M0-M4: 推倒重来基线(基建+用户/密钥/核心代理+前端+管理后台+三协议互转)

- 后端 Go+Gin+GORM: 配置(OT_ env)/SQLite/Postgres 双驱动、用户体系(argon2id+JWT access/refresh)、
  API Key(sk- 48位, 仅存 SHA-256 哈希)
- 代理网关: /v1/chat/completions、/v1/responses、/v1/messages、/v1/models;错误按客户端协议返回
- 三协议互转(convert 包): Chat↔Messages↔Responses 请求/响应 + 流式 SSE 逐事件转换(直通优先)
- 用量计费: 异步批量记账、余额扣减、balance_logs、usage_daily 日聚合
- 管理 API: 用户/渠道 CRUD+测试+模型导入/模型定价+绑定/统计/系统配置
- 前端 Vue3+TS+Tailwind(taste-skill 设计 tokens): Landing/登录注册/控制台/管理后台,
  自建组件+Phosphor 图标+自建 SVG 趋势图, 已过 web-design-guidelines 复查
- mock 上游: OpenAI+Anthropic 双协议模拟(含流式)

Co-Authored-By: Claude <noreply@anthropic.com>

web/src/stores/auth.ts

@@ -1,60 +1,59 @@
 import { defineStore } from 'pinia'
-import client, { unwrap } from '../api/client'
-
-export interface User {
-  id: number
-  username: string
-  email: string
-  role: 'user' | 'admin'
-  balance: number
-  status: string
-  created_at: string
-}
-
-interface LoginResp {
-  access_token: string
-  expires_in: number
-  user: User
-}
+import { http } from '@/api/client'
+import type { User } from '@/types'
 
 export const useAuthStore = defineStore('auth', {
   state: () => ({
     user: null as User | null,
-    token: localStorage.getItem('ot_access') ?? '',
+    accessToken: localStorage.getItem('ot_access') ?? '',
     ready: false,
   }),
   getters: {
-    isAuthed: (s) => !!s.token,
+    isAuthed: (s) => !!s.accessToken && !!s.user,
     isAdmin: (s) => s.user?.role === 'admin',
   },
   actions: {
-    setToken(t: string) {
-      this.token = t
-      localStorage.setItem('ot_access', t)
-    },
-    async login(username: string, password: string) {
-      const data = await unwrap<LoginResp>(client.post('/auth/login', { username, password }))
-      this.setToken(data.access_token)
-      this.user = data.user
+    async bootstrap() {
+      try {
+        if (!this.accessToken) {
+          await this.refresh()
+        }
+        await this.fetchMe()
+      } catch {
+        this.clear()
+      }
+      this.ready = true
     },
     async register(username: string, email: string, password: string) {
-      await unwrap(client.post('/auth/register', { username, email, password }))
+      await http.post('/auth/register', { username, email, password })
+    },
+    async login(username: string, password: string) {
+      const { data } = await http.post('/auth/login', { username, password })
+      const d = data.data as { access_token: string; user: User }
+      this.accessToken = d.access_token
+      this.user = d.user
+      localStorage.setItem('ot_access', d.access_token)
+    },
+    async refresh() {
+      const { data } = await http.post('/auth/refresh')
+      this.accessToken = data.data.access_token as string
+      localStorage.setItem('ot_access', this.accessToken)
     },
     async fetchMe() {
-      if (!this.token) return
-      try {
-        const data = await unwrap<{ user: User }>(client.get('/auth/me'))
-        this.user = data.user
-      } catch {
-        this.logout()
-      } finally {
-        this.ready = true
-      }
+      const { data } = await http.get('/auth/me')
+      this.user = data.data.user as User
     },
     async logout() {
-      try { await client.post('/auth/logout') } catch { /* ignore */ }
+      try {
+        await http.post('/auth/logout')
+      } catch {
+        /* ignore */
+      }
+      this.clear()
+    },
+    clear() {
+      this.accessToken = ''
       this.user = null
-      this.token = ''
       localStorage.removeItem('ot_access')
     },
   },