feat: configure Gitea deployment and environment-managed WorldQuant credentials

backend/app/main.py

@@ -53,7 +53,7 @@ from .schemas import (
 from .security import bootstrap, cipher, issue_session, require_auth, token_hash, valid_password
 
 
-def account_output(account, client):
+def account_output(account, client, settings):
     keys = (
         "email",
         "wq_user_id",
@@ -70,6 +70,7 @@ def account_output(account, client):
     return {
         **{k: getattr(account, k) for k in keys},
         "configured": bool(account.password_encrypted),
+        "credentials_source": "environment" if settings.wq_email else "database",
         "session": client.session_info(),
     }
 
@@ -210,10 +211,12 @@ def create_app(settings=None, wq_client=None, ai_model_factory=None):
     @api.get("/account", response_model=AccountOutput, tags=["account"])
     async def get_account():
         async with sessions() as db:
-            return account_output(await db.get(Account, 1), runner.client)
+            return account_output(await db.get(Account, 1), runner.client, settings)
 
     @api.put("/account/credentials", response_model=AccountOutput, tags=["account"])
     async def credentials(body: CredentialsInput):
+        if settings.wq_email:
+            raise HTTPException(409, "WorldQuant 凭据由环境变量管理，请修改部署配置并重启服务")
         async with sessions() as db:
             account = await db.get(Account, 1)
             if account.wq_user_id and account.email.casefold() != body.email.casefold():
@@ -224,7 +227,7 @@ def create_app(settings=None, wq_client=None, ai_model_factory=None):
             account.email = body.email
             account.password_encrypted = cipher(settings).encrypt(body.password.encode()).decode()
             await db.commit()
-            return account_output(account, runner.client)
+            return account_output(account, runner.client, settings)
 
     @api.patch("/account/preferences", response_model=AccountOutput, tags=["account"])
     async def preferences(body: PreferencesInput):
@@ -233,7 +236,7 @@ def create_app(settings=None, wq_client=None, ai_model_factory=None):
             for key, value in body.model_dump().items():
                 setattr(account, key, value)
             await db.commit()
-            return account_output(account, runner.client)
+            return account_output(account, runner.client, settings)
 
     async def account_job(kind):
         async with sessions() as db: