feat: AI assistant bubble + multi-provider temp-mail + settings view

src/server/runtime-config.ts

@@ -215,10 +215,12 @@ export function getAiConfigStatus() {
   const baseUrl = getAiBaseUrl();
   const hasKey = Boolean(getAiApiKey());
   const fromSettings = Boolean(getSetting("ai.baseUrl") || getSetting("ai.apiKey"));
+  // 只回显用户/env 真正设过的模型；没设就返回空，避免 UI 凭空冒出 gpt-4o-mini 默认值。
+  // （实际调用 getAiModel() 仍有 DEFAULT_AI_MODEL 兜底，不影响气泡可用。）
   return {
     configured: Boolean(baseUrl && hasKey),
     baseUrl: baseUrl ?? "",
-    model: getAiModel(),
+    model: getSetting("ai.model") ?? config.AI_MODEL ?? "",
     hasKey,
     source: fromSettings ? "ui" : baseUrl || hasKey ? "env" : "none"
   };

src/web/src/components/AiBubble.tsx

@@ -142,7 +142,7 @@ export function AiBubble() {
               </label>
               <label className="ai-field">
                 <span>{T("模型", "Model")}</span>
-                <input value={model} onChange={(e) => setModel(e.target.value)} placeholder="gpt-4o-mini" spellCheck={false} />
+                <input value={model} onChange={(e) => setModel(e.target.value)} placeholder={T("模型名（设置页可一键获取）", "model name")} spellCheck={false} />
               </label>
               <label className="ai-field">
                 <span>API Key {config?.hasKey ? T("（已存，留空不改）", "(saved, blank = keep)") : ""}</span>

src/web/src/components/SettingsView.tsx

@@ -44,6 +44,7 @@ export function SettingsView({
   const [endpoint, setEndpoint] = useState("");
   const [domain, setDomain] = useState("");
   const [password, setPassword] = useState("");
+  const [showPwd, setShowPwd] = useState(false);
   const [busy, setBusy] = useState(false);
   const [test, setTest] = useState<Record<string, { ok: boolean; msg: string } | "loading">>({});
 
@@ -51,12 +52,26 @@ export function SettingsView({
   const editingProvider = editingExisting ? tempProviders.find((p) => p.id === editingId) : undefined;
 
   function openAdd() {
-    setEditingId(NEW); setName(""); setType("php"); setEndpoint(""); setDomain(""); setPassword("");
+    setEditingId(NEW); setName(""); setType("php"); setEndpoint(""); setDomain(""); setPassword(""); setShowPwd(false);
   }
   function openEdit(p: TempProviderPublic) {
-    setEditingId(p.id); setName(p.name); setType(p.type); setEndpoint(p.endpoint); setDomain(p.domain); setPassword("");
+    setEditingId(p.id); setName(p.name); setType(p.type); setEndpoint(p.endpoint); setDomain(p.domain); setPassword(""); setShowPwd(false);
+  }
+  function cancel() { setEditingId(null); setShowPwd(false); }
+
+  // 编辑时回显当前密码：拉真实值填进框 + 切成明文（门后安全）。再点收回遮罩。
+  async function revealCurrentPwd() {
+    if (showPwd) { setShowPwd(false); return; }
+    if (!editingId || editingId === NEW) return;
+    try {
+      const s = await fetchSecrets();
+      const t = s.temp.find((x) => x.id === editingId);
+      if (t?.password) { setPassword(t.password); setShowPwd(true); }
+      else onError(L("该源未设密码", "no password set"));
+    } catch (e) {
+      onError(e instanceof Error ? e.message : String(e));
+    }
   }
-  function cancel() { setEditingId(null); }
 
   async function save() {
     if (!name.trim() || !endpoint.trim()) return;
@@ -326,9 +341,14 @@ export function SettingsView({
           {type === "cf"
             ? L("管理员 auth（x-admin-auth 口令）", "Admin auth (x-admin-auth)")
             : L("管理员密码（X-Admin-Password）", "Admin password (X-Admin-Password)")}
+          {editingExisting && editingProvider?.hasPassword && (
+            <button type="button" className="mini-link" onClick={revealCurrentPwd}>
+              {showPwd ? L("🙈 遮罩", "🙈 hide") : L("👁 显示当前", "👁 show current")}
+            </button>
+          )}
         </span>
-          <input type="password" value={password} onChange={(e) => setPassword(e.target.value)} autoComplete="new-password"
-            placeholder={editingExisting ? (editingProvider?.hasPassword ? L("已设 · 留空不改（出于安全不回显）", "set · blank = keep (never echoed)") : L("未设", "not set")) : L("必填", "required")} />
+          <input type={showPwd ? "text" : "password"} value={password} onChange={(e) => setPassword(e.target.value)} autoComplete="new-password"
+            placeholder={editingExisting ? (editingProvider?.hasPassword ? L("已设 · 留空不改，或点「显示当前」回显", "set · blank = keep, or click show current") : L("未设", "not set")) : L("必填", "required")} />
         </label>
         <div className="settings-form-foot">
           {type === "cf" && (