fix: LLM和搜索调用时记录统计到backend

backend/app.py

@@ -147,6 +147,54 @@ def init_db():
         )
     ''')
     
+    # 用户表（前端注册用户）
+    cursor.execute('''
+        CREATE TABLE IF NOT EXISTS users (
+            id INTEGER PRIMARY KEY AUTOINCREMENT,
+            username TEXT NOT NULL UNIQUE,
+            password_hash TEXT NOT NULL,
+            phone TEXT NOT NULL UNIQUE,
+            email TEXT,
+            avatar TEXT DEFAULT '👤',
+            signature TEXT,
+            gender TEXT,
+            age INTEGER,
+            region TEXT,
+            created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+            updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+            last_login_at TIMESTAMP
+        )
+    ''')
+    
+    # 用户智能体配置表（我的智能体）
+    cursor.execute('''
+        CREATE TABLE IF NOT EXISTS user_agents (
+            id INTEGER PRIMARY KEY AUTOINCREMENT,
+            user_id INTEGER NOT NULL,
+            agent_id TEXT NOT NULL,
+            category TEXT NOT NULL,
+            is_pinned INTEGER DEFAULT 0,
+            is_favorite INTEGER DEFAULT 0,
+            added_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+            FOREIGN KEY (user_id) REFERENCES users(id),
+            UNIQUE(user_id, agent_id)
+        )
+    ''')
+    
+    # 对话表（用户对话数据）
+    cursor.execute('''
+        CREATE TABLE IF NOT EXISTS conversations (
+            id INTEGER PRIMARY KEY AUTOINCREMENT,
+            user_id INTEGER NOT NULL,
+            title TEXT NOT NULL,
+            agent_id TEXT,
+            messages TEXT NOT NULL DEFAULT '[]',
+            created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+            updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+            FOREIGN KEY (user_id) REFERENCES users(id)
+        )
+    ''')
+    
     # 初始化默认大模型配置
     cursor.execute('SELECT COUNT(*) FROM llm_configs')
     if cursor.fetchone()[0] == 0:
@@ -295,6 +343,547 @@ def admin_login():
         return jsonify({'error': '用户名或密码错误'}), 401
 
 
+# ==================== 用户管理 ====================
+
+@app.route('/api/register', methods=['POST'])
+def user_register():
+    """用户注册"""
+    data = request.json
+    username = data.get('username')
+    password = data.get('password')
+    phone = data.get('phone')
+    email = data.get('email')
+    code = data.get('code')  # 验证码（暂时只校验格式）
+    
+    # 参数验证
+    if not username or not password or not phone:
+        return jsonify({'error': '请填写完整信息'}), 400
+    
+    # 用户名长度检查
+    if len(username) < 2 or len(username) > 20:
+        return jsonify({'error': '用户名长度应为2-20字符'}), 400
+    
+    # 手机号格式检查
+    import re
+    if not re.match(r'^1[3-9]\d{9}$', phone):
+        return jsonify({'error': '手机号格式不正确'}), 400
+    
+    # 验证码检查（模拟，6位数字）
+    if not code or not re.match(r'^\d{6}$', code):
+        return jsonify({'error': '验证码格式不正确'}), 400
+    
+    # 邮箱格式检查（可选）
+    if email and not re.match(r'^[^\s@]+@[^\s@]+\.[^\s@]+$', email):
+        return jsonify({'error': '邮箱格式不正确'}), 400
+    
+    conn = get_db()
+    cursor = conn.cursor()
+    
+    # 检查用户名是否已存在
+    cursor.execute('SELECT id FROM users WHERE username = ?', (username,))
+    if cursor.fetchone():
+        conn.close()
+        return jsonify({'error': '用户名已存在'}), 400
+    
+    # 检查手机号是否已存在
+    cursor.execute('SELECT id FROM users WHERE phone = ?', (phone,))
+    if cursor.fetchone():
+        conn.close()
+        return jsonify({'error': '手机号已注册'}), 400
+    
+    # 创建用户
+    password_hash = hashlib.sha256(password.encode()).hexdigest()
+    cursor.execute('''
+        INSERT INTO users (username, password_hash, phone, email)
+        VALUES (?, ?, ?, ?)
+    ''', (username, password_hash, phone, email))
+    
+    # 记录注册统计
+    cursor.execute('INSERT INTO stats_logs (log_type, log_key) VALUES (?, ?)', ('user_register', 'new'))
+    
+    conn.commit()
+    user_id = cursor.lastrowid
+    conn.close()
+    
+    return jsonify({'success': True, 'user_id': user_id})
+
+
+@app.route('/api/login', methods=['POST'])
+def user_login():
+    """用户登录"""
+    data = request.json
+    username = data.get('username')
+    password = data.get('password')
+    
+    if not username or not password:
+        return jsonify({'error': '请输入用户名和密码'}), 400
+    
+    password_hash = hashlib.sha256(password.encode()).hexdigest()
+    conn = get_db()
+    cursor = conn.cursor()
+    cursor.execute('SELECT * FROM users WHERE username = ? AND password_hash = ?', (username, password_hash))
+    user = cursor.fetchone()
+    
+    if user:
+        # 更新最后登录时间
+        cursor.execute('UPDATE users SET last_login_at = CURRENT_TIMESTAMP WHERE id = ?', (user['id'],))
+        conn.commit()
+        conn.close()
+        return jsonify({
+            'success': True,
+            'user': {
+                'id': user['id'],
+                'username': user['username'],
+                'phone': user['phone'],
+                'email': user['email'],
+                'avatar': user['avatar'],
+                'signature': user['signature'],
+                'gender': user['gender'],
+                'age': user['age'],
+                'region': user['region']
+            }
+        })
+    else:
+        conn.close()
+        return jsonify({'error': '用户名或密码错误'}), 401
+
+
+@app.route('/api/admin/users', methods=['GET'])
+def get_users():
+    """获取用户列表"""
+    conn = get_db()
+    cursor = conn.cursor()
+    
+    # 支持搜索
+    search = request.args.get('search', '')
+    if search:
+        cursor.execute('''
+            SELECT id, username, phone, email, avatar, signature, gender, age, region, 
+            created_at, last_login_at FROM users 
+            WHERE username LIKE ? OR phone LIKE ? OR email LIKE ?
+            ORDER BY created_at DESC
+        ''', (f'%{search}%', f'%{search}%', f'%{search}%'))
+    else:
+        cursor.execute('''
+            SELECT id, username, phone, email, avatar, signature, gender, age, region, 
+            created_at, last_login_at FROM users ORDER BY created_at DESC
+        ''')
+    
+    users = [dict(row) for row in cursor.fetchall()]
+    conn.close()
+    return jsonify(users)
+
+
+@app.route('/api/admin/users/<int:id>', methods=['GET'])
+def get_user(id):
+    """获取单个用户"""
+    conn = get_db()
+    cursor = conn.cursor()
+    cursor.execute('SELECT * FROM users WHERE id = ?', (id,))
+    user = cursor.fetchone()
+    conn.close()
+    
+    if user:
+        return jsonify(dict(user))
+    else:
+        return jsonify({'error': '用户不存在'}), 404
+
+
+@app.route('/api/admin/users/<int:id>', methods=['PUT'])
+def update_user(id):
+    """更新用户信息"""
+    data = request.json
+    conn = get_db()
+    cursor = conn.cursor()
+    
+    # 检查用户是否存在
+    cursor.execute('SELECT id FROM users WHERE id = ?', (id,))
+    if not cursor.fetchone():
+        conn.close()
+        return jsonify({'error': '用户不存在'}), 404
+    
+    # 检查用户名是否重复（如果要修改用户名）
+    if data.get('username'):
+        cursor.execute('SELECT id FROM users WHERE username = ? AND id != ?', (data['username'], id))
+        if cursor.fetchone():
+            conn.close()
+            return jsonify({'error': '用户名已存在'}), 400
+    
+    # 更新用户信息
+    cursor.execute('''
+        UPDATE users SET username=?, email=?, avatar=?, signature=?, gender=?, age=?, region=?, 
+        updated_at=CURRENT_TIMESTAMP WHERE id=?
+    ''', (data.get('username'), data.get('email'), data.get('avatar', '👤'), 
+          data.get('signature'), data.get('gender'), data.get('age'), 
+          data.get('region'), id))
+    
+    conn.commit()
+    conn.close()
+    return jsonify({'success': True})
+
+
+@app.route('/api/admin/users/<int:id>', methods=['DELETE'])
+def delete_user(id):
+    """删除用户"""
+    conn = get_db()
+    cursor = conn.cursor()
+    cursor.execute('DELETE FROM users WHERE id = ?', (id,))
+    conn.commit()
+    conn.close()
+    return jsonify({'success': True})
+
+
+@app.route('/api/admin/users/<int:id>/password', methods=['PUT'])
+def reset_user_password(id):
+    """重置用户密码"""
+    data = request.json
+    new_password = data.get('password')
+    
+    if not new_password or len(new_password) < 6:
+        return jsonify({'error': '密码长度至少6位'}), 400
+    
+    password_hash = hashlib.sha256(new_password.encode()).hexdigest()
+    conn = get_db()
+    cursor = conn.cursor()
+    cursor.execute('UPDATE users SET password_hash=?, updated_at=CURRENT_TIMESTAMP WHERE id=?', 
+                   (password_hash, id))
+    conn.commit()
+    conn.close()
+    return jsonify({'success': True})
+
+
+@app.route('/api/user/<int:id>', methods=['PUT'])
+def update_user_profile(id):
+    """用户更新自己的资料"""
+    data = request.json
+    conn = get_db()
+    cursor = conn.cursor()
+    
+    # 检查用户是否存在
+    cursor.execute('SELECT id FROM users WHERE id = ?', (id,))
+    if not cursor.fetchone():
+        conn.close()
+        return jsonify({'error': '用户不存在'}), 404
+    
+    # 更新用户资料
+    cursor.execute('''
+        UPDATE users SET avatar=?, signature=?, gender=?, age=?, region=?, email=?, 
+        updated_at=CURRENT_TIMESTAMP WHERE id=?
+    ''', (data.get('avatar', '👤'), data.get('signature'), data.get('gender'), 
+          data.get('age'), data.get('region'), data.get('email'), id))
+    
+    conn.commit()
+    conn.close()
+    return jsonify({'success': True})
+
+
+@app.route('/api/user/<int:id>/password', methods=['PUT'])
+def change_user_password(id):
+    """用户修改自己的密码"""
+    data = request.json
+    old_password = data.get('old_password')
+    new_password = data.get('new_password')
+    
+    if not old_password or not new_password:
+        return jsonify({'error': '请输入旧密码和新密码'}), 400
+    
+    if len(new_password) < 6:
+        return jsonify({'error': '新密码长度至少6位'}), 400
+    
+    old_hash = hashlib.sha256(old_password.encode()).hexdigest()
+    new_hash = hashlib.sha256(new_password.encode()).hexdigest()
+    
+    conn = get_db()
+    cursor = conn.cursor()
+    
+    # 验证旧密码
+    cursor.execute('SELECT id FROM users WHERE id = ? AND password_hash = ?', (id, old_hash))
+    if not cursor.fetchone():
+        conn.close()
+        return jsonify({'error': '旧密码不正确'}), 400
+    
+    # 更新密码
+    cursor.execute('UPDATE users SET password_hash=?, updated_at=CURRENT_TIMESTAMP WHERE id=?', 
+                   (new_hash, id))
+    conn.commit()
+    conn.close()
+    return jsonify({'success': True})
+
+
+# ==================== 用户对话数据同步 ====================
+
+@app.route('/api/user/<int:user_id>/conversations', methods=['GET'])
+def get_user_conversations(user_id):
+    """获取用户所有对话"""
+    conn = get_db()
+    cursor = conn.cursor()
+    cursor.execute('''
+        SELECT id, title, agent_id, messages, created_at, updated_at 
+        FROM conversations WHERE user_id = ? ORDER BY updated_at DESC
+    ''', (user_id,))
+    
+    conversations = []
+    for row in cursor.fetchall():
+        conv = dict(row)
+        # 解析消息JSON
+        try:
+            conv['messages'] = json.loads(conv['messages']) if conv['messages'] else []
+        except:
+            conv['messages'] = []
+        # 转换为前端格式（使用字符串ID）
+        conv['id'] = str(conv['id'])
+        conv['createdAt'] = int(datetime.strptime(conv['created_at'], '%Y-%m-%d %H:%M:%S').timestamp() * 1000) if conv['created_at'] else 0
+        conv['updatedAt'] = int(datetime.strptime(conv['updated_at'], '%Y-%m-%d %H:%M:%S').timestamp() * 1000) if conv['updated_at'] else 0
+        conv['agentId'] = conv['agent_id']
+        conversations.append(conv)
+    
+    conn.close()
+    return jsonify(conversations)
+
+
+@app.route('/api/user/<int:user_id>/conversations/<int:conv_id>', methods=['GET'])
+def get_user_conversation_detail(user_id, conv_id):
+    """获取单个对话详情"""
+    conn = get_db()
+    cursor = conn.cursor()
+    cursor.execute('''
+        SELECT id, title, agent_id, messages, created_at, updated_at 
+        FROM conversations WHERE id = ? AND user_id = ?
+    ''', (conv_id, user_id))
+    
+    row = cursor.fetchone()
+    conn.close()
+    
+    if not row:
+        return jsonify({'error': '对话不存在'}), 404
+    
+    conv = dict(row)
+    try:
+        conv['messages'] = json.loads(conv['messages']) if conv['messages'] else []
+    except:
+        conv['messages'] = []
+    
+    conv['id'] = str(conv['id'])
+    conv['createdAt'] = int(datetime.strptime(conv['created_at'], '%Y-%m-%d %H:%M:%S').timestamp() * 1000) if conv['created_at'] else 0
+    conv['updatedAt'] = int(datetime.strptime(conv['updated_at'], '%Y-%m-%d %H:%M:%S').timestamp() * 1000) if conv['updated_at'] else 0
+    conv['agentId'] = conv['agent_id']
+    
+    return jsonify(conv)
+
+
+@app.route('/api/user/<int:user_id>/conversations', methods=['POST'])
+def create_user_conversation(user_id):
+    """创建新对话"""
+    data = request.json
+    title = data.get('title', '新对话')
+    agent_id = data.get('agentId') or data.get('agent_id')
+    messages = data.get('messages', [])
+    
+    conn = get_db()
+    cursor = conn.cursor()
+    cursor.execute('''
+        INSERT INTO conversations (user_id, title, agent_id, messages)
+        VALUES (?, ?, ?, ?)
+    ''', (user_id, title, agent_id, json.dumps(messages)))
+    conn.commit()
+    
+    conv_id = cursor.lastrowid
+    conn.close()
+    
+    return jsonify({'success': True, 'id': str(conv_id)})
+
+
+@app.route('/api/user/<int:user_id>/conversations/<int:conv_id>', methods=['PUT'])
+def update_user_conversation(user_id, conv_id):
+    """更新对话（添加消息、修改标题等）"""
+    data = request.json
+    conn = get_db()
+    cursor = conn.cursor()
+    
+    # 验证对话属于该用户
+    cursor.execute('SELECT id FROM conversations WHERE id = ? AND user_id = ?', (conv_id, user_id))
+    if not cursor.fetchone():
+        conn.close()
+        return jsonify({'error': '对话不存在'}), 404
+    
+    # 更新字段
+    updates = []
+    values = []
+    
+    if 'title' in data:
+        updates.append('title = ?')
+        values.append(data['title'])
+    
+    if 'messages' in data:
+        updates.append('messages = ?')
+        values.append(json.dumps(data['messages']))
+    
+    if 'agentId' in data or 'agent_id' in data:
+        updates.append('agent_id = ?')
+        values.append(data.get('agentId') or data.get('agent_id'))
+    
+    if updates:
+        updates.append('updated_at = CURRENT_TIMESTAMP')
+        sql = f'UPDATE conversations SET {", ".join(updates)} WHERE id = ?'
+        values.append(conv_id)
+        cursor.execute(sql, values)
+        conn.commit()
+    
+    conn.close()
+    return jsonify({'success': True})
+
+
+@app.route('/api/user/<int:user_id>/conversations/<int:conv_id>', methods=['DELETE'])
+def delete_user_conversation(user_id, conv_id):
+    """删除对话"""
+    conn = get_db()
+    cursor = conn.cursor()
+    
+    # 验证对话属于该用户
+    cursor.execute('SELECT id FROM conversations WHERE id = ? AND user_id = ?', (conv_id, user_id))
+    if not cursor.fetchone():
+        conn.close()
+        return jsonify({'error': '对话不存在'}), 404
+    
+    cursor.execute('DELETE FROM conversations WHERE id = ?', (conv_id,))
+    conn.commit()
+    conn.close()
+    
+    return jsonify({'success': True})
+
+
+# ==================== 用户智能体数据同步 ====================
+
+@app.route('/api/user/<int:user_id>/agents', methods=['GET'])
+def get_user_agents(user_id):
+    """获取用户智能体配置"""
+    conn = get_db()
+    cursor = conn.cursor()
+    cursor.execute('''
+        SELECT agent_id, category, is_pinned, is_favorite, added_at 
+        FROM user_agents WHERE user_id = ?
+    ''', (user_id,))
+    
+    agents_data = {
+        'myAgents': {},  # {category: [agent_ids]}
+        'favoriteAgents': [],  # [agent_ids]
+        'pinnedAgents': {}  # {category: [agent_ids]}
+    }
+    
+    for row in cursor.fetchall():
+        agent_id = row['agent_id']
+        category = row['category']
+        is_pinned = row['is_pinned']
+        is_favorite = row['is_favorite']
+        
+        # 添加到 myAgents
+        if category not in agents_data['myAgents']:
+            agents_data['myAgents'][category] = []
+        agents_data['myAgents'][category].append(agent_id)
+        
+        # 添加到 pinnedAgents
+        if is_pinned:
+            if category not in agents_data['pinnedAgents']:
+                agents_data['pinnedAgents'][category] = []
+            agents_data['pinnedAgents'][category].append(agent_id)
+        
+        # 添加到 favoriteAgents
+        if is_favorite:
+            agents_data['favoriteAgents'].append(agent_id)
+    
+    conn.close()
+    return jsonify(agents_data)
+
+
+@app.route('/api/user/<int:user_id>/agents/<agent_id>', methods=['POST'])
+def add_user_agent(user_id, agent_id):
+    """添加智能体到用户列表"""
+    data = request.json
+    category = data.get('category', 'basic')
+    is_pinned = data.get('is_pinned', 0)
+    is_favorite = data.get('is_favorite', 0)
+    
+    conn = get_db()
+    cursor = conn.cursor()
+    
+    try:
+        cursor.execute('''
+            INSERT INTO user_agents (user_id, agent_id, category, is_pinned, is_favorite)
+            VALUES (?, ?, ?, ?, ?)
+        ''', (user_id, agent_id, category, is_pinned, is_favorite))
+        conn.commit()
+        conn.close()
+        return jsonify({'success': True})
+    except:
+        # 已存在，更新
+        cursor.execute('''
+            UPDATE user_agents SET category=?, is_pinned=?, is_favorite=? 
+            WHERE user_id=? AND agent_id=?
+        ''', (category, is_pinned, is_favorite, user_id, agent_id))
+        conn.commit()
+        conn.close()
+        return jsonify({'success': True})
+
+
+@app.route('/api/user/<int:user_id>/agents/<agent_id>', methods=['DELETE'])
+def remove_user_agent(user_id, agent_id):
+    """从用户列表移除智能体"""
+    conn = get_db()
+    cursor = conn.cursor()
+    cursor.execute('DELETE FROM user_agents WHERE user_id=? AND agent_id=?', (user_id, agent_id))
+    conn.commit()
+    conn.close()
+    return jsonify({'success': True})
+
+
+@app.route('/api/user/<int:user_id>/agents/<agent_id>/pin', methods=['POST'])
+def toggle_user_agent_pin(user_id, agent_id):
+    """切换智能体置顶状态"""
+    data = request.json
+    is_pinned = data.get('is_pinned', 1)
+    category = data.get('category', 'basic')
+    
+    conn = get_db()
+    cursor = conn.cursor()
+    
+    # 检查是否存在
+    cursor.execute('SELECT id FROM user_agents WHERE user_id=? AND agent_id=?', (user_id, agent_id))
+    if cursor.fetchone():
+        cursor.execute('UPDATE user_agents SET is_pinned=? WHERE user_id=? AND agent_id=?', 
+                       (is_pinned, user_id, agent_id))
+    else:
+        cursor.execute('INSERT INTO user_agents (user_id, agent_id, category, is_pinned) VALUES (?, ?, ?, ?)',
+                       (user_id, agent_id, category, is_pinned))
+    
+    conn.commit()
+    conn.close()
+    return jsonify({'success': True})
+
+
+@app.route('/api/user/<int:user_id>/agents/<agent_id>/favorite', methods=['POST'])
+def toggle_user_agent_favorite(user_id, agent_id):
+    """切换智能体收藏状态"""
+    data = request.json
+    is_favorite = data.get('is_favorite', 1)
+    category = data.get('category', 'basic')
+    
+    conn = get_db()
+    cursor = conn.cursor()
+    
+    # 检查是否存在
+    cursor.execute('SELECT id FROM user_agents WHERE user_id=? AND agent_id=?', (user_id, agent_id))
+    if cursor.fetchone():
+        cursor.execute('UPDATE user_agents SET is_favorite=? WHERE user_id=? AND agent_id=?', 
+                       (is_favorite, user_id, agent_id))
+    else:
+        cursor.execute('INSERT INTO user_agents (user_id, agent_id, category, is_favorite) VALUES (?, ?, ?, ?)',
+                       (user_id, agent_id, category, is_favorite))
+    
+    conn.commit()
+    conn.close()
+    return jsonify({'success': True})
+
+
 # ==================== 大模型接口管理 ====================
 
 @app.route('/api/admin/llm', methods=['GET'])

www/admin.html

@@ -435,6 +435,10 @@
           <span class="sidebar-icon">📊</span>
           <span>统计信息</span>
         </div>
+        <div class="sidebar-item" data-page="users">
+          <span class="sidebar-icon">👥</span>
+          <span>用户管理</span>
+        </div>
         <div class="sidebar-item" data-page="llm">
           <span class="sidebar-icon">🧠</span>
           <span>大模型配置</span>

www/admin.js

@@ -81,6 +81,9 @@ async function loadPage(page) {
     case 'stats':
       await loadStatsPage(content);
       break;
+    case 'users':
+      await loadUsersPage(content);
+      break;
     case 'llm':
       await loadLLMPage(content);
       break;
@@ -177,6 +180,367 @@ async function loadStatsPage(content) {
   `;
 }
 
+// ==================== 用户管理页面 ====================
+
+let users = [];
+
+async function loadUsersPage(content) {
+  users = await fetchAPI('/api/admin/users');
+  
+  content.innerHTML = `
+    <div class="content-header">
+      <h1 class="content-title">用户管理</h1>
+      <div style="display: flex; gap: 12px;">
+        <input type="text" class="form-input" id="userSearch" placeholder="搜索用户名/手机/邮箱" style="width: 200px;" onkeyup="searchUsers(event)">
+        <button class="add-btn" onclick="searchUsersBtn()">搜索</button>
+      </div>
+    </div>
+    
+    <div class="stats-grid" style="grid-template-columns: repeat(4, 1fr);">
+      <div class="stat-card">
+        <div class="stat-icon">👥</div>
+        <div class="stat-value">${users.length}</div>
+        <div class="stat-label">总用户数</div>
+      </div>
+      <div class="stat-card">
+        <div class="stat-icon">🆕</div>
+        <div class="stat-value">${users.filter(u => {
+          const today = new Date().toISOString().slice(0, 10);
+          return u.created_at && u.created_at.startsWith(today);
+        }).length}</div>
+        <div class="stat-label">今日新增</div>
+      </div>
+      <div class="stat-card">
+        <div class="stat-icon">📧</div>
+        <div class="stat-value">${users.filter(u => u.email).length}</div>
+        <div class="stat-label">已绑定邮箱</div>
+      </div>
+      <div class="stat-card">
+        <div class="stat-icon">📱</div>
+        <div class="stat-value">${users.length}</div>
+        <div class="stat-label">已绑定手机</div>
+      </div>
+    </div>
+    
+    <div class="data-table">
+      <table>
+        <thead>
+          <tr>
+            <th>ID</th>
+            <th>头像</th>
+            <th>用户名</th>
+            <th>手机号</th>
+            <th>邮箱</th>
+            <th>注册时间</th>
+            <th>最后登录</th>
+            <th>操作</th>
+          </tr>
+        </thead>
+        <tbody>
+          ${users.length === 0 ? '<tr><td colspan="8" style="text-align: center; color: #999;">暂无用户</td></tr>' : 
+            users.map(u => `
+              <tr>
+                <td>${u.id}</td>
+                <td style="font-size: 24px;">${u.avatar || '👤'}</td>
+                <td>${u.username}</td>
+                <td>${u.phone}</td>
+                <td>${u.email || '-'}</td>
+                <td>${formatDate(u.created_at)}</td>
+                <td>${u.last_login_at ? formatDate(u.last_login_at) : '从未登录'}</td>
+                <td>
+                  <div class="action-btns">
+                    <button class="action-btn edit" onclick="showEditUserModal(${u.id})">编辑</button>
+                    <button class="action-btn" style="background: #8b5cf6; color: white;" onclick="showUserConversations(${u.id}, '${u.username}')">查看对话</button>
+                    <button class="action-btn" style="background: #f59e0b; color: white;" onclick="showResetPasswordModal(${u.id})">重置密码</button>
+                    <button class="action-btn delete" onclick="deleteUser(${u.id})">删除</button>
+                  </div>
+                </td>
+              </tr>
+            `).join('')
+          }
+        </tbody>
+      </table>
+    </div>
+  `;
+}
+
+function formatDate(dateStr) {
+  if (!dateStr) return '-';
+  const d = new Date(dateStr);
+  return d.toLocaleDateString() + ' ' + d.toLocaleTimeString().slice(0, 5);
+}
+
+async function searchUsers(event) {
+  if (event && event.key !== 'Enter') return;
+  const search = document.getElementById('userSearch').value.trim();
+  users = await fetchAPI(`/api/admin/users?search=${encodeURIComponent(search)}`);
+  loadUsersPage(document.getElementById('mainContent'));
+}
+
+async function searchUsersBtn() {
+  const search = document.getElementById('userSearch').value.trim();
+  users = await fetchAPI(`/api/admin/users?search=${encodeURIComponent(search)}`);
+  loadUsersPage(document.getElementById('mainContent'));
+}
+
+function showEditUserModal(id) {
+  const user = users.find(u => u.id === id);
+  if (!user) return;
+  
+  const avatars = ['👤', '😊', '😎', '🤓', '🦸', '🧙', '🥷', '👨', '👩', '🧑', '👴', '👵', '👦', '👧', '🤖', '👽', '🧛', '🧜', '🧚', '🦊'];
+  
+  showModal('编辑用户', `
+    <div class="form-group">
+      <label class="form-label">用户名</label>
+      <input type="text" class="form-input" id="editUserName" value="${user.username}">
+    </div>
+    <div class="form-group">
+      <label class="form-label">手机号（不可修改）</label>
+      <input type="text" class="form-input" id="editUserPhone" value="${user.phone}" readonly style="background: #f5f7fa;">
+    </div>
+    <div class="form-group">
+      <label class="form-label">邮箱</label>
+      <input type="email" class="form-input" id="editUserEmail" value="${user.email || ''}">
+    </div>
+    <div class="form-group">
+      <label class="form-label">头像</label>
+      <select class="form-select" id="editUserAvatar">
+        ${avatars.map(a => `<option value="${a}" ${a === (user.avatar || '👤') ? 'selected' : ''}>${a}</option>`).join('')}
+      </select>
+    </div>
+    <div class="form-group">
+      <label class="form-label">个性签名</label>
+      <input type="text" class="form-input" id="editUserSignature" value="${user.signature || ''}" maxlength="50">
+    </div>
+    <div class="form-group">
+      <label class="form-label">性别</label>
+      <select class="form-select" id="editUserGender">
+        <option value="" ${!user.gender ? 'selected' : ''}>未设置</option>
+        <option value="male" ${user.gender === 'male' ? 'selected' : ''}>男</option>
+        <option value="female" ${user.gender === 'female' ? 'selected' : ''}>女</option>
+        <option value="other" ${user.gender === 'other' ? 'selected' : ''}>其他</option>
+      </select>
+    </div>
+    <div class="form-group">
+      <label class="form-label">年龄</label>
+      <input type="number" class="form-input" id="editUserAge" value="${user.age || ''}" min="1" max="150">
+    </div>
+    <div class="form-group">
+      <label class="form-label">地区</label>
+      <input type="text" class="form-input" id="editUserRegion" value="${user.region || ''}">
+    </div>
+    <button class="form-submit" onclick="updateUser(${id})">保存</button>
+  `);
+}
+
+async function updateUser(id) {
+  const data = {
+    username: document.getElementById('editUserName').value,
+    email: document.getElementById('editUserEmail').value,
+    avatar: document.getElementById('editUserAvatar').value,
+    signature: document.getElementById('editUserSignature').value,
+    gender: document.getElementById('editUserGender').value,
+    age: document.getElementById('editUserAge').value ? parseInt(document.getElementById('editUserAge').value) : null,
+    region: document.getElementById('editUserRegion').value
+  };
+  
+  if (!data.username) {
+    showToast('用户名不能为空');
+    return;
+  }
+  
+  await fetchAPI(`/api/admin/users/${id}`, 'PUT', data);
+  closeModal();
+  showToast('更新成功');
+  loadPage('users');
+}
+
+function showResetPasswordModal(id) {
+  const user = users.find(u => u.id === id);
+  if (!user) return;
+  
+  showModal('重置密码', `
+    <div style="padding: 16px; background: #f5f7fa; border-radius: 8px; margin-bottom: 16px;">
+      <p><strong>用户:</strong> ${user.username}</p>
+      <p><strong>手机:</strong> ${user.phone}</p>
+    </div>
+    <div class="form-group">
+      <label class="form-label">新密码</label>
+      <input type="text" class="form-input" id="resetPassword" placeholder="输入新密码（至少6位）">
+    </div>
+    <p style="color: #999; font-size: 12px;">⚠️ 重置后用户需使用新密码登录</p>
+    <button class="form-submit" onclick="resetPassword(${id})">确认重置</button>
+  `);
+}
+
+async function resetPassword(id) {
+  const password = document.getElementById('resetPassword').value;
+  
+  if (!password || password.length < 6) {
+    showToast('密码长度至少6位');
+    return;
+  }
+  
+  await fetchAPI(`/api/admin/users/${id}/password`, 'PUT', { password });
+  closeModal();
+  showToast('密码已重置');
+}
+
+async function deleteUser(id) {
+  const user = users.find(u => u.id === id);
+  if (!user) return;
+  
+  if (!confirm(`确定删除用户 "${user.username}"？\n此操作不可恢复！`)) return;
+  
+  await fetchAPI(`/api/admin/users/${id}`, 'DELETE');
+  showToast('删除成功');
+  loadPage('users');
+}
+
+// ==================== 查看用户对话记录 ====================
+
+async function showUserConversations(userId, username) {
+  // 加载用户对话列表
+  const conversations = await fetchAPI(`/api/user/${userId}/conversations`);
+  
+  const content = document.getElementById('mainContent');
+  
+  content.innerHTML = `
+    <div class="content-header">
+      <h1 class="content-title">用户对话记录 - ${username}</h1>
+      <button class="add-btn" style="background: #718096;" onclick="loadPage('users')">返回用户列表</button>
+    </div>
+    
+    <div class="stats-grid" style="grid-template-columns: repeat(3, 1fr);">
+      <div class="stat-card">
+        <div class="stat-icon">💬</div>
+        <div class="stat-value">${conversations.length}</div>
+        <div class="stat-label">对话总数</div>
+      </div>
+      <div class="stat-card">
+        <div class="stat-icon">🤖</div>
+        <div class="stat-value">${conversations.filter(c => c.agentId).length}</div>
+        <div class="stat-label">智能体对话</div>
+      </div>
+      <div class="stat-card">
+        <div class="stat-icon">📝</div>
+        <div class="stat-value">${conversations.reduce((sum, c) => sum + (c.messages?.length || 0), 0)}</div>
+        <div class="stat-label">消息总数</div>
+      </div>
+    </div>
+    
+    <div class="data-table">
+      <table>
+        <thead>
+          <tr>
+            <th>ID</th>
+            <th>标题</th>
+            <th>智能体</th>
+            <th>消息数</th>
+            <th>创建时间</th>
+            <th>更新时间</th>
+            <th>操作</th>
+          </tr>
+        </thead>
+        <tbody>
+          ${conversations.length === 0 ? '<tr><td colspan="7" style="text-align: center; color: #999;">暂无对话记录</td></tr>' : 
+            conversations.map(conv => `
+              <tr>
+                <td>${conv.id}</td>
+                <td>${conv.title || '新对话'}</td>
+                <td>${conv.agentId ? getAgentName(conv.agentId) : '普通对话'}</td>
+                <td>${conv.messages?.length || 0}</td>
+                <td>${formatDate(conv.createdAt || conv.created_at)}</td>
+                <td>${formatDate(conv.updatedAt || conv.updated_at)}</td>
+                <td>
+                  <div class="action-btns">
+                    <button class="action-btn edit" onclick="showConversationMessages(${userId}, ${conv.id}, '${conv.title || '新对话'}')">查看详情</button>
+                    <button class="action-btn delete" onclick="deleteUserConversation(${userId}, ${conv.id})">删除</button>
+                  </div>
+                </td>
+              </tr>
+            `).join('')
+          }
+        </tbody>
+      </table>
+    </div>
+  `;
+}
+
+function getAgentName(agentId) {
+  const agent = agents.find(a => a.agent_id === agentId);
+  return agent ? `${agent.avatar} ${agent.name}` : agentId;
+}
+
+async function showConversationMessages(userId, convId, title) {
+  // 获取对话详情
+  const conv = await fetchAPI(`/api/user/${userId}/conversations/${convId}`);
+  
+  const content = document.getElementById('mainContent');
+  
+  const messages = conv.messages || [];
+  
+  content.innerHTML = `
+    <div class="content-header">
+      <h1 class="content-title">对话详情 - ${title}</h1>
+      <button class="add-btn" style="background: #718096;" onclick="showUserConversations(${userId}, '用户')">返回对话列表</button>
+    </div>
+    
+    <div style="background: white; padding: 16px; border-radius: 12px; margin-bottom: 16px;">
+      <div style="display: flex; gap: 16px; color: #718096;">
+        <span>💬 消息数: ${messages.length}</span>
+        <span>🤖 智能体: ${conv.agentId ? getAgentName(conv.agentId) : '普通对话'}</span>
+        <span>📅 创建: ${formatDate(conv.createdAt || conv.created_at)}</span>
+      </div>
+    </div>
+    
+    <div class="data-table">
+      <table>
+        <thead>
+          <tr>
+            <th style="width: 60px;">序号</th>
+            <th style="width: 80px;">角色</th>
+            <th>内容</th>
+            <th style="width: 150px;">时间</th>
+          </tr>
+        </thead>
+        <tbody>
+          ${messages.length === 0 ? '<tr><td colspan="4" style="text-align: center; color: #999;">暂无消息</td></tr>' : 
+            messages.map((msg, idx) => `
+              <tr>
+                <td>${idx + 1}</td>
+                <td style="color: ${msg.role === 'user' ? '#3b82f6' : '#10b981'};">
+                  ${msg.role === 'user' ? '👤 用户' : '🤖 AI'}
+                </td>
+                <td style="max-width: 500px; white-space: pre-wrap; word-break: break-all;">
+                  ${escapeHtml(msg.content?.slice(0, 500) || '')}${msg.content?.length > 500 ? '...' : ''}
+                  ${msg.thinking ? `<div style="color: #f59e0b; margin-top: 8px; font-size: 12px;">💭 思考: ${escapeHtml(msg.thinking?.slice(0, 200) || '')}...</div>` : ''}
+                </td>
+                <td>${formatDate(msg.timestamp || msg.createdAt)}</td>
+              </tr>
+            `).join('')
+          }
+        </tbody>
+      </table>
+    </div>
+  `;
+}
+
+async function deleteUserConversation(userId, convId) {
+  if (!confirm('确定删除此对话？此操作不可恢复！')) return;
+  
+  await fetchAPI(`/api/user/${userId}/conversations/${convId}`, 'DELETE');
+  showToast('删除成功');
+  showUserConversations(userId, '用户');
+}
+
+function escapeHtml(text) {
+  if (!text) return '';
+  const div = document.createElement('div');
+  div.textContent = text;
+  return div.innerHTML;
+}
+
 // ==================== 大模型配置页面 ====================
 
 async function loadLLMPage(content) {
@@ -512,39 +876,6 @@ function showAddAgentModal() {
     <button class="form-submit" onclick="saveAgent()">保存</button>
   `);
 }
-      </select>
-    </div>
-    <div class="form-group">
-      <label class="form-label">描述</label>
-      <input type="text" class="form-input" id="agentDescription" placeholder="智能体描述">
-    </div>
-    <div class="form-group">
-      <label class="form-label">System Prompt</label>
-      <textarea class="form-textarea" id="agentPrompt" placeholder="系统提示词"></textarea>
-    </div>
-    <div class="form-group">
-      <label class="form-label">LLM配置</label>
-      <select class="form-select" id="agentLLM">
-        <option value="">使用默认</option>
-        ${llmConfigs.map(c => `<option value="${c.id}">${c.name}</option>`).join('')}
-      </select>
-    </div>
-    <div class="form-group">
-      <label class="form-label">热度</label>
-      <input type="number" class="form-input" id="agentHeat" value="0">
-    </div>
-    <div class="form-group">
-      <label class="form-label">标签</label>
-      <input type="text" class="form-input" id="agentTags" placeholder="多个标签用逗号分隔">
-    </div>
-    <div class="form-group">
-      <label style="display: flex; align-items: center; gap: 8px;">
-        <input type="checkbox" id="agentEnableSearch"> 启用联网搜索
-      </label>
-    </div>
-    <button class="form-submit" onclick="saveAgent()">保存</button>
-  `);
-}
 
 function showEditAgentModal(agentId) {
   const agent = agents.find(a => a.agent_id === agentId);

www/app.js

@@ -294,14 +294,47 @@ let thinkingBtn = null;
 let searchBtn = null;
 
 // 初始化
-document.addEventListener('DOMContentLoaded', () => {
+document.addEventListener('DOMContentLoaded', async () => {
   // 初始化 appContainer
   appContainer = document.getElementById('app');
   
-  // 从本地存储加载对话列表
-  const saved = localStorage.getItem('conversations');
-  if (saved) {
-    conversations = JSON.parse(saved);
+  // 加载用户登录状态（优先检查）
+  const savedUser = localStorage.getItem('currentUser');
+  if (savedUser) {
+    currentUser = JSON.parse(savedUser);
+  }
+  
+  // 如果用户已登录且有ID，从 backend 加载对话数据
+  if (currentUser && currentUser.id) {
+    try {
+      const res = await fetch(`/api/user/${currentUser.id}/conversations`);
+      const data = await res.json();
+      if (Array.isArray(data) && data.length > 0) {
+        // 使用 backend 数据替换本地数据
+        conversations = data;
+        // 更新本地存储（离线可用）
+        localStorage.setItem('conversations', JSON.stringify(conversations));
+      } else {
+        // backend 无数据，使用本地数据
+        const saved = localStorage.getItem('conversations');
+        if (saved) {
+          conversations = JSON.parse(saved);
+        }
+      }
+    } catch (e) {
+      // backend 加载失败，使用本地数据
+      console.error('加载 backend 对话失败:', e);
+      const saved = localStorage.getItem('conversations');
+      if (saved) {
+        conversations = JSON.parse(saved);
+      }
+    }
+  } else {
+    // 未登录用户，从本地存储加载对话列表
+    const saved = localStorage.getItem('conversations');
+    if (saved) {
+      conversations = JSON.parse(saved);
+    }
   }
   
   // 兼容旧数据格式（chat_history）
@@ -323,7 +356,7 @@ document.addEventListener('DOMContentLoaded', () => {
     }
   }
   
-  // 加载用户智能体数据
+  // 加载用户智能体数据（我的智能体）
   const savedMyAgents = localStorage.getItem('myAgents');
   if (savedMyAgents) {
     myAgents = JSON.parse(savedMyAgents);
@@ -341,10 +374,26 @@ document.addEventListener('DOMContentLoaded', () => {
     pinnedAgents = JSON.parse(savedPinnedAgents);
   }
   
-  // 加载用户登录状态
-  const savedUser = localStorage.getItem('currentUser');
-  if (savedUser) {
-    currentUser = JSON.parse(savedUser);
+  // 如果用户已登录且有ID，从 backend 加载智能体配置
+  if (currentUser && currentUser.id) {
+    try {
+      const res = await fetch(`/api/user/${currentUser.id}/agents`);
+      const data = await res.json();
+      if (data.myAgents) {
+        myAgents = data.myAgents;
+        localStorage.setItem('myAgents', JSON.stringify(myAgents));
+      }
+      if (data.favoriteAgents) {
+        favoriteAgents = data.favoriteAgents;
+        localStorage.setItem('favoriteAgents', JSON.stringify(favoriteAgents));
+      }
+      if (data.pinnedAgents) {
+        pinnedAgents = data.pinnedAgents;
+        localStorage.setItem('pinnedAgents', JSON.stringify(pinnedAgents));
+      }
+    } catch (e) {
+      console.error('加载智能体配置失败:', e);
+    }
   }
   
   // 加载每日使用统计
@@ -1001,10 +1050,12 @@ function toggleAgentPin(agentId) {
   
   const category = agent.category;
   
+  let is_pinned;
   if (pinnedAgents[category]?.includes(agentId)) {
     // 取消置顶
     pinnedAgents[category] = pinnedAgents[category].filter(id => id !== agentId);
     agent.is_pinned = false;
+    is_pinned = 0;
     showToast('已取消置顶');
   } else {
     // 置顶
@@ -1013,11 +1064,21 @@ function toggleAgentPin(agentId) {
     }
     pinnedAgents[category].push(agentId);
     agent.is_pinned = true;
+    is_pinned = 1;
     showToast('已置顶');
   }
   
   savePinnedAgents();
   saveMyAgents();  // 更新显示
+  
+  // 同步到 backend
+  if (currentUser && currentUser.id) {
+    fetch(`/api/user/${currentUser.id}/agents/${agentId}/pin`, {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ is_pinned, category })
+    }).catch(e => console.error('同步置顶失败:', e));
+  }
 }
 
 // 收藏/取消收藏智能体
@@ -1025,20 +1086,32 @@ function toggleAgentFavorite(agentId) {
   const agent = agents.find(a => a.id === agentId);
   if (!agent) return;
   
+  let is_favorite;
   if (favoriteAgents.includes(agentId)) {
     // 取消收藏
     favoriteAgents = favoriteAgents.filter(id => id !== agentId);
     agent.is_favorite = false;
+    is_favorite = 0;
     showToast('已取消收藏');
   } else {
     // 收藏
     favoriteAgents.push(agentId);
     agent.is_favorite = true;
+    is_favorite = 1;
     showToast('已收藏');
   }
   
   saveFavoriteAgents();
   saveMyAgents();  // 更新显示
+  
+  // 同步到 backend
+  if (currentUser && currentUser.id) {
+    fetch(`/api/user/${currentUser.id}/agents/${agentId}/favorite`, {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ is_favorite, category: agent.category })
+    }).catch(e => console.error('同步收藏失败:', e));
+  }
 }
 
 // 从用户智能体列表移除
@@ -1067,6 +1140,13 @@ function removeAgentFromMyAgents(agentId) {
   savePinnedAgents();
   saveFavoriteAgents();
   showToast('已移除');
+  
+  // 同步到 backend
+  if (currentUser && currentUser.id) {
+    fetch(`/api/user/${currentUser.id}/agents/${agentId}`, {
+      method: 'DELETE'
+    }).catch(e => console.error('同步移除失败:', e));
+  }
 }
 
 // ==================== 智能体发现页面 ====================
@@ -1303,6 +1383,15 @@ function addAgentToMyAgents(agentId) {
   
   saveMyAgents();
   showToast(`已添加 ${agent.name}`);
+  
+  // 同步到 backend
+  if (currentUser && currentUser.id) {
+    fetch(`/api/user/${currentUser.id}/agents/${agentId}`, {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ category: agent.category })
+    }).catch(e => console.error('同步添加智能体失败:', e));
+  }
 }
 
 // 从发现页面收藏智能体
@@ -1620,14 +1709,43 @@ function showEditProfilePage() {
     return;
   }
   
-  // 获取完整用户信息
-  const users = JSON.parse(localStorage.getItem('registeredUsers') || '[]');
-  const fullUser = users.find(u => u.username === currentUser.username);
-  
+  // 如果用户已登录且有ID，从 backend 获取完整用户信息
+  if (currentUser.id) {
+    fetch(`/api/admin/users/${currentUser.id}`)
+      .then(res => res.json())
+      .then(data => {
+        if (data && data.id) {
+          // 更新 currentUser 的完整信息
+          currentUser.avatar = data.avatar || '👤';
+          currentUser.signature = data.signature || '';
+          currentUser.email = data.email || '';
+          currentUser.gender = data.gender || '';
+          currentUser.age = data.age || '';
+          currentUser.region = data.region || '';
+          currentUser.phone = data.phone || '';
+          
+          // 渲染编辑页面
+          renderEditProfilePage();
+        } else {
+          // 使用本地数据
+          renderEditProfilePage();
+        }
+      })
+      .catch(e => {
+        // 使用本地数据
+        renderEditProfilePage();
+      });
+  } else {
+    // 游客用户，使用本地数据
+    renderEditProfilePage();
+  }
+}
+
+function renderEditProfilePage() {
   const avatar = currentUser.avatar || '👤';
   const signature = currentUser.signature || '';
-  const phone = fullUser?.phone || '';
-  const email = fullUser?.email || '';
+  const phone = currentUser.phone || '';
+  const email = currentUser.email || '';
   const gender = currentUser.gender || '';
   const age = currentUser.age || '';
   const region = currentUser.region || '';
@@ -1773,26 +1891,6 @@ function handleSaveProfile() {
     return;
   }
   
-  // 检查用户名是否被其他人占用
-  const users = JSON.parse(localStorage.getItem('registeredUsers') || '[]');
-  if (newUsername !== currentUser.username) {
-    if (users.find(u => u.username === newUsername)) {
-      showToast('用户名已被占用');
-      return;
-    }
-    // 更新用户名
-    const userIndex = users.findIndex(u => u.username === currentUser.username);
-    if (userIndex >= 0) {
-      users[userIndex].username = newUsername;
-    }
-  }
-  
-  // 更新邮箱
-  const userIndex = users.findIndex(u => u.username === currentUser.username);
-  if (userIndex >= 0) {
-    users[userIndex].email = newEmail;
-  }
-  
   // 更新 currentUser
   currentUser.avatar = newAvatar;
   currentUser.username = newUsername;
@@ -1800,12 +1898,42 @@ function handleSaveProfile() {
   currentUser.gender = newGender;
   currentUser.age = newAge ? parseInt(newAge) : '';
   currentUser.region = newRegion;
+  currentUser.email = newEmail;
   
-  saveCurrentUser();
-  localStorage.setItem('registeredUsers', JSON.stringify(users));
-  
-  showToast('保存成功');
-  switchPage('profile');
+  // 如果用户已登录，调用 backend API 更新
+  if (currentUser.id) {
+    fetch(`/api/user/${currentUser.id}`, {
+      method: 'PUT',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({
+        username: newUsername,
+        email: newEmail,
+        avatar: newAvatar,
+        signature: newSignature,
+        gender: newGender,
+        age: newAge ? parseInt(newAge) : null,
+        region: newRegion
+      })
+    })
+    .then(res => res.json())
+    .then(data => {
+      if (data.success) {
+        saveCurrentUser();
+        showToast('保存成功');
+        switchPage('profile');
+      } else {
+        showToast(data.error || '保存失败');
+      }
+    })
+    .catch(e => {
+      showToast('网络错误，请重试');
+    });
+  } else {
+    // 未登录用户，保存到本地
+    saveCurrentUser();
+    showToast('保存成功');
+    switchPage('profile');
+  }
 }
 
 // ==================== 消息通知页面 ====================
@@ -2447,18 +2575,41 @@ function handleLogin() {
     return;
   }
   
-  // 检查本地存储的用户
-  const users = JSON.parse(localStorage.getItem('registeredUsers') || '[]');
-  const user = users.find(u => u.username === username && u.password === password);
-  
-  if (user) {
-    currentUser = { username: user.username, registeredAt: user.registeredAt };
-    saveCurrentUser();
-    showToast('登录成功');
-    showMainPage();
-  } else {
-    showToast('用户名或密码错误');
-  }
+  // 调用后台登录API
+  fetch('/api/login', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify({ username, password })
+  })
+  .then(res => res.json())
+  .then(data => {
+    if (data.success) {
+      currentUser = {
+        id: data.user.id,
+        username: data.user.username,
+        phone: data.user.phone,
+        email: data.user.email || '',
+        avatar: data.user.avatar || '👤',
+        signature: data.user.signature || '',
+        gender: data.user.gender || '',
+        age: data.user.age || '',
+        region: data.user.region || '',
+        registeredAt: Date.now()
+      };
+      saveCurrentUser();
+      
+      // 从 backend 加载用户对话数据
+      loadUserConversations().then(() => {
+        showToast('登录成功');
+        showMainPage();
+      });
+    } else {
+      showToast(data.error || '用户名或密码错误');
+    }
+  })
+  .catch(e => {
+    showToast('网络错误，请重试');
+  });
 }
 
 // ==================== 注册页面 ====================
@@ -2477,7 +2628,7 @@ function showRegisterPage() {
         <div class="auth-form">
           <div class="auth-input-group">
             <label>用户名</label>
-            <input type="text" id="registerUsername" placeholder="请输入用户名（3-20字符）" autocomplete="username">
+            <input type="text" id="registerUsername" placeholder="请输入用户名（2-20字符）" autocomplete="username">
           </div>
           <div class="auth-input-group">
             <label>手机号 <span class="required">*</span></label>
@@ -2563,8 +2714,8 @@ function handleRegister() {
   const passwordConfirm = document.getElementById('registerPasswordConfirm')?.value;
   
   // 验证用户名
-  if (!username || username.length < 3 || username.length > 20) {
-    showToast('用户名需要3-20个字符');
+  if (!username || username.length < 2 || username.length > 20) {
+    showToast('用户名需要2-20个字符');
     return;
   }
   
@@ -2575,7 +2726,7 @@ function handleRegister() {
   }
   
   // 验证邮箱（可选）
-  if (!validateEmail(email)) {
+  if (email && !validateEmail(email)) {
     showToast('请输入正确的邮箱格式');
     return;
   }
@@ -2591,37 +2742,45 @@ function handleRegister() {
     return;
   }
   
-  // 检查用户名是否已存在
-  const users = JSON.parse(localStorage.getItem('registeredUsers') || '[]');
-  if (users.find(u => u.username === username)) {
-    showToast('用户名已存在');
-    return;
-  }
+  // 调用后台注册API（验证码暂时跳过，传随机值）
+  const code = Math.floor(100000 + Math.random() * 900000).toString();
   
-  // 检查手机号是否已注册
-  if (users.find(u => u.phone === phone)) {
-    showToast('该手机号已注册');
-    return;
-  }
-  
-  // 注册新用户
-  const newUser = {
-    username,
-    phone,
-    email: email || '',
-    password,
-    registeredAt: Date.now()
-  };
-  
-  users.push(newUser);
-  localStorage.setItem('registeredUsers', JSON.stringify(users));
-  
-  // 自动登录
-  currentUser = { username: newUser.username, phone: newUser.phone, registeredAt: newUser.registeredAt };
-  saveCurrentUser();
-  
-  showToast('注册成功');
-  showMainPage();
+  fetch('/api/register', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify({
+      username,
+      phone,
+      email: email || '',
+      password,
+      code
+    })
+  })
+  .then(res => res.json())
+  .then(data => {
+    if (data.success) {
+      // 注册成功，自动登录
+      currentUser = {
+        id: data.user_id,
+        username: username,
+        phone: phone,
+        email: email || '',
+        registeredAt: Date.now()
+      };
+      saveCurrentUser();
+      
+      // 加载对话数据（新用户为空）
+      loadUserConversations().then(() => {
+        showToast('注册成功');
+        showMainPage();
+      });
+    } else {
+      showToast(data.error || '注册失败');
+    }
+  })
+  .catch(e => {
+    showToast('网络错误，请重试');
+  });
 }
 
 // ==================== 限制提示 ====================
@@ -2756,7 +2915,7 @@ function showAgentHistoryPage() {
 }
 
 // 打开智能体对话
-function openAgent(agentId) {
+async function openAgent(agentId) {
   currentAgent = systemAgents.find(a => a.id === agentId);
   if (!currentAgent) return;
   
@@ -2777,9 +2936,31 @@ function openAgent(agentId) {
     setAgentUsed(agentId);
   }
   
+  // 如果用户已登录，先在 backend 创建对话
+  let backendId = null;
+  if (currentUser && currentUser.id) {
+    try {
+      const res = await fetch(`/api/user/${currentUser.id}/conversations`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ 
+          title: currentAgent.name, 
+          messages: [], 
+          agentId: agentId 
+        })
+      });
+      const data = await res.json();
+      if (data.success && data.id) {
+        backendId = data.id;
+      }
+    } catch (e) {
+      console.error('创建智能体对话失败:', e);
+    }
+  }
+  
   // 创建新对话并设置智能体
   const newConv = {
-    id: Date.now().toString(),
+    id: backendId || Date.now().toString(),
     title: currentAgent.name,
     messages: [],
     agentId: agentId,
@@ -3230,15 +3411,33 @@ function togglePinConversation(convId) {
 }
 
 // 创建新对话
-function createNewConversation() {
+async function createNewConversation() {
   // 检查未登录用户的对话限制
   if (!currentUser && !canCreateNewChat()) {
     showLimitDialog('chat_session');
     return;
   }
   
+  // 如果用户已登录，先在 backend 创建对话
+  let backendId = null;
+  if (currentUser && currentUser.id) {
+    try {
+      const res = await fetch(`/api/user/${currentUser.id}/conversations`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ title: '新对话', messages: [] })
+      });
+      const data = await res.json();
+      if (data.success && data.id) {
+        backendId = data.id;
+      }
+    } catch (e) {
+      console.error('创建对话失败:', e);
+    }
+  }
+  
   const newConv = {
-    id: Date.now().toString(),
+    id: backendId || Date.now().toString(),  // 使用 backend ID 或本地 ID
     title: '新对话',
     messages: [],
     createdAt: Date.now(),
@@ -3476,6 +3675,17 @@ function deleteConversation(id) {
   
   conversations = conversations.filter(c => c.id !== id);
   saveConversations();
+  
+  // 如果用户已登录，从 backend 删除
+  if (currentUser && currentUser.id) {
+    const convId = parseInt(id);
+    if (convId > 0) {
+      fetch(`/api/user/${currentUser.id}/conversations/${convId}`, {
+        method: 'DELETE'
+      }).catch(e => console.error('删除对话失败:', e));
+    }
+  }
+  
   showConversationList();
 }
 
@@ -3544,6 +3754,9 @@ async function sendMessage() {
   currentConversation.updatedAt = Date.now();
   saveConversations();
   
+  // 同步当前对话到 backend（用户已登录）
+  syncConversationToBackend(currentConversation);
+  
   // 增加消息计数（未登录用户）
   if (!currentUser) {
     if (currentConversation.agentId) {
@@ -3664,6 +3877,7 @@ async function streamGenerate(userMsgIndex) {
         contentEl.innerHTML = renderMarkdown(currentConversation.messages[aiMessageIndex].content);
         currentConversation.updatedAt = Date.now();
         saveConversations();
+        syncConversationToBackend(currentConversation);
         renderMessages();
       };
     }
@@ -3740,8 +3954,12 @@ async function streamGenerate(userMsgIndex) {
     hideStopGenerateBtn();
     currentConversation.updatedAt = Date.now();
     saveConversations();
+    syncConversationToBackend(currentConversation);
     renderMessages();
     
+    // 记录统计到 backend
+    logStatsToBackend('llm_call', currentConversation.agentId || 'chat', 1);
+    
     // 自动总结标题：第一次对话和每隔5次对话
     const totalMessages = currentConversation.messages.length;
     // 第一次对话（用户+AI=2条）或每5次对话（10条）
@@ -3751,6 +3969,15 @@ async function streamGenerate(userMsgIndex) {
   }
 }
 
+// 记录统计到 backend
+function logStatsToBackend(type, key, value = 1) {
+  fetch('/api/admin/stats/log', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify({ type, key, value })
+  }).catch(e => console.error('统计记录失败:', e));
+}
+
 // 执行 Tavily 搜索
 async function performSearch(query) {
   try {
@@ -3773,6 +4000,10 @@ async function performSearch(query) {
     }
 
     const data = await response.json();
+    
+    // 记录搜索统计
+    logStatsToBackend('search_call', 'tavily', 1);
+    
     return data.results || [];
   } catch (error) {
     console.error('搜索错误:', error);
@@ -4146,9 +4377,87 @@ function setupScrollListener() {
 
 // 保存对话列表
 function saveConversations() {
+  // 保存到本地存储（离线可用）
   localStorage.setItem('conversations', JSON.stringify(conversations));
 }
 
+// 同步单个对话到 backend（新创建或更新）
+async function syncConversationToBackend(conv) {
+  if (!currentUser || !currentUser.id) return;
+  
+  const convId = parseInt(conv.id);
+  
+  try {
+    if (convId > 0 && convId < 1e12) {
+      // 已有 backend ID，更新对话
+      await fetch(`/api/user/${currentUser.id}/conversations/${convId}`, {
+        method: 'PUT',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({
+          title: conv.title,
+          messages: conv.messages,
+          agentId: conv.agentId
+        })
+      });
+    } else {
+      // 新对话（本地 ID 是时间戳），创建
+      const res = await fetch(`/api/user/${currentUser.id}/conversations`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({
+          title: conv.title,
+          messages: conv.messages,
+          agentId: conv.agentId
+        })
+      });
+      const data = await res.json();
+      if (data.success && data.id) {
+        // 更新本地 ID 为 backend ID
+        conv.id = data.id;
+        // 更新 localStorage
+        localStorage.setItem('conversations', JSON.stringify(conversations));
+      }
+    }
+  } catch (e) {
+    console.error('同步对话失败:', e);
+  }
+}
+
+// 从 backend 加载用户对话数据
+async function loadUserConversations() {
+  if (!currentUser || !currentUser.id) return;
+  
+  try {
+    const res = await fetch(`/api/user/${currentUser.id}/conversations`);
+    const data = await res.json();
+    
+    if (Array.isArray(data)) {
+      // 合并本地和云端数据（云端优先）
+      const localConvIds = conversations.map(c => c.id);
+      
+      for (const cloudConv of data) {
+        const localIdx = localConvIds.indexOf(cloudConv.id);
+        if (localIdx >= 0) {
+          // 更新本地对话（云端数据优先）
+          conversations[localIdx] = cloudConv;
+        } else {
+          // 添加云端对话
+          conversations.push(cloudConv);
+        }
+      }
+      
+      // 按更新时间排序
+      conversations.sort((a, b) => b.updatedAt - a.updatedAt);
+      
+      // 保存到本地
+      localStorage.setItem('conversations', JSON.stringify(conversations));
+    }
+  } catch (e) {
+    console.error('加载对话失败:', e);
+    // 使用本地数据
+  }
+}
+
 // 显示提示
 function showToast(message) {
   const toast = document.createElement('div');