POST http://localhost:8080/api/admin/accounts/at \
 手动刷新账号 Access Token。
 
 **响应:**
+
 ```json
 {
   "message": "账号刷新成功"
@@ -575,6 +603,7 @@ curl -X POST http://localhost:8080/api/admin/accounts/at \
 测试账号连接。
 
 **响应:**
+
 ```json
 {
   "success": true,
@@ -588,6 +617,7 @@ curl -X POST http://localhost:8080/api/admin/accounts/at \
 获取单个账号用量统计。
 
 **响应:**
+
 ```json
 {
   "id": 1,
@@ -604,36 +634,39 @@ curl -X POST http://localhost:8080/api/admin/accounts/at \
 批量导入账号（支持 TXT/JSON/AT-TXT 三种格式）。
 
 **请求:**
+
 - Method: POST
 - Content-Type: multipart/form-data
 
 **Form 字段:**
 
-| 字段 | 类型 | 必填 | 说明 |
-|------|------|------|------|
-| file | file | 是 | 上传文件（最大 2MB，JSON 格式支持多文件） |
-| format | string | 否 | 文件格式：`txt`（默认）、`json`、`at_txt` |
-| proxy_url | string | 否 | 代理 URL |
+| 字段      | 类型   | 必填 | 说明                                      |
+| --------- | ------ | ---- | ----------------------------------------- |
+| file      | file   | 是   | 上传文件（最大 2MB，JSON 格式支持多文件） |
+| format    | string | 否   | 文件格式：`txt`（默认）、`json`、`at_txt` |
+| proxy_url | string | 否   | 代理 URL                                  |
 
 **format 格式说明:**
 
 - **`txt`** — 每行一个 Refresh Token:
-  ```
+
+  ```text
   rt_xxxxxx1
   rt_xxxxxx2
   rt_xxxxxx3
   ```
 
 - **`json`** — CLIProxyAPI 凭证 JSON 格式（支持数组或单对象）:
+
   ```json
   [
-    {"refresh_token": "rt_xxx1", "email": "user1@example.com"},
-    {"refresh_token": "rt_xxx2", "email": "user2@example.com"}
+    { "refresh_token": "rt_xxx1", "email": "user1@example.com" },
+    { "refresh_token": "rt_xxx2", "email": "user2@example.com" }
   ]
   ```
 
 - **`at_txt`** — 每行一个 Access Token（AT-only 模式）:
-  ```
+  ```text
   eyJhbGciOiJSUzI1NiIs...token1
   eyJhbGciOiJSUzI1NiIs...token2
   ```
@@ -643,6 +676,7 @@ curl -X POST http://localhost:8080/api/admin/accounts/at \
 **curl 示例:**
 
 导入 RT（TXT 格式）:
+
 ```bash
 curl -X POST http://localhost:8080/api/admin/accounts/import \
   -H "X-Admin-Key: your-admin-secret" \
@@ -652,6 +686,7 @@ curl -X POST http://localhost:8080/api/admin/accounts/import \
 ```
 
 导入 RT（JSON 格式）:
+
 ```bash
 curl -X POST http://localhost:8080/api/admin/accounts/import \
   -H "X-Admin-Key: your-admin-secret" \
@@ -660,6 +695,7 @@ curl -X POST http://localhost:8080/api/admin/accounts/import \
 ```
 
 导入 AT（AT-TXT 格式）:
+
 ```bash
 curl -X POST http://localhost:8080/api/admin/accounts/import \
   -H "X-Admin-Key: your-admin-secret" \
@@ -668,13 +704,15 @@ curl -X POST http://localhost:8080/api/admin/accounts/import \
 ```
 
 **响应:** SSE 流式进度
-```
+
+```text
 data: {"type":"progress","current":5,"total":10,"success":3,"duplicate":1,"failed":1}
 
 data: {"type":"complete","current":10,"total":10,"success":8,"duplicate":1,"failed":1}
 ```
 
 若所有 Token 均已存在，返回普通 JSON（非 SSE）:
+
 ```json
 {
   "message": "所有 10 个 RT 已存在，无需导入",
@@ -690,6 +728,7 @@ data: {"type":"complete","current":10,"total":10,"success":8,"duplicate":1,"fail
 批量测试账号连接。
 
 **请求:**
+
 ```json
 {
   "ids": [1, 2, 3],
@@ -698,6 +737,7 @@ data: {"type":"complete","current":10,"total":10,"success":8,"duplicate":1,"fail
 ```
 
 **响应:** SSE 流式进度
+
 ```
 data: {"type":"progress","current":3,"total":3,"success":2,"failed":1}
 
@@ -709,6 +749,7 @@ data: {"type":"complete","current":3,"total":3,"success":2,"failed":1}
 清理 Unauthorized（401）账号。
 
 **响应:**
+
 ```json
 {
   "message": "已清理 5 个账号",
@@ -729,11 +770,13 @@ data: {"type":"complete","current":3,"total":3,"success":2,"failed":1}
 导出账号（标准 JSON 格式）。
 
 **查询参数:**
+
 - `filter`: healthy (只导出健康账号)
 - `ids`: 1,2,3 (指定 ID 列表)
 - `remote`: true (远程迁移模式)
 
 **响应:**
+
 ```json
 [
   {
@@ -754,6 +797,7 @@ data: {"type":"complete","current":3,"total":3,"success":2,"failed":1}
 从远程 codex2api 实例迁移账号。
 
 **请求:**
+
 ```json
 {
   "url": "http://remote-instance:8080",
@@ -768,16 +812,16 @@ data: {"type":"complete","current":3,"total":3,"success":2,"failed":1}
 获取账号增删趋势。
 
 **查询参数:**
+
 - `start`: RFC3339 格式开始时间
 - `end`: RFC3339 格式结束时间
 - `bucket_minutes`: 聚合桶大小（默认 60）
 
 **响应:**
+
 ```json
 {
-  "trend": [
-    {"timestamp": "2024-01-01T00:00:00Z", "added": 5, "deleted": 0}
-  ]
+  "trend": [{ "timestamp": "2024-01-01T00:00:00Z", "added": 5, "deleted": 0 }]
 }
 ```
 
@@ -788,6 +832,7 @@ data: {"type":"complete","current":3,"total":3,"success":2,"failed":1}
 获取使用统计。
 
 **响应:**
+
 ```json
 {
   "total_requests": 10000,
@@ -805,6 +850,7 @@ data: {"type":"complete","current":3,"total":3,"success":2,"failed":1}
 获取使用日志。
 
 **查询参数:**
+
 - `start`: RFC3339 开始时间
 - `end`: RFC3339 结束时间
 - `page`: 页码
@@ -817,6 +863,7 @@ data: {"type":"complete","current":3,"total":3,"success":2,"failed":1}
 - `stream`: true/false (是否流式)
 
 **响应:**
+
 ```json
 {
   "logs": [
@@ -847,11 +894,13 @@ data: {"type":"complete","current":3,"total":3,"success":2,"failed":1}
 获取图表聚合数据。
 
 **查询参数:**
+
 - `start`: RFC3339 开始时间
 - `end`: RFC3339 结束时间
 - `bucket_minutes`: 聚合桶大小（默认 5）
 
 **响应:**
+
 ```json
 {
   "buckets": [
@@ -872,6 +921,7 @@ data: {"type":"complete","current":3,"total":3,"success":2,"failed":1}
 清空使用日志。
 
 **响应:**
+
 ```json
 {
   "message": "日志已清空"
@@ -882,16 +932,23 @@ data: {"type":"complete","current":3,"total":3,"success":2,"failed":1}
 
 #### GET /api/admin/keys
 
-获取所有 API 密钥。
+获取所有 API 密钥。管理接口需要 `X-Admin-Key`，这些接口不属于对外 `/v1/*` 客户端 API。该接口会在 `raw_key` 返回完整密钥，只能在受信任后台使用。
 
 **响应:**
+
 ```json
 {
   "keys": [
     {
       "id": 1,
-      "name": "default",
-      "key": "sk-xxxxxxxxxxxxxxxxxxxxxxxx",
+      "name": "Claude Code",
+      "key": "sk-****...abcd",
+      "raw_key": "sk-live-full-key",
+      "quota_limit": 10,
+      "quota_used": 1.25,
+      "expires_at": "2026-06-01T00:00:00Z",
+      "allowed_group_ids": [1],
+      "status": "active",
       "created_at": "2024-01-01T00:00:00Z"
     }
   ]
@@ -903,19 +960,68 @@ data: {"type":"complete","current":3,"total":3,"success":2,"failed":1}
 创建新 API 密钥。
 
 **请求:**
+
 ```json
 {
   "name": "production",
-  "key": "sk-custom-key"  // 可选，不填则自动生成
+  "key": "sk-custom-key",
+  "quota_limit": 10,
+  "expires_in_days": 30,
+  "allowed_group_ids": [1]
 }
 ```
 
+| 字段                | 类型      | 必填 | 说明                                   |
+| ------------------- | --------- | ---- | -------------------------------------- |
+| name                | string    | 是   | 显示名称                               |
+| key                 | string    | 否   | 自定义密钥；省略则自动生成             |
+| quota_limit / quota | number    | 否   | 额度上限，0 或省略表示不限额           |
+| expires_at          | string    | 否   | RFC3339 或本地日期时间                 |
+| expires_in_days     | number    | 否   | N 天后过期；0 表示不过期               |
+| allowed_group_ids   | integer[] | 否   | 允许调度的账号分组；空数组表示全部分组 |
+
 **响应:**
+
 ```json
 {
   "id": 2,
   "key": "sk-xxxxxxxxxxxxxxxxxxxxxxxx",
-  "name": "production"
+  "name": "production",
+  "quota_limit": 10,
+  "quota_used": 0,
+  "expires_at": "2026-06-12T00:00:00Z",
+  "allowed_group_ids": [1]
+}
+```
+
+#### PATCH /api/admin/keys/:id
+
+编辑 API 密钥名称、额度、过期时间和允许账号分组。字段省略时保持原值。
+
+**请求:**
+
+```json
+{
+  "name": "Cherry Studio",
+  "quota_limit": 25,
+  "expires_at": null,
+  "allowed_group_ids": []
+}
+```
+
+| 字段                | 类型        | 说明                                   |
+| ------------------- | ----------- | -------------------------------------- |
+| name                | string      | 新显示名称                             |
+| quota_limit / quota | number/null | 新额度上限；0 或 null 清除额度限制     |
+| expires_at          | string/null | 新过期时间；null 清除过期时间          |
+| expires_in_days     | number      | N 天后过期；0 清除过期时间             |
+| allowed_group_ids   | integer[]   | 允许调度的账号分组；空数组表示全部分组 |
+
+**响应:**
+
+```json
+{
+  "message": "API Key 已更新"
 }
 ```
 
@@ -924,12 +1030,104 @@ data: {"type":"complete","current":3,"total":3,"success":2,"failed":1}
 删除 API 密钥。
 
 **响应:**
+
 ```json
 {
   "message": "已删除"
 }
 ```
 
+### 账号分组管理
+
+账号分组用于把账号池划分为多个可调度集合。API Key 的 `allowed_group_ids` 可以限制下游密钥只能使用指定分组；账号自己的 `allowed_api_key_ids` 也可以反向限制哪些 API Key 能调度该账号。
+
+#### GET /api/admin/account-groups
+
+获取账号分组。
+
+**响应:**
+
+```json
+{
+  "groups": [
+    {
+      "id": 1,
+      "name": "Team",
+      "description": "付费团队账号",
+      "color": "#2563eb",
+      "sort_order": 0,
+      "member_count": 8,
+      "created_at": "2026-05-13T00:00:00Z",
+      "updated_at": "2026-05-13T00:00:00Z"
+    }
+  ]
+}
+```
+
+#### POST /api/admin/account-groups
+
+创建账号分组。
+
+**请求:**
+
+```json
+{
+  "name": "Team",
+  "description": "付费团队账号",
+  "color": "#2563eb",
+  "sort_order": 0
+}
+```
+
+**响应:**
+
+```json
+{
+  "id": 1,
+  "message": "分组已创建"
+}
+```
+
+#### PATCH /api/admin/account-groups/:id
+
+编辑账号分组。
+
+**请求:**
+
+```json
+{
+  "name": "Team Plus",
+  "description": "高优先级账号",
+  "color": "#16a34a",
+  "sort_order": 10
+}
+```
+
+**响应:**
+
+```json
+{
+  "message": "分组已更新"
+}
+```
+
+#### DELETE /api/admin/account-groups/:id
+
+删除账号分组。分组仍有成员时需要 `?force=true`；删除后会从账号关系中移除该 ID，并尽量从 API Key 允许分组中清理。若某个 API Key 仅绑定该分组，为避免权限被意外放大，会保留为缺失分组状态。
+
+```bash
+curl -X DELETE "http://localhost:8080/api/admin/account-groups/1?force=true" \
+  -H "X-Admin-Key: your-secret"
+```
+
+**响应:**
+
+```json
+{
+  "message": "分组已删除"
+}
+```
+
 ### 系统设置
 
 #### GET /api/admin/settings
@@ -937,6 +1135,7 @@ data: {"type":"complete","current":3,"total":3,"success":2,"failed":1}
 获取系统设置。
 
 **响应:**
+
 ```json
 {
   "max_concurrency": 2,
@@ -968,6 +1167,7 @@ data: {"type":"complete","current":3,"total":3,"success":2,"failed":1}
 更新系统设置。
 
 **请求:**
+
 ```json
 {
   "max_concurrency": 4,
@@ -990,6 +1190,7 @@ data: {"type":"complete","current":3,"total":3,"success":2,"failed":1}
 获取代理列表。
 
 **响应:**
+
 ```json
 {
   "proxies": [
@@ -1011,6 +1212,7 @@ data: {"type":"complete","current":3,"total":3,"success":2,"failed":1}
 添加代理（支持批量）。
 
 **请求:**
+
 ```json
 {
   "urls": ["http://proxy1.example.com:8080", "http://proxy2.example.com:8080"],
@@ -1019,6 +1221,7 @@ data: {"type":"complete","current":3,"total":3,"success":2,"failed":1}
 ```
 
 或单条:
+
 ```json
 {
   "url": "http://proxy.example.com:8080",
@@ -1035,6 +1238,7 @@ data: {"type":"complete","current":3,"total":3,"success":2,"failed":1}
 更新代理。
 
 **请求:**
+
 ```json
 {
   "label": "New Label",
@@ -1047,6 +1251,7 @@ data: {"type":"complete","current":3,"total":3,"success":2,"failed":1}
 批量删除代理。
 
 **请求:**
+
 ```json
 {
   "ids": [1, 2, 3]
@@ -1058,15 +1263,17 @@ data: {"type":"complete","current":3,"total":3,"success":2,"failed":1}
 测试代理连通性。
 
 **请求:**
+
 ```json
 {
   "url": "http://proxy.example.com:8080",
-  "id": 1,  // 可选，用于持久化测试结果
+  "id": 1, // 可选，用于持久化测试结果
   "lang": "zh-CN"
 }
 ```
 
 **响应:**
+
 ```json
 {
   "success": true,
@@ -1087,6 +1294,7 @@ data: {"type":"complete","current":3,"total":3,"success":2,"failed":1}
 获取系统运维概览。
 
 **响应:**
+
 ```json
 {
   "updated_at": "2024-01-01T12:00:00Z",
@@ -1152,6 +1360,7 @@ data: {"type":"complete","current":3,"total":3,"success":2,"failed":1}
 获取当前启用的模型列表，并返回模型注册表元数据。
 
 **响应:**
+
 ```json
 {
   "models": [
@@ -1183,6 +1392,7 @@ data: {"type":"complete","current":3,"total":3,"success":2,"failed":1}
 从 OpenAI 官方 Codex 模型页同步模型注册表。同步只新增或更新模型元数据，不会自动删除本地模型；`gpt-image-2` 始终作为内置图像模型保留。
 
 **响应:**
+
 ```json
 {
   "added": 0,
@@ -1214,6 +1424,7 @@ data: {"type":"complete","current":3,"total":3,"success":2,"failed":1}
 生成 OAuth 授权 URL（PKCE 模式）。
 
 **请求:**
+
 ```json
 {
   "proxy_url": "http://proxy.example.com:8080",
@@ -1223,12 +1434,13 @@ data: {"type":"complete","current":3,"total":3,"success":2,"failed":1}
 
 **参数说明:**
 
-| 参数 | 类型 | 必填 | 说明 |
-|------|------|------|------|
-| proxy_url | string | 否 | 账号使用的代理 URL |
-| redirect_uri | string | 否 | 回调地址，默认为系统内置地址 |
+| 参数         | 类型   | 必填 | 说明                         |
+| ------------ | ------ | ---- | ---------------------------- |
+| proxy_url    | string | 否   | 账号使用的代理 URL           |
+| redirect_uri | string | 否   | 回调地址，默认为系统内置地址 |
 
 **响应:**
+
 ```json
 {
   "auth_url": "https://auth.openai.com/authorize?response_type=code&client_id=...&state=...",
@@ -1243,6 +1455,7 @@ data: {"type":"complete","current":3,"total":3,"success":2,"failed":1}
 用授权码兑换 Token，自动创建新账号并加入号池。
 
 **请求:**
+
 ```json
 {
   "session_id": "a1b2c3d4e5f6...",
@@ -1255,15 +1468,16 @@ data: {"type":"complete","current":3,"total":3,"success":2,"failed":1}
 
 **参数说明:**
 
-| 参数 | 类型 | 必填 | 说明 |
-|------|------|------|------|
-| session_id | string | 是 | `generate-auth-url` 返回的 session_id |
-| code | string | 是 | 授权回调 URL 中的 `code` 参数 |
-| state | string | 是 | 授权回调 URL 中的 `state` 参数 |
-| name | string | 否 | 账号名称，默认使用邮箱或 `oauth-account` |
-| proxy_url | string | 否 | 代理 URL，覆盖生成 URL 时的设置 |
+| 参数       | 类型   | 必填 | 说明                                     |
+| ---------- | ------ | ---- | ---------------------------------------- |
+| session_id | string | 是   | `generate-auth-url` 返回的 session_id    |
+| code       | string | 是   | 授权回调 URL 中的 `code` 参数            |
+| state      | string | 是   | 授权回调 URL 中的 `state` 参数           |
+| name       | string | 否   | 账号名称，默认使用邮箱或 `oauth-account` |
+| proxy_url  | string | 否   | 代理 URL，覆盖生成 URL 时的设置          |
 
 **响应:**
+
 ```json
 {
   "message": "OAuth 账号 user@example.com 添加成功",
@@ -1277,36 +1491,37 @@ data: {"type":"complete","current":3,"total":3,"success":2,"failed":1}
 
 ## 支持模型
 
-| 模型 | 说明 |
-|------|------|
-| gpt-5.5 | 最新旗舰模型 |
-| gpt-5.4 | 旗舰模型 |
-| gpt-5.4-mini | 轻量版 |
-| gpt-5.3-codex | 较新版本 |
+| 模型                | 说明                                    |
+| ------------------- | --------------------------------------- |
+| gpt-5.5             | 最新旗舰模型                            |
+| gpt-5.4             | 旗舰模型                                |
+| gpt-5.4-mini        | 轻量版                                  |
+| gpt-5.3-codex       | 较新版本                                |
 | gpt-5.3-codex-spark | Codex Spark 模型，仅 Pro 订阅账号可调用 |
-| gpt-5.2 | 兼容保留模型 |
-| gpt-image-2 | GPT Image 2 图像生成模型 |
+| gpt-5.2             | 兼容保留模型                            |
+| gpt-image-2         | GPT Image 2 图像生成模型                |
 
 > 提示：实际支持的模型以 `/v1/models` 接口返回为准，文档可能未及时更新。
+
 ---
 
 ## 错误码
 
 ### HTTP 状态码
 
-| 状态码 | 说明 |
-|--------|------|
-| 200 | 请求成功 |
-| 400 | 请求参数错误 |
-| 401 | 认证失败 |
-| 403 | 权限不足 |
-| 404 | 资源不存在 |
-| 429 | 请求过于频繁（限流） |
-| 499 | 客户端断开连接 |
-| 500 | 服务器内部错误 |
-| 502 | 网关错误（上游服务异常） |
-| 503 | 服务不可用（账号池耗尽） |
-| 598 | 上游流中断 |
+| 状态码 | 说明                     |
+| ------ | ------------------------ |
+| 200    | 请求成功                 |
+| 400    | 请求参数错误             |
+| 401    | 认证失败                 |
+| 403    | 权限不足                 |
+| 404    | 资源不存在               |
+| 429    | 请求过于频繁（限流）     |
+| 499    | 客户端断开连接           |
+| 500    | 服务器内部错误           |
+| 502    | 网关错误（上游服务异常） |
+| 503    | 服务不可用（账号池耗尽） |
+| 598    | 上游流中断               |
 
 ### 错误响应格式
 
@@ -1322,17 +1537,17 @@ data: {"type":"complete","current":3,"total":3,"success":2,"failed":1}
 
 ### 常见错误代码
 
-| 代码 | 说明 | 处理建议 |
-|------|------|----------|
-| missing_api_key | 缺少 API Key | 添加 Authorization 请求头 |
-| invalid_api_key | API Key 无效 | 检查密钥是否正确 |
-| authentication_error | 认证错误 | 检查 Admin Secret 或 API Key |
-| invalid_request_error | 请求参数错误 | 检查请求体格式 |
-| server_error | 服务器错误 | 查看日志排查问题 |
-| upstream_error | 上游服务错误 | 检查 Codex 服务状态 |
-| no_available_account | 当前无可调度账号 | 稍后重试、启用账号或补充可用账号 |
-| account_pool_usage_limit_reached | 账号池额度耗尽 | 等待冷却或添加新账号 |
-| rate_limit_exceeded | 限流触发 | 降低请求频率 |
+| 代码                             | 说明             | 处理建议                         |
+| -------------------------------- | ---------------- | -------------------------------- |
+| missing_api_key                  | 缺少 API Key     | 添加 Authorization 请求头        |
+| invalid_api_key                  | API Key 无效     | 检查密钥是否正确                 |
+| authentication_error             | 认证错误         | 检查 Admin Secret 或 API Key     |
+| invalid_request_error            | 请求参数错误     | 检查请求体格式                   |
+| server_error                     | 服务器错误       | 查看日志排查问题                 |
+| upstream_error                   | 上游服务错误     | 检查 Codex 服务状态              |
+| no_available_account             | 当前无可调度账号 | 稍后重试、启用账号或补充可用账号 |
+| account_pool_usage_limit_reached | 账号池额度耗尽   | 等待冷却或添加新账号             |
+| rate_limit_exceeded              | 限流触发         | 降低请求频率                     |
 
 ---
 
diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 77ef7306..0aea7f3a 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -19,6 +19,7 @@
         "react-i18next": "^16.6.6",
         "react-router-dom": "^7.1.0",
         "recharts": "^3.8.0",
+        "shiki": "^3.23.0",
         "tailwind-merge": "^3.5.0",
         "tailwindcss": "^4.2.2"
       },
@@ -1801,9 +1802,6 @@
       "cpu": [
         "arm64"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -1820,9 +1818,6 @@
       "cpu": [
         "arm64"
       ],
-      "libc": [
-        "musl"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -1839,9 +1834,6 @@
       "cpu": [
         "ppc64"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -1858,9 +1850,6 @@
       "cpu": [
         "s390x"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -1877,9 +1866,6 @@
       "cpu": [
         "x64"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -1896,9 +1882,6 @@
       "cpu": [
         "x64"
       ],
-      "libc": [
-        "musl"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -1981,6 +1964,73 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/@shikijs/core": {
+      "version": "3.23.0",
+      "resolved": "https://registry.npmjs.org/@shikijs/core/-/core-3.23.0.tgz",
+      "integrity": "sha512-NSWQz0riNb67xthdm5br6lAkvpDJRTgB36fxlo37ZzM2yq0PQFFzbd8psqC2XMPgCzo1fW6cVi18+ArJ44wqgA==",
+      "license": "MIT",
+      "dependencies": {
+        "@shikijs/types": "3.23.0",
+        "@shikijs/vscode-textmate": "^10.0.2",
+        "@types/hast": "^3.0.4",
+        "hast-util-to-html": "^9.0.5"
+      }
+    },
+    "node_modules/@shikijs/engine-javascript": {
+      "version": "3.23.0",
+      "resolved": "https://registry.npmjs.org/@shikijs/engine-javascript/-/engine-javascript-3.23.0.tgz",
+      "integrity": "sha512-aHt9eiGFobmWR5uqJUViySI1bHMqrAgamWE1TYSUoftkAeCCAiGawPMwM+VCadylQtF4V3VNOZ5LmfItH5f3yA==",
+      "license": "MIT",
+      "dependencies": {
+        "@shikijs/types": "3.23.0",
+        "@shikijs/vscode-textmate": "^10.0.2",
+        "oniguruma-to-es": "^4.3.4"
+      }
+    },
+    "node_modules/@shikijs/engine-oniguruma": {
+      "version": "3.23.0",
+      "resolved": "https://registry.npmjs.org/@shikijs/engine-oniguruma/-/engine-oniguruma-3.23.0.tgz",
+      "integrity": "sha512-1nWINwKXxKKLqPibT5f4pAFLej9oZzQTsby8942OTlsJzOBZ0MWKiwzMsd+jhzu8YPCHAswGnnN1YtQfirL35g==",
+      "license": "MIT",
+      "dependencies": {
+        "@shikijs/types": "3.23.0",
+        "@shikijs/vscode-textmate": "^10.0.2"
+      }
+    },
+    "node_modules/@shikijs/langs": {
+      "version": "3.23.0",
+      "resolved": "https://registry.npmjs.org/@shikijs/langs/-/langs-3.23.0.tgz",
+      "integrity": "sha512-2Ep4W3Re5aB1/62RSYQInK9mM3HsLeB91cHqznAJMuylqjzNVAVCMnNWRHFtcNHXsoNRayP9z1qj4Sq3nMqYXg==",
+      "license": "MIT",
+      "dependencies": {
+        "@shikijs/types": "3.23.0"
+      }
+    },
+    "node_modules/@shikijs/themes": {
+      "version": "3.23.0",
+      "resolved": "https://registry.npmjs.org/@shikijs/themes/-/themes-3.23.0.tgz",
+      "integrity": "sha512-5qySYa1ZgAT18HR/ypENL9cUSGOeI2x+4IvYJu4JgVJdizn6kG4ia5Q1jDEOi7gTbN4RbuYtmHh0W3eccOrjMA==",
+      "license": "MIT",
+      "dependencies": {
+        "@shikijs/types": "3.23.0"
+      }
+    },
+    "node_modules/@shikijs/types": {
+      "version": "3.23.0",
+      "resolved": "https://registry.npmjs.org/@shikijs/types/-/types-3.23.0.tgz",
+      "integrity": "sha512-3JZ5HXOZfYjsYSk0yPwBrkupyYSLpAE26Qc0HLghhZNGTZg/SKxXIIgoxOpmmeQP0RRSDJTk1/vPfw9tbw+jSQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@shikijs/vscode-textmate": "^10.0.2",
+        "@types/hast": "^3.0.4"
+      }
+    },
+    "node_modules/@shikijs/vscode-textmate": {
+      "version": "10.0.2",
+      "resolved": "https://registry.npmjs.org/@shikijs/vscode-textmate/-/vscode-textmate-10.0.2.tgz",
+      "integrity": "sha512-83yeghZ2xxin3Nj8z1NMd/NCuca+gsYXswywDy5bHvwlWL8tpTQmzGeUuHd9FC3E/SBEMvzJRwWEOz5gGes9Qg==",
+      "license": "MIT"
+    },
     "node_modules/@standard-schema/spec": {
       "version": "1.1.0",
       "resolved": "https://registry.npmmirror.com/@standard-schema/spec/-/spec-1.1.0.tgz",
@@ -2323,6 +2373,24 @@
       "integrity": "sha512-Ps3T8E8dZDam6fUyNiMkekK3XUsaUEik+idO9/YjPtfj2qruF8tFBXS7XhtE4iIXBLxhmLjP3SXpLhVf21I9Lw==",
       "license": "MIT"
     },
+    "node_modules/@types/hast": {
+      "version": "3.0.4",
+      "resolved": "https://registry.npmjs.org/@types/hast/-/hast-3.0.4.tgz",
+      "integrity": "sha512-WPs+bbQw5aCj+x6laNGWLH3wviHtoCv/P3+otBhbOhJgG8qtpdAMlTCxLtsTWA7LH1Oh/bFCHsBn0TPS5m30EQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/unist": "*"
+      }
+    },
+    "node_modules/@types/mdast": {
+      "version": "4.0.4",
+      "resolved": "https://registry.npmjs.org/@types/mdast/-/mdast-4.0.4.tgz",
+      "integrity": "sha512-kGaNbPh1k7AFzgpud/gMdvIm5xuECykRR+JnWKQno9TAXVa6WIVCGTPvYGekIDL4uwCZQSYbUxNBSb1aUo79oA==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/unist": "*"
+      }
+    },
     "node_modules/@types/react": {
       "version": "19.2.14",
       "resolved": "https://registry.npmmirror.com/@types/react/-/react-19.2.14.tgz",
@@ -2343,12 +2411,24 @@
         "@types/react": "^19.2.0"
       }
     },
+    "node_modules/@types/unist": {
+      "version": "3.0.3",
+      "resolved": "https://registry.npmjs.org/@types/unist/-/unist-3.0.3.tgz",
+      "integrity": "sha512-ko/gIFJRv177XgZsZcBwnqJN5x/Gien8qNOn0D5bQU/zAzVf9Zt3BlcUiLqhV9y4ARk0GbT3tnUiPNgnTXzc/Q==",
+      "license": "MIT"
+    },
     "node_modules/@types/use-sync-external-store": {
       "version": "0.0.6",
       "resolved": "https://registry.npmmirror.com/@types/use-sync-external-store/-/use-sync-external-store-0.0.6.tgz",
       "integrity": "sha512-zFDAD+tlpf2r4asuHEj0XH6pY6i0g5NeAHPn+15wk3BV6JA69eERFXC1gyGThDkVa1zCyKr5jox1+2LbV/AMLg==",
       "license": "MIT"
     },
+    "node_modules/@ungap/structured-clone": {
+      "version": "1.3.1",
+      "resolved": "https://registry.npmjs.org/@ungap/structured-clone/-/structured-clone-1.3.1.tgz",
+      "integrity": "sha512-mUFwbeTqrVgDQxFveS+df2yfap6iuP20NAKAsBt5jDEoOTDew+zwLAOilHCeQJOVSvmgCX4ogqIrA0mnyr08yQ==",
+      "license": "ISC"
+    },
     "node_modules/@vitejs/plugin-react": {
       "version": "6.0.1",
       "resolved": "https://registry.npmmirror.com/@vitejs/plugin-react/-/plugin-react-6.0.1.tgz",
@@ -2387,6 +2467,36 @@
         "node": ">=10"
       }
     },
+    "node_modules/ccount": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/ccount/-/ccount-2.0.1.tgz",
+      "integrity": "sha512-eyrF0jiFpY+3drT6383f1qhkbGsLSifNAjA61IUjZjmLCWjItY6LB9ft9YhoDgwfmclB2zhu51Lc7+95b8NRAg==",
+      "license": "MIT",
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/wooorm"
+      }
+    },
+    "node_modules/character-entities-html4": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/character-entities-html4/-/character-entities-html4-2.1.0.tgz",
+      "integrity": "sha512-1v7fgQRj6hnSwFpq1Eu0ynr/CDEw0rXo2B61qXrLNdHZmPKgb7fqS1a2JwF0rISo9q77jDI8VMEHoApn8qDoZA==",
+      "license": "MIT",
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/wooorm"
+      }
+    },
+    "node_modules/character-entities-legacy": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/character-entities-legacy/-/character-entities-legacy-3.0.0.tgz",
+      "integrity": "sha512-RpPp0asT/6ufRm//AJVwpViZbGM/MkjQFxJccQRHmISF/22NBtsHqAWmL+/pmkPWoIUJdWyeVleTl1wydHATVQ==",
+      "license": "MIT",
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/wooorm"
+      }
+    },
     "node_modules/class-variance-authority": {
       "version": "0.7.1",
       "resolved": "https://registry.npmmirror.com/class-variance-authority/-/class-variance-authority-0.7.1.tgz",
@@ -2408,6 +2518,16 @@
         "node": ">=6"
       }
     },
+    "node_modules/comma-separated-tokens": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/comma-separated-tokens/-/comma-separated-tokens-2.0.3.tgz",
+      "integrity": "sha512-Fu4hJdvzeylCfQPp9SGWidpzrMs7tTrlu6Vb8XGaRGck8QSNZJJp538Wrb60Lax4fPwR64ViY468OIUTbRlGZg==",
+      "license": "MIT",
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/wooorm"
+      }
+    },
     "node_modules/cookie": {
       "version": "1.1.1",
       "resolved": "https://registry.npmmirror.com/cookie/-/cookie-1.1.1.tgz",
@@ -2555,6 +2675,15 @@
       "integrity": "sha512-qIMFpTMZmny+MMIitAB6D7iVPEorVw6YQRWkvarTkT4tBeSLLiHzcwj6q0MmYSFCiVpiqPJTJEYIrpcPzVEIvg==",
       "license": "MIT"
     },
+    "node_modules/dequal": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/dequal/-/dequal-2.0.3.tgz",
+      "integrity": "sha512-0je+qPKHEMohvfRTCEo3CrPG6cAzAYgmzKyxRiYSSDkS6eGJdyVJm7WaYA5ECaAD9wLB2T4EEeymA5aFVcYXCA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=6"
+      }
+    },
     "node_modules/detect-libc": {
       "version": "2.1.2",
       "resolved": "https://registry.npmmirror.com/detect-libc/-/detect-libc-2.1.2.tgz",
@@ -2570,6 +2699,19 @@
       "integrity": "sha512-ypdmJU/TbBby2Dxibuv7ZLW3Bs1QEmM7nHjEANfohJLvE0XVujisn1qPJcZxg+qDucsr+bP6fLD1rPS3AhJ7EQ==",
       "license": "MIT"
     },
+    "node_modules/devlop": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/devlop/-/devlop-1.1.0.tgz",
+      "integrity": "sha512-RWmIqhcFf1lRYBvNmr7qTNuyCt/7/ns2jbpp1+PalgE/rDQcBT0fioSMUpJ93irlUhC5hrg4cYqe6U+0ImW0rA==",
+      "license": "MIT",
+      "dependencies": {
+        "dequal": "^2.0.0"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/wooorm"
+      }
+    },
     "node_modules/enhanced-resolve": {
       "version": "5.20.1",
       "resolved": "https://registry.npmmirror.com/enhanced-resolve/-/enhanced-resolve-5.20.1.tgz",
@@ -2645,6 +2787,42 @@
       "integrity": "sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==",
       "license": "ISC"
     },
+    "node_modules/hast-util-to-html": {
+      "version": "9.0.5",
+      "resolved": "https://registry.npmjs.org/hast-util-to-html/-/hast-util-to-html-9.0.5.tgz",
+      "integrity": "sha512-OguPdidb+fbHQSU4Q4ZiLKnzWo8Wwsf5bZfbvu7//a9oTYoqD/fWpe96NuHkoS9h0ccGOTe0C4NGXdtS0iObOw==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/hast": "^3.0.0",
+        "@types/unist": "^3.0.0",
+        "ccount": "^2.0.0",
+        "comma-separated-tokens": "^2.0.0",
+        "hast-util-whitespace": "^3.0.0",
+        "html-void-elements": "^3.0.0",
+        "mdast-util-to-hast": "^13.0.0",
+        "property-information": "^7.0.0",
+        "space-separated-tokens": "^2.0.0",
+        "stringify-entities": "^4.0.0",
+        "zwitch": "^2.0.4"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/hast-util-whitespace": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/hast-util-whitespace/-/hast-util-whitespace-3.0.0.tgz",
+      "integrity": "sha512-88JUN06ipLwsnv+dVn+OIYOvAuvBMy/Qoi6O7mQHxdPXpjy+Cd6xRkWwux7DKO+4sYILtLBRIKgsdpS2gQc7qw==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/hast": "^3.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
     "node_modules/html-parse-stringify": {
       "version": "3.0.1",
       "resolved": "https://registry.npmmirror.com/html-parse-stringify/-/html-parse-stringify-3.0.1.tgz",
@@ -2654,6 +2832,16 @@
         "void-elements": "3.1.0"
       }
     },
+    "node_modules/html-void-elements": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/html-void-elements/-/html-void-elements-3.0.0.tgz",
+      "integrity": "sha512-bEqo66MRXsUGxWHV5IP0PUiAWwoEjba4VCzg0LjFJBpchPaTfyfCKTG6bc5F8ucKec3q5y6qOdGyYTSBEvhCrg==",
+      "license": "MIT",
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/wooorm"
+      }
+    },
     "node_modules/i18next": {
       "version": "25.10.9",
       "resolved": "https://registry.npmmirror.com/i18next/-/i18next-25.10.9.tgz",
@@ -2980,6 +3168,116 @@
         "@jridgewell/sourcemap-codec": "^1.5.5"
       }
     },
+    "node_modules/mdast-util-to-hast": {
+      "version": "13.2.1",
+      "resolved": "https://registry.npmjs.org/mdast-util-to-hast/-/mdast-util-to-hast-13.2.1.tgz",
+      "integrity": "sha512-cctsq2wp5vTsLIcaymblUriiTcZd0CwWtCbLvrOzYCDZoWyMNV8sZ7krj09FSnsiJi3WVsHLM4k6Dq/yaPyCXA==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/hast": "^3.0.0",
+        "@types/mdast": "^4.0.0",
+        "@ungap/structured-clone": "^1.0.0",
+        "devlop": "^1.0.0",
+        "micromark-util-sanitize-uri": "^2.0.0",
+        "trim-lines": "^3.0.0",
+        "unist-util-position": "^5.0.0",
+        "unist-util-visit": "^5.0.0",
+        "vfile": "^6.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/micromark-util-character": {
+      "version": "2.1.1",
+      "resolved": "https://registry.npmjs.org/micromark-util-character/-/micromark-util-character-2.1.1.tgz",
+      "integrity": "sha512-wv8tdUTJ3thSFFFJKtpYKOYiGP2+v96Hvk4Tu8KpCAsTMs6yi+nVmGh1syvSCsaxz45J6Jbw+9DD6g97+NV67Q==",
+      "funding": [
+        {
+          "type": "GitHub Sponsors",
+          "url": "https://github.com/sponsors/unifiedjs"
+        },
+        {
+          "type": "OpenCollective",
+          "url": "https://opencollective.com/unified"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "micromark-util-symbol": "^2.0.0",
+        "micromark-util-types": "^2.0.0"
+      }
+    },
+    "node_modules/micromark-util-encode": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/micromark-util-encode/-/micromark-util-encode-2.0.1.tgz",
+      "integrity": "sha512-c3cVx2y4KqUnwopcO9b/SCdo2O67LwJJ/UyqGfbigahfegL9myoEFoDYZgkT7f36T0bLrM9hZTAaAyH+PCAXjw==",
+      "funding": [
+        {
+          "type": "GitHub Sponsors",
+          "url": "https://github.com/sponsors/unifiedjs"
+        },
+        {
+          "type": "OpenCollective",
+          "url": "https://opencollective.com/unified"
+        }
+      ],
+      "license": "MIT"
+    },
+    "node_modules/micromark-util-sanitize-uri": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/micromark-util-sanitize-uri/-/micromark-util-sanitize-uri-2.0.1.tgz",
+      "integrity": "sha512-9N9IomZ/YuGGZZmQec1MbgxtlgougxTodVwDzzEouPKo3qFWvymFHWcnDi2vzV1ff6kas9ucW+o3yzJK9YB1AQ==",
+      "funding": [
+        {
+          "type": "GitHub Sponsors",
+          "url": "https://github.com/sponsors/unifiedjs"
+        },
+        {
+          "type": "OpenCollective",
+          "url": "https://opencollective.com/unified"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "micromark-util-character": "^2.0.0",
+        "micromark-util-encode": "^2.0.0",
+        "micromark-util-symbol": "^2.0.0"
+      }
+    },
+    "node_modules/micromark-util-symbol": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/micromark-util-symbol/-/micromark-util-symbol-2.0.1.tgz",
+      "integrity": "sha512-vs5t8Apaud9N28kgCrRUdEed4UJ+wWNvicHLPxCa9ENlYuAY31M0ETy5y1vA33YoNPDFTghEbnh6efaE8h4x0Q==",
+      "funding": [
+        {
+          "type": "GitHub Sponsors",
+          "url": "https://github.com/sponsors/unifiedjs"
+        },
+        {
+          "type": "OpenCollective",
+          "url": "https://opencollective.com/unified"
+        }
+      ],
+      "license": "MIT"
+    },
+    "node_modules/micromark-util-types": {
+      "version": "2.0.2",
+      "resolved": "https://registry.npmjs.org/micromark-util-types/-/micromark-util-types-2.0.2.tgz",
+      "integrity": "sha512-Yw0ECSpJoViF1qTU4DC6NwtC4aWGt1EkzaQB8KPPyCRR8z9TWeV0HbEFGTO+ZY1wB22zmxnJqhPyTpOVCpeHTA==",
+      "funding": [
+        {
+          "type": "GitHub Sponsors",
+          "url": "https://github.com/sponsors/unifiedjs"
+        },
+        {
+          "type": "OpenCollective",
+          "url": "https://opencollective.com/unified"
+        }
+      ],
+      "license": "MIT"
+    },
     "node_modules/nanoid": {
       "version": "3.3.11",
       "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.11.tgz",
@@ -2998,6 +3296,23 @@
         "node": "^10 || ^12 || ^13.7 || ^14 || >=15.0.1"
       }
     },
+    "node_modules/oniguruma-parser": {
+      "version": "0.12.2",
+      "resolved": "https://registry.npmjs.org/oniguruma-parser/-/oniguruma-parser-0.12.2.tgz",
+      "integrity": "sha512-6HVa5oIrgMC6aA6WF6XyyqbhRPJrKR02L20+2+zpDtO5QAzGHAUGw5TKQvwi5vctNnRHkJYmjAhRVQF2EKdTQw==",
+      "license": "MIT"
+    },
+    "node_modules/oniguruma-to-es": {
+      "version": "4.3.6",
+      "resolved": "https://registry.npmjs.org/oniguruma-to-es/-/oniguruma-to-es-4.3.6.tgz",
+      "integrity": "sha512-csuQ9x3Yr0cEIs/Zgx/OEt9iBw9vqIunAPQkx19R/fiMq2oGVTgcMqO/V3Ybqefr1TBvosI6jU539ksaBULJyA==",
+      "license": "MIT",
+      "dependencies": {
+        "oniguruma-parser": "^0.12.2",
+        "regex": "^6.1.0",
+        "regex-recursion": "^6.0.2"
+      }
+    },
     "node_modules/picocolors": {
       "version": "1.1.1",
       "resolved": "https://registry.npmjs.org/picocolors/-/picocolors-1.1.1.tgz",
@@ -3044,6 +3359,16 @@
         "node": "^10 || ^12 || >=14"
       }
     },
+    "node_modules/property-information": {
+      "version": "7.1.0",
+      "resolved": "https://registry.npmjs.org/property-information/-/property-information-7.1.0.tgz",
+      "integrity": "sha512-TwEZ+X+yCJmYfL7TPUOcvBZ4QfoT5YenQiJuX//0th53DE6w0xxLEtfK3iyryQFddXuvkIk51EEgrJQ0WJkOmQ==",
+      "license": "MIT",
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/wooorm"
+      }
+    },
     "node_modules/radix-ui": {
       "version": "1.4.3",
       "resolved": "https://registry.npmmirror.com/radix-ui/-/radix-ui-1.4.3.tgz",
@@ -3351,6 +3676,30 @@
         "redux": "^5.0.0"
       }
     },
+    "node_modules/regex": {
+      "version": "6.1.0",
+      "resolved": "https://registry.npmjs.org/regex/-/regex-6.1.0.tgz",
+      "integrity": "sha512-6VwtthbV4o/7+OaAF9I5L5V3llLEsoPyq9P1JVXkedTP33c7MfCG0/5NOPcSJn0TzXcG9YUrR0gQSWioew3LDg==",
+      "license": "MIT",
+      "dependencies": {
+        "regex-utilities": "^2.3.0"
+      }
+    },
+    "node_modules/regex-recursion": {
+      "version": "6.0.2",
+      "resolved": "https://registry.npmjs.org/regex-recursion/-/regex-recursion-6.0.2.tgz",
+      "integrity": "sha512-0YCaSCq2VRIebiaUviZNs0cBz1kg5kVS2UKUfNIx8YVs1cN3AV7NTctO5FOKBA+UT2BPJIWZauYHPqJODG50cg==",
+      "license": "MIT",
+      "dependencies": {
+        "regex-utilities": "^2.3.0"
+      }
+    },
+    "node_modules/regex-utilities": {
+      "version": "2.3.0",
+      "resolved": "https://registry.npmjs.org/regex-utilities/-/regex-utilities-2.3.0.tgz",
+      "integrity": "sha512-8VhliFJAWRaUiVvREIiW2NXXTmHs4vMNnSzuJVhscgmGav3g9VDxLrQndI3dZZVVdp0ZO/5v0xmX516/7M9cng==",
+      "license": "MIT"
+    },
     "node_modules/reselect": {
       "version": "5.1.1",
       "resolved": "https://registry.npmmirror.com/reselect/-/reselect-5.1.1.tgz",
@@ -3408,6 +3757,22 @@
       "integrity": "sha512-oeM1lpU/UvhTxw+g3cIfxXHyJRc/uidd3yK1P242gzHds0udQBYzs3y8j4gCCW+ZJ7ad0yctld8RYO+bdurlvw==",
       "license": "MIT"
     },
+    "node_modules/shiki": {
+      "version": "3.23.0",
+      "resolved": "https://registry.npmjs.org/shiki/-/shiki-3.23.0.tgz",
+      "integrity": "sha512-55Dj73uq9ZXL5zyeRPzHQsK7Nbyt6Y10k5s7OjuFZGMhpp4r/rsLBH0o/0fstIzX1Lep9VxefWljK/SKCzygIA==",
+      "license": "MIT",
+      "dependencies": {
+        "@shikijs/core": "3.23.0",
+        "@shikijs/engine-javascript": "3.23.0",
+        "@shikijs/engine-oniguruma": "3.23.0",
+        "@shikijs/langs": "3.23.0",
+        "@shikijs/themes": "3.23.0",
+        "@shikijs/types": "3.23.0",
+        "@shikijs/vscode-textmate": "^10.0.2",
+        "@types/hast": "^3.0.4"
+      }
+    },
     "node_modules/source-map-js": {
       "version": "1.2.1",
       "resolved": "https://registry.npmmirror.com/source-map-js/-/source-map-js-1.2.1.tgz",
@@ -3417,6 +3782,30 @@
         "node": ">=0.10.0"
       }
     },
+    "node_modules/space-separated-tokens": {
+      "version": "2.0.2",
+      "resolved": "https://registry.npmjs.org/space-separated-tokens/-/space-separated-tokens-2.0.2.tgz",
+      "integrity": "sha512-PEGlAwrG8yXGXRjW32fGbg66JAlOAwbObuqVoJpv/mRgoWDQfgH1wDPvtzWyUSNAXBGSk8h755YDbbcEy3SH2Q==",
+      "license": "MIT",
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/wooorm"
+      }
+    },
+    "node_modules/stringify-entities": {
+      "version": "4.0.4",
+      "resolved": "https://registry.npmjs.org/stringify-entities/-/stringify-entities-4.0.4.tgz",
+      "integrity": "sha512-IwfBptatlO+QCJUo19AqvrPNqlVMpW9YEL2LIVY+Rpv2qsjCGxaDLNRgeGsQWJhfItebuJhsGSLjaBbNSQ+ieg==",
+      "license": "MIT",
+      "dependencies": {
+        "character-entities-html4": "^2.0.0",
+        "character-entities-legacy": "^3.0.0"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/wooorm"
+      }
+    },
     "node_modules/tailwind-merge": {
       "version": "3.5.0",
       "resolved": "https://registry.npmmirror.com/tailwind-merge/-/tailwind-merge-3.5.0.tgz",
@@ -3468,6 +3857,16 @@
         "url": "https://github.com/sponsors/SuperchupuDev"
       }
     },
+    "node_modules/trim-lines": {
+      "version": "3.0.1",
+      "resolved": "https://registry.npmjs.org/trim-lines/-/trim-lines-3.0.1.tgz",
+      "integrity": "sha512-kRj8B+YHZCc9kQYdWfJB2/oUl9rA99qbowYYBtr4ui4mZyAQ2JpvVBd/6U2YloATfqBhBTSMhTpgBHtU0Mf3Rg==",
+      "license": "MIT",
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/wooorm"
+      }
+    },
     "node_modules/tslib": {
       "version": "2.8.1",
       "resolved": "https://registry.npmmirror.com/tslib/-/tslib-2.8.1.tgz",
@@ -3488,6 +3887,74 @@
         "node": ">=14.17"
       }
     },
+    "node_modules/unist-util-is": {
+      "version": "6.0.1",
+      "resolved": "https://registry.npmjs.org/unist-util-is/-/unist-util-is-6.0.1.tgz",
+      "integrity": "sha512-LsiILbtBETkDz8I9p1dQ0uyRUWuaQzd/cuEeS1hoRSyW5E5XGmTzlwY1OrNzzakGowI9Dr/I8HVaw4hTtnxy8g==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/unist": "^3.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/unist-util-position": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/unist-util-position/-/unist-util-position-5.0.0.tgz",
+      "integrity": "sha512-fucsC7HjXvkB5R3kTCO7kUjRdrS0BJt3M/FPxmHMBOm8JQi2BsHAHFsy27E0EolP8rp0NzXsJ+jNPyDWvOJZPA==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/unist": "^3.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/unist-util-stringify-position": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/unist-util-stringify-position/-/unist-util-stringify-position-4.0.0.tgz",
+      "integrity": "sha512-0ASV06AAoKCDkS2+xw5RXJywruurpbC4JZSm7nr7MOt1ojAzvyyaO+UxZf18j8FCF6kmzCZKcAgN/yu2gm2XgQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/unist": "^3.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/unist-util-visit": {
+      "version": "5.1.0",
+      "resolved": "https://registry.npmjs.org/unist-util-visit/-/unist-util-visit-5.1.0.tgz",
+      "integrity": "sha512-m+vIdyeCOpdr/QeQCu2EzxX/ohgS8KbnPDgFni4dQsfSCtpz8UqDyY5GjRru8PDKuYn7Fq19j1CQ+nJSsGKOzg==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/unist": "^3.0.0",
+        "unist-util-is": "^6.0.0",
+        "unist-util-visit-parents": "^6.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/unist-util-visit-parents": {
+      "version": "6.0.2",
+      "resolved": "https://registry.npmjs.org/unist-util-visit-parents/-/unist-util-visit-parents-6.0.2.tgz",
+      "integrity": "sha512-goh1s1TBrqSqukSc8wrjwWhL0hiJxgA8m4kFxGlQ+8FYQ3C/m11FcTs4YYem7V664AhHVvgoQLk890Ssdsr2IQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/unist": "^3.0.0",
+        "unist-util-is": "^6.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
     "node_modules/use-callback-ref": {
       "version": "1.3.3",
       "resolved": "https://registry.npmmirror.com/use-callback-ref/-/use-callback-ref-1.3.3.tgz",
@@ -3540,6 +4007,34 @@
         "react": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0"
       }
     },
+    "node_modules/vfile": {
+      "version": "6.0.3",
+      "resolved": "https://registry.npmjs.org/vfile/-/vfile-6.0.3.tgz",
+      "integrity": "sha512-KzIbH/9tXat2u30jf+smMwFCsno4wHVdNmzFyL+T/L3UGqqk6JKfVqOFOZEpZSHADH1k40ab6NUIXZq422ov3Q==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/unist": "^3.0.0",
+        "vfile-message": "^4.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/vfile-message": {
+      "version": "4.0.3",
+      "resolved": "https://registry.npmjs.org/vfile-message/-/vfile-message-4.0.3.tgz",
+      "integrity": "sha512-QTHzsGd1EhbZs4AsQ20JX1rC3cOlt/IWJruk893DfLRr57lcnOeMaWG4K0JrRta4mIJZKth2Au3mM3u03/JWKw==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/unist": "^3.0.0",
+        "unist-util-stringify-position": "^4.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
     "node_modules/victory-vendor": {
       "version": "37.3.6",
       "resolved": "https://registry.npmmirror.com/victory-vendor/-/victory-vendor-37.3.6.tgz",
@@ -3647,6 +4142,16 @@
       "engines": {
         "node": ">=0.10.0"
       }
+    },
+    "node_modules/zwitch": {
+      "version": "2.0.4",
+      "resolved": "https://registry.npmjs.org/zwitch/-/zwitch-2.0.4.tgz",
+      "integrity": "sha512-bXE4cR/kVZhKZX/RjPEflHaKVhUVl85noU3v6b8apfQEc1x4A+zBxjZ4lN8LqGd6WZ3dl98pY4o717VFmoPp+A==",
+      "license": "MIT",
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/wooorm"
+      }
     }
   }
 }
diff --git a/frontend/package.json b/frontend/package.json
index df7af35d..e112835e 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -21,6 +21,7 @@
     "react-i18next": "^16.6.6",
     "react-router-dom": "^7.1.0",
     "recharts": "^3.8.0",
+    "shiki": "^3.23.0",
     "tailwind-merge": "^3.5.0",
     "tailwindcss": "^4.2.2"
   },
diff --git a/frontend/src/App.tsx b/frontend/src/App.tsx
index 2fb6d03b..8466c7e6 100644
--- a/frontend/src/App.tsx
+++ b/frontend/src/App.tsx
@@ -13,8 +13,7 @@ const OperationsErrors = lazy(() => import('./pages/OperationsErrors'))
 const Proxies = lazy(() => import('./pages/Proxies'))
 const SchedulerBoard = lazy(() => import('./pages/SchedulerBoard'))
 const Settings = lazy(() => import('./pages/Settings'))
-const Guide = lazy(() => import('./pages/Guide'))
-const ApiReference = lazy(() => import('./pages/ApiReference'))
+const Docs = lazy(() => import('./pages/Docs'))
 const APIKeys = lazy(() => import('./pages/APIKeys'))
 const Usage = lazy(() => import('./pages/Usage'))
 const ImageStudio = lazy(() => import('./pages/ImageStudio'))
@@ -42,8 +41,9 @@ export default function App() {
                 <Route path="/ops/scheduler" element={<SchedulerBoard />} />
                 <Route path="/usage" element={<Usage />} />
                 <Route path="/settings" element={<Settings />} />
-                <Route path="/docs" element={<Guide />} />
-                <Route path="/api-reference" element={<ApiReference />} />
+                <Route path="/docs" element={<Docs />} />
+                <Route path="/guide" element={<Navigate to="/docs" replace />} />
+                <Route path="/api-reference" element={<Navigate to="/docs#model-api" replace />} />
               </Routes>
             </Suspense>
           </RouteErrorBoundary>
diff --git a/frontend/src/api.ts b/frontend/src/api.ts
index 18501e38..5d79e9a9 100644
--- a/frontend/src/api.ts
+++ b/frontend/src/api.ts
@@ -38,10 +38,15 @@ import type {
   CPAExportEntry,
   SystemSettings,
   UpdateAccountSchedulerRequest,
+  UpdateAPIKeyRequest,
   UpdateOpenAIResponsesAccountRequest,
   UsageLogsResponse,
   UsageLogsPagedResponse,
   UsageStats,
+  AccountGroup,
+  AccountGroupsResponse,
+  CreateAccountGroupRequest,
+  UpdateAccountGroupRequest,
 } from './types'
 
 const BASE = '/api/admin'
@@ -100,6 +105,7 @@ async function request<T>(path: string, options: RequestInit = {}): Promise<T> {
 
   const res = await fetch(BASE + path, {
     ...options,
+    cache: options.cache ?? 'no-store',
     headers,
   })
 
@@ -201,6 +207,13 @@ export const api = {
     request<MessageResponse>(`/accounts/${id}/refresh`, { method: 'POST' }),
   updateAccountScheduler: (id: number, data: UpdateAccountSchedulerRequest) =>
     request<MessageResponse>(`/accounts/${id}/scheduler`, { method: 'PATCH', body: JSON.stringify(data) }),
+  listAccountGroups: () => request<AccountGroupsResponse>('/account-groups'),
+  createAccountGroup: (data: CreateAccountGroupRequest) =>
+    request<{ id: number; message: string }>('/account-groups', { method: 'POST', body: JSON.stringify(data) }),
+  updateAccountGroup: (id: number, data: UpdateAccountGroupRequest) =>
+    request<MessageResponse>(`/account-groups/${id}`, { method: 'PATCH', body: JSON.stringify(data) }),
+  deleteAccountGroup: (id: number, force = false) =>
+    request<MessageResponse>(`/account-groups/${id}${force ? '?force=true' : ''}`, { method: 'DELETE' }),
   toggleAccountEnabled: (id: number, enabled: boolean) =>
     request<MessageResponse>(`/accounts/${id}/enable`, { method: 'POST', body: JSON.stringify({ enabled }) }),
   toggleAccountLock: (id: number, locked: boolean) =>
@@ -311,6 +324,8 @@ export const api = {
     }),
   deleteAPIKey: (id: number) =>
     request<MessageResponse>(`/keys/${id}`, { method: 'DELETE' }),
+  updateAPIKey: (id: number, data: UpdateAPIKeyRequest) =>
+    request<MessageResponse>(`/keys/${id}`, { method: 'PATCH', body: JSON.stringify(data) }),
   getImagePromptTemplates: (params: { q?: string; tag?: string } = {}) => {
     const sp = new URLSearchParams()
     if (params.q) sp.set('q', params.q)
@@ -424,7 +439,7 @@ export const api = {
     request<{ message: string; inserted: number; total: number }>('/proxies', { method: 'POST', body: JSON.stringify(data) }),
   deleteProxy: (id: number) =>
     request<MessageResponse>(`/proxies/${id}`, { method: 'DELETE' }),
-  updateProxy: (id: number, data: { label?: string; enabled?: boolean }) =>
+  updateProxy: (id: number, data: { url?: string; label?: string; enabled?: boolean }) =>
     request<MessageResponse>(`/proxies/${id}`, { method: 'PATCH', body: JSON.stringify(data) }),
   batchDeleteProxies: (ids: number[]) =>
     request<{ message: string; deleted: number }>('/proxies/batch-delete', { method: 'POST', body: JSON.stringify({ ids }) }),
diff --git a/frontend/src/components/ChipInput.tsx b/frontend/src/components/ChipInput.tsx
new file mode 100644
index 00000000..79843a27
--- /dev/null
+++ b/frontend/src/components/ChipInput.tsx
@@ -0,0 +1,219 @@
+import {
+  useCallback,
+  useEffect,
+  useMemo,
+  useRef,
+  useState,
+  type KeyboardEvent,
+  type ChangeEvent,
+} from "react";
+import { X, ChevronDown } from "lucide-react";
+
+export interface ChipInputProps {
+  value: string[];
+  onChange: (next: string[]) => void;
+  /** Pre-defined options for select-from-list mode */
+  options?: string[];
+  placeholder?: string;
+  disabled?: boolean;
+  maxVisible?: number;
+  className?: string;
+}
+
+/**
+ * Reusable multi-select chip input supporting:
+ * - Free-text tag entry (type + Enter/comma to add)
+ * - Select-from-list mode (with options prop)
+ * - Chips with X to remove
+ * - Max N visible chips + "+N" overflow badge
+ */
+export default function ChipInput({
+  value,
+  onChange,
+  options,
+  placeholder = "",
+  disabled = false,
+  maxVisible = 3,
+  className = "",
+}: ChipInputProps) {
+  const [draft, setDraft] = useState("");
+  const [showDropdown, setShowDropdown] = useState(false);
+  const inputRef = useRef<HTMLInputElement>(null);
+  const containerRef = useRef<HTMLDivElement>(null);
+
+  const hasOptions = Array.isArray(options) && options.length > 0;
+
+  const availableOptions = useMemo(() => {
+    if (!hasOptions) return [];
+    const selected = new Set(value.map((v) => v.toLowerCase()));
+    return options!.filter((opt) => !selected.has(opt.toLowerCase()));
+  }, [hasOptions, options, value]);
+
+  const addChip = useCallback(
+    (tag: string) => {
+      const trimmed = tag.trim();
+      if (!trimmed) return;
+      const lower = trimmed.toLowerCase();
+      if (value.some((v) => v.toLowerCase() === lower)) return;
+      onChange([...value, trimmed]);
+      setDraft("");
+      setShowDropdown(false);
+    },
+    [value, onChange],
+  );
+
+  const removeChip = useCallback(
+    (index: number) => {
+      const next = [...value];
+      next.splice(index, 1);
+      onChange(next);
+    },
+    [value, onChange],
+  );
+
+  const handleKeyDown = useCallback(
+    (e: KeyboardEvent<HTMLInputElement>) => {
+      if (disabled) return;
+      if (e.key === "Enter" || e.key === ",") {
+        e.preventDefault();
+        if (draft.trim()) {
+          addChip(draft);
+        }
+      } else if (e.key === "Backspace" && !draft && value.length > 0) {
+        removeChip(value.length - 1);
+      }
+    },
+    [disabled, draft, addChip, removeChip, value.length],
+  );
+
+  const handleChange = useCallback(
+    (e: ChangeEvent<HTMLInputElement>) => {
+      const v = e.target.value;
+      if (v.includes(",")) {
+        const parts = v.split(",");
+        const existing = new Set(value.map((item) => item.toLowerCase()));
+        const toAdd: string[] = [];
+        for (let i = 0; i < parts.length - 1; i++) {
+          const trimmed = parts[i].trim();
+          if (!trimmed) continue;
+          const lowered = trimmed.toLowerCase();
+          if (existing.has(lowered)) continue;
+          existing.add(lowered);
+          toAdd.push(trimmed);
+        }
+        if (toAdd.length > 0) {
+          onChange([...value, ...toAdd]);
+        }
+        setDraft(parts[parts.length - 1]);
+      } else {
+        setDraft(v);
+      }
+      if (hasOptions) setShowDropdown(true);
+    },
+    [hasOptions, onChange, value],
+  );
+
+  // Close dropdown on outside click
+  useEffect(() => {
+    if (!showDropdown) return;
+    const handler = (e: MouseEvent) => {
+      if (
+        containerRef.current &&
+        !containerRef.current.contains(e.target as Node)
+      ) {
+        setShowDropdown(false);
+      }
+    };
+    document.addEventListener("mousedown", handler);
+    return () => document.removeEventListener("mousedown", handler);
+  }, [showDropdown]);
+
+  const visibleChips = value.slice(0, maxVisible);
+  const overflowCount = value.length - maxVisible;
+
+  return (
+    <div ref={containerRef} className={`relative ${className}`}>
+      <div
+        className={`flex flex-wrap items-center gap-1.5 rounded-md border border-input bg-background px-2 py-1.5 text-sm
+          ${disabled ? "opacity-50 cursor-not-allowed" : "cursor-text"}
+          focus-within:ring-2 focus-within:ring-ring focus-within:ring-offset-1`}
+        onClick={() => inputRef.current?.focus()}
+      >
+        {visibleChips.map((chip, i) => (
+          <span
+            key={`${chip}-${i}`}
+            className="inline-flex items-center gap-1 rounded-md bg-primary/10 text-primary px-2 py-0.5 text-xs font-medium"
+          >
+            {chip}
+            {!disabled && (
+              <button
+                type="button"
+                onClick={(e) => {
+                  e.stopPropagation();
+                  removeChip(i);
+                }}
+                className="ml-0.5 rounded-full hover:bg-primary/20 p-0.5 transition-colors"
+                aria-label={`Remove ${chip}`}
+              >
+                <X className="size-3" />
+              </button>
+            )}
+          </span>
+        ))}
+        {overflowCount > 0 && (
+          <span className="inline-flex items-center rounded-md bg-muted text-muted-foreground px-2 py-0.5 text-xs font-medium">
+            +{overflowCount}
+          </span>
+        )}
+        <input
+          ref={inputRef}
+          type="text"
+          value={draft}
+          onChange={handleChange}
+          onKeyDown={handleKeyDown}
+          onFocus={() => {
+            if (hasOptions) setShowDropdown(true);
+          }}
+          placeholder={value.length === 0 ? placeholder : ""}
+          disabled={disabled}
+          className="flex-1 min-w-[80px] bg-transparent outline-none text-sm placeholder:text-muted-foreground disabled:cursor-not-allowed"
+        />
+        {hasOptions && (
+          <button
+            type="button"
+            onClick={(e) => {
+              e.stopPropagation();
+              setShowDropdown(!showDropdown);
+              inputRef.current?.focus();
+            }}
+            className="shrink-0 p-0.5 text-muted-foreground hover:text-foreground transition-colors"
+            tabIndex={-1}
+          >
+            <ChevronDown
+              className={`size-4 transition-transform ${showDropdown ? "rotate-180" : ""}`}
+            />
+          </button>
+        )}
+      </div>
+
+      {/* Dropdown for select-from-list mode */}
+      {hasOptions && showDropdown && availableOptions.length > 0 && (
+        <div className="absolute z-50 mt-1 w-full max-h-48 overflow-auto rounded-md border border-border bg-popover shadow-md">
+          {availableOptions.map((opt) => (
+            <button
+              key={opt}
+              type="button"
+              className="w-full text-left px-3 py-1.5 text-sm hover:bg-accent hover:text-accent-foreground transition-colors"
+              onMouseDown={(e) => {
+                e.preventDefault();
+                addChip(opt);
+              }}
+            >
+              {opt}
+            </button>
+          ))}
+        </div>
+      )}
+    </div>
+  );
+}
diff --git a/frontend/src/components/Layout.tsx b/frontend/src/components/Layout.tsx
index 5894ebd0..e5f83fb1 100644
--- a/frontend/src/components/Layout.tsx
+++ b/frontend/src/components/Layout.tsx
@@ -1,6 +1,6 @@
 import { type PropsWithChildren, type ReactNode, useEffect, useRef, useState } from 'react'
 import { NavLink, useLocation } from 'react-router-dom'
-import { LayoutDashboard, Users, Activity, Settings, Server, Sun, Moon, Languages, Globe, BookOpen, FileCode2, KeyRound, Image as ImageIcon, ShieldAlert, ExternalLink } from 'lucide-react'
+import { LayoutDashboard, Users, Activity, Settings, Server, Sun, Moon, Languages, Globe, BookOpen, KeyRound, Image as ImageIcon, ShieldAlert, ExternalLink } from 'lucide-react'
 import { useTranslation } from 'react-i18next'
 import { api } from '../api'
 import { DEFAULT_SITE_LOGO, useBranding } from '../branding'
@@ -29,7 +29,6 @@ const navDefs: NavDef[] = [
   { to: '/usage', labelKey: 'nav.usage', icon: <Activity className="size-[18px]" /> },
   { to: '/settings', labelKey: 'nav.settings', icon: <Settings className="size-[18px]" /> },
   { to: '/docs', labelKey: 'nav2.docs', icon: <BookOpen className="size-[18px]" /> },
-  { to: '/api-reference', labelKey: 'nav2.apiRef', icon: <FileCode2 className="size-[18px]" /> },
 ]
 
 export default function Layout({ children }: PropsWithChildren) {
diff --git a/frontend/src/components/PageHeader.tsx b/frontend/src/components/PageHeader.tsx
index 4d602b83..24b101c3 100644
--- a/frontend/src/components/PageHeader.tsx
+++ b/frontend/src/components/PageHeader.tsx
@@ -9,6 +9,7 @@ interface PageHeaderProps {
   onRefresh?: () => void
   refreshLabel?: string
   actions?: ReactNode
+  actionMeta?: ReactNode
 }
 
 export default function PageHeader({
@@ -17,9 +18,10 @@ export default function PageHeader({
   onRefresh,
   refreshLabel,
   actions,
+  actionMeta,
 }: PageHeaderProps) {
   const { t } = useTranslation()
-  const hasActions = Boolean(onRefresh) || Boolean(actions)
+  const hasActions = Boolean(onRefresh) || Boolean(actions) || Boolean(actionMeta)
   const resolvedRefreshLabel = refreshLabel ?? t('common.refresh')
 
   return (
@@ -35,14 +37,21 @@ export default function PageHeader({
         ) : null}
       </div>
       {hasActions ? (
-        <div className="flex flex-wrap justify-end gap-2 items-center max-sm:w-full max-sm:justify-start">
-          {onRefresh ? (
-            <Button variant="outline" onClick={onRefresh} className="max-sm:w-full">
-              <RefreshCw className="size-3.5" />
-              {resolvedRefreshLabel}
-            </Button>
+        <div className="flex min-w-0 flex-col items-end gap-2 max-sm:w-full max-sm:items-stretch">
+          {actionMeta ? (
+            <div className="text-right text-xs text-muted-foreground max-sm:text-left">
+              {actionMeta}
+            </div>
           ) : null}
-          {actions}
+          <div className="flex flex-wrap items-center justify-end gap-2 max-sm:w-full max-sm:justify-start">
+            {actions}
+            {onRefresh ? (
+              <Button variant="outline" onClick={onRefresh} className="max-sm:w-full">
+                <RefreshCw className="size-3.5" />
+                {resolvedRefreshLabel}
+              </Button>
+            ) : null}
+          </div>
         </div>
       ) : null}
     </div>
diff --git a/frontend/src/components/UsageStatsSummary.tsx b/frontend/src/components/UsageStatsSummary.tsx
new file mode 100644
index 00000000..4ac6b18d
--- /dev/null
+++ b/frontend/src/components/UsageStatsSummary.tsx
@@ -0,0 +1,136 @@
+import type { ReactNode } from 'react'
+import { useTranslation } from 'react-i18next'
+import { BarChart3, Clock, Gauge, Zap } from 'lucide-react'
+import type { UsageStats } from '../types'
+import { Card, CardContent } from '@/components/ui/card'
+
+interface UsageStatsSummaryProps {
+  stats: UsageStats
+  className?: string
+}
+
+export default function UsageStatsSummary({ stats, className = '' }: UsageStatsSummaryProps) {
+  const { t, i18n } = useTranslation()
+  const locale = i18n.language
+
+  return (
+    <Card className={`py-0 ${className}`}>
+      <CardContent className="p-4">
+        <h3 className="mb-3 text-base font-semibold text-foreground">{t('dashboard.usageStats')}</h3>
+        <div className="grid gap-3 md:grid-cols-2 xl:grid-cols-4">
+          <MetricGroup
+            icon={<BarChart3 className="size-5" />}
+            iconBg="bg-blue-500/10 text-blue-500"
+            title={t('dashboard.trafficGroup')}
+            primaryLabel={t('dashboard.todayRequests')}
+            primaryValue={formatInteger(stats.today_requests, locale)}
+          >
+            <MetricLine label={t('dashboard.totalRequests')} value={formatInteger(stats.total_requests, locale)} />
+            <MetricLine label={t('dashboard.rpmTpm')} value={`${formatInteger(stats.rpm, locale)} / ${formatInteger(stats.tpm, locale)}`} />
+          </MetricGroup>
+
+          <MetricGroup
+            icon={<Zap className="size-5" />}
+            iconBg="bg-purple-500/10 text-purple-500"
+            title={t('dashboard.tokenGroup')}
+            primaryLabel={t('dashboard.todayTokens')}
+            primaryValue={formatInteger(stats.today_tokens, locale)}
+          >
+            <MetricLine label={t('dashboard.totalTokens')} value={formatInteger(stats.total_tokens, locale)} />
+            <MetricLine label={t('dashboard.billing')} value={`${t('usage.todayCost')}: ${formatMoney(stats.today_user_billed)} / ${t('dashboard.totalCostShort')}: ${formatMoney(stats.total_user_billed)}`} />
+          </MetricGroup>
+
+          <MetricGroup
+            icon={<Gauge className="size-5" />}
+            iconBg="bg-teal-500/10 text-teal-500"
+            title={t('dashboard.cacheGroup')}
+            primaryLabel={t('dashboard.todayCacheHitRate')}
+            primaryValue={formatPercent(stats.today_cache_rate ?? 0)}
+          >
+            <MetricLine label={t('dashboard.todayCachedTokens')} value={formatInteger(stats.today_cached_tokens ?? 0, locale)} />
+            <MetricLine label={t('dashboard.totalCacheHitRate')} value={formatPercent(stats.total_cache_rate ?? 0)} />
+          </MetricGroup>
+
+          <MetricGroup
+            icon={<Clock className="size-5" />}
+            iconBg="bg-cyan-500/10 text-cyan-500"
+            title={t('dashboard.healthGroup')}
+            primaryLabel={t('dashboard.avgFirstTokenLatency')}
+            primaryValue={formatLatency(stats.avg_first_token_ms)}
+          >
+            <MetricLine label={t('dashboard.avgCompletionLatency')} value={formatLatency(stats.avg_duration_ms)} />
+            <MetricLine label={t('dashboard.todayErrorRate')} value={formatPercent(stats.error_rate)} tone={stats.error_rate > 1 ? 'danger' : 'default'} />
+          </MetricGroup>
+        </div>
+      </CardContent>
+    </Card>
+  )
+}
+
+function MetricGroup({
+  icon,
+  iconBg,
+  title,
+  primaryLabel,
+  primaryValue,
+  children,
+}: {
+  icon: ReactNode
+  iconBg: string
+  title: string
+  primaryLabel: string
+  primaryValue: string
+  children: ReactNode
+}) {
+  return (
+    <section className="min-w-0 rounded-lg border border-border/70 bg-muted/25 p-3.5">
+      <div className="mb-2.5 flex items-center gap-3">
+        <div className={`flex size-8 shrink-0 items-center justify-center rounded-md ${iconBg}`} aria-hidden="true">
+          {icon}
+        </div>
+        <div className="min-w-0">
+          <div className="truncate text-sm font-semibold text-foreground" title={title}>{title}</div>
+          <div className="truncate text-xs text-muted-foreground" title={primaryLabel}>{primaryLabel}</div>
+        </div>
+      </div>
+      <div className="truncate text-[26px] font-bold leading-none tabular-nums text-foreground" title={primaryValue}>
+        {primaryValue}
+      </div>
+      <div className="mt-2.5 space-y-1.5 border-t border-border/60 pt-2">
+        {children}
+      </div>
+    </section>
+  )
+}
+
+function MetricLine({ label, value, tone = 'default' }: { label: string; value: string; tone?: 'default' | 'danger' }) {
+  return (
+    <div className="flex min-w-0 items-center justify-between gap-3 text-sm">
+      <span className="truncate text-muted-foreground" title={label}>{label}</span>
+      <span className={`shrink-0 font-semibold tabular-nums ${tone === 'danger' ? 'text-destructive' : 'text-foreground'}`} title={value}>
+        {value}
+      </span>
+    </div>
+  )
+}
+
+function formatInteger(value: number, locale: string): string {
+  return Math.round(value).toLocaleString(locale)
+}
+
+function formatPercent(value: number): string {
+  return `${value.toFixed(value >= 10 ? 1 : 2)}%`
+}
+
+function formatLatency(value?: number): string {
+  const ms = value ?? 0
+  if (ms <= 0) return '-'
+  if (ms >= 1000) return `${(ms / 1000).toFixed(1)}s`
+  return `${Math.round(ms)}ms`
+}
+
+function formatMoney(value: number): string {
+  if (value >= 100) return `$${value.toLocaleString(undefined, { maximumFractionDigits: 1 })}`
+  if (value >= 1) return `$${value.toFixed(2)}`
+  return `$${value.toFixed(4)}`
+}
diff --git a/frontend/src/components/ui/card.tsx b/frontend/src/components/ui/card.tsx
index 2140afcb..d2536bd0 100644
--- a/frontend/src/components/ui/card.tsx
+++ b/frontend/src/components/ui/card.tsx
@@ -7,7 +7,7 @@ function Card({ className, ...props }: React.ComponentProps<"div">) {
     <div
       data-slot="card"
       className={cn(
-        "flex flex-col gap-5 rounded-lg border bg-card py-5 text-card-foreground shadow-sm",
+        "flex flex-col gap-4 rounded-lg border bg-card text-card-foreground shadow-sm",
         className
       )}
       {...props}
@@ -20,7 +20,7 @@ function CardHeader({ className, ...props }: React.ComponentProps<"div">) {
     <div
       data-slot="card-header"
       className={cn(
-        "@container/card-header grid auto-rows-min grid-rows-[auto_auto] items-start gap-2 px-6 has-data-[slot=card-action]:grid-cols-[1fr_auto] [.border-b]:pb-6",
+        "@container/card-header grid auto-rows-min grid-rows-[auto_auto] items-start gap-2 p-5 has-data-[slot=card-action]:grid-cols-[1fr_auto] [.border-b]:pb-5",
         className
       )}
       {...props}
@@ -65,7 +65,7 @@ function CardContent({ className, ...props }: React.ComponentProps<"div">) {
   return (
     <div
       data-slot="card-content"
-      className={cn("px-6", className)}
+      className={cn("p-5", className)}
       {...props}
     />
   )
@@ -75,7 +75,7 @@ function CardFooter({ className, ...props }: React.ComponentProps<"div">) {
   return (
     <div
       data-slot="card-footer"
-      className={cn("flex items-center px-6 [.border-t]:pt-6", className)}
+      className={cn("flex items-center p-5 [.border-t]:pt-5", className)}
       {...props}
     />
   )
diff --git a/frontend/src/hooks/useHighlighter.ts b/frontend/src/hooks/useHighlighter.ts
new file mode 100644
index 00000000..209dae2f
--- /dev/null
+++ b/frontend/src/hooks/useHighlighter.ts
@@ -0,0 +1,126 @@
+import { useEffect, useState } from "react";
+import type { HighlighterCore } from "shiki/core";
+
+let highlighterPromise: Promise<HighlighterCore> | null = null;
+const htmlCache = new Map<string, string>();
+const MAX_CACHE_SIZE = 80;
+
+function getHighlighter() {
+  if (!highlighterPromise) {
+    highlighterPromise = Promise.all([
+      import("shiki/core"),
+      import("shiki/engine/javascript"),
+      import("shiki/themes/dark-plus.mjs"),
+      import("shiki/themes/github-light-default.mjs"),
+      import("shiki/langs/json.mjs"),
+      import("shiki/langs/shellscript.mjs"),
+      import("shiki/langs/toml.mjs"),
+    ])
+      .then(
+        ([core, engine, darkPlus, githubLight, json, shellscript, toml]) => {
+          return core.createHighlighterCore({
+            themes: [githubLight.default, darkPlus.default],
+            langs: [json.default, toml.default, shellscript.default],
+            engine: engine.createJavaScriptRegexEngine(),
+          });
+        },
+      )
+      .catch((error) => {
+        highlighterPromise = null;
+        throw error;
+      });
+  }
+  return highlighterPromise;
+}
+
+function tuneLightTheme(html: string) {
+  return html
+    .replace(/#0550AE/gi, "#075985")
+    .replace(/#0969DA/gi, "#075985")
+    .replace(/#1F2328/gi, "#1f2937")
+    .replace(/#953800/gi, "#9a3412")
+    .replace(/#0A3069/gi, "#7c2d12")
+    .replace(/#CF222E/gi, "#b91c1c");
+}
+
+export function useHighlightedHtml(code: string, lang?: string) {
+  const [html, setHtml] = useState("");
+  const [isDark, setIsDark] = useState(() =>
+    document.documentElement.classList.contains("dark"),
+  );
+
+  useEffect(() => {
+    const root = document.documentElement;
+    const observer = new MutationObserver(() => {
+      setIsDark(root.classList.contains("dark"));
+    });
+    observer.observe(root, { attributes: true, attributeFilter: ["class"] });
+    return () => observer.disconnect();
+  }, []);
+
+  useEffect(() => {
+    let cancelled = false;
+    const resolvedLang =
+      lang === "bash" || lang === "shell" || lang === "curl"
+        ? "shellscript"
+        : lang || "text";
+
+    if (!code) {
+      setHtml("");
+      return () => {
+        cancelled = true;
+      };
+    }
+    const cacheKey = `${isDark ? "dark" : "light"}:${resolvedLang}:${code}`;
+    const cached = htmlCache.get(cacheKey);
+    if (cached) {
+      setHtml(cached);
+      return () => {
+        cancelled = true;
+      };
+    }
+
+    getHighlighter()
+      .then((hl) => {
+        if (cancelled) return;
+        try {
+          const result = hl.codeToHtml(code, {
+            lang: resolvedLang,
+            theme: isDark ? "dark-plus" : "github-light-default",
+          });
+          const cacheKey = `${isDark ? "dark" : "light"}:${resolvedLang}:${code}`;
+          const nextHtml = isDark ? result : tuneLightTheme(result);
+          if (htmlCache.size >= MAX_CACHE_SIZE) {
+            const firstKey = htmlCache.keys().next().value;
+            if (firstKey) htmlCache.delete(firstKey);
+          }
+          htmlCache.set(cacheKey, nextHtml);
+          setHtml(nextHtml);
+        } catch (error) {
+          console.warn("highlight failed", {
+            resolvedLang,
+            isDark,
+            codeLength: code.length,
+            error,
+          });
+          setHtml("");
+        }
+      })
+      .catch((error) => {
+        if (cancelled) return;
+        console.warn("highlight failed", {
+          resolvedLang,
+          isDark,
+          codeLength: code.length,
+          error,
+        });
+        setHtml("");
+      });
+
+    return () => {
+      cancelled = true;
+    };
+  }, [code, isDark, lang]);
+
+  return html;
+}
diff --git a/frontend/src/index.css b/frontend/src/index.css
index de62f72a..064ea5ea 100644
--- a/frontend/src/index.css
+++ b/frontend/src/index.css
@@ -4,8 +4,8 @@
 
 @theme {
   --font-sans: 'Inter', 'Noto Sans SC', 'PingFang SC', 'Microsoft YaHei', ui-sans-serif, system-ui, sans-serif;
-  --font-mono: 'JetBrains Mono', 'Fira Code', 'SFMono-Regular', ui-monospace, monospace;
-  --font-geist-mono: 'Geist Mono', 'JetBrains Mono', 'Fira Code', 'SFMono-Regular', ui-monospace, monospace;
+  --font-mono: 'Cascadia Mono', 'Cascadia Code', Consolas, 'JetBrains Mono', 'Fira Code', 'SFMono-Regular', ui-monospace, monospace;
+  --font-geist-mono: 'Cascadia Mono', 'Cascadia Code', Consolas, 'JetBrains Mono', 'Fira Code', 'SFMono-Regular', ui-monospace, monospace;
 
   --radius-sm: 0.25rem;
   --radius-md: 0.375rem;
@@ -120,6 +120,89 @@
   .data-table-shell [data-slot="table-row"]:hover {
     background: color-mix(in oklab, var(--color-muted) 58%, transparent);
   }
+
+  [data-slot="card"] {
+    @apply transition-[border-color,box-shadow,transform,background-color] duration-200;
+  }
+
+  button,
+  a {
+    @apply transition-[color,background-color,border-color,box-shadow,transform,opacity] duration-200;
+  }
+
+  button:not(:disabled):active {
+    transform: scale(0.99);
+  }
+
+  code,
+  pre {
+    font-family: var(--font-mono);
+    font-variant-ligatures: none;
+  }
+
+  .code-panel {
+    @apply overflow-hidden rounded-lg border border-slate-200/90 bg-slate-50/95 shadow-sm dark:border-border dark:bg-[hsl(222_12%_20%)];
+  }
+
+  .code-panel-header {
+    @apply flex items-center justify-between border-b border-slate-200/90 bg-slate-100/80 px-4 py-1.5 dark:border-border/80 dark:bg-[hsl(222_11%_23%)];
+  }
+
+  .code-panel-label {
+    @apply rounded-md bg-white px-2.5 py-1 text-xs font-semibold text-slate-600 ring-1 ring-slate-200 dark:bg-background/85 dark:text-foreground dark:ring-border/70;
+    font-family: var(--font-sans);
+  }
+
+  .code-panel-copy {
+    @apply inline-flex size-7 items-center justify-center rounded-md text-muted-foreground transition-all duration-200 hover:bg-muted hover:text-foreground hover:shadow-sm active:scale-95 dark:hover:bg-white/8;
+  }
+
+  .code-panel-pre {
+    @apply overflow-x-auto p-4 text-sm leading-relaxed text-slate-900 dark:text-[hsl(170_18%_94%)];
+    font-family: var(--font-mono);
+    font-variant-ligatures: none;
+  }
+
+  .code-inline {
+    @apply rounded-md border border-border bg-muted/55 px-2 py-0.5 text-[13px] font-semibold text-foreground;
+    font-family: var(--font-mono);
+    font-variant-ligatures: none;
+  }
+
+  .code-token-keyword { color: #c586c0; }
+  .code-token-string { color: #ce9178; }
+  .code-token-number { color: #b5cea8; }
+  .code-token-property { color: #9cdcfe; }
+  .code-token-command { color: #dcdcaa; }
+
+  .shiki-wrapper pre {
+    margin: 0;
+    padding: 0;
+    background: transparent !important;
+    overflow-x: auto;
+  }
+
+  .shiki-wrapper code {
+    font-family: var(--font-mono);
+    font-variant-ligatures: none;
+    font-size: inherit;
+    line-height: inherit;
+  }
+
+  @media (prefers-reduced-motion: reduce) {
+    *,
+    *::before,
+    *::after {
+      animation-duration: 0.01ms !important;
+      animation-iteration-count: 1 !important;
+      scroll-behavior: auto !important;
+      transition-duration: 0.01ms !important;
+    }
+
+    button:not(:disabled):active {
+      transform: none;
+    }
+  }
 }
 
 /* 主题切换 — View Transition 圆形扩散动画 */
diff --git a/frontend/src/locales/en.json b/frontend/src/locales/en.json
index 4dc3a9de..d4e470fa 100644
--- a/frontend/src/locales/en.json
+++ b/frontend/src/locales/en.json
@@ -107,6 +107,17 @@
     "rpmTpm": "RPM / TPM",
     "avgLatency": "Avg Latency",
     "todayErrorRate": "Error Rate (Today)",
+    "trafficGroup": "Traffic",
+    "tokenGroup": "Token",
+    "healthGroup": "Health",
+    "cacheGroup": "Cache",
+    "billing": "Billing",
+    "totalCostShort": "Total",
+    "todayCacheHitRate": "Today's Cache Hit Rate",
+    "todayCachedTokens": "Today's Cached Tokens",
+    "totalCacheHitRate": "Total Cache Hit Rate",
+    "avgFirstTokenLatency": "First Token Latency",
+    "avgCompletionLatency": "Completion Latency",
     "usageCharts": "Usage Trends",
     "usageChartsDesc": "Auto-aggregated from {{count}} logs in the selected time range.",
     "liveBadge": "Live",
@@ -238,6 +249,10 @@
     "usage5h": "5h",
     "usage7d": "7d",
     "resetIn": "Reset: {{time}}",
+    "usageReqUnit": "req",
+    "usageTokUnit": "tok",
+    "accountBilledLabel": "Account",
+    "userBilledLabel": "User",
     "quotaDistributionTitle": "Quota Distribution",
     "quotaDistributionDesc": "Used quota distribution for non-banned Codex accounts. Sampled {{sampled}} / {{total}} accounts.",
     "quotaDistributionEmpty": "No non-banned Codex accounts available.",
@@ -380,6 +395,42 @@
     "allowedAPIKeysPlaceholder": "Choose which tokens may use this account",
     "allowedAPIKeysNoOptions": "No API keys yet",
     "allowedAPIKeysNoOptionsHint": "No API keys have been created, so this account currently allows all callers.",
+    "tagsLabel": "Tags",
+    "tagsHint": "Add searchable free-text labels to this account.",
+    "tagsPlaceholder": "Type a tag and press Enter",
+    "tagsFilter": "All tags",
+    "groupsLabel": "Account Groups",
+    "groupsHint": "Assign groups for API key routing limits.",
+    "groupsPlaceholder": "Select groups",
+    "groupsFilter": "All groups",
+    "groupsNone": "No account groups",
+    "groupManage": "Manage Groups",
+    "groupManageTitle": "Account Group Management",
+    "groupCreate": "Create Group",
+    "groupCreateTitle": "Create Account Group",
+    "groupEdit": "Edit Group",
+    "groupEditTitle": "Edit Account Group",
+    "groupName": "Group Name",
+    "groupNameRequired": "Enter a group name",
+    "groupNamePlaceholder": "e.g. Pro Pool",
+    "groupDescription": "Description",
+    "groupDescriptionPlaceholder": "Optional description",
+    "groupColor": "Color",
+    "groupColorPlaceholder": "#2563eb",
+    "groupMembers": "Members",
+    "groupNoDescription": "No description",
+    "groupEmpty": "No groups yet",
+    "groupEmptyDesc": "Create groups, then assign them in account editing.",
+    "groupCreated": "Group created",
+    "groupUpdated": "Group updated",
+    "groupDeleted": "Group deleted",
+    "groupDeleteTitle": "Delete Account Group",
+    "groupDeleteDesc": "Accounts will be removed from this group.",
+    "groupDeleteWithMembers": "This group still has accounts. Force delete it?",
+    "groupDeleteEmpty": "Delete this empty group?",
+    "groupDeleteForce": "Force delete",
+    "columnSettings": "Columns",
+    "columnReset": "Reset columns",
     "schedulerPreviewTitle": "Current Scheduler Preview",
     "schedulerPreviewRawScore": "Raw Score",
     "schedulerPreviewDispatchScore": "Dispatch Score",
@@ -497,6 +548,11 @@
     "resetStatusFailed": "Reset failed: {{error}}",
     "batchResetStatus": "Reset Status",
     "batchResetStatusDone": "Batch reset complete: {{success}} succeeded, {{fail}} failed",
+    "batchMetaEdit": "Tags & Groups",
+    "batchMetaTitle": "Batch Edit Tags and Groups",
+    "batchMetaDesc": "The following tags and groups will be saved to {{count}} selected accounts. Leaving a field empty clears it.",
+    "batchMetaDone": "Batch metadata save complete: {{success}} succeeded, {{fail}} failed",
+    "batchMetaFailed": "Batch metadata save failed: {{error}}",
     "testAutoReset": "Test passed, account status has been automatically restored to normal"
   },
   "status": {
@@ -1021,6 +1077,7 @@
     "poolDisabled": "Proxy Pool Disabled",
     "deleteSelected": "Delete ({{count}})",
     "testingAll": "Testing...",
+    "testingAllProgress": "Testing {{current}} / {{total}}",
     "testAll": "Test All",
     "addProxy": "Add Proxy",
     "addProxyTitle": "Add Proxy",
@@ -1045,7 +1102,22 @@
     "disabled": "Inactive",
     "test": "Test",
     "testProxy": "Test Proxy",
-    "pagination": "{{total}} proxies, page {{page}}/{{totalPages}}"
+    "editProxy": "Edit proxy",
+    "editProxyTitle": "Edit Proxy",
+    "editUrlLabel": "Proxy URL",
+    "editLabelLabel": "Label",
+    "loadFailed": "Failed to load proxies",
+    "addFailed": "Failed to add proxy",
+    "deleteFailed": "Failed to delete proxy",
+    "batchDeleteFailed": "Batch delete failed",
+    "invalidProxyUrl": "Enter a valid proxy URL",
+    "proxyUpdated": "Proxy updated",
+    "testFailed": "Proxy test failed",
+    "testAllFailed": "Batch test failed",
+    "testFailedUnknown": "Unknown error",
+    "pagination": "{{total}} proxies, page {{page}}/{{totalPages}}",
+    "showProxyUrl": "Show proxy URL",
+    "hideProxyUrl": "Hide proxy URL"
   },
   "apiKeys": {
     "title": "API Keys",
@@ -1114,7 +1186,29 @@
       "quota_exhausted": "Quota exhausted"
     },
     "showKey": "Show key",
-    "hideKey": "Hide key"
+    "hideKey": "Hide key",
+    "allowedGroups": "Allowed Groups",
+    "allowedGroupsHint": "Leaving this empty allows the key to use all account groups.",
+    "allowedGroupsLabel": "Allowed Account Groups",
+    "allowedGroupsPlaceholder": "Choose allowed groups",
+    "allowedGroupsAll": "All groups",
+    "allowedGroupsNone": "No group limit",
+    "allowedGroupsMissing": "Group no longer exists",
+    "allowedGroupsSaved": "Allowed groups saved",
+    "allowedGroupsSaveFailed": "Failed to save allowed groups",
+    "permissionTitle": "Key Permissions",
+    "permissionDesc": "Restrict this key to specific account groups. Leaving it empty allows all groups.",
+    "editKey": "Edit",
+    "editTitle": "Edit Key",
+    "editDesc": "Adjust the name, quota, expiration, and account group permissions. The key value is not changed.",
+    "keyUpdated": "Key updated",
+    "updateFailed": "Failed to update",
+    "nameRequired": "Name is required",
+    "clearExpirationHint": "Saving will clear the expiration time and keep this key valid indefinitely.",
+    "relativeExpirationHint": "Saving will set the key to expire {{days}} days from now.",
+    "renameKey": "Rename key",
+    "keyRenamed": "Key renamed",
+    "renameFailed": "Rename failed"
   },
   "nav2": {
     "docs": "Docs",
@@ -1348,7 +1442,102 @@
       "send": "Send",
       "sending": "Sending…",
       "placeholder": "Click Send to make a request",
-      "selectKey": "Select key:"
+      "selectKey": "Select key:",
+      "authTitle": "Authentication",
+      "required": "Required",
+      "keyPlaceholder": "Enter key",
+      "requestBody": "Request body",
+      "responseTitle": "Response"
+    }
+  },
+  "docs": {
+    "title": "Documentation",
+    "description": "Complete integration guide, API endpoints and admin reference.",
+    "tocTitle": "Contents",
+    "copyMarkdown": "Copy as Markdown",
+    "markdownCopied": "Copied as Markdown",
+    "section1Eyebrow": "01 · Onboarding",
+    "section2Eyebrow": "02 · Clients",
+    "section3Eyebrow": "03 · Authentication",
+    "section4Eyebrow": "04 · Model API",
+    "section5Eyebrow": "05 · Admin API",
+    "toc": {
+      "quickStart": "Quick Start",
+      "qsTools": "AI Clients",
+      "qsCurl": "cURL Check",
+      "clientConfig": "Client Setup",
+      "modelMapping": "Model Mapping",
+      "authentication": "Authentication",
+      "modelApi": "Model API",
+      "adminApi": "Admin API"
+    },
+    "quickStart": {
+      "title": "Quick Start",
+      "description": "Pick your favorite AI client. Copy config or launch the app in one click.",
+      "toolsTitle": "One-click client setup",
+      "toolsDesc": "Curated set of CLI, desktop, web, and mobile tools.",
+      "launch": "Launch",
+      "needKey": "Create a key first",
+      "copyConfig": "Copy config",
+      "copyLink": "Copy link",
+      "copied": "Copied",
+      "openClient": "Open client",
+      "viewFullLink": "View full link",
+      "collapseFullLink": "Collapse full link",
+      "deeplinkBadge": "deeplink",
+      "useKey": "Use key",
+      "curlTitle": "cURL quick check",
+      "curlDesc": "Use these commands to verify your endpoints. YOUR_API_KEY auto-fills with your first API key.",
+      "createKeyFirst": "Create an API key first",
+      "copiedToast": "Copied {{name}} config",
+      "launchedToast": "Launching {{name}}"
+    },
+    "clientConfig": {
+      "title": "Client Configuration",
+      "description": "Wire this proxy into Codex CLI or Claude Code. Covers every supported protocol.",
+      "codexDesc": "Add the following config files to the Codex CLI config directory to route Codex traffic through this proxy.",
+      "defaultModel": "Default model",
+      "endpointLabel": "Endpoint",
+      "unixTerminal": "Terminal",
+      "windowsTerminal": "Command Prompt",
+      "importTarget": "Import target",
+      "configName": "Config name",
+      "providerId": "Provider ID",
+      "mappedTo": "Mapped to",
+      "backendDefaultModel": "backend default model",
+      "ccSwitchPreviewTitle": "CC Switch import preview",
+      "ccSwitchPreviewDesc": "Confirm the target app, endpoint, and models, then launch CC Switch to import directly.",
+      "cherryPreviewTitle": "Cherry Studio import preview",
+      "cherryPreviewDesc": "Generate a provider import link from the current endpoint and API key.",
+      "ccSwitchFields": {
+        "model": "Primary model",
+        "haikuModel": "Haiku model",
+        "sonnetModel": "Sonnet model",
+        "opusModel": "Opus model"
+      },
+      "codexConfigHint": "Make sure the content below appears at the top of config.toml",
+      "codexNoteUnix": "Make sure the config directory exists — run mkdir -p ~/.codex if not.",
+      "codexNoteWindows": "Press Win+R and enter %userprofile%\\.codex to open the config directory — create it manually if missing.",
+      "claudeDesc": "Set environment variables or edit settings.json to make Claude Code use this proxy.",
+      "claudeEnvNote": "Environment variables only persist for the current shell session — write them to ~/.bashrc or ~/.zshrc for permanent use.",
+      "claudeSettingsNote": "Or edit Claude Code's settings.json directly (pick one approach).",
+      "mappingTitle": "Model Mapping",
+      "mappingDesc": "On the /v1/messages endpoint, Claude model names are auto-mapped to Codex names. Customize the mapping in System Settings."
+    },
+    "authentication": {
+      "title": "Authentication",
+      "description": "All endpoints except /health require an API key. Admin endpoints additionally require X-Admin-Key.",
+      "bearerNote": "Standard (recommended)",
+      "xApiKeyNote": "Anthropic SDK default",
+      "adminNote": "Admin endpoints only"
+    },
+    "modelApi": {
+      "title": "Model API",
+      "description": "OpenAI Responses, Chat Completions, and Anthropic Messages — three compatible surfaces sharing one upstream pool."
+    },
+    "adminApi": {
+      "title": "Account Management API",
+      "description": "Add, delete, and list pool accounts. All endpoints require X-Admin-Key."
     }
   }
 }
diff --git a/frontend/src/locales/zh.json b/frontend/src/locales/zh.json
index bc7149ee..28e54d9a 100644
--- a/frontend/src/locales/zh.json
+++ b/frontend/src/locales/zh.json
@@ -107,6 +107,17 @@
     "rpmTpm": "RPM / TPM",
     "avgLatency": "平均延迟",
     "todayErrorRate": "今日错误率",
+    "trafficGroup": "流量",
+    "tokenGroup": "Token",
+    "healthGroup": "健康",
+    "cacheGroup": "缓存",
+    "billing": "计费",
+    "totalCostShort": "总计",
+    "todayCacheHitRate": "今日缓存命中率",
+    "todayCachedTokens": "今日缓存 Token",
+    "totalCacheHitRate": "总缓存命中率",
+    "avgFirstTokenLatency": "首字延迟",
+    "avgCompletionLatency": "完成延迟",
     "usageCharts": "使用趋势",
     "usageChartsDesc": "基于选定时间范围内 {{count}} 条请求日志自动聚合。",
     "liveBadge": "实时中",
@@ -238,6 +249,10 @@
     "usage5h": "5h",
     "usage7d": "7d",
     "resetIn": "重置: {{time}}",
+    "usageReqUnit": "req",
+    "usageTokUnit": "tok",
+    "accountBilledLabel": "账号",
+    "userBilledLabel": "用户",
     "quotaDistributionTitle": "额度分布",
     "quotaDistributionDesc": "非封禁 Codex 账号的使用额度分布，已采样 {{sampled}} / {{total}} 个账号。",
     "quotaDistributionEmpty": "暂无非封禁 Codex 账号。",
@@ -380,6 +395,42 @@
     "allowedAPIKeysPlaceholder": "选择允许调用的 Token",
     "allowedAPIKeysNoOptions": "暂无 API Key",
     "allowedAPIKeysNoOptionsHint": "当前未创建 API Key，因此该账号默认允许全部调用。",
+    "tagsLabel": "标签",
+    "tagsHint": "为账号添加可搜索的自由文本标签。",
+    "tagsPlaceholder": "输入标签后按 Enter",
+    "tagsFilter": "全部标签",
+    "groupsLabel": "账号分组",
+    "groupsHint": "限制账号所属分组，用于 API Key 调度范围。",
+    "groupsPlaceholder": "选择分组",
+    "groupsFilter": "全部分组",
+    "groupsNone": "暂无账号分组",
+    "groupManage": "管理分组",
+    "groupManageTitle": "账号分组管理",
+    "groupCreate": "创建分组",
+    "groupCreateTitle": "创建账号分组",
+    "groupEdit": "编辑分组",
+    "groupEditTitle": "编辑账号分组",
+    "groupName": "分组名称",
+    "groupNameRequired": "请输入分组名称",
+    "groupNamePlaceholder": "例如 Pro 池",
+    "groupDescription": "分组说明",
+    "groupDescriptionPlaceholder": "可选说明",
+    "groupColor": "颜色",
+    "groupColorPlaceholder": "#2563eb",
+    "groupMembers": "成员",
+    "groupNoDescription": "暂无说明",
+    "groupEmpty": "暂无分组",
+    "groupEmptyDesc": "创建分组后可在账号编辑中分配。",
+    "groupCreated": "分组已创建",
+    "groupUpdated": "分组已更新",
+    "groupDeleted": "分组已删除",
+    "groupDeleteTitle": "删除账号分组",
+    "groupDeleteDesc": "删除后账号会从该分组移除。",
+    "groupDeleteWithMembers": "该分组仍有账号，确认强制删除？",
+    "groupDeleteEmpty": "确认删除该空分组？",
+    "groupDeleteForce": "强制删除",
+    "columnSettings": "列设置",
+    "columnReset": "重置列",
     "schedulerPreviewTitle": "当前调度预览",
     "schedulerPreviewRawScore": "原始分",
     "schedulerPreviewDispatchScore": "当前调度分",
@@ -497,6 +548,11 @@
     "resetStatusFailed": "重置失败：{{error}}",
     "batchResetStatus": "重置状态",
     "batchResetStatusDone": "批量重置完成：成功 {{success}}，失败 {{fail}}",
+    "batchMetaEdit": "标签分组",
+    "batchMetaTitle": "批量编辑标签与分组",
+    "batchMetaDesc": "将为 {{count}} 个选中账号统一保存以下标签和分组。留空会清空对应字段。",
+    "batchMetaDone": "批量保存完成：成功 {{success}}，失败 {{fail}}",
+    "batchMetaFailed": "批量保存失败：{{error}}",
     "testAutoReset": "测试成功，账号状态已自动恢复为正常"
   },
   "status": {
@@ -1021,6 +1077,7 @@
     "poolDisabled": "代理池已关闭",
     "deleteSelected": "删除 ({{count}})",
     "testingAll": "测试中...",
+    "testingAllProgress": "测试中 {{current}} / {{total}}",
     "testAll": "一键测试",
     "addProxy": "添加代理",
     "addProxyTitle": "添加代理",
@@ -1045,7 +1102,22 @@
     "disabled": "禁用",
     "test": "测试",
     "testProxy": "测试代理",
-    "pagination": "共 {{total}} 个代理，第 {{page}}/{{totalPages}} 页"
+    "editProxy": "编辑代理",
+    "editProxyTitle": "编辑代理",
+    "editUrlLabel": "代理地址",
+    "editLabelLabel": "标签",
+    "loadFailed": "加载代理失败",
+    "addFailed": "添加代理失败",
+    "deleteFailed": "删除代理失败",
+    "batchDeleteFailed": "批量删除失败",
+    "invalidProxyUrl": "请输入有效的代理地址",
+    "proxyUpdated": "代理已更新",
+    "testFailed": "代理测试失败",
+    "testAllFailed": "批量测试失败",
+    "testFailedUnknown": "未知错误",
+    "pagination": "共 {{total}} 个代理，第 {{page}}/{{totalPages}} 页",
+    "showProxyUrl": "显示代理地址",
+    "hideProxyUrl": "隐藏代理地址"
   },
   "apiKeys": {
     "title": "API 密钥",
@@ -1114,7 +1186,29 @@
       "quota_exhausted": "额度耗尽"
     },
     "showKey": "显示密钥",
-    "hideKey": "隐藏密钥"
+    "hideKey": "隐藏密钥",
+    "allowedGroups": "允许分组",
+    "allowedGroupsHint": "不选择表示该密钥可使用全部账号分组。",
+    "allowedGroupsLabel": "允许账号分组",
+    "allowedGroupsPlaceholder": "选择允许调用的分组",
+    "allowedGroupsAll": "全部分组",
+    "allowedGroupsNone": "不限制分组",
+    "allowedGroupsMissing": "分组已不存在",
+    "allowedGroupsSaved": "允许分组已保存",
+    "allowedGroupsSaveFailed": "允许分组保存失败",
+    "permissionTitle": "密钥权限",
+    "permissionDesc": "限制该密钥只能调度指定账号分组；不选择则可使用全部分组。",
+    "editKey": "编辑",
+    "editTitle": "编辑密钥",
+    "editDesc": "可调整名称、额度、过期时间和账号分组权限。密钥值本身不会被修改。",
+    "keyUpdated": "密钥已更新",
+    "updateFailed": "更新失败",
+    "nameRequired": "名称不能为空",
+    "clearExpirationHint": "保存后将清除过期时间，密钥保持长期有效。",
+    "relativeExpirationHint": "保存后将从现在起 {{days}} 天后过期。",
+    "renameKey": "重命名密钥",
+    "keyRenamed": "密钥已重命名",
+    "renameFailed": "重命名失败"
   },
   "nav2": {
     "docs": "使用文档",
@@ -1344,11 +1438,106 @@
       "desc": "列出所有账号及其状态、用量等信息。"
     },
     "tryIt": {
-      "button": "Try it",
+      "button": "调试",
       "send": "发送请求",
       "sending": "发送中…",
-      "placeholder": "点击 Send 发送请求",
-      "selectKey": "选择密钥："
+      "placeholder": "点击发送请求开始调试",
+      "selectKey": "选择密钥：",
+      "authTitle": "认证信息",
+      "required": "必填",
+      "keyPlaceholder": "输入密钥",
+      "requestBody": "请求体",
+      "responseTitle": "响应结果"
+    }
+  },
+  "docs": {
+    "title": "使用文档",
+    "description": "完整的接入指南、API 端点和管理接口参考。",
+    "tocTitle": "目录",
+    "copyMarkdown": "复制为 Markdown",
+    "markdownCopied": "已复制为 Markdown",
+    "section1Eyebrow": "01 · 接入",
+    "section2Eyebrow": "02 · 客户端",
+    "section3Eyebrow": "03 · 认证",
+    "section4Eyebrow": "04 · 模型 API",
+    "section5Eyebrow": "05 · 管理 API",
+    "toc": {
+      "quickStart": "快速接入",
+      "qsTools": "AI 客户端",
+      "qsCurl": "cURL 验证",
+      "clientConfig": "客户端配置",
+      "modelMapping": "模型映射",
+      "authentication": "认证方式",
+      "modelApi": "模型 API",
+      "adminApi": "账号管理 API"
+    },
+    "quickStart": {
+      "title": "快速接入",
+      "description": "挑选你常用的 AI 客户端，复制配置或一键唤起。",
+      "toolsTitle": "一键导入 AI 客户端",
+      "toolsDesc": "桌面 / Web / 移动端常用工具集合。",
+      "launch": "启动",
+      "needKey": "先创建密钥",
+      "copyConfig": "复制配置",
+      "copyLink": "复制链接",
+      "copied": "已复制",
+      "openClient": "打开客户端",
+      "viewFullLink": "查看完整链接",
+      "collapseFullLink": "收起完整链接",
+      "deeplinkBadge": "deeplink",
+      "useKey": "使用密钥",
+      "curlTitle": "cURL 快速验证",
+      "curlDesc": "用以下命令验证端点是否可用，YOUR_API_KEY 会自动填充为第一个 API Key。",
+      "createKeyFirst": "请先创建 API Key",
+      "copiedToast": "已复制 {{name}} 配置",
+      "launchedToast": "已唤起 {{name}}"
+    },
+    "clientConfig": {
+      "title": "客户端配置",
+      "description": "在 Codex CLI 或 Claude Code 中接入本代理，覆盖所有支持的协议。",
+      "codexDesc": "将以下配置文件添加到 Codex CLI 配置目录中，即可通过本代理使用 Codex 模型。",
+      "defaultModel": "默认模型",
+      "endpointLabel": "端点地址",
+      "unixTerminal": "终端",
+      "windowsTerminal": "命令提示符",
+      "importTarget": "导入目标",
+      "configName": "配置名称",
+      "providerId": "Provider ID",
+      "mappedTo": "映射到",
+      "backendDefaultModel": "后端默认模型",
+      "ccSwitchPreviewTitle": "CC Switch 导入预览",
+      "ccSwitchPreviewDesc": "确认目标客户端、端点和模型后，直接唤起 CC Switch 完成导入。",
+      "cherryPreviewTitle": "Cherry Studio 导入预览",
+      "cherryPreviewDesc": "使用当前端点和 API Key 生成 Provider 导入链接。",
+      "ccSwitchFields": {
+        "model": "主模型",
+        "haikuModel": "Haiku 模型",
+        "sonnetModel": "Sonnet 模型",
+        "opusModel": "Opus 模型"
+      },
+      "codexConfigHint": "请确保以下内容位于 config.toml 文件的开头部分",
+      "codexNoteUnix": "请确保配置目录存在，可运行 mkdir -p ~/.codex 创建。",
+      "codexNoteWindows": "按 Win+R 输入 %userprofile%\\.codex 打开配置目录；不存在时手动创建。",
+      "claudeDesc": "设置环境变量或编辑 settings.json，即可让 Claude Code 通过本代理工作。",
+      "claudeEnvNote": "环境变量仅在当前终端会话生效；如需永久使用，请写入 ~/.bashrc 或 ~/.zshrc。",
+      "claudeSettingsNote": "或直接编辑 Claude Code 的 settings.json 配置文件（与环境变量二选一）。",
+      "mappingTitle": "模型映射",
+      "mappingDesc": "当使用 /v1/messages 端点时，Claude 模型名会自动映射为 Codex 模型名。映射规则可在「系统设置」中自定义。"
+    },
+    "authentication": {
+      "title": "认证方式",
+      "description": "所有端点（除 /health 外）需要密钥；管理接口额外需要 X-Admin-Key。",
+      "bearerNote": "标准方式（推荐）",
+      "xApiKeyNote": "Anthropic SDK 默认",
+      "adminNote": "管理接口专用"
+    },
+    "modelApi": {
+      "title": "模型 API",
+      "description": "OpenAI Responses、Chat Completions、Anthropic Messages 三种兼容协议，复用同一组上游账号。"
+    },
+    "adminApi": {
+      "title": "账号管理 API",
+      "description": "用于添加、删除、列出号池账号；所有接口需 X-Admin-Key。"
     }
   }
 }
diff --git a/frontend/src/pages/APIKeys.tsx b/frontend/src/pages/APIKeys.tsx
index 67557b5d..19e9faa0 100644
--- a/frontend/src/pages/APIKeys.tsx
+++ b/frontend/src/pages/APIKeys.tsx
@@ -1,22 +1,22 @@
-import type { ChangeEvent, FormEvent, ReactNode } from 'react'
-import { useCallback, useMemo, useState } from 'react'
-import { useTranslation } from 'react-i18next'
-import { api } from '../api'
-import Modal from '../components/Modal'
-import PageHeader from '../components/PageHeader'
-import StateShell from '../components/StateShell'
-import ToastNotice from '../components/ToastNotice'
-import { useConfirmDialog } from '../hooks/useConfirmDialog'
-import { useDataLoader } from '../hooks/useDataLoader'
-import { useToast } from '../hooks/useToast'
-import type { APIKeyRow } from '../types'
-import { getErrorMessage } from '../utils/error'
-import { formatBeijingTime, formatRelativeTime } from '../utils/time'
-import { Badge } from '@/components/ui/badge'
-import { Button } from '@/components/ui/button'
-import { Card, CardContent } from '@/components/ui/card'
-import { Input } from '@/components/ui/input'
-import { Select } from '@/components/ui/select'
+import type { ChangeEvent, FormEvent, ReactNode } from "react";
+import { useCallback, useMemo, useState } from "react";
+import { useTranslation } from "react-i18next";
+import { api } from "../api";
+import Modal from "../components/Modal";
+import PageHeader from "../components/PageHeader";
+import StateShell from "../components/StateShell";
+import ToastNotice from "../components/ToastNotice";
+import { useConfirmDialog } from "../hooks/useConfirmDialog";
+import { useDataLoader } from "../hooks/useDataLoader";
+import { useToast } from "../hooks/useToast";
+import type { AccountGroup, APIKeyRow } from "../types";
+import { getErrorMessage } from "../utils/error";
+import { formatBeijingTime, formatRelativeTime } from "../utils/time";
+import { Badge } from "@/components/ui/badge";
+import { Button } from "@/components/ui/button";
+import { Card, CardContent } from "@/components/ui/card";
+import { Input } from "@/components/ui/input";
+import { Select } from "@/components/ui/select";
 import {
   Table,
   TableBody,
@@ -24,7 +24,7 @@ import {
   TableHead,
   TableHeader,
   TableRow,
-} from '@/components/ui/table'
+} from "@/components/ui/table";
 import {
   Copy,
   CalendarClock,
@@ -34,178 +34,279 @@ import {
   Fingerprint,
   KeyRound,
   LockKeyhole,
+  Pencil,
   Plus,
   ShieldCheck,
   Trash2,
-} from 'lucide-react'
+} from "lucide-react";
 
-type ExpireMode = 'never' | '7' | '30' | '90' | 'custom'
+type ExpireMode = "never" | "7" | "30" | "90" | "custom";
 
 interface CreateKeyFormState {
-  name: string
-  key: string
-  quotaLimit: string
-  expireMode: ExpireMode
-  expiresAt: string
+  name: string;
+  key: string;
+  quotaLimit: string;
+  expireMode: ExpireMode;
+  expiresAt: string;
+  allowedGroupIds: number[];
 }
 
-const initialCreateForm: CreateKeyFormState = {
-  name: '',
-  key: '',
-  quotaLimit: '',
-  expireMode: 'never',
-  expiresAt: '',
+interface EditKeyFormState {
+  name: string;
+  quotaLimit: string;
+  expireMode: ExpireMode;
+  expiresAt: string;
+  allowedGroupIds: number[];
 }
 
+const initialCreateForm: CreateKeyFormState = {
+  name: "",
+  key: "",
+  quotaLimit: "",
+  expireMode: "never",
+  expiresAt: "",
+  allowedGroupIds: [],
+};
+
+const initialEditForm: EditKeyFormState = {
+  name: "",
+  quotaLimit: "",
+  expireMode: "never",
+  expiresAt: "",
+  allowedGroupIds: [],
+};
+
 export default function APIKeys() {
-  const { t } = useTranslation()
-  const [createDialogOpen, setCreateDialogOpen] = useState(false)
-  const [createForm, setCreateForm] = useState<CreateKeyFormState>(initialCreateForm)
-  const [createdKeyId, setCreatedKeyId] = useState<number | null>(null)
-  const [visibleKeys, setVisibleKeys] = useState<Set<number>>(new Set())
-  const [creating, setCreating] = useState(false)
-  const [deletingIds, setDeletingIds] = useState<Set<number>>(new Set())
-  const { toast, showToast } = useToast()
-  const { confirm, confirmDialog } = useConfirmDialog()
+  const { t } = useTranslation();
+  const [createDialogOpen, setCreateDialogOpen] = useState(false);
+  const [createForm, setCreateForm] =
+    useState<CreateKeyFormState>(initialCreateForm);
+  const [createdKeyId, setCreatedKeyId] = useState<number | null>(null);
+  const [visibleKeys, setVisibleKeys] = useState<Set<number>>(new Set());
+  const [creating, setCreating] = useState(false);
+  const [deletingIds, setDeletingIds] = useState<Set<number>>(new Set());
+  const [editingKey, setEditingKey] = useState<APIKeyRow | null>(null);
+  const [editForm, setEditForm] = useState<EditKeyFormState>(initialEditForm);
+  const [saving, setSaving] = useState(false);
+  const { toast, showToast } = useToast();
+  const { confirm, confirmDialog } = useConfirmDialog();
 
   const loadKeys = useCallback(async () => {
-    const response = await api.getAPIKeys()
-    return response.keys ?? []
-  }, [])
+    const [keysResponse, groupsResponse] = await Promise.all([
+      api.getAPIKeys(),
+      api.listAccountGroups().catch(() => ({ groups: [] })),
+    ]);
+    return {
+      keys: keysResponse.keys ?? [],
+      groups: groupsResponse.groups ?? [],
+    };
+  }, []);
 
-  const { data: keys, loading, error, reload } = useDataLoader<APIKeyRow[]>({
-    initialData: [],
+  const { data, loading, error, reload } = useDataLoader<{
+    keys: APIKeyRow[];
+    groups: AccountGroup[];
+  }>({
+    initialData: { keys: [], groups: [] },
     load: loadKeys,
-  })
+  });
+  const keys = data.keys;
+  const groups = data.groups;
 
   const latestKey = useMemo(() => {
     return keys
       .slice()
-      .sort((a, b) => new Date(b.created_at || 0).getTime() - new Date(a.created_at || 0).getTime())[0]
-  }, [keys])
+      .sort(
+        (a, b) =>
+          new Date(b.created_at || 0).getTime() -
+          new Date(a.created_at || 0).getTime(),
+      )[0];
+  }, [keys]);
 
   const expireOptions = useMemo(
     () => [
-      { label: t('apiKeys.expireNever'), value: 'never' },
-      { label: t('apiKeys.expire7Days'), value: '7' },
-      { label: t('apiKeys.expire30Days'), value: '30' },
-      { label: t('apiKeys.expire90Days'), value: '90' },
-      { label: t('apiKeys.expireCustom'), value: 'custom' },
+      { label: t("apiKeys.expireNever"), value: "never" },
+      { label: t("apiKeys.expire7Days"), value: "7" },
+      { label: t("apiKeys.expire30Days"), value: "30" },
+      { label: t("apiKeys.expire90Days"), value: "90" },
+      { label: t("apiKeys.expireCustom"), value: "custom" },
     ],
-    [t]
-  )
+    [t],
+  );
 
   const updateCreateForm = (patch: Partial<CreateKeyFormState>) => {
-    setCreateForm((current) => ({ ...current, ...patch }))
-  }
+    setCreateForm((current) => ({ ...current, ...patch }));
+  };
 
   const closeCreateDialog = () => {
-    if (creating) return
-    setCreateDialogOpen(false)
-  }
+    if (creating) return;
+    setCreateDialogOpen(false);
+  };
 
   const handleCreateKey = async (event?: FormEvent<HTMLFormElement>) => {
-    event?.preventDefault()
-    setCreating(true)
+    event?.preventDefault();
+    setCreating(true);
     try {
-      const quotaLimitText = createForm.quotaLimit.trim()
-      let quotaLimit: number | undefined
+      const quotaLimitText = createForm.quotaLimit.trim();
+      let quotaLimit: number | undefined;
       if (quotaLimitText) {
-        quotaLimit = Number(quotaLimitText)
+        quotaLimit = Number(quotaLimitText);
         if (!Number.isFinite(quotaLimit) || quotaLimit < 0) {
-          showToast(t('apiKeys.quotaInvalid'), 'error')
-          return
+          showToast(t("apiKeys.quotaInvalid"), "error");
+          return;
         }
       }
 
+      const expirationPayload = buildExpirationPayload(createForm, t) as {
+        expires_in_days?: number;
+        expires_at?: string;
+      };
       const payload = {
-        name: createForm.name.trim() || t('apiKeys.defaultName'),
+        name: createForm.name.trim() || t("apiKeys.defaultName"),
         ...(createForm.key.trim() ? { key: createForm.key.trim() } : {}),
         ...(quotaLimit && quotaLimit > 0 ? { quota_limit: quotaLimit } : {}),
-        ...buildExpirationPayload(createForm, t),
-      }
+        allowed_group_ids: createForm.allowedGroupIds,
+        ...expirationPayload,
+      };
 
-      const result = await api.createAPIKey(payload)
-      setCreatedKeyId(result.id)
-      setVisibleKeys((prev) => new Set(prev).add(result.id))
-      setCreateForm(initialCreateForm)
-      setCreateDialogOpen(false)
-      showToast(t('apiKeys.keyCreateSuccess'))
-      void reload()
+      const result = await api.createAPIKey(payload);
+      setCreatedKeyId(result.id);
+      setVisibleKeys((prev) => new Set(prev).add(result.id));
+      setCreateForm(initialCreateForm);
+      setCreateDialogOpen(false);
+      showToast(t("apiKeys.keyCreateSuccess"));
+      void reload();
     } catch (error) {
-      showToast(`${t('apiKeys.createFailed')}: ${getErrorMessage(error)}`, 'error')
+      showToast(
+        `${t("apiKeys.createFailed")}: ${getErrorMessage(error)}`,
+        "error",
+      );
     } finally {
-      setCreating(false)
+      setCreating(false);
     }
-  }
+  };
 
   const handleDeleteKey = async (id: number) => {
     const confirmed = await confirm({
-      title: t('apiKeys.deleteKeyTitle'),
-      description: t('apiKeys.deleteKeyDesc'),
-      confirmText: t('apiKeys.confirmDelete'),
-      tone: 'destructive',
-      confirmVariant: 'destructive',
-    })
-    if (!confirmed) return
-
-    setDeletingIds((prev) => new Set(prev).add(id))
+      title: t("apiKeys.deleteKeyTitle"),
+      description: t("apiKeys.deleteKeyDesc"),
+      confirmText: t("apiKeys.confirmDelete"),
+      tone: "destructive",
+      confirmVariant: "destructive",
+    });
+    if (!confirmed) return;
+
+    setDeletingIds((prev) => new Set(prev).add(id));
     try {
-      await api.deleteAPIKey(id)
-      showToast(t('apiKeys.keyDeleted'))
-      if (createdKeyId === id) setCreatedKeyId(null)
+      await api.deleteAPIKey(id);
+      showToast(t("apiKeys.keyDeleted"));
+      if (createdKeyId === id) setCreatedKeyId(null);
       setVisibleKeys((prev) => {
-        const next = new Set(prev)
-        next.delete(id)
-        return next
-      })
-      void reload()
+        const next = new Set(prev);
+        next.delete(id);
+        return next;
+      });
+      void reload();
     } catch (error) {
-      showToast(`${t('apiKeys.deleteFailed')}: ${getErrorMessage(error)}`, 'error')
+      showToast(
+        `${t("apiKeys.deleteFailed")}: ${getErrorMessage(error)}`,
+        "error",
+      );
     } finally {
       setDeletingIds((prev) => {
-        const next = new Set(prev)
-        next.delete(id)
-        return next
-      })
+        const next = new Set(prev);
+        next.delete(id);
+        return next;
+      });
     }
-  }
+  };
 
   const handleCopy = async (text: string) => {
     try {
       if (navigator.clipboard?.writeText) {
-        await navigator.clipboard.writeText(text)
-        showToast(t('common.copied'))
-        return
+        await navigator.clipboard.writeText(text);
+        showToast(t("common.copied"));
+        return;
       }
 
-      const textarea = document.createElement('textarea')
-      textarea.value = text
-      textarea.setAttribute('readonly', 'true')
-      textarea.style.position = 'fixed'
-      textarea.style.opacity = '0'
-      textarea.style.pointerEvents = 'none'
-      document.body.appendChild(textarea)
-      textarea.select()
-      textarea.setSelectionRange(0, text.length)
-      const copied = document.execCommand('copy')
-      document.body.removeChild(textarea)
-
-      if (!copied) throw new Error('copy failed')
-      showToast(t('common.copied'))
+      const textarea = document.createElement("textarea");
+      textarea.value = text;
+      textarea.setAttribute("readonly", "true");
+      textarea.style.position = "fixed";
+      textarea.style.opacity = "0";
+      textarea.style.pointerEvents = "none";
+      document.body.appendChild(textarea);
+      textarea.select();
+      textarea.setSelectionRange(0, text.length);
+      const copied = document.execCommand("copy");
+      document.body.removeChild(textarea);
+
+      if (!copied) throw new Error("copy failed");
+      showToast(t("common.copied"));
     } catch {
-      showToast(t('common.copyFailed'), 'error')
+      showToast(t("common.copyFailed"), "error");
     }
-  }
+  };
 
   const toggleVisible = (id: number) => {
     setVisibleKeys((prev) => {
-      const next = new Set(prev)
-      if (next.has(id)) next.delete(id)
-      else next.add(id)
-      return next
-    })
-  }
+      const next = new Set(prev);
+      if (next.has(id)) next.delete(id);
+      else next.add(id);
+      return next;
+    });
+  };
+
+  const startEditing = (keyRow: APIKeyRow) => {
+    setEditingKey(keyRow);
+    setEditForm({
+      name: keyRow.name,
+      quotaLimit: keyRow.quota_limit > 0 ? String(keyRow.quota_limit) : "",
+      expireMode: keyRow.expires_at ? "custom" : "never",
+      expiresAt: toDateTimeLocalValue(keyRow.expires_at),
+      allowedGroupIds: keyRow.allowed_group_ids ?? [],
+    });
+  };
+
+  const closeEditDialog = () => {
+    if (saving) return;
+    setEditingKey(null);
+    setEditForm(initialEditForm);
+  };
+
+  const updateEditForm = (patch: Partial<EditKeyFormState>) => {
+    setEditForm((current) => ({ ...current, ...patch }));
+  };
+
+  const handleSaveEdit = async (event?: FormEvent<HTMLFormElement>) => {
+    event?.preventDefault();
+    if (!editingKey) return;
+    const trimmed = editForm.name.trim();
+    if (!trimmed) {
+      showToast(t("apiKeys.nameRequired"), "error");
+      return;
+    }
+    setSaving(true);
+    try {
+      const quotaLimit = parseQuotaLimit(editForm.quotaLimit, t);
+      await api.updateAPIKey(editingKey.id, {
+        name: trimmed,
+        quota_limit: quotaLimit,
+        allowed_group_ids: editForm.allowedGroupIds,
+        ...buildExpirationPayload(editForm, t, { clearNever: true }),
+      });
+      showToast(t("apiKeys.keyUpdated"));
+      setEditingKey(null);
+      setEditForm(initialEditForm);
+      void reload();
+    } catch (error) {
+      showToast(
+        `${t("apiKeys.updateFailed")}: ${getErrorMessage(error)}`,
+        "error",
+      );
+    } finally {
+      setSaving(false);
+    }
+  };
 
   return (
     <StateShell
@@ -213,19 +314,22 @@ export default function APIKeys() {
       loading={loading}
       error={error}
       onRetry={() => void reload()}
-      loadingTitle={t('apiKeys.loadingTitle')}
-      loadingDescription={t('apiKeys.loadingDesc')}
-      errorTitle={t('apiKeys.errorTitle')}
+      loadingTitle={t("apiKeys.loadingTitle")}
+      loadingDescription={t("apiKeys.loadingDesc")}
+      errorTitle={t("apiKeys.errorTitle")}
     >
       <>
         <PageHeader
-          title={t('apiKeys.title')}
-          description={t('apiKeys.description')}
+          title={t("apiKeys.title")}
+          description={t("apiKeys.description")}
           onRefresh={() => void reload()}
           actions={
-            <Button onClick={() => setCreateDialogOpen(true)} className="max-sm:w-full">
+            <Button
+              onClick={() => setCreateDialogOpen(true)}
+              className="max-sm:w-full"
+            >
               <Plus className="size-3.5" />
-              {t('apiKeys.createKey')}
+              {t("apiKeys.createKey")}
             </Button>
           }
         />
@@ -233,77 +337,118 @@ export default function APIKeys() {
         <div className="mb-4 grid gap-3 md:grid-cols-3">
           <KeySummaryCard
             icon={<KeyRound className="size-5" />}
-            label={t('apiKeys.totalKeys')}
+            label={t("apiKeys.totalKeys")}
             value={String(keys.length)}
-            sub={keys.length > 0 ? t('apiKeys.totalKeysDesc') : t('apiKeys.noKeysShort')}
+            sub={
+              keys.length > 0
+                ? t("apiKeys.totalKeysDesc")
+                : t("apiKeys.noKeysShort")
+            }
             tone="info"
           />
           <KeySummaryCard
             icon={<ShieldCheck className="size-5" />}
-            label={t('apiKeys.authMode')}
-            value={keys.length > 0 ? t('apiKeys.authEnabled') : t('apiKeys.authDisabled')}
-            sub={keys.length > 0 ? t('apiKeys.authEnabledDesc') : t('apiKeys.authDisabledDesc')}
-            tone={keys.length > 0 ? 'success' : 'warning'}
+            label={t("apiKeys.authMode")}
+            value={
+              keys.length > 0
+                ? t("apiKeys.authEnabled")
+                : t("apiKeys.authDisabled")
+            }
+            sub={
+              keys.length > 0
+                ? t("apiKeys.authEnabledDesc")
+                : t("apiKeys.authDisabledDesc")
+            }
+            tone={keys.length > 0 ? "success" : "warning"}
           />
           <KeySummaryCard
             icon={<Fingerprint className="size-5" />}
-            label={t('apiKeys.newestKey')}
-            value={latestKey?.name || '-'}
-            sub={latestKey ? formatRelativeTime(latestKey.created_at, { variant: 'compact' }) : t('apiKeys.noLatest')}
+            label={t("apiKeys.newestKey")}
+            value={latestKey?.name || "-"}
+            sub={
+              latestKey
+                ? formatRelativeTime(latestKey.created_at, {
+                    variant: "compact",
+                  })
+                : t("apiKeys.noLatest")
+            }
             tone="neutral"
           />
         </div>
 
         <div className="space-y-4">
           <Card>
-            <CardContent className="p-4">
-              <div className="mb-4 flex flex-wrap items-center justify-between gap-3">
+            <CardContent className="p-3 sm:p-4">
+              <div className="mb-3 flex flex-wrap items-center justify-between gap-3">
                 <div>
-                  <h3 className="text-base font-semibold text-foreground">{t('apiKeys.tableTitle')}</h3>
-                  <p className="mt-1 text-sm text-muted-foreground">{t('apiKeys.tableDesc')}</p>
+                  <h3 className="text-base font-semibold text-foreground">
+                    {t("apiKeys.tableTitle")}
+                  </h3>
+                  <p className="mt-1 text-sm text-muted-foreground">
+                    {t("apiKeys.tableDesc")}
+                  </p>
                 </div>
-                <Badge variant={keys.length > 0 ? 'default' : 'secondary'}>
-                  {t('apiKeys.keyCount', { count: keys.length })}
+                <Badge variant={keys.length > 0 ? "default" : "secondary"}>
+                  {t("apiKeys.keyCount", { count: keys.length })}
                 </Badge>
               </div>
 
               <StateShell
                 variant="section"
                 isEmpty={keys.length === 0}
-                emptyTitle={t('apiKeys.noKeys')}
-                emptyDescription={t('apiKeys.noKeysDesc')}
+                emptyTitle={t("apiKeys.noKeys")}
+                emptyDescription={t("apiKeys.noKeysDesc")}
               >
                 <div className="data-table-shell">
                   <Table>
                     <TableHeader>
                       <TableRow>
-                        <TableHead>{t('common.name')}</TableHead>
-                        <TableHead>{t('apiKeys.keyColumn')}</TableHead>
-                        <TableHead>{t('apiKeys.quotaColumn')}</TableHead>
-                        <TableHead>{t('apiKeys.expiresColumn')}</TableHead>
-                        <TableHead>{t('common.createdAt')}</TableHead>
-                        <TableHead className="text-right">{t('common.actions')}</TableHead>
+                        <TableHead>{t("common.name")}</TableHead>
+                        <TableHead>{t("apiKeys.keyColumn")}</TableHead>
+                        <TableHead>{t("apiKeys.allowedGroups")}</TableHead>
+                        <TableHead>{t("apiKeys.quotaColumn")}</TableHead>
+                        <TableHead>{t("apiKeys.expiresColumn")}</TableHead>
+                        <TableHead>{t("common.createdAt")}</TableHead>
+                        <TableHead className="text-right">
+                          {t("common.actions")}
+                        </TableHead>
                       </TableRow>
                     </TableHeader>
                     <TableBody>
                       {keys.map((keyRow) => {
-                        const isVisible = visibleKeys.has(keyRow.id)
-                        const isNew = createdKeyId === keyRow.id
-                        const displayKey = isVisible ? keyRow.raw_key : keyRow.key
-                        const copyValue = keyRow.raw_key || keyRow.key
-                        const status = getAPIKeyStatus(keyRow)
+                        const isVisible = visibleKeys.has(keyRow.id);
+                        const isNew = createdKeyId === keyRow.id;
+                        const displayKey = isVisible
+                          ? keyRow.raw_key || keyRow.key
+                          : keyRow.key;
+                        const copyValue = keyRow.raw_key || keyRow.key;
+                        const status = getAPIKeyStatus(keyRow);
                         return (
-                          <TableRow key={keyRow.id} className={isNew ? 'bg-[hsl(var(--success-bg))]' : ''}>
+                          <TableRow
+                            key={keyRow.id}
+                            className={
+                              isNew ? "bg-[hsl(var(--success-bg))]" : ""
+                            }
+                          >
                             <TableCell className="font-medium text-foreground">
                               <div className="flex items-center gap-2">
                                 <span>{keyRow.name}</span>
                                 {isNew ? (
-                                  <Badge variant="outline" className="border-transparent bg-[hsl(var(--success-bg))] text-[hsl(var(--success))]">
-                                    {t('apiKeys.newBadge')}
+                                  <Badge
+                                    variant="outline"
+                                    className="border-transparent bg-[hsl(var(--success-bg))] text-[hsl(var(--success))]"
+                                  >
+                                    {t("apiKeys.newBadge")}
                                   </Badge>
                                 ) : null}
-                                {status !== 'active' ? (
-                                  <Badge variant={status === 'expired' ? 'secondary' : 'destructive'}>
+                                {status !== "active" ? (
+                                  <Badge
+                                    variant={
+                                      status === "expired"
+                                        ? "secondary"
+                                        : "destructive"
+                                    }
+                                  >
                                     {t(`apiKeys.status.${status}`)}
                                   </Badge>
                                 ) : null}
@@ -311,35 +456,58 @@ export default function APIKeys() {
                             </TableCell>
                             <TableCell>
                               <div className="flex min-w-[260px] items-center gap-2">
-                                <code className="min-w-0 max-w-[420px] truncate rounded-md bg-muted px-2 py-1 font-mono text-[13px] text-foreground" title={displayKey}>
+                                <code
+                                  className="min-w-0 max-w-[420px] truncate rounded-md bg-muted px-2 py-1 font-mono text-[13px] text-foreground"
+                                  title={displayKey}
+                                >
                                   {displayKey}
                                 </code>
                                 <Button
                                   variant="ghost"
                                   size="icon-xs"
+                                  disabled={!keyRow.raw_key}
                                   onClick={() => toggleVisible(keyRow.id)}
-                                  title={isVisible ? t('apiKeys.hideKey') : t('apiKeys.showKey')}
+                                  title={
+                                    isVisible
+                                      ? t("apiKeys.hideKey")
+                                      : t("apiKeys.showKey")
+                                  }
                                 >
-                                  {isVisible ? <EyeOff className="size-3.5" /> : <Eye className="size-3.5" />}
+                                  {isVisible ? (
+                                    <EyeOff className="size-3.5" />
+                                  ) : (
+                                    <Eye className="size-3.5" />
+                                  )}
                                 </Button>
                                 <Button
                                   variant="ghost"
                                   size="icon-xs"
                                   onClick={() => void handleCopy(copyValue)}
-                                  title={t('common.copy')}
+                                  title={t("common.copy")}
                                 >
                                   <Copy className="size-3.5" />
                                 </Button>
                               </div>
                             </TableCell>
+                            <TableCell className="min-w-[180px]">
+                              <AllowedGroupsDisplay
+                                ids={keyRow.allowed_group_ids ?? []}
+                                groups={groups}
+                                t={t}
+                              />
+                            </TableCell>
                             <TableCell className="min-w-[150px] text-sm text-muted-foreground">
                               <div className="space-y-1">
-                                <div className="font-medium text-foreground">{formatQuotaLimit(keyRow, t)}</div>
+                                <div className="font-medium text-foreground">
+                                  {formatQuotaLimit(keyRow, t)}
+                                </div>
                                 {keyRow.quota_limit > 0 ? (
                                   <div className="h-1.5 w-28 overflow-hidden rounded-full bg-muted">
                                     <div
                                       className="h-full rounded-full bg-primary"
-                                      style={{ width: `${Math.min(100, Math.max(0, (keyRow.quota_used / keyRow.quota_limit) * 100))}%` }}
+                                      style={{
+                                        width: `${Math.min(100, Math.max(0, (keyRow.quota_used / keyRow.quota_limit) * 100))}%`,
+                                      }}
                                     />
                                   </div>
                                 ) : null}
@@ -349,23 +517,35 @@ export default function APIKeys() {
                               {formatExpiration(keyRow, t)}
                             </TableCell>
                             <TableCell className="text-muted-foreground">
-                              {formatRelativeTime(keyRow.created_at, { variant: 'compact' })}
+                              {formatRelativeTime(keyRow.created_at, {
+                                variant: "compact",
+                              })}
                             </TableCell>
                             <TableCell>
-                              <div className="flex justify-end">
+                              <div className="flex justify-end gap-1.5">
+                                <Button
+                                  variant="outline"
+                                  size="sm"
+                                  onClick={() => startEditing(keyRow)}
+                                >
+                                  <Pencil className="size-3.5" />
+                                  {t("apiKeys.editKey")}
+                                </Button>
                                 <Button
                                   variant="destructive"
                                   size="sm"
                                   disabled={deletingIds.has(keyRow.id)}
-                                  onClick={() => void handleDeleteKey(keyRow.id)}
+                                  onClick={() =>
+                                    void handleDeleteKey(keyRow.id)
+                                  }
                                 >
                                   <Trash2 className="size-3.5" />
-                                  {t('common.delete')}
+                                  {t("common.delete")}
                                 </Button>
                               </div>
                             </TableCell>
                           </TableRow>
-                        )
+                        );
                       })}
                     </TableBody>
                   </Table>
@@ -381,13 +561,21 @@ export default function APIKeys() {
                   <LockKeyhole className="size-4" />
                 </div>
                 <div className="min-w-0">
-                  <div className="text-sm font-semibold text-foreground">{t('apiKeys.securityTitle')}</div>
-                  <p className="mt-1 text-sm leading-relaxed text-muted-foreground">{t('apiKeys.keyAuthNote')}</p>
+                  <div className="text-sm font-semibold text-foreground">
+                    {t("apiKeys.securityTitle")}
+                  </div>
+                  <p className="mt-1 text-sm leading-relaxed text-muted-foreground">
+                    {t("apiKeys.keyAuthNote")}
+                  </p>
                 </div>
               </div>
-              <Button variant="outline" onClick={() => setCreateDialogOpen(true)} className="shrink-0">
+              <Button
+                variant="outline"
+                onClick={() => setCreateDialogOpen(true)}
+                className="shrink-0"
+              >
                 <Plus className="size-3.5" />
-                {t('apiKeys.createKey')}
+                {t("apiKeys.createKey")}
               </Button>
             </CardContent>
           </Card>
@@ -395,162 +583,494 @@ export default function APIKeys() {
 
         <Modal
           show={createDialogOpen}
-          title={t('apiKeys.createTitle')}
+          title={t("apiKeys.createTitle")}
           onClose={closeCreateDialog}
           contentClassName="sm:max-w-[620px]"
           footer={
             <>
-              <Button type="button" variant="outline" onClick={closeCreateDialog} disabled={creating}>
-                {t('common.cancel')}
+              <Button
+                type="button"
+                variant="outline"
+                onClick={closeCreateDialog}
+                disabled={creating}
+              >
+                {t("common.cancel")}
               </Button>
-              <Button type="submit" form="create-api-key-form" disabled={creating}>
+              <Button
+                type="submit"
+                form="create-api-key-form"
+                disabled={creating}
+              >
                 <Plus className="size-3.5" />
-                {creating ? t('apiKeys.creating') : t('apiKeys.createKey')}
+                {creating ? t("apiKeys.creating") : t("apiKeys.createKey")}
               </Button>
             </>
           }
         >
-          <form id="create-api-key-form" className="space-y-5" onSubmit={(event) => void handleCreateKey(event)}>
+          <form
+            id="create-api-key-form"
+            className="space-y-5"
+            onSubmit={(event) => void handleCreateKey(event)}
+          >
             <div className="flex items-start gap-3 rounded-lg border border-border bg-muted/20 p-3">
               <div className="flex size-9 shrink-0 items-center justify-center rounded-lg bg-primary/10 text-primary">
                 <Plus className="size-4" />
               </div>
-              <p className="text-sm leading-relaxed text-muted-foreground">{t('apiKeys.createDesc')}</p>
+              <p className="text-sm leading-relaxed text-muted-foreground">
+                {t("apiKeys.createDesc")}
+              </p>
             </div>
 
             <div className="grid gap-4 sm:grid-cols-2">
-              <FormField label={t('apiKeys.nameLabel')}>
+              <FormField label={t("apiKeys.nameLabel")}>
                 <Input
-                  placeholder={t('apiKeys.keyNamePlaceholder')}
+                  placeholder={t("apiKeys.keyNamePlaceholder")}
                   value={createForm.name}
-                  onChange={(event: ChangeEvent<HTMLInputElement>) => updateCreateForm({ name: event.target.value })}
+                  onChange={(event: ChangeEvent<HTMLInputElement>) =>
+                    updateCreateForm({ name: event.target.value })
+                  }
                 />
               </FormField>
-              <FormField label={t('apiKeys.keyLabel')}>
+              <FormField label={t("apiKeys.keyLabel")}>
                 <Input
-                  placeholder={t('apiKeys.keyValuePlaceholder')}
+                  placeholder={t("apiKeys.keyValuePlaceholder")}
                   value={createForm.key}
-                  onChange={(event: ChangeEvent<HTMLInputElement>) => updateCreateForm({ key: event.target.value })}
+                  onChange={(event: ChangeEvent<HTMLInputElement>) =>
+                    updateCreateForm({ key: event.target.value })
+                  }
                 />
               </FormField>
             </div>
 
             <div className="grid gap-4 sm:grid-cols-2">
-              <FormField label={t('apiKeys.quotaLimitLabel')} icon={<CircleDollarSign className="size-3.5" />}>
+              <FormField
+                label={t("apiKeys.quotaLimitLabel")}
+                icon={<CircleDollarSign className="size-3.5" />}
+              >
                 <Input
                   type="number"
                   min="0"
                   step="0.000001"
                   inputMode="decimal"
-                  placeholder={t('apiKeys.quotaLimitPlaceholder')}
+                  placeholder={t("apiKeys.quotaLimitPlaceholder")}
                   value={createForm.quotaLimit}
-                  onChange={(event: ChangeEvent<HTMLInputElement>) => updateCreateForm({ quotaLimit: event.target.value })}
+                  onChange={(event: ChangeEvent<HTMLInputElement>) =>
+                    updateCreateForm({ quotaLimit: event.target.value })
+                  }
                 />
               </FormField>
-              <FormField label={t('apiKeys.expireModeLabel')} icon={<CalendarClock className="size-3.5" />}>
+              <FormField
+                label={t("apiKeys.expireModeLabel")}
+                icon={<CalendarClock className="size-3.5" />}
+              >
                 <Select
                   value={createForm.expireMode}
-                  onValueChange={(value) => updateCreateForm({ expireMode: value as ExpireMode })}
+                  onValueChange={(value) =>
+                    updateCreateForm({ expireMode: value as ExpireMode })
+                  }
                   options={expireOptions}
                   compact
                 />
               </FormField>
             </div>
 
-            {createForm.expireMode === 'custom' ? (
-              <FormField label={t('apiKeys.expiresAtLabel')}>
+            {createForm.expireMode === "custom" ? (
+              <FormField label={t("apiKeys.expiresAtLabel")}>
                 <Input
                   type="datetime-local"
                   value={createForm.expiresAt}
-                  onChange={(event: ChangeEvent<HTMLInputElement>) => updateCreateForm({ expiresAt: event.target.value })}
+                  onChange={(event: ChangeEvent<HTMLInputElement>) =>
+                    updateCreateForm({ expiresAt: event.target.value })
+                  }
                 />
               </FormField>
             ) : null}
+
+            <FormField
+              label={t("apiKeys.allowedGroupsLabel")}
+              icon={<ShieldCheck className="size-3.5" />}
+              as="div"
+            >
+              <GroupMultiSelect
+                groups={groups}
+                value={createForm.allowedGroupIds}
+                onChange={(allowedGroupIds) =>
+                  updateCreateForm({ allowedGroupIds })
+                }
+                allLabel={t("apiKeys.allowedGroupsAll")}
+                placeholder={t("apiKeys.allowedGroupsPlaceholder")}
+                emptyLabel={t("accounts.groupsNone")}
+              />
+              <p className="mt-1.5 text-xs text-muted-foreground">
+                {t("apiKeys.allowedGroupsHint")}
+              </p>
+            </FormField>
           </form>
         </Modal>
 
+        <Modal
+          show={Boolean(editingKey)}
+          title={t("apiKeys.editTitle")}
+          onClose={closeEditDialog}
+          contentClassName="sm:max-w-[640px]"
+          footer={
+            <>
+              <Button
+                type="button"
+                variant="outline"
+                onClick={closeEditDialog}
+                disabled={saving}
+              >
+                {t("common.cancel")}
+              </Button>
+              <Button
+                type="submit"
+                form="edit-api-key-form"
+                disabled={saving || !editForm.name.trim()}
+              >
+                {saving ? t("common.saving") : t("common.save")}
+              </Button>
+            </>
+          }
+        >
+          {editingKey ? (
+            <form
+              id="edit-api-key-form"
+              className="space-y-5"
+              onSubmit={(event) => void handleSaveEdit(event)}
+            >
+              <div className="flex items-start gap-3 rounded-lg border border-border bg-muted/20 p-3">
+                <div className="flex size-9 shrink-0 items-center justify-center rounded-lg bg-primary/10 text-primary">
+                  <Pencil className="size-4" />
+                </div>
+                <div className="min-w-0">
+                  <div className="truncate text-sm font-semibold text-foreground">
+                    {editingKey.name}
+                  </div>
+                  <p className="mt-1 text-sm leading-relaxed text-muted-foreground">
+                    {t("apiKeys.editDesc")}
+                  </p>
+                </div>
+              </div>
+
+              <div className="grid gap-4 sm:grid-cols-2">
+                <FormField label={t("apiKeys.nameLabel")}>
+                  <Input
+                    placeholder={t("apiKeys.keyNamePlaceholder")}
+                    value={editForm.name}
+                    onChange={(event: ChangeEvent<HTMLInputElement>) =>
+                      updateEditForm({ name: event.target.value })
+                    }
+                    autoFocus
+                  />
+                </FormField>
+                <FormField
+                  label={t("apiKeys.quotaLimitLabel")}
+                  icon={<CircleDollarSign className="size-3.5" />}
+                >
+                  <Input
+                    type="number"
+                    min="0"
+                    step="0.000001"
+                    inputMode="decimal"
+                    placeholder={t("apiKeys.quotaLimitPlaceholder")}
+                    value={editForm.quotaLimit}
+                    onChange={(event: ChangeEvent<HTMLInputElement>) =>
+                      updateEditForm({ quotaLimit: event.target.value })
+                    }
+                  />
+                </FormField>
+              </div>
+
+              <div className="grid gap-4 sm:grid-cols-2">
+                <FormField
+                  label={t("apiKeys.expireModeLabel")}
+                  icon={<CalendarClock className="size-3.5" />}
+                >
+                  <Select
+                    value={editForm.expireMode}
+                    onValueChange={(value) =>
+                      updateEditForm({ expireMode: value as ExpireMode })
+                    }
+                    options={expireOptions}
+                    compact
+                  />
+                </FormField>
+                {editForm.expireMode === "custom" ? (
+                  <FormField label={t("apiKeys.expiresAtLabel")}>
+                    <Input
+                      type="datetime-local"
+                      value={editForm.expiresAt}
+                      onChange={(event: ChangeEvent<HTMLInputElement>) =>
+                        updateEditForm({ expiresAt: event.target.value })
+                      }
+                    />
+                  </FormField>
+                ) : editForm.expireMode === "never" ? (
+                  <div className="rounded-lg border border-border bg-muted/20 px-3 py-2 text-sm text-muted-foreground">
+                    {t("apiKeys.clearExpirationHint")}
+                  </div>
+                ) : (
+                  <div className="rounded-lg border border-border bg-muted/20 px-3 py-2 text-sm text-muted-foreground">
+                    {t("apiKeys.relativeExpirationHint", {
+                      days: editForm.expireMode,
+                    })}
+                  </div>
+                )}
+              </div>
+
+              <FormField
+                label={t("apiKeys.allowedGroupsLabel")}
+                icon={<ShieldCheck className="size-3.5" />}
+                as="div"
+              >
+                <GroupMultiSelect
+                  groups={groups}
+                  value={editForm.allowedGroupIds}
+                  onChange={(allowedGroupIds) =>
+                    updateEditForm({ allowedGroupIds })
+                  }
+                  allLabel={t("apiKeys.allowedGroupsAll")}
+                  placeholder={t("apiKeys.allowedGroupsPlaceholder")}
+                  emptyLabel={t("accounts.groupsNone")}
+                />
+                <p className="mt-1.5 text-xs text-muted-foreground">
+                  {t("apiKeys.allowedGroupsHint")}
+                </p>
+              </FormField>
+            </form>
+          ) : null}
+        </Modal>
+
         <ToastNotice toast={toast} />
         {confirmDialog}
       </>
     </StateShell>
-  )
+  );
 }
 
-type Translator = (key: string, options?: Record<string, unknown>) => string
+type Translator = (key: string, options?: Record<string, unknown>) => string;
 
-function buildExpirationPayload(form: CreateKeyFormState, t: Translator): { expires_in_days?: number; expires_at?: string } {
-  if (form.expireMode === 'never') return {}
-  if (form.expireMode !== 'custom') {
-    return { expires_in_days: Number(form.expireMode) }
+function parseQuotaLimit(raw: string, t: Translator): number {
+  const quotaLimitText = raw.trim();
+  if (!quotaLimitText) return 0;
+  const quotaLimit = Number(quotaLimitText);
+  if (!Number.isFinite(quotaLimit) || quotaLimit < 0) {
+    throw new Error(t("apiKeys.quotaInvalid"));
+  }
+  return quotaLimit;
+}
+
+function buildExpirationPayload(
+  form: Pick<CreateKeyFormState, "expireMode" | "expiresAt">,
+  t: Translator,
+  options: { clearNever?: boolean } = {},
+): { expires_in_days?: number; expires_at?: string | null } {
+  if (form.expireMode === "never")
+    return options.clearNever ? { expires_at: null } : {};
+  if (form.expireMode !== "custom") {
+    return { expires_in_days: Number(form.expireMode) };
   }
   if (!form.expiresAt) {
-    throw new Error(t('apiKeys.expiresAtRequired'))
+    throw new Error(t("apiKeys.expiresAtRequired"));
   }
-  const date = new Date(form.expiresAt)
+  const date = new Date(form.expiresAt);
   if (!Number.isFinite(date.getTime())) {
-    throw new Error(t('apiKeys.expiresAtInvalid'))
+    throw new Error(t("apiKeys.expiresAtInvalid"));
   }
   if (date.getTime() <= Date.now()) {
-    throw new Error(t('apiKeys.expiresAtPast'))
+    throw new Error(t("apiKeys.expiresAtPast"));
   }
-  return { expires_at: date.toISOString() }
+  return { expires_at: date.toISOString() };
+}
+
+function toDateTimeLocalValue(value?: string | null) {
+  if (!value) return "";
+  const date = new Date(value);
+  if (!Number.isFinite(date.getTime())) return "";
+  const local = new Date(date.getTime() - date.getTimezoneOffset() * 60000);
+  return local.toISOString().slice(0, 16);
 }
 
-function getAPIKeyStatus(keyRow: APIKeyRow): 'active' | 'expired' | 'quota_exhausted' {
-  if (keyRow.status === 'expired' || keyRow.status === 'quota_exhausted') {
-    return keyRow.status
+function getAPIKeyStatus(
+  keyRow: APIKeyRow,
+): "active" | "expired" | "quota_exhausted" {
+  if (keyRow.status === "expired" || keyRow.status === "quota_exhausted") {
+    return keyRow.status;
   }
-  if (keyRow.expires_at && new Date(keyRow.expires_at).getTime() <= Date.now()) {
-    return 'expired'
+  if (
+    keyRow.expires_at &&
+    new Date(keyRow.expires_at).getTime() <= Date.now()
+  ) {
+    return "expired";
   }
   if (keyRow.quota_limit > 0 && keyRow.quota_used >= keyRow.quota_limit) {
-    return 'quota_exhausted'
+    return "quota_exhausted";
   }
-  return 'active'
+  return "active";
 }
 
 function formatQuotaLimit(keyRow: APIKeyRow, t: Translator) {
   if (!keyRow.quota_limit || keyRow.quota_limit <= 0) {
-    return t('apiKeys.unlimited')
+    return t("apiKeys.unlimited");
   }
-  return t('apiKeys.quotaUsedOfLimit', {
+  return t("apiKeys.quotaUsedOfLimit", {
     used: formatUSD(keyRow.quota_used),
     limit: formatUSD(keyRow.quota_limit),
-  })
+  });
 }
 
 function formatExpiration(keyRow: APIKeyRow, t: Translator) {
   if (!keyRow.expires_at) {
-    return t('apiKeys.neverExpires')
+    return t("apiKeys.neverExpires");
   }
-  return formatBeijingTime(keyRow.expires_at)
+  return formatBeijingTime(keyRow.expires_at);
 }
 
 function formatUSD(value: number) {
-  if (!Number.isFinite(value)) return '$0'
-  if (value >= 1) return `$${value.toFixed(2)}`
-  if (value >= 0.01) return `$${value.toFixed(4)}`
-  return `$${value.toFixed(6)}`
+  if (!Number.isFinite(value)) return "$0";
+  if (value >= 1) return `$${value.toFixed(2)}`;
+  if (value >= 0.01) return `$${value.toFixed(4)}`;
+  return `$${value.toFixed(6)}`;
+}
+
+function AllowedGroupsDisplay({
+  ids,
+  groups,
+  t,
+}: {
+  ids: number[];
+  groups: AccountGroup[];
+  t: Translator;
+}) {
+  const selected = resolveGroups(ids, groups);
+  if (ids.length === 0) {
+    return <Badge variant="secondary">{t("apiKeys.allowedGroupsAll")}</Badge>;
+  }
+  if (selected.length === 0) {
+    return (
+      <Badge variant="destructive">{t("apiKeys.allowedGroupsMissing")}</Badge>
+    );
+  }
+  return (
+    <div className="flex flex-wrap gap-1">
+      {selected.slice(0, 2).map((group) => (
+        <span
+          key={group.id}
+          className="inline-flex items-center rounded-md bg-primary/10 px-1.5 py-0.5 text-[11px] font-semibold text-primary"
+        >
+          {group.name}
+        </span>
+      ))}
+      {selected.length > 2 ? (
+        <span className="inline-flex items-center rounded-md bg-muted px-1.5 py-0.5 text-[11px] font-semibold text-muted-foreground">
+          +{selected.length - 2}
+        </span>
+      ) : null}
+    </div>
+  );
+}
+
+function resolveGroups(ids: number[], groups: AccountGroup[]): AccountGroup[] {
+  const byID = new Map(groups.map((group) => [group.id, group]));
+  return ids.map((id) => byID.get(id)).filter(Boolean) as AccountGroup[];
+}
+
+function GroupMultiSelect({
+  groups,
+  value,
+  onChange,
+  allLabel,
+  placeholder,
+  emptyLabel,
+}: {
+  groups: AccountGroup[];
+  value: number[];
+  onChange: (value: number[]) => void;
+  allLabel: string;
+  placeholder: string;
+  emptyLabel: string;
+}) {
+  const selected = resolveGroups(value, groups);
+  const summary =
+    value.length === 0
+      ? allLabel
+      : selected.length > 0
+        ? selected.map((group) => group.name).join(", ")
+        : placeholder;
+
+  return (
+    <div className="rounded-lg border border-border bg-background p-2">
+      <div className="mb-2 truncate text-sm font-medium text-foreground">
+        {summary}
+      </div>
+      {groups.length === 0 ? (
+        <div className="rounded-md bg-muted/50 px-2 py-2 text-sm text-muted-foreground">
+          {emptyLabel}
+        </div>
+      ) : (
+        <div className="flex flex-wrap gap-1.5">
+          <button
+            type="button"
+            onClick={() => onChange([])}
+            className={`rounded-md border px-2.5 py-1 text-xs font-semibold transition-colors ${
+              value.length === 0
+                ? "border-primary bg-primary text-primary-foreground"
+                : "border-border bg-muted/30 text-muted-foreground hover:text-foreground"
+            }`}
+          >
+            {allLabel}
+          </button>
+          {groups.map((group) => {
+            const active = value.includes(group.id);
+            return (
+              <button
+                key={group.id}
+                type="button"
+                onClick={() =>
+                  onChange(
+                    active
+                      ? value.filter((id) => id !== group.id)
+                      : [...value, group.id],
+                  )
+                }
+                className={`rounded-md border px-2.5 py-1 text-xs font-semibold transition-colors ${
+                  active
+                    ? "border-primary bg-primary/10 text-primary"
+                    : "border-border bg-muted/30 text-muted-foreground hover:text-foreground"
+                }`}
+              >
+                {group.name}
+              </button>
+            );
+          })}
+        </div>
+      )}
+    </div>
+  );
 }
 
 function FormField({
   label,
   icon,
   children,
+  as = "label",
 }: {
-  label: string
-  icon?: ReactNode
-  children: ReactNode
+  label: string;
+  icon?: ReactNode;
+  children: ReactNode;
+  as?: "label" | "div";
 }) {
+  const Component = as;
   return (
-    <label className="block min-w-0">
+    <Component className="block min-w-0">
       <span className="mb-1.5 flex items-center gap-1.5 text-xs font-semibold text-muted-foreground">
         {icon}
         {label}
       </span>
       {children}
-    </label>
-  )
+    </Component>
+  );
 }
 
 function KeySummaryCard({
@@ -560,31 +1080,39 @@ function KeySummaryCard({
   sub,
   tone,
 }: {
-  icon: ReactNode
-  label: string
-  value: string
-  sub: string
-  tone: 'neutral' | 'info' | 'success' | 'warning'
+  icon: ReactNode;
+  label: string;
+  value: string;
+  sub: string;
+  tone: "neutral" | "info" | "success" | "warning";
 }) {
   const toneClassName = {
-    neutral: 'bg-muted text-muted-foreground',
-    info: 'bg-primary/10 text-primary',
-    success: 'bg-[hsl(var(--success-bg))] text-[hsl(var(--success))]',
-    warning: 'bg-[hsl(var(--warning-bg))] text-[hsl(var(--warning))]',
-  }[tone]
+    neutral: "bg-muted text-muted-foreground",
+    info: "bg-primary/10 text-primary",
+    success: "bg-[hsl(var(--success-bg))] text-[hsl(var(--success))]",
+    warning: "bg-[hsl(var(--warning-bg))] text-[hsl(var(--warning))]",
+  }[tone];
 
   return (
     <Card className="py-0">
       <CardContent className="flex items-center justify-between gap-3 p-4">
         <div className="min-w-0">
-          <div className="text-[11px] font-bold uppercase text-muted-foreground">{label}</div>
-          <div className="mt-2 truncate text-[24px] font-bold leading-none text-foreground">{value}</div>
-          <div className="mt-2 truncate text-xs text-muted-foreground">{sub}</div>
+          <div className="text-[11px] font-bold uppercase text-muted-foreground">
+            {label}
+          </div>
+          <div className="mt-2 truncate text-[24px] font-bold leading-none text-foreground">
+            {value}
+          </div>
+          <div className="mt-2 truncate text-xs text-muted-foreground">
+            {sub}
+          </div>
         </div>
-        <div className={`flex size-10 shrink-0 items-center justify-center rounded-lg ${toneClassName}`}>
+        <div
+          className={`flex size-10 shrink-0 items-center justify-center rounded-lg ${toneClassName}`}
+        >
           {icon}
         </div>
       </CardContent>
     </Card>
-  )
+  );
 }
diff --git a/frontend/src/pages/Accounts.tsx b/frontend/src/pages/Accounts.tsx
index 7a632d7a..cd6e5076 100644
--- a/frontend/src/pages/Accounts.tsx
+++ b/frontend/src/pages/Accounts.tsx
@@ -1,23 +1,33 @@
-import type { ChangeEvent, DragEvent, ReactNode } from 'react'
-import { useCallback, useEffect, useRef, useState, useMemo } from 'react'
-import { api, getAdminKey } from '../api'
-import Modal from '../components/Modal'
-import PageHeader from '../components/PageHeader'
-import Pagination from '../components/Pagination'
-import StateShell from '../components/StateShell'
-import StatusBadge from '../components/StatusBadge'
-import ToastNotice from '../components/ToastNotice'
-import { useDataLoader } from '../hooks/useDataLoader'
-import { useConfirmDialog } from '../hooks/useConfirmDialog'
-import { useToast } from '../hooks/useToast'
-import type { AccountRow, AddAccountRequest, AddATAccountRequest, AddOpenAIResponsesAccountRequest, UpdateOpenAIResponsesAccountRequest, APIKeyRow, OpsOverviewResponse } from '../types'
-import { getErrorMessage } from '../utils/error'
-import { formatCompactEmail } from '../lib/utils'
-import { formatRelativeTime, formatBeijingTime } from '../utils/time'
-import { Card, CardContent } from '@/components/ui/card'
-import { Button } from '@/components/ui/button'
-import { Input } from '@/components/ui/input'
-import { Select } from '@/components/ui/select'
+import type { ChangeEvent, DragEvent, ReactNode } from "react";
+import { useCallback, useEffect, useRef, useState, useMemo } from "react";
+import { api, getAdminKey } from "../api";
+import Modal from "../components/Modal";
+import PageHeader from "../components/PageHeader";
+import Pagination from "../components/Pagination";
+import StateShell from "../components/StateShell";
+import StatusBadge from "../components/StatusBadge";
+import ToastNotice from "../components/ToastNotice";
+import { useDataLoader } from "../hooks/useDataLoader";
+import { useConfirmDialog } from "../hooks/useConfirmDialog";
+import { useToast } from "../hooks/useToast";
+import type {
+  AccountRow,
+  AddAccountRequest,
+  AddATAccountRequest,
+  AddOpenAIResponsesAccountRequest,
+  UpdateOpenAIResponsesAccountRequest,
+  APIKeyRow,
+  OpsOverviewResponse,
+  AccountGroup,
+} from "../types";
+import { getErrorMessage } from "../utils/error";
+import { formatCompactEmail } from "../lib/utils";
+import { formatRelativeTime, formatBeijingTime } from "../utils/time";
+import { Card, CardContent } from "@/components/ui/card";
+import { Badge } from "@/components/ui/badge";
+import { Button } from "@/components/ui/button";
+import { Input } from "@/components/ui/input";
+import { Select } from "@/components/ui/select";
 import {
   Table,
   TableBody,
@@ -25,267 +35,507 @@ import {
   TableHead,
   TableHeader,
   TableRow,
-} from '@/components/ui/table'
-import { Plus, RefreshCw, Trash2, Zap, FlaskConical, Ban, Timer, AlertTriangle, Upload, Download, ArrowDownToLine, KeyRound, ExternalLink, FileText, FileJson, BarChart3, Search, Fingerprint, FolderOpen, Lock, Unlock, RotateCcw, Pencil, Check, ChevronDown, Copy, Power, PowerOff, Hourglass, X } from 'lucide-react'
-import { useTranslation } from 'react-i18next'
-import AccountUsageModal from '../components/AccountUsageModal'
-import AccountQuotaDistributionChart from '../components/AccountQuotaDistributionChart'
-import AccountRateLimitRecoveryChart from '../components/AccountRateLimitRecoveryChart'
+} from "@/components/ui/table";
+import {
+  Plus,
+  RefreshCw,
+  Trash2,
+  Zap,
+  FlaskConical,
+  Ban,
+  Timer,
+  AlertTriangle,
+  Upload,
+  Download,
+  ArrowDownToLine,
+  KeyRound,
+  ExternalLink,
+  FileText,
+  FileJson,
+  BarChart3,
+  Search,
+  Fingerprint,
+  FolderOpen,
+  Lock,
+  Unlock,
+  RotateCcw,
+  Pencil,
+  Check,
+  ChevronDown,
+  Copy,
+  Power,
+  PowerOff,
+  Hourglass,
+  X,
+  SlidersHorizontal,
+} from "lucide-react";
+import { useTranslation } from "react-i18next";
+import AccountUsageModal from "../components/AccountUsageModal";
+import AccountQuotaDistributionChart from "../components/AccountQuotaDistributionChart";
+import AccountRateLimitRecoveryChart from "../components/AccountRateLimitRecoveryChart";
+import ChipInput from "../components/ChipInput";
+
+const ACCOUNT_BATCH_CONCURRENCY = 6;
+const ACCOUNT_REFRESH_BATCH_CONCURRENCY = 4;
+const ACCOUNT_ANALYSIS_VISIBILITY_KEY = "codex2api:accounts:analysis-visible";
+const ACCOUNT_VISIBLE_COLUMNS_KEY = "codex2api:accounts:visible-columns";
+const ACCOUNT_TABLE_COLUMNS = [
+  "sequence",
+  "email",
+  "tags",
+  "groups",
+  "plan",
+  "status",
+  "requests",
+  "usage",
+  "importTime",
+  "updatedAt",
+  "actions",
+] as const;
+const ACCOUNT_GROUP_COLORS = [
+  "#2563eb",
+  "#16a34a",
+  "#d97706",
+  "#dc2626",
+  "#7c3aed",
+  "#0891b2",
+  "#64748b",
+] as const;
+type AccountTableColumn = (typeof ACCOUNT_TABLE_COLUMNS)[number];
+type AccountGroupDraft = {
+  id: number | null;
+  name: string;
+  description: string;
+  color: string;
+};
+
+function getDefaultAccountVisibleColumns(): Record<
+  AccountTableColumn,
+  boolean
+> {
+  return Object.fromEntries(
+    ACCOUNT_TABLE_COLUMNS.map((column) => [
+      column,
+      column !== "tags" && column !== "groups",
+    ]),
+  ) as Record<AccountTableColumn, boolean>;
+}
+
+function getInitialAccountVisibleColumns(): Record<
+  AccountTableColumn,
+  boolean
+> {
+  const fallback = getDefaultAccountVisibleColumns();
+  try {
+    const raw = window.localStorage.getItem(ACCOUNT_VISIBLE_COLUMNS_KEY);
+    if (!raw) return fallback;
+    const parsed = JSON.parse(raw) as Partial<
+      Record<AccountTableColumn, boolean>
+    >;
+    return Object.fromEntries(
+      ACCOUNT_TABLE_COLUMNS.map((column) => [
+        column,
+        column === "tags" || column === "groups"
+          ? parsed[column] === true
+          : parsed[column] !== false,
+      ]),
+    ) as Record<AccountTableColumn, boolean>;
+  } catch {
+    return fallback;
+  }
+}
 
-const ACCOUNT_BATCH_CONCURRENCY = 6
-const ACCOUNT_REFRESH_BATCH_CONCURRENCY = 4
-const ACCOUNT_ANALYSIS_VISIBILITY_KEY = 'codex2api:accounts:analysis-visible'
+function persistAccountVisibleColumns(
+  columns: Record<AccountTableColumn, boolean>,
+) {
+  try {
+    window.localStorage.setItem(
+      ACCOUNT_VISIBLE_COLUMNS_KEY,
+      JSON.stringify(columns),
+    );
+  } catch {
+    // Keep the in-memory preference working when localStorage is unavailable.
+  }
+}
 
 function getInitialAnalysisVisibility(): boolean {
   try {
-    return window.localStorage.getItem(ACCOUNT_ANALYSIS_VISIBILITY_KEY) !== 'false'
+    return (
+      window.localStorage.getItem(ACCOUNT_ANALYSIS_VISIBILITY_KEY) !== "false"
+    );
   } catch {
-    return true
+    return true;
   }
 }
 
 function persistAnalysisVisibility(visible: boolean) {
   try {
-    window.localStorage.setItem(ACCOUNT_ANALYSIS_VISIBILITY_KEY, visible ? 'true' : 'false')
+    window.localStorage.setItem(
+      ACCOUNT_ANALYSIS_VISIBILITY_KEY,
+      visible ? "true" : "false",
+    );
   } catch {
     // Local storage can be unavailable in restricted browser modes; keep the in-memory toggle working.
   }
 }
 
 function parseModelTokens(value: string): string[] {
-  const seen = new Set<string>()
+  const seen = new Set<string>();
   return value
     .split(/[\n,\t ]+/)
-    .map(item => item.trim())
-    .filter(item => {
-      if (!item) return false
-      const key = item.toLowerCase()
-      if (seen.has(key)) return false
-      seen.add(key)
-      return true
-    })
+    .map((item) => item.trim())
+    .filter((item) => {
+      if (!item) return false;
+      const key = item.toLowerCase();
+      if (seen.has(key)) return false;
+      seen.add(key);
+      return true;
+    });
 }
 
 function mergeModelLists(current: string[], incoming: string[]): string[] {
-  const seen = new Set<string>()
-  const result: string[] = []
+  const seen = new Set<string>();
+  const result: string[] = [];
   for (const item of [...current, ...incoming]) {
-    const value = item.trim()
-    if (!value) continue
-    const key = value.toLowerCase()
-    if (seen.has(key)) continue
-    seen.add(key)
-    result.push(value)
+    const value = item.trim();
+    if (!value) continue;
+    const key = value.toLowerCase();
+    if (seen.has(key)) continue;
+    seen.add(key);
+    result.push(value);
   }
-  return result
+  return result;
 }
 
 function formatAccountName(account: AccountRow): string {
   if (account.openai_responses_api) {
-    return account.name?.trim() || `ID ${account.id}`
+    return account.name?.trim() || `ID ${account.id}`;
   }
-  return account.email || account.name || `ID ${account.id}`
+  return account.email || account.name || `ID ${account.id}`;
 }
 
-async function runAccountBatch(ids: number[], action: (id: number) => Promise<unknown>, concurrency = ACCOUNT_BATCH_CONCURRENCY) {
-  let success = 0
-  let fail = 0
-  let cursor = 0
-  const workerCount = Math.min(concurrency, ids.length)
-
-  await Promise.all(Array.from({ length: workerCount }, async () => {
-    while (cursor < ids.length) {
-      const id = ids[cursor]
-      cursor += 1
-      try {
-        await action(id)
-        success += 1
-      } catch {
-        fail += 1
+async function runAccountBatch(
+  ids: number[],
+  action: (id: number) => Promise<unknown>,
+  concurrency = ACCOUNT_BATCH_CONCURRENCY,
+) {
+  let success = 0;
+  let fail = 0;
+  let cursor = 0;
+  const workerCount = Math.min(concurrency, ids.length);
+
+  await Promise.all(
+    Array.from({ length: workerCount }, async () => {
+      while (cursor < ids.length) {
+        const id = ids[cursor];
+        cursor += 1;
+        try {
+          await action(id);
+          success += 1;
+        } catch {
+          fail += 1;
+        }
       }
-    }
-  }))
+    }),
+  );
 
-  return { success, fail }
+  return { success, fail };
 }
 
 export default function Accounts() {
-  const { t } = useTranslation()
-  const pageSizeOptions = [10, 20, 50, 100]
-  const [showAdd, setShowAdd] = useState(false)
-  const [page, setPage] = useState(1)
-  const [pageSize, setPageSize] = useState(20)
-  const [statusFilter, setStatusFilter] = useState<'all' | 'normal' | 'rate_limited' | 'banned' | 'error' | 'disabled' | 'locked'>('all')
-  const [searchQuery, setSearchQuery] = useState('')
-  const [planFilter, setPlanFilter] = useState<'all' | 'pro' | 'prolite' | 'plus' | 'team' | 'free'>('all')
-  const [sortKey, setSortKey] = useState<'requests' | 'usage' | 'importTime' | null>(null)
-  const [sortDir, setSortDir] = useState<'asc' | 'desc'>('desc')
+  const { t } = useTranslation();
+  const pageSizeOptions = [10, 20, 50, 100];
+  const [showAdd, setShowAdd] = useState(false);
+  const [page, setPage] = useState(1);
+  const [pageSize, setPageSize] = useState(20);
+  const [statusFilter, setStatusFilter] = useState<
+    | "all"
+    | "normal"
+    | "rate_limited"
+    | "banned"
+    | "error"
+    | "disabled"
+    | "locked"
+  >("all");
+  const [searchQuery, setSearchQuery] = useState("");
+  const [planFilter, setPlanFilter] = useState<
+    "all" | "pro" | "prolite" | "plus" | "team" | "free"
+  >("all");
+  const [sortKey, setSortKey] = useState<
+    "requests" | "usage" | "importTime" | null
+  >(null);
+  const [sortDir, setSortDir] = useState<"asc" | "desc">("desc");
   const [addForm, setAddForm] = useState<AddAccountRequest>({
-    refresh_token: '',
-    proxy_url: '',
-  })
-  const [submitting, setSubmitting] = useState(false)
-  const [selected, setSelected] = useState<Set<number>>(new Set())
-  const [refreshingIds, setRefreshingIds] = useState<Set<number>>(new Set())
-  const [authJsonExportingIds, setAuthJsonExportingIds] = useState<Set<number>>(new Set())
-  const [authJsonModal, setAuthJsonModal] = useState<{ account: AccountRow; json: string } | null>(null)
-  const [batchLoading, setBatchLoading] = useState(false)
-  const [batchRefreshing, setBatchRefreshing] = useState(false)
-  const [batchTesting, setBatchTesting] = useState(false)
-  const [lockingSubscriptionAccounts, setLockingSubscriptionAccounts] = useState(false)
-  const [cleaningBanned, setCleaningBanned] = useState(false)
-  const [cleaningRateLimited, setCleaningRateLimited] = useState(false)
-  const [cleaningError, setCleaningError] = useState(false)
-  const [testingAccount, setTestingAccount] = useState<AccountRow | null>(null)
-  const [usageAccount, setUsageAccount] = useState<AccountRow | null>(null)
-  const [editingAccount, setEditingAccount] = useState<AccountRow | null>(null)
-  const [editSubmitting, setEditSubmitting] = useState(false)
-  const [editTab, setEditTab] = useState<'scheduler' | 'account'>('scheduler')
-  const [scoreMode, setScoreMode] = useState<'default' | 'custom'>('default')
-  const [scoreInput, setScoreInput] = useState('')
-  const [concurrencyMode, setConcurrencyMode] = useState<'default' | 'custom'>('default')
-  const [concurrencyInput, setConcurrencyInput] = useState('')
-  const [allowedAPIKeySelection, setAllowedAPIKeySelection] = useState<number[]>([])
-  const [editOpenAIForm, setEditOpenAIForm] = useState<UpdateOpenAIResponsesAccountRequest>({
-    name: '',
-    base_url: 'https://api.openai.com',
-    api_key: '',
-    models: [],
-    proxy_url: '',
-  })
-  const [openAIModelDraft, setOpenAIModelDraft] = useState('')
-  const [editOpenAIModelDraft, setEditOpenAIModelDraft] = useState('')
-  const [editOpenAIModelsLoading, setEditOpenAIModelsLoading] = useState(false)
-  const [importing, setImporting] = useState(false)
-  const [showImportPicker, setShowImportPicker] = useState(false)
-  const [dragging, setDragging] = useState(false)
-  const dragCounter = useRef(0)
-  const [showExportPicker, setShowExportPicker] = useState(false)
-  const [exporting, setExporting] = useState(false)
-  const [showMigrate, setShowMigrate] = useState(false)
-  const [showAnalysisCharts, setShowAnalysisCharts] = useState(getInitialAnalysisVisibility)
-  const [migrateUrl, setMigrateUrl] = useState('')
-  const [migrateKey, setMigrateKey] = useState('')
-  const [migrating, setMigrating] = useState(false)
-  const [importProgress, setImportProgress] = useState<{ show: boolean; current: number; total: number; success: number; duplicate: number; failed: number; done: boolean }>({ show: false, current: 0, total: 0, success: 0, duplicate: 0, failed: 0, done: false })
-  const [addMethod, setAddMethod] = useState<'rt' | 'at' | 'openai' | 'oauth'>('rt')
+    refresh_token: "",
+    proxy_url: "",
+  });
+  const [submitting, setSubmitting] = useState(false);
+  const [selected, setSelected] = useState<Set<number>>(new Set());
+  const [refreshingIds, setRefreshingIds] = useState<Set<number>>(new Set());
+  const [authJsonExportingIds, setAuthJsonExportingIds] = useState<Set<number>>(
+    new Set(),
+  );
+  const [authJsonModal, setAuthJsonModal] = useState<{
+    account: AccountRow;
+    json: string;
+  } | null>(null);
+  const [batchLoading, setBatchLoading] = useState(false);
+  const [batchRefreshing, setBatchRefreshing] = useState(false);
+  const [batchTesting, setBatchTesting] = useState(false);
+  const [lockingSubscriptionAccounts, setLockingSubscriptionAccounts] =
+    useState(false);
+  const [cleaningBanned, setCleaningBanned] = useState(false);
+  const [cleaningRateLimited, setCleaningRateLimited] = useState(false);
+  const [cleaningError, setCleaningError] = useState(false);
+  const [testingAccount, setTestingAccount] = useState<AccountRow | null>(null);
+  const [usageAccount, setUsageAccount] = useState<AccountRow | null>(null);
+  const [editingAccount, setEditingAccount] = useState<AccountRow | null>(null);
+  const [editSubmitting, setEditSubmitting] = useState(false);
+  const [editTab, setEditTab] = useState<"scheduler" | "account">("scheduler");
+  const [scoreMode, setScoreMode] = useState<"default" | "custom">("default");
+  const [scoreInput, setScoreInput] = useState("");
+  const [concurrencyMode, setConcurrencyMode] = useState<"default" | "custom">(
+    "default",
+  );
+  const [concurrencyInput, setConcurrencyInput] = useState("");
+  const [allowedAPIKeySelection, setAllowedAPIKeySelection] = useState<
+    number[]
+  >([]);
+  const [editProxyUrl, setEditProxyUrl] = useState("");
+  const [editOpenAIForm, setEditOpenAIForm] =
+    useState<UpdateOpenAIResponsesAccountRequest>({
+      name: "",
+      base_url: "https://api.openai.com",
+      api_key: "",
+      models: [],
+      proxy_url: "",
+    });
+  const [openAIModelDraft, setOpenAIModelDraft] = useState("");
+  const [editOpenAIModelDraft, setEditOpenAIModelDraft] = useState("");
+  const [editOpenAIModelsLoading, setEditOpenAIModelsLoading] = useState(false);
+  const [importing, setImporting] = useState(false);
+  const [showImportPicker, setShowImportPicker] = useState(false);
+  const [dragging, setDragging] = useState(false);
+  const dragCounter = useRef(0);
+  const [showExportPicker, setShowExportPicker] = useState(false);
+  const [exporting, setExporting] = useState(false);
+  const [showMigrate, setShowMigrate] = useState(false);
+  const [showAnalysisCharts, setShowAnalysisCharts] = useState(
+    getInitialAnalysisVisibility,
+  );
+  const [migrateUrl, setMigrateUrl] = useState("");
+  const [migrateKey, setMigrateKey] = useState("");
+  const [migrating, setMigrating] = useState(false);
+  const [importProgress, setImportProgress] = useState<{
+    show: boolean;
+    current: number;
+    total: number;
+    success: number;
+    duplicate: number;
+    failed: number;
+    done: boolean;
+  }>({
+    show: false,
+    current: 0,
+    total: 0,
+    success: 0,
+    duplicate: 0,
+    failed: 0,
+    done: false,
+  });
+  const [addMethod, setAddMethod] = useState<"rt" | "at" | "openai" | "oauth">(
+    "rt",
+  );
   const [atForm, setAtForm] = useState<AddATAccountRequest>({
-    access_token: '',
-    proxy_url: '',
-  })
-  const [openAIForm, setOpenAIForm] = useState<AddOpenAIResponsesAccountRequest>({
-    base_url: 'https://api.openai.com',
-    api_key: '',
-    models: [],
-    proxy_url: '',
-  })
-  const [openAIModelsLoading, setOpenAIModelsLoading] = useState(false)
-  const [oauthStep, setOauthStep] = useState<'generate' | 'exchange'>('generate')
-  const [oauthSession, setOauthSession] = useState<{ session_id: string; auth_url: string } | null>(null)
-  const [oauthProxyUrl, setOauthProxyUrl] = useState('')
-  const [oauthCallbackUrl, setOauthCallbackUrl] = useState('')
-  const [oauthName, setOauthName] = useState('')
-  const [oauthGenerating, setOauthGenerating] = useState(false)
-  const [oauthCompleting, setOauthCompleting] = useState(false)
-  const fileInputRef = useRef<HTMLInputElement>(null)
-  const jsonInputRef = useRef<HTMLInputElement>(null)
-  const atFileInputRef = useRef<HTMLInputElement>(null)
-  const folderInputRef = useRef<HTMLInputElement>(null)
-  const selectAllRef = useRef<HTMLInputElement>(null)
-  const { toast, showToast } = useToast()
-  const { confirm, confirmDialog } = useConfirmDialog()
+    access_token: "",
+    proxy_url: "",
+  });
+  const [openAIForm, setOpenAIForm] =
+    useState<AddOpenAIResponsesAccountRequest>({
+      base_url: "https://api.openai.com",
+      api_key: "",
+      models: [],
+      proxy_url: "",
+    });
+  const [openAIModelsLoading, setOpenAIModelsLoading] = useState(false);
+  const [oauthStep, setOauthStep] = useState<"generate" | "exchange">(
+    "generate",
+  );
+  const [oauthSession, setOauthSession] = useState<{
+    session_id: string;
+    auth_url: string;
+  } | null>(null);
+  const [oauthProxyUrl, setOauthProxyUrl] = useState("");
+  const [oauthCallbackUrl, setOauthCallbackUrl] = useState("");
+  const [oauthName, setOauthName] = useState("");
+  const [oauthGenerating, setOauthGenerating] = useState(false);
+  const [oauthCompleting, setOauthCompleting] = useState(false);
+  const [editTags, setEditTags] = useState<string[]>([]);
+  const [editGroupIds, setEditGroupIds] = useState<number[]>([]);
+  const [tagFilter, setTagFilter] = useState<string>("");
+  const [groupFilter, setGroupFilter] = useState<number | null>(null);
+  const [allGroups, setAllGroups] = useState<AccountGroup[]>([]);
+  const [showGroupManager, setShowGroupManager] = useState(false);
+  const [groupDraft, setGroupDraft] = useState<AccountGroupDraft>({
+    id: null,
+    name: "",
+    description: "",
+    color: ACCOUNT_GROUP_COLORS[0],
+  });
+  const [groupSubmitting, setGroupSubmitting] = useState(false);
+  const [showBatchMetaEditor, setShowBatchMetaEditor] = useState(false);
+  const [batchTags, setBatchTags] = useState<string[]>([]);
+  const [batchGroupIds, setBatchGroupIds] = useState<number[]>([]);
+  const [batchMetaSubmitting, setBatchMetaSubmitting] = useState(false);
+  const [visibleColumns, setVisibleColumns] = useState<
+    Record<AccountTableColumn, boolean>
+  >(getInitialAccountVisibleColumns);
+  const fileInputRef = useRef<HTMLInputElement>(null);
+  const jsonInputRef = useRef<HTMLInputElement>(null);
+  const atFileInputRef = useRef<HTMLInputElement>(null);
+  const folderInputRef = useRef<HTMLInputElement>(null);
+  const selectAllRef = useRef<HTMLInputElement>(null);
+  const { toast, showToast } = useToast();
+  const { confirm, confirmDialog } = useConfirmDialog();
 
   const loadAccounts = useCallback(async () => {
-    const [accountsResponse, apiKeysResponse, opsOverview] = await Promise.all([
-      api.getAccounts(),
-      api.getAPIKeys(),
-      api.getOpsOverview().catch((): OpsOverviewResponse | null => null),
-    ])
+    const [accountsResponse, apiKeysResponse, opsOverview, groupsResponse] =
+      await Promise.all([
+        api.getAccounts(),
+        api.getAPIKeys(),
+        api.getOpsOverview().catch((): OpsOverviewResponse | null => null),
+        api.listAccountGroups().catch(() => ({ groups: [] })),
+      ]);
+    setAllGroups(groupsResponse.groups ?? []);
     return {
       accounts: accountsResponse.accounts ?? [],
       apiKeys: apiKeysResponse.keys ?? [],
       opsOverview,
-    }
-  }, [])
-
-  const { data, loading, error, reload, reloadSilently } = useDataLoader<{ accounts: AccountRow[]; apiKeys: APIKeyRow[]; opsOverview: OpsOverviewResponse | null }>({
+    };
+  }, []);
+
+  const { data, loading, error, reload, reloadSilently } = useDataLoader<{
+    accounts: AccountRow[];
+    apiKeys: APIKeyRow[];
+    opsOverview: OpsOverviewResponse | null;
+  }>({
     initialData: {
       accounts: [],
       apiKeys: [],
       opsOverview: null,
     },
     load: loadAccounts,
-  })
-  const accounts = data.accounts
-  const apiKeys = data.apiKeys
-  const opsOverview = data.opsOverview
-  const usageReloadAttemptsRef = useRef<Map<number, number>>(new Map())
+  });
+  const accounts = data.accounts;
+  const apiKeys = data.apiKeys;
+  const opsOverview = data.opsOverview;
+  const usageReloadAttemptsRef = useRef<Map<number, number>>(new Map());
+
+  useEffect(() => {
+    persistAnalysisVisibility(showAnalysisCharts);
+  }, [showAnalysisCharts]);
+
+  useEffect(() => {
+    persistAccountVisibleColumns(visibleColumns);
+  }, [visibleColumns]);
 
   useEffect(() => {
-    persistAnalysisVisibility(showAnalysisCharts)
-  }, [showAnalysisCharts])
+    if (groupFilter === null) return;
+    if (!allGroups.some((group) => group.id === groupFilter)) {
+      setGroupFilter(null);
+    }
+  }, [allGroups, groupFilter]);
 
   useEffect(() => {
     const needsUsageReload = (account: AccountRow) => {
-      if (account.status !== 'active' && account.status !== 'ready') {
-        return false
+      if (account.status !== "active" && account.status !== "ready") {
+        return false;
       }
 
-      const plan = normalizePlanType(account.plan_type)
-      const has7d = account.usage_percent_7d !== null && account.usage_percent_7d !== undefined
-      const has5h = account.usage_percent_5h !== null && account.usage_percent_5h !== undefined
+      const plan = normalizePlanType(account.plan_type);
+      const has7d =
+        account.usage_percent_7d !== null &&
+        account.usage_percent_7d !== undefined;
+      const has5h =
+        account.usage_percent_5h !== null &&
+        account.usage_percent_5h !== undefined;
 
-      if (plan === 'free') {
-        return !has7d
+      if (plan === "free") {
+        return !has7d;
       }
-      if (plan === 'pro' || plan === 'team' || plan === 'plus' || plan === 'teamplus') {
-        return !has5h || !has7d
+      if (
+        plan === "pro" ||
+        plan === "team" ||
+        plan === "plus" ||
+        plan === "teamplus"
+      ) {
+        return !has5h || !has7d;
       }
-      return !has7d
-    }
+      return !has7d;
+    };
 
-    const missingUsageIds = accounts.filter(needsUsageReload).map((account) => account.id)
-    const missingUsageIdSet = new Set(missingUsageIds)
+    const missingUsageIds = accounts
+      .filter(needsUsageReload)
+      .map((account) => account.id);
+    const missingUsageIdSet = new Set(missingUsageIds);
     for (const id of Array.from(usageReloadAttemptsRef.current.keys())) {
       if (!missingUsageIdSet.has(id)) {
-        usageReloadAttemptsRef.current.delete(id)
+        usageReloadAttemptsRef.current.delete(id);
       }
     }
 
-    const retryIds = missingUsageIds.filter((id) => (usageReloadAttemptsRef.current.get(id) ?? 0) < 6)
+    const retryIds = missingUsageIds.filter(
+      (id) => (usageReloadAttemptsRef.current.get(id) ?? 0) < 6,
+    );
     if (retryIds.length === 0) {
-      return
+      return;
     }
 
     for (const id of retryIds) {
-      usageReloadAttemptsRef.current.set(id, (usageReloadAttemptsRef.current.get(id) ?? 0) + 1)
+      usageReloadAttemptsRef.current.set(
+        id,
+        (usageReloadAttemptsRef.current.get(id) ?? 0) + 1,
+      );
     }
 
     const timer = window.setTimeout(() => {
-      void reloadSilently()
-    }, 2500)
+      void reloadSilently();
+    }, 2500);
 
-    return () => window.clearTimeout(timer)
-  }, [accounts, reloadSilently])
+    return () => window.clearTimeout(timer);
+  }, [accounts, reloadSilently]);
 
   const accountSummary = useMemo(() => {
-    const rateLimitedWindowStats = getRateLimitedWindowStats(accounts)
+    const rateLimitedWindowStats = getRateLimitedWindowStats(accounts);
     return {
       totalAccounts: accounts.length,
-      normalAccounts: accounts.filter((account) => account.status === 'active' || account.status === 'ready').length,
+      normalAccounts: accounts.filter(
+        (account) => account.status === "active" || account.status === "ready",
+      ).length,
       rateLimitedAccounts: rateLimitedWindowStats.total,
       rateLimited5hAccounts: rateLimitedWindowStats.fiveHour,
       rateLimited7dAccounts: rateLimitedWindowStats.sevenDay,
-      bannedAccounts: accounts.filter((account) => account.status === 'unauthorized').length,
-      errorAccounts: accounts.filter((account) => account.status === 'error').length,
-      disabledAccounts: accounts.filter((account) => account.enabled === false).length,
+      bannedAccounts: accounts.filter(
+        (account) => account.status === "unauthorized",
+      ).length,
+      errorAccounts: accounts.filter((account) => account.status === "error")
+        .length,
+      disabledAccounts: accounts.filter((account) => account.enabled === false)
+        .length,
       lockedAccounts: accounts.filter((account) => account.locked).length,
-      subscriptionAccountsToLock: accounts.filter((account) => isSubscriptionPlan(account.plan_type) && !account.locked),
-      healthyAccounts: accounts.filter((account) => account.health_tier === 'healthy').length,
-      warmAccounts: accounts.filter((account) => account.health_tier === 'warm').length,
-      riskyAccounts: accounts.filter((account) => account.health_tier === 'risky').length,
-    }
-  }, [accounts])
+      subscriptionAccountsToLock: accounts.filter(
+        (account) => isSubscriptionPlan(account.plan_type) && !account.locked,
+      ),
+      healthyAccounts: accounts.filter(
+        (account) => account.health_tier === "healthy",
+      ).length,
+      warmAccounts: accounts.filter((account) => account.health_tier === "warm")
+        .length,
+      riskyAccounts: accounts.filter(
+        (account) => account.health_tier === "risky",
+      ).length,
+    };
+  }, [accounts]);
   const {
     totalAccounts,
     normalAccounts,
@@ -300,288 +550,378 @@ export default function Accounts() {
     healthyAccounts,
     warmAccounts,
     riskyAccounts,
-  } = accountSummary
+  } = accountSummary;
+
+  const allTags = useMemo(() => {
+    const tags = new Set<string>();
+    for (const account of accounts) {
+      for (const tag of account.tags ?? []) {
+        tags.add(tag);
+      }
+    }
+    return Array.from(tags).sort();
+  }, [accounts]);
 
   const filteredAccounts = useMemo(() => {
-    const query = searchQuery.toLowerCase()
+    const query = searchQuery.toLowerCase();
     return accounts.filter((account) => {
       switch (statusFilter) {
-        case 'normal':
-          if (account.status !== 'active' && account.status !== 'ready') return false
-          break
-        case 'rate_limited':
-          if (!isRateLimitedAccount(account)) return false
-          break
-        case 'banned':
-          if (account.status !== 'unauthorized') return false
-          break
-        case 'error':
-          if (account.status !== 'error') return false
-          break
-        case 'disabled':
-          if (account.enabled !== false) return false
-          break
-        case 'locked':
-          if (!account.locked) return false
-          break
+        case "normal":
+          if (account.status !== "active" && account.status !== "ready")
+            return false;
+          break;
+        case "rate_limited":
+          if (!isRateLimitedAccount(account)) return false;
+          break;
+        case "banned":
+          if (account.status !== "unauthorized") return false;
+          break;
+        case "error":
+          if (account.status !== "error") return false;
+          break;
+        case "disabled":
+          if (account.enabled !== false) return false;
+          break;
+        case "locked":
+          if (!account.locked) return false;
+          break;
       }
-      if (planFilter !== 'all') {
-        const plan = (account.plan_type || '').toLowerCase().trim()
-        if (plan !== planFilter) return false
+      if (planFilter !== "all") {
+        const plan = (account.plan_type || "").toLowerCase().trim();
+        if (plan !== planFilter) return false;
       }
       if (query) {
-        const email = (account.email || '').toLowerCase()
-        const name = (account.name || '').toLowerCase()
-        if (!email.includes(query) && !name.includes(query)) return false
+        const email = (account.email || "").toLowerCase();
+        const name = (account.name || "").toLowerCase();
+        if (!email.includes(query) && !name.includes(query)) return false;
       }
-      return true
-    })
-  }, [accounts, planFilter, searchQuery, statusFilter])
+      if (tagFilter && !(account.tags ?? []).includes(tagFilter)) return false;
+      if (
+        groupFilter !== null &&
+        !(account.group_ids ?? []).includes(groupFilter)
+      )
+        return false;
+      return true;
+    });
+  }, [accounts, groupFilter, planFilter, searchQuery, statusFilter, tagFilter]);
 
   const sortedAccounts = useMemo(() => {
-    if (!sortKey) return filteredAccounts
+    if (!sortKey) return filteredAccounts;
     return [...filteredAccounts].sort((a, b) => {
-      let diff = 0
-      if (sortKey === 'requests') {
-        diff = ((a.success_requests ?? 0) + (a.error_requests ?? 0)) - ((b.success_requests ?? 0) + (b.error_requests ?? 0))
-      } else if (sortKey === 'usage') {
-        diff = (a.usage_percent_7d ?? -1) - (b.usage_percent_7d ?? -1)
-      } else if (sortKey === 'importTime') {
-        diff = new Date(a.created_at || 0).getTime() - new Date(b.created_at || 0).getTime()
+      let diff = 0;
+      if (sortKey === "requests") {
+        diff =
+          (a.success_requests ?? 0) +
+          (a.error_requests ?? 0) -
+          ((b.success_requests ?? 0) + (b.error_requests ?? 0));
+      } else if (sortKey === "usage") {
+        diff = (a.usage_percent_7d ?? -1) - (b.usage_percent_7d ?? -1);
+      } else if (sortKey === "importTime") {
+        diff =
+          new Date(a.created_at || 0).getTime() -
+          new Date(b.created_at || 0).getTime();
       }
-      return sortDir === 'asc' ? diff : -diff
-    })
-  }, [filteredAccounts, sortDir, sortKey])
+      return sortDir === "asc" ? diff : -diff;
+    });
+  }, [filteredAccounts, sortDir, sortKey]);
 
-  const totalPages = Math.max(1, Math.ceil(sortedAccounts.length / pageSize))
-  const currentPage = Math.min(page, totalPages)
+  const totalPages = Math.max(1, Math.ceil(sortedAccounts.length / pageSize));
+  const currentPage = Math.min(page, totalPages);
   const pagedAccounts = useMemo(
-    () => sortedAccounts.slice((currentPage - 1) * pageSize, currentPage * pageSize),
+    () =>
+      sortedAccounts.slice(
+        (currentPage - 1) * pageSize,
+        currentPage * pageSize,
+      ),
     [currentPage, pageSize, sortedAccounts],
-  )
-  const pagedAccountIds = useMemo(() => pagedAccounts.map((account) => account.id), [pagedAccounts])
+  );
+  const pagedAccountIds = useMemo(
+    () => pagedAccounts.map((account) => account.id),
+    [pagedAccounts],
+  );
   const pageSelectedCount = useMemo(
-    () => pagedAccountIds.reduce((count, id) => count + (selected.has(id) ? 1 : 0), 0),
+    () =>
+      pagedAccountIds.reduce(
+        (count, id) => count + (selected.has(id) ? 1 : 0),
+        0,
+      ),
     [pagedAccountIds, selected],
-  )
-  const allPageSelected = pagedAccountIds.length > 0 && pageSelectedCount === pagedAccountIds.length
-  const somePageSelected = pageSelectedCount > 0 && !allPageSelected
+  );
+  const allPageSelected =
+    pagedAccountIds.length > 0 && pageSelectedCount === pagedAccountIds.length;
+  const somePageSelected = pageSelectedCount > 0 && !allPageSelected;
 
   useEffect(() => {
     if (page > totalPages) {
-      setPage(totalPages)
+      setPage(totalPages);
     }
-  }, [page, totalPages])
+  }, [page, totalPages]);
 
   useEffect(() => {
-    if (!accounts.some((account) => account.status === 'refreshing')) {
-      return
+    if (!accounts.some((account) => account.status === "refreshing")) {
+      return;
     }
 
     const timer = window.setTimeout(() => {
-      void reloadSilently()
-    }, 2000)
+      void reloadSilently();
+    }, 2000);
 
-    return () => window.clearTimeout(timer)
-  }, [accounts, reloadSilently])
+    return () => window.clearTimeout(timer);
+  }, [accounts, reloadSilently]);
 
   useEffect(() => {
     if (selectAllRef.current) {
-      selectAllRef.current.indeterminate = somePageSelected
+      selectAllRef.current.indeterminate = somePageSelected;
     }
-  }, [somePageSelected])
+  }, [somePageSelected]);
 
   const toggleSelect = useCallback((id: number) => {
     setSelected((prev) => {
-      const next = new Set(prev)
-      if (next.has(id)) next.delete(id)
-      else next.add(id)
-      return next
-    })
-  }, [])
+      const next = new Set(prev);
+      if (next.has(id)) next.delete(id);
+      else next.add(id);
+      return next;
+    });
+  }, []);
 
   const toggleSelectAll = useCallback(() => {
     if (allPageSelected) {
       setSelected((prev) => {
-        const next = new Set(prev)
-        for (const id of pagedAccountIds) next.delete(id)
-        return next
-      })
+        const next = new Set(prev);
+        for (const id of pagedAccountIds) next.delete(id);
+        return next;
+      });
     } else {
       setSelected((prev) => {
-        const next = new Set(prev)
-        for (const id of pagedAccountIds) next.add(id)
-        return next
-      })
+        const next = new Set(prev);
+        for (const id of pagedAccountIds) next.add(id);
+        return next;
+      });
     }
-  }, [allPageSelected, pagedAccountIds])
+  }, [allPageSelected, pagedAccountIds]);
 
   const handleAdd = async () => {
-    if (!addForm.refresh_token.trim()) return
-    setSubmitting(true)
+    if (!addForm.refresh_token.trim()) return;
+    setSubmitting(true);
     try {
-      await api.addAccount(addForm)
-      showToast(t('accounts.addSuccess'))
-      setShowAdd(false)
-      setAddForm({ refresh_token: '', proxy_url: '' })
-      void reload()
+      await api.addAccount(addForm);
+      showToast(t("accounts.addSuccess"));
+      setShowAdd(false);
+      setAddForm({ refresh_token: "", proxy_url: "" });
+      void reload();
     } catch (error) {
-      showToast(t('accounts.addFailed', { error: getErrorMessage(error) }), 'error')
+      showToast(
+        t("accounts.addFailed", { error: getErrorMessage(error) }),
+        "error",
+      );
     } finally {
-      setSubmitting(false)
+      setSubmitting(false);
     }
-  }
+  };
 
   const handleAddAT = async () => {
-    if (!atForm.access_token.trim()) return
-    setSubmitting(true)
+    if (!atForm.access_token.trim()) return;
+    setSubmitting(true);
     try {
-      await api.addATAccount(atForm)
-      showToast(t('accounts.addSuccess'))
-      setShowAdd(false)
-      setAtForm({ access_token: '', proxy_url: '' })
-      void reload()
+      await api.addATAccount(atForm);
+      showToast(t("accounts.addSuccess"));
+      setShowAdd(false);
+      setAtForm({ access_token: "", proxy_url: "" });
+      void reload();
     } catch (error) {
-      showToast(t('accounts.addFailed', { error: getErrorMessage(error) }), 'error')
+      showToast(
+        t("accounts.addFailed", { error: getErrorMessage(error) }),
+        "error",
+      );
     } finally {
-      setSubmitting(false)
+      setSubmitting(false);
     }
-  }
+  };
 
   const addOpenAIModelValues = useCallback((raw: string) => {
-    const nextModels = parseModelTokens(raw)
-    if (nextModels.length === 0) return
-    setOpenAIForm((form) => ({ ...form, models: mergeModelLists(form.models, nextModels) }))
-    setOpenAIModelDraft('')
-  }, [])
+    const nextModels = parseModelTokens(raw);
+    if (nextModels.length === 0) return;
+    setOpenAIForm((form) => ({
+      ...form,
+      models: mergeModelLists(form.models, nextModels),
+    }));
+    setOpenAIModelDraft("");
+  }, []);
 
   const removeOpenAIModel = useCallback((model: string) => {
-    setOpenAIForm((form) => ({ ...form, models: form.models.filter(item => item !== model) }))
-  }, [])
+    setOpenAIForm((form) => ({
+      ...form,
+      models: form.models.filter((item) => item !== model),
+    }));
+  }, []);
 
   const addEditOpenAIModelValues = useCallback((raw: string) => {
-    const nextModels = parseModelTokens(raw)
-    if (nextModels.length === 0) return
-    setEditOpenAIForm((form) => ({ ...form, models: mergeModelLists(form.models, nextModels) }))
-    setEditOpenAIModelDraft('')
-  }, [])
+    const nextModels = parseModelTokens(raw);
+    if (nextModels.length === 0) return;
+    setEditOpenAIForm((form) => ({
+      ...form,
+      models: mergeModelLists(form.models, nextModels),
+    }));
+    setEditOpenAIModelDraft("");
+  }, []);
 
   const removeEditOpenAIModel = useCallback((model: string) => {
-    setEditOpenAIForm((form) => ({ ...form, models: form.models.filter(item => item !== model) }))
-  }, [])
+    setEditOpenAIForm((form) => ({
+      ...form,
+      models: form.models.filter((item) => item !== model),
+    }));
+  }, []);
 
   const handleFetchOpenAIModels = async () => {
-    if (!openAIForm.api_key.trim()) return
-    setOpenAIModelsLoading(true)
+    if (!openAIForm.api_key.trim()) return;
+    setOpenAIModelsLoading(true);
     try {
       const result = await api.fetchOpenAIResponsesModels({
         base_url: openAIForm.base_url,
         api_key: openAIForm.api_key,
         proxy_url: openAIForm.proxy_url,
-      })
-      const models = result.models ?? []
-      setOpenAIForm((form) => ({ ...form, base_url: result.base_url || form.base_url, models }))
-      showToast(t('accounts.openaiModelsFetchSuccess', { count: models.length }))
+      });
+      const models = result.models ?? [];
+      setOpenAIForm((form) => ({
+        ...form,
+        base_url: result.base_url || form.base_url,
+        models,
+      }));
+      showToast(
+        t("accounts.openaiModelsFetchSuccess", { count: models.length }),
+      );
     } catch (error) {
-      showToast(t('accounts.openaiModelsFetchFailed', { error: getErrorMessage(error) }), 'error')
+      showToast(
+        t("accounts.openaiModelsFetchFailed", {
+          error: getErrorMessage(error),
+        }),
+        "error",
+      );
     } finally {
-      setOpenAIModelsLoading(false)
+      setOpenAIModelsLoading(false);
     }
-  }
+  };
 
   const handleAddOpenAIResponses = async () => {
-    const models = openAIForm.models
-    if (!openAIForm.api_key.trim() || models.length === 0) return
-    setSubmitting(true)
+    const models = openAIForm.models;
+    if (!openAIForm.api_key.trim() || models.length === 0) return;
+    setSubmitting(true);
     try {
-      await api.addOpenAIResponsesAccount({ ...openAIForm, models })
-      showToast(t('accounts.addSuccess'))
-      setShowAdd(false)
-      setOpenAIForm({ base_url: 'https://api.openai.com', api_key: '', models: [], proxy_url: '' })
-      setOpenAIModelDraft('')
-      void reload()
+      await api.addOpenAIResponsesAccount({ ...openAIForm, models });
+      showToast(t("accounts.addSuccess"));
+      setShowAdd(false);
+      setOpenAIForm({
+        base_url: "https://api.openai.com",
+        api_key: "",
+        models: [],
+        proxy_url: "",
+      });
+      setOpenAIModelDraft("");
+      void reload();
     } catch (error) {
-      showToast(t('accounts.addFailed', { error: getErrorMessage(error) }), 'error')
+      showToast(
+        t("accounts.addFailed", { error: getErrorMessage(error) }),
+        "error",
+      );
     } finally {
-      setSubmitting(false)
+      setSubmitting(false);
     }
-  }
+  };
 
   const handleFetchEditOpenAIModels = async () => {
-    if (!editingAccount?.openai_responses_api) return
-    setEditOpenAIModelsLoading(true)
+    if (!editingAccount?.openai_responses_api) return;
+    setEditOpenAIModelsLoading(true);
     try {
       const result = await api.fetchOpenAIResponsesModels({
         account_id: editingAccount.id,
         base_url: editOpenAIForm.base_url,
-        api_key: editOpenAIForm.api_key ?? '',
+        api_key: editOpenAIForm.api_key ?? "",
         proxy_url: editOpenAIForm.proxy_url,
-      })
-      const models = result.models ?? []
-      setEditOpenAIForm((form) => ({ ...form, base_url: result.base_url || form.base_url, models }))
-      showToast(t('accounts.openaiModelsFetchSuccess', { count: models.length }))
+      });
+      const models = result.models ?? [];
+      setEditOpenAIForm((form) => ({
+        ...form,
+        base_url: result.base_url || form.base_url,
+        models,
+      }));
+      showToast(
+        t("accounts.openaiModelsFetchSuccess", { count: models.length }),
+      );
     } catch (error) {
-      showToast(t('accounts.openaiModelsFetchFailed', { error: getErrorMessage(error) }), 'error')
+      showToast(
+        t("accounts.openaiModelsFetchFailed", {
+          error: getErrorMessage(error),
+        }),
+        "error",
+      );
     } finally {
-      setEditOpenAIModelsLoading(false)
+      setEditOpenAIModelsLoading(false);
     }
-  }
+  };
 
   const handleSaveOpenAIAccountSettings = async () => {
-    if (!editingAccount?.openai_responses_api) return
+    if (!editingAccount?.openai_responses_api) return;
     if (!editOpenAIForm.base_url.trim() || editOpenAIForm.models.length === 0) {
-      showToast(t('accounts.openaiAccountInvalid'), 'error')
-      return
+      showToast(t("accounts.openaiAccountInvalid"), "error");
+      return;
     }
-    setEditSubmitting(true)
+    setEditSubmitting(true);
     try {
       await api.updateOpenAIResponsesAccount(editingAccount.id, {
         ...editOpenAIForm,
         api_key: editOpenAIForm.api_key?.trim() || undefined,
-      })
-      showToast(t('accounts.openaiAccountSaveSuccess'))
-      await reload()
-      closeSchedulerEditor(true)
+      });
+      showToast(t("accounts.openaiAccountSaveSuccess"));
+      await reload();
+      closeSchedulerEditor(true);
     } catch (error) {
-      showToast(t('accounts.openaiAccountSaveFailed', { error: getErrorMessage(error) }), 'error')
+      showToast(
+        t("accounts.openaiAccountSaveFailed", {
+          error: getErrorMessage(error),
+        }),
+        "error",
+      );
     } finally {
-      setEditSubmitting(false)
+      setEditSubmitting(false);
     }
-  }
+  };
 
   const handleOAuthGenerate = async () => {
-    setOauthGenerating(true)
+    setOauthGenerating(true);
     try {
-      const result = await api.generateOAuthURL({ proxy_url: oauthProxyUrl })
-      setOauthSession(result)
-      setOauthStep('exchange')
+      const result = await api.generateOAuthURL({ proxy_url: oauthProxyUrl });
+      setOauthSession(result);
+      setOauthStep("exchange");
     } catch (error) {
-      showToast(t('accounts.oauthFailed', { error: getErrorMessage(error) }), 'error')
+      showToast(
+        t("accounts.oauthFailed", { error: getErrorMessage(error) }),
+        "error",
+      );
     } finally {
-      setOauthGenerating(false)
+      setOauthGenerating(false);
     }
-  }
+  };
 
   const handleOAuthComplete = async () => {
-    if (!oauthSession) return
-    let code = ''
-    let state = ''
-    const raw = oauthCallbackUrl.trim()
+    if (!oauthSession) return;
+    let code = "";
+    let state = "";
+    const raw = oauthCallbackUrl.trim();
     try {
-      const url = new URL(raw)
-      code = url.searchParams.get('code') ?? ''
-      state = url.searchParams.get('state') ?? ''
+      const url = new URL(raw);
+      code = url.searchParams.get("code") ?? "";
+      state = url.searchParams.get("state") ?? "";
     } catch {
-      const qs = raw.includes('?') ? raw.split('?')[1] : raw
-      const params = new URLSearchParams(qs)
-      code = params.get('code') ?? ''
-      state = params.get('state') ?? ''
+      const qs = raw.includes("?") ? raw.split("?")[1] : raw;
+      const params = new URLSearchParams(qs);
+      code = params.get("code") ?? "";
+      state = params.get("state") ?? "";
     }
     if (!code || !state) {
-      showToast(t('accounts.oauthParseError'), 'error')
-      return
+      showToast(t("accounts.oauthParseError"), "error");
+      return;
     }
-    setOauthCompleting(true)
+    setOauthCompleting(true);
     try {
       const result = await api.exchangeOAuthCode({
         session_id: oauthSession.session_id,
@@ -589,685 +929,1037 @@ export default function Accounts() {
         state,
         name: oauthName.trim() || undefined,
         proxy_url: oauthProxyUrl.trim() || undefined,
-      })
-      showToast(result.email ? t('accounts.oauthSuccess', { email: result.email }) : t('accounts.oauthSuccessNoEmail'))
-      setShowAdd(false)
-      setAddMethod('rt')
-      setOauthStep('generate')
-      setOauthSession(null)
-      setOauthCallbackUrl('')
-      setOauthName('')
-      void reload()
+      });
+      showToast(
+        result.email
+          ? t("accounts.oauthSuccess", { email: result.email })
+          : t("accounts.oauthSuccessNoEmail"),
+      );
+      setShowAdd(false);
+      setAddMethod("rt");
+      setOauthStep("generate");
+      setOauthSession(null);
+      setOauthCallbackUrl("");
+      setOauthName("");
+      void reload();
     } catch (error) {
-      showToast(t('accounts.oauthFailed', { error: getErrorMessage(error) }), 'error')
+      showToast(
+        t("accounts.oauthFailed", { error: getErrorMessage(error) }),
+        "error",
+      );
     } finally {
-      setOauthCompleting(false)
+      setOauthCompleting(false);
     }
-  }
+  };
 
   const readImportSSE = async (res: Response) => {
-    setImportProgress({ show: true, current: 0, total: 0, success: 0, duplicate: 0, failed: 0, done: false })
-    const reader = res.body?.getReader()
-    if (!reader) return
-    const decoder = new TextDecoder()
-    let buffer = ''
+    setImportProgress({
+      show: true,
+      current: 0,
+      total: 0,
+      success: 0,
+      duplicate: 0,
+      failed: 0,
+      done: false,
+    });
+    const reader = res.body?.getReader();
+    if (!reader) return;
+    const decoder = new TextDecoder();
+    let buffer = "";
     for (;;) {
-      const { done, value } = await reader.read()
-      if (done) break
-      buffer += decoder.decode(value, { stream: true })
-      const lines = buffer.split('\n')
-      buffer = lines.pop() ?? ''
+      const { done, value } = await reader.read();
+      if (done) break;
+      buffer += decoder.decode(value, { stream: true });
+      const lines = buffer.split("\n");
+      buffer = lines.pop() ?? "";
       for (const line of lines) {
-        if (!line.startsWith('data: ')) continue
+        if (!line.startsWith("data: ")) continue;
         try {
-          const event = JSON.parse(line.slice(6)) as { type: string; current: number; total: number; success: number; duplicate: number; failed: number }
-          setImportProgress(p => ({ ...p, current: event.current, total: event.total, success: event.success, duplicate: event.duplicate, failed: event.failed, done: event.type === 'complete' }))
-          if (event.type === 'complete') void reload()
-        } catch { /* 忽略解析异常 */ }
+          const event = JSON.parse(line.slice(6)) as {
+            type: string;
+            current: number;
+            total: number;
+            success: number;
+            duplicate: number;
+            failed: number;
+          };
+          setImportProgress((p) => ({
+            ...p,
+            current: event.current,
+            total: event.total,
+            success: event.success,
+            duplicate: event.duplicate,
+            failed: event.failed,
+            done: event.type === "complete",
+          }));
+          if (event.type === "complete") void reload();
+        } catch {
+          /* 忽略解析异常 */
+        }
       }
     }
-  }
+  };
 
-  const importFiles = async (files: File[], format: 'txt' | 'json' | 'at_txt') => {
-    setImporting(true)
+  const importFiles = async (
+    files: File[],
+    format: "txt" | "json" | "at_txt",
+  ) => {
+    setImporting(true);
     try {
-      const formData = new FormData()
-      if (format !== 'txt') formData.append('format', format)
-      for (const f of files) formData.append('file', f)
-      const res = await fetch('/api/admin/accounts/import', { method: 'POST', body: formData, headers: getAdminKey() ? { 'X-Admin-Key': getAdminKey() } : {} })
-      if (res.headers.get('content-type')?.includes('text/event-stream')) {
-        await readImportSSE(res)
+      const formData = new FormData();
+      if (format !== "txt") formData.append("format", format);
+      for (const f of files) formData.append("file", f);
+      const res = await fetch("/api/admin/accounts/import", {
+        method: "POST",
+        body: formData,
+        headers: getAdminKey() ? { "X-Admin-Key": getAdminKey() } : {},
+      });
+      if (res.headers.get("content-type")?.includes("text/event-stream")) {
+        await readImportSSE(res);
       } else {
-        const data = await res.json()
+        const data = await res.json();
         if (!res.ok) {
-          showToast(data.error ? t('accounts.importFailedWithReason', { error: data.error }) : t('accounts.importFailed'), 'error')
+          showToast(
+            data.error
+              ? t("accounts.importFailedWithReason", { error: data.error })
+              : t("accounts.importFailed"),
+            "error",
+          );
         } else {
-          showToast(t('accounts.importCompleted'))
-          void reload()
+          showToast(t("accounts.importCompleted"));
+          void reload();
         }
       }
     } catch (error) {
-      showToast(t('accounts.importFailedWithReason', { error: getErrorMessage(error) }), 'error')
+      showToast(
+        t("accounts.importFailedWithReason", { error: getErrorMessage(error) }),
+        "error",
+      );
     } finally {
-      setImporting(false)
+      setImporting(false);
     }
-  }
+  };
 
   const handleDragEnter = (e: DragEvent) => {
-    e.preventDefault()
-    e.stopPropagation()
-    dragCounter.current++
-    if (dragCounter.current === 1) setDragging(true)
-  }
+    e.preventDefault();
+    e.stopPropagation();
+    dragCounter.current++;
+    if (dragCounter.current === 1) setDragging(true);
+  };
 
   const handleDragOver = (e: DragEvent) => {
-    e.preventDefault()
-    e.stopPropagation()
-  }
+    e.preventDefault();
+    e.stopPropagation();
+  };
 
   const handleDragLeave = (e: DragEvent) => {
-    e.preventDefault()
-    e.stopPropagation()
-    dragCounter.current--
-    if (dragCounter.current === 0) setDragging(false)
-  }
-
-  const readAllEntriesFromDirectory = (dirEntry: FileSystemDirectoryEntry): Promise<File[]> => {
+    e.preventDefault();
+    e.stopPropagation();
+    dragCounter.current--;
+    if (dragCounter.current === 0) setDragging(false);
+  };
+
+  const readAllEntriesFromDirectory = (
+    dirEntry: FileSystemDirectoryEntry,
+  ): Promise<File[]> => {
     return new Promise((resolve) => {
-      const files: File[] = []
+      const files: File[] = [];
       const readEntries = (reader: FileSystemDirectoryReader) => {
         reader.readEntries(async (entries) => {
-          if (entries.length === 0) { resolve(files); return }
+          if (entries.length === 0) {
+            resolve(files);
+            return;
+          }
           for (const entry of entries) {
             if (entry.isFile) {
-              const file = await new Promise<File>((res) => (entry as FileSystemFileEntry).file(res))
-              files.push(file)
+              const file = await new Promise<File>((res) =>
+                (entry as FileSystemFileEntry).file(res),
+              );
+              files.push(file);
             } else if (entry.isDirectory) {
-              const subFiles = await readAllEntriesFromDirectory(entry as FileSystemDirectoryEntry)
-              files.push(...subFiles)
+              const subFiles = await readAllEntriesFromDirectory(
+                entry as FileSystemDirectoryEntry,
+              );
+              files.push(...subFiles);
             }
           }
-          readEntries(reader)
-        })
-      }
-      readEntries(dirEntry.createReader())
-    })
-  }
+          readEntries(reader);
+        });
+      };
+      readEntries(dirEntry.createReader());
+    });
+  };
 
   const handleDrop = async (e: DragEvent) => {
-    e.preventDefault()
-    e.stopPropagation()
-    dragCounter.current = 0
-    setDragging(false)
-    if (importing) return
+    e.preventDefault();
+    e.stopPropagation();
+    dragCounter.current = 0;
+    setDragging(false);
+    if (importing) return;
 
     // 检测是否拖入了文件夹
-    const items = e.dataTransfer.items
-    const hasDirectories = items && Array.from(items).some(
-      item => item.webkitGetAsEntry?.()?.isDirectory
-    )
+    const items = e.dataTransfer.items;
+    const hasDirectories =
+      items &&
+      Array.from(items).some((item) => item.webkitGetAsEntry?.()?.isDirectory);
 
     if (hasDirectories) {
-      const allFiles: File[] = []
+      const allFiles: File[] = [];
       for (const item of Array.from(items)) {
-        const entry = item.webkitGetAsEntry?.()
-        if (!entry) continue
+        const entry = item.webkitGetAsEntry?.();
+        if (!entry) continue;
         if (entry.isDirectory) {
-          const dirFiles = await readAllEntriesFromDirectory(entry as FileSystemDirectoryEntry)
-          allFiles.push(...dirFiles)
+          const dirFiles = await readAllEntriesFromDirectory(
+            entry as FileSystemDirectoryEntry,
+          );
+          allFiles.push(...dirFiles);
         } else if (entry.isFile) {
-          const file = await new Promise<File>((res) => (entry as FileSystemFileEntry).file(res))
-          allFiles.push(file)
+          const file = await new Promise<File>((res) =>
+            (entry as FileSystemFileEntry).file(res),
+          );
+          allFiles.push(file);
         }
       }
 
-      const validFiles = allFiles.filter(f => {
-        const ext = f.name.split('.').pop()?.toLowerCase()
-        return (ext === 'txt' || ext === 'json') && f.size > 0
-      })
+      const validFiles = allFiles.filter((f) => {
+        const ext = f.name.split(".").pop()?.toLowerCase();
+        return (ext === "txt" || ext === "json") && f.size > 0;
+      });
 
       if (validFiles.length === 0) {
-        showToast(t('accounts.folderNoValidFiles'), 'error')
-        return
+        showToast(t("accounts.folderNoValidFiles"), "error");
+        return;
       }
 
-      const txtFiles = validFiles.filter(f => f.name.split('.').pop()?.toLowerCase() === 'txt')
-      const jsonFiles = validFiles.filter(f => f.name.split('.').pop()?.toLowerCase() === 'json')
+      const txtFiles = validFiles.filter(
+        (f) => f.name.split(".").pop()?.toLowerCase() === "txt",
+      );
+      const jsonFiles = validFiles.filter(
+        (f) => f.name.split(".").pop()?.toLowerCase() === "json",
+      );
 
       if (jsonFiles.length > 0) {
-        await importFiles(jsonFiles, 'json')
+        await importFiles(jsonFiles, "json");
       }
       if (txtFiles.length > 0) {
-        await importFiles(txtFiles, 'txt')
+        await importFiles(txtFiles, "txt");
       }
-      return
+      return;
     }
 
     // 原有的文件拖放逻辑
-    const files = Array.from(e.dataTransfer.files).filter(f => f.size > 0)
-    if (files.length === 0) return
+    const files = Array.from(e.dataTransfer.files).filter((f) => f.size > 0);
+    if (files.length === 0) return;
 
-    const txtFiles: File[] = []
-    const jsonFiles: File[] = []
+    const txtFiles: File[] = [];
+    const jsonFiles: File[] = [];
     for (const f of files) {
-      const ext = f.name.split('.').pop()?.toLowerCase()
-      if (ext === 'txt') txtFiles.push(f)
-      else if (ext === 'json') jsonFiles.push(f)
+      const ext = f.name.split(".").pop()?.toLowerCase();
+      if (ext === "txt") txtFiles.push(f);
+      else if (ext === "json") jsonFiles.push(f);
       else {
-        showToast(t('accounts.unsupportedFileType', { name: f.name }), 'error')
-        return
+        showToast(t("accounts.unsupportedFileType", { name: f.name }), "error");
+        return;
       }
     }
 
     if (jsonFiles.length > 0) {
-      await importFiles(jsonFiles, 'json')
+      await importFiles(jsonFiles, "json");
     }
     if (txtFiles.length > 0) {
-      await importFiles(txtFiles, 'txt')
+      await importFiles(txtFiles, "txt");
     }
-  }
+  };
 
   const handleFileImport = async (event: ChangeEvent<HTMLInputElement>) => {
-    const files = Array.from(event.target.files ?? [])
-    if (files.length === 0) return
-    if (files.some((file) => !file.name.toLowerCase().endsWith('.txt'))) {
-      showToast(t('accounts.selectTxtFile'), 'error')
-      return
+    const files = Array.from(event.target.files ?? []);
+    if (files.length === 0) return;
+    if (files.some((file) => !file.name.toLowerCase().endsWith(".txt"))) {
+      showToast(t("accounts.selectTxtFile"), "error");
+      return;
     }
-    setShowImportPicker(false)
-    await importFiles(files, 'txt')
-    if (fileInputRef.current) fileInputRef.current.value = ''
-  }
+    setShowImportPicker(false);
+    await importFiles(files, "txt");
+    if (fileInputRef.current) fileInputRef.current.value = "";
+  };
 
   const handleJsonImport = async (event: ChangeEvent<HTMLInputElement>) => {
-    const files = event.target.files
-    if (!files || files.length === 0) return
-    setShowImportPicker(false)
-    await importFiles(Array.from(files), 'json')
-    if (jsonInputRef.current) jsonInputRef.current.value = ''
-  }
+    const files = event.target.files;
+    if (!files || files.length === 0) return;
+    setShowImportPicker(false);
+    await importFiles(Array.from(files), "json");
+    if (jsonInputRef.current) jsonInputRef.current.value = "";
+  };
 
   const handleAtFileImport = async (event: ChangeEvent<HTMLInputElement>) => {
-    const files = Array.from(event.target.files ?? [])
-    if (files.length === 0) return
-    if (files.some((file) => !file.name.toLowerCase().endsWith('.txt'))) {
-      showToast(t('accounts.selectTxtFile'), 'error')
-      return
+    const files = Array.from(event.target.files ?? []);
+    if (files.length === 0) return;
+    if (files.some((file) => !file.name.toLowerCase().endsWith(".txt"))) {
+      showToast(t("accounts.selectTxtFile"), "error");
+      return;
     }
-    setShowImportPicker(false)
-    await importFiles(files, 'at_txt')
-    if (atFileInputRef.current) atFileInputRef.current.value = ''
-  }
+    setShowImportPicker(false);
+    await importFiles(files, "at_txt");
+    if (atFileInputRef.current) atFileInputRef.current.value = "";
+  };
 
   const handleFolderImport = async (event: ChangeEvent<HTMLInputElement>) => {
-    const files = event.target.files
-    if (!files || files.length === 0) return
-    setShowImportPicker(false)
+    const files = event.target.files;
+    if (!files || files.length === 0) return;
+    setShowImportPicker(false);
 
-    const validFiles = Array.from(files).filter(f => {
-      const ext = f.name.split('.').pop()?.toLowerCase()
-      return (ext === 'txt' || ext === 'json') && f.size > 0
-    })
+    const validFiles = Array.from(files).filter((f) => {
+      const ext = f.name.split(".").pop()?.toLowerCase();
+      return (ext === "txt" || ext === "json") && f.size > 0;
+    });
 
     if (validFiles.length === 0) {
-      showToast(t('accounts.folderNoValidFiles'), 'error')
-      if (folderInputRef.current) folderInputRef.current.value = ''
-      return
+      showToast(t("accounts.folderNoValidFiles"), "error");
+      if (folderInputRef.current) folderInputRef.current.value = "";
+      return;
     }
 
-    const txtFiles = validFiles.filter(f => f.name.split('.').pop()?.toLowerCase() === 'txt')
-    const jsonFiles = validFiles.filter(f => f.name.split('.').pop()?.toLowerCase() === 'json')
+    const txtFiles = validFiles.filter(
+      (f) => f.name.split(".").pop()?.toLowerCase() === "txt",
+    );
+    const jsonFiles = validFiles.filter(
+      (f) => f.name.split(".").pop()?.toLowerCase() === "json",
+    );
 
     if (jsonFiles.length > 0) {
-      await importFiles(jsonFiles, 'json')
+      await importFiles(jsonFiles, "json");
     }
     if (txtFiles.length > 0) {
-      await importFiles(txtFiles, 'txt')
+      await importFiles(txtFiles, "txt");
     }
 
-    if (folderInputRef.current) folderInputRef.current.value = ''
-  }
+    if (folderInputRef.current) folderInputRef.current.value = "";
+  };
 
-  const handleExport = async (format: 'json' | 'txt', scope: 'healthy' | 'selected') => {
-    setExporting(true)
-    setShowExportPicker(false)
+  const handleExport = async (
+    format: "json" | "txt",
+    scope: "healthy" | "selected",
+  ) => {
+    setExporting(true);
+    setShowExportPicker(false);
     try {
-      const params: { filter: 'healthy' | 'all'; ids?: number[] } = {
-        filter: scope === 'healthy' ? 'healthy' : 'all',
+      const params: { filter: "healthy" | "all"; ids?: number[] } = {
+        filter: scope === "healthy" ? "healthy" : "all",
+      };
+      if (scope === "selected") {
+        params.ids = Array.from(selected);
+        params.filter = "all";
       }
-      if (scope === 'selected') {
-        params.ids = Array.from(selected)
-        params.filter = 'all'
-      }
-      const data = await api.exportAccounts(params)
+      const data = await api.exportAccounts(params);
       if (data.length === 0) {
-        showToast(t('accounts.exportNoAccounts'), 'error')
-        return
+        showToast(t("accounts.exportNoAccounts"), "error");
+        return;
       }
-      const ts = new Date().toISOString().replace(/[:.]/g, '-').slice(0, 19)
-      if (format === 'json') {
-        const blob = new Blob([JSON.stringify(data, null, 2)], { type: 'application/json' })
-        downloadBlob(blob, `cpa-${ts}-${data.length}.json`)
+      const ts = new Date().toISOString().replace(/[:.]/g, "-").slice(0, 19);
+      if (format === "json") {
+        const blob = new Blob([JSON.stringify(data, null, 2)], {
+          type: "application/json",
+        });
+        downloadBlob(blob, `cpa-${ts}-${data.length}.json`);
       } else {
-        const text = data.map(e => e.refresh_token).join('\n')
-        const blob = new Blob([text], { type: 'text/plain' })
-        downloadBlob(blob, `rt-${ts}-${data.length}.txt`)
+        const text = data.map((e) => e.refresh_token).join("\n");
+        const blob = new Blob([text], { type: "text/plain" });
+        downloadBlob(blob, `rt-${ts}-${data.length}.txt`);
       }
-      showToast(t('accounts.exportSuccess', { count: data.length }))
+      showToast(t("accounts.exportSuccess", { count: data.length }));
     } catch (error) {
-      showToast(`${t('accounts.exportFailed')}: ${getErrorMessage(error)}`, 'error')
+      showToast(
+        `${t("accounts.exportFailed")}: ${getErrorMessage(error)}`,
+        "error",
+      );
     } finally {
-      setExporting(false)
+      setExporting(false);
     }
-  }
+  };
 
   const handleGenerateAuthJSON = async (account: AccountRow) => {
-    setAuthJsonExportingIds((prev) => new Set(prev).add(account.id))
+    setAuthJsonExportingIds((prev) => new Set(prev).add(account.id));
     try {
-      const blob = await api.downloadAccountAuthJSON(account.id)
-      const json = formatJSONText(await blob.text())
-      setAuthJsonModal({ account, json })
-      showToast(t('accounts.authJsonGenerated'))
+      const blob = await api.downloadAccountAuthJSON(account.id);
+      const json = formatJSONText(await blob.text());
+      setAuthJsonModal({ account, json });
+      showToast(t("accounts.authJsonGenerated"));
     } catch (error) {
-      showToast(t('accounts.authJsonFailed', { error: getErrorMessage(error) }), 'error')
+      showToast(
+        t("accounts.authJsonFailed", { error: getErrorMessage(error) }),
+        "error",
+      );
     } finally {
       setAuthJsonExportingIds((prev) => {
-        const next = new Set(prev)
-        next.delete(account.id)
-        return next
-      })
+        const next = new Set(prev);
+        next.delete(account.id);
+        return next;
+      });
     }
-  }
+  };
 
   const handleCopyAuthJSON = async () => {
-    if (!authJsonModal) return
+    if (!authJsonModal) return;
     try {
-      await copyTextToClipboard(authJsonModal.json)
-      showToast(t('accounts.authJsonCopied'))
+      await copyTextToClipboard(authJsonModal.json);
+      showToast(t("accounts.authJsonCopied"));
     } catch (error) {
-      showToast(t('accounts.authJsonCopyFailed', { error: getErrorMessage(error) }), 'error')
+      showToast(
+        t("accounts.authJsonCopyFailed", { error: getErrorMessage(error) }),
+        "error",
+      );
     }
-  }
+  };
 
   const handleExportAuthJSON = () => {
-    if (!authJsonModal) return
-    const blob = new Blob([`${authJsonModal.json}\n`], { type: 'application/json' })
-    downloadBlob(blob, 'auth.json')
-    showToast(t('accounts.authJsonExported'))
-  }
+    if (!authJsonModal) return;
+    const blob = new Blob([`${authJsonModal.json}\n`], {
+      type: "application/json",
+    });
+    downloadBlob(blob, "auth.json");
+    showToast(t("accounts.authJsonExported"));
+  };
 
   const handleMigrate = async () => {
-    setMigrating(true)
-    setShowMigrate(false)
+    setMigrating(true);
+    setShowMigrate(false);
     try {
-      const res = await fetch('/api/admin/accounts/migrate', {
-        method: 'POST',
-        headers: { 'Content-Type': 'application/json', ...(getAdminKey() ? { 'X-Admin-Key': getAdminKey() } : {}) },
-        body: JSON.stringify({ url: migrateUrl.trim(), admin_key: migrateKey.trim() }),
-      })
-      if (res.headers.get('content-type')?.includes('text/event-stream')) {
-        await readImportSSE(res)
+      const res = await fetch("/api/admin/accounts/migrate", {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          ...(getAdminKey() ? { "X-Admin-Key": getAdminKey() } : {}),
+        },
+        body: JSON.stringify({
+          url: migrateUrl.trim(),
+          admin_key: migrateKey.trim(),
+        }),
+      });
+      if (res.headers.get("content-type")?.includes("text/event-stream")) {
+        await readImportSSE(res);
       } else {
-        const data = await res.json()
+        const data = await res.json();
         if (!res.ok) {
-          showToast(data.error ? `${t('accounts.migrateFailed')}: ${data.error}` : t('accounts.migrateFailed'), 'error')
+          showToast(
+            data.error
+              ? `${t("accounts.migrateFailed")}: ${data.error}`
+              : t("accounts.migrateFailed"),
+            "error",
+          );
         } else {
-          showToast(t('accounts.migrateSuccess', { imported: data.imported ?? 0, duplicate: data.duplicate ?? 0, failed: data.failed ?? 0 }))
-          void reload()
+          showToast(
+            t("accounts.migrateSuccess", {
+              imported: data.imported ?? 0,
+              duplicate: data.duplicate ?? 0,
+              failed: data.failed ?? 0,
+            }),
+          );
+          void reload();
         }
       }
     } catch (error) {
-      showToast(`${t('accounts.migrateFailed')}: ${getErrorMessage(error)}`, 'error')
+      showToast(
+        `${t("accounts.migrateFailed")}: ${getErrorMessage(error)}`,
+        "error",
+      );
     } finally {
-      setMigrating(false)
-      setMigrateUrl('')
-      setMigrateKey('')
+      setMigrating(false);
+      setMigrateUrl("");
+      setMigrateKey("");
     }
-  }
+  };
 
   const handleDelete = async (account: AccountRow) => {
     const confirmed = await confirm({
-      title: t('accounts.deleteTitle'),
-      description: t('accounts.deleteDesc', { account: account.email || `ID ${account.id}` }),
-      confirmText: t('accounts.deleteConfirm'),
-      tone: 'destructive',
-      confirmVariant: 'destructive',
-    })
-    if (!confirmed) return
+      title: t("accounts.deleteTitle"),
+      description: t("accounts.deleteDesc", {
+        account: account.email || `ID ${account.id}`,
+      }),
+      confirmText: t("accounts.deleteConfirm"),
+      tone: "destructive",
+      confirmVariant: "destructive",
+    });
+    if (!confirmed) return;
     try {
-      await api.deleteAccount(account.id)
-      showToast(t('accounts.deleted'))
-      void reload()
+      await api.deleteAccount(account.id);
+      showToast(t("accounts.deleted"));
+      void reload();
     } catch (error) {
-      showToast(t('accounts.deleteFailed', { error: getErrorMessage(error) }), 'error')
+      showToast(
+        t("accounts.deleteFailed", { error: getErrorMessage(error) }),
+        "error",
+      );
     }
-  }
+  };
 
   const handleRefresh = async (account: AccountRow) => {
-    setRefreshingIds((prev) => new Set(prev).add(account.id))
+    setRefreshingIds((prev) => new Set(prev).add(account.id));
     try {
-      const result = await api.refreshAccount(account.id)
-      showToast(result.message || t('accounts.refreshRequested'))
-      void reloadSilently()
+      const result = await api.refreshAccount(account.id);
+      showToast(result.message || t("accounts.refreshRequested"));
+      void reloadSilently();
     } catch (error) {
-      showToast(t('accounts.refreshFailed', { error: getErrorMessage(error) }), 'error')
+      showToast(
+        t("accounts.refreshFailed", { error: getErrorMessage(error) }),
+        "error",
+      );
     } finally {
       setRefreshingIds((prev) => {
-        const next = new Set(prev)
-        next.delete(account.id)
-        return next
-      })
+        const next = new Set(prev);
+        next.delete(account.id);
+        return next;
+      });
     }
-  }
+  };
 
   const handleToggleLock = async (account: AccountRow) => {
-    const newLocked = !account.locked
+    const newLocked = !account.locked;
     try {
-      await api.toggleAccountLock(account.id, newLocked)
-      showToast(newLocked ? t('accounts.lockSuccess') : t('accounts.unlockSuccess'))
-      void reload()
+      await api.toggleAccountLock(account.id, newLocked);
+      showToast(
+        newLocked ? t("accounts.lockSuccess") : t("accounts.unlockSuccess"),
+      );
+      void reload();
     } catch (error) {
-      showToast(t('accounts.lockFailed', { error: getErrorMessage(error) }), 'error')
+      showToast(
+        t("accounts.lockFailed", { error: getErrorMessage(error) }),
+        "error",
+      );
     }
-  }
+  };
 
   const handleLockSubscriptionAccounts = async () => {
-    const candidates = subscriptionAccountsToLock
+    const candidates = subscriptionAccountsToLock;
     if (candidates.length === 0) {
-      showToast(t('accounts.noSubscriptionAccountsToLock'))
-      return
+      showToast(t("accounts.noSubscriptionAccountsToLock"));
+      return;
     }
 
-    setBatchLoading(true)
-    setLockingSubscriptionAccounts(true)
+    setBatchLoading(true);
+    setLockingSubscriptionAccounts(true);
     try {
       const { success, fail } = await runAccountBatch(
         candidates.map((account) => account.id),
         (id) => api.toggleAccountLock(id, true),
-      )
-      showToast(t('accounts.lockSubscriptionAccountsDone', { success, fail }))
-      void reload()
+      );
+      showToast(t("accounts.lockSubscriptionAccountsDone", { success, fail }));
+      void reload();
     } finally {
-      setBatchLoading(false)
-      setLockingSubscriptionAccounts(false)
+      setBatchLoading(false);
+      setLockingSubscriptionAccounts(false);
     }
-  }
+  };
 
   const handleToggleEnabled = async (account: AccountRow) => {
-    const nextEnabled = account.enabled === false
+    const nextEnabled = account.enabled === false;
     try {
-      await api.toggleAccountEnabled(account.id, nextEnabled)
-      showToast(nextEnabled ? t('accounts.enableSuccess') : t('accounts.disableSuccess'))
-      void reload()
+      await api.toggleAccountEnabled(account.id, nextEnabled);
+      showToast(
+        nextEnabled
+          ? t("accounts.enableSuccess")
+          : t("accounts.disableSuccess"),
+      );
+      void reload();
     } catch (error) {
-      showToast(t('accounts.enableFailed', { error: getErrorMessage(error) }), 'error')
+      showToast(
+        t("accounts.enableFailed", { error: getErrorMessage(error) }),
+        "error",
+      );
     }
-  }
+  };
 
   const handleBatchDelete = async () => {
-    const ids = Array.from(selected)
-    if (ids.length === 0) return
+    const ids = Array.from(selected);
+    if (ids.length === 0) return;
     const confirmed = await confirm({
-      title: t('accounts.batchDeleteTitle'),
-      description: t('accounts.batchDeleteDesc', { count: ids.length }),
-      confirmText: t('accounts.deleteConfirm'),
-      tone: 'destructive',
-      confirmVariant: 'destructive',
-    })
-    if (!confirmed) return
-    setBatchLoading(true)
+      title: t("accounts.batchDeleteTitle"),
+      description: t("accounts.batchDeleteDesc", { count: ids.length }),
+      confirmText: t("accounts.deleteConfirm"),
+      tone: "destructive",
+      confirmVariant: "destructive",
+    });
+    if (!confirmed) return;
+    setBatchLoading(true);
     try {
-      const { success, fail } = await runAccountBatch(ids, api.deleteAccount)
-      showToast(t('accounts.batchDeleteDone', { success, fail }))
-      setSelected(new Set())
-      void reload()
+      const { success, fail } = await runAccountBatch(ids, api.deleteAccount);
+      showToast(t("accounts.batchDeleteDone", { success, fail }));
+      setSelected(new Set());
+      void reload();
     } finally {
-      setBatchLoading(false)
+      setBatchLoading(false);
     }
-  }
+  };
 
   const handleBatchRefresh = async (ids?: number[]) => {
-    const targetIds = ids ?? Array.from(selected)
-    if (targetIds.length === 0) return
-    setBatchLoading(true)
-    setBatchRefreshing(true)
+    const targetIds = ids ?? Array.from(selected);
+    if (targetIds.length === 0) return;
+    setBatchLoading(true);
+    setBatchRefreshing(true);
     try {
-      const { success, fail } = await runAccountBatch(targetIds, api.refreshAccount, ACCOUNT_REFRESH_BATCH_CONCURRENCY)
-      showToast(t('accounts.batchRefreshDone', { success, fail }))
-      void reload()
+      const { success, fail } = await runAccountBatch(
+        targetIds,
+        api.refreshAccount,
+        ACCOUNT_REFRESH_BATCH_CONCURRENCY,
+      );
+      showToast(t("accounts.batchRefreshDone", { success, fail }));
+      void reload();
     } finally {
-      setBatchLoading(false)
-      setBatchRefreshing(false)
+      setBatchLoading(false);
+      setBatchRefreshing(false);
     }
-  }
+  };
 
   const handleBatchLock = async (locked: boolean) => {
-    const ids = Array.from(selected)
-    if (ids.length === 0) return
-    setBatchLoading(true)
+    const ids = Array.from(selected);
+    if (ids.length === 0) return;
+    setBatchLoading(true);
     try {
-      const { success, fail } = await runAccountBatch(ids, (id) => api.toggleAccountLock(id, locked))
-      showToast(t(locked ? 'accounts.batchLockDone' : 'accounts.batchUnlockDone', { success, fail }))
-      setSelected(new Set())
-      void reload()
+      const { success, fail } = await runAccountBatch(ids, (id) =>
+        api.toggleAccountLock(id, locked),
+      );
+      showToast(
+        t(locked ? "accounts.batchLockDone" : "accounts.batchUnlockDone", {
+          success,
+          fail,
+        }),
+      );
+      setSelected(new Set());
+      void reload();
     } finally {
-      setBatchLoading(false)
+      setBatchLoading(false);
     }
-  }
+  };
 
   const handleBatchEnabled = async (enabled: boolean) => {
-    const ids = Array.from(selected)
-    if (ids.length === 0) return
-    setBatchLoading(true)
+    const ids = Array.from(selected);
+    if (ids.length === 0) return;
+    setBatchLoading(true);
     try {
-      const { success, fail } = await runAccountBatch(ids, (id) => api.toggleAccountEnabled(id, enabled))
-      showToast(t(enabled ? 'accounts.batchEnableDone' : 'accounts.batchDisableDone', { success, fail }))
-      setSelected(new Set())
-      void reload()
+      const { success, fail } = await runAccountBatch(ids, (id) =>
+        api.toggleAccountEnabled(id, enabled),
+      );
+      showToast(
+        t(enabled ? "accounts.batchEnableDone" : "accounts.batchDisableDone", {
+          success,
+          fail,
+        }),
+      );
+      setSelected(new Set());
+      void reload();
     } finally {
-      setBatchLoading(false)
+      setBatchLoading(false);
     }
-  }
+  };
 
   const handleResetStatus = async (account: AccountRow) => {
     try {
-      await api.resetAccountStatus(account.id)
-      showToast(t('accounts.resetStatusSuccess'))
-      void reload()
+      await api.resetAccountStatus(account.id);
+      showToast(t("accounts.resetStatusSuccess"));
+      void reload();
     } catch (error) {
-      showToast(t('accounts.resetStatusFailed', { error: getErrorMessage(error) }), 'error')
+      showToast(
+        t("accounts.resetStatusFailed", { error: getErrorMessage(error) }),
+        "error",
+      );
     }
-  }
+  };
 
   const handleBatchResetStatus = async () => {
-    const ids = Array.from(selected)
-    if (ids.length === 0) return
-    setBatchLoading(true)
+    const ids = Array.from(selected);
+    if (ids.length === 0) return;
+    setBatchLoading(true);
     try {
-      const result = await api.batchResetStatus(ids)
-      showToast(t('accounts.batchResetStatusDone', { success: result.success, fail: result.failed }))
-      setSelected(new Set())
-      void reload()
+      const result = await api.batchResetStatus(ids);
+      showToast(
+        t("accounts.batchResetStatusDone", {
+          success: result.success,
+          fail: result.failed,
+        }),
+      );
+      setSelected(new Set());
+      void reload();
     } catch (error) {
-      showToast(t('accounts.resetStatusFailed', { error: getErrorMessage(error) }), 'error')
+      showToast(
+        t("accounts.resetStatusFailed", { error: getErrorMessage(error) }),
+        "error",
+      );
     } finally {
-      setBatchLoading(false)
+      setBatchLoading(false);
     }
-  }
+  };
+
+  const openBatchMetaEditor = () => {
+    const selectedAccounts = accounts.filter((account) =>
+      selected.has(account.id),
+    );
+    const tagSet = new Set<string>();
+    const groupSet = new Set<number>();
+    for (const account of selectedAccounts) {
+      for (const tag of account.tags ?? []) tagSet.add(tag);
+      for (const id of account.group_ids ?? []) groupSet.add(id);
+    }
+    setBatchTags(Array.from(tagSet).sort());
+    setBatchGroupIds(Array.from(groupSet).sort((a, b) => a - b));
+    setShowBatchMetaEditor(true);
+  };
+
+  const handleBatchSaveMeta = async () => {
+    const ids = Array.from(selected);
+    if (ids.length === 0) return;
+    setBatchMetaSubmitting(true);
+    try {
+      const { success, fail } = await runAccountBatch(ids, (id) =>
+        api.updateAccountScheduler(id, {
+          tags: batchTags,
+          group_ids: batchGroupIds,
+        }),
+      );
+      showToast(t("accounts.batchMetaDone", { success, fail }));
+      setShowBatchMetaEditor(false);
+      await Promise.all([reload(), reloadGroups()]);
+    } catch (error) {
+      showToast(
+        t("accounts.batchMetaFailed", { error: getErrorMessage(error) }),
+        "error",
+      );
+    } finally {
+      setBatchMetaSubmitting(false);
+    }
+  };
 
   const handleBatchTest = async (ids?: number[]) => {
-    if (ids && ids.length === 0) return
-    setBatchTesting(true)
+    if (ids && ids.length === 0) return;
+    setBatchTesting(true);
     try {
-      const result = await api.batchTestAccounts(ids)
-      showToast(t('accounts.batchTestDone', {
-        success: result.success,
-        banned: result.banned,
-        rateLimited: result.rate_limited,
-        failed: result.failed,
-      }))
-      void reload()
+      const result = await api.batchTestAccounts(ids);
+      showToast(
+        t("accounts.batchTestDone", {
+          success: result.success,
+          banned: result.banned,
+          rateLimited: result.rate_limited,
+          failed: result.failed,
+        }),
+      );
+      void reload();
     } catch (error) {
-      showToast(t('accounts.batchTestFailed', { error: getErrorMessage(error) }), 'error')
+      showToast(
+        t("accounts.batchTestFailed", { error: getErrorMessage(error) }),
+        "error",
+      );
     } finally {
-      setBatchTesting(false)
+      setBatchTesting(false);
     }
-  }
+  };
 
   const handleCleanBanned = async () => {
     const confirmed = await confirm({
-      title: t('accounts.cleanBannedTitle'),
-      description: t('accounts.cleanBannedDesc'),
-      confirmText: t('accounts.cleanConfirm'),
-      tone: 'warning',
-    })
-    if (!confirmed) return
-    setCleaningBanned(true)
+      title: t("accounts.cleanBannedTitle"),
+      description: t("accounts.cleanBannedDesc"),
+      confirmText: t("accounts.cleanConfirm"),
+      tone: "warning",
+    });
+    if (!confirmed) return;
+    setCleaningBanned(true);
     try {
-      await api.cleanBanned()
-      showToast(t('accounts.cleanBannedSuccess'))
-      void reload()
+      await api.cleanBanned();
+      showToast(t("accounts.cleanBannedSuccess"));
+      void reload();
     } catch (error) {
-      showToast(t('accounts.cleanBannedFailed', { error: getErrorMessage(error) }), 'error')
+      showToast(
+        t("accounts.cleanBannedFailed", { error: getErrorMessage(error) }),
+        "error",
+      );
     } finally {
-      setCleaningBanned(false)
+      setCleaningBanned(false);
     }
-  }
+  };
 
   const handleCleanRateLimited = async () => {
     const confirmed = await confirm({
-      title: t('accounts.cleanRateLimitedTitle'),
-      description: t('accounts.cleanRateLimitedDesc'),
-      confirmText: t('accounts.cleanConfirm'),
-      tone: 'warning',
-    })
-    if (!confirmed) return
-    setCleaningRateLimited(true)
+      title: t("accounts.cleanRateLimitedTitle"),
+      description: t("accounts.cleanRateLimitedDesc"),
+      confirmText: t("accounts.cleanConfirm"),
+      tone: "warning",
+    });
+    if (!confirmed) return;
+    setCleaningRateLimited(true);
     try {
-      await api.cleanRateLimited()
-      showToast(t('accounts.cleanRateLimitedSuccess'))
-      void reload()
+      await api.cleanRateLimited();
+      showToast(t("accounts.cleanRateLimitedSuccess"));
+      void reload();
     } catch (error) {
-      showToast(t('accounts.cleanRateLimitedFailed', { error: getErrorMessage(error) }), 'error')
+      showToast(
+        t("accounts.cleanRateLimitedFailed", { error: getErrorMessage(error) }),
+        "error",
+      );
     } finally {
-      setCleaningRateLimited(false)
+      setCleaningRateLimited(false);
     }
-  }
+  };
 
   const handleCleanError = async () => {
     const confirmed = await confirm({
-      title: t('accounts.cleanErrorTitle'),
-      description: t('accounts.cleanErrorDesc'),
-      confirmText: t('accounts.cleanConfirm'),
-      tone: 'warning',
-    })
-    if (!confirmed) return
-    setCleaningError(true)
+      title: t("accounts.cleanErrorTitle"),
+      description: t("accounts.cleanErrorDesc"),
+      confirmText: t("accounts.cleanConfirm"),
+      tone: "warning",
+    });
+    if (!confirmed) return;
+    setCleaningError(true);
     try {
-      await api.cleanError()
-      showToast(t('accounts.cleanErrorSuccess'))
-      void reload()
+      await api.cleanError();
+      showToast(t("accounts.cleanErrorSuccess"));
+      void reload();
     } catch (error) {
-      showToast(t('accounts.cleanErrorFailed', { error: getErrorMessage(error) }), 'error')
+      showToast(
+        t("accounts.cleanErrorFailed", { error: getErrorMessage(error) }),
+        "error",
+      );
     } finally {
-      setCleaningError(false)
+      setCleaningError(false);
     }
-  }
+  };
 
   const openSchedulerEditor = (account: AccountRow) => {
-    setEditingAccount(account)
-    setEditTab('scheduler')
-    setScoreMode(account.score_bias_override === null || account.score_bias_override === undefined ? 'default' : 'custom')
-    setScoreInput(account.score_bias_override === null || account.score_bias_override === undefined ? '' : String(account.score_bias_override))
-    setConcurrencyMode(account.base_concurrency_override === null || account.base_concurrency_override === undefined ? 'default' : 'custom')
-    setConcurrencyInput(account.base_concurrency_override === null || account.base_concurrency_override === undefined ? '' : String(account.base_concurrency_override))
-    setAllowedAPIKeySelection(filterExistingAPIKeyIDs(account.allowed_api_key_ids ?? [], apiKeys))
+    setEditingAccount(account);
+    setEditTab("scheduler");
+    setScoreMode(
+      account.score_bias_override === null ||
+        account.score_bias_override === undefined
+        ? "default"
+        : "custom",
+    );
+    setScoreInput(
+      account.score_bias_override === null ||
+        account.score_bias_override === undefined
+        ? ""
+        : String(account.score_bias_override),
+    );
+    setConcurrencyMode(
+      account.base_concurrency_override === null ||
+        account.base_concurrency_override === undefined
+        ? "default"
+        : "custom",
+    );
+    setConcurrencyInput(
+      account.base_concurrency_override === null ||
+        account.base_concurrency_override === undefined
+        ? ""
+        : String(account.base_concurrency_override),
+    );
+    setAllowedAPIKeySelection(
+      filterExistingAPIKeyIDs(account.allowed_api_key_ids ?? [], apiKeys),
+    );
+    setEditProxyUrl(account.proxy_url ?? "");
+    setEditTags(account.tags ?? []);
+    setEditGroupIds(account.group_ids ?? []);
     setEditOpenAIForm({
-      name: account.name ?? '',
-      base_url: account.base_url || 'https://api.openai.com',
-      api_key: '',
+      name: account.name ?? "",
+      base_url: account.base_url || "https://api.openai.com",
+      api_key: "",
       models: account.models ?? [],
-      proxy_url: account.proxy_url ?? '',
-    })
-    setEditOpenAIModelDraft('')
-  }
+      proxy_url: account.proxy_url ?? "",
+    });
+    setEditOpenAIModelDraft("");
+  };
 
   const closeSchedulerEditor = (force = false) => {
-    if (editSubmitting && !force) return
-    setEditingAccount(null)
-    setEditTab('scheduler')
-    setScoreMode('default')
-    setScoreInput('')
-    setConcurrencyMode('default')
-    setConcurrencyInput('')
-    setAllowedAPIKeySelection([])
-    setEditOpenAIForm({ name: '', base_url: 'https://api.openai.com', api_key: '', models: [], proxy_url: '' })
-    setEditOpenAIModelDraft('')
-  }
-
-  const parsedScoreBias = scoreMode === 'custom' ? parseIntegerInput(scoreInput) : null
-  const parsedBaseConcurrency = concurrencyMode === 'custom' ? parseIntegerInput(concurrencyInput) : null
-  const scoreInputInvalid = scoreMode === 'custom' && (parsedScoreBias === null || parsedScoreBias < -200 || parsedScoreBias > 200)
-  const concurrencyInputInvalid = concurrencyMode === 'custom' && (parsedBaseConcurrency === null || parsedBaseConcurrency < 1 || parsedBaseConcurrency > 50)
+    if (editSubmitting && !force) return;
+    setEditingAccount(null);
+    setEditTab("scheduler");
+    setScoreMode("default");
+    setScoreInput("");
+    setConcurrencyMode("default");
+    setConcurrencyInput("");
+    setAllowedAPIKeySelection([]);
+    setEditProxyUrl("");
+    setEditTags([]);
+    setEditGroupIds([]);
+    setEditOpenAIForm({
+      name: "",
+      base_url: "https://api.openai.com",
+      api_key: "",
+      models: [],
+      proxy_url: "",
+    });
+    setEditOpenAIModelDraft("");
+  };
+
+  const parsedScoreBias =
+    scoreMode === "custom" ? parseIntegerInput(scoreInput) : null;
+  const parsedBaseConcurrency =
+    concurrencyMode === "custom" ? parseIntegerInput(concurrencyInput) : null;
+  const scoreInputInvalid =
+    scoreMode === "custom" &&
+    (parsedScoreBias === null ||
+      parsedScoreBias < -200 ||
+      parsedScoreBias > 200);
+  const concurrencyInputInvalid =
+    concurrencyMode === "custom" &&
+    (parsedBaseConcurrency === null ||
+      parsedBaseConcurrency < 1 ||
+      parsedBaseConcurrency > 50);
   const openAIAccountInputInvalid = Boolean(
     editingAccount?.openai_responses_api &&
-    editTab === 'account' &&
-    (!editOpenAIForm.base_url.trim() || editOpenAIForm.models.length === 0)
-  )
+    editTab === "account" &&
+    (!editOpenAIForm.base_url.trim() || editOpenAIForm.models.length === 0),
+  );
 
   const editPreview = useMemo(() => {
-    if (!editingAccount) return null
-
-    const rawScore = Math.round(editingAccount.scheduler_score ?? 0)
-    const appliedBias = scoreMode === 'custom'
-      ? (parsedScoreBias ?? getEffectiveScoreBias(editingAccount))
-      : getDefaultScoreBias(editingAccount.plan_type)
-    const baseConcurrency = concurrencyMode === 'custom'
-      ? (parsedBaseConcurrency ?? getEffectiveBaseConcurrency(editingAccount))
-      : getEffectiveBaseConcurrency(editingAccount)
+    if (!editingAccount) return null;
+
+    const rawScore = Math.round(editingAccount.scheduler_score ?? 0);
+    const appliedBias =
+      scoreMode === "custom"
+        ? (parsedScoreBias ?? getEffectiveScoreBias(editingAccount))
+        : getDefaultScoreBias(editingAccount.plan_type);
+    const baseConcurrency =
+      concurrencyMode === "custom"
+        ? (parsedBaseConcurrency ?? getEffectiveBaseConcurrency(editingAccount))
+        : getEffectiveBaseConcurrency(editingAccount);
 
     return {
       rawScore,
-      dispatchScore: computePreviewDispatchScore(editingAccount, rawScore, appliedBias),
+      dispatchScore: computePreviewDispatchScore(
+        editingAccount,
+        rawScore,
+        appliedBias,
+      ),
       healthTier: editingAccount.health_tier,
-      dynamicConcurrency: computePreviewDynamicConcurrency(editingAccount, baseConcurrency),
+      dynamicConcurrency: computePreviewDynamicConcurrency(
+        editingAccount,
+        baseConcurrency,
+      ),
       appliedBias,
       baseConcurrency,
-    }
-  }, [editingAccount, scoreMode, parsedScoreBias, concurrencyMode, parsedBaseConcurrency])
+    };
+  }, [
+    editingAccount,
+    scoreMode,
+    parsedScoreBias,
+    concurrencyMode,
+    parsedBaseConcurrency,
+  ]);
 
   const handleSaveScheduler = async () => {
-    if (!editingAccount) return
+    if (!editingAccount) return;
     if (scoreInputInvalid || concurrencyInputInvalid) {
-      showToast(t('accounts.schedulerInvalidInput'), 'error')
-      return
+      showToast(t("accounts.schedulerInvalidInput"), "error");
+      return;
     }
 
-    setEditSubmitting(true)
+    setEditSubmitting(true);
     try {
       const payload = {
-        score_bias_override: scoreMode === 'custom' ? parsedScoreBias : null,
-        base_concurrency_override: concurrencyMode === 'custom' ? parsedBaseConcurrency : null,
+        score_bias_override: scoreMode === "custom" ? parsedScoreBias : null,
+        base_concurrency_override:
+          concurrencyMode === "custom" ? parsedBaseConcurrency : null,
         allowed_api_key_ids: allowedAPIKeySelection,
-      }
-      await api.updateAccountScheduler(editingAccount.id, payload)
-      showToast(t('accounts.schedulerSaveSuccess'))
-      await reload()
-      closeSchedulerEditor(true)
+        proxy_url: editProxyUrl.trim() || null,
+        tags: editTags,
+        group_ids: editGroupIds,
+      };
+      await api.updateAccountScheduler(editingAccount.id, payload);
+      showToast(t("accounts.schedulerSaveSuccess"));
+      await Promise.all([reload(), reloadGroups()]);
+      closeSchedulerEditor(true);
     } catch (error) {
-      showToast(t('accounts.schedulerSaveFailed', { error: getErrorMessage(error) }), 'error')
+      showToast(
+        t("accounts.schedulerSaveFailed", { error: getErrorMessage(error) }),
+        "error",
+      );
     } finally {
-      setEditSubmitting(false)
+      setEditSubmitting(false);
     }
-  }
+  };
 
   const handleSaveAccountEditor = async () => {
-    if (editingAccount?.openai_responses_api && editTab === 'account') {
-      await handleSaveOpenAIAccountSettings()
-      return
+    if (editingAccount?.openai_responses_api && editTab === "account") {
+      await handleSaveOpenAIAccountSettings();
+      return;
     }
-    await handleSaveScheduler()
-  }
+    await handleSaveScheduler();
+  };
+
+  const reloadGroups = async () => {
+    const res = await api.listAccountGroups();
+    setAllGroups(res.groups ?? []);
+  };
+
+  const resetGroupDraft = () => {
+    setGroupDraft({
+      id: null,
+      name: "",
+      description: "",
+      color: ACCOUNT_GROUP_COLORS[0],
+    });
+  };
+
+  const startEditGroup = (group: AccountGroup) => {
+    setGroupDraft({
+      id: group.id,
+      name: group.name,
+      description: group.description ?? "",
+      color: group.color || ACCOUNT_GROUP_COLORS[0],
+    });
+  };
+
+  const handleSaveGroup = async () => {
+    const name = groupDraft.name.trim();
+    if (!name) {
+      showToast(t("accounts.groupNameRequired"), "error");
+      return;
+    }
+    setGroupSubmitting(true);
+    try {
+      const payload = {
+        name,
+        description: groupDraft.description.trim(),
+        color: groupDraft.color.trim() || ACCOUNT_GROUP_COLORS[0],
+      };
+      if (groupDraft.id === null) {
+        await api.createAccountGroup(payload);
+        showToast(t("accounts.groupCreated"));
+      } else {
+        await api.updateAccountGroup(groupDraft.id, payload);
+        showToast(t("accounts.groupUpdated"));
+      }
+      await reloadGroups();
+      resetGroupDraft();
+    } catch (error) {
+      showToast(getErrorMessage(error), "error");
+    } finally {
+      setGroupSubmitting(false);
+    }
+  };
+
+  const handleDeleteGroup = async (group: AccountGroup) => {
+    const force = group.member_count > 0;
+    const confirmed = await confirm({
+      title: t("accounts.groupDeleteTitle"),
+      description: force
+        ? t("accounts.groupDeleteWithMembers")
+        : t("accounts.groupDeleteEmpty"),
+      confirmText: force ? t("accounts.groupDeleteForce") : t("common.delete"),
+      tone: "destructive",
+      confirmVariant: "destructive",
+    });
+    if (!confirmed) return;
+    setGroupSubmitting(true);
+    try {
+      await api.deleteAccountGroup(group.id, force);
+      showToast(t("accounts.groupDeleted"));
+      setEditGroupIds((current) => current.filter((id) => id !== group.id));
+      setBatchGroupIds((current) => current.filter((id) => id !== group.id));
+      if (groupFilter === group.id) setGroupFilter(null);
+      if (groupDraft.id === group.id) resetGroupDraft();
+      await Promise.all([reload(), reloadGroups()]);
+    } catch (error) {
+      showToast(getErrorMessage(error), "error");
+    } finally {
+      setGroupSubmitting(false);
+    }
+  };
 
   return (
     <div
@@ -1281,1421 +1973,2617 @@ export default function Accounts() {
         <div className="pointer-events-none absolute inset-0 z-50 flex items-center justify-center rounded-lg border-2 border-dashed border-primary bg-primary/5 backdrop-blur-sm">
           <div className="flex flex-col items-center gap-2 text-primary">
             <Upload className="size-10" />
-            <span className="text-lg font-semibold">{t('accounts.dropToImport')}</span>
-            <span className="text-sm text-muted-foreground">{t('accounts.dropHint')}</span>
+            <span className="text-lg font-semibold">
+              {t("accounts.dropToImport")}
+            </span>
+            <span className="text-sm text-muted-foreground">
+              {t("accounts.dropHint")}
+            </span>
           </div>
         </div>
       )}
-    <StateShell
-      variant="page"
-      loading={loading}
-      error={error}
-      onRetry={() => void reload()}
-      loadingTitle={t('accounts.loadingTitle')}
-      loadingDescription={t('accounts.loadingDesc')}
-      errorTitle={t('accounts.errorTitle')}
-    >
-      <>
-        <PageHeader
-          title={t('accounts.title')}
-          description={t('accounts.description')}
-          onRefresh={() => void reload()}
-          actions={(
-            <div className="flex flex-wrap items-center justify-end gap-1.5">
-              <Button
-                variant="outline"
-                aria-pressed={showAnalysisCharts}
-                onClick={() => setShowAnalysisCharts((visible) => !visible)}
-                className="max-sm:w-full"
-              >
-                <BarChart3 className="size-3.5" />
-                {showAnalysisCharts ? t('accounts.hideAnalysisCharts') : t('accounts.showAnalysisCharts')}
-              </Button>
-              <HeaderActionMenu
-                label={t('accounts.maintenanceActions')}
-                icon={<Zap className="size-3.5" />}
-                items={[
-                  {
-                    key: 'refresh-tokens',
-                    label: t('accounts.refreshTokens'),
-                    icon: <RefreshCw className={`size-3.5 ${batchRefreshing ? 'animate-spin' : ''}`} />,
-                    disabled: batchLoading || batchTesting || accounts.length === 0,
-                    onSelect: () => void handleBatchRefresh(accounts.map((account) => account.id)),
-                  },
-                  {
-                    key: 'test-connection',
-                    label: batchTesting ? t('accounts.batchTesting') : t('accounts.testConnection'),
-                    icon: <FlaskConical className="size-3.5" />,
-                    disabled: batchLoading || batchTesting || accounts.length === 0,
-                    onSelect: () => void handleBatchTest(),
-                  },
-                  {
-                    key: 'lock-subscription',
-                    label: lockingSubscriptionAccounts ? t('accounts.lockingSubscriptionAccounts') : t('accounts.lockSubscriptionAccounts'),
-                    icon: <Lock className="size-3.5" />,
-                    disabled: batchLoading || batchTesting || lockingSubscriptionAccounts || accounts.length === 0,
-                    title: t('accounts.lockSubscriptionAccountsHint', { count: subscriptionAccountsToLock.length }),
-                    onSelect: () => void handleLockSubscriptionAccounts(),
-                  },
-                ]}
-              />
-              <HeaderActionMenu
-                label={t('accounts.cleanupActions')}
-                icon={<Trash2 className="size-3.5" />}
-                items={[
-                  {
-                    key: 'clean-banned',
-                    label: cleaningBanned ? t('accounts.cleaning') : t('accounts.cleanBanned'),
-                    icon: <Ban className="size-3.5" />,
-                    disabled: cleaningBanned,
-                    onSelect: () => void handleCleanBanned(),
-                  },
-                  {
-                    key: 'clean-rate-limited',
-                    label: cleaningRateLimited ? t('accounts.cleaning') : t('accounts.cleanRateLimited'),
-                    icon: <Timer className="size-3.5" />,
-                    disabled: cleaningRateLimited,
-                    onSelect: () => void handleCleanRateLimited(),
-                  },
-                  {
-                    key: 'clean-error',
-                    label: cleaningError ? t('accounts.cleaning') : t('accounts.cleanError'),
-                    icon: <AlertTriangle className="size-3.5" />,
-                    disabled: cleaningError,
-                    onSelect: () => void handleCleanError(),
-                  },
-                ]}
+      <StateShell
+        variant="page"
+        loading={loading}
+        error={error}
+        onRetry={() => void reload()}
+        loadingTitle={t("accounts.loadingTitle")}
+        loadingDescription={t("accounts.loadingDesc")}
+        errorTitle={t("accounts.errorTitle")}
+      >
+        <>
+          <PageHeader
+            title={t("accounts.title")}
+            description={t("accounts.description")}
+            onRefresh={() => void reload()}
+            actions={
+              <div className="flex flex-wrap items-center justify-end gap-1.5">
+                <Button
+                  variant="outline"
+                  aria-pressed={showAnalysisCharts}
+                  onClick={() => setShowAnalysisCharts((visible) => !visible)}
+                  className="max-sm:w-full"
+                >
+                  <BarChart3 className="size-3.5" />
+                  {showAnalysisCharts
+                    ? t("accounts.hideAnalysisCharts")
+                    : t("accounts.showAnalysisCharts")}
+                </Button>
+                <HeaderActionMenu
+                  label={t("accounts.maintenanceActions")}
+                  icon={<Zap className="size-3.5" />}
+                  items={[
+                    {
+                      key: "refresh-tokens",
+                      label: t("accounts.refreshTokens"),
+                      icon: (
+                        <RefreshCw
+                          className={`size-3.5 ${batchRefreshing ? "animate-spin" : ""}`}
+                        />
+                      ),
+                      disabled:
+                        batchLoading || batchTesting || accounts.length === 0,
+                      onSelect: () =>
+                        void handleBatchRefresh(
+                          accounts.map((account) => account.id),
+                        ),
+                    },
+                    {
+                      key: "test-connection",
+                      label: batchTesting
+                        ? t("accounts.batchTesting")
+                        : t("accounts.testConnection"),
+                      icon: <FlaskConical className="size-3.5" />,
+                      disabled:
+                        batchLoading || batchTesting || accounts.length === 0,
+                      onSelect: () => void handleBatchTest(),
+                    },
+                    {
+                      key: "lock-subscription",
+                      label: lockingSubscriptionAccounts
+                        ? t("accounts.lockingSubscriptionAccounts")
+                        : t("accounts.lockSubscriptionAccounts"),
+                      icon: <Lock className="size-3.5" />,
+                      disabled:
+                        batchLoading ||
+                        batchTesting ||
+                        lockingSubscriptionAccounts ||
+                        accounts.length === 0,
+                      title: t("accounts.lockSubscriptionAccountsHint", {
+                        count: subscriptionAccountsToLock.length,
+                      }),
+                      onSelect: () => void handleLockSubscriptionAccounts(),
+                    },
+                  ]}
+                />
+                <HeaderActionMenu
+                  label={t("accounts.cleanupActions")}
+                  icon={<Trash2 className="size-3.5" />}
+                  items={[
+                    {
+                      key: "clean-banned",
+                      label: cleaningBanned
+                        ? t("accounts.cleaning")
+                        : t("accounts.cleanBanned"),
+                      icon: <Ban className="size-3.5" />,
+                      disabled: cleaningBanned,
+                      onSelect: () => void handleCleanBanned(),
+                    },
+                    {
+                      key: "clean-rate-limited",
+                      label: cleaningRateLimited
+                        ? t("accounts.cleaning")
+                        : t("accounts.cleanRateLimited"),
+                      icon: <Timer className="size-3.5" />,
+                      disabled: cleaningRateLimited,
+                      onSelect: () => void handleCleanRateLimited(),
+                    },
+                    {
+                      key: "clean-error",
+                      label: cleaningError
+                        ? t("accounts.cleaning")
+                        : t("accounts.cleanError"),
+                      icon: <AlertTriangle className="size-3.5" />,
+                      disabled: cleaningError,
+                      onSelect: () => void handleCleanError(),
+                    },
+                  ]}
+                />
+                <HeaderActionMenu
+                  label={t("accounts.dataActions")}
+                  icon={<FolderOpen className="size-3.5" />}
+                  items={[
+                    {
+                      key: "import",
+                      label: importing
+                        ? t("accounts.importing")
+                        : t("accounts.importFile"),
+                      icon: <Upload className="size-3.5" />,
+                      disabled: importing,
+                      onSelect: () => setShowImportPicker(true),
+                    },
+                    {
+                      key: "export",
+                      label: exporting
+                        ? t("accounts.exporting")
+                        : t("accounts.export"),
+                      icon: <Download className="size-3.5" />,
+                      disabled: exporting,
+                      onSelect: () => setShowExportPicker(true),
+                    },
+                    {
+                      key: "migrate",
+                      label: migrating
+                        ? t("accounts.migrating")
+                        : t("accounts.migrateImport"),
+                      icon: <ArrowDownToLine className="size-3.5" />,
+                      disabled: migrating,
+                      onSelect: () => setShowMigrate(true),
+                    },
+                  ]}
+                />
+                <Button onClick={() => setShowAdd(true)}>
+                  <Plus className="size-3.5" />
+                  {t("accounts.addAccount")}
+                </Button>
+                <input
+                  ref={fileInputRef}
+                  type="file"
+                  accept=".txt"
+                  multiple
+                  className="hidden"
+                  onChange={(e) => void handleFileImport(e)}
+                />
+                <input
+                  ref={jsonInputRef}
+                  type="file"
+                  accept=".json"
+                  multiple
+                  className="hidden"
+                  onChange={(e) => void handleJsonImport(e)}
+                />
+                <input
+                  ref={atFileInputRef}
+                  type="file"
+                  accept=".txt"
+                  multiple
+                  className="hidden"
+                  onChange={(e) => void handleAtFileImport(e)}
+                />
+                <input
+                  ref={folderInputRef}
+                  type="file"
+                  className="hidden"
+                  onChange={(e) => void handleFolderImport(e)}
+                  {...({
+                    webkitdirectory: "",
+                    directory: "",
+                  } as React.InputHTMLAttributes<HTMLInputElement>)}
+                />
+              </div>
+            }
+          />
+
+          <div className="mb-4 grid grid-cols-2 gap-3 xl:grid-cols-5">
+            <CompactStat
+              label={t("accounts.totalAccounts")}
+              chipLabel={t("accounts.filterAll")}
+              value={totalAccounts}
+              tone="neutral"
+            />
+            <CompactStat
+              label={t("accounts.normalAccounts")}
+              chipLabel={t("accounts.filterNormal")}
+              value={normalAccounts}
+              tone="success"
+            />
+            <CompactStat
+              label={t("accounts.rateLimited")}
+              chipLabel={t("accounts.filterRateLimited")}
+              value={rateLimitedAccounts}
+              tone="warning"
+              details={[
+                { label: "5h", value: rateLimited5hAccounts },
+                { label: "7d", value: rateLimited7dAccounts },
+              ]}
+            />
+            <CompactStat
+              label={t("accounts.bannedAccounts")}
+              chipLabel={t("accounts.filterBanned")}
+              value={bannedAccounts}
+              tone="danger"
+            />
+            <CompactStat
+              label={t("accounts.errorAccounts")}
+              chipLabel={t("accounts.filterError")}
+              value={errorAccounts}
+              tone="danger"
+            />
+          </div>
+
+          {showAnalysisCharts ? (
+            <div className="mb-4 grid items-stretch gap-4 xl:grid-cols-2">
+              <AccountQuotaDistributionChart
+                accounts={accounts}
+                compact
+                className="min-w-0"
               />
-              <HeaderActionMenu
-                label={t('accounts.dataActions')}
-                icon={<FolderOpen className="size-3.5" />}
-                items={[
-                  {
-                    key: 'import',
-                    label: importing ? t('accounts.importing') : t('accounts.importFile'),
-                    icon: <Upload className="size-3.5" />,
-                    disabled: importing,
-                    onSelect: () => setShowImportPicker(true),
-                  },
-                  {
-                    key: 'export',
-                    label: exporting ? t('accounts.exporting') : t('accounts.export'),
-                    icon: <Download className="size-3.5" />,
-                    disabled: exporting,
-                    onSelect: () => setShowExportPicker(true),
-                  },
-                  {
-                    key: 'migrate',
-                    label: migrating ? t('accounts.migrating') : t('accounts.migrateImport'),
-                    icon: <ArrowDownToLine className="size-3.5" />,
-                    disabled: migrating,
-                    onSelect: () => setShowMigrate(true),
-                  },
-                ]}
+              <AccountRateLimitRecoveryChart
+                accounts={accounts}
+                currentRpm={opsOverview?.traffic?.rpm}
+                rpmLimit={opsOverview?.traffic?.rpm_limit}
+                avgDurationMs={opsOverview?.traffic?.avg_duration_ms}
+                compact
+                className="min-w-0"
               />
-              <Button onClick={() => setShowAdd(true)}>
-                <Plus className="size-3.5" />
-                {t('accounts.addAccount')}
-              </Button>
-              <input
-                ref={fileInputRef}
-                type="file"
-                accept=".txt"
-                multiple
-                className="hidden"
-                onChange={(e) => void handleFileImport(e)}
+            </div>
+          ) : null}
+
+          <div className="mb-3 grid gap-3 xl:grid-cols-[minmax(0,1fr)_max-content]">
+            <div className="toolbar-surface flex items-center gap-1.5 overflow-visible max-lg:overflow-x-auto xl:flex-nowrap">
+              <span className="shrink-0 whitespace-nowrap font-semibold text-foreground">
+                {t("accounts.filter")}
+              </span>
+              {(
+                [
+                  ["all", t("accounts.filterAll")],
+                  ["normal", t("accounts.filterNormal")],
+                  ["rate_limited", t("accounts.filterRateLimited")],
+                  ["banned", t("accounts.filterBanned")],
+                  ["error", t("accounts.filterError")],
+                  ["disabled", t("accounts.filterDisabled")],
+                  ["locked", t("accounts.filterLocked")],
+                ] as const
+              ).map(([key, label]) => (
+                <button
+                  key={key}
+                  onClick={() => {
+                    setStatusFilter(key);
+                    setPage(1);
+                  }}
+                  className={`shrink-0 whitespace-nowrap rounded-md px-2.5 py-1 font-semibold transition-colors ${
+                    statusFilter === key
+                      ? "bg-primary text-primary-foreground"
+                      : "bg-muted/50 text-muted-foreground hover:bg-muted"
+                  }`}
+                >
+                  {label}{" "}
+                  {key === "all"
+                    ? totalAccounts
+                    : key === "normal"
+                      ? normalAccounts
+                      : key === "rate_limited"
+                        ? rateLimitedAccounts
+                        : key === "banned"
+                          ? bannedAccounts
+                          : key === "error"
+                            ? errorAccounts
+                            : key === "disabled"
+                              ? disabledAccounts
+                              : lockedAccounts}
+                </button>
+              ))}
+            </div>
+
+            <div className="toolbar-surface flex items-center gap-1.5 overflow-visible max-lg:overflow-x-auto xl:flex-nowrap">
+              <span className="shrink-0 whitespace-nowrap font-semibold text-foreground">
+                {t("accounts.schedulerView")}
+              </span>
+              <SchedulerChip
+                label={t("accounts.healthy")}
+                value={healthyAccounts}
+                tone="success"
               />
-              <input
-                ref={jsonInputRef}
-                type="file"
-                accept=".json"
-                multiple
-                className="hidden"
-                onChange={(e) => void handleJsonImport(e)}
+              <SchedulerChip
+                label={t("accounts.warm")}
+                value={warmAccounts}
+                tone="warning"
               />
-              <input
-                ref={atFileInputRef}
-                type="file"
-                accept=".txt"
-                multiple
-                className="hidden"
-                onChange={(e) => void handleAtFileImport(e)}
+              <SchedulerChip
+                label={t("accounts.risky")}
+                value={riskyAccounts}
+                tone="danger"
               />
-              <input
-                ref={folderInputRef}
-                type="file"
-                className="hidden"
-                onChange={(e) => void handleFolderImport(e)}
-                {...({ webkitdirectory: '', directory: '' } as React.InputHTMLAttributes<HTMLInputElement>)}
+              <SchedulerChip
+                label={t("status.unauthorized")}
+                value={bannedAccounts}
+                tone="neutral"
               />
             </div>
-          )}
-        />
-
-        <div className="mb-4 grid grid-cols-2 gap-3 xl:grid-cols-5">
-          <CompactStat label={t('accounts.totalAccounts')} chipLabel={t('accounts.filterAll')} value={totalAccounts} tone="neutral" />
-          <CompactStat label={t('accounts.normalAccounts')} chipLabel={t('accounts.filterNormal')} value={normalAccounts} tone="success" />
-          <CompactStat
-            label={t('accounts.rateLimited')}
-            chipLabel={t('accounts.filterRateLimited')}
-            value={rateLimitedAccounts}
-            tone="warning"
-            details={[
-              { label: '5h', value: rateLimited5hAccounts },
-              { label: '7d', value: rateLimited7dAccounts },
-            ]}
-          />
-          <CompactStat label={t('accounts.bannedAccounts')} chipLabel={t('accounts.filterBanned')} value={bannedAccounts} tone="danger" />
-          <CompactStat label={t('accounts.errorAccounts')} chipLabel={t('accounts.filterError')} value={errorAccounts} tone="danger" />
-        </div>
+          </div>
 
-        {showAnalysisCharts ? (
-          <div className="mb-4 grid items-stretch gap-4 xl:grid-cols-2">
-            <AccountQuotaDistributionChart accounts={accounts} compact className="min-w-0" />
-            <AccountRateLimitRecoveryChart
-              accounts={accounts}
-              currentRpm={opsOverview?.traffic?.rpm}
-              rpmLimit={opsOverview?.traffic?.rpm_limit}
-              avgDurationMs={opsOverview?.traffic?.avg_duration_ms}
+          <div className="mb-4 flex items-center gap-2 overflow-visible max-lg:flex-wrap max-lg:overflow-x-auto">
+            <div className="relative w-64 shrink-0 max-sm:w-full">
+              <Search className="absolute left-3 top-1/2 -translate-y-1/2 size-4 text-muted-foreground pointer-events-none" />
+              <Input
+                className="pl-9 h-8 rounded-lg text-[13px]"
+                placeholder={t("accounts.searchPlaceholder")}
+                value={searchQuery}
+                onChange={(e: ChangeEvent<HTMLInputElement>) => {
+                  setSearchQuery(e.target.value);
+                  setPage(1);
+                }}
+              />
+            </div>
+            <div className="flex shrink-0 items-center gap-1 rounded-lg border border-border bg-muted/30 p-0.5">
+              {(["all", "pro", "prolite", "plus", "team", "free"] as const).map(
+                (key) => (
+                  <button
+                    key={key}
+                    onClick={() => {
+                      setPlanFilter(key);
+                      setPage(1);
+                    }}
+                    className={`whitespace-nowrap rounded-md px-2.5 py-1 text-[12px] font-medium transition-colors ${
+                      planFilter === key
+                        ? "bg-background shadow-sm text-foreground"
+                        : "text-muted-foreground hover:text-foreground"
+                    }`}
+                  >
+                    {key === "all"
+                      ? t("accounts.filterAll")
+                      : key === "prolite"
+                        ? "ProLite"
+                        : key.charAt(0).toUpperCase() + key.slice(1)}
+                  </button>
+                ),
+              )}
+            </div>
+            <Select
+              className="w-36 shrink-0"
               compact
-              className="min-w-0"
+              value={tagFilter || "all"}
+              onValueChange={(value) => {
+                setTagFilter(value === "all" ? "" : value);
+                setPage(1);
+              }}
+              options={[
+                { value: "all", label: t("accounts.tagsFilter") },
+                ...allTags.map((tag) => ({ value: tag, label: tag })),
+              ]}
             />
-          </div>
-        ) : null}
-
-        <div className="toolbar-surface mb-3 flex flex-wrap items-center gap-2">
-          <span className="font-semibold text-foreground">{t('accounts.filter')}</span>
-          {([['all', t('accounts.filterAll')], ['normal', t('accounts.filterNormal')], ['rate_limited', t('accounts.filterRateLimited')], ['banned', t('accounts.filterBanned')], ['error', t('accounts.filterError')], ['disabled', t('accounts.filterDisabled')], ['locked', t('accounts.filterLocked')]] as const).map(([key, label]) => (
-            <button
-              key={key}
-              onClick={() => { setStatusFilter(key); setPage(1) }}
-              className={`rounded-md px-2.5 py-1 font-semibold transition-colors ${
-                statusFilter === key
-                  ? 'bg-primary text-primary-foreground'
-                  : 'bg-muted/50 text-muted-foreground hover:bg-muted'
-              }`}
-            >
-              {label} {key === 'all' ? totalAccounts : key === 'normal' ? normalAccounts : key === 'rate_limited' ? rateLimitedAccounts : key === 'banned' ? bannedAccounts : key === 'error' ? errorAccounts : key === 'disabled' ? disabledAccounts : lockedAccounts}
-            </button>
-          ))}
-        </div>
-
-        <div className="toolbar-surface mb-3 flex flex-wrap items-center gap-2">
-          <span className="font-semibold text-foreground">{t('accounts.schedulerView')}</span>
-          <SchedulerChip label={t('accounts.healthy')} value={healthyAccounts} tone="success" />
-          <SchedulerChip label={t('accounts.warm')} value={warmAccounts} tone="warning" />
-          <SchedulerChip label={t('accounts.risky')} value={riskyAccounts} tone="danger" />
-          <SchedulerChip label={t('status.unauthorized')} value={bannedAccounts} tone="neutral" />
-        </div>
-
-        <div className="mb-4 flex flex-wrap items-center gap-2">
-          <div className="relative w-72 max-sm:w-full">
-            <Search className="absolute left-3 top-1/2 -translate-y-1/2 size-4 text-muted-foreground pointer-events-none" />
-            <Input
-              className="pl-9 h-8 rounded-lg text-[13px]"
-              placeholder={t('accounts.searchPlaceholder')}
-              value={searchQuery}
-              onChange={(e: ChangeEvent<HTMLInputElement>) => { setSearchQuery(e.target.value); setPage(1) }}
+            <Select
+              className="w-36 shrink-0"
+              compact
+              value={groupFilter === null ? "all" : String(groupFilter)}
+              onValueChange={(value) => {
+                setGroupFilter(value === "all" ? null : Number(value));
+                setPage(1);
+              }}
+              options={[
+                { value: "all", label: t("accounts.groupsFilter") },
+                ...allGroups.map((group) => ({
+                  value: String(group.id),
+                  label: group.name,
+                })),
+              ]}
             />
-          </div>
-          <div className="flex items-center gap-1 rounded-lg border border-border bg-muted/30 p-0.5">
-            {(['all', 'pro', 'prolite', 'plus', 'team', 'free'] as const).map((key) => (
-              <button
-                key={key}
-                onClick={() => { setPlanFilter(key); setPage(1) }}
-                className={`rounded-md px-2.5 py-1 text-[12px] font-medium transition-colors ${
-                  planFilter === key
-                    ? 'bg-background shadow-sm text-foreground'
-                    : 'text-muted-foreground hover:text-foreground'
-                }`}
-              >
-                {key === 'all'
-                  ? t('accounts.filterAll')
-                  : key === 'prolite'
-                    ? 'ProLite'
-                    : key.charAt(0).toUpperCase() + key.slice(1)}
-              </button>
-            ))}
-          </div>
-        </div>
-
-        {selected.size > 0 && (
-          <div className="sticky top-2 z-20 mb-4 flex items-center justify-between gap-3 rounded-lg border border-primary/20 bg-card/95 px-3 py-2.5 text-sm font-semibold text-primary shadow-lg backdrop-blur-sm max-lg:flex-col max-lg:items-stretch">
-            <span>{t('common.selected', { count: selected.size })}</span>
-            <div className="flex flex-wrap items-center justify-end gap-1.5 max-lg:justify-start">
-              <Button variant="outline" size="sm" disabled={batchLoading || batchTesting} onClick={() => void handleBatchRefresh()}>
-                <RefreshCw className={`size-3 mr-1 ${batchRefreshing ? 'animate-spin' : ''}`} />{t('accounts.batchRefresh')}
-              </Button>
-              <Button variant="outline" size="sm" disabled={batchLoading || batchTesting} onClick={() => void handleBatchTest(Array.from(selected))}>
-                <FlaskConical className="size-3 mr-1" />{batchTesting ? t('accounts.batchTesting') : t('accounts.batchTest')}
-              </Button>
-              <Button variant="outline" size="sm" disabled={batchLoading || batchTesting} onClick={() => void handleBatchEnabled(true)}>
-                <Power className="size-3 mr-1" />{t('accounts.enable')}
-              </Button>
-              <Button variant="outline" size="sm" disabled={batchLoading || batchTesting} onClick={() => void handleBatchEnabled(false)}>
-                <PowerOff className="size-3 mr-1" />{t('accounts.disable')}
-              </Button>
-              <Button variant="outline" size="sm" disabled={batchLoading || batchTesting} onClick={() => void handleBatchLock(true)}>
-                <Lock className="size-3 mr-1" />{t('accounts.lock')}
-              </Button>
-              <Button variant="outline" size="sm" disabled={batchLoading || batchTesting} onClick={() => void handleBatchLock(false)}>
-                <Unlock className="size-3 mr-1" />{t('accounts.unlock')}
-              </Button>
-              <Button variant="outline" size="sm" disabled={batchLoading || batchTesting} onClick={() => void handleBatchResetStatus()}>
-                <RotateCcw className="size-3 mr-1" />{t('accounts.batchResetStatus')}
-              </Button>
-              <Button variant="destructive" size="sm" disabled={batchLoading || batchTesting} onClick={() => void handleBatchDelete()}>
-                {t('accounts.batchDelete')}
-              </Button>
-              <Button variant="outline" size="sm" onClick={() => setSelected(new Set())}>
-                {t('accounts.cancelSelection')}
-              </Button>
-            </div>
-          </div>
-        )}
-
-        <Card>
-          <CardContent className="p-4">
-            <StateShell
-              variant="section"
-              isEmpty={accounts.length === 0}
-              emptyTitle={t('accounts.noData')}
-              emptyDescription={t('accounts.noDataDesc')}
-              action={<Button onClick={() => setShowAdd(true)}>{t('accounts.addAccount')}</Button>}
+            <Button
+              type="button"
+              variant="outline"
+              size="sm"
+              className="shrink-0"
+              onClick={() => setShowGroupManager(true)}
             >
-              <div className="data-table-shell">
-                <Table>
-                  <TableHeader>
-                    <TableRow>
-                      <TableHead className="w-10">
-                        <input
-                          ref={selectAllRef}
-                          type="checkbox"
-                          className="size-4 cursor-pointer accent-primary"
-                          checked={allPageSelected}
-                          onChange={toggleSelectAll}
-                        />
-                      </TableHead>
-                      <TableHead className="text-[13px] font-semibold">{t('accounts.sequence')}</TableHead>
-                      <TableHead className="text-[13px] font-semibold">{t('accounts.email')}</TableHead>
-                      <TableHead className="text-[13px] font-semibold">{t('accounts.plan')}</TableHead>
-                      <TableHead className="text-[13px] font-semibold">{t('accounts.status')}</TableHead>
-                      <TableHead
-                        className="text-[13px] font-semibold cursor-pointer select-none hover:text-primary transition-colors"
-                        onClick={() => { if (sortKey === 'requests') { setSortDir(d => d === 'asc' ? 'desc' : 'asc') } else { setSortKey('requests'); setSortDir('desc') }; setPage(1) }}
-                      >
-                        {t('accounts.requests')} {sortKey === 'requests' ? (sortDir === 'desc' ? '↓' : '↑') : ''}
-                      </TableHead>
-                      <TableHead
-                        className="text-[13px] font-semibold cursor-pointer select-none hover:text-primary transition-colors"
-                        onClick={() => { if (sortKey === 'usage') { setSortDir(d => d === 'asc' ? 'desc' : 'asc') } else { setSortKey('usage'); setSortDir('desc') }; setPage(1) }}
-                      >
-                        {t('accounts.usage')} {sortKey === 'usage' ? (sortDir === 'desc' ? '↓' : '↑') : ''}
-                      </TableHead>
-                      <TableHead
-                        className="text-[13px] font-semibold cursor-pointer select-none hover:text-primary transition-colors"
-                        onClick={() => { if (sortKey === 'importTime') { setSortDir(d => d === 'asc' ? 'desc' : 'asc') } else { setSortKey('importTime'); setSortDir('desc') }; setPage(1) }}
-                      >
-                        {t('accounts.importTime')} {sortKey === 'importTime' ? (sortDir === 'desc' ? '↓' : '↑') : ''}
-                      </TableHead>
-                      <TableHead className="text-[13px] font-semibold">{t('accounts.updatedAt')}</TableHead>
-                      <TableHead className="text-[13px] font-semibold text-right">{t('accounts.actions')}</TableHead>
-                    </TableRow>
-                  </TableHeader>
-                  <TableBody>
-                    {pagedAccounts.map((account, index) => {
-                      const isSelected = selected.has(account.id)
-                      return (
-                        <TableRow key={account.id} className={isSelected ? 'bg-primary/5' : ''}>
-                          <TableCell>
-                            <input
-                              type="checkbox"
-                              className="size-4 cursor-pointer accent-primary"
-                              checked={isSelected}
-                              onChange={() => toggleSelect(account.id)}
-                            />
-                          </TableCell>
-                          <TableCell className="text-[14px] font-mono text-muted-foreground" title={`ID ${account.id}`}>
-                            {(currentPage - 1) * pageSize + index + 1}
-                          </TableCell>
-                          <TableCell className="text-[14px] text-muted-foreground">
-                            <span>{account.openai_responses_api ? formatAccountName(account) : formatCompactEmail(account.email)}</span>
-                            {account.at_only && (
-                              <span className="ml-1.5 inline-flex items-center rounded-md bg-amber-50 px-1.5 py-0.5 text-[10px] font-medium text-amber-700 ring-1 ring-inset ring-amber-600/20 dark:bg-amber-950 dark:text-amber-400 dark:ring-amber-400/20">
-                                AT
-                              </span>
-                            )}
-                            {account.openai_responses_api && (
-                              <span className="ml-1.5 inline-flex items-center rounded-md bg-emerald-50 px-1.5 py-0.5 text-[10px] font-medium text-emerald-700 ring-1 ring-inset ring-emerald-600/20 dark:bg-emerald-950 dark:text-emerald-400 dark:ring-emerald-400/20">
-                                Responses API
-                              </span>
-                            )}
-                            {account.enabled === false && (
-                              <span className="ml-1.5 inline-flex items-center rounded-md bg-zinc-100 px-1.5 py-0.5 text-[10px] font-medium text-zinc-700 ring-1 ring-inset ring-zinc-500/20 dark:bg-zinc-900 dark:text-zinc-300 dark:ring-zinc-400/20">
-                                <PowerOff className="size-2.5 mr-0.5" />{t('accounts.disabled')}
-                              </span>
-                            )}
-                            {account.locked && (
-                              <span className="ml-1.5 inline-flex items-center rounded-md bg-blue-50 px-1.5 py-0.5 text-[10px] font-medium text-blue-700 ring-1 ring-inset ring-blue-600/20 dark:bg-blue-950 dark:text-blue-400 dark:ring-blue-400/20">
-                                <Lock className="size-2.5 mr-0.5" />{t('accounts.lock')}
-                              </span>
-                            )}
-                          </TableCell>
-                          <TableCell>
-                            <PlanBadge planType={account.plan_type} />
-                          </TableCell>
-                          <TableCell>
-                            <div className="space-y-1.5">
-                              <div className="flex min-h-6 items-center gap-2 whitespace-nowrap">
-                                <StatusBadge status={account.status} detail={getAccountRateLimitWindow(account) ?? undefined} />
-                                <AccountStatusCountdown account={account} />
-                              </div>
-                              {account.status === 'error' && account.error_message && (
-                                <div className="max-w-[180px] truncate text-[11px] leading-tight text-red-500" title={account.error_message}>
-                                  {account.error_message}
-                                </div>
-                              )}
-                              {(account.model_cooldowns?.length ?? 0) > 0 && (
-                                <div className="text-[11px] leading-tight text-amber-600">
-                                  model {account.model_cooldowns?.[0]?.model}
-                                  {(account.model_cooldowns?.length ?? 0) > 1 ? ` +${(account.model_cooldowns?.length ?? 1) - 1}` : ''}
-                                </div>
-                              )}
-                              <div className="text-[11px] text-muted-foreground">
-                                {t('accounts.healthSummary', {
-                                  health: formatHealthTier(account.health_tier, t),
-                                  score: Math.round(getDispatchScore(account)),
-                                  concurrency: account.dynamic_concurrency_limit ?? '-',
-                                })}
-                              </div>
-                            </div>
-                          </TableCell>
-                        <TableCell>
-                          <div className="space-y-0.5 text-[13px]">
-                            <div className="flex items-center gap-2">
-                              <span className="text-emerald-600 font-medium">{account.success_requests ?? 0}</span>
-                              <span className="text-muted-foreground">/</span>
-                              <span className="text-red-500 font-medium">{account.error_requests ?? 0}</span>
-                            </div>
-                            {((account.retry_error_requests ?? 0) > 0 || (account.rate_limit_attempts ?? 0) > 0) && (
-                              <div className="text-[11px] text-muted-foreground">
-                                retry {account.retry_error_requests ?? 0} · 429 {account.rate_limit_attempts ?? 0}
-                              </div>
-                            )}
-                          </div>
-                        </TableCell>
-                        <TableCell>
-                          <UsageCell account={account} />
-                        </TableCell>
-                        <TableCell className="text-[13px] text-muted-foreground whitespace-nowrap">{formatBeijingTime(account.created_at)}</TableCell>
-                        <TableCell className="text-[14px] text-muted-foreground">{formatRelativeTime(account.updated_at)}</TableCell>
-                        <TableCell className="text-right">
-                          <div className="flex items-center gap-1 justify-end">
-                            <Button
-                              variant="outline"
-                              size="icon"
-                              className="h-7 w-8 px-0"
-                              onClick={() => openSchedulerEditor(account)}
-                              title={t('accounts.editScheduler')}
-                            >
-                              <Pencil className="size-3.5" />
-                            </Button>
-                            <Button
-                              variant="outline"
-                              size="icon"
-                              className="h-7 w-8 px-0"
-                              onClick={() => setUsageAccount(account)}
-                              title={t('accounts.usageDetail')}
-                            >
-                              <BarChart3 className="size-3.5" />
-                            </Button>
-                            <Button
-                              variant="outline"
-                              size="icon"
-                              className="h-7 w-8 px-0"
-                              onClick={() => setTestingAccount(account)}
-                              title={t('accounts.testConnection')}
-                            >
-                              <Zap className="size-3.5" />
-                            </Button>
-                            <Button
-                              variant="outline"
-                              size="icon"
-                              className="h-7 w-8 px-0"
-                              disabled={refreshingIds.has(account.id) || account.at_only || account.openai_responses_api}
-                              onClick={() => void handleRefresh(account)}
-                              title={(account.at_only || account.openai_responses_api) ? t('accounts.atRefreshDisabled') : t('accounts.refreshAccessToken')}
-                            >
-                              <RefreshCw className={`size-3.5 ${refreshingIds.has(account.id) ? 'animate-spin' : ''}`} />
-                            </Button>
-                            <Button
-                              variant="outline"
-                              size="icon"
-                              className="h-7 w-8 px-0"
-                              disabled={authJsonExportingIds.has(account.id) || account.at_only || account.openai_responses_api}
-                              onClick={() => void handleGenerateAuthJSON(account)}
-                              title={(account.at_only || account.openai_responses_api) ? t('accounts.authJsonDisabled') : t('accounts.generateAuthJson')}
-                            >
-                              <FileJson className="size-3.5" />
-                            </Button>
-                            <Button
-                              variant={account.enabled === false ? 'default' : 'outline'}
-                              size="icon"
-                              className="h-7 w-8 px-0"
-                              onClick={() => void handleToggleEnabled(account)}
-                              title={account.enabled === false ? t('accounts.enableHint') : t('accounts.disableHint')}
-                            >
-                              {account.enabled === false ? <Power className="size-3.5" /> : <PowerOff className="size-3.5" />}
-                            </Button>
-                            <Button
-                              variant={account.locked ? 'default' : 'outline'}
-                              size="icon"
-                              className="h-7 w-8 px-0"
-                              onClick={() => void handleToggleLock(account)}
-                              title={account.locked ? t('accounts.unlockHint') : t('accounts.lockHint')}
-                            >
-                              {account.locked ? <Lock className="size-3.5" /> : <Unlock className="size-3.5" />}
-                            </Button>
-                            <Button
-                              variant="outline"
-                              size="icon"
-                              className="h-7 w-8 px-0"
-                              onClick={() => void handleResetStatus(account)}
-                              title={t('accounts.resetStatusHint')}
-                            >
-                              <RotateCcw className="size-3.5" />
-                            </Button>
-                            <Button
-                              variant="destructive"
-                              size="icon"
-                              className="h-7 w-8 px-0"
-                              onClick={() => void handleDelete(account)}
-                              title={t('accounts.deleteAccount')}
-                            >
-                              <Trash2 className="size-3.5" />
-                            </Button>
-                          </div>
-                        </TableCell>
-                      </TableRow>
-                      )
-                    })}
-                  </TableBody>
-                </Table>
-              </div>
-              <Pagination
-                page={currentPage}
-                totalPages={totalPages}
-                onPageChange={setPage}
-                totalItems={sortedAccounts.length}
-                pageSize={pageSize}
-                pageSizeOptions={pageSizeOptions}
-                onPageSizeChange={(nextPageSize) => {
-                  setPageSize(nextPageSize)
-                  setPage(1)
+              <FolderOpen className="size-3.5" />
+              {t("accounts.groupManage")}
+            </Button>
+            <div className="ml-auto shrink-0">
+              <ColumnSettingsMenu
+                columns={visibleColumns}
+                onToggle={(column) =>
+                  setVisibleColumns((current) => ({
+                    ...current,
+                    [column]: !current[column],
+                  }))
+                }
+                onReset={() =>
+                  setVisibleColumns(getDefaultAccountVisibleColumns())
+                }
+                resetTitle={t("accounts.columnReset")}
+                labels={{
+                  sequence: t("accounts.sequence"),
+                  email: t("accounts.email"),
+                  plan: t("accounts.plan"),
+                  tags: t("accounts.tagsLabel"),
+                  groups: t("accounts.groupsLabel"),
+                  status: t("accounts.status"),
+                  requests: t("accounts.requests"),
+                  usage: t("accounts.usage"),
+                  importTime: t("accounts.importTime"),
+                  updatedAt: t("accounts.updatedAt"),
+                  actions: t("accounts.actions"),
                 }}
+                title={t("accounts.columnSettings")}
               />
-            </StateShell>
-          </CardContent>
-        </Card>
-
-        <Modal
-          show={showAdd}
-          title={t('accounts.addTitle')}
-          contentClassName="sm:max-w-[640px]"
-          onClose={() => {
-            setShowAdd(false)
-            setAddMethod('rt')
-            setOauthStep('generate')
-            setOauthSession(null)
-            setOauthCallbackUrl('')
-            setOauthName('')
-            setOpenAIForm({ base_url: 'https://api.openai.com', api_key: '', models: [], proxy_url: '' })
-            setOpenAIModelDraft('')
-          }}
-          footer={(
-            <>
-              <Button
-                variant="outline"
-                onClick={() => {
-                  setShowAdd(false)
-                  setAddMethod('rt')
-                  setOauthStep('generate')
-                  setOauthSession(null)
-                  setOauthCallbackUrl('')
-                  setOauthName('')
-                  setOpenAIForm({ base_url: 'https://api.openai.com', api_key: '', models: [], proxy_url: '' })
-                  setOpenAIModelDraft('')
-                }}
-              >
-                {t('common.cancel')}
-              </Button>
-              {addMethod === 'rt' ? (
-                <Button onClick={() => void handleAdd()} disabled={submitting || !addForm.refresh_token.trim()}>
-                  {submitting ? t('accounts.adding') : t('accounts.submit')}
+            </div>
+          </div>
+
+          {selected.size > 0 && (
+            <div className="sticky top-2 z-20 mb-4 flex items-center justify-between gap-3 rounded-lg border border-primary/20 bg-card/95 px-3 py-2.5 text-sm font-semibold text-primary shadow-lg backdrop-blur-sm max-lg:flex-col max-lg:items-stretch">
+              <span>{t("common.selected", { count: selected.size })}</span>
+              <div className="flex flex-wrap items-center justify-end gap-1.5 max-lg:justify-start">
+                <Button
+                  variant="outline"
+                  size="sm"
+                  disabled={batchLoading || batchTesting}
+                  onClick={() => void handleBatchRefresh()}
+                >
+                  <RefreshCw
+                    className={`size-3 mr-1 ${batchRefreshing ? "animate-spin" : ""}`}
+                  />
+                  {t("accounts.batchRefresh")}
                 </Button>
-              ) : addMethod === 'at' ? (
-                <Button onClick={() => void handleAddAT()} disabled={submitting || !atForm.access_token.trim()}>
-                  {submitting ? t('accounts.adding') : t('accounts.submit')}
+                <Button
+                  variant="outline"
+                  size="sm"
+                  disabled={batchLoading || batchTesting}
+                  onClick={() => void handleBatchTest(Array.from(selected))}
+                >
+                  <FlaskConical className="size-3 mr-1" />
+                  {batchTesting
+                    ? t("accounts.batchTesting")
+                    : t("accounts.batchTest")}
                 </Button>
-              ) : addMethod === 'openai' ? (
                 <Button
-                  onClick={() => void handleAddOpenAIResponses()}
-                  disabled={submitting || !openAIForm.api_key.trim() || openAIForm.models.length === 0}
+                  variant="outline"
+                  size="sm"
+                  disabled={batchLoading || batchTesting}
+                  onClick={() => void handleBatchEnabled(true)}
                 >
-                  {submitting ? t('accounts.adding') : t('accounts.submit')}
+                  <Power className="size-3 mr-1" />
+                  {t("accounts.enable")}
                 </Button>
-              ) : oauthStep === 'generate' ? (
-                <Button onClick={() => void handleOAuthGenerate()} disabled={oauthGenerating}>
-                  {oauthGenerating ? t('accounts.oauthGenerating') : t('accounts.oauthGenerateBtn')}
+                <Button
+                  variant="outline"
+                  size="sm"
+                  disabled={batchLoading || batchTesting}
+                  onClick={() => void handleBatchEnabled(false)}
+                >
+                  <PowerOff className="size-3 mr-1" />
+                  {t("accounts.disable")}
                 </Button>
-              ) : (
                 <Button
-                  onClick={() => void handleOAuthComplete()}
-                  disabled={oauthCompleting || !oauthCallbackUrl.trim()}
+                  variant="outline"
+                  size="sm"
+                  disabled={batchLoading || batchTesting}
+                  onClick={() => void handleBatchLock(true)}
                 >
-                  {oauthCompleting ? t('accounts.oauthCompleting') : t('accounts.oauthCompleteBtn')}
+                  <Lock className="size-3 mr-1" />
+                  {t("accounts.lock")}
                 </Button>
-              )}
-            </>
+                <Button
+                  variant="outline"
+                  size="sm"
+                  disabled={batchLoading || batchTesting}
+                  onClick={() => void handleBatchLock(false)}
+                >
+                  <Unlock className="size-3 mr-1" />
+                  {t("accounts.unlock")}
+                </Button>
+                <Button
+                  variant="outline"
+                  size="sm"
+                  disabled={batchLoading || batchTesting}
+                  onClick={openBatchMetaEditor}
+                >
+                  <FolderOpen className="size-3 mr-1" />
+                  {t("accounts.batchMetaEdit")}
+                </Button>
+                <Button
+                  variant="outline"
+                  size="sm"
+                  disabled={batchLoading || batchTesting}
+                  onClick={() => void handleBatchResetStatus()}
+                >
+                  <RotateCcw className="size-3 mr-1" />
+                  {t("accounts.batchResetStatus")}
+                </Button>
+                <Button
+                  variant="destructive"
+                  size="sm"
+                  disabled={batchLoading || batchTesting}
+                  onClick={() => void handleBatchDelete()}
+                >
+                  {t("accounts.batchDelete")}
+                </Button>
+                <Button
+                  variant="outline"
+                  size="sm"
+                  onClick={() => setSelected(new Set())}
+                >
+                  {t("accounts.cancelSelection")}
+                </Button>
+              </div>
+            </div>
           )}
-        >
-          {/* Tab switcher */}
-          <div className="flex gap-1 p-1 mb-5 rounded-xl bg-muted/50 border border-border">
-            <button
-              onClick={() => setAddMethod('rt')}
-              className={`flex-1 flex items-center justify-center gap-1.5 rounded-lg py-2 text-sm font-semibold transition-all ${
-                addMethod === 'rt'
-                  ? 'bg-background shadow-sm text-foreground'
-                  : 'text-muted-foreground hover:text-foreground'
-              }`}
-            >
-              <RefreshCw className="size-3.5" />
-              {t('accounts.addMethodRT')}
-            </button>
-            <button
-              onClick={() => setAddMethod('at')}
-              className={`flex-1 flex items-center justify-center gap-1.5 rounded-lg py-2 text-sm font-semibold transition-all ${
-                addMethod === 'at'
-                  ? 'bg-background shadow-sm text-foreground'
-                  : 'text-muted-foreground hover:text-foreground'
-              }`}
-            >
-              <Fingerprint className="size-3.5" />
-              {t('accounts.addMethodAT')}
-            </button>
-            <button
-              onClick={() => setAddMethod('openai')}
-              className={`flex-1 flex items-center justify-center gap-1.5 rounded-lg py-2 text-sm font-semibold transition-all ${
-                addMethod === 'openai'
-                  ? 'bg-background shadow-sm text-foreground'
-                  : 'text-muted-foreground hover:text-foreground'
-              }`}
-            >
-              <KeyRound className="size-3.5" />
-              {t('accounts.addMethodOpenAI')}
-            </button>
-            <button
-              onClick={() => { setAddMethod('oauth'); setOauthStep('generate'); setOauthSession(null); setOauthCallbackUrl('') }}
-              className={`flex-1 flex items-center justify-center gap-1.5 rounded-lg py-2 text-sm font-semibold transition-all ${
-                addMethod === 'oauth'
-                  ? 'bg-background shadow-sm text-foreground'
-                  : 'text-muted-foreground hover:text-foreground'
-              }`}
-            >
-              <KeyRound className="size-3.5" />
-              {t('accounts.addMethodOAuth')}
-            </button>
-          </div>
 
-          {addMethod === 'rt' ? (
-            <div className="space-y-4">
-              <div>
-                <label className="block mb-2 text-sm font-semibold text-muted-foreground">{t('accounts.refreshTokenLabel')} *</label>
-                <textarea
-                  className="w-full min-h-[160px] p-3 border border-input rounded-xl bg-background text-sm resize-y focus:outline-none focus:ring-2 focus:ring-ring"
-                  placeholder={t('accounts.refreshTokenPlaceholder')}
-                  value={addForm.refresh_token}
-                  onChange={(event: ChangeEvent<HTMLTextAreaElement>) =>
-                    setAddForm((form) => ({ ...form, refresh_token: event.target.value }))
-                  }
-                  rows={6}
-                />
-              </div>
-              <div>
-                <label className="block mb-2 text-sm font-semibold text-muted-foreground">{t('accounts.proxyUrl')}</label>
-                <Input
-                  placeholder={t('accounts.proxyUrlPlaceholder')}
-                  value={addForm.proxy_url}
-                  onChange={(event: ChangeEvent<HTMLInputElement>) =>
-                    setAddForm((form) => ({ ...form, proxy_url: event.target.value }))
-                  }
-                />
-              </div>
-            </div>
-          ) : addMethod === 'at' ? (
-            <div className="space-y-4">
-              <div className="rounded-xl border border-amber-200 bg-amber-50 px-4 py-3 text-sm text-amber-800 dark:border-amber-800 dark:bg-amber-950/50 dark:text-amber-300">
-                {t('accounts.atWarning')}
-              </div>
-              <div>
-                <label className="block mb-2 text-sm font-semibold text-muted-foreground">{t('accounts.accessTokenLabel')} *</label>
-                <textarea
-                  className="w-full min-h-[160px] p-3 border border-input rounded-xl bg-background text-sm resize-y focus:outline-none focus:ring-2 focus:ring-ring"
-                  placeholder={t('accounts.accessTokenPlaceholder')}
-                  value={atForm.access_token}
-                  onChange={(event: ChangeEvent<HTMLTextAreaElement>) =>
-                    setAtForm((form) => ({ ...form, access_token: event.target.value }))
-                  }
-                  rows={6}
-                />
-              </div>
-              <div>
-                <label className="block mb-2 text-sm font-semibold text-muted-foreground">{t('accounts.proxyUrl')}</label>
-                <Input
-                  placeholder={t('accounts.proxyUrlPlaceholder')}
-                  value={atForm.proxy_url}
-                  onChange={(event: ChangeEvent<HTMLInputElement>) =>
-                    setAtForm((form) => ({ ...form, proxy_url: event.target.value }))
-                  }
-                />
-              </div>
-            </div>
-          ) : addMethod === 'openai' ? (
-            <div className="space-y-4">
-              <div className="rounded-xl border border-border bg-muted/30 px-4 py-3 text-sm text-muted-foreground">
-                <p className="font-semibold text-foreground mb-1">{t('accounts.openaiResponsesTitle')}</p>
-                <p>{t('accounts.openaiResponsesDesc')}</p>
-              </div>
-              <div>
-                <label className="block mb-2 text-sm font-semibold text-muted-foreground">{t('accounts.openaiNameLabel')}</label>
-                <Input
-                  placeholder={t('accounts.openaiNamePlaceholder')}
-                  value={openAIForm.name ?? ''}
-                  onChange={(event: ChangeEvent<HTMLInputElement>) =>
-                    setOpenAIForm((form) => ({ ...form, name: event.target.value }))
-                  }
-                />
-              </div>
-              <div>
-                <label className="block mb-2 text-sm font-semibold text-muted-foreground">{t('accounts.openaiBaseUrl')} *</label>
-                <Input
-                  placeholder="https://api.openai.com"
-                  value={openAIForm.base_url}
-                  onChange={(event: ChangeEvent<HTMLInputElement>) =>
-                    setOpenAIForm((form) => ({ ...form, base_url: event.target.value }))
-                  }
-                />
-              </div>
-              <div>
-                <label className="block mb-2 text-sm font-semibold text-muted-foreground">{t('accounts.openaiApiKey')} *</label>
-                <Input
-                  type="password"
-                  placeholder="sk-proj-..."
-                  value={openAIForm.api_key}
-                  onChange={(event: ChangeEvent<HTMLInputElement>) =>
-                    setOpenAIForm((form) => ({ ...form, api_key: event.target.value }))
-                  }
+          <Card>
+            <CardContent className="p-4">
+              <StateShell
+                variant="section"
+                isEmpty={accounts.length === 0}
+                emptyTitle={t("accounts.noData")}
+                emptyDescription={t("accounts.noDataDesc")}
+                action={
+                  <Button onClick={() => setShowAdd(true)}>
+                    {t("accounts.addAccount")}
+                  </Button>
+                }
+              >
+                <div className="data-table-shell">
+                  <Table>
+                    <TableHeader>
+                      <TableRow>
+                        <TableHead className="w-10">
+                          <input
+                            ref={selectAllRef}
+                            type="checkbox"
+                            className="size-4 cursor-pointer accent-primary"
+                            checked={allPageSelected}
+                            onChange={toggleSelectAll}
+                          />
+                        </TableHead>
+                        {visibleColumns.sequence && (
+                          <TableHead className="text-[13px] font-semibold">
+                            {t("accounts.sequence")}
+                          </TableHead>
+                        )}
+                        {visibleColumns.email && (
+                          <TableHead className="text-[13px] font-semibold">
+                            {t("accounts.email")}
+                          </TableHead>
+                        )}
+                        {visibleColumns.tags && (
+                          <TableHead className="text-[13px] font-semibold">
+                            {t("accounts.tagsLabel")}
+                          </TableHead>
+                        )}
+                        {visibleColumns.groups && (
+                          <TableHead className="text-[13px] font-semibold">
+                            {t("accounts.groupsLabel")}
+                          </TableHead>
+                        )}
+                        {visibleColumns.plan && (
+                          <TableHead className="text-[13px] font-semibold">
+                            {t("accounts.plan")}
+                          </TableHead>
+                        )}
+                        {visibleColumns.status && (
+                          <TableHead className="text-[13px] font-semibold">
+                            {t("accounts.status")}
+                          </TableHead>
+                        )}
+                        {visibleColumns.requests && (
+                          <TableHead
+                            className="text-[13px] font-semibold cursor-pointer select-none hover:text-primary transition-colors"
+                            onClick={() => {
+                              if (sortKey === "requests") {
+                                setSortDir((d) =>
+                                  d === "asc" ? "desc" : "asc",
+                                );
+                              } else {
+                                setSortKey("requests");
+                                setSortDir("desc");
+                              }
+                              setPage(1);
+                            }}
+                          >
+                            {t("accounts.requests")}{" "}
+                            {sortKey === "requests"
+                              ? sortDir === "desc"
+                                ? "↓"
+                                : "↑"
+                              : ""}
+                          </TableHead>
+                        )}
+                        {visibleColumns.usage && (
+                          <TableHead
+                            className="text-[13px] font-semibold cursor-pointer select-none hover:text-primary transition-colors"
+                            onClick={() => {
+                              if (sortKey === "usage") {
+                                setSortDir((d) =>
+                                  d === "asc" ? "desc" : "asc",
+                                );
+                              } else {
+                                setSortKey("usage");
+                                setSortDir("desc");
+                              }
+                              setPage(1);
+                            }}
+                          >
+                            {t("accounts.usage")}{" "}
+                            {sortKey === "usage"
+                              ? sortDir === "desc"
+                                ? "↓"
+                                : "↑"
+                              : ""}
+                          </TableHead>
+                        )}
+                        {visibleColumns.importTime && (
+                          <TableHead
+                            className="text-[13px] font-semibold cursor-pointer select-none hover:text-primary transition-colors"
+                            onClick={() => {
+                              if (sortKey === "importTime") {
+                                setSortDir((d) =>
+                                  d === "asc" ? "desc" : "asc",
+                                );
+                              } else {
+                                setSortKey("importTime");
+                                setSortDir("desc");
+                              }
+                              setPage(1);
+                            }}
+                          >
+                            {t("accounts.importTime")}{" "}
+                            {sortKey === "importTime"
+                              ? sortDir === "desc"
+                                ? "↓"
+                                : "↑"
+                              : ""}
+                          </TableHead>
+                        )}
+                        {visibleColumns.updatedAt && (
+                          <TableHead className="text-[13px] font-semibold">
+                            {t("accounts.updatedAt")}
+                          </TableHead>
+                        )}
+                        {visibleColumns.actions && (
+                          <TableHead className="text-[13px] font-semibold text-right">
+                            {t("accounts.actions")}
+                          </TableHead>
+                        )}
+                      </TableRow>
+                    </TableHeader>
+                    <TableBody>
+                      {pagedAccounts.map((account, index) => {
+                        const isSelected = selected.has(account.id);
+                        return (
+                          <TableRow
+                            key={account.id}
+                            className={isSelected ? "bg-primary/5" : ""}
+                          >
+                            <TableCell>
+                              <input
+                                type="checkbox"
+                                className="size-4 cursor-pointer accent-primary"
+                                checked={isSelected}
+                                onChange={() => toggleSelect(account.id)}
+                              />
+                            </TableCell>
+                            {visibleColumns.sequence && (
+                              <TableCell
+                                className="text-[14px] font-mono text-muted-foreground"
+                                title={`ID ${account.id}`}
+                              >
+                                {(currentPage - 1) * pageSize + index + 1}
+                              </TableCell>
+                            )}
+                            {visibleColumns.email && (
+                              <TableCell className="text-[14px] text-muted-foreground">
+                                <span>
+                                  {account.openai_responses_api
+                                    ? formatAccountName(account)
+                                    : formatCompactEmail(account.email)}
+                                </span>
+                                {account.at_only && (
+                                  <span className="ml-1.5 inline-flex items-center rounded-md bg-amber-50 px-1.5 py-0.5 text-[10px] font-medium text-amber-700 ring-1 ring-inset ring-amber-600/20 dark:bg-amber-950 dark:text-amber-400 dark:ring-amber-400/20">
+                                    AT
+                                  </span>
+                                )}
+                                {account.openai_responses_api && (
+                                  <span className="ml-1.5 inline-flex items-center rounded-md bg-emerald-50 px-1.5 py-0.5 text-[10px] font-medium text-emerald-700 ring-1 ring-inset ring-emerald-600/20 dark:bg-emerald-950 dark:text-emerald-400 dark:ring-emerald-400/20">
+                                    Responses API
+                                  </span>
+                                )}
+                                {account.enabled === false && (
+                                  <span className="ml-1.5 inline-flex items-center rounded-md bg-zinc-100 px-1.5 py-0.5 text-[10px] font-medium text-zinc-700 ring-1 ring-inset ring-zinc-500/20 dark:bg-zinc-900 dark:text-zinc-300 dark:ring-zinc-400/20">
+                                    <PowerOff className="size-2.5 mr-0.5" />
+                                    {t("accounts.disabled")}
+                                  </span>
+                                )}
+                                {account.locked && (
+                                  <span className="ml-1.5 inline-flex items-center rounded-md bg-blue-50 px-1.5 py-0.5 text-[10px] font-medium text-blue-700 ring-1 ring-inset ring-blue-600/20 dark:bg-blue-950 dark:text-blue-400 dark:ring-blue-400/20">
+                                    <Lock className="size-2.5 mr-0.5" />
+                                    {t("accounts.lock")}
+                                  </span>
+                                )}
+                              </TableCell>
+                            )}
+                            {visibleColumns.tags && (
+                              <TableCell className="min-w-[120px]">
+                                <ChipList
+                                  items={account.tags ?? []}
+                                  tone="purple"
+                                />
+                              </TableCell>
+                            )}
+                            {visibleColumns.groups && (
+                              <TableCell className="min-w-[140px]">
+                                <GroupChipList
+                                  groups={resolveAccountGroups(
+                                    account.group_ids ?? [],
+                                    allGroups,
+                                  )}
+                                />
+                              </TableCell>
+                            )}
+                            {visibleColumns.plan && (
+                              <TableCell>
+                                <PlanBadge planType={account.plan_type} />
+                              </TableCell>
+                            )}
+                            {visibleColumns.status && (
+                              <TableCell>
+                                <div className="space-y-1.5">
+                                  <div className="flex min-h-6 items-center gap-2 whitespace-nowrap">
+                                    <StatusBadge
+                                      status={account.status}
+                                      detail={
+                                        getAccountRateLimitWindow(account) ??
+                                        undefined
+                                      }
+                                    />
+                                    <AccountStatusCountdown account={account} />
+                                  </div>
+                                  {account.status === "error" &&
+                                    account.error_message && (
+                                      <div
+                                        className="max-w-[180px] truncate text-[11px] leading-tight text-red-500"
+                                        title={account.error_message}
+                                      >
+                                        {account.error_message}
+                                      </div>
+                                    )}
+                                  {(account.model_cooldowns?.length ?? 0) >
+                                    0 && (
+                                    <div className="text-[11px] leading-tight text-amber-600">
+                                      model{" "}
+                                      {account.model_cooldowns?.[0]?.model}
+                                      {(account.model_cooldowns?.length ?? 0) >
+                                      1
+                                        ? ` +${(account.model_cooldowns?.length ?? 1) - 1}`
+                                        : ""}
+                                    </div>
+                                  )}
+                                  <div className="text-[11px] text-muted-foreground">
+                                    {t("accounts.healthSummary", {
+                                      health: formatHealthTier(
+                                        account.health_tier,
+                                        t,
+                                      ),
+                                      score: Math.round(
+                                        getDispatchScore(account),
+                                      ),
+                                      concurrency:
+                                        account.dynamic_concurrency_limit ??
+                                        "-",
+                                    })}
+                                  </div>
+                                </div>
+                              </TableCell>
+                            )}
+                            {visibleColumns.requests && (
+                              <TableCell>
+                                <div className="space-y-0.5 text-[13px]">
+                                  <div className="flex items-center gap-2">
+                                    <span className="text-emerald-600 font-medium">
+                                      {account.success_requests ?? 0}
+                                    </span>
+                                    <span className="text-muted-foreground">
+                                      /
+                                    </span>
+                                    <span className="text-red-500 font-medium">
+                                      {account.error_requests ?? 0}
+                                    </span>
+                                  </div>
+                                  {((account.retry_error_requests ?? 0) > 0 ||
+                                    (account.rate_limit_attempts ?? 0) > 0) && (
+                                    <div className="text-[11px] text-muted-foreground">
+                                      retry {account.retry_error_requests ?? 0}{" "}
+                                      · 429 {account.rate_limit_attempts ?? 0}
+                                    </div>
+                                  )}
+                                </div>
+                              </TableCell>
+                            )}
+                            {visibleColumns.usage && (
+                              <TableCell>
+                                <UsageCell account={account} />
+                              </TableCell>
+                            )}
+                            {visibleColumns.importTime && (
+                              <TableCell className="text-[13px] text-muted-foreground whitespace-nowrap">
+                                {formatBeijingTime(account.created_at)}
+                              </TableCell>
+                            )}
+                            {visibleColumns.updatedAt && (
+                              <TableCell className="text-[14px] text-muted-foreground">
+                                {formatRelativeTime(account.updated_at)}
+                              </TableCell>
+                            )}
+                            {visibleColumns.actions && (
+                              <TableCell className="text-right">
+                                <div className="flex items-center gap-1 justify-end">
+                                  <Button
+                                    variant="outline"
+                                    size="icon"
+                                    className="h-7 w-8 px-0"
+                                    onClick={() => openSchedulerEditor(account)}
+                                    title={t("accounts.editScheduler")}
+                                  >
+                                    <Pencil className="size-3.5" />
+                                  </Button>
+                                  <Button
+                                    variant="outline"
+                                    size="icon"
+                                    className="h-7 w-8 px-0"
+                                    onClick={() => setUsageAccount(account)}
+                                    title={t("accounts.usageDetail")}
+                                  >
+                                    <BarChart3 className="size-3.5" />
+                                  </Button>
+                                  <Button
+                                    variant="outline"
+                                    size="icon"
+                                    className="h-7 w-8 px-0"
+                                    onClick={() => setTestingAccount(account)}
+                                    title={t("accounts.testConnection")}
+                                  >
+                                    <Zap className="size-3.5" />
+                                  </Button>
+                                  <Button
+                                    variant="outline"
+                                    size="icon"
+                                    className="h-7 w-8 px-0"
+                                    disabled={
+                                      refreshingIds.has(account.id) ||
+                                      account.at_only ||
+                                      account.openai_responses_api
+                                    }
+                                    onClick={() => void handleRefresh(account)}
+                                    title={
+                                      account.at_only ||
+                                      account.openai_responses_api
+                                        ? t("accounts.atRefreshDisabled")
+                                        : t("accounts.refreshAccessToken")
+                                    }
+                                  >
+                                    <RefreshCw
+                                      className={`size-3.5 ${refreshingIds.has(account.id) ? "animate-spin" : ""}`}
+                                    />
+                                  </Button>
+                                  <Button
+                                    variant="outline"
+                                    size="icon"
+                                    className="h-7 w-8 px-0"
+                                    disabled={
+                                      authJsonExportingIds.has(account.id) ||
+                                      account.at_only ||
+                                      account.openai_responses_api
+                                    }
+                                    onClick={() =>
+                                      void handleGenerateAuthJSON(account)
+                                    }
+                                    title={
+                                      account.at_only ||
+                                      account.openai_responses_api
+                                        ? t("accounts.authJsonDisabled")
+                                        : t("accounts.generateAuthJson")
+                                    }
+                                  >
+                                    <FileJson className="size-3.5" />
+                                  </Button>
+                                  <Button
+                                    variant={
+                                      account.enabled === false
+                                        ? "default"
+                                        : "outline"
+                                    }
+                                    size="icon"
+                                    className="h-7 w-8 px-0"
+                                    onClick={() =>
+                                      void handleToggleEnabled(account)
+                                    }
+                                    title={
+                                      account.enabled === false
+                                        ? t("accounts.enableHint")
+                                        : t("accounts.disableHint")
+                                    }
+                                  >
+                                    {account.enabled === false ? (
+                                      <Power className="size-3.5" />
+                                    ) : (
+                                      <PowerOff className="size-3.5" />
+                                    )}
+                                  </Button>
+                                  <Button
+                                    variant={
+                                      account.locked ? "default" : "outline"
+                                    }
+                                    size="icon"
+                                    className="h-7 w-8 px-0"
+                                    onClick={() =>
+                                      void handleToggleLock(account)
+                                    }
+                                    title={
+                                      account.locked
+                                        ? t("accounts.unlockHint")
+                                        : t("accounts.lockHint")
+                                    }
+                                  >
+                                    {account.locked ? (
+                                      <Lock className="size-3.5" />
+                                    ) : (
+                                      <Unlock className="size-3.5" />
+                                    )}
+                                  </Button>
+                                  <Button
+                                    variant="outline"
+                                    size="icon"
+                                    className="h-7 w-8 px-0"
+                                    onClick={() =>
+                                      void handleResetStatus(account)
+                                    }
+                                    title={t("accounts.resetStatusHint")}
+                                  >
+                                    <RotateCcw className="size-3.5" />
+                                  </Button>
+                                  <Button
+                                    variant="destructive"
+                                    size="icon"
+                                    className="h-7 w-8 px-0"
+                                    onClick={() => void handleDelete(account)}
+                                    title={t("accounts.deleteAccount")}
+                                  >
+                                    <Trash2 className="size-3.5" />
+                                  </Button>
+                                </div>
+                              </TableCell>
+                            )}
+                          </TableRow>
+                        );
+                      })}
+                    </TableBody>
+                  </Table>
+                </div>
+                <Pagination
+                  page={currentPage}
+                  totalPages={totalPages}
+                  onPageChange={setPage}
+                  totalItems={sortedAccounts.length}
+                  pageSize={pageSize}
+                  pageSizeOptions={pageSizeOptions}
+                  onPageSizeChange={(nextPageSize) => {
+                    setPageSize(nextPageSize);
+                    setPage(1);
+                  }}
                 />
-              </div>
-              <div>
-                <div className="mb-2 flex items-center justify-between gap-2">
-                  <label className="text-sm font-semibold text-muted-foreground">{t('accounts.openaiModels')} *</label>
+              </StateShell>
+            </CardContent>
+          </Card>
+
+          <Modal
+            show={showAdd}
+            title={t("accounts.addTitle")}
+            contentClassName="sm:max-w-[640px]"
+            onClose={() => {
+              setShowAdd(false);
+              setAddMethod("rt");
+              setOauthStep("generate");
+              setOauthSession(null);
+              setOauthCallbackUrl("");
+              setOauthName("");
+              setOpenAIForm({
+                base_url: "https://api.openai.com",
+                api_key: "",
+                models: [],
+                proxy_url: "",
+              });
+              setOpenAIModelDraft("");
+            }}
+            footer={
+              <>
+                <Button
+                  variant="outline"
+                  onClick={() => {
+                    setShowAdd(false);
+                    setAddMethod("rt");
+                    setOauthStep("generate");
+                    setOauthSession(null);
+                    setOauthCallbackUrl("");
+                    setOauthName("");
+                    setOpenAIForm({
+                      base_url: "https://api.openai.com",
+                      api_key: "",
+                      models: [],
+                      proxy_url: "",
+                    });
+                    setOpenAIModelDraft("");
+                  }}
+                >
+                  {t("common.cancel")}
+                </Button>
+                {addMethod === "rt" ? (
                   <Button
-                    type="button"
-                    variant="outline"
-                    size="sm"
-                    onClick={() => void handleFetchOpenAIModels()}
-                    disabled={openAIModelsLoading || !openAIForm.api_key.trim()}
+                    onClick={() => void handleAdd()}
+                    disabled={submitting || !addForm.refresh_token.trim()}
+                  >
+                    {submitting ? t("accounts.adding") : t("accounts.submit")}
+                  </Button>
+                ) : addMethod === "at" ? (
+                  <Button
+                    onClick={() => void handleAddAT()}
+                    disabled={submitting || !atForm.access_token.trim()}
+                  >
+                    {submitting ? t("accounts.adding") : t("accounts.submit")}
+                  </Button>
+                ) : addMethod === "openai" ? (
+                  <Button
+                    onClick={() => void handleAddOpenAIResponses()}
+                    disabled={
+                      submitting ||
+                      !openAIForm.api_key.trim() ||
+                      openAIForm.models.length === 0
+                    }
+                  >
+                    {submitting ? t("accounts.adding") : t("accounts.submit")}
+                  </Button>
+                ) : oauthStep === "generate" ? (
+                  <Button
+                    onClick={() => void handleOAuthGenerate()}
+                    disabled={oauthGenerating}
                   >
-                    <RefreshCw className={`size-3.5 ${openAIModelsLoading ? 'animate-spin' : ''}`} />
-                    {openAIModelsLoading ? t('accounts.openaiModelsFetching') : t('accounts.openaiModelsFetch')}
+                    {oauthGenerating
+                      ? t("accounts.oauthGenerating")
+                      : t("accounts.oauthGenerateBtn")}
                   </Button>
+                ) : (
+                  <Button
+                    onClick={() => void handleOAuthComplete()}
+                    disabled={oauthCompleting || !oauthCallbackUrl.trim()}
+                  >
+                    {oauthCompleting
+                      ? t("accounts.oauthCompleting")
+                      : t("accounts.oauthCompleteBtn")}
+                  </Button>
+                )}
+              </>
+            }
+          >
+            {/* Tab switcher */}
+            <div className="flex gap-1 p-1 mb-5 rounded-xl bg-muted/50 border border-border">
+              <button
+                onClick={() => setAddMethod("rt")}
+                className={`flex-1 flex items-center justify-center gap-1.5 rounded-lg py-2 text-sm font-semibold transition-all ${
+                  addMethod === "rt"
+                    ? "bg-background shadow-sm text-foreground"
+                    : "text-muted-foreground hover:text-foreground"
+                }`}
+              >
+                <RefreshCw className="size-3.5" />
+                {t("accounts.addMethodRT")}
+              </button>
+              <button
+                onClick={() => setAddMethod("at")}
+                className={`flex-1 flex items-center justify-center gap-1.5 rounded-lg py-2 text-sm font-semibold transition-all ${
+                  addMethod === "at"
+                    ? "bg-background shadow-sm text-foreground"
+                    : "text-muted-foreground hover:text-foreground"
+                }`}
+              >
+                <Fingerprint className="size-3.5" />
+                {t("accounts.addMethodAT")}
+              </button>
+              <button
+                onClick={() => setAddMethod("openai")}
+                className={`flex-1 flex items-center justify-center gap-1.5 rounded-lg py-2 text-sm font-semibold transition-all ${
+                  addMethod === "openai"
+                    ? "bg-background shadow-sm text-foreground"
+                    : "text-muted-foreground hover:text-foreground"
+                }`}
+              >
+                <KeyRound className="size-3.5" />
+                {t("accounts.addMethodOpenAI")}
+              </button>
+              <button
+                onClick={() => {
+                  setAddMethod("oauth");
+                  setOauthStep("generate");
+                  setOauthSession(null);
+                  setOauthCallbackUrl("");
+                }}
+                className={`flex-1 flex items-center justify-center gap-1.5 rounded-lg py-2 text-sm font-semibold transition-all ${
+                  addMethod === "oauth"
+                    ? "bg-background shadow-sm text-foreground"
+                    : "text-muted-foreground hover:text-foreground"
+                }`}
+              >
+                <KeyRound className="size-3.5" />
+                {t("accounts.addMethodOAuth")}
+              </button>
+            </div>
+
+            {addMethod === "rt" ? (
+              <div className="space-y-4">
+                <div>
+                  <label className="block mb-2 text-sm font-semibold text-muted-foreground">
+                    {t("accounts.refreshTokenLabel")} *
+                  </label>
+                  <textarea
+                    className="w-full min-h-[160px] p-3 border border-input rounded-xl bg-background text-sm resize-y focus:outline-none focus:ring-2 focus:ring-ring"
+                    placeholder={t("accounts.refreshTokenPlaceholder")}
+                    value={addForm.refresh_token}
+                    onChange={(event: ChangeEvent<HTMLTextAreaElement>) =>
+                      setAddForm((form) => ({
+                        ...form,
+                        refresh_token: event.target.value,
+                      }))
+                    }
+                    rows={6}
+                  />
                 </div>
-                <div className="mb-3 flex gap-2">
+                <div>
+                  <label className="block mb-2 text-sm font-semibold text-muted-foreground">
+                    {t("accounts.proxyUrl")}
+                  </label>
                   <Input
-                    placeholder={t('accounts.openaiModelsPlaceholder')}
-                    value={openAIModelDraft}
-                    onChange={(event: ChangeEvent<HTMLInputElement>) => setOpenAIModelDraft(event.target.value)}
-                    onKeyDown={(event) => {
-                      if (event.key === 'Enter') {
-                        event.preventDefault()
-                        addOpenAIModelValues(openAIModelDraft)
-                      }
-                    }}
-                    onPaste={(event) => {
-                      const pasted = event.clipboardData.getData('text')
-                      if (parseModelTokens(pasted).length > 1) {
-                        event.preventDefault()
-                        addOpenAIModelValues(pasted)
-                      }
-                    }}
+                    placeholder={t("accounts.proxyUrlPlaceholder")}
+                    value={addForm.proxy_url}
+                    onChange={(event: ChangeEvent<HTMLInputElement>) =>
+                      setAddForm((form) => ({
+                        ...form,
+                        proxy_url: event.target.value,
+                      }))
+                    }
                   />
-                  <Button type="button" variant="outline" onClick={() => addOpenAIModelValues(openAIModelDraft)} disabled={!openAIModelDraft.trim()}>
-                    <Plus className="size-3.5" />
-                    {t('accounts.openaiModelsAdd')}
-                  </Button>
                 </div>
-                <ModelChipGrid
-                  models={openAIForm.models}
-                  onRemove={removeOpenAIModel}
-                  emptyLabel={t('accounts.openaiModelsEmpty')}
-                />
-                <p className="mt-1.5 text-xs text-muted-foreground">
-                  {t('accounts.openaiModelsHint', { count: openAIForm.models.length })}
-                </p>
               </div>
-              <div>
-                <label className="block mb-2 text-sm font-semibold text-muted-foreground">{t('accounts.proxyUrl')}</label>
-                <Input
-                  placeholder={t('accounts.proxyUrlPlaceholder')}
-                  value={openAIForm.proxy_url}
-                  onChange={(event: ChangeEvent<HTMLInputElement>) =>
-                    setOpenAIForm((form) => ({ ...form, proxy_url: event.target.value }))
-                  }
-                />
+            ) : addMethod === "at" ? (
+              <div className="space-y-4">
+                <div className="rounded-xl border border-amber-200 bg-amber-50 px-4 py-3 text-sm text-amber-800 dark:border-amber-800 dark:bg-amber-950/50 dark:text-amber-300">
+                  {t("accounts.atWarning")}
+                </div>
+                <div>
+                  <label className="block mb-2 text-sm font-semibold text-muted-foreground">
+                    {t("accounts.accessTokenLabel")} *
+                  </label>
+                  <textarea
+                    className="w-full min-h-[160px] p-3 border border-input rounded-xl bg-background text-sm resize-y focus:outline-none focus:ring-2 focus:ring-ring"
+                    placeholder={t("accounts.accessTokenPlaceholder")}
+                    value={atForm.access_token}
+                    onChange={(event: ChangeEvent<HTMLTextAreaElement>) =>
+                      setAtForm((form) => ({
+                        ...form,
+                        access_token: event.target.value,
+                      }))
+                    }
+                    rows={6}
+                  />
+                </div>
+                <div>
+                  <label className="block mb-2 text-sm font-semibold text-muted-foreground">
+                    {t("accounts.proxyUrl")}
+                  </label>
+                  <Input
+                    placeholder={t("accounts.proxyUrlPlaceholder")}
+                    value={atForm.proxy_url}
+                    onChange={(event: ChangeEvent<HTMLInputElement>) =>
+                      setAtForm((form) => ({
+                        ...form,
+                        proxy_url: event.target.value,
+                      }))
+                    }
+                  />
+                </div>
               </div>
-            </div>
-          ) : (
-            <div className="space-y-5">
-              {oauthStep === 'generate' ? (
-                <>
-                  <div className="rounded-xl border border-border bg-muted/30 px-4 py-3 text-sm text-muted-foreground">
-                    <p className="font-semibold text-foreground mb-1">{t('accounts.oauthStep1Title')}</p>
-                    <p>{t('accounts.oauthStep1Desc')}</p>
+            ) : addMethod === "openai" ? (
+              <div className="space-y-4">
+                <div className="rounded-xl border border-border bg-muted/30 px-4 py-3 text-sm text-muted-foreground">
+                  <p className="font-semibold text-foreground mb-1">
+                    {t("accounts.openaiResponsesTitle")}
+                  </p>
+                  <p>{t("accounts.openaiResponsesDesc")}</p>
+                </div>
+                <div>
+                  <label className="block mb-2 text-sm font-semibold text-muted-foreground">
+                    {t("accounts.openaiNameLabel")}
+                  </label>
+                  <Input
+                    placeholder={t("accounts.openaiNamePlaceholder")}
+                    value={openAIForm.name ?? ""}
+                    onChange={(event: ChangeEvent<HTMLInputElement>) =>
+                      setOpenAIForm((form) => ({
+                        ...form,
+                        name: event.target.value,
+                      }))
+                    }
+                  />
+                </div>
+                <div>
+                  <label className="block mb-2 text-sm font-semibold text-muted-foreground">
+                    {t("accounts.openaiBaseUrl")} *
+                  </label>
+                  <Input
+                    placeholder="https://api.openai.com"
+                    value={openAIForm.base_url}
+                    onChange={(event: ChangeEvent<HTMLInputElement>) =>
+                      setOpenAIForm((form) => ({
+                        ...form,
+                        base_url: event.target.value,
+                      }))
+                    }
+                  />
+                </div>
+                <div>
+                  <label className="block mb-2 text-sm font-semibold text-muted-foreground">
+                    {t("accounts.openaiApiKey")} *
+                  </label>
+                  <Input
+                    type="password"
+                    placeholder="sk-proj-..."
+                    value={openAIForm.api_key}
+                    onChange={(event: ChangeEvent<HTMLInputElement>) =>
+                      setOpenAIForm((form) => ({
+                        ...form,
+                        api_key: event.target.value,
+                      }))
+                    }
+                  />
+                </div>
+                <div>
+                  <div className="mb-2 flex items-center justify-between gap-2">
+                    <label className="text-sm font-semibold text-muted-foreground">
+                      {t("accounts.openaiModels")} *
+                    </label>
+                    <Button
+                      type="button"
+                      variant="outline"
+                      size="sm"
+                      onClick={() => void handleFetchOpenAIModels()}
+                      disabled={
+                        openAIModelsLoading || !openAIForm.api_key.trim()
+                      }
+                    >
+                      <RefreshCw
+                        className={`size-3.5 ${openAIModelsLoading ? "animate-spin" : ""}`}
+                      />
+                      {openAIModelsLoading
+                        ? t("accounts.openaiModelsFetching")
+                        : t("accounts.openaiModelsFetch")}
+                    </Button>
                   </div>
-                  <div>
-                    <label className="block mb-2 text-sm font-semibold text-muted-foreground">{t('accounts.oauthNameLabel')}</label>
+                  <div className="mb-3 flex gap-2">
                     <Input
-                      placeholder={t('accounts.oauthNamePlaceholder')}
-                      value={oauthName}
-                      onChange={(e: ChangeEvent<HTMLInputElement>) => setOauthName(e.target.value)}
+                      placeholder={t("accounts.openaiModelsPlaceholder")}
+                      value={openAIModelDraft}
+                      onChange={(event: ChangeEvent<HTMLInputElement>) =>
+                        setOpenAIModelDraft(event.target.value)
+                      }
+                      onKeyDown={(event) => {
+                        if (event.key === "Enter") {
+                          event.preventDefault();
+                          addOpenAIModelValues(openAIModelDraft);
+                        }
+                      }}
+                      onPaste={(event) => {
+                        const pasted = event.clipboardData.getData("text");
+                        if (parseModelTokens(pasted).length > 1) {
+                          event.preventDefault();
+                          addOpenAIModelValues(pasted);
+                        }
+                      }}
                     />
+                    <Button
+                      type="button"
+                      variant="outline"
+                      onClick={() => addOpenAIModelValues(openAIModelDraft)}
+                      disabled={!openAIModelDraft.trim()}
+                    >
+                      <Plus className="size-3.5" />
+                      {t("accounts.openaiModelsAdd")}
+                    </Button>
                   </div>
-                  <div>
-                    <label className="block mb-2 text-sm font-semibold text-muted-foreground">{t('accounts.oauthProxyUrl')}</label>
-                    <Input
-                      placeholder={t('accounts.oauthProxyUrlPlaceholder')}
-                      value={oauthProxyUrl}
-                      onChange={(e: ChangeEvent<HTMLInputElement>) => setOauthProxyUrl(e.target.value)}
-                    />
+                  <ModelChipGrid
+                    models={openAIForm.models}
+                    onRemove={removeOpenAIModel}
+                    emptyLabel={t("accounts.openaiModelsEmpty")}
+                  />
+                  <p className="mt-1.5 text-xs text-muted-foreground">
+                    {t("accounts.openaiModelsHint", {
+                      count: openAIForm.models.length,
+                    })}
+                  </p>
+                </div>
+                <div>
+                  <label className="block mb-2 text-sm font-semibold text-muted-foreground">
+                    {t("accounts.proxyUrl")}
+                  </label>
+                  <Input
+                    placeholder={t("accounts.proxyUrlPlaceholder")}
+                    value={openAIForm.proxy_url}
+                    onChange={(event: ChangeEvent<HTMLInputElement>) =>
+                      setOpenAIForm((form) => ({
+                        ...form,
+                        proxy_url: event.target.value,
+                      }))
+                    }
+                  />
+                </div>
+              </div>
+            ) : (
+              <div className="space-y-5">
+                {oauthStep === "generate" ? (
+                  <>
+                    <div className="rounded-xl border border-border bg-muted/30 px-4 py-3 text-sm text-muted-foreground">
+                      <p className="font-semibold text-foreground mb-1">
+                        {t("accounts.oauthStep1Title")}
+                      </p>
+                      <p>{t("accounts.oauthStep1Desc")}</p>
+                    </div>
+                    <div>
+                      <label className="block mb-2 text-sm font-semibold text-muted-foreground">
+                        {t("accounts.oauthNameLabel")}
+                      </label>
+                      <Input
+                        placeholder={t("accounts.oauthNamePlaceholder")}
+                        value={oauthName}
+                        onChange={(e: ChangeEvent<HTMLInputElement>) =>
+                          setOauthName(e.target.value)
+                        }
+                      />
+                    </div>
+                    <div>
+                      <label className="block mb-2 text-sm font-semibold text-muted-foreground">
+                        {t("accounts.oauthProxyUrl")}
+                      </label>
+                      <Input
+                        placeholder={t("accounts.oauthProxyUrlPlaceholder")}
+                        value={oauthProxyUrl}
+                        onChange={(e: ChangeEvent<HTMLInputElement>) =>
+                          setOauthProxyUrl(e.target.value)
+                        }
+                      />
+                    </div>
+                  </>
+                ) : (
+                  <>
+                    <div className="rounded-xl border border-border bg-muted/30 px-4 py-3 text-sm text-muted-foreground">
+                      <p className="font-semibold text-foreground mb-1">
+                        {t("accounts.oauthStep2Title")}
+                      </p>
+                      <p>{t("accounts.oauthStep2Desc")}</p>
+                    </div>
+                    {oauthSession && (
+                      <div className="rounded-xl border border-primary/30 bg-primary/5 px-4 py-3">
+                        <p className="text-xs font-semibold text-muted-foreground mb-2">
+                          {t("accounts.oauthOpenLink")}
+                        </p>
+                        <a
+                          href={oauthSession.auth_url}
+                          target="_blank"
+                          rel="noopener noreferrer"
+                          className="inline-flex items-center gap-1.5 text-sm font-semibold text-primary hover:underline break-all"
+                        >
+                          <ExternalLink className="size-3.5 shrink-0" />
+                          {t("accounts.oauthOpenLink")}
+                        </a>
+                      </div>
+                    )}
+                    <div>
+                      <label className="block mb-2 text-sm font-semibold text-muted-foreground">
+                        {t("accounts.oauthCallbackUrlLabel")}
+                      </label>
+                      <Input
+                        placeholder={t("accounts.oauthCallbackUrlPlaceholder")}
+                        value={oauthCallbackUrl}
+                        onChange={(e: ChangeEvent<HTMLInputElement>) =>
+                          setOauthCallbackUrl(e.target.value)
+                        }
+                      />
+                      <p className="mt-1.5 text-xs text-muted-foreground">
+                        {t("accounts.oauthCallbackUrlHint")}
+                      </p>
+                    </div>
+                    <button
+                      onClick={() => {
+                        setOauthStep("generate");
+                        setOauthSession(null);
+                        setOauthCallbackUrl("");
+                      }}
+                      className="text-xs text-muted-foreground hover:text-foreground underline underline-offset-2"
+                    >
+                      {t("accounts.oauthRestart")}
+                    </button>
+                  </>
+                )}
+              </div>
+            )}
+          </Modal>
+
+          <Modal
+            show={showImportPicker}
+            title={t("accounts.importTitle")}
+            contentClassName="sm:max-w-[640px]"
+            onClose={() => setShowImportPicker(false)}
+          >
+            <div className="grid grid-cols-2 gap-3">
+              <button
+                className="flex items-center gap-3 rounded-xl border border-border px-4 py-3 text-left hover:bg-muted/50 transition-colors"
+                onClick={() => {
+                  setShowImportPicker(false);
+                  fileInputRef.current?.click();
+                }}
+              >
+                <FileText className="size-5 shrink-0 text-muted-foreground" />
+                <div>
+                  <div className="text-sm font-medium">
+                    {t("accounts.importTxt")}
                   </div>
-                </>
-              ) : (
-                <>
-                  <div className="rounded-xl border border-border bg-muted/30 px-4 py-3 text-sm text-muted-foreground">
-                    <p className="font-semibold text-foreground mb-1">{t('accounts.oauthStep2Title')}</p>
-                    <p>{t('accounts.oauthStep2Desc')}</p>
+                  <div className="text-[11px] text-muted-foreground">
+                    {t("accounts.importTxtDesc")}
                   </div>
-                  {oauthSession && (
-                    <div className="rounded-xl border border-primary/30 bg-primary/5 px-4 py-3">
-                      <p className="text-xs font-semibold text-muted-foreground mb-2">{t('accounts.oauthOpenLink')}</p>
-                      <a
-                        href={oauthSession.auth_url}
-                        target="_blank"
-                        rel="noopener noreferrer"
-                        className="inline-flex items-center gap-1.5 text-sm font-semibold text-primary hover:underline break-all"
-                      >
-                        <ExternalLink className="size-3.5 shrink-0" />
-                        {t('accounts.oauthOpenLink')}
-                      </a>
-                    </div>
-                  )}
-                  <div>
-                    <label className="block mb-2 text-sm font-semibold text-muted-foreground">{t('accounts.oauthCallbackUrlLabel')}</label>
-                    <Input
-                      placeholder={t('accounts.oauthCallbackUrlPlaceholder')}
-                      value={oauthCallbackUrl}
-                      onChange={(e: ChangeEvent<HTMLInputElement>) => setOauthCallbackUrl(e.target.value)}
-                    />
-                    <p className="mt-1.5 text-xs text-muted-foreground">{t('accounts.oauthCallbackUrlHint')}</p>
+                </div>
+              </button>
+              <button
+                className="flex items-center gap-3 rounded-xl border border-border px-4 py-3 text-left hover:bg-muted/50 transition-colors"
+                onClick={() => {
+                  setShowImportPicker(false);
+                  jsonInputRef.current?.click();
+                }}
+              >
+                <FileJson className="size-5 shrink-0 text-muted-foreground" />
+                <div>
+                  <div className="text-sm font-medium">
+                    {t("accounts.importJson")}
+                  </div>
+                  <div className="text-[11px] text-muted-foreground">
+                    {t("accounts.importJsonDesc")}
+                  </div>
+                </div>
+              </button>
+              <button
+                className="flex items-center gap-3 rounded-xl border border-border px-4 py-3 text-left hover:bg-muted/50 transition-colors"
+                onClick={() => {
+                  setShowImportPicker(false);
+                  atFileInputRef.current?.click();
+                }}
+              >
+                <Fingerprint className="size-5 shrink-0 text-muted-foreground" />
+                <div>
+                  <div className="text-sm font-medium">
+                    {t("accounts.importAtTxt")}
                   </div>
+                  <div className="text-[11px] text-muted-foreground">
+                    {t("accounts.importAtTxtDesc")}
+                  </div>
+                </div>
+              </button>
+              <button
+                className="flex items-center gap-3 rounded-xl border border-border px-4 py-3 text-left hover:bg-muted/50 transition-colors"
+                onClick={() => {
+                  setShowImportPicker(false);
+                  folderInputRef.current?.click();
+                }}
+              >
+                <FolderOpen className="size-5 shrink-0 text-muted-foreground" />
+                <div>
+                  <div className="text-sm font-medium">
+                    {t("accounts.importFolder")}
+                  </div>
+                  <div className="text-[11px] text-muted-foreground">
+                    {t("accounts.importFolderDesc")}
+                  </div>
+                </div>
+              </button>
+            </div>
+          </Modal>
+
+          <Modal
+            show={showExportPicker}
+            title={t("accounts.exportTitle")}
+            contentClassName="sm:max-w-[580px]"
+            onClose={() => setShowExportPicker(false)}
+          >
+            <div className="space-y-4">
+              {/* 健康账号导出 */}
+              <div>
+                <div className="text-xs font-semibold text-muted-foreground mb-2">
+                  {t("accounts.exportScopeHealthy")}
+                </div>
+                <div className="grid grid-cols-2 gap-3">
                   <button
-                    onClick={() => { setOauthStep('generate'); setOauthSession(null); setOauthCallbackUrl('') }}
-                    className="text-xs text-muted-foreground hover:text-foreground underline underline-offset-2"
+                    className="flex items-center gap-3 rounded-xl border border-border px-4 py-3 text-left hover:bg-muted/50 transition-colors"
+                    onClick={() => void handleExport("json", "healthy")}
                   >
-                    {t('accounts.oauthRestart')}
+                    <FileJson className="size-5 shrink-0 text-muted-foreground" />
+                    <div className="min-w-0">
+                      <div className="text-sm font-medium">CPA JSON</div>
+                      <div className="text-[11px] text-muted-foreground">
+                        {t("accounts.exportHealthyJsonDesc")}
+                      </div>
+                    </div>
                   </button>
-                </>
-              )}
+                  <button
+                    className="flex items-center gap-3 rounded-xl border border-border px-4 py-3 text-left hover:bg-muted/50 transition-colors"
+                    onClick={() => void handleExport("txt", "healthy")}
+                  >
+                    <FileText className="size-5 shrink-0 text-muted-foreground" />
+                    <div className="min-w-0">
+                      <div className="text-sm font-medium">TXT</div>
+                      <div className="text-[11px] text-muted-foreground">
+                        {t("accounts.exportHealthyTxtDesc")}
+                      </div>
+                    </div>
+                  </button>
+                </div>
+              </div>
+              {/* 已选账号导出 */}
+              <div>
+                <div className="text-xs font-semibold text-muted-foreground mb-2">
+                  {t("accounts.exportScopeSelected", { count: selected.size })}
+                </div>
+                <div className="grid grid-cols-2 gap-3">
+                  <button
+                    className="flex items-center gap-3 rounded-xl border border-border px-4 py-3 text-left hover:bg-muted/50 transition-colors disabled:opacity-40 disabled:pointer-events-none"
+                    disabled={selected.size === 0}
+                    onClick={() => void handleExport("json", "selected")}
+                  >
+                    <FileJson className="size-5 shrink-0 text-muted-foreground" />
+                    <div className="min-w-0">
+                      <div className="text-sm font-medium">CPA JSON</div>
+                      <div className="text-[11px] text-muted-foreground">
+                        {t("accounts.exportSelectedJsonDesc")}
+                      </div>
+                    </div>
+                  </button>
+                  <button
+                    className="flex items-center gap-3 rounded-xl border border-border px-4 py-3 text-left hover:bg-muted/50 transition-colors disabled:opacity-40 disabled:pointer-events-none"
+                    disabled={selected.size === 0}
+                    onClick={() => void handleExport("txt", "selected")}
+                  >
+                    <FileText className="size-5 shrink-0 text-muted-foreground" />
+                    <div className="min-w-0">
+                      <div className="text-sm font-medium">TXT</div>
+                      <div className="text-[11px] text-muted-foreground">
+                        {t("accounts.exportSelectedTxtDesc")}
+                      </div>
+                    </div>
+                  </button>
+                </div>
+              </div>
             </div>
-          )}
-        </Modal>
+          </Modal>
 
-        <Modal
-          show={showImportPicker}
-          title={t('accounts.importTitle')}
-          contentClassName="sm:max-w-[640px]"
-          onClose={() => setShowImportPicker(false)}
-        >
-          <div className="grid grid-cols-2 gap-3">
-            <button
-              className="flex items-center gap-3 rounded-xl border border-border px-4 py-3 text-left hover:bg-muted/50 transition-colors"
-              onClick={() => {
-                setShowImportPicker(false)
-                fileInputRef.current?.click()
-              }}
-            >
-              <FileText className="size-5 shrink-0 text-muted-foreground" />
-              <div>
-                <div className="text-sm font-medium">{t('accounts.importTxt')}</div>
-                <div className="text-[11px] text-muted-foreground">{t('accounts.importTxtDesc')}</div>
+          <Modal
+            show={Boolean(authJsonModal)}
+            title={t("accounts.authJsonModalTitle")}
+            contentClassName="sm:max-w-[720px]"
+            onClose={() => setAuthJsonModal(null)}
+          >
+            {authJsonModal && (
+              <div className="space-y-4">
+                <div className="flex items-start gap-3 rounded-lg border border-border bg-muted/30 px-4 py-3">
+                  <FileJson className="mt-0.5 size-5 shrink-0 text-primary" />
+                  <div className="min-w-0 space-y-1">
+                    <div className="text-sm font-semibold text-foreground">
+                      {authJsonModal.account.email ||
+                        `ID ${authJsonModal.account.id}`}
+                    </div>
+                    <p className="text-xs leading-relaxed text-muted-foreground">
+                      {t("accounts.authJsonModalDesc")}
+                    </p>
+                  </div>
+                </div>
+
+                <div>
+                  <div className="mb-2 text-xs font-semibold text-muted-foreground">
+                    {t("accounts.authJsonPreview")}
+                  </div>
+                  <textarea
+                    readOnly
+                    value={authJsonModal.json}
+                    className="min-h-[260px] w-full resize-y rounded-lg border border-border bg-muted/30 p-3 text-[12px] leading-relaxed text-muted-foreground outline-none focus:border-primary/40 focus:ring-2 focus:ring-primary/10"
+                    style={{ fontFamily: "var(--font-geist-mono)" }}
+                  />
+                </div>
+
+                <div className="flex flex-wrap justify-end gap-2">
+                  <Button
+                    variant="outline"
+                    onClick={() => setAuthJsonModal(null)}
+                  >
+                    {t("common.close")}
+                  </Button>
+                  <Button
+                    variant="outline"
+                    onClick={() => void handleCopyAuthJSON()}
+                  >
+                    <Copy className="size-4" />
+                    {t("accounts.copyAuthJson")}
+                  </Button>
+                  <Button onClick={handleExportAuthJSON}>
+                    <Download className="size-4" />
+                    {t("accounts.exportAuthJson")}
+                  </Button>
+                </div>
               </div>
-            </button>
-            <button
-              className="flex items-center gap-3 rounded-xl border border-border px-4 py-3 text-left hover:bg-muted/50 transition-colors"
-              onClick={() => {
-                setShowImportPicker(false)
-                jsonInputRef.current?.click()
-              }}
-            >
-              <FileJson className="size-5 shrink-0 text-muted-foreground" />
-              <div>
-                <div className="text-sm font-medium">{t('accounts.importJson')}</div>
-                <div className="text-[11px] text-muted-foreground">{t('accounts.importJsonDesc')}</div>
+            )}
+          </Modal>
+
+          <Modal
+            show={showMigrate}
+            title={t("accounts.migrateTitle")}
+            contentClassName="sm:max-w-[520px]"
+            onClose={() => {
+              setShowMigrate(false);
+              setMigrateUrl("");
+              setMigrateKey("");
+            }}
+          >
+            <div className="space-y-4">
+              <div className="rounded-xl border border-border bg-muted/30 px-4 py-3 text-sm text-muted-foreground">
+                <p>{t("accounts.migrateDesc")}</p>
               </div>
-            </button>
-            <button
-              className="flex items-center gap-3 rounded-xl border border-border px-4 py-3 text-left hover:bg-muted/50 transition-colors"
-              onClick={() => {
-                setShowImportPicker(false)
-                atFileInputRef.current?.click()
-              }}
-            >
-              <Fingerprint className="size-5 shrink-0 text-muted-foreground" />
               <div>
-                <div className="text-sm font-medium">{t('accounts.importAtTxt')}</div>
-                <div className="text-[11px] text-muted-foreground">{t('accounts.importAtTxtDesc')}</div>
+                <label className="block mb-2 text-sm font-semibold text-muted-foreground">
+                  {t("accounts.migrateUrlLabel")}
+                </label>
+                <Input
+                  placeholder={t("accounts.migrateUrlPlaceholder")}
+                  value={migrateUrl}
+                  onChange={(e: ChangeEvent<HTMLInputElement>) =>
+                    setMigrateUrl(e.target.value)
+                  }
+                />
               </div>
-            </button>
-            <button
-              className="flex items-center gap-3 rounded-xl border border-border px-4 py-3 text-left hover:bg-muted/50 transition-colors"
-              onClick={() => {
-                setShowImportPicker(false)
-                folderInputRef.current?.click()
-              }}
-            >
-              <FolderOpen className="size-5 shrink-0 text-muted-foreground" />
               <div>
-                <div className="text-sm font-medium">{t('accounts.importFolder')}</div>
-                <div className="text-[11px] text-muted-foreground">{t('accounts.importFolderDesc')}</div>
+                <label className="block mb-2 text-sm font-semibold text-muted-foreground">
+                  {t("accounts.migrateKeyLabel")}
+                </label>
+                <Input
+                  type="password"
+                  placeholder={t("accounts.migrateKeyPlaceholder")}
+                  value={migrateKey}
+                  onChange={(e: ChangeEvent<HTMLInputElement>) =>
+                    setMigrateKey(e.target.value)
+                  }
+                />
               </div>
-            </button>
-          </div>
-        </Modal>
-
-        <Modal
-          show={showExportPicker}
-          title={t('accounts.exportTitle')}
-          contentClassName="sm:max-w-[580px]"
-          onClose={() => setShowExportPicker(false)}
-        >
-          <div className="space-y-4">
-            {/* 健康账号导出 */}
-            <div>
-              <div className="text-xs font-semibold text-muted-foreground mb-2">{t('accounts.exportScopeHealthy')}</div>
-              <div className="grid grid-cols-2 gap-3">
-                <button
-                  className="flex items-center gap-3 rounded-xl border border-border px-4 py-3 text-left hover:bg-muted/50 transition-colors"
-                  onClick={() => void handleExport('json', 'healthy')}
+              <div className="flex justify-end gap-2 pt-2">
+                <Button
+                  variant="outline"
+                  onClick={() => {
+                    setShowMigrate(false);
+                    setMigrateUrl("");
+                    setMigrateKey("");
+                  }}
                 >
-                  <FileJson className="size-5 shrink-0 text-muted-foreground" />
-                  <div className="min-w-0">
-                    <div className="text-sm font-medium">CPA JSON</div>
-                    <div className="text-[11px] text-muted-foreground">{t('accounts.exportHealthyJsonDesc')}</div>
-                  </div>
-                </button>
-                <button
-                  className="flex items-center gap-3 rounded-xl border border-border px-4 py-3 text-left hover:bg-muted/50 transition-colors"
-                  onClick={() => void handleExport('txt', 'healthy')}
+                  {t("common.cancel")}
+                </Button>
+                <Button
+                  onClick={() => void handleMigrate()}
+                  disabled={
+                    migrating || !migrateUrl.trim() || !migrateKey.trim()
+                  }
                 >
-                  <FileText className="size-5 shrink-0 text-muted-foreground" />
-                  <div className="min-w-0">
-                    <div className="text-sm font-medium">TXT</div>
-                    <div className="text-[11px] text-muted-foreground">{t('accounts.exportHealthyTxtDesc')}</div>
-                  </div>
-                </button>
+                  {migrating
+                    ? t("accounts.migrating")
+                    : t("accounts.migrateConfirm")}
+                </Button>
               </div>
             </div>
-            {/* 已选账号导出 */}
-            <div>
-              <div className="text-xs font-semibold text-muted-foreground mb-2">{t('accounts.exportScopeSelected', { count: selected.size })}</div>
-              <div className="grid grid-cols-2 gap-3">
-                <button
-                  className="flex items-center gap-3 rounded-xl border border-border px-4 py-3 text-left hover:bg-muted/50 transition-colors disabled:opacity-40 disabled:pointer-events-none"
-                  disabled={selected.size === 0}
-                  onClick={() => void handleExport('json', 'selected')}
+          </Modal>
+
+          {testingAccount && (
+            <TestConnectionModal
+              account={testingAccount}
+              onSettled={() => {
+                void reloadSilently();
+              }}
+              onClose={() => setTestingAccount(null)}
+            />
+          )}
+
+          {usageAccount && (
+            <AccountUsageModal
+              account={usageAccount}
+              onClose={() => setUsageAccount(null)}
+            />
+          )}
+
+          <Modal
+            show={Boolean(editingAccount)}
+            title={t("accounts.schedulerEditTitle")}
+            contentClassName="sm:max-w-[760px]"
+            onClose={closeSchedulerEditor}
+            footer={
+              <>
+                <Button
+                  variant="outline"
+                  onClick={() => closeSchedulerEditor()}
+                  disabled={editSubmitting}
                 >
-                  <FileJson className="size-5 shrink-0 text-muted-foreground" />
-                  <div className="min-w-0">
-                    <div className="text-sm font-medium">CPA JSON</div>
-                    <div className="text-[11px] text-muted-foreground">{t('accounts.exportSelectedJsonDesc')}</div>
-                  </div>
-                </button>
-                <button
-                  className="flex items-center gap-3 rounded-xl border border-border px-4 py-3 text-left hover:bg-muted/50 transition-colors disabled:opacity-40 disabled:pointer-events-none"
-                  disabled={selected.size === 0}
-                  onClick={() => void handleExport('txt', 'selected')}
+                  {t("common.cancel")}
+                </Button>
+                <Button
+                  onClick={() => void handleSaveAccountEditor()}
+                  disabled={
+                    editSubmitting ||
+                    (editTab === "scheduler" &&
+                      (scoreInputInvalid || concurrencyInputInvalid)) ||
+                    openAIAccountInputInvalid
+                  }
                 >
-                  <FileText className="size-5 shrink-0 text-muted-foreground" />
-                  <div className="min-w-0">
-                    <div className="text-sm font-medium">TXT</div>
-                    <div className="text-[11px] text-muted-foreground">{t('accounts.exportSelectedTxtDesc')}</div>
+                  {editSubmitting ? t("common.saving") : t("common.save")}
+                </Button>
+              </>
+            }
+          >
+            {editingAccount && editPreview ? (
+              <div className="space-y-5">
+                <div className="rounded-xl border border-border bg-muted/30 px-4 py-3 text-sm text-muted-foreground">
+                  <div className="font-semibold text-foreground">
+                    {formatAccountName(editingAccount)}
                   </div>
-                </button>
-              </div>
-            </div>
-          </div>
-        </Modal>
-
-        <Modal
-          show={Boolean(authJsonModal)}
-          title={t('accounts.authJsonModalTitle')}
-          contentClassName="sm:max-w-[720px]"
-          onClose={() => setAuthJsonModal(null)}
-        >
-          {authJsonModal && (
-            <div className="space-y-4">
-              <div className="flex items-start gap-3 rounded-lg border border-border bg-muted/30 px-4 py-3">
-                <FileJson className="mt-0.5 size-5 shrink-0 text-primary" />
-                <div className="min-w-0 space-y-1">
-                  <div className="text-sm font-semibold text-foreground">
-                    {authJsonModal.account.email || `ID ${authJsonModal.account.id}`}
+                  <div className="mt-1">
+                    {t("accounts.schedulerEditDesc", {
+                      plan: editingAccount.plan_type || "-",
+                    })}
                   </div>
-                  <p className="text-xs leading-relaxed text-muted-foreground">
-                    {t('accounts.authJsonModalDesc')}
-                  </p>
                 </div>
-              </div>
 
-              <div>
-                <div className="mb-2 text-xs font-semibold text-muted-foreground">{t('accounts.authJsonPreview')}</div>
-                <textarea
-                  readOnly
-                  value={authJsonModal.json}
-                  className="min-h-[260px] w-full resize-y rounded-lg border border-border bg-muted/30 p-3 text-[12px] leading-relaxed text-muted-foreground outline-none focus:border-primary/40 focus:ring-2 focus:ring-primary/10"
-                  style={{ fontFamily: 'var(--font-geist-mono)' }}
-                />
-              </div>
+                {editingAccount.openai_responses_api && (
+                  <div className="flex gap-1 rounded-xl border border-border bg-muted/50 p-1">
+                    <button
+                      type="button"
+                      onClick={() => setEditTab("scheduler")}
+                      className={`flex-1 rounded-lg px-3 py-2 text-sm font-semibold transition-all ${
+                        editTab === "scheduler"
+                          ? "bg-background text-foreground shadow-sm"
+                          : "text-muted-foreground hover:text-foreground"
+                      }`}
+                    >
+                      {t("accounts.editTabScheduler")}
+                    </button>
+                    <button
+                      type="button"
+                      onClick={() => setEditTab("account")}
+                      className={`flex-1 rounded-lg px-3 py-2 text-sm font-semibold transition-all ${
+                        editTab === "account"
+                          ? "bg-background text-foreground shadow-sm"
+                          : "text-muted-foreground hover:text-foreground"
+                      }`}
+                    >
+                      {t("accounts.editTabAccount")}
+                    </button>
+                  </div>
+                )}
+
+                {editTab === "account" &&
+                editingAccount.openai_responses_api ? (
+                  <div className="space-y-4">
+                    <div>
+                      <label className="block mb-2 text-sm font-semibold text-muted-foreground">
+                        {t("accounts.openaiNameLabel")}
+                      </label>
+                      <Input
+                        placeholder={t("accounts.openaiNamePlaceholder")}
+                        value={editOpenAIForm.name ?? ""}
+                        onChange={(event: ChangeEvent<HTMLInputElement>) =>
+                          setEditOpenAIForm((form) => ({
+                            ...form,
+                            name: event.target.value,
+                          }))
+                        }
+                      />
+                    </div>
+                    <div>
+                      <label className="block mb-2 text-sm font-semibold text-muted-foreground">
+                        {t("accounts.openaiBaseUrl")} *
+                      </label>
+                      <Input
+                        placeholder="https://api.openai.com"
+                        value={editOpenAIForm.base_url}
+                        onChange={(event: ChangeEvent<HTMLInputElement>) =>
+                          setEditOpenAIForm((form) => ({
+                            ...form,
+                            base_url: event.target.value,
+                          }))
+                        }
+                      />
+                    </div>
+                    <div>
+                      <label className="block mb-2 text-sm font-semibold text-muted-foreground">
+                        {t("accounts.openaiApiKey")}
+                      </label>
+                      <Input
+                        type="password"
+                        placeholder={t("accounts.openaiApiKeyKeepPlaceholder")}
+                        value={editOpenAIForm.api_key ?? ""}
+                        onChange={(event: ChangeEvent<HTMLInputElement>) =>
+                          setEditOpenAIForm((form) => ({
+                            ...form,
+                            api_key: event.target.value,
+                          }))
+                        }
+                      />
+                    </div>
+                    <div>
+                      <div className="mb-2 flex items-center justify-between gap-2">
+                        <label className="text-sm font-semibold text-muted-foreground">
+                          {t("accounts.openaiModels")} *
+                        </label>
+                        <Button
+                          type="button"
+                          variant="outline"
+                          size="sm"
+                          onClick={() => void handleFetchEditOpenAIModels()}
+                          disabled={editOpenAIModelsLoading}
+                        >
+                          <RefreshCw
+                            className={`size-3.5 ${editOpenAIModelsLoading ? "animate-spin" : ""}`}
+                          />
+                          {editOpenAIModelsLoading
+                            ? t("accounts.openaiModelsFetching")
+                            : t("accounts.openaiModelsFetch")}
+                        </Button>
+                      </div>
+                      <div className="mb-3 flex gap-2">
+                        <Input
+                          placeholder={t("accounts.openaiModelsPlaceholder")}
+                          value={editOpenAIModelDraft}
+                          onChange={(event: ChangeEvent<HTMLInputElement>) =>
+                            setEditOpenAIModelDraft(event.target.value)
+                          }
+                          onKeyDown={(event) => {
+                            if (event.key === "Enter") {
+                              event.preventDefault();
+                              addEditOpenAIModelValues(editOpenAIModelDraft);
+                            }
+                          }}
+                          onPaste={(event) => {
+                            const pasted = event.clipboardData.getData("text");
+                            if (parseModelTokens(pasted).length > 1) {
+                              event.preventDefault();
+                              addEditOpenAIModelValues(pasted);
+                            }
+                          }}
+                        />
+                        <Button
+                          type="button"
+                          variant="outline"
+                          onClick={() =>
+                            addEditOpenAIModelValues(editOpenAIModelDraft)
+                          }
+                          disabled={!editOpenAIModelDraft.trim()}
+                        >
+                          <Plus className="size-3.5" />
+                          {t("accounts.openaiModelsAdd")}
+                        </Button>
+                      </div>
+                      <ModelChipGrid
+                        models={editOpenAIForm.models}
+                        onRemove={removeEditOpenAIModel}
+                        emptyLabel={t("accounts.openaiModelsEmpty")}
+                      />
+                      <p className="mt-1.5 text-xs text-muted-foreground">
+                        {t("accounts.openaiModelsHint", {
+                          count: editOpenAIForm.models.length,
+                        })}
+                      </p>
+                    </div>
+                    <div>
+                      <label className="block mb-2 text-sm font-semibold text-muted-foreground">
+                        {t("accounts.proxyUrl")}
+                      </label>
+                      <Input
+                        placeholder={t("accounts.proxyUrlPlaceholder")}
+                        value={editOpenAIForm.proxy_url}
+                        onChange={(event: ChangeEvent<HTMLInputElement>) =>
+                          setEditOpenAIForm((form) => ({
+                            ...form,
+                            proxy_url: event.target.value,
+                          }))
+                        }
+                      />
+                    </div>
+                  </div>
+                ) : (
+                  <>
+                    <div className="grid gap-4 md:grid-cols-2">
+                      <div className="rounded-xl border border-border p-4">
+                        <div className="text-sm font-semibold text-foreground">
+                          {t("accounts.schedulerScoreLabel")}
+                        </div>
+                        <div className="mt-1 text-xs text-muted-foreground">
+                          {t("accounts.schedulerScoreHint")}
+                        </div>
+                        <div className="mt-3 flex gap-2">
+                          <TogglePill
+                            active={scoreMode === "default"}
+                            onClick={() => setScoreMode("default")}
+                            label={t("accounts.schedulerScoreAuto")}
+                          />
+                          <TogglePill
+                            active={scoreMode === "custom"}
+                            onClick={() => setScoreMode("custom")}
+                            label={t("accounts.schedulerCustom")}
+                          />
+                        </div>
+                        {scoreMode === "default" ? (
+                          <div className="mt-3 rounded-lg border border-dashed border-border bg-muted/20 px-3 py-2 text-sm text-muted-foreground">
+                            {t("accounts.schedulerScoreAutoValue", {
+                              value: formatSignedNumber(
+                                getDefaultScoreBias(editingAccount.plan_type),
+                              ),
+                            })}
+                          </div>
+                        ) : (
+                          <div className="mt-3 space-y-2">
+                            <Input
+                              inputMode="numeric"
+                              value={scoreInput}
+                              onChange={(
+                                event: ChangeEvent<HTMLInputElement>,
+                              ) => setScoreInput(event.target.value)}
+                              placeholder={t(
+                                "accounts.schedulerScorePlaceholder",
+                              )}
+                            />
+                            <div
+                              className={`text-xs ${scoreInputInvalid ? "text-red-500" : "text-muted-foreground"}`}
+                            >
+                              {scoreInputInvalid
+                                ? t("accounts.schedulerScoreRange")
+                                : t("accounts.schedulerCustomValuePreview", {
+                                    value: formatSignedNumber(
+                                      parsedScoreBias ??
+                                        getEffectiveScoreBias(editingAccount),
+                                    ),
+                                  })}
+                            </div>
+                          </div>
+                        )}
+                      </div>
 
-              <div className="flex flex-wrap justify-end gap-2">
-                <Button variant="outline" onClick={() => setAuthJsonModal(null)}>
-                  {t('common.close')}
-                </Button>
-                <Button variant="outline" onClick={() => void handleCopyAuthJSON()}>
-                  <Copy className="size-4" />
-                  {t('accounts.copyAuthJson')}
+                      <div className="rounded-xl border border-border p-4">
+                        <div className="text-sm font-semibold text-foreground">
+                          {t("accounts.schedulerConcurrencyLabel")}
+                        </div>
+                        <div className="mt-1 text-xs text-muted-foreground">
+                          {t("accounts.schedulerConcurrencyHint")}
+                        </div>
+                        <div className="mt-3 flex gap-2">
+                          <TogglePill
+                            active={concurrencyMode === "default"}
+                            onClick={() => setConcurrencyMode("default")}
+                            label={t("accounts.schedulerConcurrencyAuto")}
+                          />
+                          <TogglePill
+                            active={concurrencyMode === "custom"}
+                            onClick={() => setConcurrencyMode("custom")}
+                            label={t("accounts.schedulerCustom")}
+                          />
+                        </div>
+                        {concurrencyMode === "default" ? (
+                          <div className="mt-3 rounded-lg border border-dashed border-border bg-muted/20 px-3 py-2 text-sm text-muted-foreground">
+                            {t("accounts.schedulerConcurrencyAutoValue", {
+                              value:
+                                getEffectiveBaseConcurrency(editingAccount),
+                            })}
+                          </div>
+                        ) : (
+                          <div className="mt-3 space-y-2">
+                            <Input
+                              inputMode="numeric"
+                              value={concurrencyInput}
+                              onChange={(
+                                event: ChangeEvent<HTMLInputElement>,
+                              ) => setConcurrencyInput(event.target.value)}
+                              placeholder={t(
+                                "accounts.schedulerConcurrencyPlaceholder",
+                              )}
+                            />
+                            <div
+                              className={`text-xs ${concurrencyInputInvalid ? "text-red-500" : "text-muted-foreground"}`}
+                            >
+                              {concurrencyInputInvalid
+                                ? t("accounts.schedulerConcurrencyRange")
+                                : t("accounts.schedulerCustomValuePreview", {
+                                    value:
+                                      parsedBaseConcurrency ??
+                                      getEffectiveBaseConcurrency(
+                                        editingAccount,
+                                      ),
+                                  })}
+                            </div>
+                          </div>
+                        )}
+                      </div>
+                    </div>
+
+                    <div className="rounded-xl border border-border p-4">
+                      <div className="text-sm font-semibold text-foreground">
+                        {t("accounts.allowedAPIKeysLabel")}
+                      </div>
+                      <div className="mt-1 text-xs text-muted-foreground">
+                        {t("accounts.allowedAPIKeysHint")}
+                      </div>
+                      <div className="mt-3">
+                        <APIKeyMultiSelect
+                          options={apiKeys}
+                          value={allowedAPIKeySelection}
+                          disabled={apiKeys.length === 0}
+                          onChange={setAllowedAPIKeySelection}
+                          allLabel={t("accounts.allowedAPIKeysAll")}
+                          selectedLabel={t("accounts.allowedAPIKeysSelected", {
+                            count: allowedAPIKeySelection.length,
+                          })}
+                          placeholder={t("accounts.allowedAPIKeysPlaceholder")}
+                          emptyLabel={t("accounts.allowedAPIKeysNoOptions")}
+                          emptyHint={t("accounts.allowedAPIKeysNoOptionsHint")}
+                        />
+                      </div>
+                    </div>
+
+                    <div className="rounded-xl border border-border p-4">
+                      <div className="text-sm font-semibold text-foreground">
+                        {t("accounts.proxyUrl")}
+                      </div>
+                      <div className="mt-3">
+                        <Input
+                          placeholder={t("accounts.proxyUrlPlaceholder")}
+                          value={editProxyUrl}
+                          onChange={(event: ChangeEvent<HTMLInputElement>) =>
+                            setEditProxyUrl(event.target.value)
+                          }
+                        />
+                      </div>
+                    </div>
+
+                    <div className="grid gap-4 md:grid-cols-2">
+                      <div className="rounded-xl border border-border p-4">
+                        <div className="text-sm font-semibold text-foreground">
+                          {t("accounts.tagsLabel")}
+                        </div>
+                        <div className="mt-1 text-xs text-muted-foreground">
+                          {t("accounts.tagsHint")}
+                        </div>
+                        <ChipInput
+                          className="mt-3"
+                          value={editTags}
+                          onChange={setEditTags}
+                          placeholder={t("accounts.tagsPlaceholder")}
+                          maxVisible={3}
+                        />
+                      </div>
+
+                      <div className="rounded-xl border border-border p-4">
+                        <div className="flex items-start justify-between gap-3">
+                          <div>
+                            <div className="text-sm font-semibold text-foreground">
+                              {t("accounts.groupsLabel")}
+                            </div>
+                            <div className="mt-1 text-xs text-muted-foreground">
+                              {t("accounts.groupsHint")}
+                            </div>
+                          </div>
+                          <Button
+                            type="button"
+                            variant="outline"
+                            size="xs"
+                            onClick={() => setShowGroupManager(true)}
+                          >
+                            <FolderOpen className="size-3" />
+                            {t("accounts.groupManage")}
+                          </Button>
+                        </div>
+                        <div className="mt-3 flex flex-wrap gap-2">
+                          {allGroups.length === 0 ? (
+                            <span className="text-sm text-muted-foreground">
+                              {t("accounts.groupsNone")}
+                            </span>
+                          ) : (
+                            allGroups.map((group) => {
+                              const active = editGroupIds.includes(group.id);
+                              const color = normalizeGroupColor(group.color);
+                              return (
+                                <button
+                                  key={group.id}
+                                  type="button"
+                                  onClick={() =>
+                                    setEditGroupIds((current) =>
+                                      active
+                                        ? current.filter(
+                                            (id) => id !== group.id,
+                                          )
+                                        : [...current, group.id],
+                                    )
+                                  }
+                                  className="inline-flex items-center gap-1.5 rounded-full border px-3 py-1 text-xs font-semibold transition-colors"
+                                  style={{
+                                    borderColor: active ? color : `${color}55`,
+                                    backgroundColor: active
+                                      ? color
+                                      : `${color}14`,
+                                    color: active ? "#ffffff" : color,
+                                  }}
+                                >
+                                  <span className="size-1.5 rounded-full bg-current" />
+                                  {group.name}
+                                </button>
+                              );
+                            })
+                          )}
+                        </div>
+                      </div>
+                    </div>
+
+                    <div className="rounded-xl border border-border bg-white/60 px-4 py-4 dark:bg-white/5">
+                      <div className="text-sm font-semibold text-foreground">
+                        {t("accounts.schedulerPreviewTitle")}
+                      </div>
+                      <div className="mt-3 grid gap-3 sm:grid-cols-2 xl:grid-cols-4">
+                        <PreviewItem
+                          label={t("accounts.schedulerPreviewRawScore")}
+                          value={String(editPreview.rawScore)}
+                        />
+                        <PreviewItem
+                          label={t("accounts.schedulerPreviewDispatchScore")}
+                          value={String(editPreview.dispatchScore)}
+                        />
+                        <PreviewItem
+                          label={t("accounts.schedulerPreviewHealthTier")}
+                          value={formatHealthTier(editPreview.healthTier, t)}
+                        />
+                        <PreviewItem
+                          label={t(
+                            "accounts.schedulerPreviewDynamicConcurrency",
+                          )}
+                          value={String(editPreview.dynamicConcurrency)}
+                        />
+                      </div>
+                    </div>
+                  </>
+                )}
+              </div>
+            ) : null}
+          </Modal>
+
+          <Modal
+            show={showBatchMetaEditor}
+            title={t("accounts.batchMetaTitle")}
+            contentClassName="sm:max-w-[560px]"
+            onClose={() => {
+              if (batchMetaSubmitting) return;
+              setShowBatchMetaEditor(false);
+            }}
+            footer={
+              <>
+                <Button
+                  type="button"
+                  variant="outline"
+                  onClick={() => setShowBatchMetaEditor(false)}
+                  disabled={batchMetaSubmitting}
+                >
+                  {t("common.cancel")}
                 </Button>
-                <Button onClick={handleExportAuthJSON}>
-                  <Download className="size-4" />
-                  {t('accounts.exportAuthJson')}
+                <Button
+                  type="button"
+                  onClick={() => void handleBatchSaveMeta()}
+                  disabled={batchMetaSubmitting}
+                >
+                  {batchMetaSubmitting ? t("common.saving") : t("common.save")}
                 </Button>
+              </>
+            }
+          >
+            <div className="space-y-4">
+              <div className="rounded-lg border border-border bg-muted/20 p-3 text-sm text-muted-foreground">
+                {t("accounts.batchMetaDesc", { count: selected.size })}
+              </div>
+              <div className="rounded-xl border border-border p-4">
+                <div className="text-sm font-semibold text-foreground">
+                  {t("accounts.tagsLabel")}
+                </div>
+                <ChipInput
+                  className="mt-3"
+                  value={batchTags}
+                  onChange={setBatchTags}
+                  placeholder={t("accounts.tagsPlaceholder")}
+                  maxVisible={6}
+                />
+              </div>
+              <div className="rounded-xl border border-border p-4">
+                <div className="text-sm font-semibold text-foreground">
+                  {t("accounts.groupsLabel")}
+                </div>
+                <div className="mt-3 flex flex-wrap gap-2">
+                  {allGroups.length === 0 ? (
+                    <span className="text-sm text-muted-foreground">
+                      {t("accounts.groupsNone")}
+                    </span>
+                  ) : (
+                    allGroups.map((group) => {
+                      const active = batchGroupIds.includes(group.id);
+                      const color = normalizeGroupColor(group.color);
+                      return (
+                        <button
+                          key={group.id}
+                          type="button"
+                          onClick={() =>
+                            setBatchGroupIds((current) =>
+                              active
+                                ? current.filter((id) => id !== group.id)
+                                : [...current, group.id],
+                            )
+                          }
+                          className="inline-flex items-center gap-1.5 rounded-full border px-3 py-1 text-xs font-semibold transition-colors"
+                          style={{
+                            borderColor: active ? color : `${color}55`,
+                            backgroundColor: active ? color : `${color}14`,
+                            color: active ? "#ffffff" : color,
+                          }}
+                        >
+                          <span className="size-1.5 rounded-full bg-current" />
+                          {group.name}
+                        </button>
+                      );
+                    })
+                  )}
+                </div>
               </div>
             </div>
-          )}
-        </Modal>
-
-        <Modal
-          show={showMigrate}
-          title={t('accounts.migrateTitle')}
-          contentClassName="sm:max-w-[520px]"
-          onClose={() => { setShowMigrate(false); setMigrateUrl(''); setMigrateKey('') }}
-        >
-          <div className="space-y-4">
-            <div className="rounded-xl border border-border bg-muted/30 px-4 py-3 text-sm text-muted-foreground">
-              <p>{t('accounts.migrateDesc')}</p>
-            </div>
-            <div>
-              <label className="block mb-2 text-sm font-semibold text-muted-foreground">{t('accounts.migrateUrlLabel')}</label>
-              <Input
-                placeholder={t('accounts.migrateUrlPlaceholder')}
-                value={migrateUrl}
-                onChange={(e: ChangeEvent<HTMLInputElement>) => setMigrateUrl(e.target.value)}
-              />
-            </div>
-            <div>
-              <label className="block mb-2 text-sm font-semibold text-muted-foreground">{t('accounts.migrateKeyLabel')}</label>
-              <Input
-                type="password"
-                placeholder={t('accounts.migrateKeyPlaceholder')}
-                value={migrateKey}
-                onChange={(e: ChangeEvent<HTMLInputElement>) => setMigrateKey(e.target.value)}
-              />
-            </div>
-            <div className="flex justify-end gap-2 pt-2">
-              <Button variant="outline" onClick={() => { setShowMigrate(false); setMigrateUrl(''); setMigrateKey('') }}>
-                {t('common.cancel')}
-              </Button>
-              <Button
-                onClick={() => void handleMigrate()}
-                disabled={migrating || !migrateUrl.trim() || !migrateKey.trim()}
-              >
-                {migrating ? t('accounts.migrating') : t('accounts.migrateConfirm')}
-              </Button>
-            </div>
-          </div>
-        </Modal>
-
-        {testingAccount && (
-          <TestConnectionModal
-            account={testingAccount}
-            onSettled={() => {
-              void reloadSilently()
+          </Modal>
+
+          <Modal
+            show={showGroupManager}
+            title={t("accounts.groupManageTitle")}
+            contentClassName="sm:max-w-[820px]"
+            bodyClassName="space-y-3"
+            onClose={() => {
+              if (groupSubmitting) return;
+              setShowGroupManager(false);
+              resetGroupDraft();
             }}
-            onClose={() => setTestingAccount(null)}
-          />
-        )}
-
-        {usageAccount && (
-          <AccountUsageModal account={usageAccount} onClose={() => setUsageAccount(null)} />
-        )}
-
-        <Modal
-          show={Boolean(editingAccount)}
-          title={t('accounts.schedulerEditTitle')}
-          contentClassName="sm:max-w-[760px]"
-          onClose={closeSchedulerEditor}
-          footer={(
-            <>
-              <Button variant="outline" onClick={() => closeSchedulerEditor()} disabled={editSubmitting}>
-                {t('common.cancel')}
-              </Button>
-              <Button
-                onClick={() => void handleSaveAccountEditor()}
-                disabled={editSubmitting || (editTab === 'scheduler' && (scoreInputInvalid || concurrencyInputInvalid)) || openAIAccountInputInvalid}
-              >
-                {editSubmitting ? t('common.saving') : t('common.save')}
-              </Button>
-            </>
-          )}
-        >
-          {editingAccount && editPreview ? (
-            <div className="space-y-5">
-              <div className="rounded-xl border border-border bg-muted/30 px-4 py-3 text-sm text-muted-foreground">
-                <div className="font-semibold text-foreground">{formatAccountName(editingAccount)}</div>
-                <div className="mt-1">{t('accounts.schedulerEditDesc', { plan: editingAccount.plan_type || '-' })}</div>
+            footer={
+              <>
+                <Button
+                  type="button"
+                  variant="outline"
+                  onClick={() => {
+                    setShowGroupManager(false);
+                    resetGroupDraft();
+                  }}
+                  disabled={groupSubmitting}
+                >
+                  {t("common.close")}
+                </Button>
+                <Button
+                  type="button"
+                  onClick={() => void handleSaveGroup()}
+                  disabled={groupSubmitting || !groupDraft.name.trim()}
+                >
+                  {groupSubmitting
+                    ? t("common.saving")
+                    : groupDraft.id === null
+                      ? t("accounts.groupCreate")
+                      : t("common.save")}
+                </Button>
+              </>
+            }
+          >
+            <div className="flex items-start justify-between gap-3 rounded-lg border border-border bg-muted/20 px-3 py-2.5">
+              <div className="min-w-0">
+                <div className="text-sm font-semibold text-foreground">
+                  {t("accounts.groupManageTitle")}
+                </div>
+                <div className="mt-0.5 text-xs text-muted-foreground">
+                  {t("accounts.groupEmptyDesc")}
+                </div>
               </div>
+              <Badge variant="secondary" className="shrink-0">
+                {t("accounts.groupMembers")}{" "}
+                {allGroups.reduce((sum, group) => sum + group.member_count, 0)}
+              </Badge>
+            </div>
 
-              {editingAccount.openai_responses_api && (
-                <div className="flex gap-1 rounded-xl border border-border bg-muted/50 p-1">
-                  <button
-                    type="button"
-                    onClick={() => setEditTab('scheduler')}
-                    className={`flex-1 rounded-lg px-3 py-2 text-sm font-semibold transition-all ${
-                      editTab === 'scheduler'
-                        ? 'bg-background text-foreground shadow-sm'
-                        : 'text-muted-foreground hover:text-foreground'
-                    }`}
-                  >
-                    {t('accounts.editTabScheduler')}
-                  </button>
-                  <button
-                    type="button"
-                    onClick={() => setEditTab('account')}
-                    className={`flex-1 rounded-lg px-3 py-2 text-sm font-semibold transition-all ${
-                      editTab === 'account'
-                        ? 'bg-background text-foreground shadow-sm'
-                        : 'text-muted-foreground hover:text-foreground'
-                    }`}
-                  >
-                    {t('accounts.editTabAccount')}
-                  </button>
+            <div className="grid gap-3 lg:grid-cols-[minmax(0,1fr)_minmax(300px,0.55fr)]">
+              <div className="min-h-[260px] overflow-hidden rounded-lg border border-border bg-background">
+                <div className="flex h-10 items-center justify-between border-b border-border px-3">
+                  <div className="text-xs font-semibold text-muted-foreground">
+                    {t("accounts.groupsLabel")}
+                  </div>
+                  <Badge variant="outline">{allGroups.length}</Badge>
                 </div>
-              )}
+                {allGroups.length === 0 ? (
+                  <div className="flex min-h-[218px] flex-col items-center justify-center px-4 text-center">
+                    <FolderOpen className="mb-3 size-8 text-muted-foreground" />
+                    <div className="text-sm font-semibold text-foreground">
+                      {t("accounts.groupEmpty")}
+                    </div>
+                    <div className="mt-1 text-xs text-muted-foreground">
+                      {t("accounts.groupEmptyDesc")}
+                    </div>
+                  </div>
+                ) : (
+                  <div className="max-h-[360px] overflow-y-auto p-2">
+                    {allGroups.map((group) => {
+                      const active = groupDraft.id === group.id;
+                      const color = normalizeGroupColor(group.color);
+                      return (
+                        <div
+                          key={group.id}
+                          className={`flex items-center gap-3 rounded-md border px-3 py-2 transition-colors ${
+                            active
+                              ? "border-primary/40 bg-primary/5 shadow-sm"
+                              : "border-transparent bg-transparent hover:border-border hover:bg-muted/30"
+                          }`}
+                        >
+                          <span
+                            className="size-3 shrink-0 rounded-full"
+                            style={{ backgroundColor: color }}
+                          />
+                          <div className="min-w-0 flex-1">
+                            <div className="flex items-center gap-2">
+                              <span className="truncate text-sm font-semibold text-foreground">
+                                {group.name}
+                              </span>
+                              <span className="shrink-0 rounded-md bg-muted px-1.5 py-0.5 text-[11px] font-semibold text-muted-foreground">
+                                {t("accounts.groupMembers")}{" "}
+                                {group.member_count}
+                              </span>
+                            </div>
+                            <div className="mt-0.5 truncate text-xs text-muted-foreground">
+                              {group.description ||
+                                t("accounts.groupNoDescription")}
+                            </div>
+                          </div>
+                          <Button
+                            type="button"
+                            variant="ghost"
+                            size="icon-sm"
+                            onClick={() => startEditGroup(group)}
+                            title={t("accounts.groupEdit")}
+                          >
+                            <Pencil className="size-3.5" />
+                          </Button>
+                          <Button
+                            type="button"
+                            variant="ghost"
+                            size="icon-sm"
+                            onClick={() => void handleDeleteGroup(group)}
+                            disabled={groupSubmitting}
+                            title={t("common.delete")}
+                          >
+                            <Trash2 className="size-3.5 text-red-500" />
+                          </Button>
+                        </div>
+                      );
+                    })}
+                  </div>
+                )}
+              </div>
 
-              {editTab === 'account' && editingAccount.openai_responses_api ? (
-                <div className="space-y-4">
-                  <div>
-                    <label className="block mb-2 text-sm font-semibold text-muted-foreground">{t('accounts.openaiNameLabel')}</label>
-                    <Input
-                      placeholder={t('accounts.openaiNamePlaceholder')}
-                      value={editOpenAIForm.name ?? ''}
-                      onChange={(event: ChangeEvent<HTMLInputElement>) =>
-                        setEditOpenAIForm((form) => ({ ...form, name: event.target.value }))
-                      }
-                    />
+              <div className="rounded-lg border border-border bg-background p-3">
+                <div className="flex h-8 items-center justify-between gap-3">
+                  <div className="text-sm font-semibold text-foreground">
+                    {groupDraft.id === null
+                      ? t("accounts.groupCreateTitle")
+                      : t("accounts.groupEditTitle")}
                   </div>
-                  <div>
-                    <label className="block mb-2 text-sm font-semibold text-muted-foreground">{t('accounts.openaiBaseUrl')} *</label>
+                  {groupDraft.id !== null ? (
+                    <Button
+                      type="button"
+                      variant="ghost"
+                      size="xs"
+                      onClick={resetGroupDraft}
+                    >
+                      <Plus className="size-3" />
+                      {t("accounts.groupCreate")}
+                    </Button>
+                  ) : null}
+                </div>
+                <div className="mt-4 space-y-3">
+                  <label className="block space-y-1.5">
+                    <span className="text-xs font-semibold text-muted-foreground">
+                      {t("accounts.groupName")}
+                    </span>
                     <Input
-                      placeholder="https://api.openai.com"
-                      value={editOpenAIForm.base_url}
+                      value={groupDraft.name}
                       onChange={(event: ChangeEvent<HTMLInputElement>) =>
-                        setEditOpenAIForm((form) => ({ ...form, base_url: event.target.value }))
+                        setGroupDraft((draft) => ({
+                          ...draft,
+                          name: event.target.value,
+                        }))
                       }
+                      placeholder={t("accounts.groupNamePlaceholder")}
+                      maxLength={80}
                     />
-                  </div>
-                  <div>
-                    <label className="block mb-2 text-sm font-semibold text-muted-foreground">{t('accounts.openaiApiKey')}</label>
+                  </label>
+                  <label className="block space-y-1.5">
+                    <span className="text-xs font-semibold text-muted-foreground">
+                      {t("accounts.groupDescription")}
+                    </span>
                     <Input
-                      type="password"
-                      placeholder={t('accounts.openaiApiKeyKeepPlaceholder')}
-                      value={editOpenAIForm.api_key ?? ''}
+                      value={groupDraft.description}
                       onChange={(event: ChangeEvent<HTMLInputElement>) =>
-                        setEditOpenAIForm((form) => ({ ...form, api_key: event.target.value }))
+                        setGroupDraft((draft) => ({
+                          ...draft,
+                          description: event.target.value,
+                        }))
                       }
+                      placeholder={t("accounts.groupDescriptionPlaceholder")}
+                      maxLength={240}
                     />
-                  </div>
-                  <div>
-                    <div className="mb-2 flex items-center justify-between gap-2">
-                      <label className="text-sm font-semibold text-muted-foreground">{t('accounts.openaiModels')} *</label>
-                      <Button
-                        type="button"
-                        variant="outline"
-                        size="sm"
-                        onClick={() => void handleFetchEditOpenAIModels()}
-                        disabled={editOpenAIModelsLoading}
-                      >
-                        <RefreshCw className={`size-3.5 ${editOpenAIModelsLoading ? 'animate-spin' : ''}`} />
-                        {editOpenAIModelsLoading ? t('accounts.openaiModelsFetching') : t('accounts.openaiModelsFetch')}
-                      </Button>
-                    </div>
-                    <div className="mb-3 flex gap-2">
-                      <Input
-                        placeholder={t('accounts.openaiModelsPlaceholder')}
-                        value={editOpenAIModelDraft}
-                        onChange={(event: ChangeEvent<HTMLInputElement>) => setEditOpenAIModelDraft(event.target.value)}
-                        onKeyDown={(event) => {
-                          if (event.key === 'Enter') {
-                            event.preventDefault()
-                            addEditOpenAIModelValues(editOpenAIModelDraft)
-                          }
-                        }}
-                        onPaste={(event) => {
-                          const pasted = event.clipboardData.getData('text')
-                          if (parseModelTokens(pasted).length > 1) {
-                            event.preventDefault()
-                            addEditOpenAIModelValues(pasted)
+                  </label>
+                  <div className="space-y-1.5">
+                    <span className="text-xs font-semibold text-muted-foreground">
+                      {t("accounts.groupColor")}
+                    </span>
+                    <div className="flex flex-wrap gap-2">
+                      {ACCOUNT_GROUP_COLORS.map((color) => (
+                        <button
+                          key={color}
+                          type="button"
+                          className={`size-8 rounded-lg border transition-transform hover:scale-105 ${
+                            normalizeGroupColor(groupDraft.color) === color
+                              ? "border-foreground ring-2 ring-ring/30"
+                              : "border-border"
+                          }`}
+                          style={{ backgroundColor: color }}
+                          onClick={() =>
+                            setGroupDraft((draft) => ({ ...draft, color }))
                           }
-                        }}
-                      />
-                      <Button type="button" variant="outline" onClick={() => addEditOpenAIModelValues(editOpenAIModelDraft)} disabled={!editOpenAIModelDraft.trim()}>
-                        <Plus className="size-3.5" />
-                        {t('accounts.openaiModelsAdd')}
-                      </Button>
+                          aria-label={color}
+                        />
+                      ))}
                     </div>
-                    <ModelChipGrid
-                      models={editOpenAIForm.models}
-                      onRemove={removeEditOpenAIModel}
-                      emptyLabel={t('accounts.openaiModelsEmpty')}
-                    />
-                    <p className="mt-1.5 text-xs text-muted-foreground">
-                      {t('accounts.openaiModelsHint', { count: editOpenAIForm.models.length })}
-                    </p>
-                  </div>
-                  <div>
-                    <label className="block mb-2 text-sm font-semibold text-muted-foreground">{t('accounts.proxyUrl')}</label>
                     <Input
-                      placeholder={t('accounts.proxyUrlPlaceholder')}
-                      value={editOpenAIForm.proxy_url}
+                      className="h-8 font-mono text-xs"
+                      value={groupDraft.color}
                       onChange={(event: ChangeEvent<HTMLInputElement>) =>
-                        setEditOpenAIForm((form) => ({ ...form, proxy_url: event.target.value }))
+                        setGroupDraft((draft) => ({
+                          ...draft,
+                          color: event.target.value,
+                        }))
                       }
+                      placeholder={t("accounts.groupColorPlaceholder")}
+                      maxLength={20}
                     />
                   </div>
                 </div>
-              ) : (
-                <>
-              <div className="grid gap-4 md:grid-cols-2">
-                <div className="rounded-xl border border-border p-4">
-                  <div className="text-sm font-semibold text-foreground">{t('accounts.schedulerScoreLabel')}</div>
-                  <div className="mt-1 text-xs text-muted-foreground">{t('accounts.schedulerScoreHint')}</div>
-                  <div className="mt-3 flex gap-2">
-                    <TogglePill
-                      active={scoreMode === 'default'}
-                      onClick={() => setScoreMode('default')}
-                      label={t('accounts.schedulerScoreAuto')}
-                    />
-                    <TogglePill
-                      active={scoreMode === 'custom'}
-                      onClick={() => setScoreMode('custom')}
-                      label={t('accounts.schedulerCustom')}
-                    />
+              </div>
+            </div>
+          </Modal>
+
+          <Modal
+            show={importProgress.show}
+            title={
+              importProgress.done
+                ? t("accounts.importDone")
+                : t("accounts.importingProgress")
+            }
+            contentClassName="sm:max-w-[420px]"
+            onClose={() => setImportProgress((p) => ({ ...p, show: false }))}
+          >
+            <div className="space-y-4">
+              <div className="w-full h-3 bg-muted rounded-full overflow-hidden">
+                <div
+                  className="h-full bg-primary rounded-full transition-all duration-300 ease-out"
+                  style={{
+                    width:
+                      importProgress.total > 0
+                        ? `${Math.round((importProgress.current / importProgress.total) * 100)}%`
+                        : "0%",
+                  }}
+                />
+              </div>
+              <div className="text-center text-sm text-muted-foreground">
+                {importProgress.total > 0
+                  ? `${importProgress.current} / ${importProgress.total}  (${Math.round((importProgress.current / importProgress.total) * 100)}%)`
+                  : t("accounts.importPreparing")}
+              </div>
+              <div className="grid grid-cols-3 gap-3 text-center">
+                <div className="rounded-xl bg-emerald-500/10 px-3 py-2">
+                  <div className="text-lg font-bold text-emerald-600">
+                    {importProgress.success}
                   </div>
-                  {scoreMode === 'default' ? (
-                    <div className="mt-3 rounded-lg border border-dashed border-border bg-muted/20 px-3 py-2 text-sm text-muted-foreground">
-                      {t('accounts.schedulerScoreAutoValue', { value: formatSignedNumber(getDefaultScoreBias(editingAccount.plan_type)) })}
-                    </div>
-                  ) : (
-                    <div className="mt-3 space-y-2">
-                      <Input
-                        inputMode="numeric"
-                        value={scoreInput}
-                        onChange={(event: ChangeEvent<HTMLInputElement>) => setScoreInput(event.target.value)}
-                        placeholder={t('accounts.schedulerScorePlaceholder')}
-                      />
-                      <div className={`text-xs ${scoreInputInvalid ? 'text-red-500' : 'text-muted-foreground'}`}>
-                        {scoreInputInvalid ? t('accounts.schedulerScoreRange') : t('accounts.schedulerCustomValuePreview', { value: formatSignedNumber(parsedScoreBias ?? getEffectiveScoreBias(editingAccount)) })}
-                      </div>
-                    </div>
-                  )}
-                </div>
-
-                <div className="rounded-xl border border-border p-4">
-                  <div className="text-sm font-semibold text-foreground">{t('accounts.schedulerConcurrencyLabel')}</div>
-                  <div className="mt-1 text-xs text-muted-foreground">{t('accounts.schedulerConcurrencyHint')}</div>
-                  <div className="mt-3 flex gap-2">
-                    <TogglePill
-                      active={concurrencyMode === 'default'}
-                      onClick={() => setConcurrencyMode('default')}
-                      label={t('accounts.schedulerConcurrencyAuto')}
-                    />
-                    <TogglePill
-                      active={concurrencyMode === 'custom'}
-                      onClick={() => setConcurrencyMode('custom')}
-                      label={t('accounts.schedulerCustom')}
-                    />
+                  <div className="text-[11px] text-muted-foreground">
+                    {t("accounts.importSuccess")}
                   </div>
-                  {concurrencyMode === 'default' ? (
-                    <div className="mt-3 rounded-lg border border-dashed border-border bg-muted/20 px-3 py-2 text-sm text-muted-foreground">
-                      {t('accounts.schedulerConcurrencyAutoValue', { value: getEffectiveBaseConcurrency(editingAccount) })}
-                    </div>
-                  ) : (
-                    <div className="mt-3 space-y-2">
-                      <Input
-                        inputMode="numeric"
-                        value={concurrencyInput}
-                        onChange={(event: ChangeEvent<HTMLInputElement>) => setConcurrencyInput(event.target.value)}
-                        placeholder={t('accounts.schedulerConcurrencyPlaceholder')}
-                      />
-                      <div className={`text-xs ${concurrencyInputInvalid ? 'text-red-500' : 'text-muted-foreground'}`}>
-                        {concurrencyInputInvalid ? t('accounts.schedulerConcurrencyRange') : t('accounts.schedulerCustomValuePreview', { value: parsedBaseConcurrency ?? getEffectiveBaseConcurrency(editingAccount) })}
-                      </div>
-                    </div>
-                  )}
                 </div>
-              </div>
-
-              <div className="rounded-xl border border-border p-4">
-                <div className="text-sm font-semibold text-foreground">{t('accounts.allowedAPIKeysLabel')}</div>
-                <div className="mt-1 text-xs text-muted-foreground">{t('accounts.allowedAPIKeysHint')}</div>
-                <div className="mt-3">
-                  <APIKeyMultiSelect
-                    options={apiKeys}
-                    value={allowedAPIKeySelection}
-                    disabled={apiKeys.length === 0}
-                    onChange={setAllowedAPIKeySelection}
-                    allLabel={t('accounts.allowedAPIKeysAll')}
-                    selectedLabel={t('accounts.allowedAPIKeysSelected', { count: allowedAPIKeySelection.length })}
-                    placeholder={t('accounts.allowedAPIKeysPlaceholder')}
-                    emptyLabel={t('accounts.allowedAPIKeysNoOptions')}
-                    emptyHint={t('accounts.allowedAPIKeysNoOptionsHint')}
-                  />
+                <div className="rounded-xl bg-amber-500/10 px-3 py-2">
+                  <div className="text-lg font-bold text-amber-600">
+                    {importProgress.duplicate}
+                  </div>
+                  <div className="text-[11px] text-muted-foreground">
+                    {t("accounts.importDuplicate")}
+                  </div>
                 </div>
-              </div>
-
-              <div className="rounded-xl border border-border bg-white/60 px-4 py-4 dark:bg-white/5">
-                <div className="text-sm font-semibold text-foreground">{t('accounts.schedulerPreviewTitle')}</div>
-                <div className="mt-3 grid gap-3 sm:grid-cols-2 xl:grid-cols-4">
-                  <PreviewItem label={t('accounts.schedulerPreviewRawScore')} value={String(editPreview.rawScore)} />
-                  <PreviewItem label={t('accounts.schedulerPreviewDispatchScore')} value={String(editPreview.dispatchScore)} />
-                  <PreviewItem label={t('accounts.schedulerPreviewHealthTier')} value={formatHealthTier(editPreview.healthTier, t)} />
-                  <PreviewItem label={t('accounts.schedulerPreviewDynamicConcurrency')} value={String(editPreview.dynamicConcurrency)} />
+                <div className="rounded-xl bg-red-500/10 px-3 py-2">
+                  <div className="text-lg font-bold text-red-600">
+                    {importProgress.failed}
+                  </div>
+                  <div className="text-[11px] text-muted-foreground">
+                    {t("accounts.importFailedCount")}
+                  </div>
                 </div>
               </div>
-                </>
+              {importProgress.done && (
+                <p className="text-xs text-center text-muted-foreground">
+                  {t("accounts.importDoneHint")}
+                </p>
               )}
             </div>
-          ) : null}
-        </Modal>
-
-        <Modal
-          show={importProgress.show}
-          title={importProgress.done ? t('accounts.importDone') : t('accounts.importingProgress')}
-          contentClassName="sm:max-w-[420px]"
-          onClose={() => setImportProgress(p => ({ ...p, show: false }))}
-        >
-          <div className="space-y-4">
-            <div className="w-full h-3 bg-muted rounded-full overflow-hidden">
-              <div
-                className="h-full bg-primary rounded-full transition-all duration-300 ease-out"
-                style={{ width: importProgress.total > 0 ? `${Math.round((importProgress.current / importProgress.total) * 100)}%` : '0%' }}
-              />
-            </div>
-            <div className="text-center text-sm text-muted-foreground">
-              {importProgress.total > 0
-                ? `${importProgress.current} / ${importProgress.total}  (${Math.round((importProgress.current / importProgress.total) * 100)}%)`
-                : t('accounts.importPreparing')}
-            </div>
-            <div className="grid grid-cols-3 gap-3 text-center">
-              <div className="rounded-xl bg-emerald-500/10 px-3 py-2">
-                <div className="text-lg font-bold text-emerald-600">{importProgress.success}</div>
-                <div className="text-[11px] text-muted-foreground">{t('accounts.importSuccess')}</div>
-              </div>
-              <div className="rounded-xl bg-amber-500/10 px-3 py-2">
-                <div className="text-lg font-bold text-amber-600">{importProgress.duplicate}</div>
-                <div className="text-[11px] text-muted-foreground">{t('accounts.importDuplicate')}</div>
-              </div>
-              <div className="rounded-xl bg-red-500/10 px-3 py-2">
-                <div className="text-lg font-bold text-red-600">{importProgress.failed}</div>
-                <div className="text-[11px] text-muted-foreground">{t('accounts.importFailedCount')}</div>
-              </div>
-            </div>
-            {importProgress.done && (
-              <p className="text-xs text-center text-muted-foreground">{t('accounts.importDoneHint')}</p>
-            )}
-          </div>
-        </Modal>
+          </Modal>
 
-        {confirmDialog}
+          {confirmDialog}
 
-        <ToastNotice toast={toast} />
-      </>
-    </StateShell>
+          <ToastNotice toast={toast} />
+        </>
+      </StateShell>
     </div>
-  )
+  );
 }
 
 function downloadBlob(blob: Blob, filename: string) {
-  const url = URL.createObjectURL(blob)
-  const a = document.createElement('a')
-  a.href = url
-  a.download = filename
-  document.body.appendChild(a)
-  a.click()
-  document.body.removeChild(a)
-  URL.revokeObjectURL(url)
+  const url = URL.createObjectURL(blob);
+  const a = document.createElement("a");
+  a.href = url;
+  a.download = filename;
+  document.body.appendChild(a);
+  a.click();
+  document.body.removeChild(a);
+  URL.revokeObjectURL(url);
 }
 
 function formatJSONText(text: string) {
   try {
-    return JSON.stringify(JSON.parse(text), null, 2)
+    return JSON.stringify(JSON.parse(text), null, 2);
   } catch {
-    return text
+    return text;
   }
 }
 
 async function copyTextToClipboard(text: string) {
   if (navigator.clipboard?.writeText) {
-    await navigator.clipboard.writeText(text)
-    return
+    await navigator.clipboard.writeText(text);
+    return;
   }
 
-  const textarea = document.createElement('textarea')
-  textarea.value = text
-  textarea.setAttribute('readonly', 'true')
-  textarea.style.position = 'fixed'
-  textarea.style.top = '-1000px'
-  textarea.style.opacity = '0'
-  document.body.appendChild(textarea)
-  textarea.select()
-  const copied = document.execCommand('copy')
-  document.body.removeChild(textarea)
+  const textarea = document.createElement("textarea");
+  textarea.value = text;
+  textarea.setAttribute("readonly", "true");
+  textarea.style.position = "fixed";
+  textarea.style.top = "-1000px";
+  textarea.style.opacity = "0";
+  document.body.appendChild(textarea);
+  textarea.select();
+  const copied = document.execCommand("copy");
+  document.body.removeChild(textarea);
   if (!copied) {
-    throw new Error('copy failed')
+    throw new Error("copy failed");
   }
 }
 
-function filterExistingAPIKeyIDs(selected: number[], apiKeys: APIKeyRow[]): number[] {
+function filterExistingAPIKeyIDs(
+  selected: number[],
+  apiKeys: APIKeyRow[],
+): number[] {
   if (!selected.length || !apiKeys.length) {
-    return []
+    return [];
   }
-  const existing = new Set(apiKeys.map((item) => item.id))
-  return [...new Set(selected.filter((id) => existing.has(id)))].sort((a, b) => a - b)
+  const existing = new Set(apiKeys.map((item) => item.id));
+  return [...new Set(selected.filter((id) => existing.has(id)))].sort(
+    (a, b) => a - b,
+  );
 }
 
 function formatAPIKeyOptionLabel(apiKey: APIKeyRow): string {
-  const name = apiKey.name?.trim() || `API Key #${apiKey.id}`
-  return `${name} · ${apiKey.key}`
+  const name = apiKey.name?.trim() || `API Key #${apiKey.id}`;
+  return `${name} · ${apiKey.key}`;
 }
 
 function APIKeyMultiSelect({
@@ -2709,52 +4597,52 @@ function APIKeyMultiSelect({
   emptyLabel,
   emptyHint,
 }: {
-  options: APIKeyRow[]
-  value: number[]
-  disabled: boolean
-  onChange: (value: number[]) => void
-  allLabel: string
-  selectedLabel: string
-  placeholder: string
-  emptyLabel: string
-  emptyHint: string
+  options: APIKeyRow[];
+  value: number[];
+  disabled: boolean;
+  onChange: (value: number[]) => void;
+  allLabel: string;
+  selectedLabel: string;
+  placeholder: string;
+  emptyLabel: string;
+  emptyHint: string;
 }) {
-  const [open, setOpen] = useState(false)
-  const rootRef = useRef<HTMLDivElement>(null)
+  const [open, setOpen] = useState(false);
+  const rootRef = useRef<HTMLDivElement>(null);
 
   useEffect(() => {
-    if (!open) return
+    if (!open) return;
 
     const handlePointerDown = (event: MouseEvent) => {
       if (!rootRef.current?.contains(event.target as Node)) {
-        setOpen(false)
+        setOpen(false);
       }
-    }
+    };
 
     const handleEscape = (event: KeyboardEvent) => {
-      if (event.key === 'Escape') {
-        setOpen(false)
+      if (event.key === "Escape") {
+        setOpen(false);
       }
-    }
+    };
 
-    document.addEventListener('mousedown', handlePointerDown)
-    document.addEventListener('keydown', handleEscape)
+    document.addEventListener("mousedown", handlePointerDown);
+    document.addEventListener("keydown", handleEscape);
     return () => {
-      document.removeEventListener('mousedown', handlePointerDown)
-      document.removeEventListener('keydown', handleEscape)
-    }
-  }, [open])
+      document.removeEventListener("mousedown", handlePointerDown);
+      document.removeEventListener("keydown", handleEscape);
+    };
+  }, [open]);
 
-  const summary = value.length === 0 ? allLabel : selectedLabel
+  const summary = value.length === 0 ? allLabel : selectedLabel;
 
   const toggleOption = (id: number) => {
-    if (disabled) return
+    if (disabled) return;
     if (value.includes(id)) {
-      onChange(value.filter((item) => item !== id))
-      return
+      onChange(value.filter((item) => item !== id));
+      return;
     }
-    onChange([...value, id].sort((a, b) => a - b))
-  }
+    onChange([...value, id].sort((a, b) => a - b));
+  };
 
   return (
     <div ref={rootRef} className="relative">
@@ -2763,12 +4651,12 @@ function APIKeyMultiSelect({
         disabled={disabled}
         className={`flex w-full items-center justify-between gap-3 rounded-md border border-input bg-background px-3.5 py-3 text-left shadow-xs transition-[border-color,box-shadow] ${
           disabled
-            ? 'cursor-not-allowed opacity-70'
-            : 'hover:border-primary/30 hover:bg-accent/40'
-        } ${open ? 'border-primary/35 ring-[3px] ring-primary/10' : ''}`}
+            ? "cursor-not-allowed opacity-70"
+            : "hover:border-primary/30 hover:bg-accent/40"
+        } ${open ? "border-primary/35 ring-[3px] ring-primary/10" : ""}`}
         onClick={() => {
           if (!disabled) {
-            setOpen((current) => !current)
+            setOpen((current) => !current);
           }
         }}
       >
@@ -2778,39 +4666,49 @@ function APIKeyMultiSelect({
             {disabled ? emptyHint : placeholder}
           </div>
         </div>
-        <ChevronDown className={`size-4 shrink-0 text-muted-foreground transition-transform ${open ? 'rotate-180' : ''}`} />
+        <ChevronDown
+          className={`size-4 shrink-0 text-muted-foreground transition-transform ${open ? "rotate-180" : ""}`}
+        />
       </button>
 
       {open ? (
         <div className="absolute left-0 right-0 top-[calc(100%+0.5rem)] z-50 overflow-hidden rounded-lg border border-border bg-popover shadow-[0_18px_40px_hsl(222_30%_18%/0.12)] backdrop-blur-sm">
           {options.length === 0 ? (
-            <div className="px-4 py-3 text-sm text-muted-foreground">{emptyLabel}</div>
+            <div className="px-4 py-3 text-sm text-muted-foreground">
+              {emptyLabel}
+            </div>
           ) : (
             <div className="max-h-72 space-y-1 overflow-auto p-2">
               {options.map((option) => {
-                const checked = value.includes(option.id)
+                const checked = value.includes(option.id);
                 return (
                   <button
                     key={option.id}
                     type="button"
                     className={`flex w-full items-center gap-3 rounded-md px-3 py-2.5 text-left transition-colors ${
-                      checked ? 'bg-primary/10 text-primary' : 'text-foreground hover:bg-accent/70'
+                      checked
+                        ? "bg-primary/10 text-primary"
+                        : "text-foreground hover:bg-accent/70"
                     }`}
                     onClick={() => toggleOption(option.id)}
                   >
-                    <span className={`flex size-4 items-center justify-center rounded border ${checked ? 'border-primary bg-primary text-primary-foreground' : 'border-border bg-background text-transparent'}`}>
+                    <span
+                      className={`flex size-4 items-center justify-center rounded border ${checked ? "border-primary bg-primary text-primary-foreground" : "border-border bg-background text-transparent"}`}
+                    >
                       <Check className="size-3" />
                     </span>
-                    <span className="min-w-0 flex-1 truncate text-sm">{formatAPIKeyOptionLabel(option)}</span>
+                    <span className="min-w-0 flex-1 truncate text-sm">
+                      {formatAPIKeyOptionLabel(option)}
+                    </span>
                   </button>
-                )
+                );
               })}
             </div>
           )}
         </div>
       ) : null}
     </div>
-  )
+  );
 }
 
 function ModelChipGrid({
@@ -2818,16 +4716,16 @@ function ModelChipGrid({
   onRemove,
   emptyLabel,
 }: {
-  models: string[]
-  onRemove: (model: string) => void
-  emptyLabel: string
+  models: string[];
+  onRemove: (model: string) => void;
+  emptyLabel: string;
 }) {
   if (models.length === 0) {
     return (
       <div className="rounded-lg border border-dashed border-border bg-muted/20 px-3 py-3 text-sm text-muted-foreground">
         {emptyLabel}
       </div>
-    )
+    );
   }
   return (
     <div className="grid grid-cols-1 gap-2 sm:grid-cols-2">
@@ -2837,7 +4735,9 @@ function ModelChipGrid({
           className="flex min-h-10 items-center justify-between gap-2 rounded-md border border-border bg-background px-3 py-2 text-sm"
           title={model}
         >
-          <span className="min-w-0 truncate font-mono text-[12px] text-foreground">{model}</span>
+          <span className="min-w-0 truncate font-mono text-[12px] text-foreground">
+            {model}
+          </span>
           <button
             type="button"
             className="inline-flex size-6 shrink-0 items-center justify-center rounded-md text-muted-foreground transition-colors hover:bg-muted hover:text-foreground"
@@ -2849,7 +4749,7 @@ function ModelChipGrid({
         </div>
       ))}
     </div>
-  )
+  );
 }
 
 function TogglePill({
@@ -2857,9 +4757,9 @@ function TogglePill({
   onClick,
   label,
 }: {
-  active: boolean
-  onClick: () => void
-  label: string
+  active: boolean;
+  onClick: () => void;
+  label: string;
 }) {
   return (
     <button
@@ -2867,152 +4767,183 @@ function TogglePill({
       onClick={onClick}
       className={`rounded-full px-3 py-1.5 text-xs font-semibold transition-colors ${
         active
-          ? 'bg-primary text-primary-foreground'
-          : 'bg-muted/50 text-muted-foreground hover:bg-muted'
+          ? "bg-primary text-primary-foreground"
+          : "bg-muted/50 text-muted-foreground hover:bg-muted"
       }`}
     >
       {label}
     </button>
-  )
+  );
 }
 
-function PreviewItem({
-  label,
-  value,
-}: {
-  label: string
-  value: string
-}) {
+function PreviewItem({ label, value }: { label: string; value: string }) {
   return (
     <div className="rounded-lg border border-border bg-muted/20 px-3 py-3">
-      <div className="text-[11px] font-semibold text-muted-foreground">{label}</div>
-      <div className="mt-1 text-base font-semibold text-foreground">{value}</div>
+      <div className="text-[11px] font-semibold text-muted-foreground">
+        {label}
+      </div>
+      <div className="mt-1 text-base font-semibold text-foreground">
+        {value}
+      </div>
     </div>
-  )
+  );
 }
 
 function parseIntegerInput(value: string): number | null {
-  const trimmed = value.trim()
+  const trimmed = value.trim();
   if (!trimmed || !/^-?\d+$/.test(trimmed)) {
-    return null
+    return null;
   }
 
-  return Number.parseInt(trimmed, 10)
+  return Number.parseInt(trimmed, 10);
 }
 
 function getDispatchScore(account: AccountRow): number {
-  return account.dispatch_score ?? account.scheduler_score ?? 0
+  return account.dispatch_score ?? account.scheduler_score ?? 0;
 }
 
 // OpenAI reports the $100 Pro tier as "prolite" — functionally a Pro plan with
 // a smaller usage cap. Keep behavioral comparisons (usage windows, plan filter,
 // scheduler bias) aligned with the Go side by folding it into "pro".
 function normalizePlanType(planType?: string): string {
-  const raw = (planType || '').toLowerCase().trim()
-  if (raw === 'prolite' || raw === 'pro_lite' || raw === 'pro-lite') return 'pro'
-  return raw
+  const raw = (planType || "").toLowerCase().trim();
+  if (raw === "prolite" || raw === "pro_lite" || raw === "pro-lite")
+    return "pro";
+  return raw;
 }
 
 function isFutureTime(value?: string): boolean {
-  if (!value) return false
-  const timestamp = Date.parse(value)
-  return Number.isFinite(timestamp) && timestamp > Date.now()
+  if (!value) return false;
+  const timestamp = Date.parse(value);
+  return Number.isFinite(timestamp) && timestamp > Date.now();
 }
 
 function isUsageWindowExhausted(value?: number | null): boolean {
-  return typeof value === 'number' && Number.isFinite(value) && value >= 100
+  return typeof value === "number" && Number.isFinite(value) && value >= 100;
 }
 
-function isActiveUsageWindowExhausted(value?: number | null, resetAt?: string): boolean {
-  return isUsageWindowExhausted(value) && (!resetAt || isFutureTime(resetAt))
+function isActiveUsageWindowExhausted(
+  value?: number | null,
+  resetAt?: string,
+): boolean {
+  return isUsageWindowExhausted(value) && (!resetAt || isFutureTime(resetAt));
 }
 
 function isPremiumUsagePlan(planType?: string): boolean {
-  return ['plus', 'pro', 'team', 'teamplus'].includes(normalizePlanType(planType))
+  return ["plus", "pro", "team", "teamplus"].includes(
+    normalizePlanType(planType),
+  );
 }
 
-type RateLimitWindow = '5h' | '7d'
+type RateLimitWindow = "5h" | "7d";
 
 function isRateLimitedAccount(account: AccountRow): boolean {
-  return getAccountRateLimitWindow(account) !== null
-}
-
-function getAccountRateLimitWindow(account: AccountRow): RateLimitWindow | null {
-  const status = (account.status || '').toLowerCase()
-  const reason = (account.cooldown_reason || '').toLowerCase()
-  const explicitlyRateLimited = status === 'rate_limited' ||
-    status === 'usage_exhausted' ||
-    status === 'rate_limited_5h' ||
-    status === 'rate_limited_7d' ||
-    reason === 'rate_limited' ||
-    reason === 'rate_limited_5h' ||
-    reason === 'rate_limited_7d'
-  const has7dLimit = isActiveUsageWindowExhausted(account.usage_percent_7d, account.reset_7d_at)
-  const has5hLimit = isPremiumUsagePlan(account.plan_type) &&
-    isActiveUsageWindowExhausted(account.usage_percent_5h, account.reset_5h_at)
+  return getAccountRateLimitWindow(account) !== null;
+}
+
+function getAccountRateLimitWindow(
+  account: AccountRow,
+): RateLimitWindow | null {
+  const status = (account.status || "").toLowerCase();
+  const reason = (account.cooldown_reason || "").toLowerCase();
+  const explicitlyRateLimited =
+    status === "rate_limited" ||
+    status === "usage_exhausted" ||
+    status === "rate_limited_5h" ||
+    status === "rate_limited_7d" ||
+    reason === "rate_limited" ||
+    reason === "rate_limited_5h" ||
+    reason === "rate_limited_7d";
+  const has7dLimit = isActiveUsageWindowExhausted(
+    account.usage_percent_7d,
+    account.reset_7d_at,
+  );
+  const has5hLimit =
+    isPremiumUsagePlan(account.plan_type) &&
+    isActiveUsageWindowExhausted(account.usage_percent_5h, account.reset_5h_at);
 
   // Prefer the longer 7d window when both windows are exhausted so each account
   // belongs to exactly one bucket and 5h + 7d stays equal to total limited.
   if (
-    status === 'usage_exhausted' ||
-    status === 'rate_limited_7d' ||
-    reason === 'rate_limited_7d' ||
+    status === "usage_exhausted" ||
+    status === "rate_limited_7d" ||
+    reason === "rate_limited_7d" ||
     has7dLimit
   ) {
-    return '7d'
+    return "7d";
   }
 
   if (
-    status === 'rate_limited_5h' ||
-    reason === 'rate_limited_5h' ||
+    status === "rate_limited_5h" ||
+    reason === "rate_limited_5h" ||
     has5hLimit
   ) {
-    return '5h'
+    return "5h";
   }
 
-  return explicitlyRateLimited ? '5h' : null
+  return explicitlyRateLimited ? "5h" : null;
 }
 
-function getRateLimitedWindowStats(accounts: AccountRow[]): { total: number; fiveHour: number; sevenDay: number } {
-  const stats = accounts.reduce((stats, account) => {
-    const window = getAccountRateLimitWindow(account)
-    if (!window) {
-      return stats
-    }
-    if (window === '7d') {
-      stats.sevenDay += 1
-    } else {
-      stats.fiveHour += 1
-    }
-    return stats
-  }, { fiveHour: 0, sevenDay: 0 })
+function getRateLimitedWindowStats(accounts: AccountRow[]): {
+  total: number;
+  fiveHour: number;
+  sevenDay: number;
+} {
+  const stats = accounts.reduce(
+    (stats, account) => {
+      const window = getAccountRateLimitWindow(account);
+      if (!window) {
+        return stats;
+      }
+      if (window === "7d") {
+        stats.sevenDay += 1;
+      } else {
+        stats.fiveHour += 1;
+      }
+      return stats;
+    },
+    { fiveHour: 0, sevenDay: 0 },
+  );
 
   return {
     ...stats,
     total: stats.fiveHour + stats.sevenDay,
-  }
+  };
 }
 
 function isSubscriptionPlan(planType?: string): boolean {
-  const normalized = normalizePlanType(planType)
-  if (!normalized || normalized === 'free') return false
-  if (['plus', 'pro', 'team', 'teamplus', 'enterprise', 'business', 'edu', 'education'].includes(normalized)) {
-    return true
+  const normalized = normalizePlanType(planType);
+  if (!normalized || normalized === "free") return false;
+  if (
+    [
+      "plus",
+      "pro",
+      "team",
+      "teamplus",
+      "enterprise",
+      "business",
+      "edu",
+      "education",
+    ].includes(normalized)
+  ) {
+    return true;
   }
-  return normalized.includes('plus') ||
-    normalized.startsWith('pro') ||
-    normalized.startsWith('team') ||
-    normalized.includes('enterprise') ||
-    normalized.includes('business')
+  return (
+    normalized.includes("plus") ||
+    normalized.startsWith("pro") ||
+    normalized.startsWith("team") ||
+    normalized.includes("enterprise") ||
+    normalized.includes("business")
+  );
 }
 
 interface HeaderActionMenuItem {
-  key: string
-  label: string
-  icon: ReactNode
-  disabled?: boolean
-  title?: string
-  onSelect: () => void
+  key: string;
+  label: string;
+  icon: ReactNode;
+  disabled?: boolean;
+  title?: string;
+  onSelect: () => void;
 }
 
 function HeaderActionMenu({
@@ -3020,36 +4951,36 @@ function HeaderActionMenu({
   icon,
   items,
 }: {
-  label: string
-  icon: ReactNode
-  items: HeaderActionMenuItem[]
+  label: string;
+  icon: ReactNode;
+  items: HeaderActionMenuItem[];
 }) {
-  const [open, setOpen] = useState(false)
-  const rootRef = useRef<HTMLDivElement>(null)
+  const [open, setOpen] = useState(false);
+  const rootRef = useRef<HTMLDivElement>(null);
 
   useEffect(() => {
-    if (!open) return
+    if (!open) return;
 
     const handlePointerDown = (event: MouseEvent) => {
       if (!rootRef.current?.contains(event.target as Node)) {
-        setOpen(false)
+        setOpen(false);
       }
-    }
+    };
 
     const handleEscape = (event: KeyboardEvent) => {
-      if (event.key === 'Escape') {
-        setOpen(false)
+      if (event.key === "Escape") {
+        setOpen(false);
       }
-    }
+    };
 
-    document.addEventListener('mousedown', handlePointerDown)
-    document.addEventListener('keydown', handleEscape)
+    document.addEventListener("mousedown", handlePointerDown);
+    document.addEventListener("keydown", handleEscape);
 
     return () => {
-      document.removeEventListener('mousedown', handlePointerDown)
-      document.removeEventListener('keydown', handleEscape)
-    }
-  }, [open])
+      document.removeEventListener("mousedown", handlePointerDown);
+      document.removeEventListener("keydown", handleEscape);
+    };
+  }, [open]);
 
   return (
     <div ref={rootRef} className="relative">
@@ -3063,7 +4994,9 @@ function HeaderActionMenu({
       >
         {icon}
         {label}
-        <ChevronDown className={`size-3.5 transition-transform ${open ? 'rotate-180' : ''}`} />
+        <ChevronDown
+          className={`size-3.5 transition-transform ${open ? "rotate-180" : ""}`}
+        />
       </Button>
 
       {open ? (
@@ -3078,12 +5011,14 @@ function HeaderActionMenu({
                 title={item.title}
                 className="flex w-full items-center gap-2 rounded-md px-2.5 py-2 text-left text-sm text-foreground transition-colors hover:bg-accent/70 disabled:cursor-not-allowed disabled:opacity-50"
                 onClick={() => {
-                  if (item.disabled) return
-                  setOpen(false)
-                  item.onSelect()
+                  if (item.disabled) return;
+                  setOpen(false);
+                  item.onSelect();
                 }}
               >
-                <span className="flex size-5 shrink-0 items-center justify-center text-muted-foreground">{item.icon}</span>
+                <span className="flex size-5 shrink-0 items-center justify-center text-muted-foreground">
+                  {item.icon}
+                </span>
                 <span className="min-w-0 flex-1 truncate">{item.label}</span>
               </button>
             ))}
@@ -3091,102 +5026,126 @@ function HeaderActionMenu({
         </div>
       ) : null}
     </div>
-  )
+  );
 }
 
 function formatPlanLabel(planType?: string): string {
-  const raw = (planType || '').trim()
-  if (!raw) return '-'
-  const lower = raw.toLowerCase()
-  if (lower === 'prolite' || lower === 'pro_lite' || lower === 'pro-lite') return 'ProLite'
-  return raw
+  const raw = (planType || "").trim();
+  if (!raw) return "-";
+  const lower = raw.toLowerCase();
+  if (lower === "prolite" || lower === "pro_lite" || lower === "pro-lite")
+    return "ProLite";
+  return raw;
 }
 
 function PlanBadge({ planType }: { planType?: string }) {
-  const label = formatPlanLabel(planType)
-  if (label === '-') return <span className="text-[12px] text-muted-foreground">-</span>
+  const label = formatPlanLabel(planType);
+  if (label === "-")
+    return <span className="text-[12px] text-muted-foreground">-</span>;
 
   const style: Record<string, string> = {
-    pro: 'bg-violet-100 text-violet-700 ring-violet-500/30 dark:bg-violet-500/20 dark:text-violet-300 dark:ring-violet-400/30',
-    prolite: 'bg-purple-50 text-purple-600 ring-purple-400/25 dark:bg-purple-500/15 dark:text-purple-300 dark:ring-purple-400/25',
-    plus: 'bg-blue-100 text-blue-700 ring-blue-500/30 dark:bg-blue-500/20 dark:text-blue-300 dark:ring-blue-400/30',
-    team: 'bg-amber-100 text-amber-700 ring-amber-500/30 dark:bg-amber-500/20 dark:text-amber-300 dark:ring-amber-400/30',
-    free: 'bg-zinc-100 text-zinc-500 ring-zinc-400/20 dark:bg-zinc-500/10 dark:text-zinc-400 dark:ring-zinc-400/15',
-  }
-
-  const normalized = normalizePlanType(planType)
-  const key = normalized === 'pro' && label === 'ProLite' ? 'prolite' : normalized
-  const cls = style[key] || 'bg-slate-100 text-slate-600 ring-slate-400/20 dark:bg-slate-500/15 dark:text-slate-300 dark:ring-slate-400/20'
+    pro: "bg-violet-100 text-violet-700 ring-violet-500/30 dark:bg-violet-500/20 dark:text-violet-300 dark:ring-violet-400/30",
+    prolite:
+      "bg-purple-50 text-purple-600 ring-purple-400/25 dark:bg-purple-500/15 dark:text-purple-300 dark:ring-purple-400/25",
+    plus: "bg-blue-100 text-blue-700 ring-blue-500/30 dark:bg-blue-500/20 dark:text-blue-300 dark:ring-blue-400/30",
+    team: "bg-amber-100 text-amber-700 ring-amber-500/30 dark:bg-amber-500/20 dark:text-amber-300 dark:ring-amber-400/30",
+    free: "bg-zinc-100 text-zinc-500 ring-zinc-400/20 dark:bg-zinc-500/10 dark:text-zinc-400 dark:ring-zinc-400/15",
+  };
+
+  const normalized = normalizePlanType(planType);
+  const key =
+    normalized === "pro" && label === "ProLite" ? "prolite" : normalized;
+  const cls =
+    style[key] ||
+    "bg-slate-100 text-slate-600 ring-slate-400/20 dark:bg-slate-500/15 dark:text-slate-300 dark:ring-slate-400/20";
 
   return (
-    <span className={`inline-flex items-center rounded-md px-2.5 py-1 text-[13px] font-semibold ring-1 ring-inset ${cls}`}>
+    <span
+      className={`inline-flex items-center rounded-md px-2.5 py-1 text-[13px] font-semibold ring-1 ring-inset ${cls}`}
+    >
       {label}
     </span>
-  )
+  );
 }
 
 function getDefaultScoreBias(planType?: string): number {
   switch (normalizePlanType(planType)) {
-    case 'pro':
-    case 'plus':
-    case 'team':
-      return 50
+    case "pro":
+    case "plus":
+    case "team":
+      return 50;
     default:
-      return 0
+      return 0;
   }
 }
 
 function getEffectiveScoreBias(account: AccountRow): number {
-  if (typeof account.score_bias_effective === 'number') {
-    return account.score_bias_effective
+  if (typeof account.score_bias_effective === "number") {
+    return account.score_bias_effective;
   }
-  if (typeof account.score_bias_override === 'number') {
-    return account.score_bias_override
+  if (typeof account.score_bias_override === "number") {
+    return account.score_bias_override;
   }
-  return getDefaultScoreBias(account.plan_type)
+  return getDefaultScoreBias(account.plan_type);
 }
 
 function getEffectiveBaseConcurrency(account: AccountRow): number {
-  if (typeof account.base_concurrency_effective === 'number' && account.base_concurrency_effective > 0) {
-    return account.base_concurrency_effective
+  if (
+    typeof account.base_concurrency_effective === "number" &&
+    account.base_concurrency_effective > 0
+  ) {
+    return account.base_concurrency_effective;
   }
-  if (typeof account.base_concurrency_override === 'number' && account.base_concurrency_override > 0) {
-    return account.base_concurrency_override
+  if (
+    typeof account.base_concurrency_override === "number" &&
+    account.base_concurrency_override > 0
+  ) {
+    return account.base_concurrency_override;
   }
-  if (typeof account.dynamic_concurrency_limit === 'number' && account.dynamic_concurrency_limit > 0) {
-    return account.dynamic_concurrency_limit
+  if (
+    typeof account.dynamic_concurrency_limit === "number" &&
+    account.dynamic_concurrency_limit > 0
+  ) {
+    return account.dynamic_concurrency_limit;
   }
-  return 1
+  return 1;
 }
 
-function computePreviewDispatchScore(account: AccountRow, rawScore: number, appliedBias: number): number {
+function computePreviewDispatchScore(
+  account: AccountRow,
+  rawScore: number,
+  appliedBias: number,
+): number {
   if (
-    (account.health_tier === 'healthy' || account.health_tier === 'warm') &&
-    (account.status === 'active' || account.status === 'ready')
+    (account.health_tier === "healthy" || account.health_tier === "warm") &&
+    (account.status === "active" || account.status === "ready")
   ) {
-    return rawScore + appliedBias
+    return rawScore + appliedBias;
   }
-  return rawScore
+  return rawScore;
 }
 
-function computePreviewDynamicConcurrency(account: AccountRow, baseConcurrency: number): number {
+function computePreviewDynamicConcurrency(
+  account: AccountRow,
+  baseConcurrency: number,
+): number {
   switch (account.health_tier) {
-    case 'healthy':
-      return baseConcurrency
-    case 'warm':
-      return Math.max(1, Math.floor(baseConcurrency / 2))
-    case 'risky':
-      return 1
-    case 'banned':
-      return 0
+    case "healthy":
+      return baseConcurrency;
+    case "warm":
+      return Math.max(1, Math.floor(baseConcurrency / 2));
+    case "risky":
+      return 1;
+    case "banned":
+      return 0;
     default:
-      return account.dynamic_concurrency_limit ?? baseConcurrency
+      return account.dynamic_concurrency_limit ?? baseConcurrency;
   }
 }
 
 function formatSignedNumber(value: number): string {
-  if (value > 0) return `+${value}`
-  return String(value)
+  if (value > 0) return `+${value}`;
+  return String(value);
 }
 
 function CompactStat({
@@ -3196,56 +5155,67 @@ function CompactStat({
   tone,
   details,
 }: {
-  label: string
-  chipLabel?: string
-  value: number
-  tone: 'neutral' | 'success' | 'warning' | 'danger'
-  details?: Array<{ label: string; value: number }>
+  label: string;
+  chipLabel?: string;
+  value: number;
+  tone: "neutral" | "success" | "warning" | "danger";
+  details?: Array<{ label: string; value: number }>;
 }) {
   const toneStyle = {
     neutral: {
-      chip: 'bg-slate-500/10 text-slate-600 dark:bg-slate-500/20 dark:text-slate-300',
-      dot: 'bg-slate-500',
+      chip: "bg-slate-500/10 text-slate-600 dark:bg-slate-500/20 dark:text-slate-300",
+      dot: "bg-slate-500",
     },
     success: {
-      chip: 'bg-emerald-500/10 text-emerald-600 dark:bg-emerald-500/20 dark:text-emerald-300',
-      dot: 'bg-emerald-500',
+      chip: "bg-emerald-500/10 text-emerald-600 dark:bg-emerald-500/20 dark:text-emerald-300",
+      dot: "bg-emerald-500",
     },
     warning: {
-      chip: 'bg-amber-500/10 text-amber-600 dark:bg-amber-500/20 dark:text-amber-300',
-      dot: 'bg-amber-500',
+      chip: "bg-amber-500/10 text-amber-600 dark:bg-amber-500/20 dark:text-amber-300",
+      dot: "bg-amber-500",
     },
     danger: {
-      chip: 'bg-red-500/10 text-red-600 dark:bg-red-500/20 dark:text-red-300',
-      dot: 'bg-red-500',
+      chip: "bg-red-500/10 text-red-600 dark:bg-red-500/20 dark:text-red-300",
+      dot: "bg-red-500",
     },
-  }[tone]
+  }[tone];
 
   return (
     <div className="flex min-h-[88px] items-center justify-between gap-3 rounded-lg border border-border bg-card/85 px-3 py-2.5 shadow-sm">
       <div className="min-w-0">
-        <div className="text-[12px] font-semibold text-muted-foreground">{label}</div>
-        <div className="mt-1 text-[24px] font-bold leading-none text-foreground">{value}</div>
+        <div className="text-[12px] font-semibold text-muted-foreground">
+          {label}
+        </div>
+        <div className="mt-1 text-[24px] font-bold leading-none text-foreground">
+          {value}
+        </div>
       </div>
       <div className="flex min-h-[58px] shrink-0 flex-col items-end gap-1.5">
-        <div className={`inline-flex items-center gap-1.5 rounded-md px-2 py-1 text-[12px] font-semibold ${toneStyle.chip}`}>
+        <div
+          className={`inline-flex items-center gap-1.5 rounded-md px-2 py-1 text-[12px] font-semibold ${toneStyle.chip}`}
+        >
           <span className={`size-2 rounded-full ${toneStyle.dot}`} />
           {chipLabel ?? label}
         </div>
         {details && details.length > 0 && (
           <div className="flex flex-col items-end gap-0.5 text-[11px] font-semibold leading-4 text-muted-foreground">
             {details.map((item) => (
-              <div key={item.label} className="grid grid-cols-[2ch_auto_max-content] items-center gap-x-0.5 tabular-nums">
+              <div
+                key={item.label}
+                className="grid grid-cols-[2ch_auto_max-content] items-center gap-x-0.5 tabular-nums"
+              >
                 <span className="justify-self-start">{item.label}</span>
                 <span className="justify-self-center">：</span>
-                <span className="justify-self-end text-foreground">{item.value}</span>
+                <span className="justify-self-end text-foreground">
+                  {item.value}
+                </span>
               </div>
             ))}
           </div>
         )}
       </div>
     </div>
-  )
+  );
 }
 
 function SchedulerChip({
@@ -3253,68 +5223,231 @@ function SchedulerChip({
   value,
   tone,
 }: {
-  label: string
-  value: number
-  tone: 'neutral' | 'success' | 'warning' | 'danger'
+  label: string;
+  value: number;
+  tone: "neutral" | "success" | "warning" | "danger";
 }) {
   const toneStyle = {
-    neutral: 'bg-slate-500/10 text-slate-600 dark:bg-slate-500/20 dark:text-slate-300',
-    success: 'bg-emerald-500/10 text-emerald-600 dark:bg-emerald-500/20 dark:text-emerald-300',
-    warning: 'bg-amber-500/10 text-amber-600 dark:bg-amber-500/20 dark:text-amber-300',
-    danger: 'bg-red-500/10 text-red-600 dark:bg-red-500/20 dark:text-red-300',
-  }[tone]
+    neutral:
+      "bg-slate-500/10 text-slate-600 dark:bg-slate-500/20 dark:text-slate-300",
+    success:
+      "bg-emerald-500/10 text-emerald-600 dark:bg-emerald-500/20 dark:text-emerald-300",
+    warning:
+      "bg-amber-500/10 text-amber-600 dark:bg-amber-500/20 dark:text-amber-300",
+    danger: "bg-red-500/10 text-red-600 dark:bg-red-500/20 dark:text-red-300",
+  }[tone];
 
   return (
-    <span className={`inline-flex items-center gap-1.5 rounded-full px-2.5 py-1 font-semibold ${toneStyle}`}>
+    <span
+      className={`inline-flex items-center gap-1.5 rounded-full px-2.5 py-1 font-semibold ${toneStyle}`}
+    >
       <span>{label}</span>
       <span>{value}</span>
     </span>
-  )
+  );
+}
+
+function ChipList({
+  items,
+  tone,
+}: {
+  items: string[];
+  tone: "purple" | "blue";
+}) {
+  if (items.length === 0) return null;
+  const visible = items.slice(0, 3);
+  const hidden = items.length - visible.length;
+  const toneClass =
+    tone === "purple"
+      ? "bg-purple-500/10 text-purple-700 ring-purple-500/20 dark:text-purple-300"
+      : "bg-blue-500/10 text-blue-700 ring-blue-500/20 dark:text-blue-300";
+
+  return (
+    <div className="mt-1.5 flex flex-wrap gap-1">
+      {visible.map((item) => (
+        <span
+          key={item}
+          className={`inline-flex items-center rounded-md px-1.5 py-0.5 text-[10px] font-semibold ring-1 ring-inset ${toneClass}`}
+        >
+          {item}
+        </span>
+      ))}
+      {hidden > 0 && (
+        <span className="inline-flex items-center rounded-md bg-muted px-1.5 py-0.5 text-[10px] font-semibold text-muted-foreground">
+          +{hidden}
+        </span>
+      )}
+    </div>
+  );
+}
+
+function normalizeGroupColor(color?: string): string {
+  const value = (color || "").trim();
+  return /^#[0-9a-fA-F]{6}$/.test(value) ? value : ACCOUNT_GROUP_COLORS[0];
+}
+
+function resolveAccountGroups(
+  ids: number[],
+  groups: AccountGroup[],
+): AccountGroup[] {
+  if (ids.length === 0 || groups.length === 0) return [];
+  const byID = new Map(groups.map((group) => [group.id, group]));
+  return ids.map((id) => byID.get(id)).filter(Boolean) as AccountGroup[];
+}
+
+function GroupChipList({ groups }: { groups: AccountGroup[] }) {
+  if (groups.length === 0) return null;
+  const visible = groups.slice(0, 3);
+  const hidden = groups.length - visible.length;
+
+  return (
+    <div className="mt-1.5 flex flex-wrap gap-1">
+      {visible.map((group) => {
+        const color = normalizeGroupColor(group.color);
+        return (
+          <span
+            key={group.id}
+            className="inline-flex items-center gap-1 rounded-md px-1.5 py-0.5 text-[10px] font-semibold"
+            style={{
+              backgroundColor: `${color}14`,
+              color,
+              boxShadow: `inset 0 0 0 1px ${color}33`,
+            }}
+            title={group.description || group.name}
+          >
+            <span className="size-1.5 rounded-full bg-current" />
+            {group.name}
+          </span>
+        );
+      })}
+      {hidden > 0 && (
+        <span className="inline-flex items-center rounded-md bg-muted px-1.5 py-0.5 text-[10px] font-semibold text-muted-foreground">
+          +{hidden}
+        </span>
+      )}
+    </div>
+  );
+}
+
+function ColumnSettingsMenu({
+  columns,
+  onToggle,
+  onReset,
+  resetTitle,
+  labels,
+  title,
+}: {
+  columns: Record<AccountTableColumn, boolean>;
+  onToggle: (column: AccountTableColumn) => void;
+  onReset: () => void;
+  resetTitle: string;
+  labels: Record<AccountTableColumn, string>;
+  title: string;
+}) {
+  const [open, setOpen] = useState(false);
+  const rootRef = useRef<HTMLDivElement>(null);
+
+  useEffect(() => {
+    if (!open) return;
+    const handler = (event: MouseEvent) => {
+      if (rootRef.current && !rootRef.current.contains(event.target as Node)) {
+        setOpen(false);
+      }
+    };
+    document.addEventListener("mousedown", handler);
+    return () => document.removeEventListener("mousedown", handler);
+  }, [open]);
+
+  return (
+    <div ref={rootRef} className="relative">
+      <Button
+        type="button"
+        variant="outline"
+        size="sm"
+        onClick={() => setOpen((current) => !current)}
+        title={title}
+      >
+        <SlidersHorizontal className="size-3.5" />
+        {title}
+      </Button>
+      {open ? (
+        <div className="absolute right-0 top-[calc(100%+0.5rem)] z-50 w-48 overflow-hidden rounded-lg border border-border bg-popover p-1.5 shadow-lg">
+          <button
+            type="button"
+            className="mb-1 flex w-full items-center justify-center rounded-md px-2.5 py-1.5 text-xs font-semibold text-primary transition-colors hover:bg-accent/70"
+            onClick={onReset}
+          >
+            {resetTitle}
+          </button>
+          {ACCOUNT_TABLE_COLUMNS.map((column) => (
+            <button
+              key={column}
+              type="button"
+              role="menuitemcheckbox"
+              aria-checked={columns[column]}
+              className="flex w-full items-center gap-2 rounded-md px-2.5 py-2 text-left text-sm text-foreground transition-colors hover:bg-accent/70"
+              onClick={() => onToggle(column)}
+            >
+              <span
+                className={`flex size-4 shrink-0 items-center justify-center rounded border ${columns[column] ? "border-primary bg-primary text-primary-foreground" : "border-border bg-background"}`}
+              >
+                {columns[column] ? <Check className="size-3" /> : null}
+              </span>
+              <span className="min-w-0 flex-1 truncate">{labels[column]}</span>
+            </button>
+          ))}
+        </div>
+      ) : null}
+    </div>
+  );
 }
 
 function formatHealthTier(healthTier?: string, t?: any) {
-  if (!t) return 'Unknown'
+  if (!t) return "Unknown";
   switch (healthTier) {
-    case 'healthy':
-      return t('accounts.healthy')
-    case 'warm':
-      return t('accounts.warm')
-    case 'risky':
-      return t('accounts.risky')
-    case 'banned':
-      return t('accounts.quarantine')
+    case "healthy":
+      return t("accounts.healthy");
+    case "warm":
+      return t("accounts.warm");
+    case "risky":
+      return t("accounts.risky");
+    case "banned":
+      return t("accounts.quarantine");
     default:
-      return t('accounts.unknown')
+      return t("accounts.unknown");
   }
 }
 
 // ==================== 测试连接弹窗 ====================
 
 interface TestEvent {
-  type: 'test_start' | 'content' | 'test_complete' | 'error'
-  text?: string
-  model?: string
-  success?: boolean
-  error?: string
+  type: "test_start" | "content" | "test_complete" | "error";
+  text?: string;
+  model?: string;
+  success?: boolean;
+  error?: string;
 }
 
 function formatTestErrorMessage(message: string) {
-  const normalized = message.trim()
-  const jsonStart = normalized.indexOf('{')
+  const normalized = message.trim();
+  const jsonStart = normalized.indexOf("{");
 
   if (jsonStart === -1) {
-    return normalized
+    return normalized;
   }
 
-  const prefix = normalized.slice(0, jsonStart).trim().replace(/[：:]\s*$/, '')
-  const jsonText = normalized.slice(jsonStart)
+  const prefix = normalized
+    .slice(0, jsonStart)
+    .trim()
+    .replace(/[：:]\s*$/, "");
+  const jsonText = normalized.slice(jsonStart);
 
   try {
-    const parsed = JSON.parse(jsonText)
-    const prettyJson = JSON.stringify(parsed, null, 2)
-    return prefix ? `${prefix}\n${prettyJson}` : prettyJson
+    const parsed = JSON.parse(jsonText);
+    const prettyJson = JSON.stringify(parsed, null, 2);
+    return prefix ? `${prefix}\n${prettyJson}` : prettyJson;
   } catch {
-    return normalized
+    return normalized;
   }
 }
 
@@ -3327,38 +5460,49 @@ function formatTestOutput(text: string) {
   }
 }
 
-const DEFAULT_TEST_MODEL = 'gpt-5.4'
+const DEFAULT_TEST_MODEL = "gpt-5.4";
 
 function isConnectionTestModel(model: string) {
-  const value = model.trim().toLowerCase()
-  return value !== '' && !value.includes('image')
+  const value = model.trim().toLowerCase();
+  return value !== "" && !value.includes("image");
 }
 
-function extractTextModels(modelsResp: Awaited<ReturnType<typeof api.getModels>>) {
+function extractTextModels(
+  modelsResp: Awaited<ReturnType<typeof api.getModels>>,
+) {
   if (modelsResp.items && modelsResp.items.length > 0) {
     return modelsResp.items
-      .filter((item) => item.enabled && item.category !== 'image' && !item.id.includes('image'))
-      .map((item) => item.id)
+      .filter(
+        (item) =>
+          item.enabled &&
+          item.category !== "image" &&
+          !item.id.includes("image"),
+      )
+      .map((item) => item.id);
   }
-  return (modelsResp.models ?? []).filter(isConnectionTestModel)
+  return (modelsResp.models ?? []).filter(isConnectionTestModel);
 }
 
-function uniqueTestModels(models: string[], preferredModel?: string, includeDefault = true) {
-  const seen = new Set<string>()
-  const result: string[] = []
+function uniqueTestModels(
+  models: string[],
+  preferredModel?: string,
+  includeDefault = true,
+) {
+  const seen = new Set<string>();
+  const result: string[] = [];
   const candidates = [
-    preferredModel ?? '',
+    preferredModel ?? "",
     ...models,
     ...(includeDefault ? [DEFAULT_TEST_MODEL] : []),
-  ]
+  ];
 
   for (const model of candidates) {
-    const value = model.trim()
-    if (!isConnectionTestModel(value) || seen.has(value)) continue
-    seen.add(value)
-    result.push(value)
+    const value = model.trim();
+    if (!isConnectionTestModel(value) || seen.has(value)) continue;
+    seen.add(value);
+    result.push(value);
   }
-  return result
+  return result;
 }
 
 function TestConnectionModal({
@@ -3366,252 +5510,290 @@ function TestConnectionModal({
   onClose,
   onSettled,
 }: {
-  account: AccountRow
-  onClose: () => void
-  onSettled: () => void
+  account: AccountRow;
+  onClose: () => void;
+  onSettled: () => void;
 }) {
-  const { t } = useTranslation()
-  const [output, setOutput] = useState<string[]>([])
-  const [status, setStatus] = useState<'connecting' | 'streaming' | 'success' | 'error'>('connecting')
-  const [errorMsg, setErrorMsg] = useState('')
-  const [model, setModel] = useState('')
-  const [selectedModel, setSelectedModel] = useState('')
-  const [modelOptions, setModelOptions] = useState<string[]>([])
-  const [modelOptionsReady, setModelOptionsReady] = useState(false)
-  const abortRef = useRef<AbortController | null>(null)
-  const outputEndRef = useRef<HTMLDivElement>(null)
-  const settledRef = useRef(false)
-  const onSettledRef = useRef(onSettled)
-  onSettledRef.current = onSettled
+  const { t } = useTranslation();
+  const [output, setOutput] = useState<string[]>([]);
+  const [status, setStatus] = useState<
+    "connecting" | "streaming" | "success" | "error"
+  >("connecting");
+  const [errorMsg, setErrorMsg] = useState("");
+  const [model, setModel] = useState("");
+  const [selectedModel, setSelectedModel] = useState("");
+  const [modelOptions, setModelOptions] = useState<string[]>([]);
+  const [modelOptionsReady, setModelOptionsReady] = useState(false);
+  const abortRef = useRef<AbortController | null>(null);
+  const outputEndRef = useRef<HTMLDivElement>(null);
+  const settledRef = useRef(false);
+  const onSettledRef = useRef(onSettled);
+  onSettledRef.current = onSettled;
 
   const markSettled = useCallback(() => {
-    if (settledRef.current) return
-    settledRef.current = true
-    onSettledRef.current()
-  }, [])
+    if (settledRef.current) return;
+    settledRef.current = true;
+    onSettledRef.current();
+  }, []);
 
-  const isOpenAIResponsesAccount = Boolean(account.openai_responses_api)
+  const isOpenAIResponsesAccount = Boolean(account.openai_responses_api);
 
   const modelSelectOptions = useMemo(
-    () => uniqueTestModels(modelOptions, selectedModel, !isOpenAIResponsesAccount).map((item) => ({ label: item, value: item })),
-    [isOpenAIResponsesAccount, modelOptions, selectedModel]
-  )
+    () =>
+      uniqueTestModels(
+        modelOptions,
+        selectedModel,
+        !isOpenAIResponsesAccount,
+      ).map((item) => ({ label: item, value: item })),
+    [isOpenAIResponsesAccount, modelOptions, selectedModel],
+  );
 
   useEffect(() => {
-    let active = true
+    let active = true;
 
     const loadModels = async () => {
       try {
-        const settings = await api.getSettings()
-        if (!active) return
+        const settings = await api.getSettings();
+        if (!active) return;
 
         if (isOpenAIResponsesAccount) {
-          const accountModels = (account.models ?? []).filter(isConnectionTestModel)
-          const preferredModel = accountModels.find(item => item.toLowerCase() === settings.test_model.toLowerCase()) ?? accountModels[0]
-          const nextModels = uniqueTestModels(accountModels, preferredModel, false)
-          setModelOptions(nextModels)
-          setSelectedModel((current) => current || nextModels[0] || '')
-          return
+          const accountModels = (account.models ?? []).filter(
+            isConnectionTestModel,
+          );
+          const preferredModel =
+            accountModels.find(
+              (item) =>
+                item.toLowerCase() === settings.test_model.toLowerCase(),
+            ) ?? accountModels[0];
+          const nextModels = uniqueTestModels(
+            accountModels,
+            preferredModel,
+            false,
+          );
+          setModelOptions(nextModels);
+          setSelectedModel((current) => current || nextModels[0] || "");
+          return;
         }
 
-        const modelsResp = await api.getModels()
-        if (!active) return
-        const upstreamModels = extractTextModels(modelsResp)
-        const preferredModel = isConnectionTestModel(settings.test_model) ? settings.test_model : DEFAULT_TEST_MODEL
-        const nextModels = uniqueTestModels(upstreamModels, preferredModel)
-        setModelOptions(nextModels)
-        setSelectedModel((current) => current || nextModels[0] || DEFAULT_TEST_MODEL)
+        const modelsResp = await api.getModels();
+        if (!active) return;
+        const upstreamModels = extractTextModels(modelsResp);
+        const preferredModel = isConnectionTestModel(settings.test_model)
+          ? settings.test_model
+          : DEFAULT_TEST_MODEL;
+        const nextModels = uniqueTestModels(upstreamModels, preferredModel);
+        setModelOptions(nextModels);
+        setSelectedModel(
+          (current) => current || nextModels[0] || DEFAULT_TEST_MODEL,
+        );
       } catch {
-        if (!active) return
+        if (!active) return;
         if (isOpenAIResponsesAccount) {
-          const fallbackModels = uniqueTestModels((account.models ?? []).filter(isConnectionTestModel), undefined, false)
-          setModelOptions(fallbackModels)
-          setSelectedModel((current) => current || fallbackModels[0] || '')
+          const fallbackModels = uniqueTestModels(
+            (account.models ?? []).filter(isConnectionTestModel),
+            undefined,
+            false,
+          );
+          setModelOptions(fallbackModels);
+          setSelectedModel((current) => current || fallbackModels[0] || "");
         } else {
-          const fallbackModels = uniqueTestModels([], DEFAULT_TEST_MODEL)
-          setModelOptions(fallbackModels)
-          setSelectedModel((current) => current || fallbackModels[0])
+          const fallbackModels = uniqueTestModels([], DEFAULT_TEST_MODEL);
+          setModelOptions(fallbackModels);
+          setSelectedModel((current) => current || fallbackModels[0]);
         }
       } finally {
         if (active) {
-          setModelOptionsReady(true)
+          setModelOptionsReady(true);
         }
       }
-    }
+    };
 
-    void loadModels()
+    void loadModels();
 
     return () => {
-      active = false
-    }
-  }, [account.models, isOpenAIResponsesAccount])
+      active = false;
+    };
+  }, [account.models, isOpenAIResponsesAccount]);
 
   useEffect(() => {
-    if (!modelOptionsReady || !selectedModel) return
+    if (!modelOptionsReady || !selectedModel) return;
 
     // 重置状态（StrictMode 二次 mount 时清理上一次的残留）
-    setOutput([])
-    setStatus('connecting')
-    setErrorMsg('')
-    setModel(selectedModel)
-    settledRef.current = false
+    setOutput([]);
+    setStatus("connecting");
+    setErrorMsg("");
+    setModel(selectedModel);
+    settledRef.current = false;
 
-    const controller = new AbortController()
-    abortRef.current = controller
+    const controller = new AbortController();
+    abortRef.current = controller;
 
     const run = async () => {
-      if (controller.signal.aborted) return
+      if (controller.signal.aborted) return;
 
       try {
-        const params = new URLSearchParams({ model: selectedModel })
-        const res = await fetch(`/api/admin/accounts/${account.id}/test?${params.toString()}`, {
-          signal: controller.signal,
-          headers: getAdminKey() ? { 'X-Admin-Key': getAdminKey() } : {},
-        })
+        const params = new URLSearchParams({ model: selectedModel });
+        const res = await fetch(
+          `/api/admin/accounts/${account.id}/test?${params.toString()}`,
+          {
+            signal: controller.signal,
+            headers: getAdminKey() ? { "X-Admin-Key": getAdminKey() } : {},
+          },
+        );
 
         if (!res.ok) {
-          const body = await res.text()
-          let msg = `HTTP ${res.status}`
+          const body = await res.text();
+          let msg = `HTTP ${res.status}`;
           try {
-            const parsed = JSON.parse(body)
-            if (parsed.error) msg = parsed.error
-          } catch { /* ignore */ }
-          setStatus('error')
-          setErrorMsg(msg)
-          markSettled()
-          return
+            const parsed = JSON.parse(body);
+            if (parsed.error) msg = parsed.error;
+          } catch {
+            /* ignore */
+          }
+          setStatus("error");
+          setErrorMsg(msg);
+          markSettled();
+          return;
         }
 
-        const reader = res.body?.getReader()
+        const reader = res.body?.getReader();
         if (!reader) {
-          setStatus('error')
-          setErrorMsg(t('accounts.browserStreamingUnsupported'))
-          markSettled()
-          return
+          setStatus("error");
+          setErrorMsg(t("accounts.browserStreamingUnsupported"));
+          markSettled();
+          return;
         }
 
-        const decoder = new TextDecoder()
-        let buffer = ''
-        let receivedTerminalEvent = false
+        const decoder = new TextDecoder();
+        let buffer = "";
+        let receivedTerminalEvent = false;
 
         const processEventLines = (lines: string[]) => {
           for (const line of lines) {
-            const trimmed = line.trim()
-            if (!trimmed.startsWith('data: ')) continue
+            const trimmed = line.trim();
+            if (!trimmed.startsWith("data: ")) continue;
 
             try {
-              const event: TestEvent = JSON.parse(trimmed.slice(6))
+              const event: TestEvent = JSON.parse(trimmed.slice(6));
 
               switch (event.type) {
-                case 'test_start':
-                  setModel(event.model || selectedModel)
-                  setStatus('streaming')
-                  break
-                case 'content':
+                case "test_start":
+                  setModel(event.model || selectedModel);
+                  setStatus("streaming");
+                  break;
+                case "content":
                   if (event.text) {
-                    setOutput((prev) => [...prev, event.text!])
+                    setOutput((prev) => [...prev, event.text!]);
                   }
-                  break
-                case 'test_complete':
-                  receivedTerminalEvent = true
-                  setStatus(event.success ? 'success' : 'error')
-                  markSettled()
-                  break
-                case 'error':
-                  receivedTerminalEvent = true
-                  setStatus('error')
-                  setErrorMsg(event.error || t('accounts.unknownError'))
-                  markSettled()
-                  break
+                  break;
+                case "test_complete":
+                  receivedTerminalEvent = true;
+                  setStatus(event.success ? "success" : "error");
+                  markSettled();
+                  break;
+                case "error":
+                  receivedTerminalEvent = true;
+                  setStatus("error");
+                  setErrorMsg(event.error || t("accounts.unknownError"));
+                  markSettled();
+                  break;
               }
-            } catch { /* ignore non-JSON lines */ }
+            } catch {
+              /* ignore non-JSON lines */
+            }
           }
-        }
+        };
 
         while (true) {
-          const { done, value } = await reader.read()
+          const { done, value } = await reader.read();
           if (done) {
-            buffer += decoder.decode()
-            break
+            buffer += decoder.decode();
+            break;
           }
 
-          buffer += decoder.decode(value, { stream: true })
-          const lines = buffer.split('\n')
-          buffer = lines.pop() || ''
-          processEventLines(lines)
+          buffer += decoder.decode(value, { stream: true });
+          const lines = buffer.split("\n");
+          buffer = lines.pop() || "";
+          processEventLines(lines);
         }
 
         if (buffer.trim()) {
-          processEventLines([buffer])
+          processEventLines([buffer]);
         }
 
         if (!receivedTerminalEvent) {
-          setStatus('error')
-          setErrorMsg(t('accounts.connectionEndedUnexpectedly'))
-          markSettled()
+          setStatus("error");
+          setErrorMsg(t("accounts.connectionEndedUnexpectedly"));
+          markSettled();
         }
       } catch (err: unknown) {
-        if (err instanceof DOMException && err.name === 'AbortError') return
-        setStatus('error')
-        setErrorMsg(err instanceof Error ? err.message : t('accounts.connectionFailed'))
-        markSettled()
+        if (err instanceof DOMException && err.name === "AbortError") return;
+        setStatus("error");
+        setErrorMsg(
+          err instanceof Error ? err.message : t("accounts.connectionFailed"),
+        );
+        markSettled();
       }
-    }
+    };
 
     // 延迟 50ms 启动，确保 StrictMode cleanup 有足够时间执行 abort
     const timer = window.setTimeout(() => {
-      void run()
-    }, 50)
+      void run();
+    }, 50);
 
     return () => {
-      window.clearTimeout(timer)
-      controller.abort()
-    }
-  }, [account.id, markSettled, modelOptionsReady, selectedModel, t])
+      window.clearTimeout(timer);
+      controller.abort();
+    };
+  }, [account.id, markSettled, modelOptionsReady, selectedModel, t]);
 
   useEffect(() => {
-    outputEndRef.current?.scrollIntoView({ behavior: 'smooth' })
-  }, [output])
+    outputEndRef.current?.scrollIntoView({ behavior: "smooth" });
+  }, [output]);
 
   const statusLabel = {
-    connecting: `⏳ ${t('accounts.connecting')}`,
-    streaming: `🔄 ${t('accounts.receivingResponse')}`,
-    success: `✅ ${t('accounts.testSuccess')}`,
-    error: `❌ ${t('accounts.testFailed')}`,
-  }[status]
+    connecting: `⏳ ${t("accounts.connecting")}`,
+    streaming: `🔄 ${t("accounts.receivingResponse")}`,
+    success: `✅ ${t("accounts.testSuccess")}`,
+    error: `❌ ${t("accounts.testFailed")}`,
+  }[status];
 
   const statusColor = {
-    connecting: 'text-muted-foreground',
-    streaming: 'text-blue-500',
-    success: 'text-emerald-500',
-    error: 'text-red-500',
-  }[status]
-  const formattedErrorMsg = errorMsg ? formatTestErrorMessage(errorMsg) : ''
+    connecting: "text-muted-foreground",
+    streaming: "text-blue-500",
+    success: "text-emerald-500",
+    error: "text-red-500",
+  }[status];
+  const formattedErrorMsg = errorMsg ? formatTestErrorMessage(errorMsg) : "";
 
   return (
     <Modal
       show={true}
-      title={t('accounts.testConnectionTitle', { account: formatAccountName(account) })}
+      title={t("accounts.testConnectionTitle", {
+        account: formatAccountName(account),
+      })}
       onClose={() => {
-        abortRef.current?.abort()
-        onClose()
+        abortRef.current?.abort();
+        onClose();
       }}
       footer={
         <Button
           variant="outline"
           onClick={() => {
-            abortRef.current?.abort()
-            onClose()
+            abortRef.current?.abort();
+            onClose();
           }}
         >
-          {t('common.close')}
+          {t("common.close")}
         </Button>
       }
       contentClassName="sm:max-w-[680px]"
     >
       <div className="space-y-4">
         <div className="flex flex-wrap items-start justify-between gap-2">
-          <span className={`flex items-center gap-1.5 text-sm font-semibold ${statusColor}`}>
+          <span
+            className={`flex items-center gap-1.5 text-sm font-semibold ${statusColor}`}
+          >
             {statusLabel}
           </span>
           <Select
@@ -3620,222 +5802,317 @@ function TestConnectionModal({
             value={selectedModel}
             onValueChange={setSelectedModel}
             options={modelSelectOptions}
-            placeholder={model || t('settings.testModel')}
+            placeholder={model || t("settings.testModel")}
             disabled={!modelOptionsReady || modelSelectOptions.length === 0}
           />
         </div>
 
-        {(output.length > 0 || status === 'connecting' || status === 'streaming') && (
+        {(output.length > 0 ||
+          status === "connecting" ||
+          status === "streaming") && (
           <div
             className="min-h-[80px] max-h-[240px] overflow-auto rounded-lg border border-border bg-muted/30 p-3 text-[13px] leading-relaxed whitespace-pre-wrap break-all"
-            style={{ fontFamily: 'var(--font-geist-mono)' }}
+            style={{ fontFamily: "var(--font-geist-mono)" }}
           >
-            {output.length === 0 && status === 'connecting' && (
-              <span className="text-muted-foreground animate-pulse">{t('accounts.sendingTestRequest')}</span>
+            {output.length === 0 && status === "connecting" && (
+              <span className="text-muted-foreground animate-pulse">
+                {t("accounts.sendingTestRequest")}
+              </span>
             )}
-            {output.join('')}
+            {output.join("")}
             <div ref={outputEndRef} />
           </div>
         )}
 
         {errorMsg && (
           <div className="max-h-[40vh] overflow-auto rounded-xl border border-red-200 bg-red-50 p-3.5 text-red-600 dark:border-red-900/50 dark:bg-red-950/30 dark:text-red-400">
-            <div className="mb-2 text-sm font-semibold">{t('accounts.failureDetails')}</div>
+            <div className="mb-2 text-sm font-semibold">
+              {t("accounts.failureDetails")}
+            </div>
             <pre
               className="text-[13px] leading-relaxed whitespace-pre-wrap break-all"
-              style={{ fontFamily: 'var(--font-geist-mono)' }}
+              style={{ fontFamily: "var(--font-geist-mono)" }}
             >
               {formattedErrorMsg}
             </pre>
           </div>
         )}
 
-        {status === 'success' && (
+        {status === "success" && (
           <div className="flex items-center gap-2 rounded-xl border border-emerald-200 bg-emerald-50 px-4 py-2.5 text-sm text-emerald-700 dark:border-emerald-900/50 dark:bg-emerald-950/30 dark:text-emerald-400">
             <RotateCcw className="size-4 shrink-0" />
-            {t('accounts.testAutoReset')}
+            {t("accounts.testAutoReset")}
           </div>
         )}
       </div>
     </Modal>
-  )
+  );
 }
 
 // 格式化重置时间为具体时间
 function formatResetAt(resetAt: string | undefined): string | null {
-  if (!resetAt) return null
-  const d = new Date(resetAt)
-  if (d.getTime() <= Date.now()) return null
-  const pad = (n: number) => String(n).padStart(2, '0')
-  return `${pad(d.getMonth() + 1)}-${pad(d.getDate())} ${pad(d.getHours())}:${pad(d.getMinutes())}`
+  if (!resetAt) return null;
+  const d = new Date(resetAt);
+  if (d.getTime() <= Date.now()) return null;
+  const pad = (n: number) => String(n).padStart(2, "0");
+  return `${pad(d.getMonth() + 1)}-${pad(d.getDate())} ${pad(d.getHours())}:${pad(d.getMinutes())}`;
 }
 
 function formatCompactUsageNumber(value?: number): string {
-  const n = Number(value || 0)
-  if (n >= 1_000_000) return `${(n / 1_000_000).toFixed(n >= 10_000_000 ? 0 : 1)}M`
-  if (n >= 1_000) return `${(n / 1_000).toFixed(n >= 10_000 ? 0 : 1)}K`
-  return String(n)
+  const n = Number(value || 0);
+  if (n >= 1_000_000)
+    return `${(n / 1_000_000).toFixed(n >= 10_000_000 ? 0 : 1)}M`;
+  if (n >= 1_000) return `${(n / 1_000).toFixed(n >= 10_000 ? 0 : 1)}K`;
+  return String(n);
 }
 
-function hasUsageWindowDetail(detail?: AccountRow['usage_5h_detail']): boolean {
-  return Boolean(detail && ((detail.requests ?? 0) > 0 || (detail.tokens ?? 0) > 0))
+function hasUsageWindowDetail(detail?: AccountRow["usage_5h_detail"]): boolean {
+  return Boolean(
+    detail && ((detail.requests ?? 0) > 0 || (detail.tokens ?? 0) > 0),
+  );
 }
 
 // 用量进度条颜色
 function usageBarColor(pct: number): string {
-  if (pct >= 90) return 'bg-red-500'
-  if (pct >= 70) return 'bg-amber-500'
-  return 'bg-emerald-500'
+  if (pct >= 90) return "bg-red-500";
+  if (pct >= 70) return "bg-amber-500";
+  return "bg-emerald-500";
 }
 
 // 单行用量进度条
-function UsageBar({ label, pct, resetAt, detail }: { label: string; pct: number; resetAt?: string; detail?: AccountRow['usage_5h_detail'] }) {
-  const resetText = formatResetAt(resetAt)
+function UsageBar({
+  label,
+  pct,
+  resetAt,
+  detail,
+}: {
+  label: string;
+  pct: number;
+  resetAt?: string;
+  detail?: AccountRow["usage_5h_detail"];
+}) {
+  const resetText = formatResetAt(resetAt);
+  const { t } = useTranslation();
   const detailText = hasUsageWindowDetail(detail)
-    ? `${formatCompactUsageNumber(detail?.requests)} req / ${formatCompactUsageNumber(detail?.tokens)} tok`
-    : ''
+    ? `${formatCompactUsageNumber(detail?.requests)} ${t("accounts.usageReqUnit")} / ${formatCompactUsageNumber(detail?.tokens)} ${t("accounts.usageTokUnit")}`
+    : "";
   return (
     <div>
       <div className="flex items-center gap-1.5">
-        <span className="text-[11px] font-medium text-muted-foreground w-5 shrink-0">{label}</span>
+        <span className="text-[11px] font-medium text-muted-foreground w-5 shrink-0">
+          {label}
+        </span>
         <div className="flex-1 h-1.5 rounded-full bg-muted overflow-hidden min-w-[72px]">
-          <div className={`h-full rounded-full transition-all ${usageBarColor(pct)}`} style={{ width: `${Math.min(100, pct)}%` }} />
+          <div
+            className={`h-full rounded-full transition-all ${usageBarColor(pct)}`}
+            style={{ width: `${Math.min(100, pct)}%` }}
+          />
         </div>
-        <span className="text-[12px] font-semibold w-[42px] text-right shrink-0">{pct.toFixed(1)}%</span>
+        <span className="text-[12px] font-semibold w-[42px] text-right shrink-0">
+          {pct.toFixed(1)}%
+        </span>
       </div>
-      {detailText && <div className="text-[11px] font-medium text-muted-foreground mt-0.5 pl-[26px]">{detailText}</div>}
-      {resetText && <div className="text-[11px] font-medium text-muted-foreground mt-0.5 pl-[26px]">⏱ {resetText}</div>}
+      {detailText && (
+        <div className="text-[11px] font-medium text-muted-foreground mt-0.5 pl-[26px]">
+          {detailText}
+        </div>
+      )}
+      {resetText && (
+        <div className="text-[11px] font-medium text-muted-foreground mt-0.5 pl-[26px]">
+          ⏱ {resetText}
+        </div>
+      )}
     </div>
-  )
+  );
 }
 
-function UsageWindowStat({ label, detail }: { label: string; detail?: AccountRow['usage_5h_detail'] }) {
-  if (!detail || !hasUsageWindowDetail(detail)) return null
+function UsageWindowStat({
+  label,
+  detail,
+}: {
+  label: string;
+  detail?: AccountRow["usage_5h_detail"];
+}) {
+  const { t } = useTranslation();
+  if (!detail || !hasUsageWindowDetail(detail)) return null;
 
-  const accountBilledText = typeof detail.account_billed === 'number' ? detail.account_billed.toFixed(4) : ''
-  const userBilledText = typeof detail.user_billed === 'number' ? detail.user_billed.toFixed(4) : ''
+  const accountBilledText =
+    typeof detail.account_billed === "number"
+      ? detail.account_billed.toFixed(4)
+      : "";
+  const userBilledText =
+    typeof detail.user_billed === "number" ? detail.user_billed.toFixed(4) : "";
 
   return (
     <div className="flex flex-col gap-0.5">
       <div className="flex items-center gap-1.5 text-[11px] font-medium text-muted-foreground">
         <span className="w-5 shrink-0">{label}</span>
-        <span>{formatCompactUsageNumber(detail?.requests)} req / {formatCompactUsageNumber(detail?.tokens)} tok</span>
+        <span>
+          {formatCompactUsageNumber(detail?.requests)}{" "}
+          {t("accounts.usageReqUnit")} /{" "}
+          {formatCompactUsageNumber(detail?.tokens)}{" "}
+          {t("accounts.usageTokUnit")}
+        </span>
       </div>
       {(accountBilledText || userBilledText) && (
         <div className="flex items-center gap-1.5 text-[10px] text-muted-foreground/80 pl-6">
-          {accountBilledText && <span>账号: ${accountBilledText}</span>}
-          {userBilledText && <span>用户: ${userBilledText}</span>}
+          {accountBilledText && (
+            <span>
+              {t("accounts.accountBilledLabel")}: ${accountBilledText}
+            </span>
+          )}
+          {userBilledText && (
+            <span>
+              {t("accounts.userBilledLabel")}: ${userBilledText}
+            </span>
+          )}
         </div>
       )}
     </div>
-  )
+  );
 }
 
 // 用量列组件
 function UsageCell({ account }: { account: AccountRow }) {
-  const plan = normalizePlanType(account.plan_type)
-  const has7d = account.usage_percent_7d !== null && account.usage_percent_7d !== undefined
-  const has5h = account.usage_percent_5h !== null && account.usage_percent_5h !== undefined
-  const has7dDetail = hasUsageWindowDetail(account.usage_7d_detail)
-  const has5hDetail = hasUsageWindowDetail(account.usage_5h_detail)
-
-  if (plan === 'free') {
-    if (!has7d && !has7dDetail) return <span className="text-[12px] text-muted-foreground">-</span>
+  const plan = normalizePlanType(account.plan_type);
+  const has7d =
+    account.usage_percent_7d !== null && account.usage_percent_7d !== undefined;
+  const has5h =
+    account.usage_percent_5h !== null && account.usage_percent_5h !== undefined;
+  const has7dDetail = hasUsageWindowDetail(account.usage_7d_detail);
+  const has5hDetail = hasUsageWindowDetail(account.usage_5h_detail);
+
+  if (plan === "free") {
+    if (!has7d && !has7dDetail)
+      return <span className="text-[12px] text-muted-foreground">-</span>;
     return (
       <div className="w-48">
         {has7d ? (
-          <UsageBar label="7d" pct={account.usage_percent_7d!} resetAt={account.reset_7d_at} detail={account.usage_7d_detail} />
+          <UsageBar
+            label="7d"
+            pct={account.usage_percent_7d!}
+            resetAt={account.reset_7d_at}
+            detail={account.usage_7d_detail}
+          />
         ) : (
           <UsageWindowStat label="7d" detail={account.usage_7d_detail} />
         )}
       </div>
-    )
+    );
   }
 
-  if (plan === 'pro' || plan === 'team' || plan === 'plus' || plan === 'teamplus') {
-    if (!has5h && !has7d && !has5hDetail && !has7dDetail) return <span className="text-[12px] text-muted-foreground">-</span>
+  if (
+    plan === "pro" ||
+    plan === "team" ||
+    plan === "plus" ||
+    plan === "teamplus"
+  ) {
+    if (!has5h && !has7d && !has5hDetail && !has7dDetail)
+      return <span className="text-[12px] text-muted-foreground">-</span>;
     return (
       <div className="w-52 space-y-1.5">
         {has5h ? (
-          <UsageBar label="5h" pct={account.usage_percent_5h!} resetAt={account.reset_5h_at} detail={account.usage_5h_detail} />
+          <UsageBar
+            label="5h"
+            pct={account.usage_percent_5h!}
+            resetAt={account.reset_5h_at}
+            detail={account.usage_5h_detail}
+          />
         ) : (
           <UsageWindowStat label="5h" detail={account.usage_5h_detail} />
         )}
         {has7d ? (
-          <UsageBar label="7d" pct={account.usage_percent_7d!} resetAt={account.reset_7d_at} detail={account.usage_7d_detail} />
+          <UsageBar
+            label="7d"
+            pct={account.usage_percent_7d!}
+            resetAt={account.reset_7d_at}
+            detail={account.usage_7d_detail}
+          />
         ) : (
           <UsageWindowStat label="7d" detail={account.usage_7d_detail} />
         )}
       </div>
-    )
+    );
   }
 
   if (has7d || has7dDetail) {
     return (
       <div className="w-48">
         {has7d ? (
-          <UsageBar label="7d" pct={account.usage_percent_7d!} resetAt={account.reset_7d_at} detail={account.usage_7d_detail} />
+          <UsageBar
+            label="7d"
+            pct={account.usage_percent_7d!}
+            resetAt={account.reset_7d_at}
+            detail={account.usage_7d_detail}
+          />
         ) : (
           <UsageWindowStat label="7d" detail={account.usage_7d_detail} />
         )}
       </div>
-    )
+    );
   }
-  return <span className="text-[13px] text-muted-foreground">-</span>
+  return <span className="text-[13px] text-muted-foreground">-</span>;
 }
 
-function getAccountStatusCountdownUntil(account: AccountRow): string | undefined {
-  const status = account.status
-  if (account.cooldown_until && (status === 'rate_limited' || status === 'error' || status === 'cooldown')) {
-    return account.cooldown_until
+function getAccountStatusCountdownUntil(
+  account: AccountRow,
+): string | undefined {
+  const status = account.status;
+  if (
+    account.cooldown_until &&
+    (status === "rate_limited" || status === "error" || status === "cooldown")
+  ) {
+    return account.cooldown_until;
   }
-  if (status === 'usage_exhausted') {
-    return account.reset_7d_at
+  if (status === "usage_exhausted") {
+    return account.reset_7d_at;
   }
-  return undefined
+  return undefined;
 }
 
 function AccountStatusCountdown({ account }: { account: AccountRow }) {
-  const until = getAccountStatusCountdownUntil(account)
-  if (!until) return null
-  return <CooldownTimer until={until} />
+  const until = getAccountStatusCountdownUntil(account);
+  if (!until) return null;
+  return <CooldownTimer until={until} />;
 }
 
 // 冷却倒计时组件
 function CooldownTimer({ until }: { until: string }) {
-  const [remaining, setRemaining] = useState('')
+  const [remaining, setRemaining] = useState("");
 
   useEffect(() => {
-    const target = new Date(until).getTime()
+    const target = new Date(until).getTime();
 
     const update = () => {
-      const diff = Math.max(0, target - Date.now())
+      const diff = Math.max(0, target - Date.now());
       if (diff <= 0) {
-        setRemaining('')
-        return
+        setRemaining("");
+        return;
       }
-      const h = Math.floor(diff / 3600000)
-      const m = Math.floor((diff % 3600000) / 60000)
-      const s = Math.floor((diff % 60000) / 1000)
+      const h = Math.floor(diff / 3600000);
+      const m = Math.floor((diff % 3600000) / 60000);
+      const s = Math.floor((diff % 60000) / 1000);
       if (h > 0) {
-        setRemaining(`${h}h ${String(m).padStart(2, '0')}m ${String(s).padStart(2, '0')}s`)
+        setRemaining(
+          `${h}h ${String(m).padStart(2, "0")}m ${String(s).padStart(2, "0")}s`,
+        );
       } else if (m > 0) {
-        setRemaining(`${m}m ${String(s).padStart(2, '0')}s`)
+        setRemaining(`${m}m ${String(s).padStart(2, "0")}s`);
       } else {
-        setRemaining(`${s}s`)
+        setRemaining(`${s}s`);
       }
-    }
+    };
 
-    update()
-    const id = setInterval(update, 1000)
-    return () => clearInterval(id)
-  }, [until])
+    update();
+    const id = setInterval(update, 1000);
+    return () => clearInterval(id);
+  }, [until]);
 
-  if (!remaining) return null
+  if (!remaining) return null;
   return (
     <span className="inline-flex h-6 min-w-[112px] shrink-0 items-center justify-center gap-1.5 rounded-full bg-amber-50 px-2 text-[11px] font-mono leading-none tabular-nums text-amber-700 ring-1 ring-inset ring-amber-200/70 dark:bg-amber-950/40 dark:text-amber-300 dark:ring-amber-400/20">
       <Hourglass className="size-3 shrink-0" aria-hidden="true" />
       {remaining}
     </span>
-  )
+  );
 }
diff --git a/frontend/src/pages/Dashboard.tsx b/frontend/src/pages/Dashboard.tsx
index b62135d9..bde18720 100644
--- a/frontend/src/pages/Dashboard.tsx
+++ b/frontend/src/pages/Dashboard.tsx
@@ -6,10 +6,11 @@ import { getTimeRangeISO, getBucketConfig, type TimeRangeKey } from '../lib/time
 import PageHeader from '../components/PageHeader'
 import StateShell from '../components/StateShell'
 import StatCard from '../components/StatCard'
+import UsageStatsSummary from '../components/UsageStatsSummary'
 import type { StatsResponse, UsageStats, ChartAggregation } from '../types'
 import { useDataLoader } from '../hooks/useDataLoader'
 import { Card, CardContent } from '@/components/ui/card'
-import { Users, CheckCircle, XCircle, Activity, Zap, Clock, AlertTriangle, BarChart3, Database } from 'lucide-react'
+import { Users, CheckCircle, XCircle, Activity } from 'lucide-react'
 
 const DashboardUsageCharts = lazy(() => import('../components/DashboardUsageCharts'))
 
@@ -145,7 +146,6 @@ export default function Dashboard() {
             iconClass="green"
             label={t('dashboard.available')}
             value={available}
-            sub={t('dashboard.availableRate', { rate: total ? Math.round((available / total) * 100) : 0 })}
           />
           <StatCard icon={icons.error} iconClass="red" label={t('dashboard.error')} value={errorCount} />
           <StatCard icon={icons.requests} iconClass="purple" label={t('dashboard.todayRequests')} value={todayRequests} />
@@ -154,25 +154,7 @@ export default function Dashboard() {
         {/* Usage stats */}
         {usageStats && (
           <div className="space-y-6">
-            <Card>
-              <CardContent className="p-6">
-                <h3 className="text-base font-semibold text-foreground mb-4">{t('dashboard.usageStats')}</h3>
-                <div className="grid grid-cols-[repeat(auto-fit,minmax(200px,1fr))] gap-4">
-                  <StatItem icon={<BarChart3 className="size-5" />} iconBg="bg-blue-500/10 text-blue-500" label={t('dashboard.totalRequests')} value={usageStats.total_requests.toLocaleString()} />
-                  <StatItem icon={<Zap className="size-5" />} iconBg="bg-purple-500/10 text-purple-500" label={t('dashboard.totalTokens')} value={usageStats.total_tokens.toLocaleString()} />
-                  <StatItem icon={<Zap className="size-5" />} iconBg="bg-emerald-500/10 text-emerald-500" label={t('dashboard.todayTokens')} value={usageStats.today_tokens.toLocaleString()} />
-                  <StatItem icon={<Database className="size-5" />} iconBg="bg-indigo-500/10 text-indigo-500" label={t('dashboard.cachedTokens')} value={usageStats.total_cached_tokens.toLocaleString()} />
-                  <StatItem icon={<Activity className="size-5" />} iconBg="bg-amber-500/10 text-amber-500" label={t('dashboard.rpmTpm')} value={`${usageStats.rpm} / ${usageStats.tpm.toLocaleString()}`} />
-                  <StatItem
-                    icon={<Clock className="size-5" />}
-                    iconBg="bg-cyan-500/10 text-cyan-500"
-                    label={t('dashboard.avgLatency')}
-                    value={usageStats.avg_duration_ms > 1000 ? `${(usageStats.avg_duration_ms / 1000).toFixed(1)}s` : `${Math.round(usageStats.avg_duration_ms)}ms`}
-                  />
-                  <StatItem icon={<AlertTriangle className="size-5" />} iconBg="bg-red-500/10 text-red-500" label={t('dashboard.todayErrorRate')} value={`${usageStats.error_rate.toFixed(1)}%`} />
-                </div>
-              </CardContent>
-            </Card>
+            <UsageStatsSummary stats={usageStats} />
             <Suspense fallback={<ChartsSkeleton />}>
               <DashboardUsageCharts
                 chartData={chartData}
@@ -189,17 +171,3 @@ export default function Dashboard() {
     </StateShell>
   )
 }
-
-function StatItem({ icon, iconBg, label, value }: { icon: ReactNode; iconBg: string; label: string; value: string }) {
-  return (
-    <div className="flex items-center gap-3 p-4 rounded-xl bg-muted/50">
-      <div className={`flex items-center justify-center size-10 rounded-lg ${iconBg}`}>
-        {icon}
-      </div>
-      <div>
-        <div className="text-xs text-muted-foreground">{label}</div>
-        <div className="text-lg font-bold">{value}</div>
-      </div>
-    </div>
-  )
-}
diff --git a/frontend/src/pages/Docs.tsx b/frontend/src/pages/Docs.tsx
new file mode 100644
index 00000000..8d1d4816
--- /dev/null
+++ b/frontend/src/pages/Docs.tsx
@@ -0,0 +1,1577 @@
+import { useEffect, useMemo, useState, type ReactNode } from "react";
+import { useTranslation } from "react-i18next";
+import {
+  Copy,
+  Check,
+  ClipboardCheck,
+  ExternalLink,
+  Sparkles,
+  Terminal,
+  KeyRound,
+  Wand2,
+  Server,
+} from "lucide-react";
+import { api, getAdminKey } from "../api";
+import ToastNotice from "../components/ToastNotice";
+import { Card, CardContent } from "@/components/ui/card";
+import { Badge } from "@/components/ui/badge";
+import { Button } from "@/components/ui/button";
+import { Select } from "@/components/ui/select";
+import { useToast } from "../hooks/useToast";
+import { CodeBlock, EndpointDoc } from "./docs/EndpointDoc";
+import DocsTOC, { type DocsTOCItem } from "./docs/DocsTOC";
+import {
+  buildQuickTools,
+  resolveTemplate,
+  type DocsLocale,
+  type QuickTool,
+} from "./docs/quickStartTools";
+import {
+  buildAdminSpecs,
+  buildDocsMarkdown,
+  buildEndpointSpecs,
+} from "./docs/docsContent";
+import { DEFAULT_CLAUDE_MODEL_MAP } from "../lib/modelMapping";
+import type { SystemSettings } from "../types";
+
+const FALLBACK_MODELS = [
+  "gpt-5.5",
+  "gpt-5.4",
+  "gpt-5.4-mini",
+  "gpt-5.3-codex",
+  "claude-sonnet-4-5-20250514",
+];
+type CCSwitchApp = "claude" | "codex" | "gemini";
+type QuickToolTab = "codex-cli" | "claude-code" | "cc-switch" | "cherry-studio";
+
+const CC_SWITCH_LOGO = "https://ccswitch.io/assets/cc-switch-logo-BPrI77SG.png";
+const LOBE_ICON_BASE =
+  "https://unpkg.com/@lobehub/icons-static-svg@latest/icons";
+const CLIENT_ICON_SRC: Record<QuickToolTab, string> = {
+  "codex-cli": `${LOBE_ICON_BASE}/codex-color.svg`,
+  "claude-code": `${LOBE_ICON_BASE}/claudecode-color.svg`,
+  "cc-switch": CC_SWITCH_LOGO,
+  "cherry-studio": `${LOBE_ICON_BASE}/cherrystudio-color.svg`,
+};
+
+const CC_SWITCH_APPS: Record<
+  CCSwitchApp,
+  {
+    label: string;
+    suffix: string;
+    endpoint: (baseUrl: string) => string;
+    fields: { key: string }[];
+  }
+> = {
+  claude: {
+    label: "Claude Code",
+    suffix: "Claude",
+    endpoint: (baseUrl) => baseUrl,
+    fields: [
+      { key: "model" },
+      { key: "haikuModel" },
+      { key: "sonnetModel" },
+      { key: "opusModel" },
+    ],
+  },
+  codex: {
+    label: "Codex CLI",
+    suffix: "Codex",
+    endpoint: (baseUrl) => `${baseUrl}/v1`,
+    fields: [{ key: "model" }],
+  },
+  gemini: {
+    label: "Gemini CLI",
+    suffix: "Gemini",
+    endpoint: (baseUrl) => baseUrl,
+    fields: [{ key: "model" }],
+  },
+};
+
+const SECTION_ICON: Record<string, ReactNode> = {
+  "quick-start": <Sparkles className="size-4" />,
+  "client-config": <Terminal className="size-4" />,
+  authentication: <KeyRound className="size-4" />,
+  "model-api": <Wand2 className="size-4" />,
+  "admin-api": <Server className="size-4" />,
+};
+
+const SECTION_TONE: Record<string, { text: string; bg: string; ring: string }> =
+  {
+    "quick-start": {
+      text: "text-amber-600 dark:text-amber-400",
+      bg: "bg-amber-500/10 dark:bg-amber-500/15",
+      ring: "ring-amber-500/20",
+    },
+    "client-config": {
+      text: "text-emerald-600 dark:text-emerald-400",
+      bg: "bg-emerald-500/10 dark:bg-emerald-500/15",
+      ring: "ring-emerald-500/20",
+    },
+    authentication: {
+      text: "text-fuchsia-600 dark:text-fuchsia-400",
+      bg: "bg-fuchsia-500/10 dark:bg-fuchsia-500/15",
+      ring: "ring-fuchsia-500/20",
+    },
+    "model-api": {
+      text: "text-sky-600 dark:text-sky-400",
+      bg: "bg-sky-500/10 dark:bg-sky-500/15",
+      ring: "ring-sky-500/20",
+    },
+    "admin-api": {
+      text: "text-rose-600 dark:text-rose-400",
+      bg: "bg-rose-500/10 dark:bg-rose-500/15",
+      ring: "ring-rose-500/20",
+    },
+  };
+
+function OsTabs({
+  active,
+  onChange,
+}: {
+  active: "unix" | "windows";
+  onChange: (v: "unix" | "windows") => void;
+}) {
+  const { t } = useTranslation();
+  return (
+    <div className="border-b border-border mb-4">
+      <nav className="-mb-px flex space-x-4">
+        <button
+          onClick={() => onChange("unix")}
+          className={`whitespace-nowrap py-2.5 px-1 border-b-2 font-medium text-sm transition-colors flex items-center gap-2 ${
+            active === "unix"
+              ? "border-primary text-primary"
+              : "border-transparent text-muted-foreground hover:text-foreground hover:border-border"
+          }`}
+        >
+          macOS / Linux
+        </button>
+        <button
+          onClick={() => onChange("windows")}
+          className={`whitespace-nowrap py-2.5 px-1 border-b-2 font-medium text-sm transition-colors flex items-center gap-2 ${
+            active === "windows"
+              ? "border-primary text-primary"
+              : "border-transparent text-muted-foreground hover:text-foreground hover:border-border"
+          }`}
+        >
+          Windows
+        </button>
+      </nav>
+    </div>
+  );
+}
+
+const FIELD_LABEL = "mb-1.5 block text-[11px] font-bold text-muted-foreground";
+const FIELD_INPUT =
+  "h-8 w-full rounded-lg border border-input bg-background px-2.5 text-[13px] font-medium text-foreground shadow-xs outline-none transition-[border-color,box-shadow,background-color] placeholder:text-muted-foreground hover:border-primary/30 hover:bg-accent/50 focus-visible:border-ring focus-visible:ring-[3px] focus-visible:ring-ring/20";
+const CONFIG_PANEL =
+  "grid gap-3 rounded-lg border border-border bg-muted/25 p-3 shadow-[inset_0_1px_0_hsl(0_0%_100%/0.35)] dark:shadow-none";
+
+function FieldBox({ label, children }: { label: string; children: ReactNode }) {
+  return (
+    <div className="min-w-0">
+      <label className={FIELD_LABEL}>{label}</label>
+      {children}
+    </div>
+  );
+}
+
+async function copyToClipboard(text: string) {
+  try {
+    await navigator.clipboard.writeText(text);
+  } catch {
+    const ta = document.createElement("textarea");
+    ta.value = text;
+    ta.style.cssText = "position:fixed;left:-9999px";
+    document.body.appendChild(ta);
+    ta.select();
+    document.execCommand("copy");
+    document.body.removeChild(ta);
+  }
+}
+
+function ClientIcon({ id, size = 18 }: { id: QuickToolTab; size?: number }) {
+  return (
+    <img
+      src={CLIENT_ICON_SRC[id]}
+      alt=""
+      width={size}
+      height={size}
+      className="rounded-[4px] object-contain"
+      loading="lazy"
+      decoding="async"
+    />
+  );
+}
+
+function ImportPreviewCard({
+  title,
+  description,
+  icon,
+  link,
+  disabled,
+  onLaunch,
+  onCopied,
+}: {
+  title: string;
+  description: string;
+  icon: ReactNode;
+  link: string;
+  disabled?: boolean;
+  onLaunch: () => void;
+  onCopied: () => void;
+}) {
+  const { t } = useTranslation();
+  const [expanded, setExpanded] = useState(false);
+  const [copied, setCopied] = useState(false);
+
+  const handleCopy = async () => {
+    await copyToClipboard(link);
+    setCopied(true);
+    onCopied();
+    window.setTimeout(() => setCopied(false), 1200);
+  };
+
+  return (
+    <div className="rounded-xl border border-border bg-card/80 p-3.5 shadow-sm transition-[border-color,box-shadow] duration-200 hover:border-primary/25 hover:shadow-md">
+      <div className="flex flex-wrap items-start justify-between gap-3">
+        <div className="min-w-0 flex items-start gap-3">
+          <span className="inline-flex size-9 shrink-0 items-center justify-center rounded-lg bg-primary/10 text-primary ring-1 ring-primary/15">
+            {icon}
+          </span>
+          <div className="min-w-0">
+            <div className="flex items-center gap-2">
+              <h4 className="text-[14px] font-bold text-foreground">{title}</h4>
+              <Badge
+                variant="outline"
+                className="h-5 px-1.5 text-[10px] font-bold"
+              >
+                {t("docs.quickStart.deeplinkBadge")}
+              </Badge>
+            </div>
+            <p className="mt-0.5 text-[12.5px] leading-relaxed text-muted-foreground">
+              {description}
+            </p>
+          </div>
+        </div>
+        <div className="flex shrink-0 items-center gap-2">
+          <Button
+            type="button"
+            variant="outline"
+            size="sm"
+            onClick={() => void handleCopy()}
+            className="h-8 gap-1.5"
+          >
+            {copied ? (
+              <Check className="size-3.5 text-emerald-500" />
+            ) : (
+              <Copy className="size-3.5" />
+            )}
+            {copied
+              ? t("docs.quickStart.copied")
+              : t("docs.quickStart.copyLink")}
+          </Button>
+          <Button
+            type="button"
+            size="sm"
+            disabled={disabled}
+            onClick={onLaunch}
+            className="h-8 gap-1.5"
+          >
+            <ExternalLink className="size-3.5" />
+            {t("docs.quickStart.openClient")}
+          </Button>
+        </div>
+      </div>
+      <button
+        type="button"
+        onClick={() => setExpanded((current) => !current)}
+        className="mt-2 inline-flex items-center gap-1 text-[12px] font-semibold text-muted-foreground hover:text-foreground"
+      >
+        {expanded
+          ? t("docs.quickStart.collapseFullLink")
+          : t("docs.quickStart.viewFullLink")}
+      </button>
+      {expanded && (
+        <div className="mt-2 rounded-lg border border-border bg-muted/25 p-2.5">
+          <code className="block max-h-28 overflow-auto break-all font-mono text-[12px] leading-relaxed text-foreground">
+            {link}
+          </code>
+        </div>
+      )}
+    </div>
+  );
+}
+
+function ToolTabButton({
+  selected,
+  id,
+  label,
+  onClick,
+}: {
+  selected: boolean;
+  id: QuickToolTab;
+  label: string;
+  onClick: () => void;
+}) {
+  return (
+    <button
+      type="button"
+      onClick={onClick}
+      className={`inline-flex h-8 items-center justify-center gap-2 rounded-lg px-3 text-[13px] font-semibold transition-[background-color,color,box-shadow] ${
+        selected
+          ? "bg-background text-foreground shadow-sm ring-1 ring-border"
+          : "text-muted-foreground hover:bg-background/60 hover:text-foreground"
+      }`}
+    >
+      <span className="inline-flex size-5 items-center justify-center">
+        <ClientIcon id={id} size={18} />
+      </span>
+      {label}
+    </button>
+  );
+}
+
+function UnderlineTabs<T extends string>({
+  tabs,
+  active,
+  onChange,
+}: {
+  tabs: { value: T; label: string; hint?: string }[];
+  active: T;
+  onChange: (value: T) => void;
+}) {
+  return (
+    <div className="border-b border-border">
+      <nav className="-mb-px flex space-x-4">
+        {tabs.map((tab) => {
+          const selected = active === tab.value;
+          return (
+            <button
+              key={tab.value}
+              type="button"
+              onClick={() => onChange(tab.value)}
+              className={`whitespace-nowrap border-b-2 px-1 py-2.5 text-sm font-medium transition-colors ${
+                selected
+                  ? "border-primary text-primary"
+                  : "border-transparent text-muted-foreground hover:border-border hover:text-foreground"
+              }`}
+              title={tab.hint}
+            >
+              {tab.label}
+            </button>
+          );
+        })}
+      </nav>
+    </div>
+  );
+}
+
+function QuickToolCard({
+  tool,
+  baseUrl,
+  apiKey,
+  onCopied,
+  onLaunched,
+}: {
+  tool: QuickTool;
+  baseUrl: string;
+  apiKey: string;
+  onCopied: (name: string) => void;
+  onLaunched: (name: string) => void;
+}) {
+  const { t } = useTranslation();
+  const [copied, setCopied] = useState(false);
+
+  const isProtocol = tool.kind === "protocol";
+  const hasKey = Boolean(apiKey);
+  const previewKey = hasKey ? apiKey : "YOUR_API_KEY";
+  const resolved = resolveTemplate(tool, baseUrl, previewKey);
+
+  const handleClick = async () => {
+    if (isProtocol) {
+      if (!hasKey) return;
+      window.open(resolved, "_blank");
+      onLaunched(tool.name);
+      return;
+    }
+    try {
+      await navigator.clipboard.writeText(resolved);
+    } catch {
+      const ta = document.createElement("textarea");
+      ta.value = resolved;
+      ta.style.cssText = "position:fixed;left:-9999px";
+      document.body.appendChild(ta);
+      ta.select();
+      document.execCommand("copy");
+      document.body.removeChild(ta);
+    }
+    setCopied(true);
+    onCopied(tool.name);
+    setTimeout(() => setCopied(false), 2000);
+  };
+
+  return (
+    <div className="group relative flex flex-col gap-2.5 rounded-xl border border-border bg-card/70 p-4 transition-all hover:-translate-y-0.5 hover:border-primary/30 hover:shadow-md">
+      <div className="flex items-start gap-3">
+        <div
+          className={`inline-flex size-10 shrink-0 items-center justify-center rounded-lg text-sm font-bold ${tool.iconHue}`}
+        >
+          {tool.glyph}
+        </div>
+        <div className="min-w-0 flex-1">
+          <div className="flex items-center gap-1.5">
+            <h4 className="truncate text-[14px] font-bold text-foreground">
+              {tool.name}
+            </h4>
+            <Badge
+              variant="outline"
+              className="shrink-0 px-1.5 py-0 text-[10px] font-bold"
+            >
+              {tool.badge}
+            </Badge>
+          </div>
+          <p className="mt-1 line-clamp-2 text-[12px] leading-snug text-muted-foreground">
+            {tool.blurb}
+          </p>
+        </div>
+      </div>
+      <Button
+        variant={isProtocol ? "default" : "outline"}
+        size="sm"
+        disabled={isProtocol && !hasKey}
+        onClick={() => void handleClick()}
+        className="mt-1 w-full justify-center gap-1.5"
+      >
+        {isProtocol ? (
+          <>
+            <ExternalLink className="size-3.5" />
+            {hasKey
+              ? t("docs.quickStart.launch")
+              : t("docs.quickStart.needKey")}
+          </>
+        ) : copied ? (
+          <>
+            <ClipboardCheck className="size-3.5 text-emerald-500" />
+            {t("docs.quickStart.copied")}
+          </>
+        ) : (
+          <>
+            <Copy className="size-3.5" />
+            {t("docs.quickStart.copyConfig")}
+          </>
+        )}
+      </Button>
+    </div>
+  );
+}
+
+function buildCCSwitchImportUrl({
+  app,
+  name,
+  endpoint,
+  apiKey,
+  models,
+  homepage,
+}: {
+  app: CCSwitchApp;
+  name: string;
+  endpoint: string;
+  apiKey: string;
+  models: Record<string, string>;
+  homepage: string;
+}) {
+  const params = new URLSearchParams();
+  params.set("resource", "provider");
+  params.set("app", app);
+  params.set("name", name);
+  params.set("endpoint", endpoint);
+  params.set("apiKey", apiKey);
+  Object.entries(models).forEach(([key, value]) => {
+    if (value) params.set(key, value);
+  });
+  params.set("homepage", homepage);
+  params.set("enabled", "true");
+  return `ccswitch://v1/import?${params.toString()}`;
+}
+
+function parseModelMapping(
+  settings?: SystemSettings | null,
+): Record<string, string> {
+  if (!settings?.model_mapping) return {};
+  try {
+    const parsed = JSON.parse(settings.model_mapping);
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
+      return {};
+    const entries = Object.entries(parsed).filter(
+      ([, value]) => typeof value === "string",
+    ) as [string, string][];
+    return entries.length > 0 ? Object.fromEntries(entries) : {};
+  } catch {
+    return {};
+  }
+}
+
+function slugProviderId(name: string) {
+  const slug = name
+    .trim()
+    .toLowerCase()
+    .replace(/[^a-z0-9]+/g, "-")
+    .replace(/^-+|-+$/g, "");
+  return slug || "codexproxy";
+}
+
+function modelIncludes(models: string[], model?: string) {
+  return Boolean(model && models.includes(model));
+}
+
+function preferredMappedClaudeModel(
+  mappedClaudeModels: string[],
+  keyword: string,
+  fallback: string,
+) {
+  return (
+    mappedClaudeModels.find((model) => model.toLowerCase().includes(keyword)) ??
+    fallback
+  );
+}
+
+function encodeBase64(text: string): string {
+  return btoa(unescape(encodeURIComponent(text)));
+}
+
+function SectionHeader({
+  id,
+  icon,
+  tone,
+  eyebrow,
+  title,
+  description,
+}: {
+  id: string;
+  icon: ReactNode;
+  tone: { text: string; bg: string; ring: string };
+  eyebrow?: string;
+  title: string;
+  description?: string;
+}) {
+  return (
+    <div id={id} className="scroll-mt-20 mt-4 mb-3 first:mt-0">
+      <div className="flex items-start gap-3">
+        <span
+          className={`mt-0.5 inline-flex size-9 shrink-0 items-center justify-center rounded-xl ring-1 ${tone.bg} ${tone.text} ${tone.ring}`}
+        >
+          {icon}
+        </span>
+        <div className="min-w-0 flex-1">
+          {eyebrow ? (
+            <div
+              className={`text-[10.5px] font-bold uppercase tracking-[0.14em] ${tone.text}`}
+            >
+              {eyebrow}
+            </div>
+          ) : null}
+          <h2 className="mt-0.5 text-[22px] font-bold leading-tight text-foreground">
+            {title}
+          </h2>
+          {description ? (
+            <p className="mt-1 max-w-[640px] text-[13px] leading-relaxed text-muted-foreground">
+              {description}
+            </p>
+          ) : null}
+        </div>
+      </div>
+    </div>
+  );
+}
+
+export default function Docs() {
+  const { t, i18n } = useTranslation();
+  const baseUrl = useMemo(() => window.location.origin, []);
+  const adminSeed = useMemo(() => getAdminKey(), []);
+  const docsLocale = useMemo<DocsLocale>(
+    () => ((i18n.language || "zh").startsWith("zh") ? "zh" : "en"),
+    [i18n.language],
+  );
+  const [quickBaseUrl, setQuickBaseUrl] = useState(baseUrl);
+  const [codexOs, setCodexOs] = useState<"unix" | "windows">("unix");
+  const [claudeOs, setClaudeOs] = useState<"unix" | "windows">("unix");
+  const [firstKey, setFirstKey] = useState("");
+  const [allKeys, setAllKeys] = useState<{ name: string; key: string }[]>([]);
+  const [copyingMd, setCopyingMd] = useState(false);
+  const { toast, showToast } = useToast();
+  const [selectedKey, setSelectedKey] = useState("");
+  const [activeToolTab, setActiveToolTab] = useState<QuickToolTab>("codex-cli");
+  const [quickStartModel, setQuickStartModel] = useState("gpt-5.4");
+  const [settings, setSettings] = useState<SystemSettings | null>(null);
+  const [ccSwitchApp, setCcSwitchApp] = useState<CCSwitchApp>("codex");
+  const [ccSwitchName, setCcSwitchName] = useState("");
+  const [ccSwitchNameEdited, setCcSwitchNameEdited] = useState(false);
+  const [ccSwitchModels, setCcSwitchModels] = useState<Record<string, string>>({
+    model: "gpt-5.4",
+  });
+  const [cherryProviderId, setCherryProviderId] = useState("");
+  const [cherryProviderEdited, setCherryProviderEdited] = useState(false);
+  const [activeCurl, setActiveCurl] = useState<
+    "responses" | "chat" | "messages"
+  >("responses");
+  const [curlModel, setCurlModel] = useState("gpt-5.4");
+  const [models, setModels] = useState(FALLBACK_MODELS);
+
+  useEffect(() => {
+    api
+      .getAPIKeys()
+      .then((res) => {
+        const keys = (res.keys ?? []).map((k) => ({
+          name: k.name,
+          key: k.raw_key || k.key,
+        }));
+        setAllKeys(keys);
+        if (keys.length > 0) {
+          setFirstKey(keys[0].key);
+          setSelectedKey(keys[0].key);
+        }
+      })
+      .catch(() => {});
+  }, []);
+
+  useEffect(() => {
+    Promise.all([
+      api.getModels().catch(() => ({ models: [], items: [] })),
+      api.getSettings().catch(() => null),
+    ])
+      .then(([res, nextSettings]) => {
+        setSettings(nextSettings);
+        const next = [
+          ...(res.models ?? []),
+          ...(res.items ?? []).map((item) => item.id),
+        ].filter(Boolean);
+        const unique = Array.from(new Set(next));
+        if (unique.length === 0) return;
+        setModels(unique);
+        const configuredModel = nextSettings?.test_model;
+        const preferred =
+          configuredModel && unique.includes(configuredModel)
+            ? configuredModel
+            : unique.includes("gpt-5.4")
+              ? "gpt-5.4"
+              : unique[0];
+        setQuickStartModel((current) =>
+          unique.includes(current) ? current : preferred,
+        );
+        setCurlModel((current) =>
+          unique.includes(current) ? current : preferred,
+        );
+        setCcSwitchModels((current) => ({
+          ...current,
+          model: unique.includes(current.model) ? current.model : preferred,
+        }));
+      })
+      .catch(() => {});
+  }, []);
+
+  const modelMapping = useMemo(() => {
+    const configured = parseModelMapping(settings);
+    return Object.keys(configured).length > 0
+      ? configured
+      : DEFAULT_CLAUDE_MODEL_MAP;
+  }, [settings]);
+  const mappedClaudeModels = useMemo(
+    () => Object.keys(modelMapping),
+    [modelMapping],
+  );
+  const modelOptions = useMemo(
+    () => models.map((model) => ({ label: model, value: model })),
+    [models],
+  );
+  const claudeModelOptions = useMemo(() => {
+    const merged = Array.from(
+      new Set([
+        ...mappedClaudeModels,
+        ...models.filter((model) => model.startsWith("claude-")),
+        "claude-sonnet-4-5-20250514",
+      ]),
+    );
+    return merged.map((model) => ({ label: model, value: model }));
+  }, [mappedClaudeModels, models]);
+  const ccSwitchModelOptions =
+    ccSwitchApp === "claude" ? claudeModelOptions : modelOptions;
+  const quickTools = useMemo(() => buildQuickTools(docsLocale), [docsLocale]);
+  const ccSwitchConfig = CC_SWITCH_APPS[ccSwitchApp];
+  const siteName = settings?.site_name?.trim() || "CodexProxy";
+  const defaultCcSwitchName = `${siteName} ${ccSwitchConfig.suffix}`;
+  const defaultCherryProviderId = slugProviderId(siteName);
+
+  useEffect(() => {
+    if (!ccSwitchNameEdited) setCcSwitchName(defaultCcSwitchName);
+  }, [ccSwitchNameEdited, defaultCcSwitchName]);
+
+  useEffect(() => {
+    if (!cherryProviderEdited) setCherryProviderId(defaultCherryProviderId);
+  }, [cherryProviderEdited, defaultCherryProviderId]);
+
+  useEffect(() => {
+    const config = CC_SWITCH_APPS[ccSwitchApp];
+    if (!ccSwitchNameEdited) setCcSwitchName(`${siteName} ${config.suffix}`);
+    setCcSwitchModels((current) => {
+      const preferredClaude = preferredMappedClaudeModel(
+        mappedClaudeModels,
+        "sonnet",
+        "claude-sonnet-4-5-20250514",
+      );
+      const preferredCodex = models.includes(quickStartModel)
+        ? quickStartModel
+        : (models[0] ?? FALLBACK_MODELS[0]);
+      const next: Record<string, string> = {};
+      config.fields.forEach((field) => {
+        if (ccSwitchApp === "claude") {
+          if (field.key === "haikuModel")
+            next[field.key] = modelIncludes(
+              mappedClaudeModels,
+              current[field.key],
+            )
+              ? current[field.key]
+              : preferredMappedClaudeModel(
+                  mappedClaudeModels,
+                  "haiku",
+                  preferredClaude,
+                );
+          else if (field.key === "opusModel")
+            next[field.key] = modelIncludes(
+              mappedClaudeModels,
+              current[field.key],
+            )
+              ? current[field.key]
+              : preferredMappedClaudeModel(
+                  mappedClaudeModels,
+                  "opus",
+                  preferredClaude,
+                );
+          else if (field.key === "sonnetModel")
+            next[field.key] = modelIncludes(
+              mappedClaudeModels,
+              current[field.key],
+            )
+              ? current[field.key]
+              : preferredMappedClaudeModel(
+                  mappedClaudeModels,
+                  "sonnet",
+                  preferredClaude,
+                );
+          else
+            next[field.key] = modelIncludes(
+              mappedClaudeModels,
+              current[field.key],
+            )
+              ? current[field.key]
+              : preferredClaude;
+          return;
+        }
+        next[field.key] = modelIncludes(models, current[field.key])
+          ? current[field.key]
+          : preferredCodex;
+      });
+      return next;
+    });
+  }, [
+    ccSwitchApp,
+    ccSwitchNameEdited,
+    mappedClaudeModels,
+    models,
+    quickStartModel,
+    siteName,
+  ]);
+
+  const modelEndpoints = useMemo(
+    () => buildEndpointSpecs(baseUrl, docsLocale),
+    [baseUrl, docsLocale],
+  );
+  const adminEndpoints = useMemo(
+    () => buildAdminSpecs(baseUrl, docsLocale),
+    [baseUrl, docsLocale],
+  );
+
+  const tocItems: DocsTOCItem[] = useMemo(
+    () => [
+      {
+        id: "quick-start",
+        label: t("docs.toc.quickStart"),
+        children: [
+          { id: "qs-tools", label: t("docs.toc.qsTools") },
+          { id: "qs-curl", label: t("docs.toc.qsCurl") },
+        ],
+      },
+      {
+        id: "client-config",
+        label: t("docs.toc.clientConfig"),
+        children: [
+          { id: "client-codex", label: "Codex CLI" },
+          { id: "client-claude", label: "Claude Code" },
+          { id: "client-mapping", label: t("docs.toc.modelMapping") },
+        ],
+      },
+      {
+        id: "authentication",
+        label: t("docs.toc.authentication"),
+      },
+      {
+        id: "model-api",
+        label: t("docs.toc.modelApi"),
+        children: modelEndpoints.map((e) => ({
+          id: e.id,
+          label: e.path,
+          method: e.method,
+        })),
+      },
+      {
+        id: "admin-api",
+        label: t("docs.toc.adminApi"),
+        children: adminEndpoints.map((e) => ({
+          id: e.id,
+          label: e.path,
+          method: e.method,
+        })),
+      },
+    ],
+    [t, modelEndpoints, adminEndpoints],
+  );
+
+  const handleCopyMarkdown = async () => {
+    setCopyingMd(true);
+    const md = buildDocsMarkdown({
+      baseUrl: quickBaseUrl,
+      quickTools,
+      apiKeyExample: firstKey || "YOUR_API_KEY",
+      locale: docsLocale,
+    });
+    try {
+      await navigator.clipboard.writeText(md);
+      showToast(t("docs.markdownCopied"), "success");
+    } catch {
+      const ta = document.createElement("textarea");
+      ta.value = md;
+      ta.style.cssText = "position:fixed;left:-9999px";
+      document.body.appendChild(ta);
+      ta.select();
+      document.execCommand("copy");
+      document.body.removeChild(ta);
+      showToast(t("docs.markdownCopied"), "success");
+    } finally {
+      setTimeout(() => setCopyingMd(false), 1200);
+    }
+  };
+
+  const codexConfigDir =
+    codexOs === "windows" ? "%userprofile%\\.codex" : "~/.codex";
+  const claudeConfigDir =
+    claudeOs === "windows" ? "%userprofile%\\.claude" : "~/.claude";
+  const codexConfigPath =
+    codexOs === "windows"
+      ? `${codexConfigDir}\\config.toml`
+      : `${codexConfigDir}/config.toml`;
+  const codexAuthPath =
+    codexOs === "windows"
+      ? `${codexConfigDir}\\auth.json`
+      : `${codexConfigDir}/auth.json`;
+  const claudeSettingsPath =
+    claudeOs === "windows"
+      ? `${claudeConfigDir}\\settings.json`
+      : `${claudeConfigDir}/settings.json`;
+  const activeKey = selectedKey || firstKey || "YOUR_API_KEY";
+
+  const codexConfigToml = `model_provider = "OpenAI"
+model = "${quickStartModel}"
+review_model = "${quickStartModel}"
+model_reasoning_effort = "xhigh"
+disable_response_storage = true
+network_access = "enabled"
+model_context_window = 1000000
+model_auto_compact_token_limit = 900000
+
+[model_providers.OpenAI]
+name = "OpenAI"
+base_url = "${quickBaseUrl}"
+wire_api = "responses"
+requires_openai_auth = true`;
+
+  const codexAuthJson = `{
+  "OPENAI_API_KEY": "${activeKey}"
+}`;
+
+  const claudeSettingsJson = `{
+  "env": {
+    "ANTHROPIC_BASE_URL": "${quickBaseUrl}",
+    "ANTHROPIC_AUTH_TOKEN": "${activeKey}",
+    "CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC": "1"
+  }
+}`;
+
+  const claudeEnvUnix = `export ANTHROPIC_BASE_URL="${quickBaseUrl}"
+export ANTHROPIC_AUTH_TOKEN="${activeKey}"
+export CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1`;
+
+  const claudeEnvWindows = `set ANTHROPIC_BASE_URL=${quickBaseUrl}
+set ANTHROPIC_AUTH_TOKEN=${activeKey}
+set CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1`;
+
+  const responsesCurl = `curl -X POST ${quickBaseUrl}/v1/responses \\
+  -H "Authorization: Bearer ${activeKey}" \\
+  -H "Content-Type: application/json" \\
+  -d '{
+    "model": "${curlModel}",
+    "input": [{"role": "user", "content": [{"type": "input_text", "text": "Hello"}]}],
+    "stream": true
+  }'`;
+  const chatCurl = `curl -X POST ${quickBaseUrl}/v1/chat/completions \\
+  -H "Authorization: Bearer ${activeKey}" \\
+  -H "Content-Type: application/json" \\
+  -d '{
+    "model": "${curlModel}",
+    "messages": [{"role": "user", "content": "Hello"}],
+    "stream": true
+  }'`;
+  const messagesCurl = `curl -X POST ${quickBaseUrl}/v1/messages \\
+  -H "x-api-key: ${activeKey}" \\
+  -H "Content-Type: application/json" \\
+  -H "anthropic-version: 2023-06-01" \\
+  -d '{
+    "model": "${curlModel.startsWith("claude-") ? curlModel : "claude-sonnet-4-5-20250514"}",
+    "max_tokens": 1024,
+    "messages": [{"role": "user", "content": "Hello"}]
+  }'`;
+  const curlExamples = {
+    responses: responsesCurl,
+    chat: chatCurl,
+    messages: messagesCurl,
+  };
+  const ccSwitchUrl = buildCCSwitchImportUrl({
+    app: ccSwitchApp,
+    name: ccSwitchName,
+    endpoint: ccSwitchConfig.endpoint(quickBaseUrl),
+    apiKey: activeKey,
+    models: ccSwitchModels,
+    homepage: quickBaseUrl,
+  });
+  const cherryConfig = `cherrystudio://providers/api-keys?v=1&data=${encodeURIComponent(
+    encodeBase64(
+      JSON.stringify({
+        id: cherryProviderId || defaultCherryProviderId,
+        baseUrl: quickBaseUrl,
+        apiKey: activeKey,
+      }),
+    ),
+  )}`;
+  const hasUsableKey = Boolean(selectedKey || firstKey);
+  const handleImportLinkCopied = (name: string) => {
+    showToast(t("docs.quickStart.copiedToast", { name }), "success");
+  };
+  return (
+    <>
+      <div className="mb-4 max-w-[760px]">
+        <div className="max-w-[760px]">
+          <h2 className="text-2xl font-semibold leading-tight text-foreground sm:text-[28px]">
+            {t("docs.title")}
+          </h2>
+          <p className="mt-2 max-w-[640px] text-sm leading-relaxed text-muted-foreground">
+            {t("docs.description")}
+          </p>
+        </div>
+        <div className="mt-3 xl:hidden">
+          <Button
+            variant="outline"
+            size="sm"
+            onClick={() => void handleCopyMarkdown()}
+            disabled={copyingMd}
+            className="gap-1.5"
+          >
+            {copyingMd ? (
+              <Check className="size-3.5 text-emerald-500" />
+            ) : (
+              <Copy className="size-3.5" />
+            )}
+            {t("docs.copyMarkdown")}
+          </Button>
+        </div>
+      </div>
+
+      <ToastNotice toast={toast} />
+
+      <div className="xl:hidden mb-3 -mx-2 overflow-x-auto px-2">
+        <div className="flex gap-1.5 pb-1">
+          {tocItems.map((parent) => (
+            <a
+              key={parent.id}
+              href={`#${parent.id}`}
+              className="inline-flex shrink-0 items-center gap-1.5 rounded-md border border-border bg-background px-2.5 py-1.5 text-[12px] font-semibold text-muted-foreground transition-colors hover:bg-muted/50 hover:text-foreground"
+            >
+              {parent.label}
+            </a>
+          ))}
+        </div>
+      </div>
+
+      <SectionHeader
+        id="quick-start"
+        icon={SECTION_ICON["quick-start"]}
+        tone={SECTION_TONE["quick-start"]}
+        eyebrow={t("docs.section1Eyebrow")}
+        title={t("docs.quickStart.title")}
+        description={t("docs.quickStart.description")}
+      />
+
+      <div className="grid gap-6 xl:grid-cols-[minmax(0,1fr)_260px]">
+        <div className="min-w-0">
+          <Card id="qs-tools" className="mb-4 scroll-mt-20 py-0">
+            <CardContent className="p-5">
+              <div className="mb-3 flex flex-wrap items-end justify-between gap-3">
+                <div className="min-w-0">
+                  <h3 className="text-[15px] font-semibold text-foreground">
+                    {t("docs.quickStart.toolsTitle")}
+                  </h3>
+                  <p className="mt-0.5 text-[12.5px] text-muted-foreground">
+                    {t("docs.quickStart.toolsDesc")}
+                  </p>
+                </div>
+                <div className="flex shrink-0 items-center gap-2">
+                  {allKeys.length > 0 ? (
+                    <>
+                      <span className="text-[11px] font-semibold uppercase tracking-wider text-muted-foreground">
+                        {t("docs.quickStart.useKey")}
+                      </span>
+                      <Select
+                        compact
+                        className="w-44"
+                        value={selectedKey}
+                        onValueChange={setSelectedKey}
+                        options={allKeys.map((k) => ({
+                          label: k.name
+                            ? `${k.name} · ${k.key.slice(0, 6)}…${k.key.slice(-4)}`
+                            : k.key,
+                          value: k.key,
+                        }))}
+                      />
+                    </>
+                  ) : (
+                    <a
+                      href="/admin/api-keys"
+                      className="inline-flex items-center gap-1 rounded-md border border-amber-500/30 bg-amber-500/10 px-2.5 py-1 text-[11px] font-bold text-amber-600 dark:text-amber-400"
+                    >
+                      {t("docs.quickStart.createKeyFirst")}
+                    </a>
+                  )}
+                </div>
+              </div>
+              <div className="mb-3 rounded-xl border border-border bg-muted/25 p-1">
+                <div className="grid gap-1 sm:grid-cols-4">
+                  {[
+                    { value: "codex-cli", label: "Codex CLI" },
+                    { value: "claude-code", label: "Claude Code" },
+                    { value: "cc-switch", label: "CC Switch" },
+                    { value: "cherry-studio", label: "Cherry Studio" },
+                  ].map((tab) => (
+                    <ToolTabButton
+                      key={tab.value}
+                      selected={activeToolTab === tab.value}
+                      id={tab.value as QuickToolTab}
+                      label={tab.label}
+                      onClick={() =>
+                        setActiveToolTab(tab.value as QuickToolTab)
+                      }
+                    />
+                  ))}
+                </div>
+              </div>
+              <div
+                className={`mb-4 ${CONFIG_PANEL} md:grid-cols-[minmax(0,1fr)_260px]`}
+              >
+                <FieldBox label={t("docs.clientConfig.endpointLabel")}>
+                  <input
+                    className={`${FIELD_INPUT} font-mono`}
+                    value={
+                      activeToolTab === "cc-switch"
+                        ? ccSwitchConfig.endpoint(quickBaseUrl)
+                        : quickBaseUrl
+                    }
+                    onChange={(event) => {
+                      const value = event.target.value;
+                      if (
+                        activeToolTab === "cc-switch" &&
+                        ccSwitchApp === "codex" &&
+                        value.endsWith("/v1")
+                      ) {
+                        setQuickBaseUrl(value.slice(0, -3));
+                      } else {
+                        setQuickBaseUrl(value);
+                      }
+                    }}
+                  />
+                </FieldBox>
+                <FieldBox label={t("docs.clientConfig.defaultModel")}>
+                  <Select
+                    compact
+                    value={quickStartModel}
+                    onValueChange={setQuickStartModel}
+                    options={modelOptions}
+                  />
+                </FieldBox>
+              </div>
+              <div className="space-y-4">
+                {activeToolTab === "codex-cli" && (
+                  <>
+                    <OsTabs active={codexOs} onChange={setCodexOs} />
+                    <CodeBlock
+                      label={codexConfigPath}
+                      content={codexConfigToml}
+                      lang="toml"
+                    />
+                    <CodeBlock
+                      label={codexAuthPath}
+                      content={codexAuthJson}
+                      lang="json"
+                    />
+                  </>
+                )}
+                {activeToolTab === "claude-code" && (
+                  <>
+                    <OsTabs active={claudeOs} onChange={setClaudeOs} />
+                    <CodeBlock
+                      label={
+                        claudeOs === "unix"
+                          ? t("docs.clientConfig.unixTerminal")
+                          : t("docs.clientConfig.windowsTerminal")
+                      }
+                      content={
+                        claudeOs === "unix" ? claudeEnvUnix : claudeEnvWindows
+                      }
+                      lang="bash"
+                    />
+                    <CodeBlock
+                      label={claudeSettingsPath}
+                      content={claudeSettingsJson}
+                      lang="json"
+                    />
+                  </>
+                )}
+                {activeToolTab === "cc-switch" && (
+                  <>
+                    <div className={`${CONFIG_PANEL} md:grid-cols-2`}>
+                      <FieldBox label={t("docs.clientConfig.importTarget")}>
+                        <Select
+                          compact
+                          value={ccSwitchApp}
+                          onValueChange={(value) =>
+                            setCcSwitchApp(value as CCSwitchApp)
+                          }
+                          options={(
+                            Object.keys(CC_SWITCH_APPS) as CCSwitchApp[]
+                          ).map((app) => ({
+                            label: CC_SWITCH_APPS[app].label,
+                            value: app,
+                          }))}
+                        />
+                      </FieldBox>
+                      <FieldBox label={t("docs.clientConfig.configName")}>
+                        <input
+                          className={FIELD_INPUT}
+                          value={ccSwitchName}
+                          onChange={(event) => {
+                            setCcSwitchNameEdited(true);
+                            setCcSwitchName(event.target.value);
+                          }}
+                        />
+                      </FieldBox>
+                      {ccSwitchConfig.fields.map((field) => (
+                        <FieldBox
+                          key={field.key}
+                          label={t(
+                            `docs.clientConfig.ccSwitchFields.${field.key}`,
+                          )}
+                        >
+                          <div className="space-y-1.5">
+                            <Select
+                              compact
+                              value={ccSwitchModels[field.key] || ""}
+                              onValueChange={(value) =>
+                                setCcSwitchModels((current) => ({
+                                  ...current,
+                                  [field.key]: value,
+                                }))
+                              }
+                              options={ccSwitchModelOptions}
+                            />
+                            {ccSwitchApp === "claude" &&
+                            ccSwitchModels[field.key] ? (
+                              <div className="truncate text-[11px] font-medium text-muted-foreground">
+                                {t("docs.clientConfig.mappedTo")}{" "}
+                                <code className="font-mono text-foreground">
+                                  {modelMapping[ccSwitchModels[field.key]] ??
+                                    t("docs.clientConfig.backendDefaultModel")}
+                                </code>
+                              </div>
+                            ) : null}
+                          </div>
+                        </FieldBox>
+                      ))}
+                    </div>
+                    <ImportPreviewCard
+                      title={t("docs.clientConfig.ccSwitchPreviewTitle")}
+                      description={t("docs.clientConfig.ccSwitchPreviewDesc")}
+                      icon={<ClientIcon id="cc-switch" size={20} />}
+                      link={ccSwitchUrl}
+                      disabled={!hasUsableKey}
+                      onCopied={() => handleImportLinkCopied("CC Switch")}
+                      onLaunch={() => {
+                        window.open(ccSwitchUrl, "_blank");
+                        showToast(
+                          t("docs.quickStart.launchedToast", {
+                            name: "CC Switch",
+                          }),
+                          "success",
+                        );
+                      }}
+                    />
+                  </>
+                )}
+                {activeToolTab === "cherry-studio" && (
+                  <>
+                    <div className={`${CONFIG_PANEL} md:grid-cols-2`}>
+                      <FieldBox label={t("docs.clientConfig.importTarget")}>
+                        <code
+                          className={`${FIELD_INPUT} flex items-center truncate font-mono`}
+                        >
+                          Cherry Studio
+                        </code>
+                      </FieldBox>
+                      <FieldBox label={t("docs.clientConfig.providerId")}>
+                        <input
+                          className={`${FIELD_INPUT} font-mono`}
+                          value={cherryProviderId}
+                          onChange={(event) => {
+                            setCherryProviderEdited(true);
+                            setCherryProviderId(event.target.value);
+                          }}
+                        />
+                      </FieldBox>
+                    </div>
+                    <ImportPreviewCard
+                      title={t("docs.clientConfig.cherryPreviewTitle")}
+                      description={t("docs.clientConfig.cherryPreviewDesc")}
+                      icon={<ClientIcon id="cherry-studio" size={20} />}
+                      link={cherryConfig}
+                      disabled={!hasUsableKey}
+                      onCopied={() => handleImportLinkCopied("Cherry Studio")}
+                      onLaunch={() => {
+                        window.open(cherryConfig, "_blank");
+                        showToast(
+                          t("docs.quickStart.launchedToast", {
+                            name: "Cherry Studio",
+                          }),
+                          "success",
+                        );
+                      }}
+                    />
+                  </>
+                )}
+              </div>
+            </CardContent>
+          </Card>
+
+          <Card id="qs-curl" className="mb-4 scroll-mt-20 py-0">
+            <CardContent className="p-6">
+              <div className="mb-4 flex flex-wrap items-start justify-between gap-3">
+                <div className="min-w-0">
+                  <h3 className="text-base font-semibold text-foreground mb-1">
+                    {t("docs.quickStart.curlTitle")}
+                  </h3>
+                  <p className="text-sm text-muted-foreground">
+                    {t("docs.quickStart.curlDesc")}
+                  </p>
+                </div>
+                <Select
+                  compact
+                  className="w-52"
+                  value={curlModel}
+                  onValueChange={setCurlModel}
+                  options={[
+                    ...modelOptions,
+                    ...claudeModelOptions.filter(
+                      (option) => !models.includes(option.value),
+                    ),
+                  ]}
+                />
+              </div>
+              <div className="mb-3 flex flex-wrap items-center justify-between gap-2">
+                <UnderlineTabs
+                  active={activeCurl}
+                  onChange={setActiveCurl}
+                  tabs={[
+                    {
+                      value: "responses",
+                      label: "Responses",
+                      hint: "/v1/responses",
+                    },
+                    {
+                      value: "chat",
+                      label: "Chat",
+                      hint: "/v1/chat/completions",
+                    },
+                    {
+                      value: "messages",
+                      label: "Messages",
+                      hint: "/v1/messages",
+                    },
+                  ]}
+                />
+                <code className="code-inline text-[11px]">
+                  {activeCurl === "responses"
+                    ? "/v1/responses"
+                    : activeCurl === "chat"
+                      ? "/v1/chat/completions"
+                      : "/v1/messages"}
+                </code>
+              </div>
+              <CodeBlock
+                label="cURL"
+                content={curlExamples[activeCurl]}
+                lang="bash"
+              />
+            </CardContent>
+          </Card>
+
+          {/* Section 2: Client Config */}
+          <SectionHeader
+            id="client-config"
+            icon={SECTION_ICON["client-config"]}
+            tone={SECTION_TONE["client-config"]}
+            eyebrow={t("docs.section2Eyebrow")}
+            title={t("docs.clientConfig.title")}
+            description={t("docs.clientConfig.description")}
+          />
+
+          <Card id="client-codex" className="mb-4 scroll-mt-20 py-0">
+            <CardContent className="p-6">
+              <h3 className="text-base font-semibold text-foreground mb-1">
+                Codex CLI
+              </h3>
+              <p className="mb-4 text-sm text-muted-foreground">
+                {t("docs.clientConfig.codexDesc")}
+              </p>
+              <OsTabs active={codexOs} onChange={setCodexOs} />
+              <p className="mb-3 flex items-center gap-1 text-xs text-amber-600 dark:text-amber-400">
+                ⓘ {t("docs.clientConfig.codexConfigHint")}
+              </p>
+              <div className="space-y-4">
+                <CodeBlock
+                  label={codexConfigPath}
+                  content={codexConfigToml}
+                  lang="toml"
+                />
+                <CodeBlock
+                  label={codexAuthPath}
+                  content={codexAuthJson}
+                  lang="json"
+                />
+              </div>
+              <p className="mt-3 text-xs text-muted-foreground">
+                {codexOs === "windows"
+                  ? t("docs.clientConfig.codexNoteWindows")
+                  : t("docs.clientConfig.codexNoteUnix")}
+              </p>
+            </CardContent>
+          </Card>
+
+          <Card id="client-claude" className="mb-4 scroll-mt-20 py-0">
+            <CardContent className="p-6">
+              <h3 className="text-base font-semibold text-foreground mb-1">
+                Claude Code
+              </h3>
+              <p className="mb-4 text-sm text-muted-foreground">
+                {t("docs.clientConfig.claudeDesc")}
+              </p>
+              <OsTabs active={claudeOs} onChange={setClaudeOs} />
+              <div className="space-y-4">
+                <CodeBlock
+                  label={
+                    claudeOs === "unix"
+                      ? t("docs.clientConfig.unixTerminal")
+                      : t("docs.clientConfig.windowsTerminal")
+                  }
+                  content={
+                    claudeOs === "unix" ? claudeEnvUnix : claudeEnvWindows
+                  }
+                  lang="bash"
+                />
+                <p className="text-xs text-muted-foreground">
+                  {t("docs.clientConfig.claudeEnvNote")}
+                </p>
+                <CodeBlock
+                  label={claudeSettingsPath}
+                  content={claudeSettingsJson}
+                  lang="json"
+                />
+                <p className="text-xs text-muted-foreground">
+                  {t("docs.clientConfig.claudeSettingsNote")}
+                </p>
+              </div>
+            </CardContent>
+          </Card>
+
+          <Card id="client-mapping" className="mb-4 scroll-mt-20 py-0">
+            <CardContent className="p-6">
+              <h3 className="text-base font-semibold text-foreground mb-1">
+                {t("docs.clientConfig.mappingTitle")}
+              </h3>
+              <p className="text-sm text-muted-foreground">
+                {t("docs.clientConfig.mappingDesc")}
+              </p>
+            </CardContent>
+          </Card>
+
+          {/* Section 3: Authentication */}
+          <SectionHeader
+            id="authentication"
+            icon={SECTION_ICON["authentication"]}
+            tone={SECTION_TONE["authentication"]}
+            eyebrow={t("docs.section3Eyebrow")}
+            title={t("docs.authentication.title")}
+            description={t("docs.authentication.description")}
+          />
+
+          <Card className="mb-6 scroll-mt-20 py-0">
+            <CardContent className="p-6">
+              <div className="space-y-2.5">
+                <div className="flex items-center gap-2.5 px-3.5 py-2.5 rounded-xl bg-muted/40 border border-border">
+                  <Badge
+                    variant="outline"
+                    className="text-[10px] font-bold shrink-0"
+                  >
+                    Header
+                  </Badge>
+                  <code className="code-inline">
+                    Authorization: Bearer{" "}
+                    <span className="text-muted-foreground italic">
+                      &lt;key&gt;
+                    </span>
+                  </code>
+                  <span className="ml-auto text-xs text-muted-foreground">
+                    {t("docs.authentication.bearerNote")}
+                  </span>
+                </div>
+                <div className="flex items-center gap-2.5 px-3.5 py-2.5 rounded-xl bg-muted/40 border border-border">
+                  <Badge
+                    variant="outline"
+                    className="text-[10px] font-bold shrink-0"
+                  >
+                    Header
+                  </Badge>
+                  <code className="code-inline">
+                    x-api-key:{" "}
+                    <span className="text-muted-foreground italic">
+                      &lt;key&gt;
+                    </span>
+                  </code>
+                  <span className="ml-auto text-xs text-muted-foreground">
+                    {t("docs.authentication.xApiKeyNote")}
+                  </span>
+                </div>
+                <div className="flex items-center gap-2.5 px-3.5 py-2.5 rounded-xl bg-muted/40 border border-border">
+                  <Badge
+                    variant="outline"
+                    className="text-[10px] font-bold shrink-0"
+                  >
+                    Header
+                  </Badge>
+                  <code className="code-inline">
+                    X-Admin-Key:{" "}
+                    <span className="text-muted-foreground italic">
+                      &lt;admin_secret&gt;
+                    </span>
+                  </code>
+                  <span className="ml-auto text-xs text-muted-foreground">
+                    {t("docs.authentication.adminNote")}
+                  </span>
+                </div>
+              </div>
+            </CardContent>
+          </Card>
+
+          {/* Section 4: Model API */}
+          <SectionHeader
+            id="model-api"
+            icon={SECTION_ICON["model-api"]}
+            tone={SECTION_TONE["model-api"]}
+            eyebrow={t("docs.section4Eyebrow")}
+            title={t("docs.modelApi.title")}
+            description={t("docs.modelApi.description")}
+          />
+
+          {modelEndpoints.map((endpoint) => (
+            <EndpointDoc
+              key={endpoint.id}
+              id={endpoint.id}
+              method={endpoint.method}
+              path={endpoint.path}
+              title={endpoint.title}
+              description={endpoint.description}
+              curlExample={endpoint.curl}
+              defaultBody={endpoint.defaultBody}
+              responseExamples={endpoint.responses}
+              apiKey={activeKey}
+              baseUrl={baseUrl}
+              allKeys={allKeys}
+            />
+          ))}
+
+          {/* Section 5: Admin API */}
+          <SectionHeader
+            id="admin-api"
+            icon={SECTION_ICON["admin-api"]}
+            tone={SECTION_TONE["admin-api"]}
+            eyebrow={t("docs.section5Eyebrow")}
+            title={t("docs.adminApi.title")}
+            description={t("docs.adminApi.description")}
+          />
+
+          {adminEndpoints.map((endpoint) => (
+            <EndpointDoc
+              key={endpoint.id}
+              id={endpoint.id}
+              method={endpoint.method}
+              path={endpoint.path}
+              title={endpoint.title}
+              description={endpoint.description}
+              curlExample={endpoint.curl}
+              defaultBody={endpoint.defaultBody}
+              responseExamples={endpoint.responses}
+              apiKey={adminSeed}
+              baseUrl={baseUrl}
+              allKeys={[]}
+            />
+          ))}
+        </div>
+
+        <aside className="relative hidden xl:block">
+          <div className="absolute -top-11 right-0">
+            <Button
+              variant="outline"
+              size="sm"
+              onClick={() => void handleCopyMarkdown()}
+              disabled={copyingMd}
+              className="gap-1.5"
+            >
+              {copyingMd ? (
+                <Check className="size-3.5 text-emerald-500" />
+              ) : (
+                <Copy className="size-3.5" />
+              )}
+              {t("docs.copyMarkdown")}
+            </Button>
+          </div>
+          <div className="sticky top-4">
+            <DocsTOC items={tocItems} title={t("docs.tocTitle")} />
+          </div>
+        </aside>
+      </div>
+    </>
+  );
+}
diff --git a/frontend/src/pages/Guide.tsx b/frontend/src/pages/Guide.tsx
index 9343245f..ef8b53d8 100644
--- a/frontend/src/pages/Guide.tsx
+++ b/frontend/src/pages/Guide.tsx
@@ -1,21 +1,111 @@
-import { useMemo, useState } from 'react'
-import { useTranslation } from 'react-i18next'
-import { Copy, Check } from 'lucide-react'
+import { useEffect, useMemo, useState } from 'react'
+import { Check, Copy, ExternalLink } from 'lucide-react'
+import { api } from '../api'
 import PageHeader from '../components/PageHeader'
-import { Card, CardContent } from '@/components/ui/card'
 import { Badge } from '@/components/ui/badge'
 import { Button } from '@/components/ui/button'
+import { Card, CardContent } from '@/components/ui/card'
+import { Select } from '@/components/ui/select'
+
+type TabOption<T extends string> = {
+  id: T
+  label: string
+}
+
+type ApiKeyOption = {
+  name: string
+  key: string
+}
+
+type ClientTool = {
+  id: string
+  name: string
+  badge: string
+  blurb: string
+  glyph: string
+  tone: string
+}
+
+const CLIENT_TOOLS: ClientTool[] = [
+  {
+    id: 'codex',
+    name: 'Codex CLI',
+    badge: 'Responses',
+    blurb: 'Write config.toml and auth.json for the OpenAI Responses wire API.',
+    glyph: 'CX',
+    tone: 'bg-emerald-500/10 text-emerald-600 dark:text-emerald-400',
+  },
+  {
+    id: 'claude',
+    name: 'Claude Code',
+    badge: 'Anthropic',
+    blurb: 'Use environment variables or settings.json for the Messages endpoint.',
+    glyph: 'CC',
+    tone: 'bg-orange-500/10 text-orange-600 dark:text-orange-400',
+  },
+  {
+    id: 'cc-switch',
+    name: 'CC Switch',
+    badge: 'Deeplink',
+    blurb: 'Launch the desktop switcher and import this server as a provider.',
+    glyph: 'CS',
+    tone: 'bg-fuchsia-500/10 text-fuchsia-600 dark:text-fuchsia-400',
+  },
+]
+
+const FALLBACK_MODELS = ['gpt-5.4', 'gpt-5.4-mini', 'gpt-5.3-codex', 'claude-sonnet-4-5-20250514']
+
+function encodeBase64(text: string): string {
+  return btoa(unescape(encodeURIComponent(text)))
+}
+
+function buildCcSwitchUrl(baseUrl: string, apiKey: string): string {
+  const config = encodeURIComponent(encodeBase64(JSON.stringify({
+    name: 'codex2api',
+    baseURL: baseUrl,
+    apiKey,
+    anthropicVersion: '2023-06-01',
+  })))
+  return `cc-switch://import?data=${config}`
+}
+
+function keyLabel(item: ApiKeyOption): string {
+  if (!item.key) return item.name || 'API Key'
+  const masked = item.key.length > 14 ? `${item.key.slice(0, 7)}...${item.key.slice(-4)}` : item.key
+  return item.name ? `${item.name} - ${masked}` : masked
+}
 
-// 带复制按钮的代码块
-function CodeBlock({ path, content }: { path: string; content: string }) {
-  const { t } = useTranslation()
+function Tabs<T extends string>({ tabs, active, onChange }: {
+  tabs: TabOption<T>[]
+  active: T
+  onChange: (value: T) => void
+}) {
+  return (
+    <div className="mb-4 flex flex-wrap gap-1.5 border-b border-border">
+      {tabs.map((tab) => (
+        <button
+          key={tab.id}
+          type="button"
+          onClick={() => onChange(tab.id)}
+          className={`-mb-px border-b-2 px-3 py-2 text-sm font-semibold transition-colors ${
+            active === tab.id
+              ? 'border-primary text-primary'
+              : 'border-transparent text-muted-foreground hover:text-foreground'
+          }`}
+        >
+          {tab.label}
+        </button>
+      ))}
+    </div>
+  )
+}
+
+function CodeBlock({ label, content }: { label: string; content: string }) {
   const [copied, setCopied] = useState(false)
 
   const handleCopy = async () => {
     try {
       await navigator.clipboard.writeText(content)
-      setCopied(true)
-      setTimeout(() => setCopied(false), 2000)
     } catch {
       const textarea = document.createElement('textarea')
       textarea.value = content
@@ -24,78 +114,44 @@ function CodeBlock({ path, content }: { path: string; content: string }) {
       textarea.select()
       document.execCommand('copy')
       document.body.removeChild(textarea)
-      setCopied(true)
-      setTimeout(() => setCopied(false), 2000)
     }
+    setCopied(true)
+    setTimeout(() => setCopied(false), 1600)
   }
 
   return (
-    <div className="bg-zinc-900 dark:bg-zinc-950 rounded-xl overflow-hidden">
-      <div className="flex items-center justify-between px-4 py-2 bg-zinc-800 dark:bg-zinc-900 border-b border-zinc-700">
-        <span className="text-xs text-zinc-400 font-mono">{path}</span>
+    <div className="overflow-hidden rounded-lg bg-zinc-900 dark:bg-zinc-950">
+      <div className="flex items-center justify-between gap-3 border-b border-zinc-700 bg-zinc-800 px-4 py-2 dark:bg-zinc-900">
+        <span className="truncate font-mono text-xs text-zinc-400">{label}</span>
         <button
+          type="button"
           onClick={() => void handleCopy()}
-          className={`flex items-center gap-1.5 px-2.5 py-1 text-xs font-medium rounded-lg transition-colors ${
-            copied
-              ? 'bg-emerald-500/20 text-emerald-400'
-              : 'bg-zinc-700 hover:bg-zinc-600 text-zinc-300 hover:text-white'
+          className={`inline-flex items-center gap-1.5 rounded-md px-2.5 py-1 text-xs font-semibold transition-colors ${
+            copied ? 'bg-emerald-500/20 text-emerald-300' : 'bg-zinc-700 text-zinc-300 hover:bg-zinc-600 hover:text-white'
           }`}
         >
           {copied ? <Check className="size-3.5" /> : <Copy className="size-3.5" />}
-          {copied ? t('guide.copied') : t('guide.copy')}
+          {copied ? 'Copied' : 'Copy'}
         </button>
       </div>
-      <pre className="p-4 text-sm font-mono text-zinc-100 overflow-x-auto leading-relaxed">
+      <pre className="overflow-x-auto p-4 font-mono text-[13px] leading-relaxed text-zinc-100">
         <code>{content}</code>
       </pre>
     </div>
   )
 }
 
-// macOS/Linux 和 Windows 的 Tab 切换
-function OsTabs({ active, onChange }: { active: 'unix' | 'windows'; onChange: (v: 'unix' | 'windows') => void }) {
-  return (
-    <div className="border-b border-border mb-4">
-      <nav className="-mb-px flex space-x-4">
-        <button
-          onClick={() => onChange('unix')}
-          className={`whitespace-nowrap py-2.5 px-1 border-b-2 font-medium text-sm transition-colors flex items-center gap-2 ${
-            active === 'unix'
-              ? 'border-primary text-primary'
-              : 'border-transparent text-muted-foreground hover:text-foreground hover:border-border'
-          }`}
-        >
-          <svg fill="currentColor" viewBox="0 0 24 24" className="size-4"><path d="M18.71 19.5c-.83 1.24-1.71 2.45-3.05 2.47-1.34.03-1.77-.79-3.29-.79-1.53 0-2 .77-3.27.82-1.31.05-2.3-1.32-3.14-2.53C4.25 17 2.94 12.45 4.7 9.39c.87-1.52 2.43-2.48 4.12-2.51 1.28-.02 2.5.87 3.29.87.78 0 2.26-1.07 3.81-.91.65.03 2.47.26 3.64 1.98-.09.06-2.17 1.28-2.15 3.81.03 3.02 2.65 4.03 2.68 4.04-.03.07-.42 1.44-1.38 2.83M13 3.5c.73-.83 1.94-1.46 2.94-1.5.13 1.17-.34 2.35-1.04 3.19-.69.85-1.83 1.51-2.95 1.42-.15-1.15.41-2.35 1.05-3.11z"/></svg>
-          macOS / Linux
-        </button>
-        <button
-          onClick={() => onChange('windows')}
-          className={`whitespace-nowrap py-2.5 px-1 border-b-2 font-medium text-sm transition-colors flex items-center gap-2 ${
-            active === 'windows'
-              ? 'border-primary text-primary'
-              : 'border-transparent text-muted-foreground hover:text-foreground hover:border-border'
-          }`}
-        >
-          <svg fill="currentColor" viewBox="0 0 24 24" className="size-4"><path d="M3 12V6.75l6-1.32v6.48L3 12zm17-9v8.75l-10 .15V5.21L20 3zM3 13l6 .09v6.81l-6-1.15V13zm7 .25l10 .15V21l-10-1.91v-5.84z"/></svg>
-          Windows
-        </button>
-      </nav>
-    </div>
-  )
-}
-
-export default function Guide() {
-  const { t } = useTranslation()
-  const [codexOs, setCodexOs] = useState<'unix' | 'windows'>('unix')
-  const [claudeOs, setClaudeOs] = useState<'unix' | 'windows'>('unix')
-
-  // 动态获取当前服务地址
-  const baseUrl = useMemo(() => window.location.origin, [])
-
-  const codexConfigDir = codexOs === 'windows' ? '%userprofile%\\.codex' : '~/.codex'
-  const claudeConfigDir = claudeOs === 'windows' ? '%userprofile%\\.claude' : '~/.claude'
-
-  const codexConfigToml = `model_provider = "OpenAI"
+function ClientCard({ tool, activeKey, baseUrl }: {
+  tool: ClientTool
+  activeKey: string
+  baseUrl: string
+}) {
+  const [codexTab, setCodexTab] = useState<'unix' | 'windows'>('unix')
+  const [claudeTab, setClaudeTab] = useState<'env-unix' | 'env-windows' | 'settings'>('env-unix')
+  const key = activeKey || 'YOUR_API_KEY'
+  const codexDir = codexTab === 'windows' ? '%userprofile%\\.codex' : '~/.codex'
+
+  const codexConfig = `model_provider = "OpenAI"
 model = "gpt-5.4"
 review_model = "gpt-5.4"
 model_reasoning_effort = "xhigh"
@@ -110,189 +166,273 @@ base_url = "${baseUrl}"
 wire_api = "responses"
 requires_openai_auth = true`
 
-  const codexAuthJson = `{
-  "OPENAI_API_KEY": "YOUR_API_KEY"
-}`
-
-  const claudeSettingsJson = `{
-  "env": {
-    "ANTHROPIC_BASE_URL": "${baseUrl}",
-    "ANTHROPIC_AUTH_TOKEN": "YOUR_API_KEY",
-    "CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC": "1"
-  }
+  const codexAuth = `{
+  "OPENAI_API_KEY": "${key}"
 }`
 
   const claudeEnvUnix = `export ANTHROPIC_BASE_URL="${baseUrl}"
-export ANTHROPIC_AUTH_TOKEN="YOUR_API_KEY"
+export ANTHROPIC_AUTH_TOKEN="${key}"
 export CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1`
 
   const claudeEnvWindows = `set ANTHROPIC_BASE_URL=${baseUrl}
-set ANTHROPIC_AUTH_TOKEN=YOUR_API_KEY
+set ANTHROPIC_AUTH_TOKEN=${key}
 set CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1`
 
-  return (
-    <>
-      <PageHeader
-        title={t('guide.title')}
-        description={t('guide.description')}
-      />
-
-      {/* API 端点总览 */}
-      <Card className="mb-4">
-        <CardContent className="p-6">
-          <h3 className="text-base font-semibold text-foreground mb-2">{t('guide.endpoints')}</h3>
-          <p className="text-sm text-muted-foreground mb-4">{t('guide.endpointsDesc')}</p>
-
-          <div className="space-y-4">
-            <div className="p-4 rounded-xl border border-border bg-white/40 dark:bg-white/5">
-              <div className="flex items-center gap-2 mb-2">
-                <Badge variant="default" className="text-[13px]">POST</Badge>
-                <code className="font-mono text-sm font-semibold">/v1/responses</code>
-              </div>
-              <p className="text-sm text-muted-foreground">{t('guide.responsesDesc')}</p>
-            </div>
+  const claudeSettings = `{
+  "env": {
+    "ANTHROPIC_BASE_URL": "${baseUrl}",
+    "ANTHROPIC_AUTH_TOKEN": "${key}",
+    "CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC": "1"
+  }
+}`
 
-            <div className="p-4 rounded-xl border border-border bg-white/40 dark:bg-white/5">
-              <div className="flex items-center gap-2 mb-2">
-                <Badge variant="default" className="text-[13px]">POST</Badge>
-                <code className="font-mono text-sm font-semibold">/v1/chat/completions</code>
-              </div>
-              <p className="text-sm text-muted-foreground">{t('guide.chatDesc')}</p>
-            </div>
+  const ccSwitchUrl = buildCcSwitchUrl(baseUrl, key)
 
-            <div className="p-4 rounded-xl border border-border bg-white/40 dark:bg-white/5">
-              <div className="flex items-center gap-2 mb-2">
-                <Badge variant="default" className="text-[13px]">POST</Badge>
-                <code className="font-mono text-sm font-semibold">/v1/messages</code>
-              </div>
-              <p className="text-sm text-muted-foreground">{t('guide.messagesDesc')}</p>
+  return (
+    <Card id={`client-${tool.id}`} className="scroll-mt-20">
+      <CardContent className="p-5">
+        <div className="mb-4 flex items-start gap-3">
+          <div className={`flex size-10 shrink-0 items-center justify-center rounded-lg text-sm font-bold ${tool.tone}`}>
+            {tool.glyph}
+          </div>
+          <div className="min-w-0 flex-1">
+            <div className="flex flex-wrap items-center gap-2">
+              <h3 className="text-base font-semibold text-foreground">{tool.name}</h3>
+              <Badge variant="outline" className="text-[10px] font-bold">{tool.badge}</Badge>
             </div>
+            <p className="mt-1 text-sm text-muted-foreground">{tool.blurb}</p>
           </div>
-        </CardContent>
-      </Card>
-
-      {/* Codex CLI 配置 */}
-      <Card className="mb-4">
-        <CardContent className="p-6">
-          <h3 className="text-base font-semibold text-foreground mb-2">{t('guide.codexTitle')}</h3>
-          <p className="text-sm text-muted-foreground mb-4">{t('guide.codexDesc')}</p>
-
-          <OsTabs active={codexOs} onChange={setCodexOs} />
-
-          <p className="text-xs text-amber-600 dark:text-amber-400 mb-3 flex items-center gap-1">
-            ⓘ {t('guide.codexConfigHint')}
-          </p>
+        </div>
+
+        {tool.id === 'codex' && (
+          <>
+            <Tabs
+              tabs={[{ id: 'unix', label: 'macOS / Linux' }, { id: 'windows', label: 'Windows' }]}
+              active={codexTab}
+              onChange={setCodexTab}
+            />
+            <div className="space-y-4">
+              <CodeBlock label={`${codexDir}/config.toml`} content={codexConfig} />
+              <CodeBlock label={`${codexDir}/auth.json`} content={codexAuth} />
+            </div>
+          </>
+        )}
+
+        {tool.id === 'claude' && (
+          <>
+            <Tabs
+              tabs={[
+                { id: 'env-unix', label: 'macOS / Linux env' },
+                { id: 'env-windows', label: 'Windows env' },
+                { id: 'settings', label: 'settings.json' },
+              ]}
+              active={claudeTab}
+              onChange={setClaudeTab}
+            />
+            {claudeTab === 'env-unix' && <CodeBlock label="Terminal" content={claudeEnvUnix} />}
+            {claudeTab === 'env-windows' && <CodeBlock label="Command Prompt" content={claudeEnvWindows} />}
+            {claudeTab === 'settings' && <CodeBlock label="~/.claude/settings.json" content={claudeSettings} />}
+          </>
+        )}
 
+        {tool.id === 'cc-switch' && (
           <div className="space-y-4">
-            <CodeBlock path={`${codexConfigDir}/config.toml`} content={codexConfigToml} />
-            <CodeBlock path={`${codexConfigDir}/auth.json`} content={codexAuthJson} />
+            <CodeBlock label="cc-switch deeplink" content={ccSwitchUrl} />
+            <Button
+              asChild
+              disabled={!activeKey}
+              className="gap-2"
+            >
+              <a href={ccSwitchUrl}>
+                <ExternalLink className="size-4" />
+                Import to CC Switch
+              </a>
+            </Button>
+            {!activeKey && <p className="text-xs text-amber-600 dark:text-amber-400">Create or select an API key before launching the deeplink.</p>}
           </div>
+        )}
+      </CardContent>
+    </Card>
+  )
+}
 
-          <p className="text-xs text-muted-foreground mt-3">
-            {codexOs === 'windows' ? t('guide.codexNoteWindows') : t('guide.codexNoteUnix')}
-          </p>
-        </CardContent>
-      </Card>
-
-      {/* Claude Code 配置 */}
-      <Card className="mb-4">
-        <CardContent className="p-6">
-          <h3 className="text-base font-semibold text-foreground mb-2">{t('guide.claudeCodeTitle')}</h3>
-          <p className="text-sm text-muted-foreground mb-4">{t('guide.claudeCodeDesc')}</p>
-
-          <OsTabs active={claudeOs} onChange={setClaudeOs} />
-
-          <div className="space-y-4">
-            <CodeBlock
-              path={claudeOs === 'unix' ? 'Terminal' : 'Command Prompt'}
-              content={claudeOs === 'unix' ? claudeEnvUnix : claudeEnvWindows}
-            />
-            <p className="text-xs text-muted-foreground">{t('guide.claudeEnvNote')}</p>
-
-            <CodeBlock
-              path={`${claudeConfigDir}/settings.json`}
-              content={claudeSettingsJson}
-            />
-            <p className="text-xs text-muted-foreground">{t('guide.claudeSettingsNote')}</p>
-          </div>
-        </CardContent>
-      </Card>
-
-      {/* 认证方式 */}
-      <Card className="mb-4">
-        <CardContent className="p-6">
-          <h3 className="text-base font-semibold text-foreground mb-2">{t('guide.authTitle')}</h3>
-          <p className="text-sm text-muted-foreground mb-3">{t('guide.authDesc')}</p>
-          <ul className="space-y-2 text-sm">
-            <li className="flex items-start gap-2">
-              <span className="text-primary font-bold mt-0.5">1.</span>
-              <code className="font-mono text-[13px] bg-muted px-2 py-0.5 rounded">{t('guide.authBearer')}</code>
-            </li>
-            <li className="flex items-start gap-2">
-              <span className="text-primary font-bold mt-0.5">2.</span>
-              <code className="font-mono text-[13px] bg-muted px-2 py-0.5 rounded">{t('guide.authXApiKey')}</code>
-            </li>
-            <li className="flex items-start gap-2">
-              <span className="text-primary font-bold mt-0.5">3.</span>
-              <code className="font-mono text-[13px] bg-muted px-2 py-0.5 rounded">{t('guide.authAnthropicToken')}</code>
-            </li>
-          </ul>
-        </CardContent>
-      </Card>
-
-      {/* 模型映射说明 */}
-      <Card className="mb-4">
-        <CardContent className="p-6">
-          <h3 className="text-base font-semibold text-foreground mb-2">{t('guide.modelMappingTitle')}</h3>
-          <p className="text-sm text-muted-foreground">{t('guide.modelMappingDesc')}</p>
-        </CardContent>
-      </Card>
-
-      {/* 请求示例 */}
-      <Card>
-        <CardContent className="p-6">
-          <h3 className="text-base font-semibold text-foreground mb-4">{t('guide.exampleTitle')}</h3>
-
-          <div className="space-y-6">
-            <div>
-              <h4 className="text-sm font-semibold text-muted-foreground mb-2">{t('guide.responsesExample')}</h4>
-              <CodeBlock path="curl" content={`curl -X POST http://your-server:8080/v1/responses \\
-  -H "Authorization: Bearer YOUR_API_KEY" \\
+export default function Guide() {
+  const baseUrl = useMemo(() => window.location.origin, [])
+  const [apiKeys, setApiKeys] = useState<ApiKeyOption[]>([])
+  const [selectedKey, setSelectedKey] = useState('')
+  const [models, setModels] = useState(FALLBACK_MODELS)
+  const [selectedModel, setSelectedModel] = useState('gpt-5.4')
+  const [curlTab, setCurlTab] = useState<'responses' | 'chat' | 'messages'>('responses')
+
+  useEffect(() => {
+    api.getAPIKeys().then((res) => {
+      const keys = (res.keys ?? []).map((item) => ({ name: item.name, key: item.raw_key || item.key }))
+      setApiKeys(keys)
+      if (keys[0]) setSelectedKey(keys[0].key)
+    }).catch(() => {})
+
+    api.getModels().then((res) => {
+      const next = (res.models?.length ? res.models : res.items?.map((item) => item.id) ?? [])
+        .filter((model): model is string => Boolean(model))
+      if (next.length > 0) {
+        setModels(next)
+        setSelectedModel(next.includes('gpt-5.4') ? 'gpt-5.4' : next[0])
+      }
+    }).catch(() => {})
+  }, [])
+
+  const activeKey = selectedKey || apiKeys[0]?.key || ''
+  const keyForSnippet = activeKey || 'YOUR_API_KEY'
+  const messagesModel = selectedModel.startsWith('claude-') ? selectedModel : 'claude-sonnet-4-5-20250514'
+
+  const curlExamples = {
+    responses: `curl -X POST ${baseUrl}/v1/responses \\
+  -H "Authorization: Bearer ${keyForSnippet}" \\
   -H "Content-Type: application/json" \\
   -d '{
-    "model": "gpt-5.4",
+    "model": "${selectedModel}",
     "input": [{"role": "user", "content": [{"type": "input_text", "text": "Hello"}]}],
     "stream": true
-  }'`} />
-            </div>
-
-            <div>
-              <h4 className="text-sm font-semibold text-muted-foreground mb-2">{t('guide.chatExample')}</h4>
-              <CodeBlock path="curl" content={`curl -X POST http://your-server:8080/v1/chat/completions \\
-  -H "Authorization: Bearer YOUR_API_KEY" \\
+  }'`,
+    chat: `curl -X POST ${baseUrl}/v1/chat/completions \\
+  -H "Authorization: Bearer ${keyForSnippet}" \\
   -H "Content-Type: application/json" \\
   -d '{
-    "model": "gpt-5.4",
+    "model": "${selectedModel}",
     "messages": [{"role": "user", "content": "Hello"}],
     "stream": true
-  }'`} />
-            </div>
-
-            <div>
-              <h4 className="text-sm font-semibold text-muted-foreground mb-2">{t('guide.messagesExample')}</h4>
-              <CodeBlock path="curl" content={`curl -X POST http://your-server:8080/v1/messages \\
-  -H "x-api-key: YOUR_API_KEY" \\
+  }'`,
+    messages: `curl -X POST ${baseUrl}/v1/messages \\
+  -H "x-api-key: ${keyForSnippet}" \\
   -H "Content-Type: application/json" \\
   -H "anthropic-version: 2023-06-01" \\
   -d '{
-    "model": "claude-sonnet-4-5-20250514",
+    "model": "${messagesModel}",
     "max_tokens": 1024,
     "messages": [{"role": "user", "content": "Hello"}]
-  }'`} />
-            </div>
+  }'`,
+  }
+
+  const tocItems = [
+    ['quick-start', 'Quick Start'],
+    ['client-codex', 'Codex CLI'],
+    ['client-claude', 'Claude Code'],
+    ['client-cc-switch', 'CC Switch'],
+    ['curl-examples', 'cURL Examples'],
+    ['auth', 'Authentication'],
+  ]
+
+  return (
+    <>
+      <PageHeader
+        title="Usage Guide"
+        description="Configure clients and test the OpenAI / Anthropic compatible endpoints."
+      />
+
+      <div className="grid items-start gap-6 xl:grid-cols-[minmax(0,1fr)_240px]">
+        <div className="min-w-0 space-y-4">
+          <Card id="quick-start" className="scroll-mt-20">
+            <CardContent className="p-5">
+              <div className="flex flex-wrap items-end justify-between gap-3">
+                <div>
+                  <h2 className="text-lg font-bold text-foreground">Quick Start</h2>
+                  <p className="mt-1 text-sm text-muted-foreground">Choose a key once; client cards and cURL examples update together.</p>
+                </div>
+                <div className="min-w-[240px]">
+                  <label className="mb-1.5 block text-xs font-semibold uppercase tracking-wide text-muted-foreground">API Key</label>
+                  {apiKeys.length > 0 ? (
+                    <Select
+                      value={selectedKey}
+                      onValueChange={setSelectedKey}
+                      options={apiKeys.map((item) => ({ label: keyLabel(item), value: item.key }))}
+                    />
+                  ) : (
+                    <a
+                      href="/admin/api-keys"
+                      className="inline-flex h-10 items-center rounded-lg border border-amber-500/30 bg-amber-500/10 px-3 text-sm font-semibold text-amber-700 dark:text-amber-300"
+                    >
+                      Create an API key first
+                    </a>
+                  )}
+                </div>
+              </div>
+            </CardContent>
+          </Card>
+
+          <div className="grid gap-4 lg:grid-cols-3">
+            {CLIENT_TOOLS.map((tool) => (
+              <ClientCard key={tool.id} tool={tool} activeKey={activeKey} baseUrl={baseUrl} />
+            ))}
+          </div>
+
+          <Card id="curl-examples" className="scroll-mt-20">
+            <CardContent className="p-5">
+              <div className="mb-4 flex flex-wrap items-end justify-between gap-3">
+                <div>
+                  <h2 className="text-lg font-bold text-foreground">cURL Examples</h2>
+                  <p className="mt-1 text-sm text-muted-foreground">Switch endpoint format and model without editing the snippet manually.</p>
+                </div>
+                <div className="min-w-[220px]">
+                  <label className="mb-1.5 block text-xs font-semibold uppercase tracking-wide text-muted-foreground">Model</label>
+                  <Select
+                    value={selectedModel}
+                    onValueChange={setSelectedModel}
+                    options={models.map((model) => ({ label: model, value: model }))}
+                  />
+                </div>
+              </div>
+              <Tabs
+                tabs={[
+                  { id: 'responses', label: '/v1/responses' },
+                  { id: 'chat', label: '/v1/chat/completions' },
+                  { id: 'messages', label: '/v1/messages' },
+                ]}
+                active={curlTab}
+                onChange={setCurlTab}
+              />
+              <CodeBlock label="cURL" content={curlExamples[curlTab]} />
+            </CardContent>
+          </Card>
+
+          <Card id="auth" className="scroll-mt-20">
+            <CardContent className="p-5">
+              <h2 className="text-lg font-bold text-foreground">Authentication</h2>
+              <p className="mt-1 text-sm text-muted-foreground">Downstream API requests accept standard OpenAI and Anthropic header styles.</p>
+              <div className="mt-4 grid gap-2">
+                <div className="flex items-center gap-2 rounded-lg border border-border bg-muted/40 px-3 py-2">
+                  <Badge variant="outline">Header</Badge>
+                  <code className="font-mono text-sm">Authorization: Bearer &lt;key&gt;</code>
+                </div>
+                <div className="flex items-center gap-2 rounded-lg border border-border bg-muted/40 px-3 py-2">
+                  <Badge variant="outline">Header</Badge>
+                  <code className="font-mono text-sm">x-api-key: &lt;key&gt;</code>
+                </div>
+                <div className="flex items-center gap-2 rounded-lg border border-border bg-muted/40 px-3 py-2">
+                  <Badge variant="outline">Header</Badge>
+                  <code className="font-mono text-sm">anthropic-auth-token: &lt;key&gt;</code>
+                </div>
+              </div>
+            </CardContent>
+          </Card>
+        </div>
+
+        <aside className="sticky top-4 hidden xl:block">
+          <div className="rounded-lg border border-border bg-card p-4">
+            <div className="mb-3 text-xs font-bold uppercase tracking-wide text-muted-foreground">On this page</div>
+            <nav className="space-y-1">
+              {tocItems.map(([id, label]) => (
+                <a
+                  key={id}
+                  href={`#${id}`}
+                  className="block rounded-md px-2 py-1.5 text-sm text-muted-foreground transition-colors hover:bg-muted/50 hover:text-foreground"
+                >
+                  {label}
+                </a>
+              ))}
+            </nav>
           </div>
-        </CardContent>
-      </Card>
+        </aside>
+      </div>
     </>
   )
 }
diff --git a/frontend/src/pages/Proxies.tsx b/frontend/src/pages/Proxies.tsx
index 90790383..aae4e888 100644
--- a/frontend/src/pages/Proxies.tsx
+++ b/frontend/src/pages/Proxies.tsx
@@ -1,179 +1,368 @@
-import { useState, useEffect, useCallback } from 'react'
-import { useTranslation } from 'react-i18next'
-import { Globe, Plus, Trash2, Play, MapPin, Loader2, Zap, ChevronLeft, ChevronRight, Eye, EyeOff } from 'lucide-react'
-import { Card, CardContent } from '@/components/ui/card'
-import { api, type ProxyRow, type ProxyTestResult } from '../api'
+import { useState, useEffect, useCallback, useMemo } from "react";
+import { useTranslation } from "react-i18next";
+import {
+  Globe,
+  Plus,
+  Trash2,
+  Play,
+  MapPin,
+  Loader2,
+  Zap,
+  ChevronLeft,
+  ChevronRight,
+  Eye,
+  EyeOff,
+  AlertTriangle,
+  Pencil,
+} from "lucide-react";
+import { Card, CardContent } from "@/components/ui/card";
+import { Button } from "@/components/ui/button";
+import { Input } from "@/components/ui/input";
+import { api, type ProxyRow, type ProxyTestResult } from "../api";
+import Modal from "../components/Modal";
+import ToastNotice from "../components/ToastNotice";
+import { useToast } from "../hooks/useToast";
+import { getErrorMessage } from "../utils/error";
 
-const PAGE_SIZE = 10
+const PAGE_SIZE = 10;
+const TEST_ALL_CONCURRENCY = 4;
+
+function validateProxyInput(url: string): boolean {
+  try {
+    const parsed = new URL(url);
+    return (
+      Boolean(parsed.hostname) &&
+      ["http:", "https:", "socks5:", "socks5h:"].includes(parsed.protocol)
+    );
+  } catch {
+    return false;
+  }
+}
 
 function latencyColor(ms: number): string {
-  if (ms <= 0) return 'text-muted-foreground'
-  if (ms < 500) return 'text-emerald-600 dark:text-emerald-400'
-  if (ms < 1500) return 'text-amber-600 dark:text-amber-400'
-  return 'text-red-600 dark:text-red-400'
+  if (ms <= 0) return "text-muted-foreground";
+  if (ms < 500) return "text-emerald-600 dark:text-emerald-400";
+  if (ms < 1500) return "text-amber-600 dark:text-amber-400";
+  return "text-red-600 dark:text-red-400";
 }
 
 function latencyBg(ms: number): string {
-  if (ms <= 0) return ''
-  if (ms < 500) return 'bg-emerald-500/10'
-  if (ms < 1500) return 'bg-amber-500/10'
-  return 'bg-red-500/10'
+  if (ms <= 0) return "";
+  if (ms < 500) return "bg-emerald-500/10";
+  if (ms < 1500) return "bg-amber-500/10";
+  return "bg-red-500/10";
 }
 
 function maskUrl(url: string): string {
   try {
-    const u = new URL(url)
-    const host = u.hostname
-    const masked = host.length > 6 ? host.slice(0, 3) + '***' + host.slice(-3) : '***'
-    return `${u.protocol}//${u.username ? '***:***@' : ''}${masked}${u.port ? ':' + u.port : ''}`
+    const u = new URL(url);
+    const host = u.hostname;
+    const masked =
+      host.length > 6 ? host.slice(0, 3) + "***" + host.slice(-3) : "***";
+    return `${u.protocol}//${u.username ? "***:***@" : ""}${masked}${u.port ? ":" + u.port : ""}`;
   } catch {
-    return url.slice(0, 10) + '******'
+    return url.slice(0, 10) + "******";
   }
 }
 
 export default function Proxies() {
-  const { t, i18n } = useTranslation()
-  const [proxies, setProxies] = useState<ProxyRow[]>([])
-  const [loading, setLoading] = useState(true)
-  const [poolEnabled, setPoolEnabled] = useState(false)
-  const [showAdd, setShowAdd] = useState(false)
-  const [addInput, setAddInput] = useState('')
-  const [addLabel, setAddLabel] = useState('')
-  const [addLoading, setAddLoading] = useState(false)
-  const [selected, setSelected] = useState<Set<number>>(new Set())
-  const [testingIds, setTestingIds] = useState<Set<number>>(new Set())
-  const [testAllLoading, setTestAllLoading] = useState(false)
-  const [page, setPage] = useState(1)
-  const [revealedIds, setRevealedIds] = useState<Set<number>>(new Set())
-
-  const ipApiLang = i18n.language?.startsWith('zh') ? 'zh-CN' : 'en'
+  const { t, i18n } = useTranslation();
+  const { toast, showToast } = useToast();
+  const [proxies, setProxies] = useState<ProxyRow[]>([]);
+  const [loading, setLoading] = useState(true);
+  const [poolEnabled, setPoolEnabled] = useState(false);
+  const [showAdd, setShowAdd] = useState(false);
+  const [addInput, setAddInput] = useState("");
+  const [addLabel, setAddLabel] = useState("");
+  const [addLoading, setAddLoading] = useState(false);
+  const [selected, setSelected] = useState<Set<number>>(new Set());
+  const [testingIds, setTestingIds] = useState<Set<number>>(new Set());
+  const [testAllLoading, setTestAllLoading] = useState(false);
+  const [testAllDone, setTestAllDone] = useState(0);
+  const [testAllFailed, setTestAllFailed] = useState(0);
+  const [page, setPage] = useState(1);
+  const [revealedIds, setRevealedIds] = useState<Set<number>>(new Set());
+  const [editingProxy, setEditingProxy] = useState<ProxyRow | null>(null);
+  const [editUrl, setEditUrl] = useState("");
+  const [editLabel, setEditLabel] = useState("");
+  const [editSaving, setEditSaving] = useState(false);
+  const [editError, setEditError] = useState("");
+
+  const ipApiLang = i18n.language?.startsWith("zh") ? "zh-CN" : "en";
 
   const reload = useCallback(async () => {
     try {
-      const [proxyRes, settingsRes] = await Promise.all([api.listProxies(), api.getSettings()])
-      setProxies(proxyRes.proxies)
-      setPoolEnabled(settingsRes.proxy_pool_enabled)
-    } catch { /* ignore */ }
-    setLoading(false)
-  }, [])
+      const [proxyRes, settingsRes] = await Promise.all([
+        api.listProxies(),
+        api.getSettings(),
+      ]);
+      setProxies(proxyRes.proxies);
+      setPoolEnabled(settingsRes.proxy_pool_enabled);
+    } catch (error) {
+      showToast(
+        t("proxies.loadFailed", { error: getErrorMessage(error) }),
+        "error",
+      );
+    }
+    setLoading(false);
+  }, [showToast, t]);
 
-  useEffect(() => { reload() }, [reload])
+  useEffect(() => {
+    reload();
+  }, [reload]);
 
-  const totalPages = Math.max(1, Math.ceil(proxies.length / PAGE_SIZE))
-  const pagedProxies = proxies.slice((page - 1) * PAGE_SIZE, page * PAGE_SIZE)
+  const totalPages = Math.max(1, Math.ceil(proxies.length / PAGE_SIZE));
+  const pagedProxies = proxies.slice((page - 1) * PAGE_SIZE, page * PAGE_SIZE);
 
   useEffect(() => {
-    if (page > totalPages) setPage(totalPages)
-  }, [page, totalPages])
+    if (page > totalPages) setPage(totalPages);
+  }, [page, totalPages]);
 
   const handleTogglePool = async () => {
-    const next = !poolEnabled
-    setPoolEnabled(next)
+    const next = !poolEnabled;
+    setPoolEnabled(next);
     try {
-      await api.updateSettings({ proxy_pool_enabled: next })
+      await api.updateSettings({ proxy_pool_enabled: next });
     } catch {
-      setPoolEnabled(!next)
+      setPoolEnabled(!next);
     }
-  }
+  };
 
   const handleAdd = async () => {
-    const urls = addInput.split('\n').map(s => s.trim()).filter(Boolean)
-    if (urls.length === 0) return
-    setAddLoading(true)
+    const urls = addInput
+      .split("\n")
+      .map((s) => s.trim())
+      .filter(Boolean);
+    if (urls.length === 0) return;
+    const invalidUrl = urls.find((url) => !validateProxyInput(url));
+    if (invalidUrl) {
+      showToast(t("proxies.invalidProxyUrl"), "error");
+      return;
+    }
+    setAddLoading(true);
     try {
-      await api.addProxies({ urls, label: addLabel })
-      setAddInput('')
-      setAddLabel('')
-      setShowAdd(false)
-      await reload()
-    } catch { /* ignore */ }
-    setAddLoading(false)
-  }
+      await api.addProxies({ urls, label: addLabel });
+      setAddInput("");
+      setAddLabel("");
+      setShowAdd(false);
+      await reload();
+    } catch (error) {
+      showToast(
+        t("proxies.addFailed", { error: getErrorMessage(error) }),
+        "error",
+      );
+    }
+    setAddLoading(false);
+  };
 
   const handleDelete = async (id: number) => {
     try {
-      await api.deleteProxy(id)
-      await reload()
-    } catch { /* ignore */ }
-  }
+      await api.deleteProxy(id);
+      await reload();
+    } catch (error) {
+      showToast(
+        t("proxies.deleteFailed", { error: getErrorMessage(error) }),
+        "error",
+      );
+    }
+  };
 
   const handleBatchDelete = async () => {
-    if (selected.size === 0) return
+    if (selected.size === 0) return;
     try {
-      await api.batchDeleteProxies([...selected])
-      setSelected(new Set())
-      await reload()
-    } catch { /* ignore */ }
-  }
+      await api.batchDeleteProxies([...selected]);
+      setSelected(new Set());
+      await reload();
+    } catch (error) {
+      showToast(
+        t("proxies.batchDeleteFailed", { error: getErrorMessage(error) }),
+        "error",
+      );
+    }
+  };
+
+  const startEdit = (p: ProxyRow) => {
+    setEditingProxy(p);
+    setEditUrl(p.url);
+    setEditLabel(p.label || "");
+    setEditError("");
+  };
+
+  const handleEditSave = async () => {
+    if (!editingProxy) return;
+    const trimmedUrl = editUrl.trim();
+    if (!trimmedUrl || !validateProxyInput(trimmedUrl)) {
+      setEditError(t("proxies.invalidProxyUrl"));
+      return;
+    }
+    setEditSaving(true);
+    setEditError("");
+    try {
+      await api.updateProxy(editingProxy.id, {
+        url: trimmedUrl,
+        label: editLabel.trim(),
+      });
+      setEditingProxy(null);
+      await reload();
+      showToast(t("proxies.proxyUpdated"));
+    } catch (error) {
+      setEditError(getErrorMessage(error));
+    } finally {
+      setEditSaving(false);
+    }
+  };
 
   const handleToggle = async (p: ProxyRow) => {
     try {
-      await api.updateProxy(p.id, { enabled: !p.enabled })
-      await reload()
-    } catch { /* ignore */ }
-  }
+      await api.updateProxy(p.id, { enabled: !p.enabled });
+      await reload();
+    } catch {
+      /* ignore */
+    }
+  };
 
   const handleTest = async (p: ProxyRow) => {
-    setTestingIds(prev => new Set(prev).add(p.id))
+    setTestingIds((prev) => new Set(prev).add(p.id));
     try {
-      const result = await api.testProxy(p.url, p.id, ipApiLang)
-      if (result.success) {
-        setProxies(prev => prev.map(px =>
-          px.id === p.id
-            ? { ...px, test_ip: result.ip || '', test_location: result.location || '', test_latency_ms: result.latency_ms || 0 }
-            : px
-        ))
+      const result = await api.testProxy(p.url, p.id, ipApiLang);
+      if (!result.success) {
+        setProxies((prev) =>
+          prev.map((px) =>
+            px.id === p.id
+              ? { ...px, test_ip: "", test_location: "", test_latency_ms: 0 }
+              : px,
+          ),
+        );
+        showToast(
+          t("proxies.testFailed", {
+            error: result.error || t("proxies.testFailedUnknown"),
+          }),
+          "error",
+        );
+      } else {
+        setProxies((prev) =>
+          prev.map((px) =>
+            px.id === p.id
+              ? {
+                  ...px,
+                  test_ip: result.ip || "",
+                  test_location: result.location || "",
+                  test_latency_ms: result.latency_ms || 0,
+                }
+              : px,
+          ),
+        );
       }
-    } catch { /* ignore */ }
-    setTestingIds(prev => {
-      const next = new Set(prev)
-      next.delete(p.id)
-      return next
-    })
-  }
+    } catch (error) {
+      showToast(
+        t("proxies.testFailed", { error: getErrorMessage(error) }),
+        "error",
+      );
+    }
+    setTestingIds((prev) => {
+      const next = new Set(prev);
+      next.delete(p.id);
+      return next;
+    });
+  };
 
   const handleTestAll = async () => {
-    setTestAllLoading(true)
-    for (const p of proxies) {
-      setTestingIds(prev => new Set(prev).add(p.id))
+    setTestAllLoading(true);
+    setTestAllDone(0);
+    setTestAllFailed(0);
+    let failedCount = 0;
+    let firstError = "";
+    let nextIndex = 0;
+    const queue = [...proxies];
+    const testOne = async (p: ProxyRow) => {
+      setTestingIds((prev) => new Set(prev).add(p.id));
       try {
-        const result = await api.testProxy(p.url, p.id, ipApiLang)
-        if (result.success) {
-          setProxies(prev => prev.map(px =>
-            px.id === p.id
-              ? { ...px, test_ip: result.ip || '', test_location: result.location || '', test_latency_ms: result.latency_ms || 0 }
-              : px
-          ))
+        const result = await api.testProxy(p.url, p.id, ipApiLang);
+        if (!result.success) {
+          failedCount += 1;
+          setTestAllFailed(failedCount);
+          if (!firstError)
+            firstError = result.error || t("proxies.testFailedUnknown");
+          setProxies((prev) =>
+            prev.map((px) =>
+              px.id === p.id
+                ? { ...px, test_ip: "", test_location: "", test_latency_ms: 0 }
+                : px,
+            ),
+          );
+        } else {
+          setProxies((prev) =>
+            prev.map((px) =>
+              px.id === p.id
+                ? {
+                    ...px,
+                    test_ip: result.ip || "",
+                    test_location: result.location || "",
+                    test_latency_ms: result.latency_ms || 0,
+                  }
+                : px,
+            ),
+          );
         }
-      } catch { /* ignore */ }
-      setTestingIds(prev => {
-        const next = new Set(prev)
-        next.delete(p.id)
-        return next
-      })
+      } catch (error) {
+        failedCount += 1;
+        setTestAllFailed(failedCount);
+        if (!firstError) firstError = getErrorMessage(error);
+      } finally {
+        setTestAllDone((prev) => prev + 1);
+        setTestingIds((prev) => {
+          const next = new Set(prev);
+          next.delete(p.id);
+          return next;
+        });
+      }
+    };
+
+    const worker = async () => {
+      for (;;) {
+        const current = nextIndex;
+        nextIndex += 1;
+        const proxy = queue[current];
+        if (!proxy) return;
+        await testOne(proxy);
+      }
+    };
+
+    await Promise.all(
+      Array.from(
+        { length: Math.min(TEST_ALL_CONCURRENCY, queue.length) },
+        worker,
+      ),
+    );
+    if (failedCount > 0) {
+      showToast(
+        t("proxies.testAllFailed", { count: failedCount, error: firstError }),
+        "error",
+      );
     }
-    setTestAllLoading(false)
-  }
+    setTestAllLoading(false);
+  };
 
-  const allSelected = pagedProxies.length > 0 && pagedProxies.every(p => selected.has(p.id))
+  const allSelected =
+    pagedProxies.length > 0 && pagedProxies.every((p) => selected.has(p.id));
   const toggleSelectAll = () => {
     if (allSelected) {
-      setSelected(prev => {
-        const next = new Set(prev)
-        pagedProxies.forEach(p => next.delete(p.id))
-        return next
-      })
+      setSelected((prev) => {
+        const next = new Set(prev);
+        pagedProxies.forEach((p) => next.delete(p.id));
+        return next;
+      });
     } else {
-      setSelected(prev => {
-        const next = new Set(prev)
-        pagedProxies.forEach(p => next.add(p.id))
-        return next
-      })
+      setSelected((prev) => {
+        const next = new Set(prev);
+        pagedProxies.forEach((p) => next.add(p.id));
+        return next;
+      });
     }
-  }
+  };
 
-  const enabledCount = proxies.filter(p => p.enabled).length
-  const canEnable = enabledCount > 0
+  const enabledCount = proxies.filter((p) => p.enabled).length;
+  const canEnable = enabledCount > 0;
 
   return (
     <div className="space-y-6">
@@ -182,17 +371,28 @@ export default function Proxies() {
         <div>
           <h2 className="text-2xl font-bold text-foreground flex items-center gap-2.5">
             <Globe className="size-6 text-primary" />
-            {t('nav.proxies')}
+            {t("nav.proxies")}
           </h2>
           <p className="mt-1 text-sm text-muted-foreground">
-            {t('proxies.description')}
+            {t("proxies.description")}
           </p>
         </div>
         <div className="flex flex-wrap items-center justify-end gap-2">
           {/* Pool Toggle Switch */}
-          <div className="flex items-center gap-3" title={!canEnable && !poolEnabled ? t('proxies.addFirstProxy') : undefined}>
-            <span className={`text-sm font-medium ${poolEnabled ? 'text-emerald-600 dark:text-emerald-400' : 'text-muted-foreground'}`}>
-              {poolEnabled ? t('proxies.poolEnabled') : t('proxies.poolDisabled')}
+          <div
+            className="flex items-center gap-3"
+            title={
+              !canEnable && !poolEnabled
+                ? t("proxies.addFirstProxy")
+                : undefined
+            }
+          >
+            <span
+              className={`text-sm font-medium ${poolEnabled ? "text-emerald-600 dark:text-emerald-400" : "text-muted-foreground"}`}
+            >
+              {poolEnabled
+                ? t("proxies.poolEnabled")
+                : t("proxies.poolDisabled")}
             </span>
             <button
               role="switch"
@@ -200,10 +400,12 @@ export default function Proxies() {
               disabled={!canEnable && !poolEnabled}
               onClick={handleTogglePool}
               className={`relative inline-flex h-6 w-11 shrink-0 cursor-pointer items-center rounded-full border-2 border-transparent transition-colors duration-200 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-primary/50 disabled:cursor-not-allowed disabled:opacity-40 ${
-                poolEnabled ? 'bg-emerald-500' : 'bg-muted-foreground/30'
+                poolEnabled ? "bg-emerald-500" : "bg-muted-foreground/30"
               }`}
             >
-              <span className={`pointer-events-none inline-block size-5 transform rounded-full bg-white shadow-lg ring-0 transition-transform duration-200 ${poolEnabled ? 'translate-x-5' : 'translate-x-0'}`} />
+              <span
+                className={`pointer-events-none inline-block size-5 transform rounded-full bg-white shadow-lg ring-0 transition-transform duration-200 ${poolEnabled ? "translate-x-5" : "translate-x-0"}`}
+              />
             </button>
           </div>
 
@@ -213,7 +415,7 @@ export default function Proxies() {
               className="flex items-center gap-2 rounded-md border border-destructive/30 bg-destructive/10 px-3 py-2 text-sm font-semibold text-destructive transition-colors hover:bg-destructive/20"
             >
               <Trash2 className="size-4" />
-              {t('proxies.deleteSelected', { count: selected.size })}
+              {t("proxies.deleteSelected", { count: selected.size })}
             </button>
           )}
 
@@ -223,8 +425,18 @@ export default function Proxies() {
               disabled={testAllLoading}
               className="flex items-center gap-2 rounded-md border border-border px-3 py-2 text-sm font-semibold text-foreground transition-colors hover:bg-muted/50 disabled:opacity-50"
             >
-              {testAllLoading ? <Loader2 className="size-4 animate-spin" /> : <Zap className="size-4" />}
-              {testAllLoading ? t('proxies.testingAll') : t('proxies.testAll')}
+              {testAllLoading ? (
+                <Loader2 className="size-4 animate-spin" />
+              ) : (
+                <Zap className="size-4" />
+              )}
+              {testAllLoading
+                ? t("proxies.testingAllProgress", {
+                    current: testAllDone,
+                    total: proxies.length,
+                    failed: testAllFailed,
+                  })
+                : t("proxies.testAll")}
             </button>
           )}
 
@@ -233,7 +445,7 @@ export default function Proxies() {
             className="flex items-center gap-2 rounded-md bg-primary px-3 py-2 text-sm font-semibold text-primary-foreground shadow-sm transition-colors hover:bg-primary/90"
           >
             <Plus className="size-4" />
-            {t('proxies.addProxy')}
+            {t("proxies.addProxy")}
           </button>
         </div>
       </div>
@@ -242,13 +454,15 @@ export default function Proxies() {
       {showAdd && (
         <Card className="py-0">
           <CardContent className="p-6 space-y-4">
-            <h4 className="text-base font-semibold text-foreground">{t('proxies.addProxyTitle')}</h4>
+            <h4 className="text-base font-semibold text-foreground">
+              {t("proxies.addProxyTitle")}
+            </h4>
             <p className="text-sm text-muted-foreground">
-              {t('proxies.addProxyDesc')}
+              {t("proxies.addProxyDesc")}
             </p>
             <textarea
               value={addInput}
-              onChange={e => setAddInput(e.target.value)}
+              onChange={(e) => setAddInput(e.target.value)}
               placeholder={"http://user:pass@ip:port\nsocks5://ip:port"}
               className="w-full h-32 px-3 py-2 text-sm rounded-md border border-border bg-background text-foreground placeholder:text-muted-foreground resize-none outline-none focus:ring-2 focus:ring-primary/30 font-mono"
             />
@@ -256,8 +470,8 @@ export default function Proxies() {
               <input
                 type="text"
                 value={addLabel}
-                onChange={e => setAddLabel(e.target.value)}
-                placeholder={t('proxies.labelPlaceholder')}
+                onChange={(e) => setAddLabel(e.target.value)}
+                placeholder={t("proxies.labelPlaceholder")}
                 className="flex-1 px-3 py-2 text-sm rounded-md border border-border bg-background text-foreground placeholder:text-muted-foreground outline-none focus:ring-2 focus:ring-primary/30"
               />
               <button
@@ -265,7 +479,7 @@ export default function Proxies() {
                 disabled={addLoading || !addInput.trim()}
                 className="px-5 py-2 rounded-md text-sm font-semibold bg-primary text-primary-foreground hover:bg-primary/90 transition-colors disabled:opacity-50 shadow-sm"
               >
-                {addLoading ? t('proxies.adding') : t('proxies.confirmAdd')}
+                {addLoading ? t("proxies.adding") : t("proxies.confirmAdd")}
               </button>
             </div>
           </CardContent>
@@ -276,22 +490,34 @@ export default function Proxies() {
       <div className="grid grid-cols-3 gap-4">
         <Card className="py-0">
           <CardContent className="p-4 text-center">
-            <div className="text-2xl font-bold text-foreground">{proxies.length}</div>
-            <div className="text-xs text-muted-foreground mt-1">{t('proxies.totalProxies')}</div>
+            <div className="text-2xl font-bold text-foreground">
+              {proxies.length}
+            </div>
+            <div className="text-xs text-muted-foreground mt-1">
+              {t("proxies.totalProxies")}
+            </div>
           </CardContent>
         </Card>
         <Card className="py-0">
           <CardContent className="p-4 text-center">
-            <div className="text-2xl font-bold text-emerald-600 dark:text-emerald-400">{enabledCount}</div>
-            <div className="text-xs text-muted-foreground mt-1">{t('proxies.enabledCount')}</div>
+            <div className="text-2xl font-bold text-emerald-600 dark:text-emerald-400">
+              {enabledCount}
+            </div>
+            <div className="text-xs text-muted-foreground mt-1">
+              {t("proxies.enabledCount")}
+            </div>
           </CardContent>
         </Card>
         <Card className="py-0">
           <CardContent className="p-4 text-center">
-            <div className={`text-2xl font-bold ${poolEnabled ? 'text-emerald-600 dark:text-emerald-400' : 'text-muted-foreground'}`}>
-              {poolEnabled ? t('proxies.roundRobin') : t('proxies.off')}
+            <div
+              className={`text-2xl font-bold ${poolEnabled ? "text-emerald-600 dark:text-emerald-400" : "text-muted-foreground"}`}
+            >
+              {poolEnabled ? t("proxies.roundRobin") : t("proxies.off")}
+            </div>
+            <div className="text-xs text-muted-foreground mt-1">
+              {t("proxies.poolStatus")}
             </div>
-            <div className="text-xs text-muted-foreground mt-1">{t('proxies.poolStatus')}</div>
           </CardContent>
         </Card>
       </div>
@@ -306,8 +532,8 @@ export default function Proxies() {
           ) : proxies.length === 0 ? (
             <div className="text-center py-16 text-muted-foreground">
               <Globe className="size-12 mx-auto mb-3 opacity-30" />
-              <p className="text-sm font-medium">{t('proxies.noProxies')}</p>
-              <p className="text-xs mt-1">{t('proxies.noProxiesDesc')}</p>
+              <p className="text-sm font-medium">{t("proxies.noProxies")}</p>
+              <p className="text-xs mt-1">{t("proxies.noProxiesDesc")}</p>
             </div>
           ) : (
             <>
@@ -316,30 +542,50 @@ export default function Proxies() {
                   <thead>
                     <tr className="border-b border-border text-left text-muted-foreground">
                       <th className="p-3 w-10">
-                        <input type="checkbox" checked={allSelected} onChange={toggleSelectAll} className="size-4 rounded" />
+                        <input
+                          type="checkbox"
+                          checked={allSelected}
+                          onChange={toggleSelectAll}
+                          className="size-4 rounded"
+                        />
+                      </th>
+                      <th className="p-3 font-semibold">
+                        {t("proxies.colUrl")}
+                      </th>
+                      <th className="p-3 font-semibold">
+                        {t("proxies.colStatus")}
+                      </th>
+                      <th className="p-3 font-semibold">
+                        {t("proxies.colLocation")}
+                      </th>
+                      <th className="p-3 font-semibold">
+                        {t("proxies.colIp")}
+                      </th>
+                      <th className="p-3 font-semibold">
+                        {t("proxies.colLatency")}
+                      </th>
+                      <th className="p-3 font-semibold text-right">
+                        {t("proxies.colActions")}
                       </th>
-                      <th className="p-3 font-semibold">{t('proxies.colUrl')}</th>
-                      <th className="p-3 font-semibold">{t('proxies.colStatus')}</th>
-                      <th className="p-3 font-semibold">{t('proxies.colLocation')}</th>
-                      <th className="p-3 font-semibold">{t('proxies.colIp')}</th>
-                      <th className="p-3 font-semibold">{t('proxies.colLatency')}</th>
-                      <th className="p-3 font-semibold text-right">{t('proxies.colActions')}</th>
                     </tr>
                   </thead>
                   <tbody>
-                    {pagedProxies.map(p => {
-                      const isTesting = testingIds.has(p.id)
+                    {pagedProxies.map((p) => {
+                      const isTesting = testingIds.has(p.id);
                       return (
-                        <tr key={p.id} className="border-b border-border/50 hover:bg-muted/30 transition-colors">
+                        <tr
+                          key={p.id}
+                          className="border-b border-border/50 hover:bg-muted/30 transition-colors"
+                        >
                           <td className="p-3">
                             <input
                               type="checkbox"
                               checked={selected.has(p.id)}
                               onChange={() => {
-                                const next = new Set(selected)
-                                if (next.has(p.id)) next.delete(p.id)
-                                else next.add(p.id)
-                                setSelected(next)
+                                const next = new Set(selected);
+                                if (next.has(p.id)) next.delete(p.id);
+                                else next.add(p.id);
+                                setSelected(next);
                               }}
                               className="size-4 rounded"
                             />
@@ -348,17 +594,25 @@ export default function Proxies() {
                             <div className="flex items-center gap-2">
                               <button
                                 onClick={() => {
-                                  setRevealedIds(prev => {
-                                    const next = new Set(prev)
-                                    if (next.has(p.id)) next.delete(p.id)
-                                    else next.add(p.id)
-                                    return next
-                                  })
+                                  setRevealedIds((prev) => {
+                                    const next = new Set(prev);
+                                    if (next.has(p.id)) next.delete(p.id);
+                                    else next.add(p.id);
+                                    return next;
+                                  });
                                 }}
                                 className="shrink-0 flex items-center justify-center size-6 rounded-md text-muted-foreground hover:text-foreground hover:bg-muted/50 transition-all"
-                                title={revealedIds.has(p.id) ? 'Hide' : 'Show'}
+                                title={
+                                  revealedIds.has(p.id)
+                                    ? t("proxies.hideProxyUrl")
+                                    : t("proxies.showProxyUrl")
+                                }
                               >
-                                {revealedIds.has(p.id) ? <EyeOff className="size-3.5" /> : <Eye className="size-3.5" />}
+                                {revealedIds.has(p.id) ? (
+                                  <EyeOff className="size-3.5" />
+                                ) : (
+                                  <Eye className="size-3.5" />
+                                )}
                               </button>
                               <span className="font-mono text-[13px] font-medium break-all text-foreground">
                                 {revealedIds.has(p.id) ? p.url : maskUrl(p.url)}
@@ -370,12 +624,16 @@ export default function Proxies() {
                               onClick={() => handleToggle(p)}
                               className={`inline-flex items-center gap-1.5 px-2.5 py-1 rounded-full text-xs font-semibold transition-all ${
                                 p.enabled
-                                  ? 'bg-emerald-500/10 text-emerald-600 dark:text-emerald-400 border border-emerald-500/20'
-                                  : 'bg-muted/50 text-muted-foreground border border-border'
+                                  ? "bg-emerald-500/10 text-emerald-600 dark:text-emerald-400 border border-emerald-500/20"
+                                  : "bg-muted/50 text-muted-foreground border border-border"
                               }`}
                             >
-                              <span className={`size-1.5 rounded-full ${p.enabled ? 'bg-emerald-500' : 'bg-muted-foreground/50'}`} />
-                              {p.enabled ? t('proxies.enabled') : t('proxies.disabled')}
+                              <span
+                                className={`size-1.5 rounded-full ${p.enabled ? "bg-emerald-500" : "bg-muted-foreground/50"}`}
+                              />
+                              {p.enabled
+                                ? t("proxies.enabled")
+                                : t("proxies.disabled")}
                             </button>
                           </td>
                           {/* Location */}
@@ -388,49 +646,70 @@ export default function Proxies() {
                                 {p.test_location}
                               </div>
                             ) : (
-                              <span className="text-xs text-muted-foreground">-</span>
+                              <span className="text-xs text-muted-foreground">
+                                -
+                              </span>
                             )}
                           </td>
                           {/* IP */}
                           <td className="p-3">
                             {p.test_ip ? (
-                              <span className="text-[13px] font-mono font-medium text-foreground whitespace-nowrap">{p.test_ip}</span>
+                              <span className="text-[13px] font-mono font-medium text-foreground whitespace-nowrap">
+                                {p.test_ip}
+                              </span>
                             ) : (
-                              <span className="text-xs text-muted-foreground">-</span>
+                              <span className="text-xs text-muted-foreground">
+                                -
+                              </span>
                             )}
                           </td>
                           {/* Latency */}
                           <td className="p-3">
                             {p.test_latency_ms > 0 ? (
-                              <span className={`inline-flex px-2 py-0.5 rounded-full text-xs font-bold ${latencyColor(p.test_latency_ms)} ${latencyBg(p.test_latency_ms)}`}>
+                              <span
+                                className={`inline-flex px-2 py-0.5 rounded-full text-xs font-bold ${latencyColor(p.test_latency_ms)} ${latencyBg(p.test_latency_ms)}`}
+                              >
                                 {p.test_latency_ms}ms
                               </span>
                             ) : (
-                              <span className="text-xs text-muted-foreground">-</span>
+                              <span className="text-xs text-muted-foreground">
+                                -
+                              </span>
                             )}
                           </td>
                           <td className="p-3">
                             <div className="flex items-center gap-1.5 justify-end">
+                              <button
+                                onClick={() => startEdit(p)}
+                                className="flex items-center justify-center size-7 rounded-lg text-muted-foreground hover:text-foreground hover:bg-muted/50 transition-all"
+                                title={t("proxies.editProxy")}
+                              >
+                                <Pencil className="size-3.5" />
+                              </button>
                               <button
                                 onClick={() => handleTest(p)}
                                 disabled={isTesting}
                                 className="flex items-center gap-1 px-2.5 py-1.5 rounded-lg text-xs font-medium border border-border text-foreground hover:bg-muted/50 transition-all disabled:opacity-50"
-                                title={t('proxies.testProxy')}
+                                title={t("proxies.testProxy")}
                               >
-                                {isTesting ? <Loader2 className="size-3.5 animate-spin" /> : <Play className="size-3.5" />}
-                                {t('proxies.test')}
+                                {isTesting ? (
+                                  <Loader2 className="size-3.5 animate-spin" />
+                                ) : (
+                                  <Play className="size-3.5" />
+                                )}
+                                {t("proxies.test")}
                               </button>
                               <button
                                 onClick={() => handleDelete(p.id)}
                                 className="flex items-center justify-center size-7 rounded-lg text-destructive hover:bg-destructive/10 transition-all"
-                                title={t('common.delete')}
+                                title={t("common.delete")}
                               >
                                 <Trash2 className="size-3.5" />
                               </button>
                             </div>
                           </td>
                         </tr>
-                      )
+                      );
                     })}
                   </tbody>
                 </table>
@@ -440,31 +719,39 @@ export default function Proxies() {
               {totalPages > 1 && (
                 <div className="flex items-center justify-between px-4 py-3 border-t border-border">
                   <span className="text-xs text-muted-foreground">
-                    {t('proxies.pagination', { total: proxies.length, page, totalPages })}
+                    {t("proxies.pagination", {
+                      total: proxies.length,
+                      page,
+                      totalPages,
+                    })}
                   </span>
                   <div className="flex items-center gap-1">
                     <button
-                      onClick={() => setPage(p => Math.max(1, p - 1))}
+                      onClick={() => setPage((p) => Math.max(1, p - 1))}
                       disabled={page <= 1}
                       className="flex items-center justify-center size-8 rounded-lg border border-border text-foreground hover:bg-muted/50 transition-all disabled:opacity-30 disabled:cursor-not-allowed"
                     >
                       <ChevronLeft className="size-4" />
                     </button>
-                    {Array.from({ length: totalPages }, (_, i) => i + 1).map(n => (
-                      <button
-                        key={n}
-                        onClick={() => setPage(n)}
-                        className={`flex items-center justify-center size-8 rounded-lg text-xs font-medium transition-all ${
-                          n === page
-                            ? 'bg-primary text-primary-foreground shadow-sm'
-                            : 'border border-border text-foreground hover:bg-muted/50'
-                        }`}
-                      >
-                        {n}
-                      </button>
-                    ))}
+                    {Array.from({ length: totalPages }, (_, i) => i + 1).map(
+                      (n) => (
+                        <button
+                          key={n}
+                          onClick={() => setPage(n)}
+                          className={`flex items-center justify-center size-8 rounded-lg text-xs font-medium transition-all ${
+                            n === page
+                              ? "bg-primary text-primary-foreground shadow-sm"
+                              : "border border-border text-foreground hover:bg-muted/50"
+                          }`}
+                        >
+                          {n}
+                        </button>
+                      ),
+                    )}
                     <button
-                      onClick={() => setPage(p => Math.min(totalPages, p + 1))}
+                      onClick={() =>
+                        setPage((p) => Math.min(totalPages, p + 1))
+                      }
                       disabled={page >= totalPages}
                       className="flex items-center justify-center size-8 rounded-lg border border-border text-foreground hover:bg-muted/50 transition-all disabled:opacity-30 disabled:cursor-not-allowed"
                     >
@@ -477,6 +764,69 @@ export default function Proxies() {
           )}
         </CardContent>
       </Card>
+
+      <Modal
+        show={Boolean(editingProxy)}
+        title={t("proxies.editProxyTitle")}
+        onClose={() => setEditingProxy(null)}
+        contentClassName="sm:max-w-[520px]"
+        footer={
+          <>
+            <Button
+              type="button"
+              variant="outline"
+              onClick={() => setEditingProxy(null)}
+              disabled={editSaving}
+            >
+              {t("common.cancel")}
+            </Button>
+            <Button
+              type="button"
+              onClick={() => void handleEditSave()}
+              disabled={editSaving || !editUrl.trim()}
+            >
+              {editSaving ? t("common.saving") : t("common.save")}
+            </Button>
+          </>
+        }
+      >
+        <div className="space-y-4">
+          <label className="block space-y-1.5">
+            <span className="text-xs font-semibold text-muted-foreground">
+              {t("proxies.editUrlLabel")}
+            </span>
+            <Input
+              type="text"
+              value={editUrl}
+              onChange={(e) => {
+                setEditUrl(e.target.value);
+                setEditError("");
+              }}
+              className="font-mono"
+              placeholder="http://user:pass@ip:port"
+            />
+          </label>
+          <label className="block space-y-1.5">
+            <span className="text-xs font-semibold text-muted-foreground">
+              {t("proxies.editLabelLabel")}
+            </span>
+            <Input
+              type="text"
+              value={editLabel}
+              onChange={(e) => setEditLabel(e.target.value)}
+              placeholder={t("proxies.labelPlaceholder")}
+            />
+          </label>
+          {editError && (
+            <div className="flex items-center gap-2 rounded-md border border-destructive/20 bg-destructive/10 px-3 py-2 text-sm font-medium text-destructive">
+              <AlertTriangle className="size-4 shrink-0" />
+              {editError}
+            </div>
+          )}
+        </div>
+      </Modal>
+
+      <ToastNotice toast={toast} />
     </div>
-  )
+  );
 }
diff --git a/frontend/src/pages/Usage.tsx b/frontend/src/pages/Usage.tsx
index 8046e56e..73de02c9 100644
--- a/frontend/src/pages/Usage.tsx
+++ b/frontend/src/pages/Usage.tsx
@@ -25,7 +25,7 @@ import {
   TableHeader,
   TableRow,
 } from '@/components/ui/table'
-import { Activity, Box, Clock, Zap, AlertTriangle, Search, Brain, DatabaseZap, X, Image as ImageIcon, Info, CircleDollarSign, BarChart3, KeyRound, Route } from 'lucide-react'
+import { Activity, Box, Clock, Zap, AlertTriangle, Search, Brain, DatabaseZap, X, Image as ImageIcon, Info, CircleDollarSign, BarChart3, KeyRound, Route, SlidersHorizontal } from 'lucide-react'
 import { Input } from '@/components/ui/input'
 import { Select } from '@/components/ui/select'
 
@@ -650,11 +650,119 @@ function StatusCodeBadge({ log }: { log: UsageLog }) {
 
 const usageTableHeadClass = 'text-[12px] font-semibold'
 const usageTableTextClass = 'text-[14px]'
-const usageTableMonoClass = 'font-geist-mono text-[13px] tabular-nums'
+const usageTableMonoClass = 'font-mono text-[13px] tabular-nums'
 const usageTableBadgeClass = 'text-[13px]'
 const modelPieColors = ['#2563eb', '#059669', '#f59e0b', '#dc2626', '#7c3aed', '#0891b2', '#db2777']
 const modelPieShellClass = 'flex min-h-[196px] flex-col border-l border-border pl-4 max-lg:min-h-0 max-lg:border-l-0 max-lg:border-t max-lg:pl-0 max-lg:pt-3'
 
+type UsageTableColumn = 'status' | 'model' | 'account' | 'apiKey' | 'endpoint' | 'type' | 'token' | 'cost' | 'cached' | 'firstToken' | 'duration' | 'time'
+
+const USAGE_COLUMN_DEFINITIONS: Array<{ key: UsageTableColumn; labelKey: string }> = [
+  { key: 'status', labelKey: 'usage.tableStatus' },
+  { key: 'model', labelKey: 'usage.tableModel' },
+  { key: 'account', labelKey: 'usage.tableAccount' },
+  { key: 'apiKey', labelKey: 'usage.tableApiKey' },
+  { key: 'endpoint', labelKey: 'usage.tableEndpoint' },
+  { key: 'type', labelKey: 'usage.tableType' },
+  { key: 'token', labelKey: 'usage.tableToken' },
+  { key: 'cost', labelKey: 'usage.tableCost' },
+  { key: 'cached', labelKey: 'usage.tableCached' },
+  { key: 'firstToken', labelKey: 'usage.tableFirstToken' },
+  { key: 'duration', labelKey: 'usage.tableDuration' },
+  { key: 'time', labelKey: 'usage.tableTime' },
+]
+
+const USAGE_VISIBLE_COLUMNS_KEY = 'codex2api:usage:visible-columns'
+const DEFAULT_USAGE_VISIBLE_COLUMNS: Record<UsageTableColumn, boolean> = {
+  status: true,
+  model: true,
+  account: true,
+  apiKey: true,
+  endpoint: true,
+  type: true,
+  token: true,
+  cost: true,
+  cached: true,
+  firstToken: true,
+  duration: true,
+  time: true,
+}
+
+function getInitialUsageVisibleColumns(): Record<UsageTableColumn, boolean> {
+  try {
+    const stored = localStorage.getItem(USAGE_VISIBLE_COLUMNS_KEY)
+    if (stored) {
+      const parsed = JSON.parse(stored)
+      if (parsed && typeof parsed === 'object') {
+        const defaults: Record<UsageTableColumn, boolean> = { ...DEFAULT_USAGE_VISIBLE_COLUMNS }
+        for (const key of Object.keys(defaults) as UsageTableColumn[]) {
+          if (key in parsed) defaults[key] = Boolean(parsed[key])
+        }
+        return defaults
+      }
+    }
+  } catch { /* ignore */ }
+  return { ...DEFAULT_USAGE_VISIBLE_COLUMNS }
+}
+
+function persistUsageVisibleColumns(columns: Record<UsageTableColumn, boolean>) {
+  try { localStorage.setItem(USAGE_VISIBLE_COLUMNS_KEY, JSON.stringify(columns)) } catch { /* ignore */ }
+}
+
+function ColumnSettingsDropdown({
+  open,
+  columns,
+  onOpenChange,
+  onToggle,
+}: {
+  open: boolean
+  columns: Record<UsageTableColumn, boolean>
+  onOpenChange: (open: boolean) => void
+  onToggle: (key: UsageTableColumn) => void
+}) {
+  const { t } = useTranslation()
+
+  return (
+    <div className="relative">
+      <Button
+        type="button"
+        variant="outline"
+        size="sm"
+        onClick={() => onOpenChange(!open)}
+        aria-haspopup="menu"
+        aria-expanded={open}
+      >
+        <SlidersHorizontal className="size-3.5" />
+        {t('accounts.columnSettings', { defaultValue: 'Columns' })}
+      </Button>
+      {open ? (
+        <div
+          role="menu"
+          className="absolute right-0 z-20 mt-2 w-56 rounded-lg border border-border bg-popover p-2 text-popover-foreground shadow-lg"
+        >
+          <div className="mb-1 px-2 py-1 text-[11px] font-semibold uppercase text-muted-foreground">
+            {t('accounts.columnSettings', { defaultValue: 'Columns' })}
+          </div>
+          {USAGE_COLUMN_DEFINITIONS.map((column) => (
+            <label
+              key={column.key}
+              className="flex cursor-pointer items-center gap-2 rounded-md px-2 py-1.5 text-[13px] hover:bg-muted"
+            >
+              <input
+                type="checkbox"
+                className="size-3.5 rounded border-border"
+                checked={columns[column.key]}
+                onChange={() => onToggle(column.key)}
+              />
+              <span>{t(column.labelKey)}</span>
+            </label>
+          ))}
+        </div>
+      ) : null}
+    </div>
+  )
+}
+
 export default function Usage() {
   const { t } = useTranslation()
   const { toast, showToast } = useToast()
@@ -679,6 +787,8 @@ export default function Usage() {
   const showFastFilter = true
   const pageSizeOptions = [10, 20, 50, 100]
   const searchTimer = useRef<ReturnType<typeof setTimeout>>(null)
+  const [visibleColumns, setVisibleColumns] = useState<Record<UsageTableColumn, boolean>>(getInitialUsageVisibleColumns)
+  const [columnSettingsOpen, setColumnSettingsOpen] = useState(false)
 
   // 搜索防抖：输入停止 400ms 后触发查询
   const handleSearchChange = useCallback((value: string) => {
@@ -773,6 +883,10 @@ export default function Usage() {
     return () => window.clearInterval(timer)
   }, [reloadSilently])
 
+  useEffect(() => {
+    persistUsageVisibleColumns(visibleColumns)
+  }, [visibleColumns])
+
   const { stats } = data
   const totalPages = Math.max(1, Math.ceil(logsTotal / pageSize))
   const currentPage = Math.min(page, totalPages)
@@ -940,16 +1054,16 @@ export default function Usage() {
         {/* Logs table */}
         <Card>
           <CardContent className="p-4">
-            <div className="flex items-center justify-between gap-4 mb-4 flex-wrap">
-              <div className="flex items-center gap-3">
-                <h3 className="text-base font-semibold text-foreground">{t('usage.requestLogs')}</h3>
-                <div className="inline-flex rounded-lg border border-border bg-muted/50 p-0.5">
+            <div className="mb-4 flex items-center justify-between gap-3 overflow-visible max-lg:overflow-x-auto">
+              <div className="flex shrink-0 items-center gap-3">
+                <h3 className="whitespace-nowrap text-base font-semibold text-foreground">{t('usage.requestLogs')}</h3>
+                <div className="inline-flex shrink-0 rounded-lg border border-border bg-muted/50 p-0.5">
                   {TIME_RANGE_OPTIONS.map((key) => (
                     <button
                       key={key}
                       type="button"
                       onClick={() => { setTimeRange(key); setPage(1) }}
-                      className={`px-2.5 py-1 text-xs font-medium rounded-md transition-all duration-200 ${
+                      className={`whitespace-nowrap px-2.5 py-1 text-xs font-medium rounded-md transition-all duration-200 ${
                         timeRange === key
                           ? 'bg-background text-foreground shadow-sm border border-border'
                           : 'text-muted-foreground hover:text-foreground'
@@ -960,8 +1074,8 @@ export default function Usage() {
                   ))}
                 </div>
               </div>
-              <div className="flex items-center gap-3">
-                <span className="text-xs text-muted-foreground">{logsLoading ? t('common.loading') : t('usage.recordsCount', { count: logsTotal })}</span>
+              <div className="flex shrink-0 items-center gap-3">
+                <span className="whitespace-nowrap text-xs text-muted-foreground">{logsLoading ? t('common.loading') : t('usage.recordsCount', { count: logsTotal })}</span>
                 <Button
                   variant="destructive"
                   size="sm"
@@ -995,9 +1109,9 @@ export default function Usage() {
             </div>
 
             {/* 筛选栏 */}
-            <div className="toolbar-surface mb-4 flex flex-wrap items-center gap-2">
+            <div className="toolbar-surface mb-4 flex items-center gap-2 overflow-visible whitespace-nowrap max-lg:overflow-x-auto">
               {/* 搜索框 */}
-              <div className="relative w-72 max-sm:w-full">
+              <div className="relative w-60 shrink-0 max-sm:w-full">
                 <Search className="absolute left-2.5 top-1/2 -translate-y-1/2 size-3.5 text-muted-foreground pointer-events-none" />
                 <Input
                   className="pl-8 h-8 rounded-lg text-[13px]"
@@ -1009,7 +1123,7 @@ export default function Usage() {
 
               {/* 模型下拉 */}
               <Select
-                className="w-44"
+                className="w-36 shrink-0"
                 compact
                 value={filterModel}
                 onValueChange={(v) => { setFilterModel(v); setPage(1) }}
@@ -1022,7 +1136,7 @@ export default function Usage() {
 
               {/* 端点下拉 */}
               <Select
-                className="w-52"
+                className="w-44 shrink-0"
                 compact
                 value={filterEndpoint}
                 onValueChange={(v) => { setFilterEndpoint(v); setPage(1) }}
@@ -1039,7 +1153,7 @@ export default function Usage() {
 
               {showAPIKeyFilter && (
                 <Select
-                  className="w-60"
+                  className="w-48 shrink-0"
                   compact
                   value={filterApiKeyId}
                   onValueChange={(v) => { setFilterApiKeyId(v); setPage(1) }}
@@ -1050,7 +1164,7 @@ export default function Usage() {
 
               {/* 类型下拉 */}
               <Select
-                className="w-32"
+                className="w-28 shrink-0"
                 compact
                 value={filterStream}
                 onValueChange={(v) => { setFilterStream(v as '' | 'true' | 'false'); setPage(1) }}
@@ -1066,7 +1180,7 @@ export default function Usage() {
                 <button
                   type="button"
                   onClick={() => { setFilterFast(filterFast === 'true' ? '' : 'true'); setPage(1) }}
-                  className={`h-8 px-2.5 rounded-lg border text-[13px] font-medium transition-colors inline-flex items-center gap-1 ${
+                  className={`h-8 shrink-0 px-2.5 rounded-lg border text-[13px] font-medium transition-colors inline-flex items-center gap-1 whitespace-nowrap ${
                     filterFast === 'true'
                       ? 'border-blue-500/40 bg-blue-500/12 text-blue-600 dark:bg-blue-500/20 dark:text-blue-400'
                       : 'border-border bg-background text-muted-foreground hover:text-foreground hover:bg-muted/50'
@@ -1088,12 +1202,21 @@ export default function Usage() {
                     setFilterStream(''); setFilterFast('')
                     setPage(1)
                   }}
-                  className="h-8 px-2.5 rounded-lg border border-border bg-background text-[13px] text-muted-foreground hover:text-foreground hover:bg-muted/50 transition-colors inline-flex items-center gap-1"
+                  className="h-8 shrink-0 px-2.5 rounded-lg border border-border bg-background text-[13px] text-muted-foreground hover:text-foreground hover:bg-muted/50 transition-colors inline-flex items-center gap-1 whitespace-nowrap"
                 >
                   <X className="size-3.5" />
                   {t('usage.clearFilters')}
                 </button>
               )}
+
+              <div className="ml-auto shrink-0">
+                <ColumnSettingsDropdown
+                  open={columnSettingsOpen}
+                  columns={visibleColumns}
+                  onOpenChange={setColumnSettingsOpen}
+                  onToggle={(key) => setVisibleColumns((current) => ({ ...current, [key]: !current[key] }))}
+                />
+              </div>
             </div>
 
             <StateShell
@@ -1107,28 +1230,28 @@ export default function Usage() {
                 <Table>
                   <TableHeader>
                     <TableRow>
-                      <TableHead className={usageTableHeadClass}>{t('usage.tableStatus')}</TableHead>
-                      <TableHead className={usageTableHeadClass}>{t('usage.tableModel')}</TableHead>
-                      <TableHead className={usageTableHeadClass}>{t('usage.tableAccount')}</TableHead>
-                      <TableHead className={usageTableHeadClass}>{t('usage.tableApiKey')}</TableHead>
-                      <TableHead className={usageTableHeadClass}>{t('usage.tableEndpoint')}</TableHead>
-                      <TableHead className={usageTableHeadClass}>{t('usage.tableType')}</TableHead>
-                      <TableHead className={usageTableHeadClass}>{t('usage.tableToken')}</TableHead>
-                      <TableHead className={usageTableHeadClass}>{t('usage.tableCost')}</TableHead>
-                      <TableHead className={usageTableHeadClass}>{t('usage.tableCached')}</TableHead>
-                      <TableHead className={usageTableHeadClass}>{t('usage.tableFirstToken')}</TableHead>
-                      <TableHead className={usageTableHeadClass}>{t('usage.tableDuration')}</TableHead>
-                      <TableHead className={usageTableHeadClass}>{t('usage.tableTime')}</TableHead>
+                      {visibleColumns.status && <TableHead className={usageTableHeadClass}>{t('usage.tableStatus')}</TableHead>}
+                      {visibleColumns.model && <TableHead className={usageTableHeadClass}>{t('usage.tableModel')}</TableHead>}
+                      {visibleColumns.account && <TableHead className={usageTableHeadClass}>{t('usage.tableAccount')}</TableHead>}
+                      {visibleColumns.apiKey && <TableHead className={usageTableHeadClass}>{t('usage.tableApiKey')}</TableHead>}
+                      {visibleColumns.endpoint && <TableHead className={usageTableHeadClass}>{t('usage.tableEndpoint')}</TableHead>}
+                      {visibleColumns.type && <TableHead className={usageTableHeadClass}>{t('usage.tableType')}</TableHead>}
+                      {visibleColumns.token && <TableHead className={usageTableHeadClass}>{t('usage.tableToken')}</TableHead>}
+                      {visibleColumns.cost && <TableHead className={usageTableHeadClass}>{t('usage.tableCost')}</TableHead>}
+                      {visibleColumns.cached && <TableHead className={usageTableHeadClass}>{t('usage.tableCached')}</TableHead>}
+                      {visibleColumns.firstToken && <TableHead className={usageTableHeadClass}>{t('usage.tableFirstToken')}</TableHead>}
+                      {visibleColumns.duration && <TableHead className={usageTableHeadClass}>{t('usage.tableDuration')}</TableHead>}
+                      {visibleColumns.time && <TableHead className={usageTableHeadClass}>{t('usage.tableTime')}</TableHead>}
                     </TableRow>
                   </TableHeader>
                   <TableBody>
                     {logs.map((log: UsageLog) => {
                       return (
                       <TableRow key={log.id}>
-                        <TableCell>
+                        {visibleColumns.status && <TableCell>
                           <StatusCodeBadge log={log} />
-                        </TableCell>
-                        <TableCell>
+                        </TableCell>}
+                        {visibleColumns.model && <TableCell>
                           <div className="flex items-center gap-1.5 flex-wrap">
                             <Badge variant="outline" className={usageTableBadgeClass}>
                               {log.model || '-'}
@@ -1165,16 +1288,16 @@ export default function Usage() {
                               </Badge>
                             )}
                           </div>
-                        </TableCell>
-                        <TableCell className={`${usageTableTextClass} text-muted-foreground`}>
+                        </TableCell>}
+                        {visibleColumns.account && <TableCell className={`${usageTableTextClass} text-muted-foreground`}>
                           {formatCompactEmail(log.account_email)}
-                        </TableCell>
-                        <TableCell className={`${usageTableTextClass} text-muted-foreground`}>
-                          <span className="block max-w-[180px] truncate whitespace-nowrap" title={formatUsageAPIKeyLabel(log.api_key_name, log.api_key_masked) || t('usage.unknownApiKey')}>
+                        </TableCell>}
+                        {visibleColumns.apiKey && <TableCell className={`${usageTableTextClass} text-muted-foreground`}>
+                          <span className="block max-w-[180px] truncate whitespace-nowrap font-mono text-[12px]" title={formatUsageAPIKeyLabel(log.api_key_name, log.api_key_masked) || t('usage.unknownApiKey')}>
                             {formatUsageAPIKeyLabel(log.api_key_name, log.api_key_masked) || t('usage.unknownApiKey')}
                           </span>
-                        </TableCell>
-                        <TableCell>
+                        </TableCell>}
+                        {visibleColumns.endpoint && <TableCell>
                           <div className={`${usageTableMonoClass} leading-relaxed`}>
                             <span className="text-muted-foreground">
                               {log.inbound_endpoint || log.endpoint || '-'}
@@ -1183,8 +1306,8 @@ export default function Usage() {
                               <span className="text-muted-foreground"> → {log.upstream_endpoint}</span>
                             )}
                           </div>
-                        </TableCell>
-                        <TableCell>
+                        </TableCell>}
+                        {visibleColumns.type && <TableCell>
                           <Badge
                             variant="outline"
                             className={usageTableBadgeClass}
@@ -1196,8 +1319,8 @@ export default function Usage() {
                           >
                             {log.stream ? 'stream' : 'sync'}
                           </Badge>
-                        </TableCell>
-                        <TableCell>
+                        </TableCell>}
+                        {visibleColumns.token && <TableCell>
                           {log.status_code < 400 && (log.input_tokens > 0 || log.output_tokens > 0) ? (
                             <div className={`${usageTableMonoClass} leading-relaxed`}>
                               <span className="text-blue-500">↓{formatTokens(log.input_tokens)}</span>
@@ -1213,11 +1336,11 @@ export default function Usage() {
                           ) : (
                             <span className={`${usageTableMonoClass} text-muted-foreground`}>-</span>
                           )}
-                        </TableCell>
-                        <TableCell>
+                        </TableCell>}
+                        {visibleColumns.cost && <TableCell>
                           <UsageCostCell log={log} />
-                        </TableCell>
-                        <TableCell>
+                        </TableCell>}
+                        {visibleColumns.cached && <TableCell>
                           {log.cached_tokens > 0 ? (
                             <Badge variant="outline" className={`${usageTableBadgeClass} gap-1 border-transparent bg-indigo-500/10 text-indigo-600 dark:bg-indigo-500/20 dark:text-indigo-400`}>
                               <DatabaseZap className="size-3.5" />
@@ -1226,22 +1349,22 @@ export default function Usage() {
                           ) : (
                             <span className={`${usageTableMonoClass} text-muted-foreground`}>-</span>
                           )}
-                        </TableCell>
-                        <TableCell>
+                        </TableCell>}
+                        {visibleColumns.firstToken && <TableCell>
                           {log.first_token_ms > 0 ? (
                             <span className={`${usageTableMonoClass} ${log.first_token_ms > 5000 ? 'text-red-500' : log.first_token_ms > 2000 ? 'text-amber-500' : 'text-emerald-500'}`}>
                               {log.first_token_ms > 1000 ? `${(log.first_token_ms / 1000).toFixed(1)}s` : `${log.first_token_ms}ms`}
                             </span>
                           ) : <span className={`${usageTableMonoClass} text-muted-foreground`}>-</span>}
-                        </TableCell>
-                        <TableCell>
+                        </TableCell>}
+                        {visibleColumns.duration && <TableCell>
                           <span className={`${usageTableMonoClass} ${log.duration_ms > 30000 ? 'text-red-500' : log.duration_ms > 10000 ? 'text-amber-500' : 'text-muted-foreground'}`}>
                             {log.duration_ms > 1000 ? `${(log.duration_ms / 1000).toFixed(1)}s` : `${log.duration_ms}ms`}
                           </span>
-                        </TableCell>
-                        <TableCell className={`${usageTableMonoClass} text-muted-foreground whitespace-nowrap`}>
+                        </TableCell>}
+                        {visibleColumns.time && <TableCell className={`${usageTableMonoClass} text-muted-foreground whitespace-nowrap`}>
                           {formatBeijingTime(log.created_at)}
-                        </TableCell>
+                        </TableCell>}
                       </TableRow>
                       )
                     })}
diff --git a/frontend/src/pages/docs/DocsTOC.tsx b/frontend/src/pages/docs/DocsTOC.tsx
new file mode 100644
index 00000000..20e7af8d
--- /dev/null
+++ b/frontend/src/pages/docs/DocsTOC.tsx
@@ -0,0 +1,154 @@
+import { useEffect, useRef, useState } from 'react'
+import { ChevronRight } from 'lucide-react'
+
+export type DocsTOCItem = {
+  id: string
+  label: string
+  children?: { id: string; label: string; method?: string }[]
+}
+
+type DocsTOCProps = {
+  items: DocsTOCItem[]
+  title: string
+}
+
+const METHOD_COLOR: Record<string, string> = {
+  GET: 'bg-emerald-100 text-emerald-700 dark:bg-emerald-900/30 dark:text-emerald-400',
+  POST: 'bg-blue-100 text-blue-700 dark:bg-blue-900/30 dark:text-blue-400',
+  PATCH: 'bg-violet-100 text-violet-700 dark:bg-violet-900/30 dark:text-violet-300',
+  PUT: 'bg-amber-100 text-amber-700 dark:bg-amber-900/30 dark:text-amber-400',
+  DELETE: 'bg-red-100 text-red-700 dark:bg-red-900/30 dark:text-red-400',
+}
+
+export default function DocsTOC({ items, title }: DocsTOCProps) {
+  const [activeId, setActiveId] = useState<string>(items[0]?.children?.[0]?.id ?? items[0]?.id ?? '')
+  const [expandedParent, setExpandedParent] = useState<string>(items[0]?.id ?? '')
+  const userToggledRef = useRef(false)
+
+  useEffect(() => {
+    const allIds: string[] = []
+    items.forEach((parent) => {
+      allIds.push(parent.id)
+      parent.children?.forEach((c) => allIds.push(c.id))
+    })
+
+    const observer = new IntersectionObserver(
+      (entries) => {
+        const visible = entries
+          .filter((e) => e.isIntersecting)
+          .sort((a, b) => (a.boundingClientRect.top - b.boundingClientRect.top))
+        if (visible.length > 0) {
+          const topId = visible[0].target.id
+          setActiveId(topId)
+          if (!userToggledRef.current) {
+            const parent = items.find(
+              (p) => p.id === topId || p.children?.some((c) => c.id === topId)
+            )
+            if (parent) setExpandedParent(parent.id)
+          }
+        }
+      },
+      { rootMargin: '-72px 0px -65% 0px', threshold: 0.1 }
+    )
+
+    for (const id of allIds) {
+      const el = document.getElementById(id)
+      if (el) observer.observe(el)
+    }
+    return () => observer.disconnect()
+  }, [items])
+
+  const scrollTo = (id: string) => {
+    setActiveId(id)
+    const el = document.getElementById(id)
+    if (el) el.scrollIntoView({ behavior: 'smooth' })
+  }
+
+  const toggleParent = (parentId: string) => {
+    userToggledRef.current = true
+    setExpandedParent((current) => (current === parentId ? '' : parentId))
+    window.setTimeout(() => { userToggledRef.current = false }, 600)
+  }
+
+  return (
+    <div className="rounded-lg border border-border bg-card/90 p-3 shadow-sm backdrop-blur-sm">
+        <div className="mb-2 px-2 text-xs font-semibold uppercase tracking-wide text-muted-foreground">
+          {title}
+        </div>
+        <nav className="max-h-[calc(100dvh-8rem)] space-y-0.5 overflow-y-auto pr-1">
+          {items.map((parent) => {
+            const isExpanded = expandedParent === parent.id
+            const isParentActive = activeId === parent.id
+            const hasActiveChild = parent.children?.some((c) => c.id === activeId)
+            return (
+              <div key={parent.id}>
+                <button
+                  onClick={() => {
+                    if (parent.children && parent.children.length > 0) {
+                      toggleParent(parent.id)
+                      if (!isExpanded) scrollTo(parent.children[0].id)
+                    } else {
+                      scrollTo(parent.id)
+                    }
+                  }}
+                  className={`flex w-full items-center gap-1.5 rounded-md border px-2.5 py-2 text-left text-[13px] font-semibold transition-all duration-200 hover:bg-muted/60 ${
+                    isParentActive || (hasActiveChild && !isExpanded)
+                      ? 'border-primary/25 bg-primary/10 text-primary'
+                      : 'border-transparent text-foreground hover:text-foreground'
+                  }`}
+                >
+                  {parent.children && parent.children.length > 0 ? (
+                    <ChevronRight
+                      className={`size-3.5 shrink-0 text-muted-foreground transition-transform duration-300 ${
+                        isExpanded ? 'rotate-90' : 'rotate-0'
+                      }`}
+                    />
+                  ) : (
+                    <span className="size-3.5 shrink-0" />
+                  )}
+                  <span className="min-w-0 flex-1 truncate">{parent.label}</span>
+                </button>
+
+                {parent.children && parent.children.length > 0 && (
+                  <div
+                    className="grid transition-[grid-template-rows] duration-300 ease-in-out"
+                    style={{ gridTemplateRows: isExpanded ? '1fr' : '0fr' }}
+                  >
+                    <div className="overflow-hidden">
+                      <div className="ml-3 mt-0.5 space-y-0.5 border-l border-border pl-2 pb-1">
+                        {parent.children.map((child) => {
+                          const isActive = activeId === child.id
+                          return (
+                            <button
+                              key={child.id}
+                              onClick={() => scrollTo(child.id)}
+                              className={`flex w-full items-center gap-1.5 rounded-md px-2 py-1.5 text-left text-[12px] font-medium transition-colors duration-200 hover:bg-muted/60 ${
+                                isActive
+                                  ? 'bg-primary/10 text-primary'
+                                  : 'text-muted-foreground hover:text-foreground'
+                              }`}
+                            >
+                              {child.method && (
+                                <span
+                                  className={`inline-flex shrink-0 items-center rounded px-1 py-px text-[9px] font-bold ${
+                                    METHOD_COLOR[child.method] || 'bg-muted text-foreground'
+                                  }`}
+                                >
+                                  {child.method}
+                                </span>
+                              )}
+                              <span className="min-w-0 truncate">{child.label}</span>
+                            </button>
+                          )
+                        })}
+                      </div>
+                    </div>
+                  </div>
+                )}
+              </div>
+            )
+          })}
+        </nav>
+    </div>
+  )
+}
diff --git a/frontend/src/pages/docs/EndpointDoc.tsx b/frontend/src/pages/docs/EndpointDoc.tsx
new file mode 100644
index 00000000..d94484c0
--- /dev/null
+++ b/frontend/src/pages/docs/EndpointDoc.tsx
@@ -0,0 +1,531 @@
+import { memo, useEffect, useRef, useState } from "react";
+import { useTranslation } from "react-i18next";
+import { Copy, Check, Play, Loader2 } from "lucide-react";
+import { Card, CardContent } from "@/components/ui/card";
+import { Badge } from "@/components/ui/badge";
+import { Button } from "@/components/ui/button";
+import { Select } from "@/components/ui/select";
+import { Dialog, DialogContent } from "@/components/ui/dialog";
+import { useHighlightedHtml } from "../../hooks/useHighlighter";
+
+export const CodeBlock = memo(function CodeBlock({
+  label,
+  content,
+  lang,
+}: {
+  label?: string;
+  content: string;
+  lang?: string;
+}) {
+  const { t } = useTranslation();
+  const [copied, setCopied] = useState(false);
+  const [shouldHighlight, setShouldHighlight] = useState(false);
+  const blockRef = useRef<HTMLDivElement>(null);
+  const resolvedLang =
+    lang ||
+    (label?.endsWith(".toml")
+      ? "toml"
+      : label?.endsWith(".json")
+        ? "json"
+        : "bash");
+  const highlightedHtml = useHighlightedHtml(
+    shouldHighlight ? content : "",
+    resolvedLang,
+  );
+
+  useEffect(() => {
+    const el = blockRef.current;
+    if (!el || shouldHighlight) return;
+    const observer = new IntersectionObserver(
+      (entries) => {
+        if (entries.some((entry) => entry.isIntersecting)) {
+          setShouldHighlight(true);
+          observer.disconnect();
+        }
+      },
+      { rootMargin: "360px 0px" },
+    );
+    observer.observe(el);
+    return () => observer.disconnect();
+  }, [shouldHighlight]);
+
+  const handleCopy = async () => {
+    try {
+      await navigator.clipboard.writeText(content);
+    } catch {
+      const ta = document.createElement("textarea");
+      ta.value = content;
+      ta.style.cssText = "position:fixed;left:-9999px";
+      document.body.appendChild(ta);
+      ta.select();
+      document.execCommand("copy");
+      document.body.removeChild(ta);
+    }
+    setCopied(true);
+    setTimeout(() => setCopied(false), 2000);
+  };
+
+  return (
+    <div ref={blockRef} className="code-panel relative">
+      {label && (
+        <div className="code-panel-header">
+          <span className="code-panel-label">{label}</span>
+          <button
+            onClick={() => void handleCopy()}
+            className={`code-panel-copy ${
+              copied ? "bg-emerald-500/20 text-emerald-300" : ""
+            }`}
+            aria-label={copied ? t("common.copied") : t("common.copy")}
+          >
+            {copied ? (
+              <Check className="size-3.5" />
+            ) : (
+              <Copy className="size-3.5" />
+            )}
+          </button>
+        </div>
+      )}
+      {!label && (
+        <div className="absolute top-2 right-2 z-10">
+          <button
+            onClick={() => void handleCopy()}
+            className={`code-panel-copy ${copied ? "bg-emerald-500/20 text-emerald-300" : ""}`}
+            aria-label={copied ? t("common.copied") : t("common.copy")}
+          >
+            {copied ? (
+              <Check className="size-3" />
+            ) : (
+              <Copy className="size-3" />
+            )}
+          </button>
+        </div>
+      )}
+      {highlightedHtml ? (
+        <div
+          className={`code-panel-pre shiki-wrapper ${lang === "json" ? "text-[13px]" : "text-sm"}`}
+          dangerouslySetInnerHTML={{ __html: highlightedHtml }}
+        />
+      ) : (
+        <pre
+          className={`code-panel-pre ${lang === "json" ? "text-[13px]" : "text-sm"}`}
+        >
+          <code>{content}</code>
+        </pre>
+      )}
+    </div>
+  );
+});
+
+export function MethodBadge({ method, sm }: { method: string; sm?: boolean }) {
+  const colors: Record<string, string> = {
+    GET: "bg-emerald-100 text-emerald-700 dark:bg-emerald-900/30 dark:text-emerald-400 border-emerald-200 dark:border-emerald-800",
+    POST: "bg-blue-100 text-blue-700 dark:bg-blue-900/30 dark:text-blue-400 border-blue-200 dark:border-blue-800",
+    PUT: "bg-amber-100 text-amber-700 dark:bg-amber-900/30 dark:text-amber-400 border-amber-200 dark:border-amber-800",
+    DELETE:
+      "bg-red-100 text-red-700 dark:bg-red-900/30 dark:text-red-400 border-red-200 dark:border-red-800",
+  };
+  const size = sm
+    ? "px-1.5 py-0.5 rounded text-[10px]"
+    : "px-2.5 py-1 rounded-lg text-xs";
+  return (
+    <span
+      className={`inline-flex items-center font-bold border ${size} ${colors[method] || "bg-muted text-foreground border-border"}`}
+    >
+      {method}
+    </span>
+  );
+}
+
+function StatusTabs({
+  tabs,
+  active,
+  onChange,
+}: {
+  tabs: { code: number; label?: string }[];
+  active: number;
+  onChange: (c: number) => void;
+}) {
+  return (
+    <div className="flex items-center gap-0.5 border-b border-border mb-0">
+      {tabs.map((tab) => {
+        const isActive = active === tab.code;
+        const codeColor =
+          tab.code < 300
+            ? "text-emerald-600 dark:text-emerald-400"
+            : tab.code < 400
+              ? "text-amber-600 dark:text-amber-400"
+              : "text-red-500 dark:text-red-400";
+        return (
+          <button
+            key={tab.code}
+            onClick={() => onChange(tab.code)}
+            className={`px-3 py-2 text-sm font-semibold border-b-2 transition-colors ${
+              isActive
+                ? `border-foreground ${codeColor}`
+                : "border-transparent text-muted-foreground/60 hover:text-muted-foreground"
+            }`}
+          >
+            {tab.code}
+          </button>
+        );
+      })}
+    </div>
+  );
+}
+
+function TryItDialog({
+  open,
+  onClose,
+  method,
+  path,
+  defaultBody,
+  apiKey,
+  baseUrl,
+  allKeys,
+}: {
+  open: boolean;
+  onClose: () => void;
+  method: string;
+  path: string;
+  defaultBody: string;
+  apiKey: string;
+  baseUrl: string;
+  allKeys: { name: string; key: string }[];
+}) {
+  const { t } = useTranslation();
+  const [body, setBody] = useState(defaultBody);
+  const [token, setToken] = useState(apiKey);
+  const [response, setResponse] = useState("");
+  const [status, setStatus] = useState<number | null>(null);
+  const [loading, setLoading] = useState(false);
+  const [duration, setDuration] = useState<number | null>(null);
+
+  useEffect(() => {
+    if (open) {
+      setBody(defaultBody);
+      setToken(apiKey);
+      setResponse("");
+      setStatus(null);
+      setDuration(null);
+    }
+  }, [open, defaultBody, apiKey]);
+
+  const handleSend = async () => {
+    setLoading(true);
+    setResponse("");
+    setStatus(null);
+    setDuration(null);
+    const start = performance.now();
+    try {
+      const isAdmin = path.startsWith("/api/admin");
+      const headers: Record<string, string> = {
+        "Content-Type": "application/json",
+      };
+      if (isAdmin) {
+        headers["X-Admin-Key"] = token;
+      } else if (path === "/v1/messages") {
+        headers["x-api-key"] = token;
+        headers["anthropic-version"] = "2023-06-01";
+      } else {
+        headers["Authorization"] = `Bearer ${token}`;
+      }
+
+      const isGet = method === "GET";
+      const url = baseUrl + path;
+      const res = await fetch(url, {
+        method,
+        headers,
+        body: isGet ? undefined : body.trim() || undefined,
+      });
+      setStatus(res.status);
+      setDuration(Math.round(performance.now() - start));
+      const text = await res.text();
+      try {
+        setResponse(JSON.stringify(JSON.parse(text), null, 2));
+      } catch {
+        setResponse(text);
+      }
+    } catch (e) {
+      setDuration(Math.round(performance.now() - start));
+      setResponse(`Error: ${e instanceof Error ? e.message : String(e)}`);
+    } finally {
+      setLoading(false);
+    }
+  };
+
+  const statusColor =
+    status === null
+      ? ""
+      : status < 300
+        ? "text-emerald-600"
+        : status < 400
+          ? "text-amber-600"
+          : "text-red-500";
+  const statusBg =
+    status === null
+      ? ""
+      : status < 300
+        ? "bg-emerald-50 dark:bg-emerald-900/20"
+        : status < 400
+          ? "bg-amber-50 dark:bg-amber-900/20"
+          : "bg-red-50 dark:bg-red-900/20";
+
+  return (
+    <Dialog
+      open={open}
+      onOpenChange={(v) => {
+        if (!v) onClose();
+      }}
+    >
+      <DialogContent
+        className="sm:max-w-3xl max-h-[90vh] overflow-visible flex flex-col gap-0 p-0"
+        showCloseButton={false}
+      >
+        <div className="flex items-center gap-3 px-5 py-3.5 border-b border-border bg-muted/30">
+          <div className="flex items-center gap-2.5 flex-1 px-3 py-2 rounded-xl border border-border bg-background">
+            <MethodBadge method={method} />
+            <code className="code-inline">{path}</code>
+          </div>
+          <Button
+            onClick={() => void handleSend()}
+            disabled={loading}
+            className="gap-2 bg-emerald-600 px-5 text-white shrink-0 hover:bg-emerald-600/90 dark:bg-emerald-500/90 dark:hover:bg-emerald-500"
+          >
+            {loading ? (
+              <Loader2 className="size-4 animate-spin" />
+            ) : (
+              <Play className="size-4" />
+            )}
+            {loading ? t("apiRef.tryIt.sending") : t("apiRef.tryIt.send")}
+          </Button>
+        </div>
+
+        <div className="flex flex-1 min-h-0 overflow-hidden">
+          <div className="flex-1 overflow-visible p-5 space-y-4 border-r border-border">
+            <div className="rounded-xl border border-border overflow-visible">
+              <div className="px-4 py-2.5 bg-muted/30 border-b border-border">
+                <span className="text-sm font-semibold text-foreground">
+                  {t("apiRef.tryIt.authTitle")}
+                </span>
+              </div>
+              <div className="p-4 space-y-3">
+                <div className="flex items-center justify-between gap-3">
+                  <div>
+                    <div className="flex items-center gap-2">
+                      <span className="text-sm font-semibold text-foreground">
+                        {path === "/v1/messages"
+                          ? "x-api-key"
+                          : path.startsWith("/api/admin")
+                            ? "X-Admin-Key"
+                            : "Authorization"}
+                      </span>
+                      <span className="code-inline text-[11px]">string</span>
+                    </div>
+                    <Badge
+                      variant="destructive"
+                      className="mt-1 text-[10px] px-1.5 py-0"
+                    >
+                      {t("apiRef.tryIt.required")}
+                    </Badge>
+                  </div>
+                  <input
+                    className="w-52 px-3 py-1.5 rounded-lg border border-border bg-background text-sm font-medium focus:outline-none focus:ring-2 focus:ring-primary/30"
+                    placeholder={t("apiRef.tryIt.keyPlaceholder")}
+                    value={token}
+                    onChange={(e) => setToken(e.target.value)}
+                  />
+                </div>
+                {allKeys.length > 0 && (
+                  <div className="flex items-center gap-2">
+                    <span className="text-xs text-muted-foreground shrink-0">
+                      {t("apiRef.tryIt.selectKey")}
+                    </span>
+                    <Select
+                      value={token}
+                      onValueChange={(v) => setToken(v)}
+                      options={allKeys.map((k) => ({
+                        label: `${k.name} — ${k.key.length > 20 ? k.key.slice(0, 8) + "..." + k.key.slice(-4) : k.key}`,
+                        value: k.key,
+                      }))}
+                    />
+                  </div>
+                )}
+              </div>
+            </div>
+
+            {method !== "GET" && method !== "DELETE" && (
+              <div className="rounded-xl border border-border overflow-hidden">
+                <div className="px-4 py-2.5 bg-muted/30 border-b border-border">
+                  <span className="text-sm font-semibold text-foreground">
+                    {t("apiRef.tryIt.requestBody")}
+                  </span>
+                </div>
+                <textarea
+                  className="w-full h-56 resize-none border-0 bg-background p-4 text-[15px] leading-relaxed outline-none"
+                  style={{ fontFamily: "var(--font-mono)" }}
+                  value={body}
+                  onChange={(e) => setBody(e.target.value)}
+                  spellCheck={false}
+                />
+              </div>
+            )}
+          </div>
+
+          <div className="flex-1 overflow-auto p-5">
+            <div className="rounded-xl border border-border overflow-hidden h-full flex flex-col">
+              <div className="px-4 py-2.5 bg-muted/30 border-b border-border flex items-center justify-between">
+                <span className="text-sm font-semibold text-foreground">
+                  {t("apiRef.tryIt.responseTitle")}
+                </span>
+                {status !== null && (
+                  <div className="flex items-center gap-2.5">
+                    <span
+                      className={`px-2 py-0.5 rounded-md text-xs font-bold ${statusColor} ${statusBg}`}
+                    >
+                      {status}
+                    </span>
+                    {duration !== null && (
+                      <span className="text-xs text-muted-foreground">
+                        {duration}ms
+                      </span>
+                    )}
+                  </div>
+                )}
+              </div>
+              <div className="flex-1 overflow-auto">
+                {response ? (
+                  <pre
+                    className="p-4 text-[15px] text-foreground leading-relaxed whitespace-pre-wrap"
+                    style={{ fontFamily: "var(--font-mono)" }}
+                  >
+                    <code>{response}</code>
+                  </pre>
+                ) : (
+                  <div className="flex items-center justify-center h-full min-h-[200px] text-sm text-muted-foreground">
+                    {loading ? (
+                      <div className="flex items-center gap-2">
+                        <Loader2 className="size-4 animate-spin" />
+                        <span>{t("apiRef.tryIt.sending")}</span>
+                      </div>
+                    ) : (
+                      <span>{t("apiRef.tryIt.placeholder")}</span>
+                    )}
+                  </div>
+                )}
+              </div>
+            </div>
+          </div>
+        </div>
+      </DialogContent>
+    </Dialog>
+  );
+}
+
+export const EndpointDoc = memo(function EndpointDoc({
+  id,
+  method,
+  path,
+  title,
+  description,
+  curlExample,
+  responseExamples,
+  defaultBody,
+  apiKey,
+  baseUrl,
+  allKeys,
+}: {
+  id?: string;
+  method: string;
+  path: string;
+  title: string;
+  description: string;
+  curlExample: string;
+  responseExamples: { code: number; body: string }[];
+  defaultBody?: string;
+  apiKey?: string;
+  baseUrl?: string;
+  allKeys?: { name: string; key: string }[];
+}) {
+  const { t } = useTranslation();
+  const [activeStatus, setActiveStatus] = useState(
+    responseExamples[0]?.code ?? 200,
+  );
+  const activeBody =
+    responseExamples.find((r) => r.code === activeStatus)?.body ?? "";
+  const [tryOpen, setTryOpen] = useState(false);
+  const supportsJsonBody =
+    method === "GET" ||
+    method === "DELETE" ||
+    !defaultBody ||
+    (() => {
+      try {
+        JSON.parse(defaultBody);
+        return true;
+      } catch {
+        return false;
+      }
+    })();
+  const supportsTryIt =
+    !path.includes(":") &&
+    path !== "/api/admin/accounts/import" &&
+    supportsJsonBody;
+
+  return (
+    <Card id={id} className="mb-4 scroll-mt-20 py-0">
+      <CardContent className="p-4">
+        <div className="mb-3 flex flex-wrap items-start justify-between gap-3">
+          <div className="min-w-0">
+            <h3 className="text-[17px] font-bold text-foreground">{title}</h3>
+            <p className="mt-0.5 text-[13px] text-muted-foreground">
+              {description}
+            </p>
+          </div>
+        </div>
+
+        <div className="mb-4 flex items-center gap-2 rounded-lg border border-border bg-muted/30 p-2.5">
+          <MethodBadge method={method} />
+          <code className="code-inline min-w-0 flex-1 truncate">{path}</code>
+          <Button
+            size="sm"
+            onClick={() => setTryOpen(true)}
+            disabled={!supportsTryIt}
+            className="h-8 gap-1.5 bg-emerald-600 text-white shrink-0 hover:bg-emerald-600/90 dark:bg-emerald-500/90 dark:hover:bg-emerald-500"
+          >
+            <Play className="size-3.5" />
+            {t("apiRef.tryIt.button")}
+          </Button>
+        </div>
+
+        {supportsTryIt && tryOpen && (
+          <TryItDialog
+            open={tryOpen}
+            onClose={() => setTryOpen(false)}
+            method={method}
+            path={path}
+            defaultBody={defaultBody || ""}
+            apiKey={apiKey || ""}
+            baseUrl={baseUrl || ""}
+            allKeys={allKeys || []}
+          />
+        )}
+
+        <div className="mb-4">
+          <CodeBlock label="cURL" content={curlExample} lang="bash" />
+        </div>
+
+        <div className="code-panel">
+          <div className="code-panel-header px-4 pt-1.5 pb-0">
+            <StatusTabs
+              tabs={responseExamples.map((r) => ({ code: r.code }))}
+              active={activeStatus}
+              onChange={setActiveStatus}
+            />
+          </div>
+          <pre className="code-panel-pre max-h-[340px] bg-transparent text-[13px]">
+            <code>{activeBody}</code>
+          </pre>
+        </div>
+      </CardContent>
+    </Card>
+  );
+});
diff --git a/frontend/src/pages/docs/docsContent.ts b/frontend/src/pages/docs/docsContent.ts
new file mode 100644
index 00000000..3f66f2f8
--- /dev/null
+++ b/frontend/src/pages/docs/docsContent.ts
@@ -0,0 +1,924 @@
+import {
+  resolveTemplate,
+  type DocsLocale,
+  type QuickTool,
+} from "./quickStartTools";
+
+export type EndpointSpec = {
+  id: string;
+  method: string;
+  path: string;
+  title: string;
+  description: string;
+  curl: string;
+  defaultBody?: string;
+  responses: { code: number; body: string }[];
+};
+
+function copy(locale: DocsLocale, zh: string, en: string) {
+  return locale === "zh" ? zh : en;
+}
+
+export function buildEndpointSpecs(
+  baseUrl: string,
+  locale: DocsLocale = "zh",
+): EndpointSpec[] {
+  return [
+    {
+      id: "api-responses",
+      method: "POST",
+      path: "/v1/responses",
+      title: copy(locale, "创建 Responses 响应", "Create Responses output"),
+      description: copy(
+        locale,
+        "Codex Responses API 原生端点，支持流式响应，直接转发到上游服务。",
+        "Native Codex Responses endpoint with optional streaming, forwarded directly upstream.",
+      ),
+      defaultBody: `{
+  "model": "gpt-5.4",
+  "input": [{"role": "user", "content": [{"type": "input_text", "text": "Hello"}]}],
+  "stream": false
+}`,
+      curl: `curl --request POST \\
+  --url ${baseUrl}/v1/responses \\
+  --header 'Authorization: Bearer <token>' \\
+  --header 'Content-Type: application/json' \\
+  --data '{
+  "model": "gpt-5.4",
+  "input": [
+    {"role": "user", "content": [{"type": "input_text", "text": "Hello, what can you do?"}]}
+  ],
+  "stream": true,
+  "reasoning": {"effort": "high"}
+}'`,
+      responses: [
+        {
+          code: 200,
+          body: `{
+  "id": "resp_abc123",
+  "object": "response",
+  "model": "gpt-5.4",
+  "status": "completed",
+  "output": [
+    {"type": "message", "role": "assistant", "content": [{"type": "output_text", "text": "Hello!"}]}
+  ],
+  "usage": {"input_tokens": 12, "output_tokens": 45, "total_tokens": 57}
+}`,
+        },
+        {
+          code: 400,
+          body: `{
+  "error": {"code": "invalid_request", "message": "model is required", "type": "invalid_request_error"}
+}`,
+        },
+        {
+          code: 401,
+          body: `{
+  "error": {"code": "invalid_api_key", "message": "Invalid API key provided", "type": "authentication_error"}
+}`,
+        },
+        {
+          code: 503,
+          body: `{
+  "error": {"message": "无可用账号，请稍后重试", "type": "server_error", "code": "no_available_account"}
+}`,
+        },
+        {
+          code: 429,
+          body: `{
+  "error": {"message": "Rate limit exceeded", "type": "server_error", "code": "account_pool_usage_limit_reached", "resets_in_seconds": 18000}
+}`,
+        },
+      ],
+    },
+    {
+      id: "api-chat",
+      method: "POST",
+      path: "/v1/chat/completions",
+      title: copy(
+        locale,
+        "创建 Chat Completions 响应",
+        "Create Chat Completions output",
+      ),
+      description: copy(
+        locale,
+        "OpenAI Chat Completions 兼容端点，会在 OpenAI 与 Codex Responses 格式之间自动转换。",
+        "OpenAI Chat Completions compatible endpoint that translates between OpenAI and Codex Responses formats.",
+      ),
+      defaultBody: `{
+  "model": "gpt-5.4",
+  "messages": [{"role": "user", "content": "Hello"}],
+  "stream": false
+}`,
+      curl: `curl --request POST \\
+  --url ${baseUrl}/v1/chat/completions \\
+  --header 'Authorization: Bearer <token>' \\
+  --header 'Content-Type: application/json' \\
+  --data '{
+  "model": "gpt-5.4",
+  "messages": [
+    {"role": "system", "content": "You are a helpful assistant."},
+    {"role": "user", "content": "Hello!"}
+  ],
+  "stream": true,
+  "reasoning_effort": "high"
+}'`,
+      responses: [
+        {
+          code: 200,
+          body: `{
+  "id": "chatcmpl-abc123",
+  "object": "chat.completion",
+  "model": "gpt-5.4",
+  "choices": [
+    {"index": 0, "message": {"role": "assistant", "content": "Hello! How can I help you today?"}, "finish_reason": "stop"}
+  ],
+  "usage": {"prompt_tokens": 18, "completion_tokens": 9, "total_tokens": 27}
+}`,
+        },
+        {
+          code: 400,
+          body: `{
+  "error": {"code": "invalid_request", "message": "Request validation failed", "type": "invalid_request_error"}
+}`,
+        },
+        {
+          code: 401,
+          body: `{
+  "error": {"code": "invalid_api_key", "message": "Invalid API key provided", "type": "authentication_error"}
+}`,
+        },
+      ],
+    },
+    {
+      id: "api-messages",
+      method: "POST",
+      path: "/v1/messages",
+      title: copy(locale, "创建 Messages 响应", "Create Messages output"),
+      description: copy(
+        locale,
+        "Anthropic Messages API 兼容端点，会在 Claude 与 Codex Responses 格式之间自动转换，模型名按系统设置映射。",
+        "Anthropic Messages compatible endpoint that translates between Claude and Codex Responses formats, with model names mapped from system settings.",
+      ),
+      defaultBody: `{
+  "model": "claude-sonnet-4-5-20250514",
+  "max_tokens": 1024,
+  "messages": [{"role": "user", "content": "Hello"}]
+}`,
+      curl: `curl --request POST \\
+  --url ${baseUrl}/v1/messages \\
+  --header 'x-api-key: <token>' \\
+  --header 'Content-Type: application/json' \\
+  --header 'anthropic-version: 2023-06-01' \\
+  --data '{
+  "model": "claude-sonnet-4-5-20250514",
+  "max_tokens": 1024,
+  "messages": [{"role": "user", "content": "Hello, Claude!"}]
+}'`,
+      responses: [
+        {
+          code: 200,
+          body: `{
+  "id": "msg_abc123",
+  "type": "message",
+  "role": "assistant",
+  "model": "claude-sonnet-4-5-20250514",
+  "content": [{"type": "text", "text": "Hello! How can I assist you today?"}],
+  "stop_reason": "end_turn",
+  "stop_sequence": null,
+  "usage": {"input_tokens": 10, "output_tokens": 12, "cache_creation_input_tokens": 0, "cache_read_input_tokens": 0}
+}`,
+        },
+        {
+          code: 400,
+          body: `{
+  "type": "error",
+  "error": {"type": "invalid_request_error", "message": "model is required"}
+}`,
+        },
+        {
+          code: 401,
+          body: `{
+  "type": "error",
+  "error": {"type": "authentication_error", "message": "Invalid API key"}
+}`,
+        },
+        {
+          code: 429,
+          body: `{
+  "type": "error",
+  "error": {"type": "rate_limit_error", "message": "All accounts rate limited"}
+}`,
+        },
+      ],
+    },
+    {
+      id: "api-images-gen",
+      method: "POST",
+      path: "/v1/images/generations",
+      title: copy(locale, "生成图片", "Generate images"),
+      description: copy(
+        locale,
+        "OpenAI Images 兼容端点，底层使用 Codex Responses 的 image_generation 能力。",
+        "OpenAI Images compatible endpoint backed by Codex Responses image_generation.",
+      ),
+      defaultBody: `{
+  "model": "gpt-image-2",
+  "prompt": "Draw a small orange cat",
+  "size": "1024x1024",
+  "quality": "high"
+}`,
+      curl: `curl --request POST \\
+  --url ${baseUrl}/v1/images/generations \\
+  --header 'Authorization: Bearer <token>' \\
+  --header 'Content-Type: application/json' \\
+  --data '{
+  "model": "gpt-image-2",
+  "prompt": "Draw a small orange cat",
+  "response_format": "b64_json"
+}'`,
+      responses: [
+        {
+          code: 200,
+          body: `{
+  "created": 1710000000,
+  "model": "gpt-image-2",
+  "data": [{"b64_json": "..."}],
+  "usage": {"images": 1}
+}`,
+        },
+      ],
+    },
+    {
+      id: "api-images-edit",
+      method: "POST",
+      path: "/v1/images/edits",
+      title: copy(locale, "编辑图片", "Edit images"),
+      description: copy(
+        locale,
+        "OpenAI Images 编辑兼容端点，支持 JSON image_url 和 multipart 文件上传。",
+        "OpenAI Images edit compatible endpoint supporting JSON image_url input and multipart uploads.",
+      ),
+      defaultBody: `{
+  "model": "gpt-image-2",
+  "prompt": "Replace the background with aurora lights",
+  "images": [{"image_url": "https://example.com/source.png"}],
+  "output_format": "png"
+}`,
+      curl: `curl --request POST \\
+  --url ${baseUrl}/v1/images/edits \\
+  --header 'Authorization: Bearer <token>' \\
+  --header 'Content-Type: application/json' \\
+  --data '{
+  "model": "gpt-image-2",
+  "prompt": "Replace the background with aurora lights",
+  "images": [{"image_url": "https://example.com/source.png"}]
+}'`,
+      responses: [
+        {
+          code: 200,
+          body: `{
+  "created": 1710000000,
+  "model": "gpt-image-2",
+  "data": [{"b64_json": "..."}]
+}`,
+        },
+      ],
+    },
+    {
+      id: "api-models",
+      method: "GET",
+      path: "/v1/models",
+      title: copy(locale, "列出模型", "List models"),
+      description: copy(
+        locale,
+        "列出当前代理对外暴露的可用模型。",
+        "List the models currently exposed by this proxy.",
+      ),
+      curl: `curl --request GET \\
+  --url ${baseUrl}/v1/models \\
+  --header 'Authorization: Bearer <token>'`,
+      responses: [
+        {
+          code: 200,
+          body: `{
+  "object": "list",
+  "data": [
+    {"id": "gpt-5.5", "object": "model", "owned_by": "openai"},
+    {"id": "gpt-5.4", "object": "model", "owned_by": "openai"},
+    {"id": "gpt-5.4-mini", "object": "model", "owned_by": "openai"},
+    {"id": "gpt-5.3-codex", "object": "model", "owned_by": "openai"},
+    {"id": "gpt-5.3-codex-spark", "object": "model", "owned_by": "openai"},
+    {"id": "gpt-5.2", "object": "model", "owned_by": "openai"},
+    {"id": "gpt-image-2", "object": "model", "owned_by": "openai"}
+  ]
+}`,
+        },
+        {
+          code: 401,
+          body: `{
+  "error": {"code": "invalid_api_key", "message": "Invalid API key provided", "type": "authentication_error"}
+}`,
+        },
+      ],
+    },
+    {
+      id: "api-health",
+      method: "GET",
+      path: "/health",
+      title: copy(locale, "健康检查", "Health check"),
+      description: copy(
+        locale,
+        "查看服务状态和可用账号数量；该端点不需要认证。",
+        "Inspect service status and available account count; this endpoint does not require authentication.",
+      ),
+      curl: `curl --request GET \\
+  --url ${baseUrl}/health`,
+      responses: [
+        {
+          code: 200,
+          body: `{
+  "status": "ok",
+  "available": 5,
+  "total": 8
+}`,
+        },
+      ],
+    },
+  ];
+}
+
+export function buildAdminSpecs(
+  baseUrl: string,
+  locale: DocsLocale = "zh",
+): EndpointSpec[] {
+  return [
+    {
+      id: "admin-add-rt",
+      method: "POST",
+      path: "/api/admin/accounts",
+      title: copy(
+        locale,
+        "添加账号（Refresh Token）",
+        "Add account (Refresh Token)",
+      ),
+      description: copy(
+        locale,
+        "通过 Refresh Token 添加账号，系统会自动刷新 Access Token 并加入号池。",
+        "Add an account via Refresh Token. The system refreshes its Access Token and adds it to the pool automatically.",
+      ),
+      defaultBody: `{
+  "name": "my-account",
+  "refresh_token": "rt_XPqsKO3Ld...",
+  "proxy_url": ""
+}`,
+      curl: `curl --request POST \\
+  --url ${baseUrl}/api/admin/accounts \\
+  --header 'X-Admin-Key: <admin_secret>' \\
+  --header 'Content-Type: application/json' \\
+  --data '{
+  "name": "my-account",
+  "refresh_token": "rt_XPqsKO3Ld...\\nrt_H2qdhY",
+  "proxy_url": ""
+}'`,
+      responses: [
+        {
+          code: 200,
+          body: `{
+  "message": "成功添加 1 个账号",
+  "success": 1,
+  "failed": 0
+}`,
+        },
+        { code: 400, body: `{"error": "refresh_token 是必填字段"}` },
+        { code: 401, body: `{"error": "Unauthorized"}` },
+      ],
+    },
+    {
+      id: "admin-add-at",
+      method: "POST",
+      path: "/api/admin/accounts/at",
+      title: copy(
+        locale,
+        "添加账号（Access Token）",
+        "Add account (Access Token)",
+      ),
+      description: copy(
+        locale,
+        "添加 AT-only 账号；access_token 字段支持用换行分隔多个 Token。",
+        "Add AT-only accounts; the access_token field can contain multiple tokens separated by newlines.",
+      ),
+      defaultBody: `{
+  "name": "at-account",
+  "access_token": "eyJhbGciOi...",
+  "proxy_url": ""
+}`,
+      curl: `curl --request POST \\
+  --url ${baseUrl}/api/admin/accounts/at \\
+  --header 'X-Admin-Key: <admin_secret>' \\
+  --header 'Content-Type: application/json' \\
+  --data '{
+  "name": "at-account",
+  "access_token": "eyJhbGciOi...",
+  "proxy_url": ""
+}'`,
+      responses: [
+        {
+          code: 200,
+          body: `{
+  "message": "成功添加 1 个 AT-only 账号",
+  "success": 1,
+  "failed": 0
+}`,
+        },
+        { code: 400, body: `{"error": "access_token 是必填字段"}` },
+      ],
+    },
+    {
+      id: "admin-import",
+      method: "POST",
+      path: "/api/admin/accounts/import",
+      title: copy(locale, "文件批量导入账号", "Bulk import accounts from file"),
+      description: copy(
+        locale,
+        "通过文件批量导入账号，支持 txt、CLIProxyAPI 导出的 json、以及每行一个 AT 的 at_txt，文件最大 2MB。",
+        "Bulk import accounts from file. Supports txt, CLIProxyAPI-exported json, and at_txt with one access token per line; max file size is 2MB.",
+      ),
+      curl: `# TXT — one Refresh Token per line
+curl --request POST \\
+  --url ${baseUrl}/api/admin/accounts/import \\
+  --header 'X-Admin-Key: <admin_secret>' \\
+  --form 'file=@tokens.txt' \\
+  --form 'format=txt' \\
+  --form 'proxy_url='
+
+# JSON — CLIProxyAPI credential export
+curl --request POST \\
+  --url ${baseUrl}/api/admin/accounts/import \\
+  --header 'X-Admin-Key: <admin_secret>' \\
+  --form 'file=@credentials.json' \\
+  --form 'format=json' \\
+  --form 'proxy_url='
+
+# AT TXT — one Access Token per line
+curl --request POST \\
+  --url ${baseUrl}/api/admin/accounts/import \\
+  --header 'X-Admin-Key: <admin_secret>' \\
+  --form 'file=@access_tokens.txt' \\
+  --form 'format=at_txt' \\
+  --form 'proxy_url='`,
+      responses: [
+        {
+          code: 200,
+          body: `{
+  "message": "导入完成：成功 5，失败 0，重复 2",
+  "total": 7,
+  "success": 5,
+  "failed": 0,
+  "duplicate": 2
+}`,
+        },
+        { code: 400, body: `{"error": "请上传文件（字段名: file）"}` },
+      ],
+    },
+    {
+      id: "admin-delete",
+      method: "DELETE",
+      path: "/api/admin/accounts/:id",
+      title: copy(locale, "删除账号", "Delete account"),
+      description: copy(
+        locale,
+        "按账号 ID 删除账号，并从可用号池中移除。",
+        "Delete an account by ID and remove it from the active pool.",
+      ),
+      curl: `curl --request DELETE \\
+  --url ${baseUrl}/api/admin/accounts/1 \\
+  --header 'X-Admin-Key: <admin_secret>'`,
+      responses: [
+        { code: 200, body: `{"message": "账号已删除"}` },
+        { code: 404, body: `{"error": "账号不存在"}` },
+      ],
+    },
+    {
+      id: "admin-list",
+      method: "GET",
+      path: "/api/admin/accounts",
+      title: copy(locale, "列出账号", "List accounts"),
+      description: copy(
+        locale,
+        "列出所有账号的状态、用量、标签、账号分组和基础元数据。",
+        "List all accounts with status, usage, tags, account groups, and basic metadata.",
+      ),
+      curl: `curl --request GET \\
+  --url ${baseUrl}/api/admin/accounts \\
+  --header 'X-Admin-Key: <admin_secret>'`,
+      responses: [
+        {
+          code: 200,
+          body: `{
+  "accounts": [
+    {
+      "id": 1,
+      "name": "my-account",
+      "email": "user@example.com",
+      "plan_type": "team",
+      "status": "active",
+      "proxy_url": "",
+      "tags": ["team"],
+      "group_ids": [1],
+      "allowed_api_key_ids": [],
+      "created_at": "2025-01-01T00:00:00Z",
+      "total_requests": 128,
+      "success_requests": 125
+    }
+  ]
+}`,
+        },
+      ],
+    },
+    {
+      id: "admin-update-scheduler",
+      method: "PATCH",
+      path: "/api/admin/accounts/:id/scheduler",
+      title: copy(
+        locale,
+        "更新账号调度配置",
+        "Update account scheduler config",
+      ),
+      description: copy(
+        locale,
+        "更新账号代理、标签、账号分组、并发/评分覆盖和 API Key 反向授权。字段省略时保持原值；allowed_api_key_ids 传 null 或空数组表示不限制 API Key。",
+        "Update account proxy, tags, account groups, concurrency/score overrides, and reverse API key authorization. Omitted fields keep existing values; allowed_api_key_ids set to null or [] means unrestricted API key access.",
+      ),
+      defaultBody: `{
+  "proxy_url": "",
+  "tags": ["team", "paid"],
+  "group_ids": [1, 2],
+  "allowed_api_key_ids": [],
+  "score_bias_override": null,
+  "base_concurrency_override": null
+}`,
+      curl: `curl --request PATCH \\
+  --url ${baseUrl}/api/admin/accounts/1/scheduler \\
+  --header 'X-Admin-Key: <admin_secret>' \\
+  --header 'Content-Type: application/json' \\
+  --data '{
+  "tags": ["team", "paid"],
+  "group_ids": [1, 2],
+  "allowed_api_key_ids": []
+}'`,
+      responses: [
+        { code: 200, body: `{"message": "账号调度配置已更新"}` },
+        {
+          code: 400,
+          body: `{"error": "allowed_api_key_ids 包含不存在的 API Key ID: 99"}`,
+        },
+        { code: 404, body: `{"error": "账号不存在"}` },
+      ],
+    },
+    {
+      id: "admin-list-keys",
+      method: "GET",
+      path: "/api/admin/keys",
+      title: copy(locale, "列出 API 密钥", "List API keys"),
+      description: copy(
+        locale,
+        "列出后台创建的下游调用密钥，包含额度、用量、过期时间、状态和允许账号分组。该接口会在 raw_key 返回完整密钥，只能在受信任后台使用。",
+        "List downstream API keys created in the admin panel, including quota, usage, expiration, status, and allowed account groups. The raw_key field contains the full secret and must only be used in trusted admin contexts.",
+      ),
+      curl: `curl --request GET \\
+  --url ${baseUrl}/api/admin/keys \\
+  --header 'X-Admin-Key: <admin_secret>'`,
+      responses: [
+        {
+          code: 200,
+          body: `{
+  "keys": [
+    {
+      "id": 1,
+      "name": "Claude Code",
+      "key": "sk-****...abcd",
+      "raw_key": "sk-live-full-key",
+      "quota_limit": 10,
+      "quota_used": 1.25,
+      "expires_at": "2026-06-01T00:00:00Z",
+      "allowed_group_ids": [1],
+      "status": "active",
+      "created_at": "2026-05-13T00:00:00Z"
+    }
+  ]
+}`,
+        },
+      ],
+    },
+    {
+      id: "admin-create-key",
+      method: "POST",
+      path: "/api/admin/keys",
+      title: copy(locale, "创建 API 密钥", "Create API key"),
+      description: copy(
+        locale,
+        "创建下游客户端使用的 API Key。key 可省略由系统生成；quota_limit 为 0 或省略表示不限额；allowed_group_ids 为空表示可调度全部账号分组。",
+        "Create a downstream API key. The key can be generated automatically; quota_limit omitted or set to 0 means unlimited; empty allowed_group_ids means all account groups are allowed.",
+      ),
+      defaultBody: `{
+  "name": "Claude Code",
+  "quota_limit": 10,
+  "expires_in_days": 30,
+  "allowed_group_ids": [1]
+}`,
+      curl: `curl --request POST \\
+  --url ${baseUrl}/api/admin/keys \\
+  --header 'X-Admin-Key: <admin_secret>' \\
+  --header 'Content-Type: application/json' \\
+  --data '{
+  "name": "Claude Code",
+  "quota_limit": 10,
+  "expires_in_days": 30,
+  "allowed_group_ids": [1]
+}'`,
+      responses: [
+        {
+          code: 200,
+          body: `{
+  "id": 2,
+  "key": "sk-...",
+  "name": "Claude Code",
+  "quota_limit": 10,
+  "quota_used": 0,
+  "expires_at": "2026-06-12T00:00:00Z",
+  "allowed_group_ids": [1]
+}`,
+        },
+        {
+          code: 400,
+          body: `{"error": "allowed_group_ids 包含不存在的分组 ID: 99"}`,
+        },
+      ],
+    },
+    {
+      id: "admin-update-key",
+      method: "PATCH",
+      path: "/api/admin/keys/:id",
+      title: copy(locale, "编辑 API 密钥", "Edit API key"),
+      description: copy(
+        locale,
+        "编辑密钥名称、额度、过期时间和允许账号分组。字段省略时保持原值；quota_limit 传 0/null 清除额度；expires_at 传 null 或 expires_in_days 传 0 清除过期时间。",
+        "Edit API key name, quota, expiration, and allowed account groups. Omitted fields keep existing values; quota_limit set to 0/null clears the limit; expires_at set to null or expires_in_days set to 0 clears expiration.",
+      ),
+      defaultBody: `{
+  "name": "Cherry Studio",
+  "quota_limit": 25,
+  "expires_at": null,
+  "allowed_group_ids": []
+}`,
+      curl: `curl --request PATCH \\
+  --url ${baseUrl}/api/admin/keys/2 \\
+  --header 'X-Admin-Key: <admin_secret>' \\
+  --header 'Content-Type: application/json' \\
+  --data '{
+  "name": "Cherry Studio",
+  "quota_limit": 25,
+  "expires_at": null,
+  "allowed_group_ids": []
+}'`,
+      responses: [
+        { code: 200, body: `{"message": "API Key 已更新"}` },
+        { code: 400, body: `{"error": "额度限制不能小于 0"}` },
+        { code: 404, body: `{"error": "API Key 不存在"}` },
+      ],
+    },
+    {
+      id: "admin-delete-key",
+      method: "DELETE",
+      path: "/api/admin/keys/:id",
+      title: copy(locale, "删除 API 密钥", "Delete API key"),
+      description: copy(
+        locale,
+        "删除 API Key 并立即让使用该密钥的客户端失去访问权限。",
+        "Delete an API key and immediately revoke client access using it.",
+      ),
+      curl: `curl --request DELETE \\
+  --url ${baseUrl}/api/admin/keys/2 \\
+  --header 'X-Admin-Key: <admin_secret>'`,
+      responses: [{ code: 200, body: `{"message": "已删除"}` }],
+    },
+    {
+      id: "admin-list-groups",
+      method: "GET",
+      path: "/api/admin/account-groups",
+      title: copy(locale, "列出账号分组", "List account groups"),
+      description: copy(
+        locale,
+        "列出账号分组、颜色、描述和成员数量。",
+        "List account groups with color, description, and member count.",
+      ),
+      curl: `curl --request GET \\
+  --url ${baseUrl}/api/admin/account-groups \\
+  --header 'X-Admin-Key: <admin_secret>'`,
+      responses: [
+        {
+          code: 200,
+          body: `{
+  "groups": [
+    {"id": 1, "name": "Team", "description": "付费团队账号", "color": "#2563eb", "member_count": 8, "sort_order": 0}
+  ]
+}`,
+        },
+      ],
+    },
+    {
+      id: "admin-create-group",
+      method: "POST",
+      path: "/api/admin/account-groups",
+      title: copy(locale, "创建账号分组", "Create account group"),
+      description: copy(
+        locale,
+        "创建账号分组。账号可属于多个分组；API Key 可限制只能调度指定分组。",
+        "Create an account group. Accounts may belong to multiple groups, and API keys may be restricted to specific groups.",
+      ),
+      defaultBody: `{
+  "name": "Team",
+  "description": "付费团队账号",
+  "color": "#2563eb"
+}`,
+      curl: `curl --request POST \\
+  --url ${baseUrl}/api/admin/account-groups \\
+  --header 'X-Admin-Key: <admin_secret>' \\
+  --header 'Content-Type: application/json' \\
+  --data '{"name":"Team","description":"付费团队账号","color":"#2563eb"}'`,
+      responses: [
+        { code: 200, body: `{"id": 1, "message": "分组已创建"}` },
+        { code: 400, body: `{"error": "分组名称不能为空"}` },
+      ],
+    },
+    {
+      id: "admin-update-group",
+      method: "PATCH",
+      path: "/api/admin/account-groups/:id",
+      title: copy(locale, "编辑账号分组", "Edit account group"),
+      description: copy(
+        locale,
+        "编辑账号分组名称、描述、颜色和排序。删除或改名分组后，账号和 API Key 的分组关系会按 ID 继续保持。",
+        "Edit account group name, description, color, and sort order. Account and API key relations remain bound by group ID after rename operations.",
+      ),
+      defaultBody: `{
+  "name": "Team Plus",
+  "description": "高优先级账号",
+  "color": "#16a34a",
+  "sort_order": 10
+}`,
+      curl: `curl --request PATCH \\
+  --url ${baseUrl}/api/admin/account-groups/1 \\
+  --header 'X-Admin-Key: <admin_secret>' \\
+  --header 'Content-Type: application/json' \\
+  --data '{"name":"Team Plus","description":"高优先级账号","color":"#16a34a","sort_order":10}'`,
+      responses: [
+        { code: 200, body: `{"message": "分组已更新"}` },
+        { code: 404, body: `{"error": "分组不存在"}` },
+      ],
+    },
+    {
+      id: "admin-delete-group",
+      method: "DELETE",
+      path: "/api/admin/account-groups/:id",
+      title: copy(locale, "删除账号分组", "Delete account group"),
+      description: copy(
+        locale,
+        "删除空分组。若分组仍有成员，需要追加 ?force=true；删除后会从账号关系中移除该 ID，并尽量从 API Key 允许分组中清理。若某个 API Key 仅绑定该分组，为避免权限被意外放大，会保留为缺失分组状态。",
+        "Delete an empty account group. If the group still has members, append ?force=true; the ID is removed from account memberships and pruned from API key scopes where safe. If an API key only referenced this group, the missing group ID is retained so access does not silently broaden.",
+      ),
+      curl: `curl --request DELETE \\
+  --url '${baseUrl}/api/admin/account-groups/1?force=true' \\
+  --header 'X-Admin-Key: <admin_secret>'`,
+      responses: [
+        { code: 200, body: `{"message": "分组已删除"}` },
+        { code: 409, body: `{"error": "分组仍有账号，确认后可强制删除"}` },
+      ],
+    },
+  ];
+}
+
+function endpointToMd(e: EndpointSpec): string {
+  const responses = e.responses
+    .map((r) => `**${r.code}**\n\n\`\`\`json\n${r.body}\n\`\`\``)
+    .join("\n\n");
+  return `### ${e.method} ${e.path} — ${e.title}\n\n${e.description}\n\n\`\`\`bash\n${e.curl}\n\`\`\`\n\n${responses}`;
+}
+
+export function buildDocsMarkdown(args: {
+  baseUrl: string;
+  quickTools: QuickTool[];
+  apiKeyExample: string;
+  locale?: DocsLocale;
+}): string {
+  const { baseUrl, quickTools, apiKeyExample, locale = "zh" } = args;
+  const modelEndpoints = buildEndpointSpecs(baseUrl, locale);
+  const adminEndpoints = buildAdminSpecs(baseUrl, locale);
+
+  const quickToolLines = quickTools
+    .map((tool) => {
+      const resolved = resolveTemplate(tool, baseUrl, apiKeyExample);
+      if (tool.kind === "protocol") {
+        return `- **${tool.name}** (${tool.badge}) — ${tool.blurb}\n\n  \`${resolved}\``;
+      }
+      return `- **${tool.name}** (${tool.badge}) — ${tool.blurb}\n\n  \`\`\`${tool.templateLang}\n${resolved}\n\`\`\``;
+    })
+    .join("\n\n");
+
+  return `# ${copy(locale, "Codex2API 使用文档", "Codex2API Documentation")}
+
+> ${copy(locale, "基础地址", "Base URL")}：\`${baseUrl}\`
+> ${copy(locale, "默认认证", "Default authentication")}：\`Authorization: Bearer <api-key>\`
+
+---
+
+## 1. ${copy(locale, "快速接入", "Quick Start")}
+
+${copy(locale, "挑选你常用的 AI 客户端，复制配置或一键唤起：", "Pick your preferred AI client, then copy its config or launch it directly:")}
+
+${quickToolLines}
+
+### ${copy(locale, "cURL 快速验证", "cURL Quick Check")}
+
+\`\`\`bash
+curl -X POST ${baseUrl}/v1/responses \\
+  -H "Authorization: Bearer ${apiKeyExample}" \\
+  -H "Content-Type: application/json" \\
+  -d '{"model":"gpt-5.4","input":[{"role":"user","content":[{"type":"input_text","text":"Hello"}]}]}'
+\`\`\`
+
+---
+
+## 2. ${copy(locale, "客户端配置", "Client Configuration")}
+
+### Codex CLI
+
+${copy(locale, "写入", "Write to")} \`~/.codex/config.toml\`：
+
+\`\`\`toml
+model_provider = "OpenAI"
+model = "gpt-5.4"
+
+[model_providers.OpenAI]
+name = "OpenAI"
+base_url = "${baseUrl}"
+wire_api = "responses"
+requires_openai_auth = true
+\`\`\`
+
+\`~/.codex/auth.json\`：
+
+\`\`\`json
+{ "OPENAI_API_KEY": "${apiKeyExample}" }
+\`\`\`
+
+### Claude Code
+
+${copy(locale, "环境变量", "Environment variables")}（\`~/.bashrc\` / \`~/.zshrc\`）：
+
+\`\`\`bash
+export ANTHROPIC_BASE_URL="${baseUrl}"
+export ANTHROPIC_AUTH_TOKEN="${apiKeyExample}"
+export CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1
+\`\`\`
+
+${copy(locale, "或", "Or")} \`~/.claude/settings.json\`：
+
+\`\`\`json
+{
+  "env": {
+    "ANTHROPIC_BASE_URL": "${baseUrl}",
+    "ANTHROPIC_AUTH_TOKEN": "${apiKeyExample}",
+    "CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC": "1"
+  }
+}
+\`\`\`
+
+---
+
+## 3. ${copy(locale, "认证方式", "Authentication")}
+
+${copy(locale, "所有端点（除 `/health` 外）需要密钥，按以下任一方式传入：", "All endpoints except `/health` require a key, supplied through one of the following methods:")}
+
+- \`Authorization: Bearer <key>\` — ${copy(locale, "标准方式（推荐）", "standard method (recommended)")}
+- \`x-api-key: <key>\` — ${copy(locale, "Anthropic SDK 默认", "Anthropic SDK default")}
+- \`anthropic-auth-token: <key>\` — ${copy(locale, "备用兼容", "compatibility fallback")}
+
+${copy(locale, "管理接口需要", "Admin endpoints require")} \`X-Admin-Key: <admin_secret>\`。
+
+---
+
+## 4. ${copy(locale, "模型 API", "Model API")}
+
+${modelEndpoints.map(endpointToMd).join("\n\n")}
+
+---
+
+## 5. ${copy(locale, "账号管理 API", "Account Management API")}
+
+> ${copy(locale, "所有管理接口需要 `X-Admin-Key` 请求头。", "All admin endpoints require the `X-Admin-Key` request header.")}
+
+${adminEndpoints.map(endpointToMd).join("\n\n")}
+`;
+}
diff --git a/frontend/src/pages/docs/quickStartTools.ts b/frontend/src/pages/docs/quickStartTools.ts
new file mode 100644
index 00000000..7c29a4e7
--- /dev/null
+++ b/frontend/src/pages/docs/quickStartTools.ts
@@ -0,0 +1,190 @@
+// Quick-integration software definitions for the Docs page.
+// Inspired by NewAPI's BUILTIN_TEMPLATES — adapted for Codex/Anthropic proxy.
+
+export type QuickToolKind = "protocol" | "config" | "env";
+
+export type QuickTool = {
+  id: string;
+  name: string;
+  badge: string;
+  iconHue: string;
+  glyph: string;
+  blurb: string;
+  kind: QuickToolKind;
+  url?: string;
+  template?: string;
+  templateLang?: string;
+  templateLabel?: string;
+};
+
+export type DocsLocale = "zh" | "en";
+
+const toolBlurb = (locale: DocsLocale, zh: string, en: string) =>
+  locale === "zh" ? zh : en;
+
+export function buildQuickTools(locale: DocsLocale): QuickTool[] {
+  return [
+    {
+      id: "claude-code",
+      name: "Claude Code",
+      badge: "CLI",
+      iconHue: "bg-orange-500/12 text-orange-600 dark:text-orange-400",
+      glyph: "CC",
+      blurb: toolBlurb(
+        locale,
+        "官方 Anthropic CLI，配置环境变量即可接入。",
+        "Official Anthropic CLI. Configure environment variables to connect.",
+      ),
+      kind: "env",
+      template: `export ANTHROPIC_BASE_URL="{address}"
+export ANTHROPIC_AUTH_TOKEN="{key}"
+export CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1`,
+      templateLang: "bash",
+      templateLabel: "shell",
+    },
+    {
+      id: "cc-switch",
+      name: "CC Switch",
+      badge: "Desktop",
+      iconHue: "bg-fuchsia-500/12 text-fuchsia-600 dark:text-fuchsia-400",
+      glyph: "CS",
+      blurb: toolBlurb(
+        locale,
+        "Claude Code 多账号切换器，一键唤起并写入配置。",
+        "Multi-account launcher for Claude Code. Import config with one click.",
+      ),
+      kind: "protocol",
+      url: "ccswitch",
+    },
+    {
+      id: "codex-cli",
+      name: "Codex CLI",
+      badge: "CLI",
+      iconHue: "bg-emerald-500/12 text-emerald-600 dark:text-emerald-400",
+      glyph: "CX",
+      blurb: toolBlurb(
+        locale,
+        "官方 OpenAI Responses CLI，写入 config.toml 即可。",
+        "Official OpenAI Responses CLI. Paste the generated config.toml and go.",
+      ),
+      kind: "config",
+      template: `model_provider = "OpenAI"
+model = "gpt-5.4"
+review_model = "gpt-5.4"
+model_reasoning_effort = "xhigh"
+disable_response_storage = true
+network_access = "enabled"
+model_context_window = 1000000
+model_auto_compact_token_limit = 900000
+
+[model_providers.OpenAI]
+name = "OpenAI"
+base_url = "{address}"
+wire_api = "responses"
+requires_openai_auth = true`,
+      templateLang: "toml",
+      templateLabel: "~/.codex/config.toml",
+    },
+    {
+      id: "cherry-studio",
+      name: "Cherry Studio",
+      badge: "Desktop",
+      iconHue: "bg-rose-500/12 text-rose-600 dark:text-rose-400",
+      glyph: "CY",
+      blurb: toolBlurb(
+        locale,
+        "点击按钮唤起桌面应用并自动导入 OpenAI 凭据。",
+        "Launch the desktop app and import OpenAI credentials automatically.",
+      ),
+      kind: "protocol",
+      url: "cherrystudio://providers/api-keys?v=1&data={cherryConfig}",
+    },
+    {
+      id: "lobe-chat",
+      name: "Lobe Chat",
+      badge: "Web",
+      iconHue: "bg-sky-500/12 text-sky-600 dark:text-sky-400",
+      glyph: "LC",
+      blurb: toolBlurb(
+        locale,
+        "在浏览器中打开 Lobe Chat 并预填 OpenAI 设置。",
+        "Open Lobe Chat in the browser with OpenAI settings prefilled.",
+      ),
+      kind: "protocol",
+      url: 'https://chat-preview.lobehub.com/?settings={"keyVaults":{"openai":{"apiKey":"{key}","baseURL":"{address}/v1"}}}',
+    },
+    {
+      id: "opencat",
+      name: "OpenCat",
+      badge: "Mobile",
+      iconHue: "bg-amber-500/12 text-amber-600 dark:text-amber-400",
+      glyph: "OC",
+      blurb: toolBlurb(
+        locale,
+        "唤起 iOS / macOS 客户端并加入服务器配置。",
+        "Launch the iOS/macOS client and join the server configuration directly.",
+      ),
+      kind: "protocol",
+      url: "opencat://team/join?domain={address}&token={key}",
+    },
+  ];
+}
+
+function encodeBase64(text: string): string {
+  if (typeof btoa === "function") {
+    return btoa(unescape(encodeURIComponent(text)));
+  }
+  return text;
+}
+
+export function resolveTemplate(
+  tool: QuickTool,
+  address: string,
+  key: string,
+): string {
+  const base = tool.kind === "protocol" ? tool.url : tool.template;
+  if (!base) return "";
+  if (tool.id === "cc-switch") {
+    const params = new URLSearchParams();
+    params.set("resource", "provider");
+    params.set("app", "claude");
+    params.set("name", "Codex2API Claude");
+    params.set("endpoint", address);
+    params.set("apiKey", key);
+    params.set("model", "claude-sonnet-4-5-20250514");
+    params.set("homepage", address);
+    params.set("enabled", "true");
+    return `ccswitch://v1/import?${params.toString()}`;
+  }
+  if (base.includes("{cherryConfig}")) {
+    const cfg = encodeURIComponent(
+      encodeBase64(
+        JSON.stringify({
+          id: "codex2api",
+          baseUrl: address,
+          apiKey: key,
+        }),
+      ),
+    );
+    return base.split("{cherryConfig}").join(cfg);
+  }
+  if (base.includes("{aionuiConfig}")) {
+    const cfg = encodeURIComponent(
+      encodeBase64(
+        JSON.stringify({
+          platform: "codex2api",
+          baseUrl: address,
+          apiKey: key,
+        }),
+      ),
+    );
+    return base.split("{aionuiConfig}").join(cfg);
+  }
+  const encodedAddress = encodeURIComponent(address);
+  const encodedKey = encodeURIComponent(key);
+  return base
+    .split("{address}")
+    .join(tool.kind === "protocol" ? encodedAddress : address)
+    .split("{key}")
+    .join(tool.kind === "protocol" ? encodedKey : key);
+}
diff --git a/frontend/src/types.ts b/frontend/src/types.ts
index a2ab80d6..215cbf36 100644
--- a/frontend/src/types.ts
+++ b/frontend/src/types.ts
@@ -43,6 +43,8 @@ export interface AccountRow {
   base_concurrency_effective?: number
   dynamic_concurrency_limit?: number
   allowed_api_key_ids?: number[]
+  tags?: string[]
+  group_ids?: number[]
   scheduler_breakdown?: {
     unauthorized_penalty: number
     rate_limit_penalty: number
@@ -136,9 +138,41 @@ export interface FetchOpenAIResponsesModelsResponse {
 }
 
 export interface UpdateAccountSchedulerRequest {
-  score_bias_override: number | null
-  base_concurrency_override: number | null
+  score_bias_override?: number | null
+  base_concurrency_override?: number | null
   allowed_api_key_ids?: number[] | null
+  proxy_url?: string | null
+  tags?: string[] | null
+  group_ids?: number[] | null
+}
+
+export interface AccountGroup {
+  id: number
+  name: string
+  description: string
+  color: string
+  sort_order: number
+  member_count: number
+  created_at: ISODateString
+  updated_at: ISODateString
+}
+
+export interface AccountGroupsResponse {
+  groups: AccountGroup[]
+}
+
+export interface CreateAccountGroupRequest {
+  name: string
+  description?: string
+  color?: string
+  sort_order?: number
+}
+
+export interface UpdateAccountGroupRequest {
+  name?: string
+  description?: string
+  color?: string
+  sort_order?: number
 }
 
 export interface AccountModelStat {
@@ -154,6 +188,7 @@ export interface AccountUsageDetail {
   output_tokens: number
   reasoning_tokens: number
   cached_tokens: number
+  cache_hit_rate: number
   models: AccountModelStat[]
 }
 
@@ -436,18 +471,24 @@ export interface UsageStats {
   total_tokens: number
   total_prompt_tokens: number
   total_completion_tokens: number
+  total_input_tokens?: number
   total_cached_tokens: number
+  total_cache_rate?: number
   total_account_billed: number
   total_user_billed: number
   avg_account_billed_per_request: number
   avg_user_billed_per_request: number
   today_requests: number
   today_tokens: number
+  today_input_tokens?: number
+  today_cached_tokens?: number
+  today_cache_rate?: number
   today_account_billed: number
   today_user_billed: number
   rpm: number
   tpm: number
   avg_duration_ms: number
+  avg_first_token_ms?: number
   error_rate: number
   feature_stats: UsageFeatureStats
   model_stats: UsageModelStat[]
@@ -593,6 +634,7 @@ export interface APIKeyRow {
   quota_used: number
   expires_at?: ISODateString | null
   status?: 'active' | 'expired' | 'quota_exhausted'
+  allowed_group_ids?: number[]
   created_at: ISODateString
 }
 
@@ -602,8 +644,19 @@ export interface CreateAPIKeyRequest {
   name: string
   key?: string
   quota_limit?: number
+  quota?: number
   expires_at?: string
   expires_in_days?: number
+  allowed_group_ids?: number[]
+}
+
+export interface UpdateAPIKeyRequest {
+  name?: string
+  quota_limit?: number | null
+  quota?: number | null
+  expires_at?: string | null
+  expires_in_days?: number
+  allowed_group_ids?: number[]
 }
 
 export interface CreateAPIKeyResponse {
@@ -613,6 +666,7 @@ export interface CreateAPIKeyResponse {
   quota_limit: number
   quota_used: number
   expires_at?: ISODateString | null
+  allowed_group_ids?: number[]
 }
 
 export interface ImagePromptTemplate {
diff --git a/proxy/handler.go b/proxy/handler.go
index cceaa6e9..d8dd0737 100644
--- a/proxy/handler.go
+++ b/proxy/handler.go
@@ -353,6 +353,7 @@ func (h *Handler) resolveAPIKey(key string) (*database.APIKeyRow, bool) {
 		}, true
 	}
 	if row, ok := h.resolveAPIKeyFromRuntimeCache(key); ok {
+		h.syncAPIKeyAllowedGroups(row)
 		return row, true
 	}
 	if h.db == nil {
@@ -368,6 +369,7 @@ func (h *Handler) resolveAPIKey(key string) (*database.APIKeyRow, bool) {
 		return nil, false
 	}
 	h.setAPIKeyRuntimeCache(row)
+	h.syncAPIKeyAllowedGroups(row)
 	return row, true
 }
 
@@ -424,6 +426,13 @@ func (h *Handler) setAPIKeyRuntimeCache(row *database.APIKeyRow) {
 	}
 }
 
+func (h *Handler) syncAPIKeyAllowedGroups(row *database.APIKeyRow) {
+	if h == nil || h.store == nil || row == nil || row.ID <= 0 {
+		return
+	}
+	h.store.SetAPIKeyAllowedGroups(row.ID, row.AllowedGroupIDs)
+}
+
 // isValidKey 检查 key 是否有效（配置文件 + DB）
 func (h *Handler) isValidKey(key string) bool {
 	_, ok := h.resolveAPIKey(key)