Settings, System, Models: switch how a self-hosted install calls Claude, and show when an update needs model access - #230

Summary

The dashboard side of switching a self-hosted install's model provider at any time, and of the model check before an update (CoderHelm/coderhelm-platform#318). Settings, System gets a Models section. Settings, System and Setup show "Update to vX needs your action" when the next release calls a model this install can't call yet.

Changes

• Models section (components/models-section.tsx, Settings, System):
  • Shows the provider in force and where it came from: the install config, or changed here by whom and when.
  • Lets you pick Claude on Amazon Bedrock (inference profile prefix; an exact Bedrock id per model under Advanced) or Anthropic API keys (each team's own key, as before).
  • Check and switch saves only when every model the release calls answers a test call. Check access checks without saving.
  • A refusal lists each model with the fix in one sentence and the console link, plus Check again.
  • Says plainly that a person accepts model terms and fills in the use case form in the AWS console; Coderhelm only checks.
• Update needs your action: a banner on System and Setup when the next release's model check refused a model. It shows each model's fix and link and has Check again. There is no override for a model the release calls. Skip this check appears only when the updater marks the failure skippable. While the release's signature is still being checked, a neutral "Checking vX" notice shows instead.
• Update now shows the updater's refusal (with its model check) instead of failing silently. History shows a skipped-check note.
• API types: SystemModels, ModelAccess, ModelCheck, getSystemModels, checkSystemModels, setSystemModels, checkUpdateModels, and updateNow(version, skipCheck).
• Install guide Models step: "You can change this later in Settings, System."

Verification

• npm run lint, UI lint, npm run typecheck, npm run check:openapi, npm run build; docs typecheck.
• New e2e/models-switch.spec.ts at 1440 and 390 px covers a switch that succeeds, a switch refused with its fix (then Check again), and an update blocked on System and Setup (no Skip, Update now disabled, Check again clears it). It also covers the pending signature check. No sideways scroll; screenshots reviewed.
• Full Playwright suite (static build): everything passes. Five URL-dependent specs failed once only because the build's API port didn't match the test port; they pass with matching ports, and also pass on main.