fix(HEL-494): enforce datahub as sole website market boundary

Co-authored-by: multica-agent <github@multica.ai>

frontend/index.html

@@ -607,13 +607,13 @@
     <div class="admin-panel" data-admin-panel="market">
       <form id="systemMarketForm" class="settings-section">
         <div class="settings-section-heading"><h3>公共行情</h3><span id="systemDataStatus">待检查</span></div>
-        <label class="form-field"><span>Tushare Token</span><input id="systemTokenInput" type="password" autocomplete="off" minlength="20" placeholder="留空保留现有 Token"></label>
-        <label class="form-field"><span>iFinD Refresh Token</span><input id="systemIfindTokenInput" type="password" autocomplete="off" maxlength="2048" placeholder="留空保留现有 Token"></label>
+        <label class="form-field"><span>行情来源凭据</span><input id="systemTokenInput" type="text" value="请在数据中枢后台统一管理" disabled></label>
+        <label class="form-field"><span>实时来源凭据</span><input id="systemIfindTokenInput" type="text" value="请在数据中枢后台统一管理" disabled></label>
         <label class="switch-control"><input id="systemBackgroundRefresh" type="checkbox"><span>启用交易时段后台刷新</span></label>
         <p class="form-hint">所有用户读取同一份后台快照，页面不会随后台任务自动重绘。</p>
         <div id="datahubRouteStatus" class="admin-refresh-status" data-tone="idle" role="status" aria-live="polite"><i data-lucide="database"></i><span>数据中枢线路待检查</span></div>
         <div id="adminRefreshStatus" class="admin-refresh-status" data-tone="idle" role="status" aria-live="polite"><i data-lucide="circle-dot"></i><span>尚未手动刷新</span></div>
-        <div class="dialog-actions admin-inline-actions"><button id="adminRefreshButton" class="button" type="button"><i data-lucide="refresh-cw"></i>立即后台刷新</button><button class="button primary" type="submit">保存行情配置</button></div>
+        <div class="dialog-actions admin-inline-actions"><button id="adminRefreshButton" class="button" type="button"><i data-lucide="refresh-cw"></i>立即后台刷新</button><button class="button primary" type="submit">保存刷新设置</button></div>
       </form>
       <section class="settings-section">
         <div class="settings-section-heading"><h3>历史数据回补</h3><span>管理员任务</span></div>

frontend/m/js/pages.js

@@ -5242,16 +5242,16 @@
       '<div class="m-sys-body" data-system-admin-panel="market">' +
       '<div class="m-card m-sys-section"><strong>数据源状态</strong>' +
       '<div class="m-sys-status-list">' +
-      '<div class="m-sys-status-item"><span>Tushare</span><span>' + statusDot(data.configured) + (data.configured ? " 已配置" : " 未配置") + "</span></div>" +
+      '<div class="m-sys-status-item"><span>数据中枢</span><span>' + statusDot(data.configured) + (data.configured ? " 已连接" : " 未连接") + "</span></div>" +
       '<div class="m-sys-status-item"><span>iFinD</span><span>' + statusDot(ifind.configured) + (ifind.configured ? " 已配置" : " 未配置") + "</span></div>" +
       '<div class="m-sys-status-item"><span>行情快照</span><strong>' + number(data.snapshot_dates) + " 个交易日</strong></div>" +
       '<div class="m-sys-status-item"><span>后台刷新</span><span>' + statusDot(data.background_refresh_enabled) + (data.background_refresh_enabled ? " 已启用" : " 已暂停") + "</span></div>" +
       '<div class="m-sys-status-item"><span>数据中枢</span><span>' + statusDot(Boolean((data.datahub || {}).configured) && !((data.datahub || {}).fallback_count)) + datahubStatusText(data.datahub || {}) + "</span></div>" +
       "</div></div>" +
       '<div class="m-card m-sys-section"><strong>数据源密钥</strong>' +
-      formFieldHtml("Tushare Token", '<input id="m-sys-token" type="password" autocomplete="off" minlength="20" placeholder="留空则保留现有 Token">', false) +
-      formFieldHtml("iFinD Refresh Token", '<input id="m-sys-ifind" type="password" autocomplete="off" maxlength="2048" placeholder="留空则保留现有 Token">', false) +
-      '<button class="m-btn-primary" type="button" data-system-save-market>保存密钥</button></div>' +
+      formFieldHtml("行情来源凭据", '<input id="m-sys-token" type="text" value="请在数据中枢后台统一管理" disabled>', false) +
+      formFieldHtml("实时来源凭据", '<input id="m-sys-ifind" type="text" value="请在数据中枢后台统一管理" disabled>', false) +
+      '<button class="m-btn-primary" type="button" data-system-save-market>刷新状态</button></div>' +
       '<div class="m-card m-sys-section"><strong>后台刷新</strong>' +
       '<div class="m-sys-switch-row"><div><strong>交易时段自动刷新</strong><p class="m-sys-hint">开启后后台定时更新快照</p></div>' +
       '<button class="m-theme-switch" type="button" data-system-toggle-refresh role="switch" aria-checked="' + (data.background_refresh_enabled ? "true" : "false") + '" aria-label="交易时段自动刷新"><span class="m-theme-switch-thumb"></span></button></div>' +
@@ -5550,14 +5550,10 @@
   function saveSystemMarket() {
     const button = document.querySelector("[data-system-save-market]");
     if (button) button.disabled = true;
-    global.MobileAPI.request("/api/admin/settings", "POST", {
-      tushare_token: ((document.getElementById("m-sys-token") || {}).value || "").trim(),
-      ifind_refresh_token: ((document.getElementById("m-sys-ifind") || {}).value || "").trim(),
-    }).then(function () {
-      showToast("行情密钥已保存");
-      loadSystem();
+    loadSystem().then(function () {
+      showToast("数据中枢状态已刷新");
     }).catch(function (error) {
-      showToast(error && error.message ? error.message : "系统配置保存失败");
+      showToast(error && error.message ? error.message : "数据中枢状态读取失败");
     }).then(function () {
       if (button) button.disabled = false;
     });

frontend/shared/admin.js

@@ -41,12 +41,10 @@ async function openAdminSettings(refreshOnly = false) {
     const ifind = data.ifind || {};
     const llm = payload.llm || {};
     const membership = payload.membership || {};
-    status.textContent = `Tushare ${data.configured ? "已配置" : "未配置"} · iFinD ${ifind.configured ? "已配置" : "未配置"} · ${number(data.snapshot_dates)} 个交易日`;
+    status.textContent = `数据中枢 ${data.configured ? "已连接" : "未连接"} · iFinD ${ifind.configured ? "已配置" : "未配置"} · ${number(data.snapshot_dates)} 个交易日`;
     status.classList.toggle("connected", Boolean(data.configured));
     setText("systemDataStatus", data.background_refresh_enabled ? "后台刷新已启用" : "后台刷新已暂停");
     renderDatahubRouteStatus(data.datahub || {});
-    document.querySelector("#systemTokenInput").value = "";
-    document.querySelector("#systemIfindTokenInput").value = "";
     document.querySelector("#systemBackgroundRefresh").checked = Boolean(data.background_refresh_enabled);
     document.querySelector("#memberDailyLimit").value = number(membership.member_daily_limit) || 50;
     renderModelPool(llm.models || [], llm.primary_model_id || "", llm.fallback_model_id || "");
@@ -72,7 +70,7 @@ function renderDatahubRouteStatus(hub) {
   if (label) {
     label.textContent = hub.configured
       ? `数据中枢主线路 ${enabled}/${total}，当前无备用`
-      : "数据中枢尚未配置，网站仍走原接口";
+      : "数据中枢未配置，网站只保留已有真实快照";
   }
 }
 
@@ -205,13 +203,9 @@ async function saveMarketSettings(event) {
   button.disabled = true;
   try {
     await apiRequest("/api/admin/settings", "POST", {
-      tushare_token: document.querySelector("#systemTokenInput").value.trim(),
-      ifind_refresh_token: document.querySelector("#systemIfindTokenInput").value.trim(),
       background_refresh_enabled: document.querySelector("#systemBackgroundRefresh").checked,
     });
-    document.querySelector("#systemTokenInput").value = "";
-    document.querySelector("#systemIfindTokenInput").value = "";
-    showToast("行情配置已保存");
+    showToast("行情刷新设置已保存");
     await openAdminSettings(true);
   } catch (error) {
     showToast(error.message || "系统配置保存失败");