feat(desktop): simplify provider cards in Settings → API 服务

[hqhq1025]

Summary

Cleans up the Settings → API 服务 provider list now that PR #113 has dropped modelFast and unified the API config IPC.

Before

• Each card showed provider label, masked key, "当前" badge, two-column model dropdown grid (one column empty post-refactor(desktop): unify API config IPC + drop separate fast model slot #113), inline trash icon + confirm row, and a duplicated dashed "Add provider" button at the bottom of the list.
• Non-active providers carried a model selector that didn't drive any generation.

After

• Card collapses to one header row: label + masked key + optional base URL on the left; "当前" badge OR a compact "设为当前" button + a ··· overflow menu on the right.
• Active provider: the model is rendered as a click-to-edit chip (clicking swaps in an inline NativeSelect that commits + closes on change). Non-active providers: no model selector at all.
• Overflow menu items: Test connection (active card only — wired to existing connection.testActive IPC and toasts the result), Re-enter key, Delete (with inline confirm/cancel inside the menu, replacing the always-visible trash button + confirm row).
• The duplicated dashed "+ 添加服务" button at the bottom of the list is removed; the secondary Plus button in the section header is the single entry point.
• Click-outside dismisses the overflow menu.
• New i18n keys (zh-CN + en): settings.providers.delete, testConnection, moreActions, editModel, toast.connectionOk, toast.connectionFailed. All existing keys are preserved.

Behavior changes

• Non-active providers no longer show a model selector (they cannot affect generation).
• Active model save is now immediate on <select> change instead of debounced — the chip closes back to read-only after each commit, so debouncing is unnecessary.
• "Test connection" is now reachable from the provider card (was previously only available during onboarding).
• Delete confirmation lives inside the overflow menu instead of expanding into the card row.

Constraints respected

• No IPC changes; only re-uses setProviderAndModels, setActiveProvider, connection.testActive, deleteProvider.
• No new dependencies. Only lucide-react icons (already in deps): added MoreHorizontal, KeyRound, removed unused Zap.
• All colors / spacing via packages/ui CSS variables.
• AddProviderModal cognitive complexity unchanged (still 16, was warned at 16 pre-change).
• Compatibility ✅ · Upgradeability ✅ · No bloat ✅ · Elegance ✅

Test plan

• pnpm --filter @open-codesign/desktop typecheck — clean
• pnpm --filter @open-codesign/desktop test — 337/337 pass (no count delta)
• pnpm exec biome check apps/desktop/src/renderer/src/components/Settings.tsx — only the pre-existing complexity-16 warning on AddProviderModal
• Manual smoke (reviewer): add provider → see new card layout · click "设为当前" on a non-active card · click model chip on active card and pick a different model · open ··· → Test connection / Re-enter key / Delete with confirm

[github-actions]

Findings

• [Major] Unhandled IPC failure in "Test connection" action — window.codesign.connection.testActive() is awaited without try/catch, so bridge/runtime errors become unhandled promise rejections and no user-facing error is shown, violating the no-silent-fallback rule. Evidence apps/desktop/src/renderer/src/components/Settings.tsx:658
  Suggested fix:

  async function handleTestConnection() {
    if (!window.codesign) return;
    try {
      const res = await window.codesign.connection.testActive();
      if (res.ok) {
        pushToast({ variant: 'success', title: t('settings.providers.toast.connectionOk') });
      } else {
        pushToast({
          variant: 'error',
          title: t('settings.providers.toast.connectionFailed'),
          description: res.hint || res.message,
        });
      }
    } catch (err) {
      pushToast({
        variant: 'error',
        title: t('settings.providers.toast.connectionFailed'),
        description: err instanceof Error ? err.message : t('settings.common.unknownError'),
      });
    }
  }

• [Major] Model chip can display unsaved value after failed save — handleChange updates local state and closes edit mode before persistence completes; save swallows errors and does not roll back, so UI may show a model that was not actually saved. Evidence apps/desktop/src/renderer/src/components/Settings.tsx:776
  Suggested fix:

  async function save(next: string): Promise<boolean> {
    if (!window.codesign) return false;
    try {
      const updated = await window.codesign.settings.setActiveProvider({ provider, modelPrimary: next });
      setConfig(updated);
      return true;
    } catch (err) {
      pushToast({
        variant: 'error',
        title: t('settings.providers.toast.modelSaveFailed'),
        description: err instanceof Error ? err.message : t('settings.common.unknownError'),
      });
      return false;
    }
  }
  
  function handleChange(v: string) {
    const prev = primary;
    setPrimary(v);
    setEditing(false);
    void save(v).then((ok) => {
      if (!ok) setPrimary(prev);
    });
  }

Summary

• Review mode: initial
• 2 issues found in changed lines. docs/VISION.md and docs/PRINCIPLES.md were referenced in instructions but are absent in this checkout (Not found in repo/docs).
• Residual risk: no test updates were included for the new overflow-menu connection flow or failed active-model save rollback behavior.

Testing

• Not run (automation)

open-codesign Bot

[github-actions]

testActive() is not wrapped in try/catch. If IPC throws (bridge/runtime issue), this becomes an unhandled rejection and no user-facing error is surfaced. Please catch and toast the error path.

[github-actions]

handleChange updates local primary before persistence completes, while save swallows errors. On failure the chip can show an unsaved model. Please return a success flag (or rethrow) from save and roll back primary on failure.

[github-actions]

Findings

• None.

Summary

• Review mode: follow-up after new commits
• No issues found in added/modified lines of the latest diff.
• docs/VISION.md and docs/PRINCIPLES.md: Not found in repo/docs.
• Residual risk: no Vitest/Playwright coverage was added for overflow-menu interactions and active-model edit/rollback behavior.

Testing

• Not run (automation)

open-codesign Bot