Import links v2: per-service parameters, grouped import page, builder and docs

[fylorn]

Website side of import link v2. Do not merge before the ThinkWatch Lite 2026.10.16 and ThinkWatch Enterprise releases.

Import page and link builder

• src/lib/import-link.ts validates the v2 rules: the envelope (8192 characters, strict percent-decoding, each parameter once, no empty values, no $ { }, control or invisible characters), and every parameter only where the New upstream dialog shows its field for the chosen service and authentication method. The per-service table mirrors Lite's presets (SERVICE_RULES, fieldsFor): own addresses and fixed protocols may be repeated but not changed, Z.ai site against url, Bedrock region against a standard address, OAuth and AWS key requirements, header deny list, specs and prices encodings, price sheet only with per-token billing. Without service, the service is recognized from url by host, standard Bedrock host or port 11434, else custom.
• /import shows the receiving hosts first (token endpoint host too when different; an account sign-in shows the account instead), then the settings in the dialog's groups: Service, Connection (Account), Advanced settings, Models, Billing. A link that uses v2 parameters says it needs Lite 2026.10.16 or later. An unknown parameter shows that a newer ThinkWatch Lite is needed and still offers to open the link, passing the parameter on re-encoded. Proxy, AWS profile, aliases, routes, default, weight, disabled and the checking-only access token are rejected. The privacy properties are unchanged: fragment only, removed from the address bar, no analytics or third-party scripts, textContent only, one navigation target.
• The link builder at the end of the Import links page asks what the dialog asks for each service and authentication method, and leaves out service when the address alone gives it, so a plain relay link still opens in earlier versions.

Docs

• Import links (en, zh-CN) rewritten for v2: parameters grouped like the dialog, a by-service table, encodings for headers, specs and prices, limits, what the app does, links from a newer version, what a link can never set and why, examples (relay with headers, concurrency, models and prices; Bedrock with access keys; ThinkWatch Enterprise gateway; ChatGPT account; a v1 link).
• Lite features and the comparison page updated where they describe import links.
• Enterprise: the Add to ThinkWatch Lite button (key created, rotated, first-run, Configuration Guide tab; Lite 2026.10.16 or later), the Configuration Guide path corrected to /guide, and GET /v1/models listing only the models the calling key may use.

Verification

• pnpm build passes; tsc --noEmit passes for the library and the two page scripts.
• The validator was exercised with a node test suite (v1 links, envelope, every service and auth method, headers, specs, prices, unknown parameters, round trip). The repository has no test runner, so it is not committed.
• Headless Chromium against the built site: the five documented examples and several invalid links on /import and /zh-CN/import (hosts, groups, update notice, key toggle, the app link the button opens), and the builder for custom, Bedrock, ChatGPT, ThinkWatch and Ollama.

🤖 Generated with Claude Code