feat(backend): P0-A skeleton — axum server, TOML config, SQLite schema+seed, argon2 auth, api-key endpoints (v0.2.0)

[argszero]

Summary

P0-A of rant 2026-08-17T22:21:52 (后端实现 P0-A — 服务骨架 + 配置加载 + SQLite 数据层 + 认证, v0.2.0): first backend milestone implementing the UI prototype (docs ready: architecture v0.2 / user-stories v1.12 / plan-api-matrix).

Scope delivered

1. 服务骨架 (src/main.rs): axum Router on 0.0.0.0:8080 (config [server].addr); GET /healthz → {"status":"ok","version":"0.2.0"}; clap --config (default config/config.toml, prints cp config.example.toml config/config.toml hint + exit 1 if missing); env_logger + tower_http::trace::TraceLayer request logging
2. 配置结构 (src/config.rs): Config mirroring config/config.example.toml — [server] (addr/db_path with defaults) / [points] (anchor_currency / points_per_unit / display_name / symbol) / providers[] (id/name/country/has_plan) / plans[] (id/provider/type/key_prefix/interactive_only/endpoints[{protocol,base_url}]) / price_overrides[]; serde deserialization + unit test parsing the example file
3. 数据库 (src/db.rs): SQLite (rusqlite bundled), path from [server].db_path (default data/aitokenpool.db); tables per architecture §5 — users / keys (upstream, provider/plan/model/status/owner_id/encrypted_key) / api_keys (atk_live_ prefix) / models / quotas / transactions / usage_records + schema_version; idempotent migrations (re-run safe); dev seed: demo user (demo@aitokenpool.local / demo1234, argon2) + points account (12471) + example upstream key
4. 认证 (src/auth.rs + src/routes/mod.rs): POST /api/auth/login — argon2 verify → returns the user's valid API Key (get-or-create); AuthUser extractor — Authorization: Bearer <key> → api_keys lookup → inject user id; invalid → 401 JSON
5. API Key 端点 (src/routes/api_keys.rs): POST /api/api-keys generates atk_live_ + 24 hex (UI-prototype parity); GET /api/api-keys returns masked list (atk_live_****xxxx)

Acceptance criteria (all verified)

• cargo build + cargo test pass (Rust 1.86) — 10/10 tests (config parse / idempotent migration / seed / argon2 roundtrip / key format+mask / healthz / login 200 / login 401 / api-keys create+list / no-bearer 401)
• cargo clippy --all-targets -- -D warnings clean, cargo fmt --check clean
• Live smoke: GET /healthz 200; login correct → 200 {api_key}, wrong → 401; POST/GET api-keys with Bearer; invalid/missing Bearer → 401; missing config → hint + exit 1
• Branch feat/backend-p0a-skeleton, version v0.2.0, README status updated

Rant reference (verbatim)

Rant: 后端实现 P0-A — 服务骨架 + 配置加载 + SQLite 数据层 + 认证（宿主 2026-08-17 指示：原型差不多了，按原型实现）

1. 服务骨架（替换 src/main.rs banner）… 2. 配置结构（src/config.rs）… 3. 数据库（src/db.rs）… 4. 认证（src/auth.rs）… 5. API Key 管理端点（src/routes/api_keys.rs）… 6. 模块组织：src/{main,config,db,auth,dao,routes}.rs

Progress on rant 22:21:52: P0-A done (PR #71); next P0 stages — gateway routing / usage tracking.