feat(web): token 数以 K 输入显示,已存凭证显示掩码占位(FIX-8)

- 新增 UnitInput 与 kind=tokens:上下文预算、单次 token 上限、自定义模型上下文窗口以 K 输入(允许小数),存储仍为原始 token 数;校验与提示用 K 表述;列表/详情 token 数统一 K/M 简写(formatTokens)
- 新增 SecretInput 与 kind=secret:已保存时显示「已设置 ••••••••」(有服务端掩码时带末 4 位),聚焦直接输入替换,留空保持,「清除」确认后保存生效;替换模型服务、TMDB、网页搜索、下载器、媒体服务器、浏览器服务、站点账号、Passkey、本机 Token 各处
- 统一只写凭证服务端语义:省略或空串 = 不变,null = 清除(contracts secretInput);下载器/媒体服务器新增清除;站点凭证同类更新可留空保持密码/Cookie/API Key/TOTP,TOTP 可 null 清除,不再误删 TOTP 与 UA
- contextBudget 最小值 4096→4000、contextWindow 1024→1000,便于按 K 填写
- 测试:换算与校验、SecretInput 渲染与状态、各接口留空不变/显式清除

Co-Authored-By: Claude Opus 5.5 <[email protected]>

apps/server/src/modules/pi/service.ts

@@ -7,7 +7,7 @@ import {
   type UpstreamCredentialStore,
   type UpstreamSpec,
 } from "@umt/agent";
-import type { Actor, PiUpstream, PiUpstreamCreate, PiUpstreamUpdate } from "@umt/contracts";
+import { type Actor, type PiUpstream, type PiUpstreamCreate, type PiUpstreamUpdate, secretInput } from "@umt/contracts";
 import type { PiUpstreamRow } from "@umt/db";
 import { ApiException } from "../../http/errors.ts";
 import type { ServerContext } from "../types.ts";
@@ -91,8 +91,10 @@ export async function listUpstreams(
 export async function createUpstream(
   ctx: ServerContext,
   actor: Actor | undefined,
-  body: PiUpstreamCreate,
+  input: PiUpstreamCreate,
 ): Promise<PiUpstream> {
+  // 只写凭证统一语义:空串 = 不设置
+  const body = { ...input, apiKey: secretInput(input.apiKey) ?? undefined };
   validateShape(body);
   const id = randomUUID();
   let secretRef: string | null = null;
@@ -132,9 +134,13 @@ export async function updateUpstream(
   ctx: ServerContext,
   actor: Actor | undefined,
   row: PiUpstreamRow,
-  body: PiUpstreamUpdate,
+  input: PiUpstreamUpdate,
   onCredentialDropped: () => void,
 ): Promise<PiUpstream> {
+  // 只写凭证统一语义:省略或空串 = 不变,null = 清除
+  const { apiKey: rawKey, ...rest } = input;
+  const apiKey = secretInput(rawKey);
+  const body: PiUpstreamUpdate = apiKey === undefined ? rest : { ...rest, apiKey };
   const authKind = body.authKind ?? row.auth_kind;
   const baseUrl = body.baseUrl !== undefined ? body.baseUrl : authKind === "oauth" ? null : row.base_url;
   const defaultModel = body.defaultModel !== undefined ? body.defaultModel : row.default_model;