src/app/api/auth/register/route.ts

@@ -122,19 +122,9 @@ export async function POST(request: NextRequest) {
       })
       .returning();
 
-    // 创建默认用户设置（API Key 为空，需要用户自行配置）
+    // 创建默认用户设置
     await db.insert(userSettings).values({
       userId,
-      cchUrl: process.env.CCH_DEFAULT_URL || 'https://claude.leocoder.cn/',
-      cchApiKey: null,
-      cchApiKeyConfigured: false,
-      defaultModel: 'claude-sonnet-4-20250514',
-      defaultTools: ['web_search', 'code_execution', 'web_fetch'],
-      theme: 'light',
-      language: 'zh-CN',
-      fontSize: 15,
-      enableThinking: false,
-      saveChatHistory: true,
     });
 
     // 生成 JWT Token

src/app/api/chat/route.ts

@@ -4,8 +4,6 @@ import { conversations, messages, userSettings } from '@/drizzle/schema';
 import { eq } from 'drizzle-orm';
 import { nanoid } from 'nanoid';
 import { executeTool } from '@/services/tools';
-import { getCurrentUser } from '@/lib/auth';
-import { decryptApiKey } from '@/lib/crypto';
 
 interface ChatRequest {
   conversationId: string;
@@ -214,30 +212,18 @@ export async function POST(request: Request) {
       })) : undefined,
     });
 
-    // 获取当前登录用户
+    // 获取用户设置
-    const user = await getCurrentUser();
-    if (!user) {
-      return NextResponse.json(
-        { error: '请先登录后再使用聊天功能' },
-        { status: 401 }
-      );
-    }
-
-    // 获取该用户的设置
     const settings = await db.query.userSettings.findFirst({
-      where: eq(userSettings.userId, user.userId),
+      where: eq(userSettings.id, 1),
     });
 
     if (!settings?.cchApiKey) {
       return NextResponse.json(
-        { error: '请先在设置中配置您的 API Key 才能使用聊天功能', code: 'API_KEY_NOT_CONFIGURED' },
+        { error: 'Please configure your CCH API key in settings' },
         { status: 400 }
       );
     }
 
-    // 解密 API Key
-    const decryptedApiKey = decryptApiKey(settings.cchApiKey);
-
     // 获取对话信息
     const conversation = await db.query.conversations.findFirst({
       where: eq(conversations.conversationId, conversationId),
@@ -281,7 +267,7 @@ export async function POST(request: Request) {
     const stream = new ReadableStream({
       async start(controller) {
         try {
-          const cchUrl = settings.cchUrl || process.env.CCH_DEFAULT_URL || 'https://claude.leocoder.cn/';
+          const cchUrl = settings.cchUrl || 'http://localhost:13500';
 
           // 获取系统提示词（叠加模式）
           // 1. 始终使用 DEFAULT_SYSTEM_PROMPT 作为基础
@@ -316,7 +302,7 @@ export async function POST(request: Request) {
             // ==================== Codex 模型处理（OpenAI 格式） ====================
             const result = await handleCodexChat({
               cchUrl,
-              apiKey: decryptedApiKey,
+              apiKey: settings.cchApiKey!,
               model: useModel,
               systemPrompt,
               temperature,
@@ -335,7 +321,7 @@ export async function POST(request: Request) {
             // ==================== Claude 模型处理（原有逻辑） ====================
             const result = await handleClaudeChat({
               cchUrl,
-              apiKey: decryptedApiKey,
+              apiKey: settings.cchApiKey!,
               model: useModel,
               systemPrompt,
               temperature,

src/app/api/settings/route.ts

@@ -2,12 +2,18 @@ import { NextResponse } from 'next/server';
 import { db } from '@/drizzle/db';
 import { userSettings } from '@/drizzle/schema';
 import { eq } from 'drizzle-orm';
-import { getCurrentUser } from '@/lib/auth';
-import { encryptApiKey } from '@/lib/crypto';
 
-// 默认设置值
+// GET /api/settings - 获取用户设置
-const DEFAULT_SETTINGS = {
+export async function GET() {
-  cchUrl: process.env.CCH_DEFAULT_URL || 'https://claude.leocoder.cn/',
+  try {
+    const settings = await db.query.userSettings.findFirst({
+      where: eq(userSettings.id, 1),
+    });
+
+    if (!settings) {
+      // 如果没有设置，返回默认值
+      return NextResponse.json({
+        cchUrl: process.env.CCH_DEFAULT_URL || 'http://localhost:13500',
         cchApiKeyConfigured: false,
         defaultModel: 'claude-sonnet-4-20250514',
         defaultTools: ['web_search', 'code_execution', 'web_fetch'],
@@ -18,65 +24,23 @@ const DEFAULT_SETTINGS = {
         fontSize: 15,
         enableThinking: false,
         saveChatHistory: true,
-};
+      });
-
-// 格式化设置响应（不返回 API Key 本身）
-function formatSettingsResponse(settings: typeof userSettings.$inferSelect | null) {
-  if (!settings) {
-    return DEFAULT_SETTINGS;
     }
 
-  return {
+    // 不返回 API Key 本身，只返回是否已配置
-    cchUrl: settings.cchUrl || DEFAULT_SETTINGS.cchUrl,
+    return NextResponse.json({
-    cchApiKeyConfigured: settings.cchApiKeyConfigured || false,
+      cchUrl: settings.cchUrl,
-    defaultModel: settings.defaultModel || DEFAULT_SETTINGS.defaultModel,
+      cchApiKeyConfigured: settings.cchApiKeyConfigured,
-    defaultTools: settings.defaultTools || DEFAULT_SETTINGS.defaultTools,
+      defaultModel: settings.defaultModel,
+      defaultTools: settings.defaultTools,
       systemPrompt: settings.systemPrompt || '',
       temperature: settings.temperature || '0.7',
-    theme: settings.theme || DEFAULT_SETTINGS.theme,
+      theme: settings.theme,
-    language: settings.language || DEFAULT_SETTINGS.language,
+      language: settings.language,
       fontSize: settings.fontSize || 15,
-    enableThinking: settings.enableThinking || false,
+      enableThinking: settings.enableThinking,
-    saveChatHistory: settings.saveChatHistory ?? true,
+      saveChatHistory: settings.saveChatHistory,
-  };
-}
-
-// GET /api/settings - 获取当前用户的设置
-export async function GET() {
-  try {
-    // 1. 获取当前登录用户
-    const user = await getCurrentUser();
-    if (!user) {
-      // 未登录用户返回默认设置（允许查看但无法保存）
-      return NextResponse.json(DEFAULT_SETTINGS);
-    }
-
-    // 2. 查询该用户的设置
-    const settings = await db.query.userSettings.findFirst({
-      where: eq(userSettings.userId, user.userId),
     });
-
-    // 3. 如果没有设置记录，创建默认设置
-    if (!settings) {
-      const newSettings = await db
-        .insert(userSettings)
-        .values({
-          userId: user.userId,
-          cchUrl: DEFAULT_SETTINGS.cchUrl,
-          defaultModel: DEFAULT_SETTINGS.defaultModel,
-          defaultTools: DEFAULT_SETTINGS.defaultTools,
-          theme: DEFAULT_SETTINGS.theme,
-          language: DEFAULT_SETTINGS.language,
-          fontSize: DEFAULT_SETTINGS.fontSize,
-          enableThinking: DEFAULT_SETTINGS.enableThinking,
-          saveChatHistory: DEFAULT_SETTINGS.saveChatHistory,
-        })
-        .returning();
-
-      return NextResponse.json(formatSettingsResponse(newSettings[0]));
-    }
-
-    return NextResponse.json(formatSettingsResponse(settings));
   } catch (error) {
     console.error('Failed to get settings:', error);
     return NextResponse.json(
@@ -86,18 +50,9 @@ export async function GET() {
   }
 }
 
-// PUT /api/settings - 更新当前用户的设置
+// PUT /api/settings - 更新用户设置
 export async function PUT(request: Request) {
   try {
-    // 1. 获取当前登录用户
-    const user = await getCurrentUser();
-    if (!user) {
-      return NextResponse.json(
-        { error: '请先登录后再修改设置' },
-        { status: 401 }
-      );
-    }
-
     const body = await request.json();
     const {
       cchUrl,
@@ -113,7 +68,7 @@ export async function PUT(request: Request) {
       saveChatHistory,
     } = body;
 
-    // 2. 构建更新对象
+    // 构建更新对象
     const updateData: Record<string, unknown> = {
       updatedAt: new Date(),
     };
@@ -122,15 +77,14 @@ export async function PUT(request: Request) {
       updateData.cchUrl = cchUrl;
     }
 
-    // 如果提供了 API Key，加密后存储
+    // 如果提供了 API Key，更新它
     if (cchApiKey !== undefined) {
       if (cchApiKey === '') {
         // 清除 API Key
         updateData.cchApiKey = null;
         updateData.cchApiKeyConfigured = false;
       } else {
-        // 加密存储 API Key
+        updateData.cchApiKey = cchApiKey;
-        updateData.cchApiKey = encryptApiKey(cchApiKey);
         updateData.cchApiKeyConfigured = true;
       }
     }
@@ -172,23 +126,15 @@ export async function PUT(request: Request) {
       updateData.saveChatHistory = saveChatHistory;
     }
 
-    // 3. 检查是否存在该用户的设置记录
+    // 检查是否存在设置记录
     const existing = await db.query.userSettings.findFirst({
-      where: eq(userSettings.userId, user.userId),
+      where: eq(userSettings.id, 1),
     });
 
     if (!existing) {
       // 创建新的设置记录
       await db.insert(userSettings).values({
-        userId: user.userId,
+        id: 1,
-        cchUrl: DEFAULT_SETTINGS.cchUrl,
-        defaultModel: DEFAULT_SETTINGS.defaultModel,
-        defaultTools: DEFAULT_SETTINGS.defaultTools,
-        theme: DEFAULT_SETTINGS.theme,
-        language: DEFAULT_SETTINGS.language,
-        fontSize: DEFAULT_SETTINGS.fontSize,
-        enableThinking: DEFAULT_SETTINGS.enableThinking,
-        saveChatHistory: DEFAULT_SETTINGS.saveChatHistory,
         ...updateData,
       });
     } else {
@@ -196,15 +142,27 @@ export async function PUT(request: Request) {
       await db
         .update(userSettings)
         .set(updateData)
-        .where(eq(userSettings.userId, user.userId));
+        .where(eq(userSettings.id, 1));
     }
 
-    // 4. 返回更新后的设置（不包含 API Key）
+    // 返回更新后的设置（不包含 API Key）
     const updatedSettings = await db.query.userSettings.findFirst({
-      where: eq(userSettings.userId, user.userId),
+      where: eq(userSettings.id, 1),
     });
 
-    return NextResponse.json(formatSettingsResponse(updatedSettings ?? null));
+    return NextResponse.json({
+      cchUrl: updatedSettings?.cchUrl,
+      cchApiKeyConfigured: updatedSettings?.cchApiKeyConfigured,
+      defaultModel: updatedSettings?.defaultModel,
+      defaultTools: updatedSettings?.defaultTools,
+      systemPrompt: updatedSettings?.systemPrompt || '',
+      temperature: updatedSettings?.temperature || '0.7',
+      theme: updatedSettings?.theme,
+      language: updatedSettings?.language,
+      fontSize: updatedSettings?.fontSize || 15,
+      enableThinking: updatedSettings?.enableThinking,
+      saveChatHistory: updatedSettings?.saveChatHistory,
+    });
   } catch (error) {
     console.error('Failed to update settings:', error);
     return NextResponse.json(

src/app/chat/[id]/page.tsx

@@ -2,8 +2,7 @@
 
 import { useState, useRef, useEffect, use } from 'react';
 import { useRouter, useSearchParams } from 'next/navigation';
-import Link from 'next/link';
+import { Share2, MoreHorizontal, Loader2, Square, Clock, ChevronDown, Pencil, Trash2, Check, X } from 'lucide-react';
-import { Share2, MoreHorizontal, Loader2, Square, Clock, ChevronDown, Pencil, Trash2, Check, X, AlertTriangle, Settings } from 'lucide-react';
 import { Sidebar, SidebarToggle } from '@/components/layout/Sidebar';
 import { ChatInput } from '@/components/features/ChatInput';
 import { MessageBubble } from '@/components/features/MessageBubble';
@@ -449,30 +448,6 @@ export default function ChatPage({ params }: PageProps) {
         {/* 消息列表区域 */}
         <div className="flex-1 overflow-y-auto">
           <div className="max-w-[900px] mx-auto px-4 py-6">
-            {/* API Key 未配置提示 */}
-            {!settings?.cchApiKeyConfigured && (
-              <div className="mb-6 p-4 bg-amber-50 dark:bg-amber-900/20 border border-amber-200 dark:border-amber-800 rounded-lg">
-                <div className="flex items-start gap-3">
-                  <AlertTriangle className="w-5 h-5 text-amber-500 mt-0.5 flex-shrink-0" />
-                  <div className="flex-1">
-                    <h3 className="text-sm font-medium text-amber-800 dark:text-amber-200 mb-1">
-                      请先配置 API Key
-                    </h3>
-                    <p className="text-sm text-amber-700 dark:text-amber-300 mb-3">
-                      您需要配置自己的 API Key 才能使用 AI 对话功能。请前往设置页面完成配置。
-                    </p>
-                    <Link
-                      href="/settings"
-                      className="inline-flex items-center gap-2 px-4 py-2 bg-amber-500 hover:bg-amber-600 text-white text-sm font-medium rounded-lg transition-colors"
-                    >
-                      <Settings size={16} />
-                      前往设置
-                    </Link>
-                  </div>
-                </div>
-              </div>
-            )}
-
             {messages.length === 0 ? (
               <div className="flex flex-col items-center justify-center py-20 text-center">
                 <h2 className="text-xl font-medium text-[var(--color-text-primary)] mb-2">

src/app/settings/page.tsx

@@ -50,6 +50,7 @@ export default function SettingsPage() {
   const { tools, loading: toolsLoading } = useTools();
 
   // CCH 配置状态
+  const [cchUrl, setCchUrl] = useState('');
   const [cchApiKey, setCchApiKey] = useState('');
   const [showApiKey, setShowApiKey] = useState(false);
   const [saveStatus, setSaveStatus] = useState<'idle' | 'saving' | 'saved' | 'error'>('idle');
@@ -68,6 +69,7 @@ export default function SettingsPage() {
   // 当设置加载完成后，更新本地状态
   useEffect(() => {
     if (settings) {
+      setCchUrl(settings.cchUrl || '');
       setSystemPrompt(settings.systemPrompt || '');
       setTemperature(settings.temperature || '0.7');
     }
@@ -77,9 +79,11 @@ export default function SettingsPage() {
   const handleSaveCchConfig = async () => {
     setSaveStatus('saving');
     try {
+      const updates: Record<string, string> = { cchUrl };
       if (cchApiKey) {
-        await updateSettings({ cchApiKey });
+        updates.cchApiKey = cchApiKey;
       }
+      await updateSettings(updates);
       setSaveStatus('saved');
       setCchApiKey(''); // 清除输入的 API Key
       setTimeout(() => setSaveStatus('idle'), 2000);
@@ -313,6 +317,19 @@ export default function SettingsPage() {
           title="CCH 服务配置"
           description="配置 Claude Code Hub 服务连接"
         >
+              <SettingsItem
+                label="CCH 服务地址"
+                description="Claude Code Hub 服务的 URL"
+              >
+                <input
+                  type="text"
+                  className="settings-input w-80"
+                  value={cchUrl}
+                  onChange={(e) => setCchUrl(e.target.value)}
+                  placeholder="http://localhost:13500"
+                />
+              </SettingsItem>
+
               <SettingsItem
                 label="API Key"
                 description={

src/lib/crypto.ts

@@ -1,88 +0,0 @@
-import crypto from 'crypto';
-
-// 加密密钥（32字节 = 256位，用于 AES-256）
-// 生产环境应使用环境变量
-const ENCRYPTION_KEY = process.env.ENCRYPTION_KEY || 'lioncode-encryption-key-2024-sec';
-
-// 确保密钥长度为32字节
-const getKey = (): Buffer => {
-  const key = ENCRYPTION_KEY;
-  // 使用 SHA-256 哈希确保密钥长度为32字节
-  return crypto.createHash('sha256').update(key).digest();
-};
-
-// IV 长度（AES-256-GCM 推荐使用12字节）
-const IV_LENGTH = 12;
-
-// Auth Tag 长度
-const AUTH_TAG_LENGTH = 16;
-
-/**
- * 加密 API Key
- * 使用 AES-256-GCM 加密算法
- * @param plainText 明文 API Key
- * @returns 加密后的字符串（格式：iv:authTag:encryptedData，Base64编码）
- */
-export function encryptApiKey(plainText: string): string {
-  if (!plainText) return '';
-
-  const key = getKey();
-  const iv = crypto.randomBytes(IV_LENGTH);
-
-  const cipher = crypto.createCipheriv('aes-256-gcm', key, iv);
-
-  let encrypted = cipher.update(plainText, 'utf8', 'base64');
-  encrypted += cipher.final('base64');
-
-  const authTag = cipher.getAuthTag();
-
-  // 组合 IV + AuthTag + 加密数据，用冒号分隔
-  return `${iv.toString('base64')}:${authTag.toString('base64')}:${encrypted}`;
-}
-
-/**
- * 解密 API Key
- * @param encryptedText 加密后的字符串
- * @returns 解密后的明文 API Key
- */
-export function decryptApiKey(encryptedText: string): string {
-  if (!encryptedText) return '';
-
-  try {
-    const parts = encryptedText.split(':');
-    if (parts.length !== 3) {
-      // 兼容旧的明文存储（迁移期间）
-      console.warn('检测到未加密的 API Key，返回原值');
-      return encryptedText;
-    }
-
-    const [ivBase64, authTagBase64, encrypted] = parts;
-
-    const key = getKey();
-    const iv = Buffer.from(ivBase64, 'base64');
-    const authTag = Buffer.from(authTagBase64, 'base64');
-
-    const decipher = crypto.createDecipheriv('aes-256-gcm', key, iv);
-    decipher.setAuthTag(authTag);
-
-    let decrypted = decipher.update(encrypted, 'base64', 'utf8');
-    decrypted += decipher.final('utf8');
-
-    return decrypted;
-  } catch (error) {
-    console.error('API Key 解密失败:', error);
-    // 如果解密失败，可能是旧的明文数据，返回原值
-    return encryptedText;
-  }
-}
-
-/**
- * 检查字符串是否已加密
- * @param text 待检查的字符串
- * @returns 是否已加密
- */
-export function isEncrypted(text: string): boolean {
-  if (!text) return false;
-  const parts = text.split(':');
-  return parts.length === 3;
-}