M0-M4: 推倒重来基线(基建+用户/密钥/核心代理+前端+管理后台+三协议互转)

- 后端 Go+Gin+GORM: 配置(OT_ env)/SQLite/Postgres 双驱动、用户体系(argon2id+JWT access/refresh)、
  API Key(sk- 48位, 仅存 SHA-256 哈希)
- 代理网关: /v1/chat/completions、/v1/responses、/v1/messages、/v1/models;错误按客户端协议返回
- 三协议互转(convert 包): Chat↔Messages↔Responses 请求/响应 + 流式 SSE 逐事件转换(直通优先)
- 用量计费: 异步批量记账、余额扣减、balance_logs、usage_daily 日聚合
- 管理 API: 用户/渠道 CRUD+测试+模型导入/模型定价+绑定/统计/系统配置
- 前端 Vue3+TS+Tailwind(taste-skill 设计 tokens): Landing/登录注册/控制台/管理后台,
  自建组件+Phosphor 图标+自建 SVG 趋势图, 已过 web-design-guidelines 复查
- mock 上游: OpenAI+Anthropic 双协议模拟(含流式)

Co-Authored-By: Claude <noreply@anthropic.com>

server/internal/proxy/handlers.go

@@ -1,11 +1,10 @@
 package proxy
 
 import (
-	"encoding/json"
 	"net/http"
 
 	"github.com/gin-gonic/gin"
-	"github.com/openteam/server/internal/store"
+	"github.com/openteam/server/internal/proxy/convert"
 )
 
 // chatCompletions POST /v1/chat/completions
@@ -17,27 +16,28 @@ func (g *Gateway) chatCompletions(c *gin.Context) {
 	if !g.checkBalance(c, u) {
 		return
 	}
-
 	br, body, err := parseBody(c)
 	if err != nil {
-		openAIError(c, http.StatusBadRequest, "invalid_request_error", "failed to read request body")
+		apiError(c, http.StatusBadRequest, "invalid_request_error", "failed to read request body")
 		return
 	}
-	c.Set("protocol", "chat")
+	c.Set("protocol", convert.ProtoChat)
 	c.Set("model_name", br.Model)
 
-	ch, err := g.ch.Select()
+	ch, err := g.selectChannel(c, br.Model)
 	if err != nil {
-		openAIError(c, http.StatusServiceUnavailable, "no_channel", "No available upstream channel")
+		apiError(c, http.StatusServiceUnavailable, "no_channel", "No available upstream channel")
 		g.recordError(c, nil, nil, now(), "no_channel")
 		return
 	}
-
+	plan, err := prepareUpstream(ch.Provider, convert.ProtoChat, body)
+	if err != nil {
+		apiError(c, http.StatusInternalServerError, "conversion_error", "Failed to convert request: "+err.Error())
+		return
+	}
 	sink := &usageSink{}
 	c.Set("usage_raw", &sinkHolder{sink: sink})
-	g.doPassthrough(c, ch, "/v1/chat/completions", body, br.Stream, func(raw json.RawMessage) {
-		sink.push(raw)
-	})
+	g.doProxy(c, ch, plan, br.Stream, sink)
 }
 
 // responses POST /v1/responses（OpenAI Responses API）
@@ -49,33 +49,61 @@ func (g *Gateway) responses(c *gin.Context) {
 	if !g.checkBalance(c, u) {
 		return
 	}
-
 	br, body, err := parseBody(c)
 	if err != nil {
-		openAIError(c, http.StatusBadRequest, "invalid_request_error", "failed to read request body")
+		apiError(c, http.StatusBadRequest, "invalid_request_error", "failed to read request body")
 		return
 	}
-	c.Set("protocol", "responses")
+	c.Set("protocol", convert.ProtoResponses)
 	c.Set("model_name", br.Model)
 
-	ch, err := g.ch.Select()
+	ch, err := g.selectChannel(c, br.Model)
 	if err != nil {
-		openAIError(c, http.StatusServiceUnavailable, "no_channel", "No available upstream channel")
+		apiError(c, http.StatusServiceUnavailable, "no_channel", "No available upstream channel")
 		g.recordError(c, nil, nil, now(), "no_channel")
 		return
 	}
-	// M1 仅支持 OpenAI 原生渠道直通；Anthropic 渠道的转换在 M3
-	if ch.Provider != store.ChannelProviderOpenAI {
-		openAIError(c, http.StatusNotImplemented, "conversion_pending",
-			"Responses protocol on this channel requires format conversion (planned in M3)")
+	plan, err := prepareUpstream(ch.Provider, convert.ProtoResponses, body)
+	if err != nil {
+		apiError(c, http.StatusInternalServerError, "conversion_error", "Failed to convert request: "+err.Error())
 		return
 	}
-
 	sink := &usageSink{}
 	c.Set("usage_raw", &sinkHolder{sink: sink})
-	g.doPassthrough(c, ch, "/v1/responses", body, br.Stream, func(raw json.RawMessage) {
-		sink.push(raw)
-	})
+	g.doProxy(c, ch, plan, br.Stream, sink)
+}
+
+// messages POST /v1/messages（Anthropic Messages API）
+func (g *Gateway) messages(c *gin.Context) {
+	u, ok := g.resolveUser(c)
+	if !ok {
+		return
+	}
+	if !g.checkBalance(c, u) {
+		return
+	}
+	br, body, err := parseBody(c)
+	if err != nil {
+		apiError(c, http.StatusBadRequest, "invalid_request_error", "failed to read request body")
+		return
+	}
+	c.Set("protocol", convert.ProtoMessages)
+	c.Set("model_name", br.Model)
+
+	ch, err := g.selectChannel(c, br.Model)
+	if err != nil {
+		apiError(c, http.StatusServiceUnavailable, "no_channel", "No available upstream channel")
+		g.recordError(c, nil, nil, now(), "no_channel")
+		return
+	}
+	plan, err := prepareUpstream(ch.Provider, convert.ProtoMessages, body)
+	if err != nil {
+		apiError(c, http.StatusInternalServerError, "conversion_error", "Failed to convert request: "+err.Error())
+		return
+	}
+	sink := &usageSink{}
+	c.Set("usage_raw", &sinkHolder{sink: sink})
+	g.doProxy(c, ch, plan, br.Stream, sink)
 }
 
 // usageSinkHolder 桥接：gin context 里保存 sink 引用，供 finishUsage 读取最终 usage。
@@ -83,8 +111,17 @@ type sinkHolder struct {
 	sink *usageSink
 }
 
-// openAIError 按 OpenAI 错误格式返回（PLANNING §4.1.4）。
-func openAIError(c *gin.Context, status int, code, message string) {
+// apiError 按客户端协议返回错误体（PLANNING §5.1.4）。
+func apiError(c *gin.Context, status int, code, message string) {
+	if p, _ := c.Get("protocol"); p == convert.ProtoMessages {
+		// Anthropic 格式
+		c.AbortWithStatusJSON(status, gin.H{
+			"type": "error",
+			"error": gin.H{"type": errorTypeFor(status), "message": message},
+		})
+		return
+	}
+	// OpenAI 格式
 	c.AbortWithStatusJSON(status, gin.H{
 		"error": gin.H{
 			"message": message,
@@ -99,14 +136,10 @@ func errorTypeFor(status int) string {
 	switch status {
 	case http.StatusUnauthorized:
 		return "authentication_error"
-	case http.StatusForbidden:
+	case http.StatusForbidden, http.StatusPaymentRequired:
 		return "permission_error"
-	case http.StatusNotFound:
+	case http.StatusNotFound, http.StatusBadRequest:
 		return "invalid_request_error"
-	case http.StatusBadRequest:
-		return "invalid_request_error"
-	case http.StatusPaymentRequired:
-		return "insufficient_quota"
 	case http.StatusTooManyRequests:
 		return "rate_limit_error"
 	default: