Merge branch 'dev' into happi/dev/database-update

# Conflicts:
#	apps/im_app/lib/data/models/user_dto.dart
#	apps/im_app/lib/data/remote/login_request.dart
#	apps/im_app/lib/features/chat/presentation/chat_db_test_view_model.dart
#	apps/im_app/lib/features/chat/view/chat_db_test_page.dart
#	apps/im_app/lib/features/login/presentation/login_view_model.dart

apps/im_app/lib/features/login/presentation/login_view_model.dart

@@ -1,10 +1,10 @@
 import 'dart:convert';
 
 import 'package:flutter/services.dart';
-import 'package:im_app/app/di/user_provider.dart';
-import 'package:im_app/data/remote/login_request.dart';
-import 'package:networks_sdk/networks_sdk.dart';
 import 'package:im_app/app/di/db_provider.dart';
+import 'package:im_app/app/di/user_provider.dart';
+import 'package:im_app/domain/entities/user.dart';
+import 'package:networks_sdk/networks_sdk.dart';
 import 'package:riverpod_annotation/riverpod_annotation.dart';
 import 'package:storage_sdk/storage_sdk.dart';
 
@@ -33,7 +33,7 @@ part 'login_view_model.g.dart';
 /// loginViewModelProvider                    ← @riverpod 自动生成（本文件）
 ///   → ref.read(loginUseCaseProvider)       ← di/ 手动装配
 ///     → ref.read(authRepositoryProvider)   ← di/ 手动装配
-///       → ref.read(apiClientProvider)      ← app/di/ 手动装配
+///       → ref.read(networkSdkApiProvider)  ← app/di/ 手动装配
 /// ```
 ///
 /// ## 数据流位置
@@ -44,7 +44,7 @@ part 'login_view_model.g.dart';
 ///     → LoginUseCase.execute()                     ← 格式校验 + 调 Repository
 ///       → AuthRepository.login()
 ///         → _client.executeRequest(LoginRequest)
-///       ← LoginData → User
+///       ← LoginResponse → User
 ///     ← User
 ///   → state = state.copyWith(user: user)           ← 更新状态
 /// View: ref.watch → 自动 rebuild                    ← UI 刷新
@@ -59,27 +59,52 @@ class LoginViewModel extends _$LoginViewModel {
   /// 仅用于演示路由守卫行为，正式 UI 就绪后删除此方法，改用 [login]。
   /// 正式 [login] 成功后同样需要调用 [AuthNotifier.login] 更新守卫状态。
   Future<void> demoLogin() async {
+    // 防止连点重入：第一次调用未完成前忽略后续调用
+    if (state.isLoading) return;
+    state = state.copyWith(isLoading: true, error: null);
     final storageApi = ref.read(storageSdkProvider);
     final storageLifeCycle = storageApi as StorageSdkLifecycle;
     final repositoryProvider = ref.read(userRepositoryProvider);
     final provider = ref.read(authNotifierProvider);
 
-    // Read mock response from assets
-    final String raw = await rootBundle.loadString('assets/loginData.json');
-    final Map<String, dynamic> json = jsonDecode(raw);
+    try {
+      // 读取 mock 数据（loginData.json 结构: { code, message, data: {...} }）
+      // 手动拆包 data 字段，对应 SDK 内部 ApiResponseWrapper 的行为
+      final raw = await rootBundle.loadString('assets/loginData.json');
+      final json = jsonDecode(raw) as Map<String, dynamic>;
+      final data = json['data'] as Map<String, dynamic>;
+      final profile = data['profile'] as Map<String, dynamic>;
+      // 生成器生成的 _$XFromJson 是 library 私有函数，外部不可调用。
+      // Demo 场景直接从 JSON 字段构建 User，不依赖生成的 fromJson。
+      final user = User(
+        uid: profile['uid'] as int,
+        uuid: profile['uuid'] as String,
+        lastOnline: profile['last_online'] as int,
+        profilePic: profile['profile_pic'] as String,
+        profilePicGaussian: profile['profile_pic_gaussian'] as String,
+        nickname: profile['nickname'] as String,
+        contact: profile['contact'] as String,
+        countryCode: profile['country_code'] as String,
+        email: profile['email'] as String,
+        recoveryEmail: profile['recovery_email'] as String,
+        username: profile['username'] as String,
+        bio: profile['bio'] as String,
+        relationship: profile['relationship'] as int,
+        userAlias: profile['user_alias'] as String?,
+        hint: profile['hint'] as String,
+      );
 
-    // Parse → Domain User directly
-    final loginResponse = LoginResponse.fromJson(json);
-    final user = loginResponse.data.toEntity();
+      // 先完成 DB 操作，再标记登录状态（失败时不会误标为已登录）
+      await storageLifeCycle.openDatabase(user.uid);
+      // Save user to DB via repository
+      await repositoryProvider.saveUser(user);
 
-    // Open database for the user
-    await storageLifeCycle.openDatabase(user.uid);
-
-    // Save user to DB via repository
-    await repositoryProvider.saveUser(user);
-
-    // Trigger auth state
-    provider.login();
+      // Trigger auth state
+      provider.login();
+    } catch (e) {
+      // 导航已发生时 provider 已被 dispose，静默丢弃，不再写 state
+      state = state.copyWith(error: e.toString(), isLoading: false);
+    }
   }
 
   /// 执行登录
@@ -89,12 +114,10 @@ class LoginViewModel extends _$LoginViewModel {
   /// 3. 成功：写入 user；失败：写入 error
   Future<void> login(String email, String password) async {
     state = state.copyWith(isLoading: true, error: null);
+    final provider = ref.read(loginUseCaseProvider);
 
     try {
-      final user = await ref
-          .read(loginUseCaseProvider)
-          .execute(email: email, password: password);
-
+      final user = await provider.execute(email: email, password: password);
       state = state.copyWith(user: user, isLoading: false);
     } on FormatException catch (e) {
       // 格式校验失败（UseCase 层抛出）