feat: 新增管理后台前端项目及安全加固

refactor(saas): 重构认证中间件与限流策略 - 登录限流调整为5次/分钟/IP - 注册限流调整为3次/小时/IP - GET请求不计入限流 fix(saas): 修复调度器时间戳处理 - 使用NOW()替代文本时间戳 - 兼容TEXT和TIMESTAMPTZ列类型 feat(saas): 实现环境变量插值 - 支持${ENV_VAR}语法解析 - 数据库密码支持环境变量注入 chore: 新增前端管理界面 - 基于React+Ant Design Pro - 包含路由守卫/错误边界 - 对接58个API端点 docs: 更新安全加固文档 - 新增密钥管理规范 - 记录P0安全项审计结果 - 补充TLS终止说明 test: 完善配置解析单元测试 - 新增环境变量插值测试用例
2026-03-31 00:11:33 +08:00
parent 6821df5f44
commit eb956d0dce
129 changed files with 11913 additions and 863 deletions
--- a/admin-temp-dir/.env.development
+++ b/admin-temp-dir/.env.development
@@ -0,0 +1 @@
+VITE_API_BASE_URL=http://localhost:8080/api/v1
--- a/admin-temp-dir/.env.production
+++ b/admin-temp-dir/.env.production
@@ -0,0 +1 @@
+VITE_API_BASE_URL=/api/v1
--- a/admin-temp-dir/.gitignore
+++ b/admin-temp-dir/.gitignore
@@ -0,0 +1,24 @@
+# Logs
+logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+pnpm-debug.log*
+lerna-debug.log*
+
+node_modules
+dist
+dist-ssr
+*.local
+
+# Editor directories and files
+.vscode/*
+!.vscode/extensions.json
+.idea
+.DS_Store
+*.suo
+*.ntvs*
+*.njsproj
+*.sln
+*.sw?
--- a/admin-temp-dir/README.md
+++ b/admin-temp-dir/README.md
@@ -0,0 +1,73 @@
+# React + TypeScript + Vite
+
+This template provides a minimal setup to get React working in Vite with HMR and some ESLint rules.
+
+Currently, two official plugins are available:
+
+- [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react) uses [Oxc](https://oxc.rs)
+- [@vitejs/plugin-react-swc](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react-swc) uses [SWC](https://swc.rs/)
+
+## React Compiler
+
+The React Compiler is not enabled on this template because of its impact on dev & build performances. To add it, see [this documentation](https://react.dev/learn/react-compiler/installation).
+
+## Expanding the ESLint configuration
+
+If you are developing a production application, we recommend updating the configuration to enable type-aware lint rules:
+
+```js
+export default defineConfig([
+  globalIgnores(['dist']),
+  {
+    files: ['**/*.{ts,tsx}'],
+    extends: [
+      // Other configs...
+
+      // Remove tseslint.configs.recommended and replace with this
+      tseslint.configs.recommendedTypeChecked,
+      // Alternatively, use this for stricter rules
+      tseslint.configs.strictTypeChecked,
+      // Optionally, add this for stylistic rules
+      tseslint.configs.stylisticTypeChecked,
+
+      // Other configs...
+    ],
+    languageOptions: {
+      parserOptions: {
+        project: ['./tsconfig.node.json', './tsconfig.app.json'],
+        tsconfigRootDir: import.meta.dirname,
+      },
+      // other options...
+    },
+  },
+])
+```
+
+You can also install [eslint-plugin-react-x](https://github.com/Rel1cx/eslint-react/tree/main/packages/plugins/eslint-plugin-react-x) and [eslint-plugin-react-dom](https://github.com/Rel1cx/eslint-react/tree/main/packages/plugins/eslint-plugin-react-dom) for React-specific lint rules:
+
+```js
+// eslint.config.js
+import reactX from 'eslint-plugin-react-x'
+import reactDom from 'eslint-plugin-react-dom'
+
+export default defineConfig([
+  globalIgnores(['dist']),
+  {
+    files: ['**/*.{ts,tsx}'],
+    extends: [
+      // Other configs...
+      // Enable lint rules for React
+      reactX.configs['recommended-typescript'],
+      // Enable lint rules for React DOM
+      reactDom.configs.recommended,
+    ],
+    languageOptions: {
+      parserOptions: {
+        project: ['./tsconfig.node.json', './tsconfig.app.json'],
+        tsconfigRootDir: import.meta.dirname,
+      },
+      // other options...
+    },
+  },
+])
+```
--- a/admin-temp-dir/eslint.config.js
+++ b/admin-temp-dir/eslint.config.js
@@ -0,0 +1,23 @@
+import js from '@eslint/js'
+import globals from 'globals'
+import reactHooks from 'eslint-plugin-react-hooks'
+import reactRefresh from 'eslint-plugin-react-refresh'
+import tseslint from 'typescript-eslint'
+import { defineConfig, globalIgnores } from 'eslint/config'
+
+export default defineConfig([
+  globalIgnores(['dist']),
+  {
+    files: ['**/*.{ts,tsx}'],
+    extends: [
+      js.configs.recommended,
+      tseslint.configs.recommended,
+      reactHooks.configs.flat.recommended,
+      reactRefresh.configs.vite,
+    ],
+    languageOptions: {
+      ecmaVersion: 2020,
+      globals: globals.browser,
+    },
+  },
+])
--- a/admin-temp-dir/index.html
+++ b/admin-temp-dir/index.html
@@ -0,0 +1,13 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>admin-v2</title>
+  </head>
+  <body>
+    <div id="root"></div>
+    <script type="module" src="/src/main.tsx"></script>
+  </body>
+</html>
--- a/admin-temp-dir/package.json
+++ b/admin-temp-dir/package.json
@@ -0,0 +1,39 @@
+{
+  "name": "admin-v2",
+  "private": true,
+  "version": "0.0.0",
+  "type": "module",
+  "scripts": {
+    "dev": "vite",
+    "build": "tsc -b && vite build",
+    "lint": "eslint .",
+    "preview": "vite preview"
+  },
+  "dependencies": {
+    "@ant-design/charts": "^2.6.7",
+    "@ant-design/icons": "^6.1.1",
+    "@ant-design/pro-components": "^2.8.10",
+    "@ant-design/pro-layout": "^7.22.7",
+    "@tanstack/react-query": "^5.95.2",
+    "antd": "^6.3.4",
+    "axios": "^1.14.0",
+    "react": "^19.2.4",
+    "react-dom": "^19.2.4",
+    "react-router-dom": "^7.13.2",
+    "zustand": "^5.0.12"
+  },
+  "devDependencies": {
+    "@eslint/js": "^9.39.4",
+    "@types/node": "^24.12.0",
+    "@types/react": "^19.2.14",
+    "@types/react-dom": "^19.2.3",
+    "@vitejs/plugin-react": "^6.0.1",
+    "eslint": "^9.39.4",
+    "eslint-plugin-react-hooks": "^7.0.1",
+    "eslint-plugin-react-refresh": "^0.5.2",
+    "globals": "^17.4.0",
+    "typescript": "~5.9.3",
+    "typescript-eslint": "^8.57.0",
+    "vite": "^8.0.1"
+  }
+}
--- a/admin-temp-dir/pnpm-lock.yaml
+++ b/admin-temp-dir/pnpm-lock.yaml
--- a/admin-temp-dir/public/favicon.svg
+++ b/admin-temp-dir/public/favicon.svg
--- a/admin-temp-dir/public/icons.svg
+++ b/admin-temp-dir/public/icons.svg
@@ -0,0 +1,24 @@
+<svg xmlns="http://www.w3.org/2000/svg">
+  <symbol id="bluesky-icon" viewBox="0 0 16 17">
+    <g clip-path="url(#bluesky-clip)"><path fill="#08060d" d="M7.75 7.735c-.693-1.348-2.58-3.86-4.334-5.097-1.68-1.187-2.32-.981-2.74-.79C.188 2.065.1 2.812.1 3.251s.241 3.602.398 4.13c.52 1.744 2.367 2.333 4.07 2.145-2.495.37-4.71 1.278-1.805 4.512 3.196 3.309 4.38-.71 4.987-2.746.608 2.036 1.307 5.91 4.93 2.746 2.72-2.746.747-4.143-1.747-4.512 1.702.189 3.55-.4 4.07-2.145.156-.528.397-3.691.397-4.13s-.088-1.186-.575-1.406c-.42-.19-1.06-.395-2.741.79-1.755 1.24-3.64 3.752-4.334 5.099"/></g>
+    <defs><clipPath id="bluesky-clip"><path fill="#fff" d="M.1.85h15.3v15.3H.1z"/></clipPath></defs>
+  </symbol>
+  <symbol id="discord-icon" viewBox="0 0 20 19">
+    <path fill="#08060d" d="M16.224 3.768a14.5 14.5 0 0 0-3.67-1.153c-.158.286-.343.67-.47.976a13.5 13.5 0 0 0-4.067 0c-.128-.306-.317-.69-.476-.976A14.4 14.4 0 0 0 3.868 3.77C1.546 7.28.916 10.703 1.231 14.077a14.7 14.7 0 0 0 4.5 2.306q.545-.748.965-1.587a9.5 9.5 0 0 1-1.518-.74q.191-.14.372-.293c2.927 1.369 6.107 1.369 8.999 0q.183.152.372.294-.723.437-1.52.74.418.838.963 1.588a14.6 14.6 0 0 0 4.504-2.308c.37-3.911-.63-7.302-2.644-10.309m-9.13 8.234c-.878 0-1.599-.82-1.599-1.82 0-.998.705-1.82 1.6-1.82.894 0 1.614.82 1.599 1.82.001 1-.705 1.82-1.6 1.82m5.91 0c-.878 0-1.599-.82-1.599-1.82 0-.998.705-1.82 1.6-1.82.893 0 1.614.82 1.599 1.82 0 1-.706 1.82-1.6 1.82"/>
+  </symbol>
+  <symbol id="documentation-icon" viewBox="0 0 21 20">
+    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="m15.5 13.333 1.533 1.322c.645.555.967.833.967 1.178s-.322.623-.967 1.179L15.5 18.333m-3.333-5-1.534 1.322c-.644.555-.966.833-.966 1.178s.322.623.966 1.179l1.534 1.321"/>
+    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M17.167 10.836v-4.32c0-1.41 0-2.117-.224-2.68-.359-.906-1.118-1.621-2.08-1.96-.599-.21-1.349-.21-2.848-.21-2.623 0-3.935 0-4.983.369-1.684.591-3.013 1.842-3.641 3.428C3 6.449 3 7.684 3 10.154v2.122c0 2.558 0 3.838.706 4.726q.306.383.713.671c.76.536 1.79.64 3.581.66"/>
+    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M3 10a2.78 2.78 0 0 1 2.778-2.778c.555 0 1.209.097 1.748-.047.48-.129.854-.503.982-.982.145-.54.048-1.194.048-1.749a2.78 2.78 0 0 1 2.777-2.777"/>
+  </symbol>
+  <symbol id="github-icon" viewBox="0 0 19 19">
+    <path fill="#08060d" fill-rule="evenodd" d="M9.356 1.85C5.05 1.85 1.57 5.356 1.57 9.694a7.84 7.84 0 0 0 5.324 7.44c.387.079.528-.168.528-.376 0-.182-.013-.805-.013-1.454-2.165.467-2.616-.935-2.616-.935-.349-.91-.864-1.143-.864-1.143-.71-.48.051-.48.051-.48.787.051 1.2.805 1.2.805.695 1.194 1.817.857 2.268.649.064-.507.27-.857.49-1.052-1.728-.182-3.545-.857-3.545-3.87 0-.857.31-1.558.8-2.104-.078-.195-.349-1 .077-2.078 0 0 .657-.208 2.14.805a7.5 7.5 0 0 1 1.946-.26c.657 0 1.328.092 1.946.26 1.483-1.013 2.14-.805 2.14-.805.426 1.078.155 1.883.078 2.078.502.546.799 1.247.799 2.104 0 3.013-1.818 3.675-3.558 3.87.284.247.528.714.528 1.454 0 1.052-.012 1.896-.012 2.156 0 .208.142.455.528.377a7.84 7.84 0 0 0 5.324-7.441c.013-4.338-3.48-7.844-7.773-7.844" clip-rule="evenodd"/>
+  </symbol>
+  <symbol id="social-icon" viewBox="0 0 20 20">
+    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M12.5 6.667a4.167 4.167 0 1 0-8.334 0 4.167 4.167 0 0 0 8.334 0"/>
+    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M2.5 16.667a5.833 5.833 0 0 1 8.75-5.053m3.837.474.513 1.035c.07.144.257.282.414.309l.93.155c.596.1.736.536.307.965l-.723.73a.64.64 0 0 0-.152.531l.207.903c.164.715-.213.991-.84.618l-.872-.52a.63.63 0 0 0-.577 0l-.872.52c-.624.373-1.003.094-.84-.618l.207-.903a.64.64 0 0 0-.152-.532l-.723-.729c-.426-.43-.289-.864.306-.964l.93-.156a.64.64 0 0 0 .412-.31l.513-1.034c.28-.562.735-.562 1.012 0"/>
+  </symbol>
+  <symbol id="x-icon" viewBox="0 0 19 19">
+    <path fill="#08060d" fill-rule="evenodd" d="M1.893 1.98c.052.072 1.245 1.769 2.653 3.77l2.892 4.114c.183.261.333.48.333.486s-.068.089-.152.183l-.522.593-.765.867-3.597 4.087c-.375.426-.734.834-.798.905a1 1 0 0 0-.118.148c0 .01.236.017.664.017h.663l.729-.83c.4-.457.796-.906.879-.999a692 692 0 0 0 1.794-2.038c.034-.037.301-.34.594-.675l.551-.624.345-.392a7 7 0 0 1 .34-.374c.006 0 .93 1.306 2.052 2.903l2.084 2.965.045.063h2.275c1.87 0 2.273-.003 2.266-.021-.008-.02-1.098-1.572-3.894-5.547-2.013-2.862-2.28-3.246-2.273-3.266.008-.019.282-.332 2.085-2.38l2-2.274 1.567-1.782c.022-.028-.016-.03-.65-.03h-.674l-.3.342a871 871 0 0 1-1.782 2.025c-.067.075-.405.458-.75.852a100 100 0 0 1-.803.91c-.148.172-.299.344-.99 1.127-.304.343-.32.358-.345.327-.015-.019-.904-1.282-1.976-2.808L6.365 1.85H1.8zm1.782.91 8.078 11.294c.772 1.08 1.413 1.973 1.425 1.984.016.017.241.02 1.05.017l1.03-.004-2.694-3.766L7.796 5.75 5.722 2.852l-1.039-.004-1.039-.004z" clip-rule="evenodd"/>
+  </symbol>
+</svg>
--- a/admin-temp-dir/src/assets/hero.png
+++ b/admin-temp-dir/src/assets/hero.png
--- a/admin-temp-dir/src/assets/react.svg
+++ b/admin-temp-dir/src/assets/react.svg
@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" aria-hidden="true" role="img" class="iconify iconify--logos" width="35.93" height="32" preserveAspectRatio="xMidYMid meet" viewBox="0 0 256 228"><path fill="#00D8FF" d="M210.483 73.824a171.49 171.49 0 0 0-8.24-2.597c.465-1.9.893-3.777 1.273-5.621c6.238-30.281 2.16-54.676-11.769-62.708c-13.355-7.7-35.196.329-57.254 19.526a171.23 171.23 0 0 0-6.375 5.848a155.866 155.866 0 0 0-4.241-3.917C100.759 3.829 77.587-4.822 63.673 3.233C50.33 10.957 46.379 33.89 51.995 62.588a170.974 170.974 0 0 0 1.892 8.48c-3.28.932-6.445 1.924-9.474 2.98C17.309 83.498 0 98.307 0 113.668c0 15.865 18.582 31.778 46.812 41.427a145.52 145.52 0 0 0 6.921 2.165a167.467 167.467 0 0 0-2.01 9.138c-5.354 28.2-1.173 50.591 12.134 58.266c13.744 7.926 36.812-.22 59.273-19.855a145.567 145.567 0 0 0 5.342-4.923a168.064 168.064 0 0 0 6.92 6.314c21.758 18.722 43.246 26.282 56.54 18.586c13.731-7.949 18.194-32.003 12.4-61.268a145.016 145.016 0 0 0-1.535-6.842c1.62-.48 3.21-.974 4.76-1.488c29.348-9.723 48.443-25.443 48.443-41.52c0-15.417-17.868-30.326-45.517-39.844Zm-6.365 70.984c-1.4.463-2.836.91-4.3 1.345c-3.24-10.257-7.612-21.163-12.963-32.432c5.106-11 9.31-21.767 12.459-31.957c2.619.758 5.16 1.557 7.61 2.4c23.69 8.156 38.14 20.213 38.14 29.504c0 9.896-15.606 22.743-40.946 31.14Zm-10.514 20.834c2.562 12.94 2.927 24.64 1.23 33.787c-1.524 8.219-4.59 13.698-8.382 15.893c-8.067 4.67-25.32-1.4-43.927-17.412a156.726 156.726 0 0 1-6.437-5.87c7.214-7.889 14.423-17.06 21.459-27.246c12.376-1.098 24.068-2.894 34.671-5.345a134.17 134.17 0 0 1 1.386 6.193ZM87.276 214.515c-7.882 2.783-14.16 2.863-17.955.675c-8.075-4.657-11.432-22.636-6.853-46.752a156.923 156.923 0 0 1 1.869-8.499c10.486 2.32 22.093 3.988 34.498 4.994c7.084 9.967 14.501 19.128 21.976 27.15a134.668 134.668 0 0 1-4.877 4.492c-9.933 8.682-19.886 14.842-28.658 17.94ZM50.35 144.747c-12.483-4.267-22.792-9.812-29.858-15.863c-6.35-5.437-9.555-10.836-9.555-15.216c0-9.322 13.897-21.212 37.076-29.293c2.813-.98 5.757-1.905 8.812-2.773c3.204 10.42 7.406 21.315 12.477 32.332c-5.137 11.18-9.399 22.249-12.634 32.792a134.718 134.718 0 0 1-6.318-1.979Zm12.378-84.26c-4.811-24.587-1.616-43.134 6.425-47.789c8.564-4.958 27.502 2.111 47.463 19.835a144.318 144.318 0 0 1 3.841 3.545c-7.438 7.987-14.787 17.08-21.808 26.988c-12.04 1.116-23.565 2.908-34.161 5.309a160.342 160.342 0 0 1-1.76-7.887Zm110.427 27.268a347.8 347.8 0 0 0-7.785-12.803c8.168 1.033 15.994 2.404 23.343 4.08c-2.206 7.072-4.956 14.465-8.193 22.045a381.151 381.151 0 0 0-7.365-13.322Zm-45.032-43.861c5.044 5.465 10.096 11.566 15.065 18.186a322.04 322.04 0 0 0-30.257-.006c4.974-6.559 10.069-12.652 15.192-18.18ZM82.802 87.83a323.167 323.167 0 0 0-7.227 13.238c-3.184-7.553-5.909-14.98-8.134-22.152c7.304-1.634 15.093-2.97 23.209-3.984a321.524 321.524 0 0 0-7.848 12.897Zm8.081 65.352c-8.385-.936-16.291-2.203-23.593-3.793c2.26-7.3 5.045-14.885 8.298-22.6a321.187 321.187 0 0 0 7.257 13.246c2.594 4.48 5.28 8.868 8.038 13.147Zm37.542 31.03c-5.184-5.592-10.354-11.779-15.403-18.433c4.902.192 9.899.29 14.978.29c5.218 0 10.376-.117 15.453-.343c-4.985 6.774-10.018 12.97-15.028 18.486Zm52.198-57.817c3.422 7.8 6.306 15.345 8.596 22.52c-7.422 1.694-15.436 3.058-23.88 4.071a382.417 382.417 0 0 0 7.859-13.026a347.403 347.403 0 0 0 7.425-13.565Zm-16.898 8.101a358.557 358.557 0 0 1-12.281 19.815a329.4 329.4 0 0 1-23.444.823c-7.967 0-15.716-.248-23.178-.732a310.202 310.202 0 0 1-12.513-19.846h.001a307.41 307.41 0 0 1-10.923-20.627a310.278 310.278 0 0 1 10.89-20.637l-.001.001a307.318 307.318 0 0 1 12.413-19.761c7.613-.576 15.42-.876 23.31-.876H128c7.926 0 15.743.303 23.354.883a329.357 329.357 0 0 1 12.335 19.695a358.489 358.489 0 0 1 11.036 20.54a329.472 329.472 0 0 1-11 20.722Zm22.56-122.124c8.572 4.944 11.906 24.881 6.52 51.026c-.344 1.668-.73 3.367-1.15 5.09c-10.622-2.452-22.155-4.275-34.23-5.408c-7.034-10.017-14.323-19.124-21.64-27.008a160.789 160.789 0 0 1 5.888-5.4c18.9-16.447 36.564-22.941 44.612-18.3ZM128 90.808c12.625 0 22.86 10.235 22.86 22.86s-10.235 22.86-22.86 22.86s-22.86-10.235-22.86-22.86s10.235-22.86 22.86-22.86Z"></path></svg>
--- a/admin-temp-dir/src/assets/vite.svg
+++ b/admin-temp-dir/src/assets/vite.svg
--- a/admin-temp-dir/src/components/ErrorBoundary.tsx
+++ b/admin-temp-dir/src/components/ErrorBoundary.tsx
@@ -0,0 +1,53 @@
+import { Component, type ReactNode } from 'react'
+import { Result, Button } from 'antd'
+
+interface Props {
+  children: ReactNode
+}
+
+interface State {
+  hasError: boolean
+  error: Error | null
+}
+
+export class ErrorBoundary extends Component<Props, State> {
+  constructor(props: Props) {
+    super(props)
+    this.state = { hasError: false, error: null }
+  }
+
+  static getDerivedStateFromError(error: Error): State {
+    return { hasError: true, error }
+  }
+
+  componentDidCatch(error: Error, info: React.ErrorInfo) {
+    console.error('[ErrorBoundary] Unhandled error:', error, info.componentStack)
+  }
+
+  private handleReload = () => {
+    window.location.reload()
+  }
+
+  private handleReset = () => {
+    this.setState({ hasError: false, error: null })
+  }
+
+  render() {
+    if (this.state.hasError) {
+      return (
+        <div style={{ display: 'flex', justifyContent: 'center', alignItems: 'center', minHeight: '100vh' }}>
+          <Result
+            status="error"
+            title="页面出现错误"
+            subTitle={this.state.error?.message ?? '发生了未知错误，请刷新页面重试'}
+            extra={[
+              <Button key="retry" onClick={this.handleReset}>重试</Button>,
+              <Button key="reload" type="primary" onClick={this.handleReload}>刷新页面</Button>,
+            ]}
+          />
+        </div>
+      )
+    }
+    return this.props.children
+  }
+}
--- a/admin-temp-dir/src/layouts/AdminLayout.tsx
+++ b/admin-temp-dir/src/layouts/AdminLayout.tsx
@@ -0,0 +1,103 @@
+// ============================================================
+// AdminLayout — ProLayout 管理后台布局
+// ============================================================
+
+import { Outlet, useNavigate, useLocation } from 'react-router-dom'
+import ProLayout from '@ant-design/pro-layout'
+import {
+  DashboardOutlined,
+  TeamOutlined,
+  CloudServerOutlined,
+  ApiOutlined,
+  KeyOutlined,
+  BarChartOutlined,
+  SwapOutlined,
+  SettingOutlined,
+  FileTextOutlined,
+  MessageOutlined,
+  RobotOutlined,
+  LogoutOutlined,
+} from '@ant-design/icons'
+import { useAuthStore } from '@/stores/authStore'
+import { Avatar, Dropdown, message } from 'antd'
+import type { MenuDataItem } from '@ant-design/pro-layout'
+
+const menuConfig: MenuDataItem[] = [
+  { path: '/', name: '仪表盘', icon: <DashboardOutlined /> },
+  { path: '/accounts', name: '账号管理', icon: <TeamOutlined />, permission: 'account:admin' },
+  { path: '/providers', name: '服务商', icon: <CloudServerOutlined />, permission: 'provider:manage' },
+  { path: '/models', name: '模型管理', icon: <ApiOutlined />, permission: 'model:read' },
+  { path: '/agent-templates', name: 'Agent 模板', icon: <RobotOutlined />, permission: 'model:read' },
+  { path: '/api-keys', name: 'API 密钥', icon: <KeyOutlined />, permission: 'admin:full' },
+  { path: '/usage', name: '用量统计', icon: <BarChartOutlined />, permission: 'admin:full' },
+  { path: '/relay', name: '中转任务', icon: <SwapOutlined />, permission: 'relay:use' },
+  { path: '/config', name: '系统配置', icon: <SettingOutlined />, permission: 'config:read' },
+  { path: '/prompts', name: '提示词管理', icon: <MessageOutlined />, permission: 'prompt:read' },
+  { path: '/logs', name: '操作日志', icon: <FileTextOutlined />, permission: 'admin:full' },
+]
+
+function filterMenuByPermission(
+  items: MenuDataItem[],
+  hasPermission: (p: string) => boolean,
+): MenuDataItem[] {
+  return items
+    .filter((item) => !item.permission || hasPermission(item.permission as string))
+    .map(({ permission, ...rest }) => ({
+      ...rest,
+      children: rest.children ? filterMenuByPermission(rest.children, hasPermission) : undefined,
+    }))
+}
+
+export default function AdminLayout() {
+  const navigate = useNavigate()
+  const location = useLocation()
+  const { account, hasPermission, logout } = useAuthStore()
+
+  const menuData = filterMenuByPermission(menuConfig, hasPermission)
+
+  const handleLogout = () => {
+    logout()
+    message.success('已退出登录')
+    navigate('/login', { replace: true })
+  }
+
+  return (
+    <ProLayout
+      title="ZCLAW"
+      logo={<div style={{ width: 28, height: 28, background: '#1677ff', borderRadius: 6, display: 'flex', alignItems: 'center', justifyContent: 'center', color: '#fff', fontWeight: 700, fontSize: 14 }}>Z</div>}
+      layout="mix"
+      fixSiderbar
+      fixedHeader
+      location={{ pathname: location.pathname }}
+      menuDataRender={() => menuData}
+      menuItemRender={(item, dom) => (
+        <div onClick={() => item.path && navigate(item.path)}>{dom}</div>
+      )}
+      avatarProps={{
+        src: undefined,
+        title: account?.display_name || account?.username || 'Admin',
+        size: 'small',
+        render: (_, dom) => (
+          <Dropdown
+            menu={{
+              items: [
+                {
+                  key: 'logout',
+                  icon: <LogoutOutlined />,
+                  label: '退出登录',
+                  onClick: handleLogout,
+                },
+              ],
+            }}
+          >
+            {dom}
+          </Dropdown>
+        ),
+      }}
+      suppressSiderWhenMenuEmpty
+      contentStyle={{ padding: 24 }}
+    >
+      <Outlet />
+    </ProLayout>
+  )
+}
--- a/admin-temp-dir/src/main.tsx
+++ b/admin-temp-dir/src/main.tsx
@@ -0,0 +1,29 @@
+import { createRoot } from 'react-dom/client'
+import { QueryClient, QueryClientProvider } from '@tanstack/react-query'
+import { RouterProvider } from 'react-router-dom'
+import { ConfigProvider, App as AntApp } from 'antd'
+import zhCN from 'antd/locale/zh_CN'
+import { router } from './router'
+import { ErrorBoundary } from './components/ErrorBoundary'
+
+const queryClient = new QueryClient({
+  defaultOptions: {
+    queries: {
+      retry: 1,
+      refetchOnWindowFocus: false,
+      staleTime: 30_000,
+    },
+  },
+})
+
+createRoot(document.getElementById('root')!).render(
+  <ErrorBoundary>
+    <ConfigProvider locale={zhCN}>
+      <AntApp>
+        <QueryClientProvider client={queryClient}>
+          <RouterProvider router={router} />
+        </QueryClientProvider>
+      </AntApp>
+    </ConfigProvider>
+  </ErrorBoundary>,
+)
--- a/admin-temp-dir/src/pages/Accounts.tsx
+++ b/admin-temp-dir/src/pages/Accounts.tsx
@@ -0,0 +1,170 @@
+// ============================================================
+// 账号管理
+// ============================================================
+
+import { useQuery, useMutation, useQueryClient } from '@tanstack/react-query'
+import { Button, message, Tag, Modal, Form, Input, Select, Popconfirm, Space } from 'antd'
+import { PlusOutlined } from '@ant-design/icons'
+import type { ProColumns } from '@ant-design/pro-components'
+import { ProTable } from '@ant-design/pro-components'
+import { accountService } from '@/services/accounts'
+import type { AccountPublic } from '@/types'
+
+const roleLabels: Record<string, string> = {
+  super_admin: '超级管理员',
+  admin: '管理员',
+  user: '用户',
+}
+
+const roleColors: Record<string, string> = {
+  super_admin: 'red',
+  admin: 'blue',
+  user: 'default',
+}
+
+const statusLabels: Record<string, string> = {
+  active: '正常',
+  disabled: '已禁用',
+  suspended: '已封禁',
+}
+
+const statusColors: Record<string, string> = {
+  active: 'green',
+  disabled: 'default',
+  suspended: 'red',
+}
+
+export default function Accounts() {
+  const queryClient = useQueryClient()
+  const [form] = Form.useForm()
+  const [modalOpen, setModalOpen] = useState(false)
+  const [editingId, setEditingId] = useState<string | null>(null)
+
+  const { data, isLoading } = useQuery({
+    queryKey: ['accounts'],
+    queryFn: ({ signal }) => accountService.list(signal),
+  })
+
+  const updateMutation = useMutation({
+    mutationFn: ({ id, data }: { id: string; data: Partial<AccountPublic> }) =>
+      accountService.update(id, data),
+    onSuccess: () => {
+      message.success('更新成功')
+      queryClient.invalidateQueries({ queryKey: ['accounts'] })
+      setModalOpen(false)
+    },
+    onError: (err: Error) => message.error(err.message || '更新失败'),
+  })
+
+  const statusMutation = useMutation({
+    mutationFn: ({ id, status }: { id: string; status: AccountPublic['status'] }) =>
+      accountService.updateStatus(id, { status }),
+    onSuccess: () => {
+      message.success('状态更新成功')
+      queryClient.invalidateQueries({ queryKey: ['accounts'] })
+    },
+    onError: (err: Error) => message.error(err.message || '状态更新失败'),
+  })
+
+  const columns: ProColumns<AccountPublic>[] = [
+    { title: '用户名', dataIndex: 'username', width: 120 },
+    { title: '显示名', dataIndex: 'display_name', width: 120 },
+    { title: '邮箱', dataIndex: 'email', width: 180 },
+    {
+      title: '角色',
+      dataIndex: 'role',
+      width: 120,
+      render: (_, record) => <Tag color={roleColors[record.role]}>{roleLabels[record.role] || record.role}</Tag>,
+    },
+    {
+      title: '状态',
+      dataIndex: 'status',
+      width: 100,
+      render: (_, record) => <Tag color={statusColors[record.status]}>{statusLabels[record.status] || record.status}</Tag>,
+    },
+    {
+      title: '2FA',
+      dataIndex: 'totp_enabled',
+      width: 80,
+      render: (_, record) => record.totp_enabled ? <Tag color="green">已启用</Tag> : <Tag>未启用</Tag>,
+    },
+    {
+      title: '最后登录',
+      dataIndex: 'last_login_at',
+      width: 180,
+      render: (_, record) => record.last_login_at ? new Date(record.last_login_at).toLocaleString('zh-CN') : '-',
+    },
+    {
+      title: '操作',
+      width: 200,
+      render: (_, record) => (
+        <Space>
+          <Button size="small" onClick={() => { setEditingId(record.id); form.setFieldsValue(record); setModalOpen(true) }}>
+            编辑
+          </Button>
+          {record.status === 'active' ? (
+            <Popconfirm title="确定禁用此账号？" onConfirm={() => statusMutation.mutate({ id: record.id, status: 'disabled' })}>
+              <Button size="small" danger>禁用</Button>
+            </Popconfirm>
+          ) : (
+            <Popconfirm title="确定启用此账号？" onConfirm={() => statusMutation.mutate({ id: record.id, status: 'active' })}>
+              <Button size="small" type="primary">启用</Button>
+            </Popconfirm>
+          )}
+        </Space>
+      ),
+    },
+  ]
+
+  const handleSave = async () => {
+    const values = await form.validateFields()
+    if (editingId) {
+      updateMutation.mutate({ id: editingId, data: values })
+    }
+  }
+
+  return (
+    <div>
+      <ProTable<AccountPublic>
+        columns={columns}
+        dataSource={data?.items ?? []}
+        loading={isLoading}
+        rowKey="id"
+        search={false}
+        toolBarRender={() => []}
+        pagination={{
+          total: data?.total ?? 0,
+          pageSize: data?.page_size ?? 20,
+          current: data?.page ?? 1,
+          showSizeChanger: false,
+        }}
+      />
+
+      <Modal
+        title="编辑账号"
+        open={modalOpen}
+        onOk={handleSave}
+        onCancel={() => { setModalOpen(false); setEditingId(null); form.resetFields() }}
+        confirmLoading={updateMutation.isPending}
+      >
+        <Form form={form} layout="vertical">
+          <Form.Item name="display_name" label="显示名">
+            <Input />
+          </Form.Item>
+          <Form.Item name="email" label="邮箱">
+            <Input type="email" />
+          </Form.Item>
+          <Form.Item name="role" label="角色">
+            <Select options={[
+              { value: 'super_admin', label: '超级管理员' },
+              { value: 'admin', label: '管理员' },
+              { value: 'user', label: '用户' },
+            ]} />
+          </Form.Item>
+        </Form>
+      </Modal>
+    </div>
+  )
+}
+
+import { useState } from 'react'
--- a/admin-temp-dir/src/pages/AgentTemplates.tsx
+++ b/admin-temp-dir/src/pages/AgentTemplates.tsx
@@ -0,0 +1,190 @@
+// ============================================================
+// Agent 模板管理
+// ============================================================
+
+import { useState } from 'react'
+import { useQuery, useMutation, useQueryClient } from '@tanstack/react-query'
+import { Button, message, Tag, Modal, Form, Input, Select, InputNumber, Space, Popconfirm, Descriptions } from 'antd'
+import { PlusOutlined } from '@ant-design/icons'
+import type { ProColumns } from '@ant-design/pro-components'
+import { ProTable } from '@ant-design/pro-components'
+import { agentTemplateService } from '@/services/agent-templates'
+import type { AgentTemplate } from '@/types'
+
+const { TextArea } = Input
+
+const sourceLabels: Record<string, string> = { builtin: '内置', custom: '自定义' }
+const visibilityLabels: Record<string, string> = { public: '公开', team: '团队', private: '私有' }
+const statusLabels: Record<string, string> = { active: '活跃', archived: '已归档' }
+const statusColors: Record<string, string> = { active: 'green', archived: 'default' }
+
+export default function AgentTemplates() {
+  const queryClient = useQueryClient()
+  const [form] = Form.useForm()
+  const [modalOpen, setModalOpen] = useState(false)
+  const [detailRecord, setDetailRecord] = useState<AgentTemplate | null>(null)
+
+  const { data, isLoading } = useQuery({
+    queryKey: ['agent-templates'],
+    queryFn: ({ signal }) => agentTemplateService.list(signal),
+  })
+
+  const createMutation = useMutation({
+    mutationFn: (data: Parameters<typeof agentTemplateService.create>[0]) =>
+      agentTemplateService.create(data),
+    onSuccess: () => {
+      message.success('创建成功')
+      queryClient.invalidateQueries({ queryKey: ['agent-templates'] })
+      setModalOpen(false)
+      form.resetFields()
+    },
+    onError: (err: Error) => message.error(err.message || '创建失败'),
+  })
+
+  const archiveMutation = useMutation({
+    mutationFn: (id: string) => agentTemplateService.archive(id),
+    onSuccess: () => {
+      message.success('已归档')
+      queryClient.invalidateQueries({ queryKey: ['agent-templates'] })
+    },
+    onError: (err: Error) => message.error(err.message || '归档失败'),
+  })
+
+  const columns: ProColumns<AgentTemplate>[] = [
+    { title: '名称', dataIndex: 'name', width: 160 },
+    { title: '分类', dataIndex: 'category', width: 100 },
+    { title: '模型', dataIndex: 'model', width: 140, render: (_, r) => r.model || '-' },
+    {
+      title: '来源',
+      dataIndex: 'source',
+      width: 80,
+      render: (_, r) => <Tag>{sourceLabels[r.source] || r.source}</Tag>,
+    },
+    {
+      title: '可见性',
+      dataIndex: 'visibility',
+      width: 80,
+      render: (_, r) => <Tag color="blue">{visibilityLabels[r.visibility] || r.visibility}</Tag>,
+    },
+    {
+      title: '状态',
+      dataIndex: 'status',
+      width: 80,
+      render: (_, r) => <Tag color={statusColors[r.status]}>{statusLabels[r.status] || r.status}</Tag>,
+    },
+    { title: '版本', dataIndex: 'current_version', width: 70 },
+    {
+      title: '操作',
+      width: 180,
+      render: (_, record) => (
+        <Space>
+          <Button size="small" onClick={() => setDetailRecord(record)}>详情</Button>
+          {record.status === 'active' && (
+            <Popconfirm title="确定归档此模板？" onConfirm={() => archiveMutation.mutate(record.id)}>
+              <Button size="small" danger>归档</Button>
+            </Popconfirm>
+          )}
+        </Space>
+      ),
+    },
+  ]
+
+  const handleCreate = async () => {
+    const values = await form.validateFields()
+    createMutation.mutate(values)
+  }
+
+  return (
+    <div>
+      <ProTable<AgentTemplate>
+        columns={columns}
+        dataSource={data?.items ?? []}
+        loading={isLoading}
+        rowKey="id"
+        search={false}
+        toolBarRender={() => [
+          <Button key="add" type="primary" icon={<PlusOutlined />} onClick={() => { form.resetFields(); setModalOpen(true) }}>
+            新建模板
+          </Button>,
+        ]}
+        pagination={{
+          total: data?.total ?? 0,
+          pageSize: data?.page_size ?? 20,
+          current: data?.page ?? 1,
+          showSizeChanger: false,
+        }}
+      />
+
+      <Modal
+        title="新建 Agent 模板"
+        open={modalOpen}
+        onOk={handleCreate}
+        onCancel={() => { setModalOpen(false); form.resetFields() }}
+        confirmLoading={createMutation.isPending}
+        width={640}
+      >
+        <Form form={form} layout="vertical">
+          <Form.Item name="name" label="名称" rules={[{ required: true }]}>
+            <Input />
+          </Form.Item>
+          <Form.Item name="description" label="描述">
+            <TextArea rows={2} />
+          </Form.Item>
+          <Form.Item name="category" label="分类">
+            <Input placeholder="如 assistant, tool" />
+          </Form.Item>
+          <Form.Item name="model" label="默认模型">
+            <Input placeholder="如 gpt-4o" />
+          </Form.Item>
+          <Form.Item name="system_prompt" label="系统提示词">
+            <TextArea rows={4} />
+          </Form.Item>
+          <Form.Item name="temperature" label="Temperature">
+            <InputNumber min={0} max={2} step={0.1} style={{ width: '100%' }} />
+          </Form.Item>
+          <Form.Item name="max_tokens" label="最大 Token">
+            <InputNumber min={1} style={{ width: '100%' }} />
+          </Form.Item>
+          <Form.Item name="visibility" label="可见性">
+            <Select options={[
+              { value: 'public', label: '公开' },
+              { value: 'team', label: '团队' },
+              { value: 'private', label: '私有' },
+            ]} />
+          </Form.Item>
+        </Form>
+      </Modal>
+
+      <Modal
+        title="模板详情"
+        open={!!detailRecord}
+        onCancel={() => setDetailRecord(null)}
+        footer={null}
+        width={640}
+      >
+        {detailRecord && (
+          <Descriptions column={2} bordered size="small">
+            <Descriptions.Item label="名称">{detailRecord.name}</Descriptions.Item>
+            <Descriptions.Item label="分类">{detailRecord.category}</Descriptions.Item>
+            <Descriptions.Item label="模型">{detailRecord.model || '-'}</Descriptions.Item>
+            <Descriptions.Item label="来源">{sourceLabels[detailRecord.source]}</Descriptions.Item>
+            <Descriptions.Item label="可见性">{visibilityLabels[detailRecord.visibility]}</Descriptions.Item>
+            <Descriptions.Item label="状态">{statusLabels[detailRecord.status]}</Descriptions.Item>
+            <Descriptions.Item label="描述" span={2}>{detailRecord.description || '-'}</Descriptions.Item>
+            <Descriptions.Item label="系统提示词" span={2}>
+              <div style={{ whiteSpace: 'pre-wrap', maxHeight: 200, overflow: 'auto' }}>
+                {detailRecord.system_prompt || '-'}
+              </div>
+            </Descriptions.Item>
+            <Descriptions.Item label="工具" span={2}>
+              {detailRecord.tools?.map((t) => <Tag key={t}>{t}</Tag>) || '-'}
+            </Descriptions.Item>
+            <Descriptions.Item label="能力" span={2}>
+              {detailRecord.capabilities?.map((c) => <Tag key={c} color="blue">{c}</Tag>) || '-'}
+            </Descriptions.Item>
+          </Descriptions>
+        )}
+      </Modal>
+    </div>
+  )
+}
--- a/admin-temp-dir/src/pages/ApiKeys.tsx
+++ b/admin-temp-dir/src/pages/ApiKeys.tsx
@@ -0,0 +1,165 @@
+// ============================================================
+// API 密钥管理
+// ============================================================
+
+import { useState } from 'react'
+import { useQuery, useMutation, useQueryClient } from '@tanstack/react-query'
+import { Button, message, Tag, Modal, Form, Input, InputNumber, Select, Popconfirm, Space, Typography } from 'antd'
+import { PlusOutlined, CopyOutlined } from '@ant-design/icons'
+import type { ProColumns } from '@ant-design/pro-components'
+import { ProTable } from '@ant-design/pro-components'
+import { apiKeyService } from '@/services/api-keys'
+import type { TokenInfo } from '@/types'
+
+const { Text } = Typography
+
+export default function ApiKeys() {
+  const queryClient = useQueryClient()
+  const [form] = Form.useForm()
+  const [modalOpen, setModalOpen] = useState(false)
+  const [newToken, setNewToken] = useState<string | null>(null)
+
+  const { data, isLoading } = useQuery({
+    queryKey: ['api-keys'],
+    queryFn: ({ signal }) => apiKeyService.list(signal),
+  })
+
+  const createMutation = useMutation({
+    mutationFn: (data: { name: string; expires_days?: number; permissions: string[] }) =>
+      apiKeyService.create(data),
+    onSuccess: (result: TokenInfo) => {
+      message.success('创建成功')
+      queryClient.invalidateQueries({ queryKey: ['api-keys'] })
+      if (result.token) {
+        setNewToken(result.token)
+      }
+      setModalOpen(false)
+      form.resetFields()
+    },
+    onError: (err: Error) => message.error(err.message || '创建失败'),
+  })
+
+  const revokeMutation = useMutation({
+    mutationFn: (id: string) => apiKeyService.revoke(id),
+    onSuccess: () => {
+      message.success('已撤销')
+      queryClient.invalidateQueries({ queryKey: ['api-keys'] })
+    },
+    onError: (err: Error) => message.error(err.message || '撤销失败'),
+  })
+
+  const columns: ProColumns<TokenInfo>[] = [
+    { title: '名称', dataIndex: 'name', width: 160 },
+    { title: '前缀', dataIndex: 'token_prefix', width: 120, render: (_, r) => <Text code>{r.token_prefix}...</Text> },
+    {
+      title: '权限',
+      dataIndex: 'permissions',
+      width: 200,
+      render: (_, r) => r.permissions?.map((p) => <Tag key={p}>{p}</Tag>),
+    },
+    {
+      title: '过期时间',
+      dataIndex: 'expires_at',
+      width: 180,
+      render: (_, r) => r.expires_at ? new Date(r.expires_at).toLocaleString('zh-CN') : '永不过期',
+    },
+    {
+      title: '最后使用',
+      dataIndex: 'last_used_at',
+      width: 180,
+      render: (_, r) => r.last_used_at ? new Date(r.last_used_at).toLocaleString('zh-CN') : '-',
+    },
+    {
+      title: '创建时间',
+      dataIndex: 'created_at',
+      width: 180,
+      render: (_, r) => new Date(r.created_at).toLocaleString('zh-CN'),
+    },
+    {
+      title: '操作',
+      width: 100,
+      render: (_, record) => (
+        <Popconfirm title="确定撤销此密钥？撤销后无法恢复。" onConfirm={() => revokeMutation.mutate(record.id)}>
+          <Button size="small" danger>撤销</Button>
+        </Popconfirm>
+      ),
+    },
+  ]
+
+  const handleCreate = async () => {
+    const values = await form.validateFields()
+    createMutation.mutate(values)
+  }
+
+  const copyToken = () => {
+    if (newToken) {
+      navigator.clipboard.writeText(newToken)
+      message.success('已复制到剪贴板')
+    }
+  }
+
+  return (
+    <div>
+      <ProTable<TokenInfo>
+        columns={columns}
+        dataSource={data?.items ?? []}
+        loading={isLoading}
+        rowKey="id"
+        search={false}
+        toolBarRender={() => [
+          <Button key="add" type="primary" icon={<PlusOutlined />} onClick={() => { form.resetFields(); setModalOpen(true) }}>
+            创建密钥
+          </Button>,
+        ]}
+        pagination={{
+          total: data?.total ?? 0,
+          pageSize: data?.page_size ?? 20,
+          current: data?.page ?? 1,
+          showSizeChanger: false,
+        }}
+      />
+
+      <Modal
+        title="创建 API 密钥"
+        open={modalOpen}
+        onOk={handleCreate}
+        onCancel={() => { setModalOpen(false); form.resetFields() }}
+        confirmLoading={createMutation.isPending}
+      >
+        <Form form={form} layout="vertical">
+          <Form.Item name="name" label="名称" rules={[{ required: true }]}>
+            <Input placeholder="给密钥起个名字" />
+          </Form.Item>
+          <Form.Item name="expires_days" label="有效期 (天)">
+            <InputNumber min={1} placeholder="留空则永不过期" style={{ width: '100%' }} />
+          </Form.Item>
+          <Form.Item name="permissions" label="权限" rules={[{ required: true }]}>
+            <Select mode="multiple" placeholder="选择权限" options={[
+              { value: 'relay:use', label: '中转使用' },
+              { value: 'model:read', label: '模型读取' },
+              { value: 'config:read', label: '配置读取' },
+            ]} />
+          </Form.Item>
+        </Form>
+      </Modal>
+
+      <Modal
+        title="密钥创建成功"
+        open={!!newToken}
+        onOk={() => setNewToken(null)}
+        onCancel={() => setNewToken(null)}
+      >
+        <p>请立即保存此密钥，关闭后将无法再次查看：</p>
+        <Input.TextArea
+          value={newToken || ''}
+          rows={3}
+          readOnly
+          addonAfter={<CopyOutlined onClick={copyToken} style={{ cursor: 'pointer' }} />}
+        />
+        <Button type="primary" icon={<CopyOutlined />} onClick={copyToken} style={{ marginTop: 8 }}>
+          复制密钥
+        </Button>
+      </Modal>
+    </div>
+  )
+}
--- a/admin-temp-dir/src/pages/Config.tsx
+++ b/admin-temp-dir/src/pages/Config.tsx
@@ -0,0 +1,110 @@
+// ============================================================
+// 系统配置
+// ============================================================
+
+import { useState } from 'react'
+import { useQuery, useMutation, useQueryClient } from '@tanstack/react-query'
+import { Card, Tabs, message, Tag, Input, Button, Space, Typography } from 'antd'
+import type { ProColumns } from '@ant-design/pro-components'
+import { ProTable } from '@ant-design/pro-components'
+import { configService } from '@/services/config'
+import type { ConfigItem } from '@/types'
+
+const { Title } = Typography
+
+export default function Config() {
+  const queryClient = useQueryClient()
+  const [category, setCategory] = useState<string>('general')
+  const [editingId, setEditingId] = useState<string | null>(null)
+  const [editValue, setEditValue] = useState('')
+
+  const { data, isLoading } = useQuery({
+    queryKey: ['config', category],
+    queryFn: ({ signal }) => configService.list({ category }, signal),
+  })
+
+  const updateMutation = useMutation({
+    mutationFn: ({ id, value }: { id: string; value: string }) =>
+      configService.update(id, { value }),
+    onSuccess: () => {
+      message.success('配置已更新')
+      queryClient.invalidateQueries({ queryKey: ['config', category] })
+      setEditingId(null)
+    },
+    onError: (err: Error) => message.error(err.message || '更新失败'),
+  })
+
+  const columns: ProColumns<ConfigItem>[] = [
+    { title: '配置路径', dataIndex: 'key_path', width: 200, render: (_, r) => <code>{r.key_path}</code> },
+    {
+      title: '当前值',
+      dataIndex: 'current_value',
+      width: 250,
+      render: (_, record) => {
+        if (editingId === record.id) {
+          return (
+            <Space>
+              <Input
+                value={editValue}
+                onChange={(e) => setEditValue(e.target.value)}
+                style={{ width: 180 }}
+                onPressEnter={() => updateMutation.mutate({ id: record.id, value: editValue })}
+              />
+              <Button size="small" type="primary" onClick={() => updateMutation.mutate({ id: record.id, value: editValue })}>
+                保存
+              </Button>
+              <Button size="small" onClick={() => setEditingId(null)}>取消</Button>
+            </Space>
+          )
+        }
+        return (
+          <span
+            onClick={() => { setEditingId(record.id); setEditValue(record.current_value || '') }}
+            style={{ cursor: 'pointer', color: '#1677ff' }}
+          >
+            {record.current_value || <Tag>未设置</Tag>}
+          </span>
+        )
+      },
+    },
+    { title: '默认值', dataIndex: 'default_value', width: 200, render: (_, r) => r.default_value || '-' },
+    { title: '类型', dataIndex: 'value_type', width: 80, render: (_, r) => <Tag>{r.value_type}</Tag> },
+    { title: '描述', dataIndex: 'description', width: 200, ellipsis: true },
+    {
+      title: '需要重启',
+      dataIndex: 'requires_restart',
+      width: 90,
+      render: (_, r) => r.requires_restart ? <Tag color="orange">是</Tag> : <Tag>否</Tag>,
+    },
+  ]
+
+  return (
+    <div>
+      <Title level={4} style={{ marginBottom: 24 }}>系统配置</Title>
+
+      <Tabs
+        activeKey={category}
+        onChange={(key) => { setCategory(key); setEditingId(null) }}
+        items={[
+          { key: 'general', label: '通用' },
+          { key: 'auth', label: '认证' },
+          { key: 'relay', label: '中转' },
+          { key: 'model', label: '模型' },
+          { key: 'rate_limit', label: '限流' },
+          { key: 'log', label: '日志' },
+        ]}
+      />
+
+      <ProTable<ConfigItem>
+        columns={columns}
+        dataSource={data ?? []}
+        loading={isLoading}
+        rowKey="id"
+        search={false}
+        toolBarRender={false}
+        pagination={false}
+        size="small"
+      />
+    </div>
+  )
+}
--- a/admin-temp-dir/src/pages/Dashboard.tsx
+++ b/admin-temp-dir/src/pages/Dashboard.tsx
@@ -0,0 +1,121 @@
+// ============================================================
+// 仪表盘页面
+// ============================================================
+
+import { useQuery } from '@tanstack/react-query'
+import { Card, Col, Row, Statistic, Table, Tag, Typography, Spin, Alert } from 'antd'
+import {
+  TeamOutlined,
+  CloudServerOutlined,
+  ApiOutlined,
+  ThunderboltOutlined,
+  ColumnWidthOutlined,
+} from '@ant-design/icons'
+import { statsService } from '@/services/stats'
+import { logService } from '@/services/logs'
+import type { OperationLog } from '@/types'
+
+const { Title } = Typography
+
+const actionLabels: Record<string, string> = {
+  login: '登录', logout: '登出',
+  create_account: '创建账号', update_account: '更新账号', delete_account: '删除账号',
+  create_provider: '创建服务商', update_provider: '更新服务商', delete_provider: '删除服务商',
+  create_model: '创建模型', update_model: '更新模型', delete_model: '删除模型',
+  create_token: '创建密钥', revoke_token: '撤销密钥',
+  update_config: '更新配置',
+  create_prompt: '创建提示词', update_prompt: '更新提示词', archive_prompt: '归档提示词',
+  desktop_audit: '桌面端审计',
+}
+
+const actionColors: Record<string, string> = {
+  login: 'green', logout: 'default',
+  create_account: 'blue', update_account: 'orange', delete_account: 'red',
+  create_provider: 'blue', update_provider: 'orange', delete_provider: 'red',
+  create_model: 'blue', update_model: 'orange', delete_model: 'red',
+  create_token: 'blue', revoke_token: 'red',
+  update_config: 'orange',
+  create_prompt: 'blue', update_prompt: 'orange', archive_prompt: 'red',
+  desktop_audit: 'default',
+}
+
+export default function Dashboard() {
+  const { data: stats, isLoading: statsLoading, error: statsError } = useQuery({
+    queryKey: ['dashboard-stats'],
+    queryFn: ({ signal }) => statsService.dashboard(signal),
+  })
+
+  const { data: logsData, isLoading: logsLoading } = useQuery({
+    queryKey: ['recent-logs'],
+    queryFn: ({ signal }) => logService.list({ page: 1, page_size: 10 }, signal),
+  })
+
+  if (statsError) {
+    return <Alert type="error" message="加载仪表盘数据失败" description={(statsError as Error).message} showIcon />
+  }
+
+  const statCards = [
+    { title: '总账号', value: stats?.total_accounts ?? 0, icon: <TeamOutlined />, color: '#1677ff' },
+    { title: '活跃服务商', value: stats?.active_providers ?? 0, icon: <CloudServerOutlined />, color: '#52c41a' },
+    { title: '活跃模型', value: stats?.active_models ?? 0, icon: <ApiOutlined />, color: '#722ed1' },
+    { title: '今日请求', value: stats?.tasks_today ?? 0, icon: <ThunderboltOutlined />, color: '#fa8c16' },
+    { title: '今日 Token', value: ((stats?.tokens_today_input ?? 0) + (stats?.tokens_today_output ?? 0)), icon: <ColumnWidthOutlined />, color: '#eb2f96' },
+  ]
+
+  const logColumns = [
+    {
+      title: '操作类型',
+      dataIndex: 'action',
+      key: 'action',
+      width: 140,
+      render: (action: string) => (
+        <Tag color={actionColors[action] || 'default'}>
+          {actionLabels[action] || action}
+        </Tag>
+      ),
+    },
+    { title: '目标类型', dataIndex: 'target_type', key: 'target_type', width: 100, render: (v: string | null) => v || '-' },
+    {
+      title: '时间',
+      dataIndex: 'created_at',
+      key: 'created_at',
+      width: 180,
+      render: (v: string) => new Date(v).toLocaleString('zh-CN'),
+    },
+  ]
+
+  return (
+    <div>
+      <Title level={4} style={{ marginBottom: 24 }}>仪表盘</Title>
+
+      <Row gutter={[16, 16]} style={{ marginBottom: 24 }}>
+        {statsLoading ? (
+          <Col span={24}><Spin /></Col>
+        ) : (
+          statCards.map((card) => (
+            <Col xs={24} sm={12} md={8} lg={4} key={card.title}>
+              <Card>
+                <Statistic
+                  title={card.title}
+                  value={card.value}
+                  prefix={<span style={{ color: card.color }}>{card.icon}</span>}
+                />
+              </Card>
+            </Col>
+          ))
+        )}
+      </Row>
+
+      <Card title="最近操作日志" size="small">
+        <Table<OperationLog>
+          columns={logColumns}
+          dataSource={logsData?.items ?? []}
+          loading={logsLoading}
+          rowKey="id"
+          pagination={false}
+          size="small"
+        />
+      </Card>
+    </div>
+  )
+}
--- a/admin-temp-dir/src/pages/Login.tsx
+++ b/admin-temp-dir/src/pages/Login.tsx
@@ -0,0 +1,138 @@
+// ============================================================
+// 登录页面
+// ============================================================
+
+import { useState } from 'react'
+import { useNavigate, useSearchParams } from 'react-router-dom'
+import { LoginForm, ProFormText } from '@ant-design/pro-components'
+import { LockOutlined, UserOutlined, SafetyOutlined } from '@ant-design/icons'
+import { message, Divider, Typography } from 'antd'
+import { authService } from '@/services/auth'
+import { useAuthStore } from '@/stores/authStore'
+import type { LoginRequest } from '@/types'
+
+const { Title, Text } = Typography
+
+export default function Login() {
+  const navigate = useNavigate()
+  const [searchParams] = useSearchParams()
+  const loginStore = useAuthStore((s) => s.login)
+  const [needTotp, setNeedTotp] = useState(false)
+  const [loading, setLoading] = useState(false)
+
+  const handleSubmit = async (values: Record<string, string>) => {
+    setLoading(true)
+    try {
+      const data: LoginRequest = {
+        username: values.username?.trim() || '',
+        password: values.password || '',
+        totp_code: values.totp_code?.trim() || undefined,
+      }
+
+      const res = await authService.login(data)
+      loginStore(res.token, res.refresh_token, res.account)
+
+      message.success('登录成功')
+      const from = searchParams.get('from') || '/'
+      navigate(from, { replace: true })
+    } catch (err: unknown) {
+      const error = err as { message?: string; status?: number }
+      const msg = error.message || ''
+      if (msg.includes('TOTP') || msg.includes('totp') || msg.includes('2FA') || msg.includes('验证码') || error.status === 403) {
+        setNeedTotp(true)
+        message.warning(msg || '请输入两步验证码')
+      } else {
+        message.error(msg || '登录失败，请检查用户名和密码')
+      }
+    } finally {
+      setLoading(false)
+    }
+  }
+
+  return (
+    <div style={{ minHeight: '100vh', display: 'flex' }}>
+      {/* 左侧品牌区 */}
+      <div
+        style={{
+          flex: '1 1 0',
+          display: 'flex',
+          flexDirection: 'column',
+          alignItems: 'center',
+          justifyContent: 'center',
+          background: 'linear-gradient(135deg, #001529 0%, #003a70 50%, #001529 100%)',
+          position: 'relative',
+          overflow: 'hidden',
+        }}
+      >
+        <Title level={1} style={{ color: '#fff', marginBottom: 8, letterSpacing: 4 }}>
+          ZCLAW
+        </Title>
+        <Text style={{ color: 'rgba(255,255,255,0.65)', fontSize: 16 }}>AI Agent 管理平台</Text>
+        <Divider style={{ borderColor: 'rgba(22,119,255,0.3)', width: 100, minWidth: 100 }} />
+        <Text style={{ color: 'rgba(255,255,255,0.45)', fontSize: 13, maxWidth: 320, textAlign: 'center' }}>
+          统一管理 AI 服务商、模型配置、API 密钥、用量监控与系统配置
+        </Text>
+      </div>
+
+      {/* 右侧登录表单 */}
+      <div
+        style={{
+          flex: '0 0 480px',
+          display: 'flex',
+          alignItems: 'center',
+          justifyContent: 'center',
+          padding: 48,
+        }}
+      >
+        <div style={{ width: '100%', maxWidth: 360 }}>
+          <Title level={3} style={{ marginBottom: 4 }}>登录</Title>
+          <Text type="secondary" style={{ display: 'block', marginBottom: 32 }}>
+            输入您的账号信息以继续
+          </Text>
+
+          <LoginForm
+            onFinish={handleSubmit}
+            submitter={{
+              searchConfig: { submitText: '登录' },
+              submitButtonProps: { loading, block: true },
+            }}
+          >
+            <ProFormText
+              name="username"
+              fieldProps={{
+                size: 'large',
+                prefix: <UserOutlined />,
+                autoComplete: 'username',
+              }}
+              placeholder="请输入用户名"
+              rules={[{ required: true, message: '请输入用户名' }]}
+            />
+            <ProFormText.Password
+              name="password"
+              fieldProps={{
+                size: 'large',
+                prefix: <LockOutlined />,
+                autoComplete: 'current-password',
+              }}
+              placeholder="请输入密码"
+              rules={[{ required: true, message: '请输入密码' }]}
+            />
+            {needTotp && (
+              <ProFormText
+                name="totp_code"
+                fieldProps={{
+                  size: 'large',
+                  prefix: <SafetyOutlined />,
+                  maxLength: 6,
+                  autoComplete: 'one-time-code',
+                }}
+                placeholder="请输入 6 位验证码"
+                rules={[{ required: true, message: '请输入验证码' }]}
+              />
+            )}
+          </LoginForm>
+        </div>
+      </div>
+    </div>
+  )
+}
--- a/admin-temp-dir/src/pages/Logs.tsx
+++ b/admin-temp-dir/src/pages/Logs.tsx
@@ -0,0 +1,112 @@
+// ============================================================
+// 操作日志
+// ============================================================
+
+import { useState } from 'react'
+import { useQuery } from '@tanstack/react-query'
+import { Tag, Select, Typography } from 'antd'
+import type { ProColumns } from '@ant-design/pro-components'
+import { ProTable } from '@ant-design/pro-components'
+import { logService } from '@/services/logs'
+import type { OperationLog } from '@/types'
+
+const { Title } = Typography
+
+const actionLabels: Record<string, string> = {
+  login: '登录', logout: '登出',
+  create_account: '创建账号', update_account: '更新账号', delete_account: '删除账号',
+  create_provider: '创建服务商', update_provider: '更新服务商', delete_provider: '删除服务商',
+  create_model: '创建模型', update_model: '更新模型', delete_model: '删除模型',
+  create_token: '创建密钥', revoke_token: '撤销密钥',
+  update_config: '更新配置',
+  create_prompt: '创建提示词', update_prompt: '更新提示词', archive_prompt: '归档提示词',
+  desktop_audit: '桌面端审计',
+}
+
+const actionColors: Record<string, string> = {
+  login: 'green', logout: 'default',
+  create_account: 'blue', update_account: 'orange', delete_account: 'red',
+  create_provider: 'blue', update_provider: 'orange', delete_provider: 'red',
+  create_model: 'blue', update_model: 'orange', delete_model: 'red',
+  create_token: 'blue', revoke_token: 'red',
+  update_config: 'orange',
+  create_prompt: 'blue', update_prompt: 'orange', archive_prompt: 'red',
+  desktop_audit: 'default',
+}
+
+const actionOptions = Object.entries(actionLabels).map(([value, label]) => ({ value, label }))
+
+export default function Logs() {
+  const [page, setPage] = useState(1)
+  const [actionFilter, setActionFilter] = useState<string | undefined>(undefined)
+
+  const { data, isLoading } = useQuery({
+    queryKey: ['logs', page, actionFilter],
+    queryFn: ({ signal }) => logService.list({ page, page_size: 20, action: actionFilter }, signal),
+  })
+
+  const columns: ProColumns<OperationLog>[] = [
+    {
+      title: '操作类型',
+      dataIndex: 'action',
+      width: 140,
+      render: (_, r) => (
+        <Tag color={actionColors[r.action] || 'default'}>
+          {actionLabels[r.action] || r.action}
+        </Tag>
+      ),
+    },
+    { title: '目标类型', dataIndex: 'target_type', width: 100, render: (_, r) => r.target_type || '-' },
+    { title: '目标 ID', dataIndex: 'target_id', width: 120, render: (_, r) => r.target_id ? <code>{r.target_id.substring(0, 8)}...</code> : '-' },
+    {
+      title: '详情',
+      dataIndex: 'details',
+      width: 250,
+      ellipsis: true,
+      render: (_, r) => {
+        if (!r.details) return '-'
+        if (typeof r.details === 'string') return r.details
+        return JSON.stringify(r.details)
+      },
+    },
+    { title: 'IP 地址', dataIndex: 'ip_address', width: 130, render: (_, r) => <code>{r.ip_address || '-'}</code> },
+    {
+      title: '时间',
+      dataIndex: 'created_at',
+      width: 180,
+      render: (_, r) => new Date(r.created_at).toLocaleString('zh-CN'),
+    },
+  ]
+
+  return (
+    <div>
+      <div style={{ display: 'flex', justifyContent: 'space-between', alignItems: 'center', marginBottom: 24 }}>
+        <Title level={4} style={{ margin: 0 }}>操作日志</Title>
+        <Select
+          value={actionFilter}
+          onChange={(v) => { setActionFilter(v === 'all' ? undefined : v); setPage(1) }}
+          placeholder="操作类型筛选"
+          style={{ width: 160 }}
+          allowClear
+          options={[{ value: 'all', label: '全部操作' }, ...actionOptions]}
+        />
+      </div>
+
+      <ProTable<OperationLog>
+        columns={columns}
+        dataSource={data?.items ?? []}
+        loading={isLoading}
+        rowKey="id"
+        search={false}
+        toolBarRender={false}
+        pagination={{
+          total: data?.total ?? 0,
+          pageSize: 20,
+          current: page,
+          onChange: setPage,
+          showSizeChanger: false,
+        }}
+      />
+    </div>
+  )
+}
--- a/admin-temp-dir/src/pages/Models.tsx
+++ b/admin-temp-dir/src/pages/Models.tsx
@@ -0,0 +1,186 @@
+// ============================================================
+// 模型管理
+// ============================================================
+
+import { useState } from 'react'
+import { useQuery, useMutation, useQueryClient } from '@tanstack/react-query'
+import { Button, message, Tag, Modal, Form, Input, InputNumber, Switch, Select, Space, Popconfirm } from 'antd'
+import { PlusOutlined } from '@ant-design/icons'
+import type { ProColumns } from '@ant-design/pro-components'
+import { ProTable } from '@ant-design/pro-components'
+import { modelService } from '@/services/models'
+import { providerService } from '@/services/providers'
+import type { Model } from '@/types'
+
+export default function Models() {
+  const queryClient = useQueryClient()
+  const [form] = Form.useForm()
+  const [modalOpen, setModalOpen] = useState(false)
+  const [editingId, setEditingId] = useState<string | null>(null)
+
+  const { data, isLoading } = useQuery({
+    queryKey: ['models'],
+    queryFn: ({ signal }) => modelService.list(signal),
+  })
+
+  const { data: providersData } = useQuery({
+    queryKey: ['providers-for-select'],
+    queryFn: ({ signal }) => providerService.list(signal),
+  })
+
+  const createMutation = useMutation({
+    mutationFn: (data: Partial<Omit<Model, 'id'>>) => modelService.create(data),
+    onSuccess: () => {
+      message.success('创建成功')
+      queryClient.invalidateQueries({ queryKey: ['models'] })
+      setModalOpen(false)
+      form.resetFields()
+    },
+    onError: (err: Error) => message.error(err.message || '创建失败'),
+  })
+
+  const updateMutation = useMutation({
+    mutationFn: ({ id, data }: { id: string; data: Partial<Omit<Model, 'id'>> }) =>
+      modelService.update(id, data),
+    onSuccess: () => {
+      message.success('更新成功')
+      queryClient.invalidateQueries({ queryKey: ['models'] })
+      setModalOpen(false)
+    },
+    onError: (err: Error) => message.error(err.message || '更新失败'),
+  })
+
+  const deleteMutation = useMutation({
+    mutationFn: (id: string) => modelService.delete(id),
+    onSuccess: () => {
+      message.success('删除成功')
+      queryClient.invalidateQueries({ queryKey: ['models'] })
+    },
+    onError: (err: Error) => message.error(err.message || '删除失败'),
+  })
+
+  const columns: ProColumns<Model>[] = [
+    { title: '模型 ID', dataIndex: 'model_id', width: 180, render: (_, r) => <code>{r.model_id}</code> },
+    { title: '别名', dataIndex: 'alias', width: 140 },
+    {
+      title: '服务商',
+      dataIndex: 'provider_id',
+      width: 140,
+      render: (_, r) => {
+        const provider = providersData?.items?.find((p) => p.id === r.provider_id)
+        return provider?.display_name || r.provider_id.substring(0, 8)
+      },
+    },
+    { title: '上下文窗口', dataIndex: 'context_window', width: 110, render: (_, r) => r.context_window?.toLocaleString() },
+    { title: '最大输出', dataIndex: 'max_output_tokens', width: 100, render: (_, r) => r.max_output_tokens?.toLocaleString() },
+    {
+      title: '流式',
+      dataIndex: 'supports_streaming',
+      width: 70,
+      render: (_, r) => r.supports_streaming ? <Tag color="green">是</Tag> : <Tag>否</Tag>,
+    },
+    {
+      title: '视觉',
+      dataIndex: 'supports_vision',
+      width: 70,
+      render: (_, r) => r.supports_vision ? <Tag color="blue">是</Tag> : <Tag>否</Tag>,
+    },
+    {
+      title: '状态',
+      dataIndex: 'enabled',
+      width: 70,
+      render: (_, r) => r.enabled ? <Tag color="green">启用</Tag> : <Tag>禁用</Tag>,
+    },
+    {
+      title: '操作',
+      width: 160,
+      render: (_, record) => (
+        <Space>
+          <Button size="small" onClick={() => { setEditingId(record.id); form.setFieldsValue(record); setModalOpen(true) }}>
+            编辑
+          </Button>
+          <Popconfirm title="确定删除此模型？" onConfirm={() => deleteMutation.mutate(record.id)}>
+            <Button size="small" danger>删除</Button>
+          </Popconfirm>
+        </Space>
+      ),
+    },
+  ]
+
+  const handleSave = async () => {
+    const values = await form.validateFields()
+    if (editingId) {
+      updateMutation.mutate({ id: editingId, data: values })
+    } else {
+      createMutation.mutate(values)
+    }
+  }
+
+  return (
+    <div>
+      <ProTable<Model>
+        columns={columns}
+        dataSource={data?.items ?? []}
+        loading={isLoading}
+        rowKey="id"
+        search={false}
+        toolBarRender={() => [
+          <Button key="add" type="primary" icon={<PlusOutlined />} onClick={() => { setEditingId(null); form.resetFields(); setModalOpen(true) }}>
+            新建模型
+          </Button>,
+        ]}
+        pagination={{
+          total: data?.total ?? 0,
+          pageSize: data?.page_size ?? 20,
+          current: data?.page ?? 1,
+          showSizeChanger: false,
+        }}
+      />
+
+      <Modal
+        title={editingId ? '编辑模型' : '新建模型'}
+        open={modalOpen}
+        onOk={handleSave}
+        onCancel={() => { setModalOpen(false); setEditingId(null); form.resetFields() }}
+        confirmLoading={createMutation.isPending || updateMutation.isPending}
+        width={600}
+      >
+        <Form form={form} layout="vertical">
+          <Form.Item name="provider_id" label="服务商" rules={[{ required: true }]}>
+            <Select
+              options={(providersData?.items ?? []).map((p) => ({ value: p.id, label: p.display_name }))}
+              placeholder="选择服务商"
+            />
+          </Form.Item>
+          <Form.Item name="model_id" label="模型 ID" rules={[{ required: true }]}>
+            <Input placeholder="如 gpt-4o" />
+          </Form.Item>
+          <Form.Item name="alias" label="别名">
+            <Input />
+          </Form.Item>
+          <Form.Item name="context_window" label="上下文窗口">
+            <InputNumber min={0} style={{ width: '100%' }} />
+          </Form.Item>
+          <Form.Item name="max_output_tokens" label="最大输出 Token">
+            <InputNumber min={0} style={{ width: '100%' }} />
+          </Form.Item>
+          <Form.Item name="enabled" label="启用" valuePropName="checked">
+            <Switch />
+          </Form.Item>
+          <Form.Item name="supports_streaming" label="支持流式" valuePropName="checked">
+            <Switch />
+          </Form.Item>
+          <Form.Item name="supports_vision" label="支持视觉" valuePropName="checked">
+            <Switch />
+          </Form.Item>
+          <Form.Item name="pricing_input" label="输入价格 (每百万 Token)">
+            <InputNumber min={0} step={0.01} style={{ width: '100%' }} />
+          </Form.Item>
+          <Form.Item name="pricing_output" label="输出价格 (每百万 Token)">
+            <InputNumber min={0} step={0.01} style={{ width: '100%' }} />
+          </Form.Item>
+        </Form>
+      </Modal>
+    </div>
+  )
+}
--- a/admin-temp-dir/src/pages/Prompts.tsx
+++ b/admin-temp-dir/src/pages/Prompts.tsx
@@ -0,0 +1,228 @@
+// ============================================================
+// 提示词管理
+// ============================================================
+
+import { useState } from 'react'
+import { useQuery, useMutation, useQueryClient } from '@tanstack/react-query'
+import { Button, message, Tag, Modal, Form, Input, Select, Space, Popconfirm, Descriptions, Tabs, Typography } from 'antd'
+import { PlusOutlined } from '@ant-design/icons'
+import type { ProColumns } from '@ant-design/pro-components'
+import { ProTable } from '@ant-design/pro-components'
+import { promptService } from '@/services/prompts'
+import type { PromptTemplate, PromptVersion } from '@/types'
+
+const { TextArea } = Input
+const { Text } = Typography
+
+const sourceLabels: Record<string, string> = { builtin: '内置', custom: '自定义' }
+const statusLabels: Record<string, string> = { active: '活跃', deprecated: '已废弃', archived: '已归档' }
+const statusColors: Record<string, string> = { active: 'green', deprecated: 'orange', archived: 'default' }
+
+export default function Prompts() {
+  const queryClient = useQueryClient()
+  const [form] = Form.useForm()
+  const [createOpen, setCreateOpen] = useState(false)
+  const [detailName, setDetailName] = useState<string | null>(null)
+
+  const { data, isLoading } = useQuery({
+    queryKey: ['prompts'],
+    queryFn: ({ signal }) => promptService.list(signal),
+  })
+
+  const { data: detailData } = useQuery({
+    queryKey: ['prompt-detail', detailName],
+    queryFn: ({ signal }) => promptService.get(detailName!, signal),
+    enabled: !!detailName,
+  })
+
+  const { data: versionsData } = useQuery({
+    queryKey: ['prompt-versions', detailName],
+    queryFn: ({ signal }) => promptService.listVersions(detailName!, signal),
+    enabled: !!detailName,
+  })
+
+  const createMutation = useMutation({
+    mutationFn: (data: Parameters<typeof promptService.create>[0]) => promptService.create(data),
+    onSuccess: () => {
+      message.success('创建成功')
+      queryClient.invalidateQueries({ queryKey: ['prompts'] })
+      setCreateOpen(false)
+      form.resetFields()
+    },
+    onError: (err: Error) => message.error(err.message || '创建失败'),
+  })
+
+  const archiveMutation = useMutation({
+    mutationFn: (name: string) => promptService.archive(name),
+    onSuccess: () => {
+      message.success('已归档')
+      queryClient.invalidateQueries({ queryKey: ['prompts'] })
+    },
+    onError: (err: Error) => message.error(err.message || '归档失败'),
+  })
+
+  const rollbackMutation = useMutation({
+    mutationFn: ({ name, version }: { name: string; version: number }) =>
+      promptService.rollback(name, version),
+    onSuccess: () => {
+      message.success('回滚成功')
+      queryClient.invalidateQueries({ queryKey: ['prompts'] })
+      queryClient.invalidateQueries({ queryKey: ['prompt-detail', detailName] })
+      queryClient.invalidateQueries({ queryKey: ['prompt-versions', detailName] })
+    },
+    onError: (err: Error) => message.error(err.message || '回滚失败'),
+  })
+
+  const columns: ProColumns<PromptTemplate>[] = [
+    { title: '名称', dataIndex: 'name', width: 200, render: (_, r) => <Text code>{r.name}</Text> },
+    { title: '分类', dataIndex: 'category', width: 100 },
+    { title: '描述', dataIndex: 'description', width: 200, ellipsis: true },
+    {
+      title: '来源',
+      dataIndex: 'source',
+      width: 80,
+      render: (_, r) => <Tag>{sourceLabels[r.source]}</Tag>,
+    },
+    { title: '版本', dataIndex: 'current_version', width: 70 },
+    {
+      title: '状态',
+      dataIndex: 'status',
+      width: 90,
+      render: (_, r) => <Tag color={statusColors[r.status]}>{statusLabels[r.status]}</Tag>,
+    },
+    {
+      title: '操作',
+      width: 180,
+      render: (_, record) => (
+        <Space>
+          <Button size="small" onClick={() => setDetailName(record.name)}>详情</Button>
+          {record.status === 'active' && (
+            <Popconfirm title="确定归档此提示词？" onConfirm={() => archiveMutation.mutate(record.name)}>
+              <Button size="small" danger>归档</Button>
+            </Popconfirm>
+          )}
+        </Space>
+      ),
+    },
+  ]
+
+  const handleCreate = async () => {
+    const values = await form.validateFields()
+    createMutation.mutate(values)
+  }
+
+  const versionColumns: ProColumns<PromptVersion>[] = [
+    { title: '版本', dataIndex: 'version', width: 60 },
+    { title: '更新说明', dataIndex: 'changelog', width: 200, ellipsis: true },
+    { title: '最低版本', dataIndex: 'min_app_version', width: 100, render: (_, r) => r.min_app_version || '-' },
+    {
+      title: '创建时间',
+      dataIndex: 'created_at',
+      width: 180,
+      render: (_, r) => new Date(r.created_at).toLocaleString('zh-CN'),
+    },
+    {
+      title: '操作',
+      width: 80,
+      render: (_, record) => (
+        <Popconfirm
+          title={`确定回滚到版本 ${record.version}？`}
+          onConfirm={() => detailName && rollbackMutation.mutate({ name: detailName, version: record.version })}
+        >
+          <Button size="small">回滚</Button>
+        </Popconfirm>
+      ),
+    },
+  ]
+
+  return (
+    <div>
+      <ProTable<PromptTemplate>
+        columns={columns}
+        dataSource={data?.items ?? []}
+        loading={isLoading}
+        rowKey="id"
+        search={false}
+        toolBarRender={() => [
+          <Button key="add" type="primary" icon={<PlusOutlined />} onClick={() => { form.resetFields(); setCreateOpen(true) }}>
+            新建提示词
+          </Button>,
+        ]}
+        pagination={{
+          total: data?.total ?? 0,
+          pageSize: data?.page_size ?? 20,
+          current: data?.page ?? 1,
+          showSizeChanger: false,
+        }}
+      />
+
+      <Modal
+        title="新建提示词"
+        open={createOpen}
+        onOk={handleCreate}
+        onCancel={() => { setCreateOpen(false); form.resetFields() }}
+        confirmLoading={createMutation.isPending}
+        width={640}
+      >
+        <Form form={form} layout="vertical">
+          <Form.Item name="name" label="名称" rules={[{ required: true }]}>
+            <Input placeholder="唯一标识" />
+          </Form.Item>
+          <Form.Item name="category" label="分类" rules={[{ required: true }]}>
+            <Input placeholder="如 system, tool" />
+          </Form.Item>
+          <Form.Item name="description" label="描述">
+            <TextArea rows={2} />
+          </Form.Item>
+          <Form.Item name="system_prompt" label="系统提示词" rules={[{ required: true }]}>
+            <TextArea rows={6} />
+          </Form.Item>
+          <Form.Item name="user_prompt_template" label="用户提示词模板">
+            <TextArea rows={4} />
+          </Form.Item>
+        </Form>
+      </Modal>
+
+      <Modal
+        title={`提示词详情: ${detailName || ''}`}
+        open={!!detailName}
+        onCancel={() => setDetailName(null)}
+        footer={null}
+        width={800}
+      >
+        <Tabs items={[
+          {
+            key: 'info',
+            label: '基本信息',
+            children: detailData ? (
+              <Descriptions column={2} bordered size="small">
+                <Descriptions.Item label="名称">{detailData.name}</Descriptions.Item>
+                <Descriptions.Item label="分类">{detailData.category}</Descriptions.Item>
+                <Descriptions.Item label="来源">{sourceLabels[detailData.source]}</Descriptions.Item>
+                <Descriptions.Item label="状态">{statusLabels[detailData.status]}</Descriptions.Item>
+                <Descriptions.Item label="当前版本">{detailData.current_version}</Descriptions.Item>
+                <Descriptions.Item label="描述" span={2}>{detailData.description || '-'}</Descriptions.Item>
+              </Descriptions>
+            ) : null,
+          },
+          {
+            key: 'versions',
+            label: '版本历史',
+            children: (
+              <ProTable<PromptVersion>
+                columns={versionColumns}
+                dataSource={versionsData ?? []}
+                rowKey="id"
+                search={false}
+                toolBarRender={false}
+                pagination={false}
+                size="small"
+                loading={!versionsData}
+              />
+            ),
+          },
+        ]} />
+      </Modal>
+    </div>
+  )
+}
--- a/admin-temp-dir/src/pages/Providers.tsx
+++ b/admin-temp-dir/src/pages/Providers.tsx
@@ -0,0 +1,188 @@
+// ============================================================
+// 服务商管理
+// ============================================================
+
+import { useState } from 'react'
+import { useQuery, useMutation, useQueryClient } from '@tanstack/react-query'
+import { Button, message, Tag, Modal, Form, Input, InputNumber, Switch, Space, Popconfirm, Typography } from 'antd'
+import { PlusOutlined } from '@ant-design/icons'
+import type { ProColumns } from '@ant-design/pro-components'
+import { ProTable } from '@ant-design/pro-components'
+import { providerService } from '@/services/providers'
+import type { Provider, ProviderKey } from '@/types'
+
+const { Text } = Typography
+
+export default function Providers() {
+  const queryClient = useQueryClient()
+  const [form] = Form.useForm()
+  const [modalOpen, setModalOpen] = useState(false)
+  const [editingId, setEditingId] = useState<string | null>(null)
+  const [keyModalProviderId, setKeyModalProviderId] = useState<string | null>(null)
+
+  const { data, isLoading } = useQuery({
+    queryKey: ['providers'],
+    queryFn: ({ signal }) => providerService.list(signal),
+  })
+
+  const { data: keysData, isLoading: keysLoading } = useQuery({
+    queryKey: ['provider-keys', keyModalProviderId],
+    queryFn: ({ signal }) => providerService.listKeys(keyModalProviderId!, signal),
+    enabled: !!keyModalProviderId,
+  })
+
+  const createMutation = useMutation({
+    mutationFn: (data: Partial<Omit<Provider, 'id' | 'created_at' | 'updated_at'>>) =>
+      providerService.create(data),
+    onSuccess: () => {
+      message.success('创建成功')
+      queryClient.invalidateQueries({ queryKey: ['providers'] })
+      setModalOpen(false)
+      form.resetFields()
+    },
+    onError: (err: Error) => message.error(err.message || '创建失败'),
+  })
+
+  const updateMutation = useMutation({
+    mutationFn: ({ id, data }: { id: string; data: Partial<Omit<Provider, 'id' | 'created_at' | 'updated_at'>> }) =>
+      providerService.update(id, data),
+    onSuccess: () => {
+      message.success('更新成功')
+      queryClient.invalidateQueries({ queryKey: ['providers'] })
+      setModalOpen(false)
+    },
+    onError: (err: Error) => message.error(err.message || '更新失败'),
+  })
+
+  const deleteMutation = useMutation({
+    mutationFn: (id: string) => providerService.delete(id),
+    onSuccess: () => {
+      message.success('删除成功')
+      queryClient.invalidateQueries({ queryKey: ['providers'] })
+    },
+    onError: (err: Error) => message.error(err.message || '删除失败'),
+  })
+
+  const columns: ProColumns<Provider>[] = [
+    { title: '名称', dataIndex: 'display_name', width: 140 },
+    { title: '标识', dataIndex: 'name', width: 120, render: (_, r) => <Text code>{r.name}</Text> },
+    { title: '协议', dataIndex: 'api_protocol', width: 100 },
+    { title: 'RPM 限制', dataIndex: 'rate_limit_rpm', width: 100, render: (_, r) => r.rate_limit_rpm ?? '-' },
+    {
+      title: '状态',
+      dataIndex: 'enabled',
+      width: 80,
+      render: (_, r) => r.enabled ? <Tag color="green">启用</Tag> : <Tag>禁用</Tag>,
+    },
+    {
+      title: '操作',
+      width: 260,
+      render: (_, record) => (
+        <Space>
+          <Button size="small" onClick={() => { setEditingId(record.id); form.setFieldsValue(record); setModalOpen(true) }}>
+            编辑
+          </Button>
+          <Button size="small" onClick={() => setKeyModalProviderId(record.id)}>
+            Key Pool
+          </Button>
+          <Popconfirm title="确定删除此服务商？" onConfirm={() => deleteMutation.mutate(record.id)}>
+            <Button size="small" danger>删除</Button>
+          </Popconfirm>
+        </Space>
+      ),
+    },
+  ]
+
+  const keyColumns: ProColumns<ProviderKey>[] = [
+    { title: '标签', dataIndex: 'key_label', width: 120 },
+    { title: '优先级', dataIndex: 'priority', width: 80 },
+    { title: '请求数', dataIndex: 'total_requests', width: 80 },
+    { title: 'Token 数', dataIndex: 'total_tokens', width: 100 },
+    {
+      title: '状态',
+      dataIndex: 'is_active',
+      width: 80,
+      render: (_, r) => r.is_active ? <Tag color="green">活跃</Tag> : <Tag>冷却</Tag>,
+    },
+  ]
+
+  const handleSave = async () => {
+    const values = await form.validateFields()
+    if (editingId) {
+      updateMutation.mutate({ id: editingId, data: values })
+    } else {
+      createMutation.mutate(values)
+    }
+  }
+
+  return (
+    <div>
+      <ProTable<Provider>
+        columns={columns}
+        dataSource={data?.items ?? []}
+        loading={isLoading}
+        rowKey="id"
+        search={false}
+        toolBarRender={() => [
+          <Button key="add" type="primary" icon={<PlusOutlined />} onClick={() => { setEditingId(null); form.resetFields(); setModalOpen(true) }}>
+            新建服务商
+          </Button>,
+        ]}
+        pagination={{
+          total: data?.total ?? 0,
+          pageSize: data?.page_size ?? 20,
+          current: data?.page ?? 1,
+          showSizeChanger: false,
+        }}
+      />
+
+      <Modal
+        title={editingId ? '编辑服务商' : '新建服务商'}
+        open={modalOpen}
+        onOk={handleSave}
+        onCancel={() => { setModalOpen(false); setEditingId(null); form.resetFields() }}
+        confirmLoading={createMutation.isPending || updateMutation.isPending}
+      >
+        <Form form={form} layout="vertical">
+          <Form.Item name="name" label="标识" rules={[{ required: true }]}>
+            <Input disabled={!!editingId} />
+          </Form.Item>
+          <Form.Item name="display_name" label="显示名称" rules={[{ required: true }]}>
+            <Input />
+          </Form.Item>
+          <Form.Item name="base_url" label="Base URL" rules={[{ required: true }]}>
+            <Input />
+          </Form.Item>
+          <Form.Item name="api_protocol" label="API 协议">
+            <Input placeholder="openai" />
+          </Form.Item>
+          <Form.Item name="enabled" label="启用" valuePropName="checked">
+            <Switch />
+          </Form.Item>
+          <Form.Item name="rate_limit_rpm" label="RPM 限制">
+            <InputNumber min={0} style={{ width: '100%' }} />
+          </Form.Item>
+        </Form>
+      </Modal>
+
+      <Modal
+        title="Key Pool"
+        open={!!keyModalProviderId}
+        onCancel={() => setKeyModalProviderId(null)}
+        footer={null}
+        width={700}
+      >
+        <ProTable<ProviderKey>
+          columns={keyColumns}
+          dataSource={keysData ?? []}
+          loading={keysLoading}
+          rowKey="id"
+          search={false}
+          toolBarRender={false}
+          pagination={false}
+          size="small"
+        />
+      </Modal>
+    </div>
+  )
+}
--- a/admin-temp-dir/src/pages/Relay.tsx
+++ b/admin-temp-dir/src/pages/Relay.tsx
@@ -0,0 +1,109 @@
+// ============================================================
+// 中转任务
+// ============================================================
+
+import { useQuery } from '@tanstack/react-query'
+import { Tag, Select, Typography } from 'antd'
+import type { ProColumns } from '@ant-design/pro-components'
+import { ProTable } from '@ant-design/pro-components'
+import { relayService } from '@/services/relay'
+import { useState } from 'react'
+import type { RelayTask } from '@/types'
+
+const { Title } = Typography
+
+const statusLabels: Record<string, string> = {
+  queued: '排队中',
+  running: '运行中',
+  completed: '已完成',
+  failed: '失败',
+  cancelled: '已取消',
+}
+
+const statusColors: Record<string, string> = {
+  queued: 'default',
+  running: 'processing',
+  completed: 'green',
+  failed: 'red',
+  cancelled: 'default',
+}
+
+export default function Relay() {
+  const [statusFilter, setStatusFilter] = useState<string | undefined>(undefined)
+  const [page, setPage] = useState(1)
+
+  const { data, isLoading } = useQuery({
+    queryKey: ['relay-tasks', page, statusFilter],
+    queryFn: ({ signal }) => relayService.list({ page, page_size: 20, status: statusFilter }, signal),
+  })
+
+  const columns: ProColumns<RelayTask>[] = [
+    { title: 'ID', dataIndex: 'id', width: 120, render: (_, r) => <code>{r.id.substring(0, 8)}...</code> },
+    {
+      title: '状态',
+      dataIndex: 'status',
+      width: 100,
+      render: (_, r) => <Tag color={statusColors[r.status] || 'default'}>{statusLabels[r.status] || r.status}</Tag>,
+    },
+    { title: '模型', dataIndex: 'model_id', width: 160 },
+    { title: '优先级', dataIndex: 'priority', width: 70 },
+    { title: '尝试次数', dataIndex: 'attempt_count', width: 80 },
+    {
+      title: 'Token',
+      width: 140,
+      render: (_, r) => `${r.input_tokens.toLocaleString()} / ${r.output_tokens.toLocaleString()}`,
+    },
+    { title: '错误信息', dataIndex: 'error_message', width: 200, ellipsis: true },
+    {
+      title: '排队时间',
+      dataIndex: 'queued_at',
+      width: 180,
+      render: (_, r) => new Date(r.queued_at).toLocaleString('zh-CN'),
+    },
+    {
+      title: '完成时间',
+      dataIndex: 'completed_at',
+      width: 180,
+      render: (_, r) => r.completed_at ? new Date(r.completed_at).toLocaleString('zh-CN') : '-',
+    },
+  ]
+
+  return (
+    <div>
+      <div style={{ display: 'flex', justifyContent: 'space-between', alignItems: 'center', marginBottom: 24 }}>
+        <Title level={4} style={{ margin: 0 }}>中转任务</Title>
+        <Select
+          value={statusFilter}
+          onChange={(v) => { setStatusFilter(v === 'all' ? undefined : v); setPage(1) }}
+          placeholder="状态筛选"
+          style={{ width: 140 }}
+          allowClear
+          options={[
+            { value: 'all', label: '全部' },
+            { value: 'queued', label: '排队中' },
+            { value: 'running', label: '运行中' },
+            { value: 'completed', label: '已完成' },
+            { value: 'failed', label: '失败' },
+            { value: 'cancelled', label: '已取消' },
+          ]}
+        />
+      </div>
+
+      <ProTable<RelayTask>
+        columns={columns}
+        dataSource={data?.items ?? []}
+        loading={isLoading}
+        rowKey="id"
+        search={false}
+        toolBarRender={false}
+        pagination={{
+          total: data?.total ?? 0,
+          pageSize: 20,
+          current: page,
+          onChange: setPage,
+          showSizeChanger: false,
+        }}
+      />
+    </div>
+  )
+}
--- a/admin-temp-dir/src/pages/Usage.tsx
+++ b/admin-temp-dir/src/pages/Usage.tsx
@@ -0,0 +1,120 @@
+// ============================================================
+// 用量统计
+// ============================================================
+
+import { useState } from 'react'
+import { useQuery } from '@tanstack/react-query'
+import { Card, Row, Col, Select, Spin, Alert, Statistic, Typography } from 'antd'
+import { ColumnWidthOutlined, ThunderboltOutlined } from '@ant-design/icons'
+import type { ProColumns } from '@ant-design/pro-components'
+import { ProTable } from '@ant-design/pro-components'
+import { usageService } from '@/services/usage'
+import { telemetryService } from '@/services/telemetry'
+import type { DailyUsageStat, ModelUsageStat } from '@/types'
+
+const { Title } = Typography
+
+export default function Usage() {
+  const [days, setDays] = useState(30)
+
+  const { data: dailyData, isLoading: dailyLoading, error: dailyError } = useQuery({
+    queryKey: ['usage-daily', days],
+    queryFn: ({ signal }) => telemetryService.dailyStats({ days }, signal),
+  })
+
+  const { data: modelData, isLoading: modelLoading } = useQuery({
+    queryKey: ['usage-model', days],
+    queryFn: ({ signal }) => telemetryService.modelStats({}, signal),
+  })
+
+  if (dailyError) {
+    return <Alert type="error" message="加载用量数据失败" description={(dailyError as Error).message} showIcon />
+  }
+
+  const totalRequests = dailyData?.reduce((s, d) => s + d.request_count, 0) ?? 0
+  const totalTokens = dailyData?.reduce((s, d) => s + d.input_tokens + d.output_tokens, 0) ?? 0
+
+  const dailyColumns: ProColumns<DailyUsageStat>[] = [
+    { title: '日期', dataIndex: 'day', width: 120 },
+    { title: '请求数', dataIndex: 'request_count', width: 100, render: (_, r) => r.request_count.toLocaleString() },
+    { title: '输入 Token', dataIndex: 'input_tokens', width: 120, render: (_, r) => r.input_tokens.toLocaleString() },
+    { title: '输出 Token', dataIndex: 'output_tokens', width: 120, render: (_, r) => r.output_tokens.toLocaleString() },
+    { title: '设备数', dataIndex: 'unique_devices', width: 80 },
+  ]
+
+  const modelColumns: ProColumns<ModelUsageStat>[] = [
+    { title: '模型', dataIndex: 'model_id', width: 200 },
+    { title: '请求数', dataIndex: 'request_count', width: 100, render: (_, r) => r.request_count.toLocaleString() },
+    { title: '输入 Token', dataIndex: 'input_tokens', width: 120, render: (_, r) => r.input_tokens.toLocaleString() },
+    { title: '输出 Token', dataIndex: 'output_tokens', width: 120, render: (_, r) => r.output_tokens.toLocaleString() },
+    {
+      title: '平均延迟',
+      dataIndex: 'avg_latency_ms',
+      width: 100,
+      render: (_, r) => r.avg_latency_ms ? `${Math.round(r.avg_latency_ms)}ms` : '-',
+    },
+    {
+      title: '成功率',
+      dataIndex: 'success_rate',
+      width: 100,
+      render: (_, r) => `${(r.success_rate * 100).toFixed(1)}%`,
+    },
+  ]
+
+  return (
+    <div>
+      <div style={{ display: 'flex', justifyContent: 'space-between', alignItems: 'center', marginBottom: 24 }}>
+        <Title level={4} style={{ margin: 0 }}>用量统计</Title>
+        <Select
+          value={days}
+          onChange={setDays}
+          options={[
+            { value: 7, label: '最近 7 天' },
+            { value: 30, label: '最近 30 天' },
+            { value: 90, label: '最近 90 天' },
+          ]}
+          style={{ width: 140 }}
+        />
+      </div>
+
+      <Row gutter={[16, 16]} style={{ marginBottom: 24 }}>
+        <Col span={12}>
+          <Card>
+            <Statistic title="总请求数" value={totalRequests} prefix={<ThunderboltOutlined />} />
+          </Card>
+        </Col>
+        <Col span={12}>
+          <Card>
+            <Statistic title="总 Token 数" value={totalTokens} prefix={<ColumnWidthOutlined />} />
+          </Card>
+        </Col>
+      </Row>
+
+      <Card title="每日统计" style={{ marginBottom: 24 }} size="small">
+        <ProTable<DailyUsageStat>
+          columns={dailyColumns}
+          dataSource={dailyData ?? []}
+          loading={dailyLoading}
+          rowKey="day"
+          search={false}
+          toolBarRender={false}
+          pagination={false}
+          size="small"
+        />
+      </Card>
+
+      <Card title="按模型统计" size="small">
+        <ProTable<ModelUsageStat>
+          columns={modelColumns}
+          dataSource={modelData ?? []}
+          loading={modelLoading}
+          rowKey="model_id"
+          search={false}
+          toolBarRender={false}
+          pagination={false}
+          size="small"
+        />
+      </Card>
+    </div>
+  )
+}
--- a/admin-temp-dir/src/router/AuthGuard.tsx
+++ b/admin-temp-dir/src/router/AuthGuard.tsx
@@ -0,0 +1,17 @@
+// ============================================================
+// 路由守卫 — 未登录重定向到 /login
+// ============================================================
+
+import { Navigate, useLocation } from 'react-router-dom'
+import { useAuthStore } from '@/stores/authStore'
+
+export function AuthGuard({ children }: { children: React.ReactNode }) {
+  const token = useAuthStore((s) => s.token)
+  const location = useLocation()
+
+  if (!token) {
+    return <Navigate to="/login" state={{ from: location }} replace />
+  }
+
+  return <>{children}</>
+}
--- a/admin-temp-dir/src/router/index.tsx
+++ b/admin-temp-dir/src/router/index.tsx
@@ -0,0 +1,35 @@
+// ============================================================
+// 路由定义
+// ============================================================
+
+import { createBrowserRouter } from 'react-router-dom'
+import { AuthGuard } from './AuthGuard'
+import AdminLayout from '@/layouts/AdminLayout'
+
+export const router = createBrowserRouter([
+  {
+    path: '/login',
+    lazy: () => import('@/pages/Login').then((m) => ({ Component: m.default })),
+  },
+  {
+    path: '/',
+    element: (
+      <AuthGuard>
+        <AdminLayout />
+      </AuthGuard>
+    ),
+    children: [
+      { index: true, lazy: () => import('@/pages/Dashboard').then((m) => ({ Component: m.default })) },
+      { path: 'accounts', lazy: () => import('@/pages/Accounts').then((m) => ({ Component: m.default })) },
+      { path: 'providers', lazy: () => import('@/pages/Providers').then((m) => ({ Component: m.default })) },
+      { path: 'models', lazy: () => import('@/pages/Models').then((m) => ({ Component: m.default })) },
+      { path: 'agent-templates', lazy: () => import('@/pages/AgentTemplates').then((m) => ({ Component: m.default })) },
+      { path: 'api-keys', lazy: () => import('@/pages/ApiKeys').then((m) => ({ Component: m.default })) },
+      { path: 'usage', lazy: () => import('@/pages/Usage').then((m) => ({ Component: m.default })) },
+      { path: 'relay', lazy: () => import('@/pages/Relay').then((m) => ({ Component: m.default })) },
+      { path: 'config', lazy: () => import('@/pages/Config').then((m) => ({ Component: m.default })) },
+      { path: 'prompts', lazy: () => import('@/pages/Prompts').then((m) => ({ Component: m.default })) },
+      { path: 'logs', lazy: () => import('@/pages/Logs').then((m) => ({ Component: m.default })) },
+    ],
+  },
+])
--- a/admin-temp-dir/src/services/accounts.ts
+++ b/admin-temp-dir/src/services/accounts.ts
@@ -0,0 +1,16 @@
+import request, { withSignal } from './request'
+import type { AccountPublic, PaginatedResponse } from '@/types'
+
+export const accountService = {
+  list: (params?: Record<string, unknown>, signal?: AbortSignal) =>
+    request.get<PaginatedResponse<AccountPublic>>('/accounts', withSignal({ params }, signal)).then((r) => r.data),
+
+  get: (id: string, signal?: AbortSignal) =>
+    request.get<AccountPublic>(`/accounts/${id}`, withSignal({}, signal)).then((r) => r.data),
+
+  update: (id: string, data: Partial<Pick<AccountPublic, 'display_name' | 'email' | 'role'>>, signal?: AbortSignal) =>
+    request.patch<AccountPublic>(`/accounts/${id}`, data, withSignal({}, signal)).then((r) => r.data),
+
+  updateStatus: (id: string, data: { status: AccountPublic['status'] }, signal?: AbortSignal) =>
+    request.patch(`/accounts/${id}/status`, data, withSignal({}, signal)).then((r) => r.data),
+}
--- a/admin-temp-dir/src/services/agent-templates.ts
+++ b/admin-temp-dir/src/services/agent-templates.ts
@@ -0,0 +1,28 @@
+import request, { withSignal } from './request'
+import type { AgentTemplate, PaginatedResponse } from '@/types'
+
+export const agentTemplateService = {
+  list: (params?: Record<string, unknown>, signal?: AbortSignal) =>
+    request.get<PaginatedResponse<AgentTemplate>>('/agent-templates', withSignal({ params }, signal)).then((r) => r.data),
+
+  get: (id: string, signal?: AbortSignal) =>
+    request.get<AgentTemplate>(`/agent-templates/${id}`, withSignal({}, signal)).then((r) => r.data),
+
+  create: (data: {
+    name: string; description?: string; category?: string; source?: string
+    model?: string; system_prompt?: string; tools?: string[]
+    capabilities?: string[]; temperature?: number; max_tokens?: number
+    visibility?: string
+  }, signal?: AbortSignal) =>
+    request.post<AgentTemplate>('/agent-templates', data, withSignal({}, signal)).then((r) => r.data),
+
+  update: (id: string, data: {
+    description?: string; model?: string; system_prompt?: string
+    tools?: string[]; capabilities?: string[]; temperature?: number
+    max_tokens?: number; visibility?: string; status?: string
+  }, signal?: AbortSignal) =>
+    request.post<AgentTemplate>(`/agent-templates/${id}`, data, withSignal({}, signal)).then((r) => r.data),
+
+  archive: (id: string, signal?: AbortSignal) =>
+    request.delete<AgentTemplate>(`/agent-templates/${id}`, withSignal({}, signal)).then((r) => r.data),
+}
--- a/admin-temp-dir/src/services/api-keys.ts
+++ b/admin-temp-dir/src/services/api-keys.ts
@@ -0,0 +1,13 @@
+import request, { withSignal } from './request'
+import type { TokenInfo, CreateTokenRequest, PaginatedResponse } from '@/types'
+
+export const apiKeyService = {
+  list: (params?: Record<string, unknown>, signal?: AbortSignal) =>
+    request.get<PaginatedResponse<TokenInfo>>('/keys', withSignal({ params }, signal)).then((r) => r.data),
+
+  create: (data: CreateTokenRequest, signal?: AbortSignal) =>
+    request.post<TokenInfo>('/keys', data, withSignal({}, signal)).then((r) => r.data),
+
+  revoke: (id: string, signal?: AbortSignal) =>
+    request.delete(`/keys/${id}`, withSignal({}, signal)).then((r) => r.data),
+}
--- a/admin-temp-dir/src/services/auth.ts
+++ b/admin-temp-dir/src/services/auth.ts
@@ -0,0 +1,10 @@
+import request, { withSignal } from './request'
+import type { AccountPublic, LoginRequest, LoginResponse } from '@/types'
+
+export const authService = {
+  login: (data: LoginRequest, signal?: AbortSignal) =>
+    request.post<LoginResponse>('/auth/login', data, withSignal({}, signal)).then((r) => r.data),
+
+  me: (signal?: AbortSignal) =>
+    request.get<AccountPublic>('/auth/me', withSignal({}, signal)).then((r) => r.data),
+}
--- a/admin-temp-dir/src/services/config.ts
+++ b/admin-temp-dir/src/services/config.ts
@@ -0,0 +1,11 @@
+import request, { withSignal } from './request'
+import type { ConfigItem, PaginatedResponse } from '@/types'
+
+export const configService = {
+  list: (params?: Record<string, unknown>, signal?: AbortSignal) =>
+    request.get<PaginatedResponse<ConfigItem>>('/config/items', withSignal({ params }, signal))
+      .then((r) => r.data.items),
+
+  update: (id: string, data: { value: string | number | boolean }, signal?: AbortSignal) =>
+    request.patch<ConfigItem>(`/config/items/${id}`, data, withSignal({}, signal)).then((r) => r.data),
+}
--- a/admin-temp-dir/src/services/logs.ts
+++ b/admin-temp-dir/src/services/logs.ts
@@ -0,0 +1,7 @@
+import request, { withSignal } from './request'
+import type { OperationLog, PaginatedResponse } from '@/types'
+
+export const logService = {
+  list: (params?: Record<string, unknown>, signal?: AbortSignal) =>
+    request.get<PaginatedResponse<OperationLog>>('/logs/operations', withSignal({ params }, signal)).then((r) => r.data),
+}
--- a/admin-temp-dir/src/services/models.ts
+++ b/admin-temp-dir/src/services/models.ts
@@ -0,0 +1,16 @@
+import request, { withSignal } from './request'
+import type { Model, PaginatedResponse } from '@/types'
+
+export const modelService = {
+  list: (params?: Record<string, unknown>, signal?: AbortSignal) =>
+    request.get<PaginatedResponse<Model>>('/models', withSignal({ params }, signal)).then((r) => r.data),
+
+  create: (data: Partial<Omit<Model, 'id'>>, signal?: AbortSignal) =>
+    request.post<Model>('/models', data, withSignal({}, signal)).then((r) => r.data),
+
+  update: (id: string, data: Partial<Omit<Model, 'id'>>, signal?: AbortSignal) =>
+    request.patch<Model>(`/models/${id}`, data, withSignal({}, signal)).then((r) => r.data),
+
+  delete: (id: string, signal?: AbortSignal) =>
+    request.delete(`/models/${id}`, withSignal({}, signal)).then((r) => r.data),
+}
--- a/admin-temp-dir/src/services/prompts.ts
+++ b/admin-temp-dir/src/services/prompts.ts
@@ -0,0 +1,35 @@
+import request, { withSignal } from './request'
+import type { PromptTemplate, PromptVersion, PaginatedResponse } from '@/types'
+
+export const promptService = {
+  list: (params?: Record<string, unknown>, signal?: AbortSignal) =>
+    request.get<PaginatedResponse<PromptTemplate>>('/prompts', withSignal({ params }, signal)).then((r) => r.data),
+
+  get: (name: string, signal?: AbortSignal) =>
+    request.get<PromptTemplate>(`/prompts/${encodeURIComponent(name)}`, withSignal({}, signal)).then((r) => r.data),
+
+  create: (data: {
+    name: string; category: string; description?: string; source?: string
+    system_prompt: string; user_prompt_template?: string
+    variables?: unknown[]; min_app_version?: string
+  }, signal?: AbortSignal) =>
+    request.post<PromptTemplate>('/prompts', data, withSignal({}, signal)).then((r) => r.data),
+
+  update: (name: string, data: { description?: string; status?: string }, signal?: AbortSignal) =>
+    request.put<PromptTemplate>(`/prompts/${encodeURIComponent(name)}`, data, withSignal({}, signal)).then((r) => r.data),
+
+  archive: (name: string, signal?: AbortSignal) =>
+    request.delete<PromptTemplate>(`/prompts/${encodeURIComponent(name)}`, withSignal({}, signal)).then((r) => r.data),
+
+  listVersions: (name: string, signal?: AbortSignal) =>
+    request.get<PromptVersion[]>(`/prompts/${encodeURIComponent(name)}/versions`, withSignal({}, signal)).then((r) => r.data),
+
+  createVersion: (name: string, data: {
+    system_prompt: string; user_prompt_template?: string
+    variables?: unknown[]; changelog?: string; min_app_version?: string
+  }, signal?: AbortSignal) =>
+    request.post<PromptVersion>(`/prompts/${encodeURIComponent(name)}/versions`, data, withSignal({}, signal)).then((r) => r.data),
+
+  rollback: (name: string, version: number, signal?: AbortSignal) =>
+    request.post<PromptTemplate>(`/prompts/${encodeURIComponent(name)}/rollback/${version}`, undefined, withSignal({}, signal)).then((r) => r.data),
+}
--- a/admin-temp-dir/src/services/providers.ts
+++ b/admin-temp-dir/src/services/providers.ts
@@ -0,0 +1,31 @@
+import request, { withSignal } from './request'
+import type { Provider, ProviderKey, PaginatedResponse } from '@/types'
+
+export const providerService = {
+  list: (params?: Record<string, unknown>, signal?: AbortSignal) =>
+    request.get<PaginatedResponse<Provider>>('/providers', withSignal({ params }, signal)).then((r) => r.data),
+
+  create: (data: Partial<Omit<Provider, 'id' | 'created_at' | 'updated_at'>>, signal?: AbortSignal) =>
+    request.post<Provider>('/providers', data, withSignal({}, signal)).then((r) => r.data),
+
+  update: (id: string, data: Partial<Omit<Provider, 'id' | 'created_at' | 'updated_at'>>, signal?: AbortSignal) =>
+    request.patch<Provider>(`/providers/${id}`, data, withSignal({}, signal)).then((r) => r.data),
+
+  delete: (id: string, signal?: AbortSignal) =>
+    request.delete(`/providers/${id}`, withSignal({}, signal)).then((r) => r.data),
+
+  listKeys: (providerId: string, signal?: AbortSignal) =>
+    request.get<ProviderKey[]>(`/providers/${providerId}/keys`, withSignal({}, signal)).then((r) => r.data),
+
+  addKey: (providerId: string, data: {
+    key_label: string; key_value: string; priority?: number
+    max_rpm?: number; max_tpm?: number; quota_reset_interval?: string
+  }, signal?: AbortSignal) =>
+    request.post<{ ok: boolean; key_id: string }>(`/providers/${providerId}/keys`, data, withSignal({}, signal)).then((r) => r.data),
+
+  toggleKey: (providerId: string, keyId: string, active: boolean, signal?: AbortSignal) =>
+    request.put<{ ok: boolean }>(`/providers/${providerId}/keys/${keyId}/toggle`, { active }, withSignal({}, signal)).then((r) => r.data),
+
+  deleteKey: (providerId: string, keyId: string, signal?: AbortSignal) =>
+    request.delete<{ ok: boolean }>(`/providers/${providerId}/keys/${keyId}`, withSignal({}, signal)).then((r) => r.data),
+}
--- a/admin-temp-dir/src/services/relay.ts
+++ b/admin-temp-dir/src/services/relay.ts
@@ -0,0 +1,10 @@
+import request, { withSignal } from './request'
+import type { RelayTask, PaginatedResponse } from '@/types'
+
+export const relayService = {
+  list: (params?: Record<string, unknown>, signal?: AbortSignal) =>
+    request.get<PaginatedResponse<RelayTask>>('/relay/tasks', withSignal({ params }, signal)).then((r) => r.data),
+
+  get: (id: string, signal?: AbortSignal) =>
+    request.get<RelayTask>(`/relay/tasks/${id}`, withSignal({}, signal)).then((r) => r.data),
+}
--- a/admin-temp-dir/src/services/request.ts
+++ b/admin-temp-dir/src/services/request.ts
@@ -0,0 +1,127 @@
+// ============================================================
+// ZCLAW Admin V2 — Axios 实例 + JWT 拦截器
+// ============================================================
+//
+// 认证策略: 主路径使用 HttpOnly cookie（浏览器自动附加），
+// Authorization header 作为 fallback 保留用于 API 客户端。
+
+import axios from 'axios'
+import type { AxiosError, InternalAxiosRequestConfig } from 'axios'
+import type { AxiosRequestConfig } from 'axios'
+import type { ApiError } from '@/types'
+import { useAuthStore } from '@/stores/authStore'
+
+const BASE_URL = import.meta.env.VITE_API_BASE_URL || '/api/v1'
+const TIMEOUT_MS = 30_000
+
+/** API 业务错误 */
+export class ApiRequestError extends Error {
+  constructor(
+    public status: number,
+    public body: ApiError,
+  ) {
+    super(body.message || `Request failed with status ${status}`)
+    this.name = 'ApiRequestError'
+  }
+}
+
+const request = axios.create({
+  baseURL: BASE_URL,
+  timeout: TIMEOUT_MS,
+  headers: { 'Content-Type': 'application/json' },
+  withCredentials: true, // 发送 HttpOnly cookies
+})
+
+// ── 请求拦截器：附加 Authorization header fallback ──────────
+
+request.interceptors.request.use((config: InternalAxiosRequestConfig) => {
+  const token = useAuthStore.getState().token
+  if (token) {
+    config.headers.Authorization = `Bearer ${token}`
+  }
+  return config
+})
+
+// ── 响应拦截器：401 自动刷新 ──────────────────────────────
+
+let isRefreshing = false
+let pendingRequests: Array<(token: string) => void> = []
+
+function onTokenRefreshed(newToken: string) {
+  pendingRequests.forEach((cb) => cb(newToken))
+  pendingRequests = []
+}
+
+request.interceptors.response.use(
+  (response) => response,
+  async (error: AxiosError<{ error?: string; message?: string }>) => {
+    const originalRequest = error.config as InternalAxiosRequestConfig & { _retry?: boolean }
+
+    // 401 → 尝试刷新 Token
+    if (error.response?.status === 401 && !originalRequest._retry) {
+      const store = useAuthStore.getState()
+      if (!store.refreshToken) {
+        store.logout()
+        window.location.href = '/login'
+        return Promise.reject(error)
+      }
+
+      if (isRefreshing) {
+        return new Promise((resolve) => {
+          pendingRequests.push((newToken: string) => {
+            originalRequest.headers.Authorization = `Bearer ${newToken}`
+            resolve(request(originalRequest))
+          })
+        })
+      }
+
+      originalRequest._retry = true
+      isRefreshing = true
+
+      try {
+        const res = await axios.post(`${BASE_URL}/auth/refresh`, null, {
+          headers: { Authorization: `Bearer ${store.refreshToken}` },
+          withCredentials: true, // 发送 refresh cookie
+        })
+        const newToken = res.data.token as string
+        const newRefreshToken = res.data.refresh_token as string
+        // 更新内存中的 token（实际认证通过 HttpOnly cookie，浏览器已自动更新）
+        store.setToken(newToken)
+        if (newRefreshToken) {
+          store.setRefreshToken(newRefreshToken)
+        }
+        onTokenRefreshed(newToken)
+        originalRequest.headers.Authorization = `Bearer ${newToken}`
+        return request(originalRequest)
+      } catch {
+        store.logout()
+        window.location.href = '/login'
+        return Promise.reject(error)
+      } finally {
+        isRefreshing = false
+      }
+    }
+
+    // 构造 ApiRequestError
+    if (error.response) {
+      const body: ApiError = {
+        error: error.response.data?.error || 'unknown',
+        message: error.response.data?.message || `请求失败 (${error.response.status})`,
+        status: error.response.status,
+      }
+      return Promise.reject(new ApiRequestError(error.response.status, body))
+    }
+
+    return Promise.reject(error)
+  },
+)
+
+export default request
+
+/** 将 AbortSignal 注入 Axios config，用于 TanStack Query 的请求取消 */
+export function withSignal(config: AxiosRequestConfig = {}, signal?: AbortSignal): AxiosRequestConfig {
+  if (signal) {
+    return { ...config, signal }
+  }
+  return config
+}
--- a/admin-temp-dir/src/services/stats.ts
+++ b/admin-temp-dir/src/services/stats.ts
@@ -0,0 +1,7 @@
+import request, { withSignal } from './request'
+import type { DashboardStats } from '@/types'
+
+export const statsService = {
+  dashboard: (signal?: AbortSignal) =>
+    request.get<DashboardStats>('/stats/dashboard', withSignal({}, signal)).then((r) => r.data),
+}
--- a/admin-temp-dir/src/services/telemetry.ts
+++ b/admin-temp-dir/src/services/telemetry.ts
@@ -0,0 +1,10 @@
+import request, { withSignal } from './request'
+import type { ModelUsageStat, DailyUsageStat } from '@/types'
+
+export const telemetryService = {
+  modelStats: (params?: Record<string, unknown>, signal?: AbortSignal) =>
+    request.get<ModelUsageStat[]>('/telemetry/stats', withSignal({ params }, signal)).then((r) => r.data),
+
+  dailyStats: (params?: { days?: number }, signal?: AbortSignal) =>
+    request.get<DailyUsageStat[]>('/telemetry/daily', withSignal({ params }, signal)).then((r) => r.data),
+}
--- a/admin-temp-dir/src/services/usage.ts
+++ b/admin-temp-dir/src/services/usage.ts
@@ -0,0 +1,12 @@
+import request, { withSignal } from './request'
+import type { UsageRecord, UsageByModel } from '@/types'
+
+export const usageService = {
+  daily: (params?: { days?: number }, signal?: AbortSignal) =>
+    request.get<{ by_day: UsageRecord[] }>('/usage', withSignal({ params: { ...params, group_by: 'day' } }, signal))
+      .then((r) => r.data.by_day || []),
+
+  byModel: (params?: { days?: number }, signal?: AbortSignal) =>
+    request.get<{ by_model: UsageByModel[] }>('/usage', withSignal({ params: { ...params, group_by: 'model' } }, signal))
+      .then((r) => r.data.by_model || []),
+}
--- a/admin-temp-dir/src/stores/authStore.ts
+++ b/admin-temp-dir/src/stores/authStore.ts
@@ -0,0 +1,96 @@
+// ============================================================
+// ZCLAW Admin V2 — Zustand 认证状态管理
+// ============================================================
+//
+// 安全策略: JWT token 通过 HttpOnly cookie 传递，前端 JS 无法读取。
+// account 信息（显示名/角色）仍存 localStorage 用于页面刷新后恢复 UI。
+// 内存中的 token/refreshToken 仅用于 Authorization header fallback（API 客户端兼容）。
+
+import { create } from 'zustand'
+import type { AccountPublic } from '@/types'
+
+/** 权限常量 — 与后端 db.rs SEED_ROLES 保持同步 */
+const ROLE_PERMISSIONS: Record<string, string[]> = {
+  super_admin: [
+    'admin:full', 'account:admin', 'provider:manage', 'model:manage',
+    'relay:admin', 'config:write', 'prompt:read', 'prompt:write',
+    'prompt:publish', 'prompt:admin',
+  ],
+  admin: [
+    'account:read', 'account:admin', 'provider:manage', 'model:read',
+    'model:manage', 'relay:use', 'config:read',
+    'config:write', 'prompt:read', 'prompt:write', 'prompt:publish',
+  ],
+  user: ['model:read', 'relay:use', 'config:read', 'prompt:read'],
+}
+
+const ACCOUNT_KEY = 'zclaw_admin_account'
+
+/** 从 localStorage 恢复 account 信息（token 通过 HttpOnly cookie 管理） */
+function loadFromStorage(): { account: AccountPublic | null } {
+  const raw = localStorage.getItem(ACCOUNT_KEY)
+  let account: AccountPublic | null = null
+  if (raw) {
+    try { account = JSON.parse(raw) } catch { /* ignore */ }
+  }
+  return { account }
+}
+
+interface AuthState {
+  token: string | null
+  refreshToken: string | null
+  account: AccountPublic | null
+  permissions: string[]
+
+  setToken: (token: string) => void
+  setRefreshToken: (refreshToken: string) => void
+  login: (token: string, refreshToken: string, account: AccountPublic) => void
+  logout: () => void
+  hasPermission: (permission: string) => boolean
+}
+
+export const useAuthStore = create<AuthState>((set, get) => {
+  const stored = loadFromStorage()
+  const perms = stored.account?.role
+    ? (ROLE_PERMISSIONS[stored.account.role] ?? [])
+    : []
+
+  return {
+    token: null,
+    refreshToken: null,
+    account: stored.account,
+    permissions: perms,
+
+    setToken: (token: string) => {
+      set({ token })
+    },
+
+    setRefreshToken: (refreshToken: string) => {
+      set({ refreshToken })
+    },
+
+    login: (token: string, refreshToken: string, account: AccountPublic) => {
+      // account 保留 localStorage（仅用于 UI 显示，非敏感）
+      localStorage.setItem(ACCOUNT_KEY, JSON.stringify(account))
+      // token 仅存内存（实际认证通过 HttpOnly cookie）
+      set({
+        token,
+        refreshToken,
+        account,
+        permissions: ROLE_PERMISSIONS[account.role] ?? [],
+      })
+    },
+
+    logout: () => {
+      localStorage.removeItem(ACCOUNT_KEY)
+      set({ token: null, refreshToken: null, account: null, permissions: [] })
+      // 调用后端 logout 清除 HttpOnly cookies（fire-and-forget）
+      fetch('/api/v1/auth/logout', { method: 'POST', credentials: 'include' }).catch(() => {})
+    },
+
+    hasPermission: (permission: string) => {
+      const { permissions } = get()
+      return permissions.includes(permission) || permissions.includes('admin:full')
+    },
+  }
+})
--- a/admin-temp-dir/src/types/index.ts
+++ b/admin-temp-dir/src/types/index.ts
@@ -0,0 +1,267 @@
+// ============================================================
+// ZCLAW SaaS Admin — 全局类型定义
+// ============================================================
+
+/** 公共账号信息 */
+export interface AccountPublic {
+  id: string
+  username: string
+  email: string
+  display_name: string
+  role: 'super_admin' | 'admin' | 'user'
+  status: 'active' | 'disabled' | 'suspended'
+  totp_enabled: boolean
+  last_login_at: string | null
+  created_at: string
+}
+
+/** 登录请求 */
+export interface LoginRequest {
+  username: string
+  password: string
+  totp_code?: string
+}
+
+/** 登录响应 */
+export interface LoginResponse {
+  token: string
+  refresh_token: string
+  account: AccountPublic
+}
+
+/** 注册请求 */
+export interface RegisterRequest {
+  username: string
+  password: string
+  email: string
+  display_name?: string
+}
+
+/** 分页响应 */
+export interface PaginatedResponse<T> {
+  items: T[]
+  total: number
+  page: number
+  page_size: number
+}
+
+/** 服务商 (Provider) */
+export interface Provider {
+  id: string
+  name: string
+  display_name: string
+  api_key?: string
+  base_url: string
+  api_protocol: string
+  enabled: boolean
+  rate_limit_rpm: number | null
+  rate_limit_tpm: number | null
+  created_at: string
+  updated_at: string
+}
+
+/** 模型 */
+export interface Model {
+  id: string
+  provider_id: string
+  model_id: string
+  alias: string
+  context_window: number
+  max_output_tokens: number
+  supports_streaming: boolean
+  supports_vision: boolean
+  enabled: boolean
+  pricing_input: number
+  pricing_output: number
+}
+
+/** API 密钥信息 */
+export interface TokenInfo {
+  id: string
+  name: string
+  token_prefix: string
+  permissions: string[]
+  last_used_at?: string
+  expires_at?: string
+  created_at: string
+  token?: string
+}
+
+/** 创建 Token 请求 */
+export interface CreateTokenRequest {
+  name: string
+  expires_days?: number
+  permissions: string[]
+}
+
+/** 中转任务 */
+export interface RelayTask {
+  id: string
+  account_id: string
+  provider_id: string
+  model_id: string
+  status: string
+  priority: number
+  attempt_count: number
+  max_attempts: number
+  input_tokens: number
+  output_tokens: number
+  error_message: string | null
+  queued_at: string
+  started_at: string | null
+  completed_at: string | null
+  created_at: string
+}
+
+/** 用量记录 */
+export interface UsageRecord {
+  day: string
+  count: number
+  input_tokens: number
+  output_tokens: number
+}
+
+/** 按模型用量 */
+export interface UsageByModel {
+  model_id: string
+  count: number
+  input_tokens: number
+  output_tokens: number
+}
+
+/** 系统配置项 */
+export interface ConfigItem {
+  id: string
+  category: string
+  key_path: string
+  value_type: string
+  current_value: string | null
+  default_value: string | null
+  source: string
+  description: string | null
+  requires_restart: boolean
+  created_at: string
+  updated_at: string
+}
+
+/** 操作日志 */
+export interface OperationLog {
+  id: number
+  account_id: string | null
+  action: string
+  target_type: string | null
+  target_id: string | null
+  details: Record<string, unknown> | null
+  ip_address: string | null
+  created_at: string
+}
+
+/** 仪表盘统计 */
+export interface DashboardStats {
+  total_accounts: number
+  active_accounts: number
+  tasks_today: number
+  active_providers: number
+  active_models: number
+  tokens_today_input: number
+  tokens_today_output: number
+}
+
+/** API 错误响应 */
+export interface ApiError {
+  error: string
+  message: string
+  status?: number
+}
+
+/** 提示词模板 */
+export interface PromptTemplate {
+  id: string
+  name: string
+  category: string
+  description?: string
+  source: 'builtin' | 'custom'
+  current_version: number
+  status: 'active' | 'deprecated' | 'archived'
+  created_at: string
+  updated_at: string
+}
+
+/** 提示词版本 */
+export interface PromptVersion {
+  id: string
+  template_id: string
+  version: number
+  system_prompt: string
+  user_prompt_template?: string
+  variables: PromptVariable[]
+  changelog?: string
+  min_app_version?: string
+  created_at: string
+}
+
+/** 提示词变量定义 */
+export interface PromptVariable {
+  name: string
+  type: 'string' | 'number' | 'select' | 'boolean'
+  default_value?: string
+  description?: string
+  required?: boolean
+}
+
+/** Agent 模板 */
+export interface AgentTemplate {
+  id: string
+  name: string
+  description?: string
+  category: string
+  source: 'builtin' | 'custom'
+  model?: string
+  system_prompt?: string
+  tools: string[]
+  capabilities: string[]
+  temperature?: number
+  max_tokens?: number
+  visibility: 'public' | 'team' | 'private'
+  status: 'active' | 'archived'
+  current_version: number
+  created_at: string
+  updated_at: string
+}
+
+/** Provider Key */
+export interface ProviderKey {
+  id: string
+  provider_id: string
+  key_label: string
+  priority: number
+  max_rpm?: number
+  max_tpm?: number
+  quota_reset_interval?: string
+  is_active: boolean
+  last_429_at?: string
+  cooldown_until?: string
+  total_requests: number
+  total_tokens: number
+  created_at: string
+  updated_at: string
+}
+
+/** 按模型聚合的用量统计 */
+export interface ModelUsageStat {
+  model_id: string
+  request_count: number
+  input_tokens: number
+  output_tokens: number
+  avg_latency_ms: number | null
+  success_rate: number
+}
+
+/** 按天的用量统计 */
+export interface DailyUsageStat {
+  day: string
+  request_count: number
+  input_tokens: number
+  output_tokens: number
+  unique_devices: number
+}
--- a/admin-temp-dir/tsconfig.app.json
+++ b/admin-temp-dir/tsconfig.app.json
@@ -0,0 +1,34 @@
+{
+  "compilerOptions": {
+    "tsBuildInfoFile": "./node_modules/.tmp/tsconfig.app.tsbuildinfo",
+    "target": "ES2023",
+    "useDefineForClassFields": true,
+    "lib": ["ES2023", "DOM", "DOM.Iterable"],
+    "module": "ESNext",
+    "types": ["vite/client"],
+    "skipLibCheck": true,
+
+    /* Bundler mode */
+    "moduleResolution": "bundler",
+    "allowImportingTsExtensions": true,
+    "verbatimModuleSyntax": true,
+    "moduleDetection": "force",
+    "noEmit": true,
+    "jsx": "react-jsx",
+
+    /* Path alias */
+    "baseUrl": ".",
+    "paths": {
+      "@/*": ["src/*"]
+    },
+
+    /* Linting */
+    "strict": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "erasableSyntaxOnly": true,
+    "noFallthroughCasesInSwitch": true,
+    "noUncheckedSideEffectImports": true
+  },
+  "include": ["src"]
+}
--- a/admin-temp-dir/tsconfig.json
+++ b/admin-temp-dir/tsconfig.json
@@ -0,0 +1,7 @@
+{
+  "files": [],
+  "references": [
+    { "path": "./tsconfig.app.json" },
+    { "path": "./tsconfig.node.json" }
+  ]
+}
--- a/admin-temp-dir/tsconfig.node.json
+++ b/admin-temp-dir/tsconfig.node.json
@@ -0,0 +1,26 @@
+{
+  "compilerOptions": {
+    "tsBuildInfoFile": "./node_modules/.tmp/tsconfig.node.tsbuildinfo",
+    "target": "ES2023",
+    "lib": ["ES2023"],
+    "module": "ESNext",
+    "types": ["node"],
+    "skipLibCheck": true,
+
+    /* Bundler mode */
+    "moduleResolution": "bundler",
+    "allowImportingTsExtensions": true,
+    "verbatimModuleSyntax": true,
+    "moduleDetection": "force",
+    "noEmit": true,
+
+    /* Linting */
+    "strict": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "erasableSyntaxOnly": true,
+    "noFallthroughCasesInSwitch": true,
+    "noUncheckedSideEffectImports": true
+  },
+  "include": ["vite.config.ts"]
+}
--- a/admin-temp-dir/vite.config.ts
+++ b/admin-temp-dir/vite.config.ts
@@ -0,0 +1,38 @@
+import { defineConfig } from 'vite'
+import react from '@vitejs/plugin-react'
+import path from 'path'
+
+export default defineConfig({
+  plugins: [react()],
+  resolve: {
+    alias: {
+      '@': path.resolve(__dirname, 'src'),
+    },
+  },
+  server: {
+    port: 5173,
+    proxy: {
+      // SSE relay 端点需要长超时（流式响应可持续数分钟）
+      '/api/v1/relay/chat/completions': {
+        target: 'http://localhost:8080',
+        changeOrigin: true,
+        timeout: 600_000,
+        proxyTimeout: 600_000,
+      },
+      '/api': {
+        target: 'http://localhost:8080',
+        changeOrigin: true,
+        timeout: 30_000,
+        proxyTimeout: 30_000,
+        configure: (proxy) => {
+          proxy.on('proxyReq', (proxyReq) => {
+            proxyReq.setTimeout(30_000)
+          })
+          proxy.on('proxyRes', (proxyRes) => {
+            proxyRes.setTimeout(30_000)
+          })
+        },
+      },
+    },
+  },
+})
				`@@ -0,0 +1 @@`
				`VITE_API_BASE_URL=http://localhost:8080/api/v1`
				`@@ -0,0 +1 @@`
				<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" aria-hidden="true" role="img" class="iconify iconify--logos" width="35.93" height="32" preserveAspectRatio="xMidYMid meet" viewBox="0 0 256 228"><path fill="#00D8FF" d="M210.483 73.824a171.49 171.49 0 0 0-8.24-2.597c.465-1.9.893-3.777 1.273-5.621c6.238-30.281 2.16-54.676-11.769-62.708c-13.355-7.7-35.196.329-57.254 19.526a171.23 171.23 0 0 0-6.375 5.848a155.866 155.866 0 0 0-4.241-3.917C100.759 3.829 77.587-4.822 63.673 3.233C50.33 10.957 46.379 33.89 51.995 62.588a170.974 170.974 0 0 0 1.892 8.48c-3.28.932-6.445 1.924-9.474 2.98C17.309 83.498 0 98.307 0 113.668c0 15.865 18.582 31.778 46.812 41.427a145.52 145.52 0 0 0 6.921 2.165a167.467 167.467 0 0 0-2.01 9.138c-5.354 28.2-1.173 50.591 12.134 58.266c13.744 7.926 36.812-.22 59.273-19.855a145.567 145.567 0 0 0 5.342-4.923a168.064 168.064 0 0 0 6.92 6.314c21.758 18.722 43.246 26.282 56.54 18.586c13.731-7.949 18.194-32.003 12.4-61.268a145.016 145.016 0 0 0-1.535-6.842c1.62-.48 3.21-.974 4.76-1.488c29.348-9.723 48.443-25.443 48.443-41.52c0-15.417-17.868-30.326-45.517-39.844Zm-6.365 70.984c-1.4.463-2.836.91-4.3 1.345c-3.24-10.257-7.612-21.163-12.963-32.432c5.106-11 9.31-21.767 12.459-31.957c2.619.758 5.16 1.557 7.61 2.4c23.69 8.156 38.14 20.213 38.14 29.504c0 9.896-15.606 22.743-40.946 31.14Zm-10.514 20.834c2.562 12.94 2.927 24.64 1.23 33.787c-1.524 8.219-4.59 13.698-8.382 15.893c-8.067 4.67-25.32-1.4-43.927-17.412a156.726 156.726 0 0 1-6.437-5.87c7.214-7.889 14.423-17.06 21.459-27.246c12.376-1.098 24.068-2.894 34.671-5.345a134.17 134.17 0 0 1 1.386 6.193ZM87.276 214.515c-7.882 2.783-14.16 2.863-17.955.675c-8.075-4.657-11.432-22.636-6.853-46.752a156.923 156.923 0 0 1 1.869-8.499c10.486 2.32 22.093 3.988 34.498 4.994c7.084 9.967 14.501 19.128 21.976 27.15a134.668 134.668 0 0 1-4.877 4.492c-9.933 8.682-19.886 14.842-28.658 17.94ZM50.35 144.747c-12.483-4.267-22.792-9.812-29.858-15.863c-6.35-5.437-9.555-10.836-9.555-15.216c0-9.322 13.897-21.212 37.076-29.293c2.813-.98 5.757-1.905 8.812-2.773c3.204 10.42 7.406 21.315 12.477 32.332c-5.137 11.18-9.399 22.249-12.634 32.792a134.718 134.718 0 0 1-6.318-1.979Zm12.378-84.26c-4.811-24.587-1.616-43.134 6.425-47.789c8.564-4.958 27.502 2.111 47.463 19.835a144.318 144.318 0 0 1 3.841 3.545c-7.438 7.987-14.787 17.08-21.808 26.988c-12.04 1.116-23.565 2.908-34.161 5.309a160.342 160.342 0 0 1-1.76-7.887Zm110.427 27.268a347.8 347.8 0 0 0-7.785-12.803c8.168 1.033 15.994 2.404 23.343 4.08c-2.206 7.072-4.956 14.465-8.193 22.045a381.151 381.151 0 0 0-7.365-13.322Zm-45.032-43.861c5.044 5.465 10.096 11.566 15.065 18.186a322.04 322.04 0 0 0-30.257-.006c4.974-6.559 10.069-12.652 15.192-18.18ZM82.802 87.83a323.167 323.167 0 0 0-7.227 13.238c-3.184-7.553-5.909-14.98-8.134-22.152c7.304-1.634 15.093-2.97 23.209-3.984a321.524 321.524 0 0 0-7.848 12.897Zm8.081 65.352c-8.385-.936-16.291-2.203-23.593-3.793c2.26-7.3 5.045-14.885 8.298-22.6a321.187 321.187 0 0 0 7.257 13.246c2.594 4.48 5.28 8.868 8.038 13.147Zm37.542 31.03c-5.184-5.592-10.354-11.779-15.403-18.433c4.902.192 9.899.29 14.978.29c5.218 0 10.376-.117 15.453-.343c-4.985 6.774-10.018 12.97-15.028 18.486Zm52.198-57.817c3.422 7.8 6.306 15.345 8.596 22.52c-7.422 1.694-15.436 3.058-23.88 4.071a382.417 382.417 0 0 0 7.859-13.026a347.403 347.403 0 0 0 7.425-13.565Zm-16.898 8.101a358.557 358.557 0 0 1-12.281 19.815a329.4 329.4 0 0 1-23.444.823c-7.967 0-15.716-.248-23.178-.732a310.202 310.202 0 0 1-12.513-19.846h.001a307.41 307.41 0 0 1-10.923-20.627a310.278 310.278 0 0 1 10.89-20.637l-.001.001a307.318 307.318 0 0 1 12.413-19.761c7.613-.576 15.42-.876 23.31-.876H128c7.926 0 15.743.303 23.354.883a329.357 329.357 0 0 1 12.335 19.695a358.489 358.489 0 0 1 11.036 20.54a329.472 329.472 0 0 1-11 20.722Zm22.56-122.124c8.572 4.944 11.906 24.881 6.52 51.026c-.344 1.668-.73 3.367-1.15 5.09c-10.622-2.452-22.155-4.275-34.23-5.408c-7.034-10.017-14.323-19.124-21.64-27.008a160.789 160.789 0 0 1 5.888-5.4c18.9-16.447 36.564-22.941 44.612-18.3ZM128 90.808c12.625 0 22.86 10.235 22.86 22.86s-10.235 22.86-22.86 22.86s-22.86-10.235-22.86-22.86s10.235-22.86 22.86-22.86Z"></path></svg>