Merge remote-tracking branch 'origin/master' into gitea/feature/end

Resolved conflicts taking origin/master (v0.5.55) as canonical, with local
features re-applied:
- runtime log level (LOG_LEVEL env + dashboard Settings → Logging, applied
  immediately and persisted across restarts)
- free/noAuth provider enable/disable toggle via providerStrategies.enabled
- parallel model testing (Test All Models / Test Selected Keys)

tests/unit/cursor-models.test.js

@@ -0,0 +1,103 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import {
+  clearCursorModelCache,
+  parseCursorUsableModels,
+  resolveCursorModels,
+} from "../../open-sse/services/cursorModels.js";
+
+const originalFetch = global.fetch;
+
+function varint(value) {
+  const bytes = [];
+  while (value >= 0x80) {
+    bytes.push((value & 0x7f) | 0x80);
+    value >>>= 7;
+  }
+  bytes.push(value);
+  return Uint8Array.from(bytes);
+}
+
+function field(fieldNumber, value) {
+  return Uint8Array.from([(fieldNumber << 3) | 2, ...varint(value.length), ...value]);
+}
+
+function text(value) {
+  return new TextEncoder().encode(value);
+}
+
+function concat(...parts) {
+  const size = parts.reduce((sum, part) => sum + part.length, 0);
+  const result = new Uint8Array(size);
+  let offset = 0;
+  for (const part of parts) {
+    result.set(part, offset);
+    offset += part.length;
+  }
+  return result;
+}
+
+function model(id, name) {
+  return field(1, concat(field(1, text(id)), field(4, text(name))));
+}
+
+describe("Cursor live model catalog", () => {
+  beforeEach(() => {
+    clearCursorModelCache();
+  });
+
+  afterEach(() => {
+    global.fetch = originalFetch;
+    clearCursorModelCache();
+  });
+
+  it("decodes the GetUsableModels protobuf response", () => {
+    const payload = concat(
+      model("default", "Auto"),
+      model("gpt-5.3-codex", "GPT 5.3 Codex"),
+      model("gpt-5.3-codex", "Duplicate"),
+    );
+
+    expect(parseCursorUsableModels(payload)).toEqual([
+      { id: "default", name: "Auto" },
+      { id: "gpt-5.3-codex", name: "GPT 5.3 Codex" },
+    ]);
+  });
+
+  it("fetches the account-specific catalog and caches it", async () => {
+    const payload = concat(model("claude-4.6-opus", "Claude 4.6 Opus"));
+    global.fetch = vi.fn().mockResolvedValue(new Response(payload, { status: 200 }));
+    const credentials = {
+      accessToken: "cursor-token",
+      providerSpecificData: { machineId: "machine-id" },
+    };
+
+    await expect(resolveCursorModels(credentials)).resolves.toEqual({
+      models: [{ id: "claude-4.6-opus", name: "Claude 4.6 Opus" }],
+    });
+    await expect(resolveCursorModels(credentials)).resolves.toEqual({
+      models: [{ id: "claude-4.6-opus", name: "Claude 4.6 Opus" }],
+    });
+
+    expect(global.fetch).toHaveBeenCalledTimes(1);
+    expect(global.fetch).toHaveBeenCalledWith(
+      "https://agent.api5.cursor.sh/agent.v1.AgentService/GetUsableModels",
+      expect.objectContaining({
+        method: "POST",
+        body: expect.any(Uint8Array),
+        headers: expect.objectContaining({
+          "content-type": "application/proto",
+          accept: "application/proto",
+        }),
+      }),
+    );
+  });
+
+  it("fails open when the Cursor catalog request fails", async () => {
+    global.fetch = vi.fn().mockResolvedValue(new Response("no", { status: 403 }));
+
+    await expect(resolveCursorModels({
+      accessToken: "cursor-token",
+      providerSpecificData: { machineId: "machine-id" },
+    })).resolves.toBeNull();
+  });
+});