feat: 添加 OpenNexus 认证 Core 与 Stronghold 基础能力

frontend/src/features/settings/CredentialVaultSettings.vue

@@ -0,0 +1,68 @@
+<script setup lang="ts">
+import { onMounted, ref } from 'vue'
+import { hostInvoke } from '@/services/platform/desktop'
+import { t } from '@/i18n'
+
+const locked = ref(true)
+const busy = ref(false)
+const password = ref('')
+const confirmation = ref('')
+const message = ref('')
+async function refresh() {
+  const state = await hostInvoke<{ locked: boolean }>('credentials_status')
+  locked.value = state.locked
+}
+async function importLegacy() {
+  busy.value = true; message.value = ''
+  try {
+    const count = await hostInvoke<number | null>('credentials_import')
+    if (count !== null) message.value = t(`已迁移并验证 ${count} 条凭据；旧文件仍保留。`, `Imported and verified ${count} credentials. Legacy files are retained.`)
+  } catch (error) { message.value = error instanceof Error ? error.message : 'MIGRATION_FAILED' }
+  finally { busy.value = false }
+}
+async function act(action: 'unlock' | 'lock' | 'change_password') {
+  if (busy.value) return
+  message.value = ''
+  if (action === 'change_password' && password.value !== confirmation.value) {
+    message.value = t('两次口令不一致。', 'The passwords do not match.'); return
+  }
+  busy.value = true
+  const value = password.value
+  password.value = ''; confirmation.value = ''
+  try {
+    await hostInvoke(`credentials_${action}`, action === 'lock' ? undefined : { password: value })
+    await refresh()
+    message.value = action === 'change_password' ? t('口令已更新。', 'Password updated.') : ''
+  } catch (error) { message.value = error instanceof Error ? error.message : 'CREDENTIAL_STORE_FAILED' }
+  finally { busy.value = false }
+}
+onMounted(() => refresh().catch(error => { message.value = String(error) }))
+</script>
+
+<template>
+  <section class="panel settings-section credential-vault" aria-labelledby="credential-vault-title">
+    <h2 id="credential-vault-title">{{ t('设备凭据保险库', 'Device credential vault') }}</h2>
+    <p>{{ locked ? t('已锁定：使用模型密钥前请解锁。首次解锁将创建本机保险库。', 'Locked: unlock before using provider credentials. The first unlock creates this device’s vault.') : t('已解锁：密钥仅由本机受控调用使用。', 'Unlocked: credentials are available to authorized local calls.') }}</p>
+    <p class="subtle">{{ t('口令至少12个字符。遗失口令后需恢复备份或重新配置密钥；笔记仍可使用。', 'Use at least 12 characters. A lost password requires a backup or re-entering credentials; notes remain available.') }}</p>
+    <form @submit.prevent="act(locked ? 'unlock' : 'change_password')">
+      <label>{{ locked ? t('解锁口令', 'Vault password') : t('新口令', 'New password') }}
+        <input v-model="password" type="password" minlength="12" maxlength="1024" required autocomplete="off" :disabled="busy" />
+      </label>
+      <label v-if="!locked">{{ t('确认新口令', 'Confirm new password') }}
+        <input v-model="confirmation" type="password" minlength="12" maxlength="1024" required autocomplete="off" :disabled="busy" />
+      </label>
+      <div class="inline-actions">
+        <button class="button-primary" type="submit" :disabled="busy">{{ busy ? t('处理中…', 'Working…') : locked ? t('解锁', 'Unlock') : t('更改口令', 'Change password') }}</button>
+        <button v-if="!locked" class="button-secondary" type="button" :disabled="busy" @click="act('lock')">{{ t('立即锁定', 'Lock now') }}</button>
+        <button v-if="!locked" class="button-secondary" type="button" :disabled="busy" @click="importLegacy">{{ t('迁移旧凭据…', 'Import legacy credentials…') }}</button>
+      </div>
+    </form>
+    <p v-if="message" role="status">{{ message }}</p>
+  </section>
+</template>
+
+<style scoped>
+.credential-vault form { display: grid; gap: 12px; max-width: 480px; }
+.credential-vault label { display: grid; gap: 6px; }
+.credential-vault input { color: var(--text-primary); background: var(--bg-primary); border: 1px solid var(--border-color); border-radius: 6px; padding: 8px; }
+</style>

frontend/src/features/settings/SettingsView.vue

@@ -12,6 +12,8 @@ import ProviderLogo from './ProviderLogo.vue'
 import ModelRoutingSettings from './ModelRoutingSettings.vue'
 import LocalModelSettings from './LocalModelSettings.vue'
 import UsageCard from './UsageCard.vue'
+import CredentialVaultSettings from './CredentialVaultSettings.vue'
+import { isDesktop } from '@/services/platform/desktop'
 import { useProviderStore } from '@/stores/provider'
 import { useSettingsStore } from '@/stores/settings'
 import { useThemeStore } from '@/stores/theme'
@@ -85,6 +87,7 @@ async function chooseDefaultModel(provider: ProviderConfig, event: Event) {
 
     <section v-if="activeSection === 'general'" class="panel settings-section"><div class="setting-row"><span><strong>{{ t('全局人设', 'Global persona') }}</strong><small>{{ t('统一设置所有 AI 对话和智能体的系统人设与对话示例', 'System persona and examples for all AI chats and agents') }}</small></span><button class="button-secondary" @click="showPersona = true">{{ t('编辑人设与头像', 'Edit persona and avatars') }}</button></div></section>
     <ChatPersonaDialog v-if="showPersona" @close="showPersona = false" />
+    <CredentialVaultSettings v-if="activeSection === 'general' && isDesktop()" />
     <div v-if="activeSection === 'general'" class="panel settings-section"><h2>{{ t('通用', 'General') }}</h2><label class="setting-row"><span><strong>{{ t('恢复上次 Vault', 'Restore last Vault') }}</strong><small>{{ t('启动后自动打开最近使用的知识库', 'Open the most recently used knowledge base at startup') }}</small></span><input v-model="settingsStore.restoreLastVault" type="checkbox" /></label><div class="setting-row"><span><strong>{{ t('自动保存间隔', 'Autosave interval') }}</strong><small>{{ t('编辑停止后等待多久写入文件', 'How long to wait after editing before saving') }}</small></span><select v-model.number="settingsStore.autoSaveInterval" class="select short"><option :value="500">0.5 {{ t('秒', 'sec') }}</option><option :value="1500">1.5 {{ t('秒', 'sec') }}</option><option :value="3000">3 {{ t('秒', 'sec') }}</option></select></div><div class="setting-row"><span><strong>{{ t('界面语言', 'Interface language') }}</strong><small>{{ t('切换后立即应用到界面', 'Applied to the interface immediately') }}</small></span><select v-model="settingsStore.language" class="select short"><option value="zh-CN">简体中文</option><option value="en">English</option></select></div><div class="setting-row"><span><strong>{{ t('版本', 'Version') }}</strong><small>Desktop / AI Core</small></span><span>{{ settingsStore.appVersion }} / {{ settingsStore.aiCoreVersion }}</span></div></div>
 
     <div v-else-if="activeSection === 'editor'" class="panel settings-section"><h2>{{ t('编辑器', 'Editor') }}</h2><div class="setting-row"><span><strong>{{ t('默认模式', 'Default mode') }}</strong><small>{{ t('新打开文件使用的编辑器模式', 'Editor mode used for newly opened files') }}</small></span><select v-model="settingsStore.defaultEditorMode" class="select short"><option value="wysiwyg">{{ t('写作与预览', 'Writing and preview') }}</option><option value="source">{{ t('Markdown 源码', 'Markdown source') }}</option></select></div><div class="setting-row"><span><strong>{{ t('字号', 'Font size') }}</strong></span><input v-model.number="themeStore.fontEditorSize" class="input short" type="number" min="12" max="32" /></div><div class="setting-row"><span><strong>{{ t('行高', 'Line height') }}</strong></span><input v-model.number="themeStore.lineHeight" class="input short" type="number" min="1.2" max="2.4" step="0.1" /></div><div class="setting-row"><span><strong>{{ t('行宽', 'Line width') }}</strong><small>{{ t('Markdown 预览最大字符宽度', 'Maximum character width for Markdown preview') }}</small></span><input v-model.number="settingsStore.editorLineWidth" class="input short" type="number" min="40" max="140" /></div><label class="setting-row"><span><strong>{{ t('拼写检查', 'Spell check') }}</strong><small>{{ t('在写作与源码编辑器中使用系统拼写检查', 'Use system spell checking in visual and source editors') }}</small></span><input v-model="settingsStore.spellCheck" type="checkbox" /></label><MarkdownPreferenceSettings /><HeadingStyleSettings /></div>