M0+M1: 基建 + 用户/密钥/核心代理

后端 (Go/Gin/GORM):
- 配置(viper+env)、SQLite/Postgres 迁移、argon2id、AES-GCM 渠道密钥、JWT+refresh cookie
- 用户注册/登录/刷新/登出、API Key CRUD(仅存哈希、明文一次展示)
- 代理网关: /v1/chat/completions、/v1/responses、/v1/models 直通 OpenAI 渠道
  非流式+流式(SSE 零缓冲转发), 用量捕获(chat 末块/responses completed 嵌套),
  OpenAI 错误格式(401/402/404/502), 余额检查
- 异步批量记账 + 余额流水 + 日聚合, admin 用户/余额/配置 API
- 单测: crypto/jwt/apikey/流式 usage 提取

前端 (Vue3+TS+Vite+Tailwind v4):
- taste-skill 设计 tokens: 深色仪表盘, 石墨+信号铜色, Outfit+JetBrains Mono
- Landing/登录/注册, 控制台(仪表盘图表/密钥管理/用量明细)
- 基础组件 Button/Input/Badge/Modal, ECharts 用量图

部署: docker-compose(nginx+api+postgres), 双 Dockerfile, nginx SSE 反代
联调: scripts/mockupstream 本地 mock 上游, 端到端验证通过

web/src/stores/auth.ts

@@ -0,0 +1,61 @@
+import { defineStore } from 'pinia'
+import client, { unwrap } from '../api/client'
+
+export interface User {
+  id: number
+  username: string
+  email: string
+  role: 'user' | 'admin'
+  balance: number
+  status: string
+  created_at: string
+}
+
+interface LoginResp {
+  access_token: string
+  expires_in: number
+  user: User
+}
+
+export const useAuthStore = defineStore('auth', {
+  state: () => ({
+    user: null as User | null,
+    token: localStorage.getItem('ot_access') ?? '',
+    ready: false,
+  }),
+  getters: {
+    isAuthed: (s) => !!s.token,
+    isAdmin: (s) => s.user?.role === 'admin',
+  },
+  actions: {
+    setToken(t: string) {
+      this.token = t
+      localStorage.setItem('ot_access', t)
+    },
+    async login(username: string, password: string) {
+      const data = await unwrap<LoginResp>(client.post('/auth/login', { username, password }))
+      this.setToken(data.access_token)
+      this.user = data.user
+    },
+    async register(username: string, email: string, password: string) {
+      await unwrap(client.post('/auth/register', { username, email, password }))
+    },
+    async fetchMe() {
+      if (!this.token) return
+      try {
+        const data = await unwrap<{ user: User }>(client.get('/auth/me'))
+        this.user = data.user
+      } catch {
+        this.logout()
+      } finally {
+        this.ready = true
+      }
+    },
+    async logout() {
+      try { await client.post('/auth/logout') } catch { /* ignore */ }
+      this.user = null
+      this.token = ''
+      localStorage.removeItem('ot_access')
+    },
+  },
+})