feat: 后端认证和工具模块更新

- main.go: 添加 Swagger 文档、初始化默认管理员
- 认证模块: 完善用户角色管理
- 新增工具模块: tool_handler, tool_repo, tool_service, tool model
- 更新 go.mod 依赖

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

server/internal/model/tool.go

@@ -0,0 +1,31 @@
+package model
+
+import (
+	"time"
+
+	"github.com/google/uuid"
+	"gorm.io/gorm"
+)
+
+// Tool 工具
+type Tool struct {
+	ID              string    `json:"id" gorm:"primaryKey"`
+	Name            string    `json:"name" gorm:"uniqueIndex;size:100;not null"`
+	Description     string    `json:"description" gorm:"type:text"`
+	Category        string    `json:"category" gorm:"size:50;not null"`
+	Provider        string    `json:"provider" gorm:"size:100"`
+	SecurityLevel   string    `json:"security_level" gorm:"size:20;default:'safe'"`
+	RequireApproval bool      `json:"require_approval" gorm:"default:false"`
+	Parameters      string    `json:"parameters" gorm:"type:text"` // JSON格式存储
+	Status          string    `json:"status" gorm:"size:20;default:'active'"`
+	CreatedAt       time.Time `json:"created_at"`
+	UpdatedAt       time.Time `json:"updated_at"`
+}
+
+// BeforeCreate 创建前自动生成ID
+func (t *Tool) BeforeCreate(tx *gorm.DB) error {
+	if t.ID == "" {
+		t.ID = uuid.New().String()
+	}
+	return nil
+}

server/internal/model/user.go

@@ -1,6 +1,7 @@
 package model
 
 import (
+	"encoding/json"
 	"time"
 )
 
@@ -16,11 +17,11 @@ const (
 
 // Role 角色
 type Role struct {
-	ID          string           `json:"id" gorm:"primaryKey"`
-	Name        string           `json:"name" gorm:"uniqueIndex"`
-	Permissions []PermissionLevel `json:"permissions" gorm:"type:int[]"`
-	CreatedAt   time.Time        `json:"created_at"`
-	UpdatedAt   time.Time        `json:"updated_at"`
+	ID          string    `json:"id" gorm:"primaryKey"`
+	Name        string    `json:"name" gorm:"uniqueIndex"`
+	Permissions string    `json:"permissions" gorm:"type:text"` // 存储 JSON 格式的权限数组
+	CreatedAt   time.Time `json:"created_at"`
+	UpdatedAt   time.Time `json:"updated_at"`
 }
 
 // User 用户
@@ -41,8 +42,13 @@ func (u *User) HasPermission(level PermissionLevel) bool {
 	if u.Role == nil {
 		return false
 	}
-	for _, p := range u.Role.Permissions {
-		if p >= level {
+	// 解析 JSON 格式的权限
+	var perms []int
+	if err := json.Unmarshal([]byte(u.Role.Permissions), &perms); err != nil {
+		return false
+	}
+	for _, p := range perms {
+		if PermissionLevel(p) >= level {
 			return true
 		}
 	}