feat: add Grok (grok.com) video provider; runway nano-banana image; unify runway/grok pool policy

- grok provider: imagine text/image-to-video (media.post.create → conversations/new),
  GetGrokCreditsConfig credit query (remaining = 100 - used) + weekly reset, spoofed
  x-statsig-id (no Cloudflare clearance needed), /api/auth/session email lookup,
  6 reference images, 10 concurrent jobs/account, no token refresh (dead = dead)
- runway: nano-banana-2 image flow (Nano Banana 2); drop pre-deduct + post-success
  reconcile; out-of-credits/403 → dead (no revive); 10-ratio support
- imagine: drop post-success credit reconcile (consistent with krea)
- account gate: per-account N-concurrency (grok=10, others=1)
- admin: provider health lists all 7 providers; frontend import auto-detects Grok SSO
- docs: README (CN/EN) updated to 7 providers + Grok

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

frontend/src/components/ImportModal.vue

@@ -21,7 +21,8 @@ const detected = computed(() => {
   const leonardo = items.filter((x) => x.type === 'leonardo').length
   const krea = items.filter((x) => x.type === 'krea').length
   const imagine = items.filter((x) => x.type === 'imagine').length
-  return { total: items.length, openai, adobe, runway, leonardo, krea, imagine }
+  const grok = items.filter((x) => x.type === 'grok').length
+  return { total: items.length, openai, adobe, runway, leonardo, krea, imagine, grok }
 })
 
 function setStatus(text, err = false) {
@@ -44,6 +45,8 @@ async function doSmartImport() {
     try {
       const r = it.type === 'openai'
         ? await api('/tokens/import-chatgpt-token', jsonBody('POST', { access_token: it.value }))
+        : it.type === 'grok'
+          ? await api('/tokens/import-grok-token', jsonBody('POST', { access_token: it.value }))
         : it.type === 'runway'
           ? await api('/tokens/import-runway-token', jsonBody('POST', { access_token: it.value }))
           : it.type === 'leonardo'
@@ -94,6 +97,7 @@ async function doSmartImport() {
           <strong class="text-slate-700">Leonardo Cookie</strong>(含 better-auth)、
           <strong class="text-slate-700">Krea Cookie</strong>(含 sb-superb-auth)、
           <strong class="text-slate-700">Imagine Token</strong>(<code class="px-1 bg-slate-100 rounded">{"token","refreshToken","email","parentId"}</code>)、
+          <strong class="text-slate-700">Grok SSO</strong>(grok.com 的 <code class="px-1 bg-slate-100 rounded">sso</code> 值,仅含 session_id,自动与 ChatGPT/Runway 区分)、
           <strong class="text-slate-700">多个 JWT</strong>(换行分隔)。
           全粘进来即可，无需任何前缀。
         </p>
@@ -121,6 +125,9 @@ async function doSmartImport() {
             <span v-if="detected.imagine" class="inline-flex items-center gap-1 px-1.5 py-0.5 rounded text-teal-700 bg-teal-50 ring-1 ring-teal-200">
               Imagine · <span class="tabular-nums">{{ detected.imagine }}</span>
             </span>
+            <span v-if="detected.grok" class="inline-flex items-center gap-1 px-1.5 py-0.5 rounded text-slate-700 bg-slate-100 ring-1 ring-slate-300">
+              Grok · <span class="tabular-nums">{{ detected.grok }}</span>
+            </span>
           </template>
           <span v-else class="text-rose-600">未识别到任何 Cookie 或 JWT</span>
         </div>

frontend/src/utils/import.js

@@ -28,6 +28,16 @@ export function looksLikeRunwayJwt(s) {
   return 'sso' in claims && claims.id != null
 }
 
+// Grok website "sso" JWTs carry ONLY a session_id claim (no openai claims, no
+// runway id/sso) — that's what tells them apart from a ChatGPT/Runway JWT.
+export function looksLikeGrokJwt(s) {
+  const claims = decodeJwtPayload(s)
+  if (!claims || typeof claims !== 'object') return false
+  if (Object.keys(claims).some((k) => k.startsWith('https://api.openai.com/'))) return false
+  if ('sso' in claims || claims.id != null) return false
+  return 'session_id' in claims
+}
+
 // Leonardo cookies carry the better-auth session cookie — that's what tells them
 // apart from an Adobe cookie (both are otherwise opaque cookie strings).
 export function looksLikeLeonardoCookie(s) {
@@ -104,11 +114,15 @@ export function parseImportInput(text) {
   // treated as an Adobe cookie string.
   const lines = text.split(/\r?\n/).map((s) => s.trim()).filter(Boolean)
   return lines.map((line) => {
-    if (looksLikeJwt(line)) {
-      const value = line.replace(/^Bearer\s+/i, '')
+    // Accept a bare JWT or one with a leading `sso=` (grok cookie value form).
+    const stripped = line.replace(/^Bearer\s+/i, '').replace(/^sso=/, '')
+    if (looksLikeJwt(stripped)) {
+      const value = stripped
       return looksLikeRunwayJwt(value)
         ? { type: 'runway', value }
-        : { type: 'openai', value }
+        : looksLikeGrokJwt(value)
+          ? { type: 'grok', value }
+          : { type: 'openai', value }
     }
     return { type: cookieType(line), value: line }
   })

frontend/src/views/AccountsView.vue

@@ -35,6 +35,7 @@ const stats = computed(() => {
     total: rows.value.length,
     openai: by('openai'), adobe: by('adobe'), runway: by('runway'),
     leonardo: by('leonardo'), krea: by('krea'), imagine: by('imagine'),
+    grok: by('grok'),
   }
 })
 
@@ -135,7 +136,7 @@ async function reconcile() {
   // probed here — the pending poll just reads the store until the worker writes
   // their quota/email. OLD accounts (active) get a real live /quota probe for
   // up-to-date remaining + refresh time.
-  const quotaRows = visible.filter((r) => !r.pending && r.status === 'active' && (r.type === 'openai' || r.type === 'adobe' || r.type === 'runway' || r.type === 'leonardo' || r.type === 'krea' || r.type === 'imagine'))
+  const quotaRows = visible.filter((r) => !r.pending && r.status === 'active' && (r.type === 'openai' || r.type === 'adobe' || r.type === 'runway' || r.type === 'leonardo' || r.type === 'krea' || r.type === 'imagine' || r.type === 'grok'))
   const adobeNeedEmail = visible.filter((r) => !r.pending && r.type === 'adobe' && !r.email)
   const total = quotaRows.length + adobeNeedEmail.length
   if (total === 0) { quotaStatus.value = ''; return }
@@ -296,7 +297,7 @@ onMounted(loadAccounts)
         <div class="text-2xl font-semibold mt-1 tabular-nums">{{ stats.total }}</div>
         <div class="text-[10px] text-white/35 mt-0.5">成功/失败/限额</div>
       </div>
-      <div v-for="t in [['openai','OpenAI','text-emerald-300/80'],['adobe','Adobe','text-rose-300/80'],['runway','Runway','text-violet-300/80'],['leonardo','Leonardo','text-amber-300/80'],['krea','Krea','text-sky-300/80'],['imagine','Imagine','text-teal-300/80']]"
+      <div v-for="t in [['openai','OpenAI','text-emerald-300/80'],['adobe','Adobe','text-rose-300/80'],['runway','Runway','text-violet-300/80'],['leonardo','Leonardo','text-amber-300/80'],['krea','Krea','text-sky-300/80'],['imagine','Imagine','text-teal-300/80'],['grok','Grok','text-slate-300/80']]"
            :key="t[0]" class="card p-4">
         <div class="text-[11px] uppercase tracking-wider" :class="t[2]">{{ t[1] }}</div>
         <div class="text-2xl font-semibold mt-1 tabular-nums">
@@ -328,6 +329,9 @@ onMounted(loadAccounts)
         <button @click="setFilter(() => typeFilter = 'imagine')" class="fp" :class="typeFilter === 'imagine' && 'fp-teal'">
           <span class="w-1.5 h-1.5 rounded-full bg-teal-400"></span>Imagine
         </button>
+        <button @click="setFilter(() => typeFilter = 'grok')" class="fp" :class="typeFilter === 'grok' && 'fp-on'">
+          <span class="w-1.5 h-1.5 rounded-full bg-slate-400"></span>Grok
+        </button>
       </div>
       <div class="w-px h-5 bg-white/10"></div>
       <div class="flex items-center gap-1">
@@ -436,9 +440,9 @@ onMounted(loadAccounts)
             <td class="px-3 py-3.5 align-middle text-right text-sm tabular-nums whitespace-nowrap">
               <!-- quota column: 数字 / —  (never "未知"/"失败"/"检测中") -->
               <!-- remaining === -1 is the provider "unlimited" sentinel → show — not a scary red -1 -->
-              <span v-if="(a.type === 'openai' || a.type === 'runway' || a.type === 'leonardo' || a.type === 'krea' || a.type === 'imagine') && a.remaining != null && a.remaining !== -1"
+              <span v-if="(a.type === 'openai' || a.type === 'runway' || a.type === 'leonardo' || a.type === 'krea' || a.type === 'imagine' || a.type === 'grok') && a.remaining != null && a.remaining !== -1"
                     class="font-mono font-semibold"
-                    :class="a.remaining > 0 ? 'text-emerald-300' : 'text-rose-300'">{{ a.remaining }}</span>
+                    :class="a.remaining > 0 ? 'text-emerald-300' : 'text-rose-300'">{{ a.remaining }}{{ a.type === 'grok' ? '%' : '' }}</span>
               <span v-else class="text-white/25" :title="a._quotaError || ''">—</span>
             </td>
             <!-- reset_after -->