feat(web): token 数以 K 输入显示,已存凭证显示掩码占位(FIX-8)

- 新增 UnitInput 与 kind=tokens:上下文预算、单次 token 上限、自定义模型上下文窗口以 K 输入(允许小数),存储仍为原始 token 数;校验与提示用 K 表述;列表/详情 token 数统一 K/M 简写(formatTokens)
- 新增 SecretInput 与 kind=secret:已保存时显示「已设置 ••••••••」(有服务端掩码时带末 4 位),聚焦直接输入替换,留空保持,「清除」确认后保存生效;替换模型服务、TMDB、网页搜索、下载器、媒体服务器、浏览器服务、站点账号、Passkey、本机 Token 各处
- 统一只写凭证服务端语义:省略或空串 = 不变,null = 清除(contracts secretInput);下载器/媒体服务器新增清除;站点凭证同类更新可留空保持密码/Cookie/API Key/TOTP,TOTP 可 null 清除,不再误删 TOTP 与 UA
- contextBudget 最小值 4096→4000、contextWindow 1024→1000,便于按 K 填写
- 测试:换算与校验、SecretInput 渲染与状态、各接口留空不变/显式清除

Co-Authored-By: Claude Opus 5.5 <[email protected]>

apps/server/src/modules/browser/__tests__/browser-provider-config.test.ts

@@ -80,6 +80,9 @@ describe.skipIf(!up)("浏览器服务登记", () => {
     const p2 = await h.req(`/browser/providers/${id}/probe`, { body: {} });
     expect(p2.status).toBe(200);
     expect((p2.body.data as Loose).capabilities.upstreamVersion).toBe("1.17.0-mock");
+    // 空串 = 保持原凭据(FIX-8 只写凭证统一语义)
+    const kept = await h.req(`/browser/providers/${id}`, { method: "PATCH", body: { accessKey: "", enabled: true } });
+    expect(kept.body.data).toMatchObject({ hasAccessKey: true, secretRef: u.body.data.secretRef });
     const cleared = await h.req(`/browser/providers/${id}`, { method: "PATCH", body: { accessKey: null } });
     expect(cleared.body.data).toMatchObject({ hasAccessKey: false, secretRef: null });
     expect((await h.req(`/browser/providers/${id}`, { method: "DELETE" })).status).toBe(200);

apps/server/src/modules/browser/service.ts

@@ -39,6 +39,7 @@ import type {
   DownloadArtifact,
   NavigationBudget,
 } from "@umt/contracts";
+import { secretInput } from "@umt/contracts";
 import {
   type BrowserControlLeaseRow,
   type BrowserProviderRow,
@@ -354,8 +355,9 @@ export class BrowserService {
       .where("name", "=", body.name)
       .executeTakeFirst();
     if (exists) throw new BrowserServiceError("conflict", `浏览器服务「${body.name}」已存在`);
-    const secretRef = body.accessKey
-      ? await this.ctx.secrets.create({ purpose: "other", plaintext: body.accessKey, label: `browser:${body.name}` })
+    const accessKey = secretInput(body.accessKey);
+    const secretRef = accessKey
+      ? await this.ctx.secrets.create({ purpose: "other", plaintext: accessKey, label: `browser:${body.name}` })
       : null;
     const row = await this.ctx.db
       .insertInto("browser_provider")
@@ -374,8 +376,10 @@ export class BrowserService {
   /** 改地址 / 凭据 / 启用;accessKey = null 清除凭据。camofox-env 的地址与凭据归环境变量管,只能改启用 */
   async updateProvider(
     id: string,
-    body: { baseUrl?: string | undefined; accessKey?: string | null | undefined; enabled?: boolean | undefined },
+    input: { baseUrl?: string | undefined; accessKey?: string | null | undefined; enabled?: boolean | undefined },
   ): Promise<BrowserProviderView> {
+    // 只写凭证统一语义:省略或空串 = 不变,null = 清除
+    const body = { ...input, accessKey: secretInput(input.accessKey) };
     const row = await this.ctx.db.selectFrom("browser_provider").selectAll().where("id", "=", id).executeTakeFirst();
     if (!row) throw new BrowserServiceError("not_found", "浏览器服务不存在");
     const changesAddr = body.baseUrl !== undefined && body.baseUrl !== row.base_url;