feat(agent-runtime): 接入多服务商安全配置

agent_runtime/admin.py

@@ -1,6 +1,6 @@
 from django.contrib import admin
 
-from .models import AgentRun, AgentRunEvent, HumanApproval, ToolCall
+from .models import AgentRun, AgentRunEvent, HumanApproval, ModelProviderConfig, ToolCall
 from .services import resolve_approval
 
 
@@ -27,6 +27,28 @@ class AgentRunAdmin(admin.ModelAdmin):
 admin.site.register(AgentRunEvent, ReadOnlyAuditAdmin)
 admin.site.register(ToolCall, ReadOnlyAuditAdmin)
 
+
+@admin.register(ModelProviderConfig)
+class ModelProviderConfigAdmin(admin.ModelAdmin):
+    """只展示连接元数据，密文 API Key 不进入 Admin 页面。"""
+
+    list_display = (
+        "provider_code",
+        "owner",
+        "status",
+        "is_default",
+        "last_verified_at",
+    )
+    list_filter = ("status", "is_default", "enabled")
+    search_fields = ("provider_code", "owner__username")
+    exclude = ("encrypted_api_key",)
+    readonly_fields = ("key_hint", "available_models", "last_verified_at", "last_error_code")
+
+    def has_add_permission(self, request):
+        """服务商配置必须经过页面连接验证，Admin 不允许绕过验证直接创建。"""
+
+        return False
+
 @admin.register(HumanApproval)
 class HumanApprovalAdmin(admin.ModelAdmin):
     """人工确认正文只读，通过受控动作执行领域状态转换。"""