fix(settings): address Codex bot review on CPA auto-discovery

- Don't auto-probe on API key changes. Key is only sent when user
  explicitly clicks "Test connection" or when baseUrl/wire changes
  (where they already implicitly authorize a probe by editing the
  endpoint). Avoids leaking keys to typo'd or malicious hosts.
- Use a monotonic seq counter to discard stale async responses.
  Fixes race where a slow older probe could overwrite newer state
  and default-model selection.

Signed-off-by: hqhq1025 <1506751656@qq.com>

Author: hqhq1025

apps/desktop/src/renderer/src/components/AddCustomProviderModal.tsx

@@ -108,6 +108,7 @@ export function AddCustomProviderModal({
   const userPickedModel = useRef(false);
 
   const debounceTimer = useRef<ReturnType<typeof setTimeout> | null>(null);
+  const discoverySeq = useRef(0);
 
   function scheduleDiscovery(currentBaseUrl: string, currentApiKey: string, currentWire: WireApi) {
     if (debounceTimer.current !== null) clearTimeout(debounceTimer.current);
@@ -122,13 +123,15 @@ export function AddCustomProviderModal({
 
   async function runDiscovery(currentBaseUrl: string, currentApiKey: string, currentWire: WireApi) {
     if (!window.codesign?.config) return;
+    const seq = ++discoverySeq.current;
     setDiscovery({ kind: 'discovering' });
     try {
       const res = await window.codesign.config.testEndpoint({
         wire: currentWire,
         baseUrl: currentBaseUrl.trim(),
         apiKey: currentApiKey.trim(),
       });
+      if (seq !== discoverySeq.current) return;
       if (res.ok && res.models.length > 0) {
         setDiscovery({ kind: 'found', models: res.models });
         if (!userPickedModel.current) {
@@ -139,7 +142,7 @@ export function AddCustomProviderModal({
         setDiscovery({ kind: 'failed' });
       }
     } catch {
-      setDiscovery({ kind: 'failed' });
+      if (seq === discoverySeq.current) setDiscovery({ kind: 'failed' });
     }
   }
 
@@ -152,7 +155,6 @@ export function AddCustomProviderModal({
 
   function handleApiKeyChange(v: string) {
     setApiKey(v);
-    scheduleDiscovery(baseUrl, v, wire);
   }
 
   function handleWireChange(v: WireApi) {