M0-M4: 推倒重来基线(基建+用户/密钥/核心代理+前端+管理后台+三协议互转)

- 后端 Go+Gin+GORM: 配置(OT_ env)/SQLite/Postgres 双驱动、用户体系(argon2id+JWT access/refresh)、
  API Key(sk- 48位, 仅存 SHA-256 哈希)
- 代理网关: /v1/chat/completions、/v1/responses、/v1/messages、/v1/models;错误按客户端协议返回
- 三协议互转(convert 包): Chat↔Messages↔Responses 请求/响应 + 流式 SSE 逐事件转换(直通优先)
- 用量计费: 异步批量记账、余额扣减、balance_logs、usage_daily 日聚合
- 管理 API: 用户/渠道 CRUD+测试+模型导入/模型定价+绑定/统计/系统配置
- 前端 Vue3+TS+Tailwind(taste-skill 设计 tokens): Landing/登录注册/控制台/管理后台,
  自建组件+Phosphor 图标+自建 SVG 趋势图, 已过 web-design-guidelines 复查
- mock 上游: OpenAI+Anthropic 双协议模拟(含流式)

Co-Authored-By: Claude <noreply@anthropic.com>

server/internal/api/auth.go

@@ -2,15 +2,16 @@
 package api
 
 import (
+	"encoding/json"
 	"net/http"
 	"strings"
 	"time"
 
 	"github.com/gin-gonic/gin"
 	"github.com/openteam/server/internal/app"
+	"github.com/openteam/server/internal/api/middleware"
 	"github.com/openteam/server/internal/pkg/resp"
 	"github.com/openteam/server/internal/store"
-	"gorm.io/gorm"
 )
 
 // Handler 聚合所有管理 API。
@@ -37,10 +38,21 @@ func (h *Handler) Register(c *gin.Context) {
 		resp.Fail(c, http.StatusBadRequest, "invalid input: "+err.Error())
 		return
 	}
-	if h.a.Cfg.Auth.RegistrationMode == "invite" {
+	// 注册模式优先读系统配置（管理后台可改），缺省用环境配置
+	mode := h.a.Cfg.Auth.RegistrationMode
+	var modeCfgRaw string
+	h.a.DB.Model(&store.SystemConfig{}).Where("key = ?", "registration_mode").Pluck("value", &modeCfgRaw)
+	var modeCfg string
+	_ = json.Unmarshal([]byte(modeCfgRaw), &modeCfg)
+	if modeCfg == "open" || modeCfg == "invite" {
+		mode = modeCfg
+	}
+	if mode == "invite" {
+		var icRaw string
+		h.a.DB.Model(&store.SystemConfig{}).Where("key = ?", "invite_codes").Pluck("value", &icRaw)
 		var ic string
-		h.a.DB.Model(&store.SystemConfig{}).Where("key = ?", "invite_codes").Pluck("value", &ic)
-		if !strings.Contains(ic, req.InviteCode) {
+		_ = json.Unmarshal([]byte(icRaw), &ic)
+		if req.InviteCode == "" || !strings.Contains(ic, req.InviteCode) {
 			resp.Fail(c, http.StatusForbidden, "valid invite code required")
 			return
 		}
@@ -182,16 +194,14 @@ func (h *Handler) publicUser(u *store.User) gin.H {
 }
 
 func sessionUser(c *gin.Context) *store.User {
-	u, _ := c.Get("session_user")
+	u, _ := c.Get(middleware.CtxSessionUser)
 	return u.(*store.User)
 }
 
 func userFromContext(c *gin.Context) (*store.User, bool) {
-	u, ok := c.Get("session_user")
+	u, ok := c.Get(middleware.CtxSessionUser)
 	if !ok {
 		return nil, false
 	}
 	return u.(*store.User), true
 }
-
-var _ = gorm.ErrRecordNotFound