Version: 0.9.77.dev.260505

后端：
1.阶段 6 CP4/CP5 目录收口与共享边界纯化
- 将 backend 根目录收口为 services、client、gateway、cmd、shared 五个一级目录
- 收拢 bootstrap、inits、infra/kafka、infra/outbox、conv、respond、pkg、middleware，移除根目录旧实现与空目录
- 将 utils 下沉到 services/userauth/internal/auth，将 logic 下沉到 services/schedule/core/planning
- 将迁移期 runtime 桥接实现统一收拢到 services/runtime/{conv,dao,eventsvc,model}，删除 shared/legacy 与未再被 import 的旧 service 实现
- 将 gateway/shared/respond 收口为 HTTP/Gin 错误写回适配，shared/respond 仅保留共享错误语义与状态映射
- 将 HTTP IdempotencyMiddleware 与 RateLimitMiddleware 收口到 gateway/middleware
- 将 GormCachePlugin 下沉到 shared/infra/gormcache，将共享 RateLimiter 下沉到 shared/infra/ratelimit，将 agent token budget 下沉到 services/agent/shared
- 删除 InitEino 兼容壳，收缩 cmd/internal/coreinit 仅保留旧组合壳残留域初始化语义
- 更新微服务迁移计划与桌面 checklist，补齐 CP4/CP5 当前切流点、目录终态与验证结果
- 完成 go test ./...、git diff --check 与最终真实 smoke；health、register/login、task/create+get、schedule/today、task-class/list、memory/items、agent chat/meta/timeline/context-stats 全部 200，SSE 合并结果为 CP5_OK 且 [DONE] 只有 1 个

backend/services/userauth/dao/connect.go

@@ -1,13 +1,12 @@
 package dao
 
 import (
-	"context"
 	"fmt"
 
 	userauthmodel "github.com/LoveLosita/smartflow/backend/services/userauth/model"
+	mysqlinfra "github.com/LoveLosita/smartflow/backend/shared/infra/mysql"
+	redisinfra "github.com/LoveLosita/smartflow/backend/shared/infra/redis"
 	"github.com/go-redis/redis/v8"
-	"github.com/spf13/viper"
-	"gorm.io/driver/mysql"
 	"gorm.io/gorm"
 )
 
@@ -18,18 +17,7 @@ import (
 // 2. 不负责读取业务配置之外的外部依赖，配置来源仍由 bootstrap.LoadConfig 统一注入；
 // 3. 返回 *gorm.DB 供服务内 DAO 复用，调用方负责进程生命周期。
 func OpenDBFromConfig() (*gorm.DB, error) {
-	host := viper.GetString("database.host")
-	port := viper.GetString("database.port")
-	user := viper.GetString("database.user")
-	password := viper.GetString("database.password")
-	dbname := viper.GetString("database.dbname")
-
-	dsn := fmt.Sprintf(
-		"%s:%s@tcp(%s:%s)/%s?charset=utf8mb4&parseTime=True&loc=Local",
-		user, password, host, port, dbname,
-	)
-
-	db, err := gorm.Open(mysql.Open(dsn), &gorm.Config{})
+	db, err := mysqlinfra.OpenDBFromConfig()
 	if err != nil {
 		return nil, err
 	}
@@ -43,13 +31,5 @@ func OpenDBFromConfig() (*gorm.DB, error) {
 //
 // 失败时返回 error，让独立进程入口 fail-fast，避免黑名单和额度门禁静默失效。
 func OpenRedisFromConfig() (*redis.Client, error) {
-	client := redis.NewClient(&redis.Options{
-		Addr:     viper.GetString("redis.host") + ":" + viper.GetString("redis.port"),
-		Password: viper.GetString("redis.password"),
-		DB:       0,
-	})
-	if _, err := client.Ping(context.Background()).Result(); err != nil {
-		return nil, err
-	}
-	return client, nil
+	return redisinfra.OpenRedisFromConfig()
 }

backend/services/userauth/internal/auth/password.go

@@ -0,0 +1,36 @@
+package auth
+
+import (
+	"errors"
+
+	"golang.org/x/crypto/bcrypt"
+)
+
+// HashPassword 负责将明文密码转换为 bcrypt 哈希结果。
+//
+// 职责边界：
+// 1. 只负责密码哈希，不负责用户名校验、持久化和错误翻译。
+// 2. 输入是明文密码，输出是可直接入库的 bcrypt 字符串。
+func HashPassword(pwd string) (string, error) {
+	hashedPwd, err := bcrypt.GenerateFromPassword([]byte(pwd), bcrypt.DefaultCost)
+	if err != nil {
+		return "", err
+	}
+	return string(hashedPwd), nil
+}
+
+// CompareHashPwdAndPwd 负责校验明文密码与 bcrypt 哈希是否匹配。
+//
+// 职责边界：
+// 1. 只负责密码比对，不负责用户存在性判断和登录态处理。
+// 2. 当密码不匹配时返回 false, nil；只有底层异常才返回非 nil error。
+func CompareHashPwdAndPwd(hashedPwd, pwd string) (bool, error) {
+	err := bcrypt.CompareHashAndPassword([]byte(hashedPwd), []byte(pwd))
+	if errors.Is(err, bcrypt.ErrMismatchedHashAndPassword) {
+		return false, nil
+	}
+	if err != nil {
+		return false, err
+	}
+	return true, nil
+}

backend/services/userauth/internal/auth/tokens.go

@@ -7,8 +7,8 @@ import (
 	"strings"
 	"time"
 
-	"github.com/LoveLosita/smartflow/backend/respond"
 	contracts "github.com/LoveLosita/smartflow/backend/shared/contracts/userauth"
+	"github.com/LoveLosita/smartflow/backend/shared/respond"
 	"github.com/golang-jwt/jwt/v4"
 	"github.com/google/uuid"
 	"github.com/spf13/viper"

backend/services/userauth/rpc/errors.go

@@ -5,7 +5,7 @@ import (
 	"log"
 	"strings"
 
-	"github.com/LoveLosita/smartflow/backend/respond"
+	"github.com/LoveLosita/smartflow/backend/shared/respond"
 	"google.golang.org/genproto/googleapis/rpc/errdetails"
 	"google.golang.org/grpc/codes"
 	"google.golang.org/grpc/status"

backend/services/userauth/rpc/handler.go

@@ -5,10 +5,10 @@ import (
 	"errors"
 	"time"
 
-	"github.com/LoveLosita/smartflow/backend/respond"
 	"github.com/LoveLosita/smartflow/backend/services/userauth/rpc/pb"
 	userauthsv "github.com/LoveLosita/smartflow/backend/services/userauth/sv"
 	contracts "github.com/LoveLosita/smartflow/backend/shared/contracts/userauth"
+	"github.com/LoveLosita/smartflow/backend/shared/respond"
 )
 
 type Handler struct {

backend/services/userauth/sv/quota.go

@@ -7,10 +7,10 @@ import (
 	"strings"
 	"time"
 
-	"github.com/LoveLosita/smartflow/backend/respond"
 	userauthdao "github.com/LoveLosita/smartflow/backend/services/userauth/dao"
 	userauthmodel "github.com/LoveLosita/smartflow/backend/services/userauth/model"
 	contracts "github.com/LoveLosita/smartflow/backend/shared/contracts/userauth"
+	"github.com/LoveLosita/smartflow/backend/shared/respond"
 )
 
 const (

backend/services/userauth/sv/service.go

@@ -6,12 +6,11 @@ import (
 	"strings"
 	"time"
 
-	"github.com/LoveLosita/smartflow/backend/respond"
 	userauthdao "github.com/LoveLosita/smartflow/backend/services/userauth/dao"
 	userauthauth "github.com/LoveLosita/smartflow/backend/services/userauth/internal/auth"
 	userauthmodel "github.com/LoveLosita/smartflow/backend/services/userauth/model"
 	contracts "github.com/LoveLosita/smartflow/backend/shared/contracts/userauth"
-	"github.com/LoveLosita/smartflow/backend/utils"
+	"github.com/LoveLosita/smartflow/backend/shared/respond"
 	"gorm.io/gorm"
 )
 
@@ -74,7 +73,7 @@ func (s *Service) Register(ctx context.Context, req contracts.RegisterRequest) (
 		return nil, respond.InvalidName
 	}
 
-	hashedPwd, err := utils.HashPassword(req.Password)
+	hashedPwd, err := userauthauth.HashPassword(req.Password)
 	if err != nil {
 		return nil, err
 	}
@@ -94,7 +93,7 @@ func (s *Service) Login(ctx context.Context, req contracts.LoginRequest) (*contr
 		return nil, err
 	}
 
-	matched, err := utils.CompareHashPwdAndPwd(hashedPwd, req.Password)
+	matched, err := userauthauth.CompareHashPwdAndPwd(hashedPwd, req.Password)
 	if err != nil {
 		return nil, err
 	}