@liujitcn/kratos-admin-system 0.0.66 → 0.0.68

package/dist/package/declarations/src/locales/generated.d.ts

@@ -1408,6 +1408,7 @@ export declare const LOCALE_MESSAGES: {
         "system.code.gen.column.value.single": string;
         "system.code.gen.column.value.table_comment": string;
         "system.code.gen.column.value.table_name": string;
+        "system.code.gen.component.cascader": string;
         "system.code.gen.component.checkbox": string;
         "system.code.gen.component.checkbox_group": string;
         "system.code.gen.component.color_picker": string;
@@ -3293,6 +3294,7 @@ export declare const LOCALE_MESSAGES: {
         "system.code.gen.column.value.single": string;
         "system.code.gen.column.value.table_comment": string;
         "system.code.gen.column.value.table_name": string;
+        "system.code.gen.component.cascader": string;
         "system.code.gen.component.checkbox": string;
         "system.code.gen.component.checkbox_group": string;
         "system.code.gen.component.color_picker": string;
@@ -5178,6 +5180,7 @@ export declare const LOCALE_MESSAGES: {
         "system.code.gen.column.value.single": string;
         "system.code.gen.column.value.table_comment": string;
         "system.code.gen.column.value.table_name": string;
+        "system.code.gen.component.cascader": string;
         "system.code.gen.component.checkbox": string;
         "system.code.gen.component.checkbox_group": string;
         "system.code.gen.component.color_picker": string;
@@ -7063,6 +7066,7 @@ export declare const LOCALE_MESSAGES: {
         "system.code.gen.column.value.single": string;
         "system.code.gen.column.value.table_comment": string;
         "system.code.gen.column.value.table_name": string;
+        "system.code.gen.component.cascader": string;
         "system.code.gen.component.checkbox": string;
         "system.code.gen.component.checkbox_group": string;
         "system.code.gen.component.color_picker": string;

package/dist/package/declarations/src/rpc/base/v1/ai_knowledge.d.ts

@@ -12,7 +12,7 @@ export interface AiKnowledgeOption {
     id: number;
     /** 知识库名称 */
     name: string;
-    /** 文档数量 */
+    /** 已就绪文档数，不含处理失败 */
     doc_count: number;
 }
 /** AI 知识库选项查询服务。 */

package/dist/package/declarations/src/rpc/base/v1/login.d.ts

@@ -1,22 +1,5 @@
-import type { PasswordCrypto } from "../../common/v1/types";
+import type { SecretCrypto } from "../../common/v1/types";
 import type { Empty } from "../../google/protobuf/empty";
-/** 密码加密场景枚举。 */
-export declare enum PasswordCryptoScene {
-    /** PASSWORD_CRYPTO_SCENE_UNSPECIFIED - 未指定密码加密场景。 */
-    PASSWORD_CRYPTO_SCENE_UNSPECIFIED = 0,
-    /** PASSWORD_CRYPTO_SCENE_LOGIN - 登录密码加密场景。 */
-    PASSWORD_CRYPTO_SCENE_LOGIN = 1,
-    /** PASSWORD_CRYPTO_SCENE_CREATE_BASE_USER - 新增后台用户密码加密场景。 */
-    PASSWORD_CRYPTO_SCENE_CREATE_BASE_USER = 2,
-    /** PASSWORD_CRYPTO_SCENE_RESET_BASE_USER_PASSWORD - 重置后台用户密码加密场景。 */
-    PASSWORD_CRYPTO_SCENE_RESET_BASE_USER_PASSWORD = 3,
-    /** PASSWORD_CRYPTO_SCENE_UPDATE_USER_PASSWORD - 个人修改密码加密场景。 */
-    PASSWORD_CRYPTO_SCENE_UPDATE_USER_PASSWORD = 4,
-    /** PASSWORD_CRYPTO_SCENE_MFA - 多因素认证敏感操作场景。 */
-    PASSWORD_CRYPTO_SCENE_MFA = 5,
-    /** PASSWORD_CRYPTO_SCENE_CONFIGURE_PASSWORD_POLICY - 密码策略初始化密码配置场景。 */
-    PASSWORD_CRYPTO_SCENE_CONFIGURE_PASSWORD_POLICY = 6
-}
 /**
  * LoginStatus 表示登录请求当前所处的认证阶段。
  * 只有 AUTHENTICATED 或 PASSWORD_CHANGE_REQUIRED 才会携带正式访问令牌，MFA 状态必须继续完成挑战。
@@ -38,11 +21,6 @@ export interface CaptchaRequest {
     /** 验证码类型，random 表示随机选择当前支持的验证码类型 */
     type: string;
 }
-/** 密码临时公钥获取条件 */
-export interface PasswordPublicKeyRequest {
-    /** 使用场景 */
-    scene: PasswordCryptoScene;
-}
 /** 登出请求条件 */
 export interface LogoutRequest {
 }
@@ -69,19 +47,6 @@ export interface VerifyCaptchaResponse {
     /** 有效时间，单位秒 */
     expires_in: number;
 }
-/** 密码临时公钥响应 */
-export interface PasswordPublicKeyResponse {
-    /** 临时密钥ID */
-    key_id: string;
-    /** 临时公钥 */
-    public_key: string;
-    /** 加密算法 */
-    algorithm: string;
-    /** 随机值 */
-    nonce: string;
-    /** 有效时间，单位秒 */
-    expires_in: number;
-}
 /** 刷新令牌请求参数 */
 export interface RefreshTokenRequest {
     /** 更新令牌；未填写时由服务端从HttpOnly Cookie读取。 */
@@ -105,7 +70,7 @@ export interface LoginRequest {
     /** 用户名，必选项。 */
     user_name: string;
     /** 用户的密码，必选项。 */
-    password: PasswordCrypto | undefined;
+    password: SecretCrypto | undefined;
     /** 验证码 */
     captcha_code: string;
     /** 验证码Id */
@@ -142,8 +107,6 @@ export interface LoginService {
     Captcha(request: CaptchaRequest): Promise<CaptchaResponse>;
     /** 验证码预校验 */
     VerifyCaptcha(request: VerifyCaptchaRequest): Promise<VerifyCaptchaResponse>;
-    /** 获取密码临时公钥 */
-    PasswordPublicKey(request: PasswordPublicKeyRequest): Promise<PasswordPublicKeyResponse>;
     /** 登出 */
     Logout(request: LogoutRequest): Promise<Empty>;
     /** 刷新认证令牌 */

package/dist/package/declarations/src/rpc/base/v1/oauth.d.ts

@@ -1,4 +1,4 @@
-import type { PasswordCrypto } from "../../common/v1/types";
+import type { SecretCrypto } from "../../common/v1/types";
 import type { Empty } from "../../google/protobuf/empty";
 import type { LoginStatus } from "./login";
 /** 个人中心三方账号绑定列表查询条件 */
@@ -59,7 +59,7 @@ export interface BindOauthSessionRequest {
     /** 用户名 */
     user_name: string;
     /** 用户密码 */
-    password: PasswordCrypto | undefined;
+    password: SecretCrypto | undefined;
     /** 验证码 */
     captcha_code: string;
     /** 验证码Id */

package/dist/package/declarations/src/rpc/common/v1/types.d.ts

@@ -43,8 +43,8 @@ export interface BytesValues {
     /** 值列表。 */
     value: Uint8Array[];
 }
-/** 密码密文。 */
-export interface PasswordCrypto {
+/** 敏感字段密文，密码与各类密钥字段统一使用。 */
+export interface SecretCrypto {
     /** 临时密钥ID */
     key_id: string;
     /** 随机值 */
@@ -55,6 +55,6 @@ export interface PasswordCrypto {
     encrypted_key: string;
     /** 初始化向量 */
     iv: string;
-    /** 密码加密数据 */
-    ciphertext: string;
+    /** 传输时为密文，服务端解密后回填明文 */
+    text: string;
 }

package/dist/package/declarations/src/rpc/system/admin/v1/ai_provider.d.ts

@@ -1,4 +1,5 @@
 import type { Status } from "../../../common/v1/enum";
+import type { SecretCrypto } from "../../../common/v1/types";
 import type { Empty } from "../../../google/protobuf/empty";
 /** AI模型分类枚举。 */
 export declare enum AiModelCategory {
@@ -48,8 +49,8 @@ export interface AiProviderForm {
     name: string;
     /** 模型API基础地址 */
     base_url: string;
-    /** 模型API密钥；更新时留空表示保留现有密钥 */
-    api_key: string;
+    /** 模型API密钥密文，更新时不传表示保留现有密钥 */
+    api_key: SecretCrypto | undefined;
     /** 是否已保存模型密钥 */
     api_key_configured: boolean;
     /** 排序值 */

package/dist/package/declarations/src/rpc/system/admin/v1/auth.d.ts

@@ -1,4 +1,4 @@
-import type { PasswordCrypto, StringValues } from "../../../common/v1/types";
+import type { SecretCrypto, StringValues } from "../../../common/v1/types";
 import type { Empty } from "../../../google/protobuf/empty";
 import type { BaseUserIDType } from "../../common/v1/common";
 import type { BaseMenuType } from "./common";
@@ -151,9 +151,9 @@ export interface RouteParams {
 /** 用户密码表单 */
 export interface UserPasswordForm {
     /** 原密码 */
-    old_pwd: PasswordCrypto | undefined;
+    old_pwd: SecretCrypto | undefined;
     /** 新密码 */
-    new_pwd: PasswordCrypto | undefined;
+    new_pwd: SecretCrypto | undefined;
 }
 /** 用户手机号表单 */
 export interface UserPhoneForm {

package/dist/package/declarations/src/rpc/system/admin/v1/base_config.d.ts

@@ -1,5 +1,6 @@
 import type { BaseConfigSite } from "../../../base/v1/config";
 import type { Status } from "../../../common/v1/enum";
+import type { SecretCrypto } from "../../../common/v1/types";
 import type { Empty } from "../../../google/protobuf/empty";
 import type { BaseI18n } from "./base_i18n";
 /** 系统配置类型。 */
@@ -60,8 +61,8 @@ export interface BaseConfigForm {
     type: BaseConfigType;
     /** 配置key */
     key: string;
-    /** 配置value */
-    value: string;
+    /** 配置value，前端统一加密提交，服务端统一解密 */
+    value?: SecretCrypto | undefined;
     /** 配置名称多语言翻 */
     name_i18ns: BaseI18n[];
     /** 配置value文本/富文本配置值的多语言翻译 */
@@ -106,7 +107,7 @@ export interface BaseConfig {
     type: BaseConfigType;
     /** 配置key */
     key: string;
-    /** 配置value */
+    /** 配置value，敏感配置恒为空 */
     value: string;
     /** 状态：枚举【Status】 */
     status: Status;

package/dist/package/declarations/src/rpc/system/admin/v1/base_login_policy.d.ts

@@ -1,5 +1,5 @@
 import type { Status } from "../../../common/v1/enum";
-import type { PasswordCrypto } from "../../../common/v1/types";
+import type { SecretCrypto } from "../../../common/v1/types";
 import type { Empty } from "../../../google/protobuf/empty";
 /** 登录策略作用域类型。 */
 export declare enum BaseLoginPolicyScopeType {
@@ -112,7 +112,7 @@ export interface BaseLoginPolicyForm {
     /** 密码至少满足的字符类别数量，字符类别包括小写、大写、数字和符号 */
     password_min_complexity_classes?: number | undefined;
     /** 初始化密码，新增用户未提交密码时使用 */
-    initial_password: PasswordCrypto | undefined;
+    initial_password: SecretCrypto | undefined;
 }
 /** 登录策略列表项。 */
 export interface BaseLoginPolicy {

package/dist/package/declarations/src/rpc/system/admin/v1/base_message_provider.d.ts

@@ -1,5 +1,6 @@
 import type { SelectOptionResponse } from "../../../common/v1/common";
 import type { Status } from "../../../common/v1/enum";
+import type { SecretCrypto } from "../../../common/v1/types";
 import type { Empty } from "../../../google/protobuf/empty";
 /** 消息发送 Provider 选项查询条件。 */
 export interface OptionBaseMessageProviderRequest {
@@ -65,8 +66,8 @@ export interface BaseMessageProviderForm {
     icon: string;
     /** 通用凭证标识 */
     client_id: string;
-    /** 通用凭证密钥，更新时留空表示不修改 */
-    client_secret: string;
+    /** 通用凭证密钥密文，更新时不传表示不修改 */
+    client_secret: SecretCrypto | undefined;
     /** 是否已配置通用凭证密钥 */
     secret_configured: boolean;
     /** Provider扩展配置JSON对象 */

package/dist/package/declarations/src/rpc/system/admin/v1/base_oauth_provider.d.ts

@@ -1,4 +1,5 @@
 import type { Status } from "../../../common/v1/enum";
+import type { SecretCrypto } from "../../../common/v1/types";
 import type { Empty } from "../../../google/protobuf/empty";
 import type { BaseI18n } from "./base_i18n";
 /** OAuth登录方式分页查询条件。 */
@@ -62,8 +63,8 @@ export interface BaseOauthProviderForm {
     icon: string;
     /** 第三方应用标识 */
     client_id: string;
-    /** 第三方应用密钥，更新时留空表示不修改 */
-    client_secret: string;
+    /** 第三方应用密钥密文，更新时不传表示不修改 */
+    client_secret: SecretCrypto | undefined;
     /** 是否已配置第三方应用密钥 */
     secret_configured: boolean;
     /** OAuth回调地址 */

package/dist/package/declarations/src/rpc/system/admin/v1/base_user.d.ts

@@ -1,7 +1,7 @@
 import type { AnalyticsTimeType } from "../../../common/v1/analytics";
 import type { SelectOptionResponse } from "../../../common/v1/common";
 import type { Status } from "../../../common/v1/enum";
-import type { PasswordCrypto } from "../../../common/v1/types";
+import type { SecretCrypto } from "../../../common/v1/types";
 import type { Empty } from "../../../google/protobuf/empty";
 import type { Timestamp } from "../../../google/protobuf/timestamp";
 import type { BaseUserIDType, BaseUserPasswordChangeStatus } from "../../common/v1/common";
@@ -164,7 +164,7 @@ export interface BaseUserForm {
     /** 性别 */
     gender: BaseUserGender;
     /** 密码 */
-    pwd: PasswordCrypto | undefined;
+    pwd: SecretCrypto | undefined;
     /** 用户状态 */
     status: Status;
     /** 备注名 */
@@ -175,7 +175,7 @@ export interface ResetBaseUserPasswordRequest {
     /** 用户ID */
     id: number;
     /** 密码 */
-    pwd: PasswordCrypto | undefined;
+    pwd: SecretCrypto | undefined;
 }
 /** 基础用户应用端角色设置参数 */
 export interface SetBaseUserAppRoleRequest {

package/dist/package/src/components/account/ChangePasswordForm.vue

@@ -29,8 +29,9 @@ import { LOGIN_URL } from "@liujitcn/kratos-admin-core/config";
 import { clearPasswordChangeRequired } from "@liujitcn/kratos-admin-core/request";
 import { useUserStore } from "@liujitcn/kratos-admin-core/stores/runtime";
 import {
-  PASSWORD_CRYPTO_SCENE,
-  encryptPassword
+  encryptPassword,
+  fetchSecretPublicKey,
+  encryptWithPublicKey
 } from "@liujitcn/kratos-admin-core/security";
 
 /** 修改密码表单状态，明文只在前端校验和加密前短暂保存。 */
@@ -91,8 +92,9 @@ async function handleSubmitPassword() {
   }
   submitLoading.value = true;
   try {
-    const oldPwd = await encryptPassword(passwordForm.old_pwd, PASSWORD_CRYPTO_SCENE.PASSWORD_CRYPTO_SCENE_UPDATE_USER_PASSWORD);
-    const newPwd = await encryptPassword(passwordForm.new_pwd, PASSWORD_CRYPTO_SCENE.PASSWORD_CRYPTO_SCENE_UPDATE_USER_PASSWORD);
+    const publicKey = await fetchSecretPublicKey();
+    const oldPwd = await encryptWithPublicKey(publicKey, passwordForm.old_pwd);
+    const newPwd = await encryptWithPublicKey(publicKey, passwordForm.new_pwd);
     const userPassword: UserPasswordForm = {
       old_pwd: oldPwd,
       new_pwd: newPwd

package/dist/package/src/locales/README.md

@@ -26,4 +26,4 @@
 
 语言键按文案归属使用 `common.` 或 `system.` 命名空间；语言包保持标准 JSON，不在文件内写注释。
 
-新增语言的完整文件清单和迁移流程见[国际化语言扩展指南](../../../../../../../docs/国际化语言扩展指南.md)。
+新增语言的完整文件清单和迁移流程见[国际化设计与语言扩展](../../../../../../../docs/国际化最终方案.md)。

package/dist/package/src/locales/en-US.json

@@ -1407,6 +1407,7 @@
   "system.code.gen.column.value.single": "Single",
   "system.code.gen.column.value.table_comment": "Comment: {comment}",
   "system.code.gen.column.value.table_name": "Table: {name}",
+  "system.code.gen.component.cascader": "Cascader",
   "system.code.gen.component.checkbox": "Checkbox",
   "system.code.gen.component.checkbox_group": "Checkbox group",
   "system.code.gen.component.color_picker": "Color picker",

package/dist/package/src/locales/ja-JP.json

@@ -1407,6 +1407,7 @@
   "system.code.gen.column.value.single": "単一の選択肢",
   "system.code.gen.column.value.table_comment": "テーブルの注釈: {comment}",
   "system.code.gen.column.value.table_name": "テーブル名: {name}",
+  "system.code.gen.component.cascader": "カスケード選択",
   "system.code.gen.component.checkbox": "チェックボックス",
   "system.code.gen.component.checkbox_group": "複数選択グループ",
   "system.code.gen.component.color_picker": "カラーピッカー",

package/dist/package/src/locales/zh-CN.json

@@ -1407,6 +1407,7 @@
   "system.code.gen.column.value.single": "单选",
   "system.code.gen.column.value.table_comment": "表注释：{comment}",
   "system.code.gen.column.value.table_name": "表名：{name}",
+  "system.code.gen.component.cascader": "级联选择",
   "system.code.gen.component.checkbox": "复选框",
   "system.code.gen.component.checkbox_group": "多选组",
   "system.code.gen.component.color_picker": "颜色选择",

package/dist/package/src/locales/zh-TW.json

@@ -1407,6 +1407,7 @@
   "system.code.gen.column.value.single": "單選",
   "system.code.gen.column.value.table_comment": "表註釋：{comment}",
   "system.code.gen.column.value.table_name": "表名：{name}",
+  "system.code.gen.component.cascader": "級聯選擇",
   "system.code.gen.component.checkbox": "核取方塊",
   "system.code.gen.component.checkbox_group": "多選組",
   "system.code.gen.component.color_picker": "顏色選擇",

package/dist/package/src/module.ts

@@ -6,6 +6,14 @@ import Notification from "./components/notification/Notification.vue";
 
 // 语言包由同步脚本生成并注册，供 System 页面、组件和代码生成页面使用。
 import { LOCALE_MESSAGES } from "./locales/generated";
+import { registerSecretRevealHandler } from "@liujitcn/kratos-admin-core/security";
+import { defSecretCryptoService } from "@liujitcn/kratos-admin-core/api/base/v1/secret_crypto";
+
+// 注册密钥明文查看实现，供 ProForm secret 字段的眼睛按需拉取。
+registerSecretRevealHandler(async (resource, id, field) => {
+  const res = await defSecretCryptoService.RevealSecretField({ resource, id, field });
+  return res.text;
+});
 
 const viewModules = import.meta.glob<{ default: Component }>("./views/**/*.vue");
 

package/dist/package/src/rpc/base/v1/ai_knowledge.ts

@@ -22,7 +22,7 @@ export interface AiKnowledgeOption {
   id: number;
   /** 知识库名称 */
   name: string;
-  /** 文档数量 */
+  /** 已就绪文档数，不含处理失败 */
   doc_count: number;
 }
 

package/dist/package/src/rpc/base/v1/login.ts

@@ -5,27 +5,9 @@
 // source: base/v1/login.proto
 
 /* eslint-disable */
-import type { PasswordCrypto } from "../../common/v1/types";
+import type { SecretCrypto } from "../../common/v1/types";
 import type { Empty } from "../../google/protobuf/empty";
 
-/** 密码加密场景枚举。 */
-export enum PasswordCryptoScene {
-  /** PASSWORD_CRYPTO_SCENE_UNSPECIFIED - 未指定密码加密场景。 */
-  PASSWORD_CRYPTO_SCENE_UNSPECIFIED = 0,
-  /** PASSWORD_CRYPTO_SCENE_LOGIN - 登录密码加密场景。 */
-  PASSWORD_CRYPTO_SCENE_LOGIN = 1,
-  /** PASSWORD_CRYPTO_SCENE_CREATE_BASE_USER - 新增后台用户密码加密场景。 */
-  PASSWORD_CRYPTO_SCENE_CREATE_BASE_USER = 2,
-  /** PASSWORD_CRYPTO_SCENE_RESET_BASE_USER_PASSWORD - 重置后台用户密码加密场景。 */
-  PASSWORD_CRYPTO_SCENE_RESET_BASE_USER_PASSWORD = 3,
-  /** PASSWORD_CRYPTO_SCENE_UPDATE_USER_PASSWORD - 个人修改密码加密场景。 */
-  PASSWORD_CRYPTO_SCENE_UPDATE_USER_PASSWORD = 4,
-  /** PASSWORD_CRYPTO_SCENE_MFA - 多因素认证敏感操作场景。 */
-  PASSWORD_CRYPTO_SCENE_MFA = 5,
-  /** PASSWORD_CRYPTO_SCENE_CONFIGURE_PASSWORD_POLICY - 密码策略初始化密码配置场景。 */
-  PASSWORD_CRYPTO_SCENE_CONFIGURE_PASSWORD_POLICY = 6,
-}
-
 /**
  * LoginStatus 表示登录请求当前所处的认证阶段。
  * 只有 AUTHENTICATED 或 PASSWORD_CHANGE_REQUIRED 才会携带正式访问令牌，MFA 状态必须继续完成挑战。
@@ -49,12 +31,6 @@ export interface CaptchaRequest {
   type: string;
 }
 
-/** 密码临时公钥获取条件 */
-export interface PasswordPublicKeyRequest {
-  /** 使用场景 */
-  scene: PasswordCryptoScene;
-}
-
 /** 登出请求条件 */
 export interface LogoutRequest {
 }
@@ -85,20 +61,6 @@ export interface VerifyCaptchaResponse {
   expires_in: number;
 }
 
-/** 密码临时公钥响应 */
-export interface PasswordPublicKeyResponse {
-  /** 临时密钥ID */
-  key_id: string;
-  /** 临时公钥 */
-  public_key: string;
-  /** 加密算法 */
-  algorithm: string;
-  /** 随机值 */
-  nonce: string;
-  /** 有效时间，单位秒 */
-  expires_in: number;
-}
-
 /** 刷新令牌请求参数 */
 export interface RefreshTokenRequest {
   /** 更新令牌；未填写时由服务端从HttpOnly Cookie读取。 */
@@ -125,7 +87,7 @@ export interface LoginRequest {
   user_name: string;
   /** 用户的密码，必选项。 */
   password:
-    | PasswordCrypto
+    | SecretCrypto
     | undefined;
   /** 验证码 */
   captcha_code: string;
@@ -165,8 +127,6 @@ export interface LoginService {
   Captcha(request: CaptchaRequest): Promise<CaptchaResponse>;
   /** 验证码预校验 */
   VerifyCaptcha(request: VerifyCaptchaRequest): Promise<VerifyCaptchaResponse>;
-  /** 获取密码临时公钥 */
-  PasswordPublicKey(request: PasswordPublicKeyRequest): Promise<PasswordPublicKeyResponse>;
   /** 登出 */
   Logout(request: LogoutRequest): Promise<Empty>;
   /** 刷新认证令牌 */

package/dist/package/src/rpc/base/v1/oauth.ts

@@ -5,7 +5,7 @@
 // source: base/v1/oauth.proto
 
 /* eslint-disable */
-import type { PasswordCrypto } from "../../common/v1/types";
+import type { SecretCrypto } from "../../common/v1/types";
 import type { Empty } from "../../google/protobuf/empty";
 import type { LoginStatus } from "./login";
 
@@ -77,7 +77,7 @@ export interface BindOauthSessionRequest {
   user_name: string;
   /** 用户密码 */
   password:
-    | PasswordCrypto
+    | SecretCrypto
     | undefined;
   /** 验证码 */
   captcha_code: string;

package/dist/package/src/rpc/common/v1/types.ts

@@ -60,8 +60,8 @@ export interface BytesValues {
   value: Uint8Array[];
 }
 
-/** 密码密文。 */
-export interface PasswordCrypto {
+/** 敏感字段密文，密码与各类密钥字段统一使用。 */
+export interface SecretCrypto {
   /** 临时密钥ID */
   key_id: string;
   /** 随机值 */
@@ -72,6 +72,6 @@ export interface PasswordCrypto {
   encrypted_key: string;
   /** 初始化向量 */
   iv: string;
-  /** 密码加密数据 */
-  ciphertext: string;
+  /** 传输时为密文，服务端解密后回填明文 */
+  text: string;
 }

package/dist/package/src/rpc/system/admin/v1/ai_provider.ts

@@ -6,6 +6,7 @@
 
 /* eslint-disable */
 import type { Status } from "../../../common/v1/enum";
+import type { SecretCrypto } from "../../../common/v1/types";
 import type { Empty } from "../../../google/protobuf/empty";
 
 /** AI模型分类枚举。 */
@@ -62,8 +63,10 @@ export interface AiProviderForm {
   name: string;
   /** 模型API基础地址 */
   base_url: string;
-  /** 模型API密钥；更新时留空表示保留现有密钥 */
-  api_key: string;
+  /** 模型API密钥密文，更新时不传表示保留现有密钥 */
+  api_key:
+    | SecretCrypto
+    | undefined;
   /** 是否已保存模型密钥 */
   api_key_configured: boolean;
   /** 排序值 */

package/dist/package/src/rpc/system/admin/v1/auth.ts

@@ -5,7 +5,7 @@
 // source: system/admin/v1/auth.proto
 
 /* eslint-disable */
-import type { PasswordCrypto, StringValues } from "../../../common/v1/types";
+import type { SecretCrypto, StringValues } from "../../../common/v1/types";
 import type { Empty } from "../../../google/protobuf/empty";
 import type { BaseUserIDType } from "../../common/v1/common";
 import type { BaseMenuType } from "./common";
@@ -202,10 +202,10 @@ export interface RouteParams {
 export interface UserPasswordForm {
   /** 原密码 */
   old_pwd:
-    | PasswordCrypto
+    | SecretCrypto
     | undefined;
   /** 新密码 */
-  new_pwd: PasswordCrypto | undefined;
+  new_pwd: SecretCrypto | undefined;
 }
 
 /** 用户手机号表单 */

package/dist/package/src/rpc/system/admin/v1/base_config.ts

@@ -7,6 +7,7 @@
 /* eslint-disable */
 import type { BaseConfigSite } from "../../../base/v1/config";
 import type { Status } from "../../../common/v1/enum";
+import type { SecretCrypto } from "../../../common/v1/types";
 import type { Empty } from "../../../google/protobuf/empty";
 import type { BaseI18n } from "./base_i18n";
 
@@ -82,8 +83,10 @@ export interface BaseConfigForm {
   type: BaseConfigType;
   /** 配置key */
   key: string;
-  /** 配置value */
-  value: string;
+  /** 配置value，前端统一加密提交，服务端统一解密 */
+  value?:
+    | SecretCrypto
+    | undefined;
   /** 配置名称多语言翻 */
   name_i18ns: BaseI18n[];
   /** 配置value文本/富文本配置值的多语言翻译 */
@@ -134,7 +137,7 @@ export interface BaseConfig {
   type: BaseConfigType;
   /** 配置key */
   key: string;
-  /** 配置value */
+  /** 配置value，敏感配置恒为空 */
   value: string;
   /** 状态：枚举【Status】 */
   status: Status;

package/dist/package/src/rpc/system/admin/v1/base_login_policy.ts

@@ -6,7 +6,7 @@
 
 /* eslint-disable */
 import type { Status } from "../../../common/v1/enum";
-import type { PasswordCrypto } from "../../../common/v1/types";
+import type { SecretCrypto } from "../../../common/v1/types";
 import type { Empty } from "../../../google/protobuf/empty";
 
 /** 登录策略作用域类型。 */
@@ -144,7 +144,7 @@ export interface BaseLoginPolicyForm {
     | number
     | undefined;
   /** 初始化密码，新增用户未提交密码时使用 */
-  initial_password: PasswordCrypto | undefined;
+  initial_password: SecretCrypto | undefined;
 }
 
 /** 登录策略列表项。 */

package/dist/package/src/rpc/system/admin/v1/base_message_provider.ts

@@ -7,6 +7,7 @@
 /* eslint-disable */
 import type { SelectOptionResponse } from "../../../common/v1/common";
 import type { Status } from "../../../common/v1/enum";
+import type { SecretCrypto } from "../../../common/v1/types";
 import type { Empty } from "../../../google/protobuf/empty";
 
 /** 消息发送 Provider 选项查询条件。 */
@@ -87,8 +88,10 @@ export interface BaseMessageProviderForm {
   icon: string;
   /** 通用凭证标识 */
   client_id: string;
-  /** 通用凭证密钥，更新时留空表示不修改 */
-  client_secret: string;
+  /** 通用凭证密钥密文，更新时不传表示不修改 */
+  client_secret:
+    | SecretCrypto
+    | undefined;
   /** 是否已配置通用凭证密钥 */
   secret_configured: boolean;
   /** Provider扩展配置JSON对象 */

package/dist/package/src/rpc/system/admin/v1/base_oauth_provider.ts

@@ -6,6 +6,7 @@
 
 /* eslint-disable */
 import type { Status } from "../../../common/v1/enum";
+import type { SecretCrypto } from "../../../common/v1/types";
 import type { Empty } from "../../../google/protobuf/empty";
 import type { BaseI18n } from "./base_i18n";
 
@@ -83,8 +84,10 @@ export interface BaseOauthProviderForm {
   icon: string;
   /** 第三方应用标识 */
   client_id: string;
-  /** 第三方应用密钥，更新时留空表示不修改 */
-  client_secret: string;
+  /** 第三方应用密钥密文，更新时不传表示不修改 */
+  client_secret:
+    | SecretCrypto
+    | undefined;
   /** 是否已配置第三方应用密钥 */
   secret_configured: boolean;
   /** OAuth回调地址 */

package/dist/package/src/rpc/system/admin/v1/base_user.ts

@@ -8,7 +8,7 @@
 import type { AnalyticsTimeType } from "../../../common/v1/analytics";
 import type { SelectOptionResponse } from "../../../common/v1/common";
 import type { Status } from "../../../common/v1/enum";
-import type { PasswordCrypto } from "../../../common/v1/types";
+import type { SecretCrypto } from "../../../common/v1/types";
 import type { Empty } from "../../../google/protobuf/empty";
 import type { Timestamp } from "../../../google/protobuf/timestamp";
 import type { BaseUserIDType, BaseUserPasswordChangeStatus } from "../../common/v1/common";
@@ -193,7 +193,7 @@ export interface BaseUserForm {
   gender: BaseUserGender;
   /** 密码 */
   pwd:
-    | PasswordCrypto
+    | SecretCrypto
     | undefined;
   /** 用户状态 */
   status: Status;
@@ -206,7 +206,7 @@ export interface ResetBaseUserPasswordRequest {
   /** 用户ID */
   id: number;
   /** 密码 */
-  pwd: PasswordCrypto | undefined;
+  pwd: SecretCrypto | undefined;
 }
 
 /** 基础用户应用端角色设置参数 */

package/dist/package/src/views/ai/chat/components/XSender.vue

@@ -169,8 +169,9 @@
                   @click="handleKnowledgeToggle(option.id)"
                 >
                   <span class="agent-model-row__name">{{ option.name }}</span>
-                  <span v-if="option.doc_count" class="agent-model-row__raw">{{
-                    t("system.ai.knowledge.doc_count", { count: option.doc_count })
+                  <!-- proto3 JSON 会省略零值字段，计数为 0 时前端补默认值。 -->
+                  <span class="agent-model-row__raw">{{
+                    t("system.ai.knowledge.doc_count", { count: option.doc_count ?? 0 })
                   }}</span>
                   <el-icon v-if="isKnowledgeSelected(option.id)" class="agent-model-row__check">
                     <Check />

package/dist/package/src/views/base/ai-provider/index.vue

@@ -119,6 +119,7 @@ import { useAuthButtons } from "@liujitcn/kratos-admin-core/auth";
 import { buildPageRequest, normalizeSelectedIds } from "@liujitcn/kratos-admin-core/table";
 import { useTenantScope } from "@liujitcn/kratos-admin-core/tenant";
 import { t } from "@liujitcn/kratos-admin-core";
+import { encodeSecretFields } from "@liujitcn/kratos-admin-core/security";
 import { defAiProviderService } from "@liujitcn/kratos-admin-system/api/system/admin/v1/ai_provider";
 import {
   type AiProvider,
@@ -240,7 +241,7 @@ const fields = computed<ProFormField[]>(() => [
   { prop: "provider", label: t("system.base.ai_provider.field.provider"), component: "select", colSpan: 12, options: providerOptions.value, props: { disabled: dialog.editing } },
   { prop: "name", label: t("system.base.ai_provider.field.name"), component: "input", colSpan: 12, props: { maxlength: 100, autocomplete: "off" } },
   { prop: "base_url", label: t("system.base.ai_provider.field.base_url"), component: "input", colSpan: 12, props: { maxlength: 512, autocomplete: "off", placeholder: t("system.base.ai_provider.placeholder.base_url") } },
-  { prop: "api_key", label: t("system.base.ai_provider.field.api_key"), component: "input", colSpan: 12, props: { type: "password", showPassword: true, maxlength: 1024, autocomplete: "new-password", placeholder: form.api_key_configured ? t("system.base.ai_provider.placeholder.keep_api_key") : t("system.base.ai_provider.placeholder.api_key") } },
+  { prop: "api_key", label: t("system.base.ai_provider.field.api_key"), component: "input", colSpan: 12, secret: { resource: "ai_provider", field: "api_key" }, props: { type: "password", showPassword: true, maxlength: 1024, autocomplete: "new-password", placeholder: form.api_key_configured ? t("system.base.ai_provider.placeholder.keep_api_key") : t("system.base.ai_provider.placeholder.api_key") } },
   { prop: "models", label: t("system.base.ai_provider.field.models"), component: "slot", slotName: "models", colSpan: 24 },
   { prop: "config_items", label: t("system.base.ai_provider.field.config"), component: "kv-list", colSpan: 24, props: { keyInputProps: { maxlength: 128 } } },
   { prop: "sort", label: t("common.field.sort"), component: "input-number", colSpan: 12, props: { min: 0, precision: 0 } },
@@ -334,7 +335,7 @@ function defaultForm(): FormState {
     provider: "openai_compatible",
     name: "",
     base_url: "",
-    api_key: "",
+    api_key: undefined,
     api_key_configured: false,
     models: [],
     config: {},
@@ -409,7 +410,7 @@ async function openDialog(id?: number) {
 async function submit() {
   const valid = await dialogRef.value?.validate();
   if (!valid) return;
-  const payload = buildAiProviderPayload();
+  const payload = buildAiProviderPayload(await encodeSecretFields(fields.value, form));
   if (!payload) return;
   if (dialog.editing) await defAiProviderService.UpdateAiProvider({ ai_provider: payload });
   else await defAiProviderService.CreateAiProvider({ ai_provider: payload });
@@ -423,7 +424,7 @@ async function submit() {
 async function testProviderModels() {
   const valid = await dialogRef.value?.validate();
   if (!valid) return;
-  const payload = buildAiProviderPayload();
+  const payload = buildAiProviderPayload(await encodeSecretFields(fields.value, form));
   if (!payload) return;
 
   testingModels.value = true;
@@ -437,21 +438,21 @@ async function testProviderModels() {
   modelTestResults.value = Object.fromEntries(response.results.map(result => [result.model_name, result]));
 }
 
-/** 构造AI Provider保存或测试请求参数。 */
-function buildAiProviderPayload(): AiProviderForm | undefined {
-  const config = configItemsToMap(form.config_items);
+/** 构造AI Provider保存或测试请求参数，source 为加密转换后的提交模型。 */
+function buildAiProviderPayload(source: Record<string, any>): AiProviderForm | undefined {
+  const config = configItemsToMap(source.config_items);
   if (!config) return undefined;
   return {
-    id: form.id,
-    provider: form.provider,
-    name: form.name,
-    base_url: form.base_url,
-    api_key: form.api_key,
-    api_key_configured: form.api_key_configured,
-    models: form.models.map(model => buildModelPayload(model)),
+    id: source.id,
+    provider: source.provider,
+    name: source.name,
+    base_url: source.base_url,
+    api_key: source.api_key,
+    api_key_configured: source.api_key_configured,
+    models: source.models.map(model => buildModelPayload(model)),
     config,
-    sort: form.sort,
-    status: form.status
+    sort: source.sort,
+    status: source.status
   };
 }
 

package/dist/package/src/views/base/config/index.vue

@@ -144,6 +144,7 @@ import { Status } from "@liujitcn/kratos-admin-system/rpc/common/v1/enum";
 import { BaseConfigType } from "@liujitcn/kratos-admin-system/rpc/system/admin/v1/base_config";
 import { buildPageRequest, normalizeSelectedIds } from "@liujitcn/kratos-admin-core/table";
 import { t } from "@liujitcn/kratos-admin-core";
+import { encryptSecret } from "@liujitcn/kratos-admin-core/security";
 import DynamicI18nEditor from "@liujitcn/kratos-admin-system/components/i18n/DynamicI18nEditor.vue";
 import DynamicI18nCell from "@liujitcn/kratos-admin-system/components/i18n/DynamicI18nCell.vue";
 import {
@@ -153,11 +154,13 @@ import {
 } from "@liujitcn/kratos-admin-system/components/i18n/dynamicI18n";
 
 /** 系统配置编辑表单状态，新增时枚举字段保持为空，避免把未知值 0 显示为下拉文本。 */
-type BaseConfigFormState = Omit<BaseConfigForm, "site" | "type"> & {
+type BaseConfigFormState = Omit<BaseConfigForm, "site" | "type" | "value"> & {
   /** 配置位置。 */
   site?: BaseConfigSite;
   /** 配置类型。 */
   type?: BaseConfigType;
+  /** 配置值编辑缓冲，提交时统一加密为 SecretCrypto。 */
+  value: string;
 };
 
 defineOptions({
@@ -337,13 +340,6 @@ const rules = computed(() => ({
       trigger: "blur"
     }
   ],
-  value: [
-    {
-      required: true,
-      message: t("common.validation.required_input", { field: t("system.base.config.field.value") }),
-      trigger: "blur"
-    }
-  ],
   status: [
     {
       required: true,
@@ -661,6 +657,8 @@ async function handleOpenDialog(configId?: number) {
     commit: ({ data }) => {
       if (data) {
         Object.assign(formData, data);
+        // 契约中 value 为 SecretCrypto，编辑缓冲取解密后的明文或脱敏文本。
+        formData.value = data.value?.text ?? "";
         if (formData.type === BaseConfigType.BASE_CONFIG_TYPE_FORM) loadFormValue(formData.value);
       }
       activeTab.value = configId && formData.type === BaseConfigType.BASE_CONFIG_TYPE_FORM ? "form" : "basic";
@@ -774,6 +772,8 @@ async function handleSubmit() {
   saving.value = true;
   try {
     const submitData = JSON.parse(JSON.stringify(formData)) as BaseConfigForm;
+    // 配置值统一密文提交，留空表示保留现有值。
+    submitData.value = formData.value.trim() !== "" ? await encryptSecret(formData.value) : undefined;
     submitData.name_i18ns = serializeDynamicI18ns(
       nameI18nValues.value,
       "base_config.name",
@@ -786,7 +786,7 @@ async function handleSubmit() {
             valueI18nValues.value,
             "base_config.value",
             submitData.id,
-            submitData.value
+            formData.value
           )
         : [];
 

package/dist/package/src/views/base/login-policy/index.vue

@@ -74,7 +74,7 @@ import type { ColumnProps, HeaderActionProps, ProTableInstance } from "@liujitcn
 import type { ProFormField, ProFormOption } from "@liujitcn/kratos-admin-core/components/ProForm/interface";
 import { useAuthButtons } from "@liujitcn/kratos-admin-core/auth";
 import { buildPageRequest, normalizeSelectedIds } from "@liujitcn/kratos-admin-core/table";
-import { PASSWORD_CRYPTO_SCENE, encryptPassword } from "@liujitcn/kratos-admin-core/security";
+import { encryptPassword } from "@liujitcn/kratos-admin-core/security";
 import { useTenantScope } from "@liujitcn/kratos-admin-core/tenant";
 import { t } from "@liujitcn/kratos-admin-core";
 import { defBaseLoginPolicyService } from "@liujitcn/kratos-admin-system/api/system/admin/v1/base_login_policy";
@@ -490,7 +490,7 @@ async function handleSubmit() {
     tenant_id: formData.tenant_id ?? 0,
     user_id: formData.user_id ?? 0,
     initial_password: formData.initial_password
-      ? await encryptPassword(formData.initial_password, PASSWORD_CRYPTO_SCENE.PASSWORD_CRYPTO_SCENE_CONFIGURE_PASSWORD_POLICY)
+      ? await encryptPassword(formData.initial_password, )
       : undefined
   };
   if (formData.id) await defBaseLoginPolicyService.UpdateBaseLoginPolicy({ base_login_policy: baseLoginPolicy });

package/dist/package/src/views/base/message-provider/index.vue

@@ -27,6 +27,7 @@ import { useAuthButtons } from "@liujitcn/kratos-admin-core/auth";
 import { buildPageRequest, normalizeSelectedIds } from "@liujitcn/kratos-admin-core/table";
 import { useTenantScope } from "@liujitcn/kratos-admin-core/tenant";
 import { t } from "@liujitcn/kratos-admin-core";
+import { encodeSecretFields } from "@liujitcn/kratos-admin-core/security";
 import { defBaseMessageProviderService } from "@liujitcn/kratos-admin-system/api/system/admin/v1/base_message_provider";
 import type {
   BaseMessageProvider,
@@ -69,7 +70,7 @@ const formFields = computed<ProFormField[]>(() => [
   { prop: "description", label: t("system.base.message_provider.field.description"), component: "input", colSpan: 24, props: { maxlength: 255 } },
   { prop: "icon", label: t("system.base.message_provider.field.icon"), component: "input", props: { maxlength: 100 } },
   { prop: "client_id", label: t("system.base.message_provider.field.client_id"), component: "input", props: { maxlength: 255, autocomplete: "off" } },
-  { prop: "client_secret", label: t("system.base.message_provider.field.client_secret"), component: "input", props: { type: "password", showPassword: true, maxlength: 1024, autocomplete: "new-password", placeholder: dialog.editing ? t("system.base.message_provider.placeholder.keep_secret") : "" } },
+  { prop: "client_secret", label: t("system.base.message_provider.field.client_secret"), component: "input", secret: { resource: "base_message_provider", field: "client_secret" }, props: { type: "password", showPassword: true, maxlength: 1024, autocomplete: "new-password", placeholder: dialog.editing ? t("system.base.message_provider.placeholder.keep_secret") : "" } },
   { prop: "config_items", label: t("system.base.message_provider.field.config"), component: "kv-list", props: { keyInputProps: { maxlength: 128 } } },
   { prop: "sort", label: t("common.field.sort"), component: "input-number", props: { min: 0, precision: 0 } },
   { prop: "status", label: t("common.field.status"), component: "radio-group", options: statusOptions.value }
@@ -99,7 +100,7 @@ const headerActions = computed<HeaderActionProps[]>(() => [
 ]);
 
 function defaultForm(): FormState {
-  return { id: 0, provider: "", name: "", description: "", icon: "", client_id: "", client_secret: "", secret_configured: false, config: {}, config_items: [], sort: 0, status: Status.STATUS_DISABLE };
+  return { id: 0, provider: "", name: "", description: "", icon: "", client_id: "", client_secret: undefined, secret_configured: false, config: {}, config_items: [], sort: 0, status: Status.STATUS_DISABLE };
 }
 
 async function requestTable(params: Record<string, unknown>) {
@@ -121,8 +122,9 @@ async function handleSubmit() {
   const payload = JSON.parse(JSON.stringify(formData)) as BaseMessageProviderForm & { config_items?: ConfigItem[] };
   delete payload.config_items;
   payload.config = config;
-  if (payload.id) await defBaseMessageProviderService.UpdateBaseMessageProvider({ base_message_provider: payload });
-  else await defBaseMessageProviderService.CreateBaseMessageProvider({ base_message_provider: payload });
+  const form = await encodeSecretFields(formFields.value, payload) as BaseMessageProviderForm;
+  if (form.id) await defBaseMessageProviderService.UpdateBaseMessageProvider({ base_message_provider: form });
+  else await defBaseMessageProviderService.CreateBaseMessageProvider({ base_message_provider: form });
   ElMessage.success(t("common.message.operation_success"));
   dialog.visible = false;
   await proTable.value?.getTableList();

package/dist/package/src/views/base/oauth-provider/index.vue

@@ -39,6 +39,7 @@ import { useAuthButtons } from "@liujitcn/kratos-admin-core/auth";
 import { buildPageRequest, normalizeSelectedIds } from "@liujitcn/kratos-admin-core/table";
 import { useTenantScope } from "@liujitcn/kratos-admin-core/tenant";
 import { t } from "@liujitcn/kratos-admin-core";
+import { encodeSecretFields } from "@liujitcn/kratos-admin-core/security";
 import { defBaseOauthProviderService } from "@liujitcn/kratos-admin-system/api/system/admin/v1/base_oauth_provider";
 import { loadEnabledBaseLanguages } from "@liujitcn/kratos-admin-system/api/system/admin/v1/base_language";
 import type {
@@ -103,7 +104,7 @@ const formFields = computed<ProFormField[]>(() => [
   { prop: "description", suffixSlotName: "descriptionI18ns", label: t("system.base.oauth_provider.field.description"), component: "input", colSpan: 24, props: { maxlength: 255, placeholder: t("system.base.oauth_provider.placeholder.description") } },
   { prop: "icon", label: t("system.base.oauth_provider.field.icon"), component: "input", colSpan: 12, props: { maxlength: 255, placeholder: t("system.base.oauth_provider.placeholder.icon") } },
   { prop: "client_id", label: t("system.base.oauth_provider.field.client_id"), component: "input", colSpan: 12, props: { maxlength: 255, autocomplete: "off", placeholder: t("system.base.oauth_provider.placeholder.client_id") } },
-  { prop: "client_secret", label: t("system.base.oauth_provider.field.client_secret"), component: "input", colSpan: 12, props: { type: "password", showPassword: true, maxlength: 512, autocomplete: "new-password", placeholder: dialog.editing ? t("system.base.oauth_provider.placeholder.keep_secret") : t("system.base.oauth_provider.placeholder.client_secret") } },
+  { prop: "client_secret", label: t("system.base.oauth_provider.field.client_secret"), component: "input", colSpan: 12, secret: { resource: "base_oauth_provider", field: "client_secret" }, props: { type: "password", showPassword: true, maxlength: 512, autocomplete: "new-password", placeholder: dialog.editing ? t("system.base.oauth_provider.placeholder.keep_secret") : t("system.base.oauth_provider.placeholder.client_secret") } },
   { prop: "redirect_uri", label: t("system.base.oauth_provider.field.redirect_uri"), component: "input", colSpan: 12, props: { maxlength: 512, placeholder: t("system.base.oauth_provider.placeholder.redirect_uri") } },
   { prop: "scopes", label: t("system.base.oauth_provider.field.scopes"), component: "dynamic-list", colSpan: 12, props: { inputProps: { maxlength: 128, placeholder: t("system.base.oauth_provider.placeholder.scopes") } } },
   { prop: "config_items", label: t("system.base.oauth_provider.field.config"), component: "kv-list", colSpan: 12, props: { keyInputProps: { maxlength: 128 } } },
@@ -152,7 +153,7 @@ const headerActions = computed<HeaderActionProps[]>(() => [
 
 /** 创建默认 OAuth 登录方式表单。 */
 function defaultForm(): OauthProviderFormState {
-  return { id: 0, provider: "", name: "", description: "", icon: "", client_id: "", client_secret: "", secret_configured: false, redirect_uri: "", scopes: [], config: {}, config_items: [], sort: 0, status: Status.STATUS_DISABLE, name_i18ns: [], description_i18ns: [] };
+  return { id: 0, provider: "", name: "", description: "", icon: "", client_id: "", client_secret: undefined, secret_configured: false, redirect_uri: "", scopes: [], config: {}, config_items: [], sort: 0, status: Status.STATUS_DISABLE, name_i18ns: [], description_i18ns: [] };
 }
 
 /** 请求 OAuth 登录方式表格数据。 */
@@ -185,11 +186,13 @@ async function handleSubmit() {
   const payload = JSON.parse(JSON.stringify(formData)) as BaseOauthProviderForm & { config_items?: OauthProviderConfigItem[] };
   delete payload.config_items;
   payload.config = config;
+  const source = await encodeSecretFields(formFields.value, payload);
   payload.scopes = [...new Set(formData.scopes.map(value => value.trim()).filter(Boolean))];
-  payload.name_i18ns = serializeDynamicI18ns(nameI18nValues.value, "base_oauth_provider.name", payload.id, payload.name);
-  payload.description_i18ns = serializeDynamicI18ns(descriptionI18nValues.value, "base_oauth_provider.description", payload.id, payload.description);
-  if (payload.id) await defBaseOauthProviderService.UpdateBaseOauthProvider({ base_oauth_provider: payload });
-  else await defBaseOauthProviderService.CreateBaseOauthProvider({ base_oauth_provider: payload });
+  source.name_i18ns = serializeDynamicI18ns(nameI18nValues.value, "base_oauth_provider.name", source.id, source.name);
+  source.description_i18ns = serializeDynamicI18ns(descriptionI18nValues.value, "base_oauth_provider.description", source.id, source.name);
+  const form = source as BaseOauthProviderForm;
+  if (form.id) await defBaseOauthProviderService.UpdateBaseOauthProvider({ base_oauth_provider: form });
+  else await defBaseOauthProviderService.CreateBaseOauthProvider({ base_oauth_provider: form });
   ElMessage.success(t("common.message.operation_success"));
   dialog.visible = false;
   await proTable.value?.getTableList();

package/dist/package/src/views/base/user/index.vue

@@ -85,7 +85,7 @@ import { defBasePostService } from "@liujitcn/kratos-admin-system/api/system/adm
 import type { SelectOptionResponse_Option, TreeOptionResponse_Option } from "@liujitcn/kratos-admin-system/rpc/common/v1/common";
 import { Status } from "@liujitcn/kratos-admin-system/rpc/common/v1/enum";
 import { buildPageRequest, normalizeSelectedIds } from "@liujitcn/kratos-admin-core/table";
-import { PASSWORD_CRYPTO_SCENE, encryptPassword } from "@liujitcn/kratos-admin-core/security";
+import { encryptPassword } from "@liujitcn/kratos-admin-core/security";
 import { useTenantScope } from "@liujitcn/kratos-admin-core/tenant";
 import { t } from "@liujitcn/kratos-admin-core";
 
@@ -775,7 +775,7 @@ async function handleConfirmResetPassword() {
   resetPwdFormDialogRef.value?.validate()?.then(async valid => {
     if (!valid) return;
 
-    const pwd = await encryptPassword(resetPwdForm.pwd, PASSWORD_CRYPTO_SCENE.PASSWORD_CRYPTO_SCENE_RESET_BASE_USER_PASSWORD);
+    const pwd = await encryptPassword(resetPwdForm.pwd, );
     defBaseUserService.ResetBaseUserPassword({ id: resetPwdForm.id, pwd }).then(() => {
       ElMessage.success(t("system.base.user.message.reset_password_success", { name: resetPwdTargetName.value }));
       handleCloseResetPasswordDialog();
@@ -796,7 +796,7 @@ const handleSubmit = useDebounceFn(() => {
       pwd:
         submitData.id || !submitData.pwd
           ? undefined
-          : await encryptPassword(submitData.pwd, PASSWORD_CRYPTO_SCENE.PASSWORD_CRYPTO_SCENE_CREATE_BASE_USER)
+          : await encryptPassword(submitData.pwd, )
     } as BaseUserForm;
     const request = submitData.id
       ? defBaseUserService.UpdateBaseUser({ base_user: baseUser })

package/dist/package/src/views/profile/components/security.vue

@@ -192,12 +192,11 @@ import ProForm from "@liujitcn/kratos-admin-core/components/ProForm/index.vue";
 import MfaSetupPanel from "@liujitcn/kratos-admin-core/components/Mfa/MfaSetupPanel.vue";
 import MfaRecoveryCodesDialog from "@liujitcn/kratos-admin-core/components/Mfa/MfaRecoveryCodesDialog.vue";
 import type { ProFormField, ProFormInstance } from "@liujitcn/kratos-admin-core/components/ProForm/interface";
-import type { PasswordCrypto } from "@liujitcn/kratos-admin-core/rpc/common/v1/types";
+import type { SecretCrypto } from "@liujitcn/kratos-admin-core/rpc/common/v1/types";
 import {
   getOauthProviderIcon,
   withOauthProviderDisplay,
   type OauthProviderDisplay,
-  PASSWORD_CRYPTO_SCENE,
   encryptPassword,
   copyText,
   createWebAuthnCredential,
@@ -449,7 +448,7 @@ function openMfaRecovery() {
 }
 
 /** 开始绑定 MFA。 */
-async function beginMfaSetup(password: PasswordCrypto) {
+async function beginMfaSetup(password: SecretCrypto) {
   mfaLoading.value = true;
   try {
     const result = await defMfaService.BeginMfaSetup({ password, setup_ticket: "" });
@@ -494,7 +493,7 @@ async function disableMfa() {
   }
   mfaLoading.value = true;
   try {
-    const password = await encryptPassword(mfaForm.password, PASSWORD_CRYPTO_SCENE.PASSWORD_CRYPTO_SCENE_MFA);
+    const password = await encryptPassword(mfaForm.password);
     if (mfaForm.recoveryCode) {
       await defMfaService.DisableMfa({
         password,
@@ -574,7 +573,7 @@ async function handleMfaAction() {
     return;
   }
   try {
-    const password = await encryptPassword(mfaForm.password, PASSWORD_CRYPTO_SCENE.PASSWORD_CRYPTO_SCENE_MFA);
+    const password = await encryptPassword(mfaForm.password);
     await beginMfaSetup(password);
     mfaForm.password = "";
   } catch (error) {

package/dist/package/src/views/tool/code-gen/config.ts

@@ -81,6 +81,7 @@ const codeGenFormComponentLabelKeys: Record<ProFormComponentType, string> = {
   switch: "system.code.gen.component.switch",
   checkbox: "system.code.gen.component.checkbox",
   select: "system.code.gen.component.select",
+  cascader: "system.code.gen.component.cascader",
   "tenant-select": "system.code.gen.component.select",
   dict: "system.code.gen.component.dict",
   "radio-group": "system.code.gen.component.radio_group",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@liujitcn/kratos-admin-system",
   "private": false,
-  "version": "0.0.66",
+  "version": "0.0.68",
   "type": "module",
   "description": "kratos-admin system management module",
   "license": "MIT",
@@ -16,7 +16,7 @@
     "sortablejs": "^1.15.2",
     "swagger-ui-dist": "^5.32.15",
     "vue-element-plus-x": "^2.0.3",
-    "@liujitcn/kratos-admin-core": "0.0.66"
+    "@liujitcn/kratos-admin-core": "0.0.68"
   },
   "peerDependencies": {
     "@element-plus/icons-vue": "^2.3.1",