AI/ML API as a cloud provider preset (re-ported onto 1.5.6)

.dockerignore

@@ -69,9 +69,6 @@ docs/
 
 # Scripts
 *.sh
-!start_autoclip.sh
-!stop_autoclip.sh
-!status_autoclip.sh
 # Container entrypoints are COPY'd by Dockerfile / Dockerfile.dev; excluding
 # them makes `docker build` fail with "/docker-entrypoint.sh: not found".
 !docker-entrypoint.sh
@@ -110,3 +107,5 @@ dump.rdb
 
 # PID files
 *.pid
+*.pid.json
+*.pid.tmp

.github/DISCUSSION_TEMPLATE/ai-models.yml

@@ -3,13 +3,13 @@ body:
   - type: markdown
     attributes:
       value: |
-        说明你要的模型或供应商。AutoClip 已支持 OpenAI 兼容接口、Gemini、通义千问、硅基流动，以及本机的 Ollama / LM Studio。
+        说明你要的模型或供应商，以及用途：分析、视觉、封面或字幕转写。当前支持与配置以[模型指南](https://github.com/zhouxiaoka/autoclip/blob/main/docs/AI_MODEL_CONFIGURATION.md)和设置页为准；本地转写包括 Whisper 与 SenseVoice。
         只是「名单里没有这一项」、但兼容接口已经能填的，请在正文里写明，避免重复开需求。
   - type: input
     id: model
     attributes:
       label: 模型或供应商
-      placeholder: "Gemini 2.5 / Claude / Qwen 某个具体型号"
+      placeholder: "服务商与具体型号；本地转写注明模型名称"
     validations:
       required: true
   - type: dropdown
@@ -27,6 +27,6 @@ body:
     id: detail
     attributes:
       label: 补充
-      description: 报错请打码，不要贴 API Key。
+      description: 报错请先脱敏，移除 API Key、Cookie 和私人素材内容；可复现故障请使用 Bug 模板。
     validations:
       required: false

.github/DISCUSSION_TEMPLATE/announcements.yml

@@ -8,7 +8,7 @@ body:
     id: version
     attributes:
       label: 版本
-      placeholder: "v1.3.0"
+      placeholder: "实际发布版本 vX.Y.Z；未发布的源码更新请注明"
     validations:
       required: true
   - type: textarea

.github/DISCUSSION_TEMPLATE/q-a.yml

@@ -21,6 +21,6 @@ body:
     id: env
     attributes:
       label: 版本 / 平台 / 模型
-      placeholder: "v1.2.1 · Windows · 通义千问 qwen-plus"
+      placeholder: "实际版本或 commit SHA · 平台 · 相关服务商与模型"
     validations:
       required: false

.github/DISCUSSION_TEMPLATE/show-and-tell.yml

@@ -0,0 +1,52 @@
+title: "成片投稿："
+body:
+  - type: markdown
+    attributes:
+      value: |
+        用 AutoClip 做出了好片子？发在这里。维护者会挑选收录到[官网案例库](https://zhouxiaoka.github.io/autoclip_intro/cases/)，并署上你的名字。
+        收录标准：AutoClip 生成、没有在其他软件里再剪辑（在 AutoClip 里改标题、换模板可以）；原片是公开视频；你有权发布这些成片。
+  - type: input
+    id: source
+    attributes:
+      label: 原片链接
+      placeholder: "https://www.youtube.com/watch?v=… 或 B 站链接"
+    validations:
+      required: true
+  - type: checkboxes
+    id: platforms
+    attributes:
+      label: 成片平台
+      options:
+        - label: 抖音
+        - label: 小红书
+        - label: B 站
+        - label: TikTok
+        - label: Instagram Reels
+        - label: YouTube Shorts
+        - label: YouTube
+  - type: textarea
+    id: clips
+    attributes:
+      label: 成片
+      description: 附上成片 MP4 或可访问的成片链接；有发布包的，把封面和发布文案一起附上。
+    validations:
+      required: true
+  - type: input
+    id: setup
+    attributes:
+      label: 版本与模型
+      placeholder: "例如 v1.5.0 · qwen-plus · macOS"
+    validations:
+      required: true
+  - type: input
+    id: run
+    attributes:
+      label: 用时与费用（可选）
+      placeholder: "例如 原片 1h20m，出片 9 分钟，模型费用约 ¥0.1"
+  - type: checkboxes
+    id: consent
+    attributes:
+      label: 授权
+      options:
+        - label: 我同意 AutoClip 在官网和 README 展示这些成片，并署名链接到我的 GitHub
+          required: true

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -24,16 +24,17 @@ body:
     id: version
     attributes:
       label: AutoClip 版本 / Version
-      description: 设置页底部或「关于」里可见 / Shown in Settings → About
-      placeholder: "v1.2.1"
+      description: 填写实际安装版本；源码用户附提交 SHA / Installed version, or commit SHA for source builds
+      placeholder: "vX.Y.Z；源码附 commit SHA / include commit SHA for source"
     validations:
       required: true
 
   - type: input
     id: model
     attributes:
-      label: 使用的模型提供商 / LLM provider
-      placeholder: "例如 通义千问 qwen-plus / OpenAI gpt-4o / 硅基流动 / 自定义 OpenAI 兼容"
+      label: 相关模型 / Relevant models
+      description: 分析服务与具体型号；转写问题附 Whisper / SenseVoice 型号。尚未配置或不相关可注明 / Provider and model; include transcription model when relevant
+      placeholder: "分析：服务商 + 型号；转写：Whisper / SenseVoice / 不相关"
     validations:
       required: true
 
@@ -66,5 +67,5 @@ body:
     attributes:
       label: 日志 / 截图 / Logs or screenshots
       description: |
-        桌面版日志位置：macOS `~/Library/Application Support/AutoClip/logs`，Windows `%APPDATA%\AutoClip\logs`。粘贴最后 50 行即可，注意删掉 API Key。
+        桌面版日志位置：macOS `~/Library/Application Support/AutoClip/logs`，Windows `%APPDATA%\AutoClip\logs`。粘贴失败前后相关日志即可，删除 API Key、Cookie、邮箱、私人路径与素材内容。Docker/源码用户请注明运行方式与日志来源。安全问题按 SECURITY.md 私下联系。
       render: text

.github/ISSUE_TEMPLATE/config.yml

@@ -9,3 +9,6 @@ contact_links:
   - name: 🙋 使用提问 / Q&A
     url: https://github.com/zhouxiaoka/autoclip/discussions/categories/q-a
     about: 怎么用、模型怎么选、切片效果怎么调。能复现的故障仍开 Issue。
+  - name: 🔒 安全问题 / Security
+    url: https://github.com/zhouxiaoka/autoclip/blob/main/SECURITY.md
+    about: 漏洞或凭据泄露请按安全政策私下联系，不公开敏感细节 / Follow the security policy for private contact.

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,11 @@
+## 问题与结果
+
+<!-- 描述触发条件、原行为和修复后的行为。关联 Issue 或讨论链接（如有）。 -->
+
+## 验证
+
+<!-- 写出实际运行的检查、平台和结果；未覆盖的步骤也请说明。纯文档改动可说明命令与链接核对结果。 -->
+
+## 兼容或迁移说明（如有）
+
+<!-- 涉及数据、配置、依赖、安装或平台行为时说明影响；否则可删除此节。 -->

.github/workflows/ci.yml

@@ -1,13 +1,37 @@
 name: CI
 
 on:
+  workflow_call:
   pull_request:
   push:
     branches:
       - main
       - master
 
+permissions:
+  contents: read
+
 jobs:
+  windows-runtime:
+    uses: ./.github/workflows/windows-asyncio.yml
+
+  contracts:
+    name: Release contract checks
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+      - name: Versions, translations and acceptance gate regressions
+        run: python scripts/quality_gate.py --group contracts --report quality/contracts.json
+      - uses: actions/upload-artifact@v4
+        if: always()
+        with:
+          name: quality-contracts
+          path: quality/contracts.json
+          if-no-files-found: error
+
   backend:
     name: Backend tests
     runs-on: ubuntu-latest
@@ -21,27 +45,74 @@ jobs:
           python-version: "3.11"
           cache: pip
 
+      - name: Install video test runtime
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y ffmpeg fonts-noto-cjk
+          ffmpeg -version
+          ffprobe -version
+
       - name: Install dependencies
         run: |
           python -m pip install --upgrade pip
           pip install -r requirements.txt
-          pip install ruff
+          pip install -r requirements-test.txt
 
-      - name: Lint backend (ruff)
+      - name: Report existing Python style debt (advisory)
         continue-on-error: true
         run: ruff check backend
 
-      - name: Run tests
+      - name: Blocking correctness lint, all backend tests and editorial fixtures
         env:
           DASHSCOPE_API_KEY: test_api_key
           LOG_FORMAT: "%(asctime)s - %(name)s - %(levelname)s - %(message)s"
-        run: python -m pytest backend/tests -q
+        run: python scripts/quality_gate.py --group backend --report quality/backend.json
+
+      - uses: actions/upload-artifact@v4
+        if: always()
+        with:
+          name: quality-backend
+          path: quality/backend.json
+          if-no-files-found: error
+
+      - name: Installed wheel portrait framing smoke
+        run: |
+          pip install 'opencv-python-headless>=4.10'
+          pip wheel --no-deps --wheel-dir /tmp/autoclip-wheel .
+          python scripts/verify_python_wheel.py /tmp/autoclip-wheel/autoclip-*-py3-none-any.whl --video backend/assets/example/source.mp4 --report /tmp/autoclip-wheel/portrait-report.json
 
       - name: Community board and feedback ingest checks
         run: |
           python3 scripts/test_community_board.py
           python3 scripts/test_ingest_feedback.py
 
+      - name: Set up Node for source launcher
+        uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+      - name: Source launcher and scoped shutdown smoke
+        run: |
+          python -m venv --system-site-packages venv
+          (cd frontend && npm ci)
+          cp env.example .env
+          docker run -d --name autoclip-source-redis -p 6379:6379 redis:7-alpine
+          for i in $(seq 1 30); do
+            if docker exec autoclip-source-redis redis-cli ping; then break; fi
+            sleep 1
+          done
+          ./quick_start.sh
+          ./status_autoclip.sh
+          ./stop_autoclip.sh
+          if ./status_autoclip.sh; then echo 'Stopped services incorrectly reported healthy'; exit 1; fi
+      - name: Source runtime logs on failure
+        if: failure()
+        run: cat logs/backend.log logs/frontend.log logs/celery.log 2>/dev/null || true
+      - name: Clean up source smoke
+        if: always()
+        run: |
+          ./stop_autoclip.sh || true
+          docker rm -f autoclip-source-redis || true
+
   frontend:
     name: Frontend checks
     runs-on: ubuntu-latest
@@ -62,29 +133,18 @@ jobs:
       - name: Install dependencies
         run: npm ci
 
-      - name: Lint
-        run: npm run lint
-
-      - name: Typecheck
-        run: npm run typecheck
-
-      - name: Analytics contract tests
-        run: node --test tests/analytics.test.cjs
-
-      - name: Sentry build configuration tests
-        run: node --test tests/sentry-build.test.cjs tests/desktop.test.cjs
-
-      - name: Internationalization checks
-        run: node --test tests/i18n.test.cjs
-
-      - name: Publish UI helpers
-        run: node --test tests/upload-post-ui.test.cjs
-
-      - name: Feedback draft checks
-        run: node --test tests/feedback-draft.test.cjs
-
-      - name: Build
-        run: npm run build
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+      - name: Blocking lint, types, tests and production build
+        working-directory: .
+        run: python scripts/quality_gate.py --group frontend --report quality/frontend.json
+      - uses: actions/upload-artifact@v4
+        if: always()
+        with:
+          name: quality-frontend
+          path: quality/frontend.json
+          if-no-files-found: error
 
   # Guards the README's recommended `docker compose` path, which was broken for months
   # without anything in CI noticing (issue #88): the image failed to build, the worker
@@ -166,3 +226,41 @@ jobs:
       - name: Tear down
         if: always()
         run: docker compose down -v --remove-orphans
+
+  docker-dev-smoke:
+    name: Docker development compose smoke
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    steps:
+      - uses: actions/checkout@v4
+      - name: Build development image
+        run: docker compose -f docker-compose.dev.yml build autoclip-dev
+      - name: Start development services through compatibility entrypoint
+        run: ./docker-start.sh dev --no-build
+      - name: Wait for both development servers and the worker
+        run: |
+          for i in $(seq 1 90); do
+            if curl -fsS http://localhost:8000/api/v1/health/ >/dev/null 2>&1 && curl -fsS http://localhost:3000/ >/dev/null 2>&1; then break; fi
+            sleep 3
+          done
+          curl -fsS http://localhost:8000/api/v1/health/
+          curl -fsS http://localhost:3000/ >/dev/null
+          for i in $(seq 1 20); do
+            out=$(docker compose -f docker-compose.dev.yml exec -T celery-worker-dev celery -A backend.core.celery_app inspect --json --timeout 5 active_queues 2>/dev/null || true)
+            if echo "$out" | grep -q '"name": "processing"'; then break; fi
+            sleep 3
+          done
+          for q in celery processing video notification upload; do
+            echo "$out" | grep -q "\"name\": \"$q\""
+          done
+          ./docker-status.sh dev
+      - name: Stop through compatibility entrypoint
+        run: |
+          ./docker-stop.sh dev
+          if ./docker-status.sh dev; then echo 'Stopped containers incorrectly reported healthy'; exit 1; fi
+      - name: Dump logs on failure
+        if: failure()
+        run: docker compose -f docker-compose.dev.yml logs --no-color
+      - name: Tear down CI resources
+        if: always()
+        run: docker compose -f docker-compose.dev.yml down -v --remove-orphans