refactor(config): remove secrets.yaml architecture

- delete secrets-manager.ts entirely

- remove secrets API routes and client methods

- simplify unified-config-types (remove vault/secrets)

- update profile-reader to remove secrets loading

- clean up unused hooks and API client methods

src/api/services/profile-reader.ts

@@ -9,7 +9,6 @@ import * as fs from 'fs';
 import * as path from 'path';
 import { getCcsDir, loadConfig } from '../../utils/config-manager';
 import { loadOrCreateUnifiedConfig, isUnifiedMode } from '../../config/unified-config-loader';
-import { getProfileSecrets } from '../../config/secrets-manager';
 import type { ApiProfileInfo, CliproxyVariantInfo, ApiListResult } from './profile-types';
 
 /**
@@ -36,29 +35,7 @@ export function isApiProfileConfigured(apiName: string): boolean {
     const ccsDir = getCcsDir();
     const settingsPath = path.join(ccsDir, `${apiName}.settings.json`);
 
-    if (isUnifiedMode()) {
-      // Check secrets.yaml first
-      const secrets = getProfileSecrets(apiName);
-      const secretToken = secrets?.ANTHROPIC_AUTH_TOKEN || '';
-      if (
-        secretToken.length > 0 &&
-        !secretToken.includes('YOUR_') &&
-        !secretToken.includes('your-')
-      ) {
-        return true;
-      }
-
-      // Fallback: check settings.json file (profiles created via UI store keys here)
-      if (fs.existsSync(settingsPath)) {
-        const settings = JSON.parse(fs.readFileSync(settingsPath, 'utf8'));
-        const token = settings?.env?.ANTHROPIC_AUTH_TOKEN || '';
-        return token.length > 0 && !token.includes('YOUR_') && !token.includes('your-');
-      }
-
-      return false;
-    }
-
-    // Legacy: check settings.json file
+    // Check settings.json file for API key
     if (!fs.existsSync(settingsPath)) return false;
 
     const settings = JSON.parse(fs.readFileSync(settingsPath, 'utf8'));

src/api/services/profile-writer.ts

@@ -11,7 +11,6 @@ import {
   saveUnifiedConfig,
   isUnifiedMode,
 } from '../../config/unified-config-loader';
-import { deleteAllProfileSecrets } from '../../config/secrets-manager';
 import type { ModelMapping, CreateApiProfileResult, RemoveApiProfileResult } from './profile-types';
 
 /** Create settings.json file for API profile (legacy format) */
@@ -152,9 +151,6 @@ function removeApiProfileUnified(name: string): void {
   }
 
   saveUnifiedConfig(config);
-
-  // Remove any legacy secrets
-  deleteAllProfileSecrets(name);
 }
 
 /** Remove API profile from legacy config */