fix: 统一API响应格式并修复前端测试

- 所有Handler方法使用标准{code:0,message:"success",data:...}响应格式
- 修复Cursor分页响应包装(GetAllDevices,GetLoginLogs,ListUsers等)
- 修复AuthHandler和SMSHandler认证方法响应格式
- 修复operation_log.go admin用户operation_type前缀问题
- 修复DashboardPage嵌套stats结构
- 修复LoginLogsPage reset功能stale closure问题
- 修复UsersPage批量操作API调用
- 修复多个前端测试(mock格式、按钮选择、断言逻辑)
- 添加OAuth测试域名白名单
- 新增代码审查流程文档

internal/api/handler/permission_handler.go

@@ -33,7 +33,11 @@ func (h *PermissionHandler) CreatePermission(c *gin.Context) {
 		return
 	}
 
-	c.JSON(http.StatusCreated, perm)
+	c.JSON(http.StatusCreated, gin.H{
+		"code":    0,
+		"message": "success",
+		"data":    perm,
+	})
 }
 
 func (h *PermissionHandler) ListPermissions(c *gin.Context) {
@@ -43,15 +47,16 @@ func (h *PermissionHandler) ListPermissions(c *gin.Context) {
 		return
 	}
 
-	perms, total, err := h.permissionService.ListPermissions(c.Request.Context(), &req)
+	perms, _, err := h.permissionService.ListPermissions(c.Request.Context(), &req)
 	if err != nil {
 		handleError(c, err)
 		return
 	}
 
 	c.JSON(http.StatusOK, gin.H{
-		"permissions": perms,
-		"total":       total,
+		"code":    0,
+		"message": "success",
+		"data":    perms,
 	})
 }
 
@@ -68,7 +73,11 @@ func (h *PermissionHandler) GetPermission(c *gin.Context) {
 		return
 	}
 
-	c.JSON(http.StatusOK, perm)
+	c.JSON(http.StatusOK, gin.H{
+		"code":    0,
+		"message": "success",
+		"data":    perm,
+	})
 }
 
 func (h *PermissionHandler) UpdatePermission(c *gin.Context) {
@@ -90,7 +99,11 @@ func (h *PermissionHandler) UpdatePermission(c *gin.Context) {
 		return
 	}
 
-	c.JSON(http.StatusOK, perm)
+	c.JSON(http.StatusOK, gin.H{
+		"code":    0,
+		"message": "success",
+		"data":    perm,
+	})
 }
 
 func (h *PermissionHandler) DeletePermission(c *gin.Context) {
@@ -105,7 +118,10 @@ func (h *PermissionHandler) DeletePermission(c *gin.Context) {
 		return
 	}
 
-	c.JSON(http.StatusOK, gin.H{"message": "permission deleted"})
+	c.JSON(http.StatusOK, gin.H{
+		"code":    0,
+		"message": "permission deleted",
+	})
 }
 
 func (h *PermissionHandler) UpdatePermissionStatus(c *gin.Context) {
@@ -140,7 +156,10 @@ func (h *PermissionHandler) UpdatePermissionStatus(c *gin.Context) {
 		return
 	}
 
-	c.JSON(http.StatusOK, gin.H{"message": "status updated"})
+	c.JSON(http.StatusOK, gin.H{
+		"code":    0,
+		"message": "status updated",
+	})
 }
 
 func (h *PermissionHandler) GetPermissionTree(c *gin.Context) {
@@ -150,5 +169,9 @@ func (h *PermissionHandler) GetPermissionTree(c *gin.Context) {
 		return
 	}
 
-	c.JSON(http.StatusOK, gin.H{"permissions": tree})
+	c.JSON(http.StatusOK, gin.H{
+		"code":    0,
+		"message": "success",
+		"data":    tree,
+	})
 }