refactor: 移除前端 Mock API，新增共享组件，优化认证流程

- 删除 mock_api_client、mock_calendar_service、mock_history_service
- 新增 fixed_length_code_input、link_button、message_composer 共享组件
- 优化登录/注册/密码重置页面使用新组件
- 简化 injection.dart 移除 mock 分支
- 更新 env.dart 配置（BACKEND_URL 替换 API_URL）
- 后端 agentscope 工具和测试更新
- 重构 AGENTS.md 文档结构
- 新增 deploy/ 目录和 protocol 文档

backend/tests/unit/v1/auth/test_auth_models.py

@@ -28,6 +28,17 @@ def test_signup_requires_username() -> None:
         )
 
 
+def test_signup_allows_any_invite_code_input() -> None:
+    request = VerificationCreateRequest(
+        username="demo",
+        email="user@example.com",
+        password="secret123",
+        invite_code="abc123",
+    )
+
+    assert request.invite_code == "abc123"
+
+
 def test_signup_verify_requires_six_digit_token() -> None:
     with pytest.raises(ValidationError):
         VerificationVerifyRequest(email="user@example.com", token="abc123")

backend/tests/unit/v1/auth/test_auth_service.py

@@ -22,10 +22,12 @@ from v1.auth.service import AuthService, AuthServiceGateway
 class FakeGateway(AuthServiceGateway):
     def __init__(self, response: SessionResponse) -> None:
         self._response = response
+        self.last_create_verification_request: VerificationCreateRequest | None = None
 
     async def create_verification(
         self, request: VerificationCreateRequest
     ) -> VerificationCreateResponse:
+        self.last_create_verification_request = request
         return VerificationCreateResponse(email=request.email)
 
     async def verify_verification(
@@ -121,6 +123,58 @@ async def test_signup_resend_returns_none() -> None:
     assert result is None
 
 
+@pytest.mark.asyncio
+async def test_create_verification_ignores_invalid_invite_code() -> None:
+    user = AuthUser(id="user-1", email="user@example.com")
+    token_response = SessionResponse(
+        access_token="access",
+        refresh_token="refresh",
+        expires_in=3600,
+        token_type="bearer",
+        user=user,
+    )
+    gateway = FakeGateway(token_response)
+    service = AuthService(gateway=gateway)
+
+    await service.create_verification(
+        VerificationCreateRequest(
+            username="demo",
+            email="user@example.com",
+            password="secret123",
+            invite_code="bad-code",
+        )
+    )
+
+    assert gateway.last_create_verification_request is not None
+    assert gateway.last_create_verification_request.invite_code is None
+
+
+@pytest.mark.asyncio
+async def test_create_verification_normalizes_valid_invite_code() -> None:
+    user = AuthUser(id="user-1", email="user@example.com")
+    token_response = SessionResponse(
+        access_token="access",
+        refresh_token="refresh",
+        expires_in=3600,
+        token_type="bearer",
+        user=user,
+    )
+    gateway = FakeGateway(token_response)
+    service = AuthService(gateway=gateway)
+
+    await service.create_verification(
+        VerificationCreateRequest(
+            username="demo",
+            email="user@example.com",
+            password="secret123",
+            invite_code="a2b3",
+        )
+    )
+
+    assert gateway.last_create_verification_request is not None
+    assert gateway.last_create_verification_request.invite_code == "A2B3"
+
+
 @pytest.mark.asyncio
 async def test_supabase_signup_passes_username_in_metadata(
     monkeypatch: pytest.MonkeyPatch,