feat(frontend): M9 模态 UI（mode 系统+共享 store+WS 客户端 + chat(思维链/工具回显/情绪徽标)/code/Agent 监控/后台思考页 + Miuix 设计 token + PWA）；tsc+vite build 通过

frontend/web/src/lib/api.ts

@@ -0,0 +1,117 @@
+import type {
+  ApiErrorShape,
+  ChatSyncResult,
+  LoginResult,
+  PersonaRecord,
+  SessionRecord,
+} from "./types";
+
+/**
+ * REST client for the Cyrene v2 gateway. The gateway wraps every success in
+ * `{data}` and every failure in `{error:{code,message}}` (Docs/api-client.md).
+ * We use same-origin relative paths so the same code works behind the Vite dev
+ * proxy and inside the single-binary gateway on :8080.
+ */
+export class ApiError extends Error {
+  readonly status: number;
+  readonly code?: string;
+  constructor(status: number, code: string | undefined, message: string) {
+    super(message);
+    this.name = "ApiError";
+    this.status = status;
+    this.code = code;
+  }
+}
+
+const API_BASE = "/api/v1";
+const TOKEN_KEY = "cyrene.jwt";
+
+export function getAuthToken(): string | null {
+  return localStorage.getItem(TOKEN_KEY);
+}
+export function setAuthToken(token: string | null): void {
+  if (token) localStorage.setItem(TOKEN_KEY, token);
+  else localStorage.removeItem(TOKEN_KEY);
+}
+
+interface Envelope {
+  data?: unknown;
+  error?: ApiErrorShape;
+}
+
+async function request<T>(
+  path: string,
+  init: RequestInit = {}
+): Promise<T> {
+  const headers = new Headers(init.headers);
+  headers.set("Content-Type", "application/json");
+  headers.set("X-API-Version", "1");
+  const token = getAuthToken();
+  if (token) headers.set("Authorization", `Bearer ${token}`);
+
+  let res: Response;
+  try {
+    res = await fetch(`${API_BASE}${path}`, { ...init, headers });
+  } catch (err: unknown) {
+    const msg = err instanceof Error ? err.message : "网络请求失败";
+    throw new ApiError(0, "network_error", msg);
+  }
+
+  let body: Envelope;
+  try {
+    body = (await res.json()) as Envelope;
+  } catch {
+    throw new ApiError(res.status, "bad_response", "服务端返回了无法解析的响应");
+  }
+
+  if (!res.ok || body.error) {
+    throw new ApiError(
+      res.status,
+      body.error?.code ?? "unknown",
+      body.error?.message ?? `请求失败（${res.status}）`
+    );
+  }
+  return body.data as T;
+}
+
+/** POST /api/v1/auth/login — exchanges user/password for a JWT. */
+export function login(username: string, password: string): Promise<LoginResult> {
+  return request<LoginResult>("/auth/login", {
+    method: "POST",
+    body: JSON.stringify({ username, password }),
+  });
+}
+
+/** GET /api/v1/health — liveness probe. */
+export function health(): Promise<{ status: string }> {
+  return request<{ status: string }>("/health");
+}
+
+/** POST /api/v1/chat — one synchronous agent turn. */
+export function chatSync(
+  sessionId: string,
+  text: string
+): Promise<ChatSyncResult> {
+  return request<ChatSyncResult>("/chat", {
+    method: "POST",
+    body: JSON.stringify({ sessionId, text }),
+  });
+}
+
+/** POST /api/v1/chat with stream:true — triggers streaming over the WS channel. */
+export function chatStream(sessionId: string, text: string): Promise<{ stream: true }> {
+  return request<{ stream: true }>("/chat", {
+    method: "POST",
+    body: JSON.stringify({ sessionId, text, stream: true }),
+  });
+}
+
+/** GET /api/v1/sessions — known channel sessions. */
+export function fetchSessions(): Promise<SessionRecord[]> {
+  return request<SessionRecord[]>("/sessions");
+}
+
+/** GET /api/v1/personas — persona summaries. */
+export function fetchPersonas(): Promise<PersonaRecord[]> {
+  return request<PersonaRecord[]>("/personas");
+}