M0-M4: 推倒重来基线(基建+用户/密钥/核心代理+前端+管理后台+三协议互转)

- 后端 Go+Gin+GORM: 配置(OT_ env)/SQLite/Postgres 双驱动、用户体系(argon2id+JWT access/refresh)、
  API Key(sk- 48位, 仅存 SHA-256 哈希)
- 代理网关: /v1/chat/completions、/v1/responses、/v1/messages、/v1/models;错误按客户端协议返回
- 三协议互转(convert 包): Chat↔Messages↔Responses 请求/响应 + 流式 SSE 逐事件转换(直通优先)
- 用量计费: 异步批量记账、余额扣减、balance_logs、usage_daily 日聚合
- 管理 API: 用户/渠道 CRUD+测试+模型导入/模型定价+绑定/统计/系统配置
- 前端 Vue3+TS+Tailwind(taste-skill 设计 tokens): Landing/登录注册/控制台/管理后台,
  自建组件+Phosphor 图标+自建 SVG 趋势图, 已过 web-design-guidelines 复查
- mock 上游: OpenAI+Anthropic 双协议模拟(含流式)

Co-Authored-By: Claude <noreply@anthropic.com>

server/internal/api/admin.go

@@ -2,7 +2,6 @@ package api
 
 import (
 	"encoding/json"
-	"fmt"
 	"net/http"
 	"strconv"
 	"time"
@@ -11,6 +10,7 @@ import (
 	"github.com/openteam/server/internal/pkg/resp"
 	"github.com/openteam/server/internal/store"
 	"gorm.io/gorm"
+	"gorm.io/gorm/clause"
 )
 
 // AdminUsers GET /api/v1/admin/users — 用户列表（搜索、分页）。
@@ -38,7 +38,7 @@ func (h *Handler) AdminUsers(c *gin.Context) {
 	resp.OK(c, gin.H{"items": out, "total": total, "page": page, "page_size": size})
 }
 
-// AdminPatchUser PATCH /api/v1/admin/users/:id — 角色/状态/余额。
+// AdminPatchUser PATCH /api/v1/admin/users/:id — 角色/状态。
 func (h *Handler) AdminPatchUser(c *gin.Context) {
 	id, err := strconv.ParseUint(c.Param("id"), 10, 64)
 	if err != nil {
@@ -53,11 +53,6 @@ func (h *Handler) AdminPatchUser(c *gin.Context) {
 		resp.Fail(c, http.StatusBadRequest, "invalid input")
 		return
 	}
-	var u store.User
-	if err := h.a.DB.First(&u, id).Error; err != nil {
-		resp.Fail(c, http.StatusNotFound, "user not found")
-		return
-	}
 	updates := map[string]any{}
 	if req.Role != nil {
 		if *req.Role != store.RoleUser && *req.Role != store.RoleAdmin {
@@ -73,42 +68,57 @@ func (h *Handler) AdminPatchUser(c *gin.Context) {
 		}
 		updates["status"] = *req.Status
 	}
-	if len(updates) > 0 {
-		h.a.DB.Model(&u).Updates(updates)
+	if len(updates) == 0 {
+		resp.OK(c, gin.H{"ok": true})
+		return
+	}
+	res := h.a.DB.Model(&store.User{}).Where("id = ?", id).Updates(updates)
+	if res.Error != nil {
+		resp.Fail(c, http.StatusInternalServerError, "failed to update user")
+		return
+	}
+	if res.RowsAffected == 0 {
+		resp.Fail(c, http.StatusNotFound, "user not found")
+		return
 	}
 	resp.OK(c, gin.H{"ok": true})
 }
 
-// AdminAdjustBalance POST /api/v1/admin/users/:id/balance — 调整余额并写流水。
+// AdminAdjustBalance POST /api/v1/admin/users/:id/balance — 手动调余额（写流水）。
 func (h *Handler) AdminAdjustBalance(c *gin.Context) {
-	admin, _ := userFromContext(c)
+	admin := sessionUser(c)
 	id, err := strconv.ParseUint(c.Param("id"), 10, 64)
 	if err != nil {
 		resp.Fail(c, http.StatusBadRequest, "invalid user id")
 		return
 	}
 	var req struct {
-		Change float64 `json:"change" binding:"required"`
+		Amount float64 `json:"amount" binding:"required"`
 		Remark string  `json:"remark"`
 	}
 	if err := c.ShouldBindJSON(&req); err != nil {
-		resp.Fail(c, http.StatusBadRequest, "invalid input: change is required")
+		resp.Fail(c, http.StatusBadRequest, "invalid input: amount required")
 		return
 	}
-	var u store.User
-	if err := h.a.DB.First(&u, id).Error; err != nil {
-		resp.Fail(c, http.StatusNotFound, "user not found")
+	if req.Amount == 0 {
+		resp.Fail(c, http.StatusBadRequest, "amount must not be zero")
 		return
 	}
-	newBalance := u.Balance + req.Change
-	ref := fmt.Sprintf("admin:%d:%d", admin.ID, time.Now().UnixNano())
+
 	err = h.a.DB.Transaction(func(tx *gorm.DB) error {
-		if err := tx.Model(&store.User{}).Where("id = ?", u.ID).Update("balance", newBalance).Error; err != nil {
+		var u store.User
+		if err := tx.Clauses(clause.Locking{Strength: "UPDATE"}).First(&u, id).Error; err != nil {
 			return err
 		}
+		newBalance := u.Balance + req.Amount
+		if err := tx.Model(&store.User{}).Where("id = ?", id).Update("balance", newBalance).Error; err != nil {
+			return err
+		}
+		ref := "admin:" + strconv.FormatUint(u.ID, 10) + ":" + time.Now().Format("20060102150405")
+		_ = admin.ID // 流水里不冗余管理员 ID；需要时再加
 		return tx.Create(&store.BalanceLog{
 			UserID:       u.ID,
-			Change:       req.Change,
+			Change:       req.Amount,
 			BalanceAfter: newBalance,
 			Type:         store.BalanceTypeAdminAdjust,
 			RefID:        ref,
@@ -116,45 +126,45 @@ func (h *Handler) AdminAdjustBalance(c *gin.Context) {
 		}).Error
 	})
 	if err != nil {
-		resp.Fail(c, http.StatusInternalServerError, "failed to adjust balance")
+		resp.Fail(c, http.StatusNotFound, "user not found or failed to adjust")
 		return
 	}
-	resp.OK(c, gin.H{"ok": true, "balance": newBalance})
+	resp.OK(c, gin.H{"ok": true})
 }
 
-// AdminConfig GET /api/v1/admin/config
+// AdminConfig GET /api/v1/admin/config — 全部系统配置。
 func (h *Handler) AdminConfig(c *gin.Context) {
 	var cfgs []store.SystemConfig
-	h.a.DB.Find(&cfgs)
-	m := map[string]any{}
-	for _, cfg := range cfgs {
-		var v any
-		_ = json.Unmarshal([]byte(cfg.Value), &v)
-		m[cfg.Key] = v
+	if err := h.a.DB.Find(&cfgs).Error; err != nil {
+		resp.Fail(c, http.StatusInternalServerError, "failed to load config")
+		return
 	}
-	m["registration.mode"] = h.a.Cfg.Auth.RegistrationMode
-	resp.OK(c, gin.H{"config": m})
+	out := gin.H{}
+	for _, cfg := range cfgs {
+		out[cfg.Key] = json.RawMessage(cfg.Value)
+	}
+	resp.OK(c, gin.H{"config": out})
 }
 
-// AdminPutConfig PUT /api/v1/admin/config
+// AdminPutConfig PUT /api/v1/admin/config — 整表覆盖（upsert）。
 func (h *Handler) AdminPutConfig(c *gin.Context) {
-	var req struct {
-		Config map[string]any `json:"config"`
-	}
+	var req map[string]json.RawMessage
 	if err := c.ShouldBindJSON(&req); err != nil {
 		resp.Fail(c, http.StatusBadRequest, "invalid input")
 		return
 	}
-	for k, v := range req.Config {
-		if k == "registration.mode" {
-			if v == "open" || v == "invite" {
-				h.a.Cfg.Auth.RegistrationMode = v.(string)
+	err := h.a.DB.Transaction(func(tx *gorm.DB) error {
+		for k, v := range req {
+			cfg := store.SystemConfig{Key: k, Value: string(v)}
+			if err := tx.Save(&cfg).Error; err != nil {
+				return err
 			}
-			continue
 		}
-		b, _ := json.Marshal(v)
-		cfg := store.SystemConfig{Key: k, Value: string(b)}
-		h.a.DB.Save(&cfg)
+		return nil
+	})
+	if err != nil {
+		resp.Fail(c, http.StatusInternalServerError, "failed to save config")
+		return
 	}
 	resp.OK(c, gin.H{"ok": true})
 }