release: bump version to 0.62.0

docs/technical/en/agents-aiprovider.md

@@ -101,6 +101,19 @@ The AI settings page uses:
 
 These endpoints require an authenticated user. The `secrets` endpoint is only used when the settings page reveals a key or token; hiding the field restores the masked preview.
 
+Admin Next keeps the AI page aligned with the legacy information architecture:
+
+- `Model Providers`
+  - Manages provider, wire adapter, default model, LLM API key, proxy URL, proxy token, model refresh, set-as-default, and lightweight connectivity testing.
+- `Tool Calling`
+  - Manages tools such as WebSearch and OCR. Each tool first selects a provider, then edits that provider's API, key, and advanced parameters.
+- `Prompts`
+  - Edits system/user prompts by prompt group and task key. Save and reset only affect the current task.
+- `Playground`
+  - Runs real conversations with the active provider and prompt configuration. AI responses are rendered as Markdown.
+
+Save, set-as-default, and connectivity testing are separate responsibilities: save only persists the form, set-as-default only changes the active provider/tool, and connectivity testing only validates the current draft. It must not implicitly save or switch defaults.
+
 The `ai-prompts` endpoints back the Prompts tab in AI settings. Shipped defaults come from versioned backend resources, while business code references stable task keys. The API stores only operator overrides. Resetting a prompt removes the override and falls back to the current shipped default.
 
 ### Prompt Boundary
@@ -259,6 +272,34 @@ Each provider has its own key slot. Resolution order is:
 
 `.env` is only a fallback. After the settings page saves successfully, or after the connection test succeeds, PostgreSQL becomes the global default source.
 
+Admin Next must compute key status per provider or tool:
+
+- If the database has a key for the current provider/tool, show `configured`.
+- If the database has no key but the fallback provider, model, or tool matches the current item, show the fallback masked preview.
+- If neither database nor matching fallback exists, show `not configured`; a generic `.env` key for another provider must not make this item appear configured.
+- Masking keeps the prefix before the first `-`, for example `sk-********`. Plaintext reveal is only available inside the authorized configuration page.
+
+Tool keys follow the same rule. WebSearch and OCR must match the current tool and provider before they can use fallback credentials.
+
+### Lightweight Connectivity Testing
+
+The Admin Next plug button performs a lightweight connectivity check and does not save configuration. Common API-platform practice is two-tiered:
+
+- Check a provider catalog or low-cost endpoint to validate base URL, authentication, and model reachability.
+- Send full model requests only when the user explicitly runs Playground or a business task.
+
+Connectivity results should be explicit:
+
+- `ok`: authentication, route, and model catalog are usable.
+- `warning`: service is reachable, but the current model is missing from the catalog or capability metadata is incomplete.
+- `error`: authentication, network, protocol, or model lookup failed.
+
+Toast titles must match the result; failures must not be titled as a successful connection.
+
+### OpenCode Go Routing Model
+
+Subscription channels such as OpenCode Go should not be handled by hard-coded frontend model sets. Prefer provider catalog or backend capability discovery that records per-model capabilities such as `chat_completions`, `anthropic_messages`, `models_endpoint`, and whether a subscription key is required. The frontend should display capabilities; the backend should map provider, base URL, model, and adapter into the real request.
+
 #### Settings Page Behavior
 
 - The Provider select controls the global default provider.