fix(desktop): allow ModelScope credentials

desktop/electron/scripts/smoke-credentials.cjs

@@ -25,6 +25,7 @@ async function run() {
       path.join(configDirectory, ".env"),
       [
         "OPENAI_API_KEY=desktop-smoke-openai-secret",
+        "MODELSCOPE_API_KEY=desktop-smoke-modelscope-secret",
         "TUSHARE_TOKEN='desktop-smoke-tushare-secret'",
         "ANTHROPIC_API_KEY=sk-xxx",
         "NON_SECRET_SETTING=preserved",
@@ -46,18 +47,24 @@ async function run() {
 
     const initialEnvironment = store.environment();
     assert.equal(initialEnvironment.OPENAI_API_KEY, "desktop-smoke-openai-secret");
+    assert.equal(
+      initialEnvironment.MODELSCOPE_API_KEY,
+      "desktop-smoke-modelscope-secret",
+    );
     assert.equal(initialEnvironment.TUSHARE_TOKEN, "desktop-smoke-tushare-secret");
     assert.equal(initialEnvironment.QVERIS_API_KEY, "desktop-smoke-qveris-secret");
     assert.equal(initialEnvironment.ANTHROPIC_API_KEY, undefined);
 
     const status = store.status();
     assert.deepEqual(status.configured, [
+      "MODELSCOPE_API_KEY",
       "OPENAI_API_KEY",
       "QVERIS_API_KEY",
       "TUSHARE_TOKEN",
     ]);
     assert.deepEqual(status.migrated, [
       "OPENAI_API_KEY",
+      "MODELSCOPE_API_KEY",
       "TUSHARE_TOKEN",
       "QVERIS_API_KEY",
     ]);
@@ -72,10 +79,12 @@ async function run() {
 
     const migratedDotenv = await fs.readFile(path.join(configDirectory, ".env"), "utf8");
     assert.match(migratedDotenv, /OPENAI_API_KEY is stored by Vibe-Trading Desktop/u);
+    assert.match(migratedDotenv, /MODELSCOPE_API_KEY is stored by Vibe-Trading Desktop/u);
     assert.match(migratedDotenv, /TUSHARE_TOKEN is stored by Vibe-Trading Desktop/u);
     assert.match(migratedDotenv, /ANTHROPIC_API_KEY=sk-xxx/u);
     assert.match(migratedDotenv, /NON_SECRET_SETTING=preserved/u);
     assert.ok(!migratedDotenv.includes("desktop-smoke-openai-secret"));
+    assert.ok(!migratedDotenv.includes("desktop-smoke-modelscope-secret"));
     assert.ok(!migratedDotenv.includes("desktop-smoke-tushare-secret"));
 
     const migratedQveris = JSON.parse(
@@ -89,6 +98,10 @@ async function run() {
       reloadedStore.environment().OPENAI_API_KEY,
       "desktop-smoke-openai-secret",
     );
+    assert.equal(
+      reloadedStore.environment().MODELSCOPE_API_KEY,
+      "desktop-smoke-modelscope-secret",
+    );
 
     await store.set("OPENAI_API_KEY", "desktop-smoke-replacement");
     assert.equal(store.environment().OPENAI_API_KEY, "desktop-smoke-replacement");

desktop/electron/src/secure-credentials.ts

@@ -26,6 +26,7 @@ const ENV_CREDENTIALS = new Set([
   "KIMI_CODING_API_KEY",
   "MINIMAX_API_KEY",
   "MIMO_API_KEY",
+  "MODELSCOPE_API_KEY",
   "SPARK_API_KEY",
   "ZAI_API_KEY",
   "TUSHARE_TOKEN",