feat: 添加管理端前端 (HMS 基座 React 管理面板)

- 从 HMS 基座复制 apps/web/ (React + Ant Design + Vite + TypeScript)
- 管理端自动代理 API 到 localhost:3000 (vite.config.ts)
- 更新 scripts/dev.sh 支持三端启动: backend/admin/app
- 登录验证通过, 用户管理/角色权限/审计日志等页面正常
- 添加 .gitignore 排除 node_modules/dist

apps/web/src/stores/auth.ts

@@ -0,0 +1,82 @@
+import { create } from 'zustand';
+import { login as apiLogin, logout as apiLogout, type UserInfo } from '../api/auth';
+import { clearApiCache } from '../api/client';
+
+function extractPermissions(): string[] {
+  const token = localStorage.getItem('access_token');
+  if (!token) return [];
+  try {
+    const parts = token.split('.');
+    if (parts.length !== 3) return [];
+    const payload = JSON.parse(atob(parts[1].replace(/-/g, '+').replace(/_/g, '/')));
+    return Array.isArray(payload.permissions) ? payload.permissions : [];
+  } catch {
+    return [];
+  }
+}
+
+function restoreInitialState(): { user: UserInfo | null; isAuthenticated: boolean; permissions: string[] } {
+  const token = localStorage.getItem('access_token');
+  const userStr = localStorage.getItem('user');
+  if (token && userStr) {
+    try {
+      const user = JSON.parse(userStr) as UserInfo;
+      return { user, isAuthenticated: true, permissions: extractPermissions() };
+    } catch {
+      localStorage.removeItem('user');
+    }
+  }
+  return { user: null, isAuthenticated: false, permissions: [] };
+}
+
+const initial = restoreInitialState();
+
+interface AuthState {
+  user: UserInfo | null;
+  isAuthenticated: boolean;
+  loading: boolean;
+  permissions: string[];
+  login: (username: string, password: string) => Promise<void>;
+  logout: () => Promise<void>;
+  loadFromStorage: () => void;
+}
+
+export const useAuthStore = create<AuthState>((set) => ({
+  user: initial.user,
+  isAuthenticated: initial.isAuthenticated,
+  loading: false,
+  permissions: initial.permissions,
+
+  login: async (username, password) => {
+    set({ loading: true });
+    try {
+      const resp = await apiLogin({ username, password });
+      localStorage.setItem('access_token', resp.access_token);
+      localStorage.setItem('refresh_token', resp.refresh_token);
+      localStorage.setItem('user', JSON.stringify(resp.user));
+      set({ user: resp.user, isAuthenticated: true, loading: false, permissions: extractPermissions() });
+      clearApiCache();
+    } catch (error) {
+      set({ loading: false });
+      throw error;
+    }
+  },
+
+  logout: async () => {
+    try {
+      await apiLogout();
+    } catch {
+      // Ignore logout API errors
+    }
+    localStorage.removeItem('access_token');
+    localStorage.removeItem('refresh_token');
+    localStorage.removeItem('user');
+    clearApiCache();
+    set({ user: null, isAuthenticated: false, permissions: [] });
+  },
+
+  loadFromStorage: () => {
+    const state = restoreInitialState();
+    set({ user: state.user, isAuthenticated: state.isAuthenticated, permissions: state.permissions });
+  },
+}));