refactor(util): move response helper to common/response and session logic to oauth

- Relocated generic HTTP response helpers (Response, OK, Err, etc.) from internal/util/ to a dedicated internal/common/response/ package.
- Renamed ResponseAny to Any to resolve revive stuttering warnings.
- Moved session building options and cookie headers logic from internal/util/ to internal/apps/oauth/.
- Removed all direct imports of Gin/Sessions/HTTP frameworks from internal/util/ to keep general utilities 100% pure.
- Regenerated Swagger API documentation via make swagger.
- All tests and make code-check compile and pass with 0 issues.

internal/apps/cap/middleware.go

@@ -3,13 +3,12 @@
 
 package cap
 
-import (
-	"net/http"
+import ("net/http"
 
-	"github.com/Rain-kl/Wavelet/internal/util"
 	caputil "github.com/Rain-kl/Wavelet/internal/service/cap"
 	"github.com/gin-gonic/gin"
-)
+
+	"github.com/Rain-kl/Wavelet/internal/common/response")
 
 // VerifyMiddleware returns a Gin middleware that checks and consumes the X-Cap-Token header.
 // enabledFunc is an optional callback allowing dynamic check of whether captcha protection is turned on.
@@ -22,13 +21,13 @@ func VerifyMiddleware(mgr *caputil.Manager, scope string, enabledFunc func() boo
 
 		token := c.GetHeader("X-Cap-Token")
 		if token == "" {
-			c.AbortWithStatusJSON(http.StatusUnauthorized, util.Err(errCapTokenMissing))
+			c.AbortWithStatusJSON(http.StatusUnauthorized, response.Err(errCapTokenMissing))
 			return
 		}
 
 		valid, err := mgr.VerifyToken(c.Request.Context(), token, scope)
 		if err != nil || !valid {
-			c.AbortWithStatusJSON(http.StatusUnauthorized, util.Err(errCapTokenInvalidOrExpired))
+			c.AbortWithStatusJSON(http.StatusUnauthorized, response.Err(errCapTokenInvalidOrExpired))
 			return
 		}
 

internal/apps/cap/routers.go

@@ -28,7 +28,7 @@ type redeemRequest struct {
 // @Produce json
 // @Param request body challengeRequest false "可选范围限制参数"
 // @Success 200 {object} cap.ChallengeResponse "成功返回 PoW 难题"
-// @Failure 500 {object} cap.RedeemResponse "内部服务错误"
+// @Failure 500 {object} capService.RedeemResponse "内部服务错误"
 // @Router /api/cap/challenge [post]
 func Challenge(c *gin.Context) {
 	var req challengeRequest
@@ -58,9 +58,9 @@ func Challenge(c *gin.Context) {
 // @Accept json
 // @Produce json
 // @Param request body redeemRequest true "难题 Token 与解答 solutions 数组"
-// @Success 200 {object} cap.RedeemResponse "核销成功，返回 X-Cap-Token"
-// @Failure 400 {object} cap.RedeemResponse "参数错误或核销失败"
-// @Failure 500 {object} cap.RedeemResponse "内部服务错误"
+// @Success 200 {object} capService.RedeemResponse "核销成功，返回 X-Cap-Token"
+// @Failure 400 {object} capService.RedeemResponse "参数错误或核销失败"
+// @Failure 500 {object} capService.RedeemResponse "内部服务错误"
 // @Router /api/cap/redeem [post]
 func Redeem(c *gin.Context) {
 	var req redeemRequest

internal/apps/cap/routers_test.go

@@ -3,8 +3,7 @@
 
 package cap
 
-import (
-	"bytes"
+import ("bytes"
 	"context"
 	"encoding/json"
 	"net/http"
@@ -14,11 +13,11 @@ import (
 	"github.com/Rain-kl/Wavelet/internal/db"
 	"github.com/Rain-kl/Wavelet/internal/model"
 	"github.com/Rain-kl/Wavelet/internal/testhelper"
-	"github.com/Rain-kl/Wavelet/internal/util"
 	capUtil "github.com/Rain-kl/Wavelet/internal/service/cap"
 	pkgcap "github.com/Rain-kl/Wavelet/pkg/cap"
 	"github.com/gin-gonic/gin"
-)
+
+	"github.com/Rain-kl/Wavelet/internal/common/response")
 
 func TestCapEndpointsAndMiddleware(t *testing.T) {
 	sqliteDB, _, cleanup := testhelper.SetupTestEnvironment(t)
@@ -42,7 +41,7 @@ func TestCapEndpointsAndMiddleware(t *testing.T) {
 		}
 		return enabled
 	}), func(c *gin.Context) {
-		c.JSON(http.StatusOK, util.OK("login success"))
+		c.JSON(http.StatusOK, response.OK("login success"))
 	})
 
 	// 1. Test challenge generation