diff --git a/app/service/auth_service.py b/app/service/auth_service.py
index eb55026..7fcf9d7 100644
--- a/app/service/auth_service.py
+++ b/app/service/auth_service.py
@@ -46,6 +46,7 @@ def _build_access_token(self, user: User) -> tuple[str, int]:
             "iat": int(now.timestamp()),
             "exp": int(expire_at.timestamp()),
             "type": "access",
+            "is_admin": bool(user.is_admin),
         }
         token = jwt.encode(payload, self._settings.jwt_secret_key, algorithm=self._settings.jwt_algorithm)
         return token, int(expire_delta.total_seconds())
@@ -60,6 +61,7 @@ def _build_refresh_token(self, user: User) -> str:
             "iat": int(now.timestamp()),
             "exp": int(expire_at.timestamp()),
             "type": "refresh",
+            "is_admin": bool(user.is_admin),
         }
         return jwt.encode(payload, self._settings.jwt_secret_key, algorithm=self._settings.jwt_algorithm)
 
diff --git a/app/web/__init__.py b/app/web/__init__.py
index 7b239d1..1c8dc36 100644
--- a/app/web/__init__.py
+++ b/app/web/__init__.py
@@ -68,12 +68,14 @@ def custom_template_response(request, name: str, context: dict = None, *args, **
             payload = jwt.decode(token, settings.jwt_secret_key, algorithms=[settings.jwt_algorithm])
             email = payload.get("email")
             user_id = payload.get("sub")
+            is_admin = payload.get("is_admin", False)
             if email and user_id:
                 class SimpleUser:
-                    def __init__(self, uid, email):
+                    def __init__(self, uid, email, is_admin):
                         self.id = uid
                         self.email = email
-                context["current_user"] = SimpleUser(int(user_id), email)
+                        self.is_admin = is_admin
+                context["current_user"] = SimpleUser(int(user_id), email, is_admin)
                 context["user_id"] = int(user_id)
         except Exception:
             pass
@@ -103,6 +105,7 @@ def register_web_routes(app):
     from app.web.routes.repository import router as repository_router
     from app.web.routes.status import router as status_router
     from app.web.routes.features import router as features_router
+    from app.web.routes.admin import router as admin_router
 
     @app.get("/")
     async def root(request: Request):
@@ -123,3 +126,4 @@ async def root(request: Request):
     app.include_router(repository_router)
     app.include_router(status_router)
     app.include_router(features_router)
+    app.include_router(admin_router)
diff --git a/app/web/dependencies.py b/app/web/dependencies.py
index a880dd9..89c0bf9 100644
--- a/app/web/dependencies.py
+++ b/app/web/dependencies.py
@@ -1,6 +1,9 @@
 from fastapi import Depends, HTTPException, status, Request
 from fastapi.responses import RedirectResponse
 import jwt
+from sqlalchemy.ext.asyncio import AsyncSession
+from app.api.deps import get_db_session
+from app.models.user import User
 from app.config import get_settings
 from app.common.exceptions import DemoRestrictionError
 
@@ -28,3 +31,26 @@ async def get_current_user_from_cookie(request: Request) -> int:
     except Exception:
         raise HTTPException(status_code=303, headers={"Location": "/web/login"})
 
+
+async def get_current_admin_from_cookie(
+    request: Request,
+    db_session: AsyncSession = Depends(get_db_session)
+) -> User:
+    token = request.cookies.get("web_token")
+    if not token:
+        raise HTTPException(status_code=303, headers={"Location": "/web/login"})
+    try:
+        settings = get_settings()
+        payload = jwt.decode(token, settings.jwt_secret_key, algorithms=["HS256"])
+        user_id = int(payload["sub"])
+        user = await db_session.get(User, user_id)
+        if not user or not user.is_active:
+            raise HTTPException(status_code=303, headers={"Location": "/web/login"})
+        if not user.is_admin:
+            raise HTTPException(status_code=303, headers={"Location": "/web/dashboard"})
+        return user
+    except HTTPException:
+        raise
+    except Exception:
+        raise HTTPException(status_code=303, headers={"Location": "/web/login"})
+
diff --git a/app/web/routes/accounts.py b/app/web/routes/accounts.py
index ea3f483..6ad64b1 100644
--- a/app/web/routes/accounts.py
+++ b/app/web/routes/accounts.py
@@ -1,7 +1,7 @@
 import logging
 from fastapi import APIRouter, Depends, Form, Request, HTTPException
 from fastapi.responses import HTMLResponse, RedirectResponse, Response
-from sqlalchemy import select
+from sqlalchemy import select, func
 from sqlalchemy.ext.asyncio import AsyncSession
 
 from app.api.deps import get_db_session, get_telegram_service
@@ -30,6 +30,22 @@ async def list_accounts(
     })
 
 
+async def _auto_assign_proxy(db_session: AsyncSession) -> int:
+    """自动分配一个使用最少的、活跃的代理 IP ID。"""
+    stmt = (
+        select(ProxyInfo.id)
+        .where(ProxyInfo.is_active == True)
+        .outerjoin(TelegramAccount, (ProxyInfo.id == TelegramAccount.proxy_id) & (TelegramAccount.is_active == True))
+        .group_by(ProxyInfo.id)
+        .order_by(func.count(TelegramAccount.id).asc())
+        .limit(1)
+    )
+    result = await db_session.scalar(stmt)
+    if result is None:
+        raise ValueError("系统暂无可用代理 IP，请联系管理员配置。")
+    return result
+
+
 @router.get("/accounts/new", response_class=HTMLResponse)
 async def new_account_page(
     request: Request,
@@ -49,8 +65,20 @@ async def request_phone_code(
     proxy_id: str = Form(""),
     telegram_service: TelegramService = Depends(get_telegram_service),
     user_id: int = Depends(get_current_user_from_cookie),
+    db_session: AsyncSession = Depends(get_db_session),
 ):
-    pid = int(proxy_id) if proxy_id and proxy_id.strip() else None
+    try:
+        pid = await _auto_assign_proxy(db_session)
+    except ValueError as e:
+        return HTMLResponse(f"""
+            <div class="bg-red-50 border-l-4 border-red-400 p-4 mb-4">
+                <p class="text-sm text-red-700">错误: {str(e)}</p>
+            </div>
+            <button onclick="window.location.reload()" class="w-full flex justify-center py-2 px-4 border border-transparent rounded-md shadow-sm text-sm font-medium text-white bg-gray-600 hover:bg-gray-700">
+                重新开始
+            </button>
+        """)
+            
     try:
         res = await telegram_service.RequestPhoneLoginCode(phone_number, proxy_id=pid)
         account_id = res["account_id"]
@@ -160,8 +188,20 @@ async def login_with_session(
     proxy_id: str = Form(""),
     telegram_service: TelegramService = Depends(get_telegram_service),
     user_id: int = Depends(get_current_user_from_cookie),
+    db_session: AsyncSession = Depends(get_db_session),
 ):
-    pid = int(proxy_id) if proxy_id and proxy_id.strip() else None
+    try:
+        pid = await _auto_assign_proxy(db_session)
+    except ValueError as e:
+        return HTMLResponse(f"""
+            <div class="bg-red-50 border-l-4 border-red-400 p-4 mb-4">
+                <p class="text-sm text-red-700">导入失败: {str(e)}</p>
+            </div>
+            <button onclick="window.location.reload()" class="w-full flex justify-center py-2 px-4 border border-transparent rounded-md shadow-sm text-sm font-medium text-white bg-gray-600 hover:bg-gray-700">
+                重新开始
+            </button>
+        """)
+            
     try:
         await telegram_service.CreateAccountWithSessionLogin(phone_number, session_string, proxy_id=pid)
         response = Response()
diff --git a/app/web/routes/admin.py b/app/web/routes/admin.py
new file mode 100644
index 0000000..b989300
--- /dev/null
+++ b/app/web/routes/admin.py
@@ -0,0 +1,441 @@
+import logging
+import uuid
+from fastapi import APIRouter, Depends, Form, Request, HTTPException
+from fastapi.responses import HTMLResponse, RedirectResponse, Response
+from sqlalchemy import select, func, case, update
+from sqlalchemy.ext.asyncio import AsyncSession
+
+from app.api.deps import get_db_session
+from app.models.user import User
+from app.models.account import TelegramAccount, ProxyInfo
+from app.models.task import ScheduledMessageTask
+from app.models.message import TelegramMessage
+from app.web import templates
+from app.web.dependencies import get_current_user_from_cookie, get_current_admin_from_cookie
+
+logger = logging.getLogger(__name__)
+
+router = APIRouter(prefix="/web", tags=["web-admin"])
+
+
+@router.get("/select-role", response_class=HTMLResponse)
+async def select_role_page(
+    request: Request,
+    user_id: int = Depends(get_current_user_from_cookie),
+    db_session: AsyncSession = Depends(get_db_session)
+):
+    """管理员登录后的角色选择页面。"""
+    user = await db_session.get(User, user_id)
+    if not user or not user.is_active:
+        raise HTTPException(status_code=303, headers={"Location": "/web/login"})
+    if not user.is_admin:
+        # 非管理员直接进入前台
+        return RedirectResponse(url="/web/dashboard", status_code=303)
+        
+    return templates.TemplateResponse(request, "admin/select_role.html", {
+        "user": user
+    })
+
+
+# 以下所有路由均需要管理员权限
+@router.get("/admin/dashboard", response_class=HTMLResponse)
+async def admin_dashboard(
+    request: Request,
+    admin: User = Depends(get_current_admin_from_cookie),
+    db_session: AsyncSession = Depends(get_db_session)
+):
+    """管理员仪表盘。"""
+    # 统计各项系统全局数据
+    total_users = await db_session.scalar(select(func.count(User.id)))
+    active_users = await db_session.scalar(select(func.count(User.id)).where(User.is_active == True))
+    
+    total_accounts = await db_session.scalar(select(func.count(TelegramAccount.id)))
+    online_accounts = await db_session.scalar(select(func.count(TelegramAccount.id)).where(TelegramAccount.is_online == True))
+    
+    total_proxies = await db_session.scalar(select(func.count(ProxyInfo.id)))
+    active_proxies = await db_session.scalar(select(func.count(ProxyInfo.id)).where(ProxyInfo.is_active == True))
+    
+    total_tasks = await db_session.scalar(select(func.count(ScheduledMessageTask.id)))
+    
+    # 统计今日发送的消息总数
+    from datetime import datetime, time, timezone
+    utc_now = datetime.now(timezone.utc).replace(tzinfo=None)
+    today_start = datetime.combine(utc_now.date(), time.min)
+    today_messages = await db_session.scalar(
+        select(func.count(TelegramMessage.id)).where(TelegramMessage.created_at >= today_start)
+    )
+
+    return templates.TemplateResponse(request, "admin/dashboard.html", {
+        "admin": admin,
+        "total_users": total_users or 0,
+        "active_users": active_users or 0,
+        "total_accounts": total_accounts or 0,
+        "online_accounts": online_accounts or 0,
+        "total_proxies": total_proxies or 0,
+        "active_proxies": active_proxies or 0,
+        "total_tasks": total_tasks or 0,
+        "today_messages": today_messages or 0,
+    })
+
+
+@router.get("/admin/users", response_class=HTMLResponse)
+async def admin_users(
+    request: Request,
+    admin: User = Depends(get_current_admin_from_cookie),
+    db_session: AsyncSession = Depends(get_db_session)
+):
+    """用户管理列表页。"""
+    users = (await db_session.scalars(select(User).order_by(User.id.desc()))).all()
+    return templates.TemplateResponse(request, "admin/users.html", {
+        "admin": admin,
+        "users": users
+    })
+
+
+@router.post("/admin/users/{user_id}/toggle-active")
+async def toggle_user_active(
+    user_id: int,
+    admin: User = Depends(get_current_admin_from_cookie),
+    db_session: AsyncSession = Depends(get_db_session)
+):
+    """启用/禁用用户（软删除）。"""
+    if user_id == admin.id:
+        raise HTTPException(status_code=400, detail="不能禁用自己")
+        
+    user = await db_session.get(User, user_id)
+    if not user:
+        raise HTTPException(status_code=404, detail="用户不存在")
+        
+    user.is_active = not user.is_active
+    await db_session.commit()
+    
+    label = "● 正常" if user.is_active else "○ 已禁用"
+    color_class = "text-green-600 font-bold" if user.is_active else "text-red-500 font-bold"
+    
+    return HTMLResponse(f"""
+        <button hx-post="/web/admin/users/{user_id}/toggle-active"
+                hx-target="this"
+                hx-swap="outerHTML"
+                class="inline-flex items-center px-2.5 py-1.5 border border-gray-300 shadow-sm text-xs font-medium rounded text-gray-700 bg-white hover:bg-gray-50">
+            <span class="{color_class}">{label}</span>
+        </button>
+    """)
+
+
+@router.post("/admin/users/{user_id}/toggle-admin")
+async def toggle_user_admin(
+    user_id: int,
+    admin: User = Depends(get_current_admin_from_cookie),
+    db_session: AsyncSession = Depends(get_db_session)
+):
+    """设为/取消管理员。"""
+    if user_id == admin.id:
+        raise HTTPException(status_code=400, detail="不能修改自己的管理员权限")
+        
+    user = await db_session.get(User, user_id)
+    if not user:
+        raise HTTPException(status_code=404, detail="用户不存在")
+        
+    user.is_admin = not user.is_admin
+    await db_session.commit()
+    
+    label = "管理员" if user.is_admin else "普通用户"
+    color_class = "text-indigo-600 font-bold" if user.is_admin else "text-gray-500"
+    
+    return HTMLResponse(f"""
+        <button hx-post="/web/admin/users/{user_id}/toggle-admin"
+                hx-target="this"
+                hx-swap="outerHTML"
+                class="inline-flex items-center px-2.5 py-1.5 border border-gray-300 shadow-sm text-xs font-medium rounded text-gray-700 bg-white hover:bg-gray-50">
+            <span class="{color_class}">{label}</span>
+        </button>
+    """)
+
+
+@router.post("/admin/users/{user_id}/reset-api-key")
+async def reset_user_api_key(
+    user_id: int,
+    admin: User = Depends(get_current_admin_from_cookie),
+    db_session: AsyncSession = Depends(get_db_session)
+):
+    """重置 API key。"""
+    user = await db_session.get(User, user_id)
+    if not user:
+        raise HTTPException(status_code=404, detail="用户不存在")
+        
+    user.api_key = uuid.uuid4().hex
+    await db_session.commit()
+    
+    masked_key = f"{user.api_key[:8]}••••••••••••••••"
+    return HTMLResponse(f"""
+        <div id="api-key-{user_id}" class="flex items-center gap-1.5 justify-center">
+            <span class="api-key-text font-mono text-xs text-slate-600 bg-slate-100 px-2 py-1 rounded select-all cursor-pointer" 
+                  onclick="var self=this; if(self.dataset.masked==='1'){{ self.textContent=self.dataset.full; self.dataset.masked='0'; }} else {{ self.textContent=self.dataset.masked_val; self.dataset.masked='1'; }}"
+                  data-masked="1"
+                  data-full="{user.api_key}"
+                  data-masked_val="{masked_key}"
+                  title="点击显示/隐藏">
+                {masked_key}
+            </span>
+            <button hx-post="/web/admin/users/{user_id}/reset-api-key"
+                    hx-target="#api-key-{user_id}"
+                    hx-swap="outerHTML"
+                    hx-confirm="确定要重置此用户 ({user.email}) 的 API Key 吗？"
+                    class="text-indigo-600 hover:text-indigo-900 text-xs font-semibold">
+                重置
+            </button>
+        </div>
+    """)
+
+
+@router.get("/admin/proxies", response_class=HTMLResponse)
+async def admin_proxies(
+    request: Request,
+    admin: User = Depends(get_current_admin_from_cookie),
+    db_session: AsyncSession = Depends(get_db_session)
+):
+    """代理 IP 列表页。"""
+    stmt = (
+        select(
+            ProxyInfo,
+            func.count(TelegramAccount.id).label("account_count")
+        )
+        .outerjoin(TelegramAccount, (ProxyInfo.id == TelegramAccount.proxy_id) & (TelegramAccount.is_active == True))
+        .group_by(ProxyInfo.id)
+        .order_by(ProxyInfo.id.desc())
+    )
+    results = (await db_session.execute(stmt)).all()
+    
+    proxies_data = []
+    for row in results:
+        p = row[0]
+        count = row[1]
+        proxies_data.append({
+            "id": p.id,
+            "proxy_host": p.proxy_host,
+            "proxy_port": p.proxy_port,
+            "username": p.username,
+            "password": p.password,
+            "proxy_type": p.proxy_type,
+            "is_active": p.is_active,
+            "account_count": count
+        })
+        
+    return templates.TemplateResponse(request, "admin/proxies.html", {
+        "admin": admin,
+        "proxies": proxies_data
+    })
+
+
+@router.post("/admin/proxies/add")
+async def add_proxy(
+    request: Request,
+    host: str = Form(...),
+    port: int = Form(...),
+    username: str = Form(None),
+    password: str = Form(None),
+    proxy_type: str = Form("socks5"),
+    admin: User = Depends(get_current_admin_from_cookie),
+    db_session: AsyncSession = Depends(get_db_session)
+):
+    """添加单个代理。"""
+    username = username.strip() if username else None
+    password = password.strip() if password else None
+    
+    proxy = ProxyInfo(
+        proxy_host=host.strip(),
+        proxy_port=port,
+        username=username,
+        password=password,
+        proxy_type=proxy_type,
+        is_active=True
+    )
+    db_session.add(proxy)
+    await db_session.commit()
+    
+    return RedirectResponse("/web/admin/proxies", status_code=303)
+
+
+def _parse_proxy_line(line: str) -> dict | None:
+    line = line.strip()
+    if not line:
+        return None
+        
+    # 尝试解析 protocol://user:pass@host:port
+    if "://" in line:
+        try:
+            from urllib.parse import urlparse
+            parsed = urlparse(line)
+            proxy_type = parsed.scheme.lower()
+            if proxy_type not in ("socks5", "socks4", "http"):
+                proxy_type = "socks5"
+            host = parsed.hostname
+            port = parsed.port
+            username = parsed.username
+            password = parsed.password
+            if host and port:
+                return {
+                    "proxy_host": host,
+                    "proxy_port": int(port),
+                    "username": username,
+                    "password": password,
+                    "proxy_type": proxy_type
+                }
+        except Exception as exc:
+            logger.debug(f"Failed parsing proxy with schema parser: {exc}", exc_info=True)
+            
+    # 支持 IPv6: 例如 [2001:db8::1]:1080 或 [2001:db8::1]:1080:user:pass
+    if line.startswith("["):
+        idx_close = line.find("]")
+        if idx_close != -1:
+            host = line[1:idx_close]
+            rest = line[idx_close+1:]
+            if rest.startswith(":"):
+                parts = rest[1:].split(":")
+                if len(parts) >= 1:
+                    try:
+                        port = int(parts[0].strip())
+                        username = parts[1].strip() if len(parts) >= 2 else None
+                        password = parts[2].strip() if len(parts) >= 3 else None
+                        return {
+                            "proxy_host": host,
+                            "proxy_port": port,
+                            "username": username,
+                            "password": password,
+                            "proxy_type": "socks5"
+                        }
+                    except ValueError as exc:
+                        logger.debug(f"Failed parsing IPv6 port: {exc}", exc_info=True)
+                        return None
+        return None
+
+    # 尝试按冒号切分 host:port:user:pass 或 host:port (IPv4 或域名)
+    parts = line.split(":")
+    if len(parts) >= 2:
+        host = parts[0].strip()
+        try:
+            port = int(parts[1].strip())
+        except ValueError as exc:
+            logger.debug(f"Failed parsing port from non-IPv6 line: {exc}", exc_info=True)
+            return None
+        
+        username = None
+        password = None
+        if len(parts) == 4:
+            username = parts[2].strip()
+            password = parts[3].strip()
+            
+        return {
+            "proxy_host": host,
+            "proxy_port": port,
+            "username": username,
+            "password": password,
+            "proxy_type": "socks5"
+        }
+    return None
+
+
+@router.post("/admin/proxies/import")
+async def import_proxies(
+    request: Request,
+    text_content: str = Form(...),
+    admin: User = Depends(get_current_admin_from_cookie),
+    db_session: AsyncSession = Depends(get_db_session)
+):
+    """批量导入代理。"""
+    lines = text_content.strip().splitlines()
+    success_count = 0
+    
+    for line in lines:
+        parsed = _parse_proxy_line(line)
+        if parsed:
+            proxy = ProxyInfo(
+                proxy_host=parsed["proxy_host"],
+                proxy_port=parsed["proxy_port"],
+                username=parsed["username"],
+                password=parsed["password"],
+                proxy_type=parsed["proxy_type"],
+                is_active=True
+            )
+            db_session.add(proxy)
+            success_count += 1
+            
+    if success_count > 0:
+        await db_session.commit()
+        
+    from urllib.parse import quote
+    response = RedirectResponse("/web/admin/proxies", status_code=303)
+    response.set_cookie("flash_success", quote(f"成功批量导入 {success_count} 个代理 IP！"), max_age=10)
+    return response
+
+
+@router.post("/admin/proxies/{proxy_id}/toggle-active")
+async def toggle_proxy_active(
+    proxy_id: int,
+    admin: User = Depends(get_current_admin_from_cookie),
+    db_session: AsyncSession = Depends(get_db_session)
+):
+    """启用/禁用代理。"""
+    proxy = await db_session.get(ProxyInfo, proxy_id)
+    if not proxy:
+        raise HTTPException(status_code=404, detail="代理不存在")
+        
+    proxy.is_active = not proxy.is_active
+    await db_session.commit()
+    
+    label = "● 启用" if proxy.is_active else "○ 禁用"
+    color_class = "text-green-600 font-bold" if proxy.is_active else "text-red-500 font-bold"
+    
+    return HTMLResponse(f"""
+        <button hx-post="/web/admin/proxies/{proxy_id}/toggle-active"
+                hx-target="this"
+                hx-swap="outerHTML"
+                class="inline-flex items-center px-2 py-1 border border-gray-300 shadow-sm text-xs font-medium rounded text-gray-700 bg-white hover:bg-gray-50">
+            <span class="{color_class}">{label}</span>
+        </button>
+    """)
+
+
+@router.post("/admin/proxies/{proxy_id}/delete")
+async def delete_proxy(
+    proxy_id: int,
+    request: Request,
+    admin: User = Depends(get_current_admin_from_cookie),
+    db_session: AsyncSession = Depends(get_db_session)
+):
+    """软删除单个代理。"""
+    proxy = await db_session.get(ProxyInfo, proxy_id)
+    if not proxy:
+        raise HTTPException(status_code=404, detail="代理不存在")
+        
+    # 软删除
+    proxy.is_active = False
+    await db_session.commit()
+    
+    if "HX-Request" in request.headers:
+        response = Response()
+        response.headers["HX-Redirect"] = "/web/admin/proxies"
+        return response
+    return RedirectResponse("/web/admin/proxies", status_code=303)
+
+
+@router.post("/admin/proxies/batch-delete")
+async def batch_delete_proxies(
+    request: Request,
+    admin: User = Depends(get_current_admin_from_cookie),
+    db_session: AsyncSession = Depends(get_db_session)
+):
+    """批量软删除选中的代理。"""
+    form_data = await request.form()
+    proxy_ids = [int(k.split("-")[1]) for k in form_data.keys() if k.startswith("proxy-")]
+    
+    if proxy_ids:
+        # 执行批量软删除：将 is_active 设为 False
+        stmt = update(ProxyInfo).where(ProxyInfo.id.in_(proxy_ids)).values(is_active=False)
+        await db_session.execute(stmt)
+        await db_session.commit()
+        
+    from urllib.parse import quote
+    response = RedirectResponse("/web/admin/proxies", status_code=303)
+    response.set_cookie("flash_success", quote(f"成功批量软删除 {len(proxy_ids)} 个代理 IP。"), max_age=10)
+    return response
diff --git a/app/web/routes/auth.py b/app/web/routes/auth.py
index 35a4d46..f255958 100644
--- a/app/web/routes/auth.py
+++ b/app/web/routes/auth.py
@@ -46,12 +46,19 @@ async def login(
     try:
         result = await auth_service.LoginUser(email=email, password=password)
         token = result["access_token"]
-        response = RedirectResponse(url="/web/dashboard", status_code=303)
+        
+        settings = get_settings()
+        payload = jwt.decode(token, settings.jwt_secret_key, algorithms=[settings.jwt_algorithm])
+        is_admin = payload.get("is_admin", False)
+        
+        redirect_url = "/web/select-role" if is_admin else "/web/dashboard"
+        response = RedirectResponse(url=redirect_url, status_code=303)
         response.set_cookie(
             "web_token",
             token,
             httponly=True,
             max_age=int(result["expires_in_seconds"]),
+            samesite="lax",
         )
         return response
     except Exception as e:
@@ -126,6 +133,7 @@ async def try_now(
             token,
             httponly=True,
             max_age=int(result["expires_in_seconds"]),
+            samesite="lax",
         )
         return response
     except RateLimitError as e:
diff --git a/templates/accounts/login_flow.html b/templates/accounts/login_flow.html
index d9866fe..2436a8f 100644
--- a/templates/accounts/login_flow.html
+++ b/templates/accounts/login_flow.html
@@ -35,16 +35,7 @@
                                    class="mt-1 block w-full border border-gray-300 rounded-md shadow-sm py-2 px-3 focus:outline-none focus:ring-indigo-500 focus:border-indigo-500 sm:text-sm">
                         </div>
 
-                        <div>
-                            <label for="proxy_id" class="block text-sm font-medium text-gray-700">网络代理 (可选)</label>
-                              <select name="proxy_id" id="proxy_id"
-                                     class="mt-1 block w-full bg-white rounded-md border-gray-300 shadow-sm px-3 py-1.5 border focus:outline-none focus:ring-indigo-500 focus:border-indigo-500 sm:text-sm">
-                                <option value="">直连 (不使用代理)</option>
-                                {% for proxy in proxies %}
-                                <option value="{{ proxy.id }}">{{ proxy.proxy_host }}:{{ proxy.proxy_port }}</option>
-                                {% endfor %}
-                            </select>
-                        </div>
+                        <input type="hidden" name="proxy_id" value="">
 
                         <div>
                             <button type="submit" class="w-full flex justify-center py-2 px-4 border border-transparent rounded-md shadow-sm text-sm font-medium text-white bg-indigo-600 hover:bg-indigo-700 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-indigo-500">
@@ -71,16 +62,7 @@
                                       class="mt-1 block w-full border border-gray-300 rounded-md shadow-sm py-2 px-3 focus:outline-none focus:ring-indigo-500 focus:border-indigo-500 sm:text-sm"></textarea>
                         </div>
 
-                        <div>
-                            <label for="proxy_id_session" class="block text-sm font-medium text-gray-700">网络代理 (可选)</label>
-                              <select name="proxy_id" id="proxy_id_session"
-                                     class="mt-1 block w-full bg-white rounded-md border-gray-300 shadow-sm px-3 py-1.5 border focus:outline-none focus:ring-indigo-500 focus:border-indigo-500 sm:text-sm">
-                                <option value="">直连 (不使用代理)</option>
-                                {% for proxy in proxies %}
-                                <option value="{{ proxy.id }}">{{ proxy.proxy_host }}:{{ proxy.proxy_port }}</option>
-                                {% endfor %}
-                            </select>
-                        </div>
+                        <input type="hidden" name="proxy_id" value="">
 
                         <div>
                             <button type="submit" class="w-full flex justify-center py-2 px-4 border border-transparent rounded-md shadow-sm text-sm font-medium text-white bg-indigo-600 hover:bg-indigo-700 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-indigo-500">
diff --git a/templates/admin/admin_base.html b/templates/admin/admin_base.html
new file mode 100644
index 0000000..201a97f
--- /dev/null
+++ b/templates/admin/admin_base.html
@@ -0,0 +1,150 @@
+<!DOCTYPE html>
+<html lang="zh-CN">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>{% block title %}管理后台 - {{ site_name }}{% endblock %}</title>
+    <meta name="theme-color" content="#6366f1">
+    <!-- Tailwind CSS -->
+    <script src="/static/js/tailwind.min.js"></script>
+    <!-- HTMX -->
+    <script src="/static/js/htmx.min.js"></script>
+    <!-- Custom CSS -->
+    <link rel="stylesheet" href="/static/css/app.css">
+    {% block extra_head %}{% endblock %}
+</head>
+<body class="bg-slate-50 text-slate-800 font-sans leading-normal tracking-normal min-h-screen flex flex-col">
+    <!-- Admin Navigation Bar -->
+    <nav class="bg-slate-900 text-white border-b border-slate-800 shadow-md">
+        <div class="max-w-7xl mx-auto px-4 sm:px-6 lg:px-8">
+            <div class="flex justify-between h-16">
+                <div class="flex">
+                    <div class="flex-shrink-0 flex items-center">
+                        <a href="/web/admin/dashboard" class="text-xl font-extrabold text-indigo-400 flex items-center gap-2 hover:opacity-90 transition duration-150">
+                            <svg class="w-6 h-6 text-indigo-400" fill="none" stroke="currentColor" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg">
+                                <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 15v2m-6 4h12a2 2 0 002-2v-6a2 2 0 00-2-2H6a2 2 0 00-2 2v6a2 2 0 002 2zm10-10V7a4 4 0 00-8 0v4h8z" />
+                            </svg>
+                            <span>系统管理后台</span>
+                        </a>
+                    </div>
+                    <div class="hidden lg:-my-px lg:ml-10 lg:flex lg:space-x-8">
+                        <a href="/web/admin/dashboard" class="inline-flex items-center px-1 pt-1 border-b-2 text-sm font-semibold transition-all {% if request.url.path == '/web/admin/dashboard' %}border-indigo-400 text-indigo-300{% else %}border-transparent text-slate-400 hover:text-white hover:border-slate-500{% endif %}">
+                            控制台仪表盘
+                        </a>
+                        <a href="/web/admin/users" class="inline-flex items-center px-1 pt-1 border-b-2 text-sm font-semibold transition-all {% if request.url.path == '/web/admin/users' %}border-indigo-400 text-indigo-300{% else %}border-transparent text-slate-400 hover:text-white hover:border-slate-500{% endif %}">
+                            用户管理
+                        </a>
+                        <a href="/web/admin/proxies" class="inline-flex items-center px-1 pt-1 border-b-2 text-sm font-semibold transition-all {% if request.url.path == '/web/admin/proxies' %}border-indigo-400 text-indigo-300{% else %}border-transparent text-slate-400 hover:text-white hover:border-slate-500{% endif %}">
+                            代理 IP 池
+                        </a>
+                    </div>
+                </div>
+                
+                <div class="hidden lg:flex lg:items-center">
+                    <div class="flex items-center gap-4">
+                        <span class="text-sm text-slate-400">
+                            管理员: <span class="text-indigo-300 font-semibold">{{ admin.email.split('@')[0] if admin else 'Admin' }}</span>
+                        </span>
+                        <!-- 切换回前台 -->
+                        <a href="/web/dashboard" class="inline-flex items-center justify-center px-3 py-1.5 border border-slate-700 text-xs font-semibold rounded-md text-slate-200 bg-slate-800 hover:bg-slate-700 transition duration-150 gap-1">
+                            <svg class="w-3.5 h-3.5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M10 19l-7-7m0 0l7-7m-7 7h18" /></svg>
+                            切换回前台
+                        </a>
+                        <!-- 退出 -->
+                        <a href="#" onclick="event.preventDefault(); if(confirm('确定要退出登录吗？')) { var f = document.createElement('form'); f.method='POST'; f.action='/web/logout'; document.body.appendChild(f); f.submit(); }" class="inline-flex items-center px-3.5 py-1.5 border border-transparent text-xs font-semibold rounded-md text-white bg-rose-600 hover:bg-rose-700 transition duration-150">
+                            安全退出
+                        </a>
+                    </div>
+                </div>
+                
+                <!-- Mobile menu button -->
+                <div class="flex items-center lg:hidden">
+                    <button type="button" id="admin-mobile-menu-btn" onclick="toggleAdminMobileMenu()" class="inline-flex items-center justify-center p-2 rounded-md text-slate-400 hover:text-white hover:bg-slate-800 focus:outline-none" aria-controls="mobile-menu" aria-expanded="false">
+                        <span class="sr-only">打开菜单</span>
+                        <svg class="h-6 w-6" id="admin-menu-icon-open" fill="none" viewBox="0 0 24 24" stroke="currentColor">
+                            <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M4 6h16M4 12h16M4 18h16" />
+                        </svg>
+                        <svg class="h-6 w-6 hidden" id="admin-menu-icon-close" fill="none" viewBox="0 0 24 24" stroke="currentColor">
+                            <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M6 18L18 6M6 6l12 12" />
+                        </svg>
+                    </button>
+                </div>
+            </div>
+        </div>
+
+        <!-- Mobile Menu -->
+        <div class="hidden lg:hidden bg-slate-900 border-b border-slate-800" id="admin-mobile-menu">
+            <div class="px-2 pt-2 pb-3 space-y-1">
+                <a href="/web/admin/dashboard" class="block px-3 py-2 rounded-md text-base font-semibold {% if request.url.path == '/web/admin/dashboard' %}bg-slate-800 text-indigo-400{% else %}text-slate-300 hover:bg-slate-800 hover:text-white{% endif %}">
+                    控制台仪表盘
+                </a>
+                <a href="/web/admin/users" class="block px-3 py-2 rounded-md text-base font-semibold {% if request.url.path == '/web/admin/users' %}bg-slate-800 text-indigo-400{% else %}text-slate-300 hover:bg-slate-800 hover:text-white{% endif %}">
+                    用户管理
+                </a>
+                <a href="/web/admin/proxies" class="block px-3 py-2 rounded-md text-base font-semibold {% if request.url.path == '/web/admin/proxies' %}bg-slate-800 text-indigo-400{% else %}text-slate-300 hover:bg-slate-800 hover:text-white{% endif %}">
+                    代理 IP 池
+                </a>
+                <div class="border-t border-slate-800 my-2 pt-2">
+                    <a href="/web/dashboard" class="block px-3 py-2 rounded-md text-base font-semibold text-slate-400 hover:text-white hover:bg-slate-800">
+                        ← 切换回前台
+                    </a>
+                    <a href="#" onclick="event.preventDefault(); if(confirm('确定要退出登录吗？')) { var f = document.createElement('form'); f.method='POST'; f.action='/web/logout'; document.body.appendChild(f); f.submit(); }" class="block px-3 py-2 rounded-md text-base font-semibold text-rose-400 hover:text-rose-300 hover:bg-slate-800">
+                        安全退出
+                    </a>
+                </div>
+            </div>
+        </div>
+    </nav>
+
+    <!-- Main Content Container -->
+    <main class="flex-grow max-w-7xl w-full mx-auto px-4 sm:px-6 lg:px-8 py-8">
+        <!-- Success / Error Notifications -->
+        {% if success_msg %}
+        <div class="mb-6 p-4 bg-emerald-50 border-l-4 border-emerald-500 rounded-r-lg shadow-sm flex items-start gap-3 animation-fade-in">
+            <svg class="w-5 h-5 text-emerald-500 shrink-0 mt-0.5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 12l2 2 4-4m6 2a9 9 0 11-18 0 9 9 0 0118 0z" /></svg>
+            <div>
+                <p class="text-sm font-medium text-emerald-800">{{ success_msg }}</p>
+            </div>
+        </div>
+        {% endif %}
+        
+        {% if error %}
+        <div class="mb-6 p-4 bg-rose-50 border-l-4 border-rose-500 rounded-r-lg shadow-sm flex items-start gap-3 animation-fade-in">
+            <svg class="w-5 h-5 text-rose-500 shrink-0 mt-0.5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 8v4m0 4h.01M21 12a9 9 0 11-18 0 9 9 0 0118 0z" /></svg>
+            <div>
+                <p class="text-sm font-medium text-rose-800">{{ error }}</p>
+            </div>
+        </div>
+        {% endif %}
+
+        {% block content %}{% endblock %}
+    </main>
+
+    <!-- Footer -->
+    <footer class="bg-slate-900 border-t border-slate-800 py-6 text-slate-500 text-center text-sm">
+        <div class="max-w-7xl mx-auto px-4">
+            <p>© {{ site_name }} 管理后台. 所有权利被保留.</p>
+        </div>
+    </footer>
+
+    <script>
+        function toggleAdminMobileMenu() {
+            var menu = document.getElementById('admin-mobile-menu');
+            var iconOpen = document.getElementById('admin-menu-icon-open');
+            var iconClose = document.getElementById('admin-menu-icon-close');
+            var btn = document.getElementById('admin-mobile-menu-btn');
+            if (menu.classList.contains('hidden')) {
+                menu.classList.remove('hidden');
+                iconOpen.classList.add('hidden');
+                iconClose.classList.remove('hidden');
+                if (btn) btn.setAttribute('aria-expanded', 'true');
+            } else {
+                menu.classList.add('hidden');
+                iconOpen.classList.remove('hidden');
+                iconClose.classList.add('hidden');
+                if (btn) btn.setAttribute('aria-expanded', 'false');
+            }
+        }
+    </script>
+</body>
+</html>
diff --git a/templates/admin/dashboard.html b/templates/admin/dashboard.html
new file mode 100644
index 0000000..7527df6
--- /dev/null
+++ b/templates/admin/dashboard.html
@@ -0,0 +1,113 @@
+{% extends "admin/admin_base.html" %}
+{% block title %}系统仪表盘 - {{ site_name }} 管理后台{% endblock %}
+{% block content %}
+<div class="space-y-8">
+    <!-- Welcome Header -->
+    <div class="flex flex-col md:flex-row justify-between items-start md:items-center gap-4">
+        <div>
+            <h1 class="text-2xl sm:text-3xl font-extrabold text-slate-900 tracking-tight">系统运维控制台</h1>
+            <p class="text-slate-500 mt-1 text-sm">全局系统指标监测与运维调度平台。</p>
+        </div>
+        <div class="text-sm bg-slate-900 text-slate-300 font-medium px-4 py-2 rounded-xl shadow-sm border border-slate-800">
+            今日发送: <span class="text-indigo-400 font-extrabold text-base ml-1">{{ today_messages }}</span> 条消息
+        </div>
+    </div>
+
+    <!-- Stats Grid -->
+    <div class="grid grid-cols-2 lg:grid-cols-4 gap-4 sm:gap-6">
+        <!-- Users Card -->
+        <div class="bg-white p-6 rounded-2xl border border-slate-200/80 shadow-sm flex items-center justify-between hover:shadow-md transition-shadow">
+            <div>
+                <p class="text-xs sm:text-sm font-semibold text-slate-400">系统总用户</p>
+                <h3 class="text-2xl sm:text-3xl font-extrabold text-slate-900 mt-1">{{ total_users }}</h3>
+                <p class="text-xs text-green-600 font-medium mt-1">活跃: {{ active_users }}</p>
+            </div>
+            <div class="w-12 h-12 bg-indigo-50 text-indigo-600 rounded-xl flex items-center justify-center">
+                <svg class="w-6 h-6" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 4.354a4 4 0 110 5.292M15 21H3v-1a6 6 0 0112 0v1zm0 0h6v-1a6 6 0 00-9-5.197M13 7a4 4 0 11-8 0 4 4 0 018 0z" /></svg>
+            </div>
+        </div>
+
+        <!-- Accounts Card -->
+        <div class="bg-white p-6 rounded-2xl border border-slate-200/80 shadow-sm flex items-center justify-between hover:shadow-md transition-shadow">
+            <div>
+                <p class="text-xs sm:text-sm font-semibold text-slate-400">托管 TG 账号</p>
+                <h3 class="text-2xl sm:text-3xl font-extrabold text-slate-900 mt-1">{{ total_accounts }}</h3>
+                <p class="text-xs text-indigo-600 font-medium mt-1">在线: {{ online_accounts }}</p>
+            </div>
+            <div class="w-12 h-12 bg-sky-50 text-sky-600 rounded-xl flex items-center justify-center">
+                <svg class="w-6 h-6" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M8 12h.01M12 12h.01M16 12h.01M21 12c0 4.418-4.03 8-9 8a9.863 9.863 0 01-4.255-.949L3 20l1.395-3.72C3.512 15.042 3 13.574 3 12c0-4.418 4.03-8 9-8s9 3.582 9 8z" /></svg>
+            </div>
+        </div>
+
+        <!-- Proxies Card -->
+        <div class="bg-white p-6 rounded-2xl border border-slate-200/80 shadow-sm flex items-center justify-between hover:shadow-md transition-shadow">
+            <div>
+                <p class="text-xs sm:text-sm font-semibold text-slate-400">代理 IP 总数</p>
+                <h3 class="text-2xl sm:text-3xl font-extrabold text-slate-900 mt-1">{{ total_proxies }}</h3>
+                <p class="text-xs text-green-600 font-medium mt-1">启用: {{ active_proxies }}</p>
+            </div>
+            <div class="w-12 h-12 bg-emerald-50 text-emerald-600 rounded-xl flex items-center justify-center">
+                <svg class="w-6 h-6" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 12l2 2 4-4m5.618-4.016A11.955 11.955 0 0112 2.944a11.955 11.955 0 01-8.618 3.04A12.02 12.02 0 003 9c0 5.591 3.824 10.29 9 11.622 5.176-1.332 9-6.03 9-11.622 0-1.042-.133-2.052-.382-3.016z" /></svg>
+            </div>
+        </div>
+
+        <!-- Scheduled Tasks Card -->
+        <div class="bg-white p-6 rounded-2xl border border-slate-200/80 shadow-sm flex items-center justify-between hover:shadow-md transition-shadow">
+            <div>
+                <p class="text-xs sm:text-sm font-semibold text-slate-400">定时消息任务</p>
+                <h3 class="text-2xl sm:text-3xl font-extrabold text-slate-900 mt-1">{{ total_tasks }}</h3>
+                <p class="text-xs text-slate-500 font-medium mt-1">今日新增或待运行</p>
+            </div>
+            <div class="w-12 h-12 bg-amber-50 text-amber-600 rounded-xl flex items-center justify-center">
+                <svg class="w-6 h-6" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 8v4l3 3m6-3a9 9 0 11-18 0 9 9 0 0118 0z" /></svg>
+            </div>
+        </div>
+    </div>
+
+    <!-- Quick Operations & System Health Panel -->
+    <div class="grid md:grid-cols-3 gap-6">
+        <!-- Quick Operations -->
+        <div class="bg-white p-6 rounded-2xl border border-slate-200/80 shadow-sm md:col-span-2">
+            <h3 class="text-lg font-bold text-slate-800 mb-4">快捷运维管理</h3>
+            <div class="grid sm:grid-cols-2 gap-4">
+                <a href="/web/admin/users" class="group p-4 bg-slate-50 hover:bg-indigo-50 border border-slate-100 hover:border-indigo-100 rounded-xl flex items-center gap-4 transition-all">
+                    <div class="w-10 h-10 rounded-lg bg-indigo-100 text-indigo-600 flex items-center justify-center shrink-0">
+                        <svg class="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M18 9v3m0 0v3m0-3h3m-3 0h-3m-2-5a4 4 0 11-8 0 4 4 0 018 0zM3 20a6 6 0 0112 0v1H3v-1z" /></svg>
+                    </div>
+                    <div>
+                        <h4 class="font-bold text-slate-800 text-sm group-hover:text-indigo-900">管理全局注册用户</h4>
+                        <p class="text-xs text-slate-500 mt-0.5">控制用户启用状态与管理员赋权。</p>
+                    </div>
+                </a>
+
+                <a href="/web/admin/proxies" class="group p-4 bg-slate-50 hover:bg-indigo-50 border border-slate-100 hover:border-indigo-100 rounded-xl flex items-center gap-4 transition-all">
+                    <div class="w-10 h-10 rounded-lg bg-indigo-100 text-indigo-600 flex items-center justify-center shrink-0">
+                        <svg class="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 4v16m8-8H4" /></svg>
+                    </div>
+                    <div>
+                        <h4 class="font-bold text-slate-800 text-sm group-hover:text-indigo-900">批量配置代理网络 IP</h4>
+                        <p class="text-xs text-slate-500 mt-0.5">导入或删除高可用 Socks5 代理池。</p>
+                    </div>
+                </a>
+            </div>
+        </div>
+
+        <!-- Info Card -->
+        <div class="bg-slate-900 text-slate-200 p-6 rounded-2xl border border-slate-800 shadow-md flex flex-col justify-between">
+            <div>
+                <div class="flex items-center justify-between mb-4">
+                    <h3 class="text-base font-bold text-white">关于前后台模式</h3>
+                    <span class="text-xs bg-indigo-500/20 text-indigo-400 font-semibold px-2.5 py-0.5 rounded-full">管理员专享</span>
+                </div>
+                <p class="text-xs text-slate-400 leading-relaxed">
+                    在当前会话中，您随时可以通过顶部的菜单快捷键在“前台控制台”和“管理后台”之间穿梭。前台可自由托管属于您自己的 TG 号，而后台负责控制全站资源和用户状态。
+                </p>
+            </div>
+            <div class="mt-6 border-t border-slate-800 pt-4 flex justify-between items-center text-xs">
+                <span class="text-slate-500">运行环境: API 业务端</span>
+                <a href="/web/status" class="text-indigo-400 hover:text-indigo-300 font-semibold">详细运行状态 →</a>
+            </div>
+        </div>
+    </div>
+</div>
+{% endblock %}
diff --git a/templates/admin/proxies.html b/templates/admin/proxies.html
new file mode 100644
index 0000000..b06d30b
--- /dev/null
+++ b/templates/admin/proxies.html
@@ -0,0 +1,202 @@
+{% extends "admin/admin_base.html" %}
+{% block title %}代理 IP 管理 - {{ site_name }} 管理后台{% endblock %}
+{% block content %}
+<div class="space-y-8">
+    <!-- Header -->
+    <div>
+        <h1 class="text-2xl font-extrabold text-slate-900 tracking-tight">网络代理 IP 管理</h1>
+        <p class="text-slate-500 mt-1 text-sm">托管 Telegram 账号所需的网络代理池管理。新登录的号将自动优先绑定占用账号最少的代理。</p>
+    </div>
+
+    <!-- Forms Container (Add / Import) -->
+    <div class="grid md:grid-cols-3 gap-6">
+        <!-- Add Single Proxy -->
+        <div class="bg-white p-6 rounded-2xl border border-slate-200/80 shadow-sm flex flex-col justify-between">
+            <div>
+                <h3 class="text-base font-bold text-slate-800 mb-4 flex items-center gap-1.5">
+                    <svg class="w-5 h-5 text-indigo-500" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 4v16m8-8H4" /></svg>
+                    新增单个代理 IP
+                </h3>
+                <form action="/web/admin/proxies/add" method="POST" class="space-y-4">
+                    <div>
+                        <label for="host" class="block text-xs font-bold text-slate-500 uppercase">主机/IP 地址</label>
+                        <input type="text" name="host" id="host" required placeholder="127.0.0.1 或 proxy.com"
+                               class="mt-1 block w-full border border-slate-200 rounded-lg shadow-sm py-2 px-3 focus:outline-none focus:ring-1 focus:ring-indigo-500 focus:border-indigo-500 text-sm">
+                    </div>
+                    <div class="grid grid-cols-2 gap-3">
+                        <div>
+                            <label for="port" class="block text-xs font-bold text-slate-500 uppercase">端口</label>
+                            <input type="number" name="port" id="port" required placeholder="1080"
+                                   class="mt-1 block w-full border border-slate-200 rounded-lg shadow-sm py-2 px-3 focus:outline-none focus:ring-1 focus:ring-indigo-500 focus:border-indigo-500 text-sm">
+                        </div>
+                        <div>
+                            <label for="proxy_type" class="block text-xs font-bold text-slate-500 uppercase">协议协议</label>
+                            <select name="proxy_type" id="proxy_type"
+                                    class="mt-1 block w-full bg-white border border-slate-200 rounded-lg shadow-sm py-2 px-3 focus:outline-none focus:ring-1 focus:ring-indigo-500 focus:border-indigo-500 text-sm">
+                                <option value="socks5">SOCKS5</option>
+                                <option value="socks4">SOCKS4</option>
+                                <option value="http">HTTP</option>
+                            </select>
+                        </div>
+                    </div>
+                    <div class="grid grid-cols-2 gap-3">
+                        <div>
+                            <label for="username" class="block text-xs font-bold text-slate-500 uppercase">用户名 (可选)</label>
+                            <input type="text" name="username" id="username" placeholder="user"
+                                   class="mt-1 block w-full border border-slate-200 rounded-lg shadow-sm py-2 px-3 focus:outline-none focus:ring-1 focus:ring-indigo-500 focus:border-indigo-500 text-sm">
+                        </div>
+                        <div>
+                            <label for="password" class="block text-xs font-bold text-slate-500 uppercase">密码 (可选)</label>
+                            <input type="password" name="password" id="password" placeholder="pass"
+                                   class="mt-1 block w-full border border-slate-200 rounded-lg shadow-sm py-2 px-3 focus:outline-none focus:ring-1 focus:ring-indigo-500 focus:border-indigo-500 text-sm">
+                        </div>
+                    </div>
+                    <button type="submit" class="w-full flex justify-center py-2 px-4 border border-transparent rounded-lg shadow-sm text-sm font-semibold text-white bg-indigo-600 hover:bg-indigo-700 focus:outline-none transition">
+                        保存并启用
+                    </button>
+                </form>
+            </div>
+        </div>
+
+        <!-- Batch Import Proxies -->
+        <div class="bg-white p-6 rounded-2xl border border-slate-200/80 shadow-sm md:col-span-2 flex flex-col justify-between">
+            <div>
+                <h3 class="text-base font-bold text-slate-800 mb-2 flex items-center gap-1.5">
+                    <svg class="w-5 h-5 text-indigo-500" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M4 16v1a3 3 0 003 3h10a3 3 0 003-3v-1m-4-8l-4-4m0 0L8 8m4-4v12" /></svg>
+                    批量文本解析导入
+                </h3>
+                <p class="text-xs text-slate-400 mb-4 leading-relaxed">
+                    支持按行导入多个代理。支持格式：<br>
+                    1. <code class="bg-slate-100 px-1 rounded text-indigo-600 font-mono">host:port</code> (默认 Socks5)<br>
+                    2. <code class="bg-slate-100 px-1 rounded text-indigo-600 font-mono">host:port:user:pass</code><br>
+                    3. <code class="bg-slate-100 px-1 rounded text-indigo-600 font-mono">protocol://user:pass@host:port</code> (支持 socks5 / socks4 / http)
+                </p>
+                <form action="/web/admin/proxies/import" method="POST" class="space-y-4">
+                    <div>
+                        <textarea name="text_content" rows="5" required placeholder="请输入代理 IP 信息，一行一个代理...&#10;127.0.0.1:1080&#10;192.168.1.100:1080:myuser:mypass&#10;socks5://admin:admin123@10.0.0.5:1088"
+                                  class="block w-full border border-slate-200 rounded-lg shadow-sm py-2.5 px-3.5 focus:outline-none focus:ring-1 focus:ring-indigo-500 focus:border-indigo-500 text-sm font-mono"></textarea>
+                    </div>
+                    <button type="submit" class="w-full flex justify-center py-2 px-4 border border-transparent rounded-lg shadow-sm text-sm font-semibold text-white bg-slate-900 hover:bg-slate-950 focus:outline-none transition">
+                        解析并批量导入
+                    </button>
+                </form>
+            </div>
+        </div>
+    </div>
+
+    <!-- Proxy List -->
+    <div class="bg-white shadow sm:rounded-2xl border border-slate-200/80 overflow-hidden">
+        <div class="p-5 border-b border-slate-100 flex flex-wrap justify-between items-center gap-4">
+            <h3 class="text-base font-bold text-slate-800">代理 IP 资源列表 ({{ proxies|length }} 个)</h3>
+            <div class="flex gap-2">
+                <button type="button" onclick="confirmBatchDelete()" class="inline-flex items-center px-3 py-2 border border-transparent text-xs font-semibold rounded-lg text-white bg-rose-600 hover:bg-rose-700 transition">
+                    批量软删除选中项
+                </button>
+            </div>
+        </div>
+
+        <form id="batch-form" action="/web/admin/proxies/batch-delete" method="POST">
+            <div class="overflow-x-auto">
+                <table class="min-w-full divide-y divide-slate-200">
+                    <thead class="bg-slate-50">
+                        <tr>
+                            <th scope="col" class="px-6 py-4 text-center text-xs font-bold text-slate-500 uppercase tracking-wider w-12">
+                                <input type="checkbox" onclick="toggleSelectAll(this)" class="rounded text-indigo-600 focus:ring-indigo-500 w-4 h-4 cursor-pointer">
+                            </th>
+                            <th scope="col" class="px-6 py-4 text-left text-xs font-bold text-slate-500 uppercase tracking-wider">类型</th>
+                            <th scope="col" class="px-6 py-4 text-left text-xs font-bold text-slate-500 uppercase tracking-wider">主机/IP</th>
+                            <th scope="col" class="px-6 py-4 text-left text-xs font-bold text-slate-500 uppercase tracking-wider">端口</th>
+                            <th scope="col" class="px-6 py-4 text-left text-xs font-bold text-slate-500 uppercase tracking-wider">用户名</th>
+                            <th scope="col" class="px-6 py-4 text-left text-xs font-bold text-slate-500 uppercase tracking-wider">密码</th>
+                            <th scope="col" class="px-6 py-4 text-center text-xs font-bold text-slate-500 uppercase tracking-wider">被占用的活动账号数</th>
+                            <th scope="col" class="px-6 py-4 text-center text-xs font-bold text-slate-500 uppercase tracking-wider">状态</th>
+                            <th scope="col" class="px-6 py-4 text-center text-xs font-bold text-slate-500 uppercase tracking-wider w-24">操作</th>
+                        </tr>
+                    </thead>
+                    <tbody class="bg-white divide-y divide-slate-200">
+                        {% for p in proxies %}
+                        <tr class="hover:bg-slate-50/50 transition-colors">
+                            <td class="px-6 py-4 whitespace-nowrap text-center">
+                                <input type="checkbox" name="proxy-{{ p.id }}" class="proxy-checkbox rounded text-indigo-600 focus:ring-indigo-500 w-4 h-4 cursor-pointer">
+                            </td>
+                            <td class="px-6 py-4 whitespace-nowrap">
+                                <span class="px-2 py-0.5 rounded-full text-xs font-bold bg-indigo-50 text-indigo-600 uppercase">{{ p.proxy_type }}</span>
+                            </td>
+                            <td class="px-6 py-4 whitespace-nowrap">
+                                <span class="text-sm font-semibold text-slate-800">{{ p.proxy_host }}</span>
+                            </td>
+                            <td class="px-6 py-4 whitespace-nowrap">
+                                <span class="text-sm font-mono text-slate-600">{{ p.proxy_port }}</span>
+                            </td>
+                            <td class="px-6 py-4 whitespace-nowrap text-sm text-slate-500 font-mono">{{ p.username or '-' }}</td>
+                            <td class="px-6 py-4 whitespace-nowrap text-sm text-slate-500 font-mono">
+                                {% if p.password %}
+                                <span class="password-masked border-b border-dashed border-slate-400 cursor-pointer font-sans" 
+                                      onclick="var self=this; if(self.dataset.masked==='1'){ self.textContent=self.dataset.full; self.dataset.masked='0'; } else { self.textContent=self.dataset.masked_val; self.dataset.masked='1'; }"
+                                      data-masked="1"
+                                      data-full="{{ p.password }}"
+                                      data-masked_val="••••••"
+                                      title="点击显示/隐藏">••••••</span>
+                                {% else %}
+                                -
+                                {% endif %}
+                            </td>
+                            <td class="px-6 py-4 whitespace-nowrap text-center">
+                                <span class="text-sm font-extrabold {% if p.account_count > 0 %}text-indigo-600{% else %}text-slate-400{% endif %}">
+                                    {{ p.account_count }}
+                                </span>
+                            </td>
+                            <td class="px-6 py-4 whitespace-nowrap text-center text-sm">
+                                <button type="button"
+                                        hx-post="/web/admin/proxies/{{ p.id }}/toggle-active"
+                                        hx-target="this"
+                                        hx-swap="outerHTML"
+                                        class="inline-flex items-center px-2.5 py-1 border border-gray-300 shadow-sm text-xs font-medium rounded text-gray-700 bg-white hover:bg-gray-50">
+                                    <span class="{% if p.is_active %}text-green-600 font-bold{% else %}text-red-500 font-bold{% endif %}">
+                                        {{ '● 启用' if p.is_active else '○ 禁用' }}
+                                    </span>
+                                </button>
+                            </td>
+                            <td class="px-6 py-4 whitespace-nowrap text-center text-sm">
+                                <button type="button"
+                                        hx-post="/web/admin/proxies/{{ p.id }}/delete"
+                                        hx-confirm="确定要软删除此代理 IP 吗？该代理将被禁用，但保留审计。"
+                                        class="text-rose-600 hover:text-rose-900 font-semibold">
+                                    删除
+                                </button>
+                            </td>
+                        </tr>
+                        {% else %}
+                        <tr>
+                            <td colspan="9" class="px-6 py-12 text-center text-sm text-slate-400">
+                                暂无代理 IP，请先在上方进行添加或批量导入。
+                            </td>
+                        </tr>
+                        {% endfor %}
+                    </tbody>
+                </table>
+            </div>
+        </form>
+    </div>
+</div>
+
+<script>
+    function toggleSelectAll(masterCheckbox) {
+        var checkboxes = document.querySelectorAll('.proxy-checkbox');
+        checkboxes.forEach(function(cb) {
+            cb.checked = masterCheckbox.checked;
+        });
+    }
+
+    function confirmBatchDelete() {
+        var selected = document.querySelectorAll('.proxy-checkbox:checked');
+        if (selected.length === 0) {
+            alert('请先勾选需要批量软删除的代理 IP！');
+            return;
+        }
+        if (confirm('确定要批量软删除选中的 ' + selected.length + ' 个代理 IP 吗？被删除的代理将被禁用，保留审计。')) {
+            document.getElementById('batch-form').submit();
+        }
+    }
+</script>
+{% endblock %}
diff --git a/templates/admin/select_role.html b/templates/admin/select_role.html
new file mode 100644
index 0000000..513dfc4
--- /dev/null
+++ b/templates/admin/select_role.html
@@ -0,0 +1,81 @@
+<!DOCTYPE html>
+<html lang="zh-CN">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>选择工作空间 - {{ site_name }}</title>
+    <!-- Tailwind CSS -->
+    <script src="/static/js/tailwind.min.js"></script>
+    <link rel="icon" type="image/svg+xml" href="/static/favicon.svg">
+    <style>
+        .gradient-bg {
+            background: radial-gradient(circle at 50% 50%, #eef2ff 0%, #f8fafc 100%);
+        }
+        .card-shadow {
+            box-shadow: 0 10px 30px -10px rgba(99, 102, 241, 0.12), 0 1px 3px rgba(0, 0, 0, 0.05);
+        }
+    </style>
+</head>
+<body class="gradient-bg min-h-screen flex flex-col items-center justify-center p-4">
+    <div class="max-w-3xl w-full">
+        <!-- Site Logo & Header -->
+        <div class="text-center mb-10">
+            <div class="inline-flex items-center justify-center w-16 h-16 rounded-2xl bg-indigo-600 text-white mb-4 shadow-lg shadow-indigo-200">
+                <svg class="w-10 h-10" fill="none" stroke="currentColor" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg">
+                    <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M8 12h.01M12 12h.01M16 12h.01M21 12c0 4.418-4.03 8-9 8a9.863 9.863 0 01-4.255-.949L3 20l1.395-3.72C3.512 15.042 3 13.574 3 12c0-4.418 4.03-8 9-8s9 3.582 9 8z" />
+                </svg>
+            </div>
+            <h1 class="text-3xl font-extrabold text-slate-900 tracking-tight">你好, {{ user.email.split('@')[0] }}</h1>
+            <p class="text-slate-500 mt-2 text-sm sm:text-base">已检测到您的管理员身份，请选择您要进入的工作空间：</p>
+        </div>
+
+        <!-- Cards Container -->
+        <div class="grid md:grid-cols-2 gap-6">
+            <!-- Card 1: Front Console -->
+            <a href="/web/dashboard" class="group bg-white rounded-3xl p-8 card-shadow border border-slate-100 flex flex-col justify-between hover:border-indigo-300 hover:shadow-xl hover:shadow-indigo-50/50 transition-all duration-300 transform hover:-translate-y-1">
+                <div>
+                    <div class="w-14 h-14 rounded-2xl bg-indigo-50 text-indigo-600 flex items-center justify-center mb-6 group-hover:bg-indigo-600 group-hover:text-white transition-all duration-300">
+                        <svg class="w-8 h-8" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+                            <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M4 6a2 2 0 012-2h2a2 2 0 012 2v4a2 2 0 01-2 2H6a2 2 0 01-2-2V6zM14 6a2 2 0 012-2h2a2 2 0 012 2v4a2 2 0 01-2 2h-2a2 2 0 01-2-2V6zM4 16a2 2 0 012-2h2a2 2 0 012 2v4a2 2 0 01-2 2H6a2 2 0 01-2-2v-4zM14 16a2 2 0 012-2h2a2 2 0 012 2v4a2 2 0 01-2 2h-2a2 2 0 01-2-2v-4z" />
+                        </svg>
+                    </div>
+                    <h3 class="text-xl font-bold text-slate-800 mb-2">前台控制台</h3>
+                    <p class="text-slate-500 text-sm leading-relaxed mb-6">
+                        配置自动回复规则、创建定时发送任务、查看发送历史和托管的 Telegram 账号。
+                    </p>
+                </div>
+                <div class="flex items-center text-indigo-600 font-semibold group-hover:translate-x-1.5 transition-transform duration-300 text-sm">
+                    进入前台控制台
+                    <svg class="w-4 h-4 ml-1" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 5l7 7-7 7" /></svg>
+                </div>
+            </a>
+
+            <!-- Card 2: Admin Panel -->
+            <a href="/web/admin/dashboard" class="group bg-slate-900 rounded-3xl p-8 shadow-xl flex flex-col justify-between hover:bg-slate-950 hover:shadow-2xl transition-all duration-300 transform hover:-translate-y-1">
+                <div>
+                    <div class="w-14 h-14 rounded-2xl bg-indigo-500/10 text-indigo-400 flex items-center justify-center mb-6 group-hover:bg-indigo-500 group-hover:text-white transition-all duration-300">
+                        <svg class="w-8 h-8" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+                            <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 15v2m-6 4h12a2 2 0 002-2v-6a2 2 0 00-2-2H6a2 2 0 00-2 2v6a2 2 0 002 2zm10-10V7a4 4 0 00-8 0v4h8z" />
+                        </svg>
+                    </div>
+                    <h3 class="text-xl font-bold text-white mb-2">系统管理后台</h3>
+                    <p class="text-slate-400 text-sm leading-relaxed mb-6">
+                        系统全局运维平台。包含用户状态与权限修改、代理网络 IP 批量增删改查、以及系统状态总览。
+                    </p>
+                </div>
+                <div class="flex items-center text-indigo-400 font-semibold group-hover:translate-x-1.5 transition-transform duration-300 text-sm">
+                    进入系统管理后台
+                    <svg class="w-4 h-4 ml-1" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 5l7 7-7 7" /></svg>
+                </div>
+            </a>
+        </div>
+
+        <!-- Footer / Logout Option -->
+        <div class="text-center mt-10">
+            <a href="#" onclick="event.preventDefault(); var f = document.createElement('form'); f.method='POST'; f.action='/web/logout'; document.body.appendChild(f); f.submit();" class="text-slate-400 hover:text-slate-600 text-sm font-medium underline transition duration-150">
+                安全退出登录
+            </a>
+        </div>
+    </div>
+</body>
+</html>
diff --git a/templates/admin/users.html b/templates/admin/users.html
new file mode 100644
index 0000000..3ad93fc
--- /dev/null
+++ b/templates/admin/users.html
@@ -0,0 +1,95 @@
+{% extends "admin/admin_base.html" %}
+{% block title %}用户管理 - {{ site_name }} 管理后台{% endblock %}
+{% block content %}
+<div class="space-y-6">
+    <!-- Header -->
+    <div class="flex justify-between items-center">
+        <div>
+            <h1 class="text-2xl font-extrabold text-slate-900 tracking-tight">注册用户管理</h1>
+            <p class="text-slate-500 mt-1 text-sm">全站用户权限设置、账户启用状态与安全凭证管理。</p>
+        </div>
+    </div>
+
+    <!-- Table Card -->
+    <div class="bg-white shadow sm:rounded-2xl border border-slate-200/80 overflow-hidden">
+        <div class="overflow-x-auto">
+            <table class="min-w-full divide-y divide-slate-200">
+                <thead class="bg-slate-50">
+                    <tr>
+                        <th scope="col" class="px-6 py-4 text-left text-xs font-bold text-slate-500 uppercase tracking-wider">ID</th>
+                        <th scope="col" class="px-6 py-4 text-left text-xs font-bold text-slate-500 uppercase tracking-wider">邮箱</th>
+                        <th scope="col" class="px-6 py-4 text-center text-xs font-bold text-slate-500 uppercase tracking-wider">是否为管理员</th>
+                        <th scope="col" class="px-6 py-4 text-center text-xs font-bold text-slate-500 uppercase tracking-wider">状态</th>
+                        <th scope="col" class="px-6 py-4 class-name text-center text-xs font-bold text-slate-500 uppercase tracking-wider">API 鉴权 Key</th>
+                        <th scope="col" class="px-6 py-4 text-left text-xs font-bold text-slate-500 uppercase tracking-wider">注册时间</th>
+                    </tr>
+                </thead>
+                <tbody class="bg-white divide-y divide-slate-200">
+                    {% for u in users %}
+                    <tr class="hover:bg-slate-50/50 transition-colors">
+                        <td class="px-6 py-4 whitespace-nowrap text-sm text-slate-500 font-mono">{{ u.id }}</td>
+                        <td class="px-6 py-4 whitespace-nowrap">
+                            <span class="text-sm font-semibold text-slate-800">{{ u.email }}</span>
+                        </td>
+                        <td class="px-6 py-4 whitespace-nowrap text-center text-sm">
+                            {% if u.id == admin.id %}
+                            <span class="inline-flex items-center px-2.5 py-1.5 border border-transparent text-xs font-bold rounded text-indigo-700 bg-indigo-50">
+                                管理员 (当前)
+                            </span>
+                            {% else %}
+                            <button hx-post="/web/admin/users/{{ u.id }}/toggle-admin"
+                                    hx-target="this"
+                                    hx-swap="outerHTML"
+                                    class="inline-flex items-center px-2.5 py-1.5 border border-gray-300 shadow-sm text-xs font-medium rounded text-gray-700 bg-white hover:bg-gray-50">
+                                <span class="{% if u.is_admin %}text-indigo-600 font-bold{% else %}text-gray-500{% endif %}">
+                                    {{ '管理员' if u.is_admin else '普通用户' }}
+                                </span>
+                            </button>
+                            {% endif %}
+                        </td>
+                        <td class="px-6 py-4 whitespace-nowrap text-center text-sm">
+                            {% if u.id == admin.id %}
+                            <span class="inline-flex items-center px-2.5 py-1.5 border border-transparent text-xs font-bold rounded text-green-700 bg-green-50">
+                                ● 正常
+                            </span>
+                            {% else %}
+                            <button hx-post="/web/admin/users/{{ u.id }}/toggle-active"
+                                    hx-target="this"
+                                    hx-swap="outerHTML"
+                                    class="inline-flex items-center px-2.5 py-1.5 border border-gray-300 shadow-sm text-xs font-medium rounded text-gray-700 bg-white hover:bg-gray-50">
+                                <span class="{% if u.is_active %}text-green-600 font-bold{% else %}text-red-500 font-bold{% endif %}">
+                                    {{ '● 正常' if u.is_active else '○ 已禁用' }}
+                                </span>
+                            </button>
+                            {% endif %}
+                        </td>
+                        <td class="px-6 py-4 whitespace-nowrap text-center">
+                            <div id="api-key-{{ u.id }}" class="flex items-center gap-1.5 justify-center">
+                                <span class="api-key-text font-mono text-xs text-slate-600 bg-slate-100 px-2 py-1 rounded select-all cursor-pointer" 
+                                      onclick="var self=this; if(self.dataset.masked==='1'){ self.textContent=self.dataset.full; self.dataset.masked='0'; } else { self.textContent=self.dataset.masked_val; self.dataset.masked='1'; }"
+                                      data-masked="1"
+                                      data-full="{{ u.api_key }}"
+                                      data-masked_val="{{ u.api_key[:8] }}••••••••••••••••"
+                                      title="点击显示/隐藏">
+                                    {{ u.api_key[:8] }}••••••••••••••••
+                                </span>
+                                <button hx-post="/web/admin/users/{{ u.id }}/reset-api-key"
+                                        hx-target="#api-key-{{ u.id }}"
+                                        hx-swap="outerHTML"
+                                        hx-confirm="确定要重置此用户 ({{ u.email }}) 的 API Key 吗？"
+                                        class="text-indigo-600 hover:text-indigo-900 text-xs font-semibold">
+                                    重置
+                                </button>
+                            </div>
+                        </td>
+                        <td class="px-6 py-4 whitespace-nowrap text-sm text-slate-500 font-mono">
+                            {{ u.created_at.strftime('%Y-%m-%d %H:%M') if u.created_at else '-' }}
+                        </td>
+                    </tr>
+                    {% endfor %}
+                </tbody>
+            </table>
+        </div>
+    </div>
+</div>
+{% endblock %}
diff --git a/templates/base.html b/templates/base.html
index 92cf7fe..09370df 100644
--- a/templates/base.html
+++ b/templates/base.html
@@ -91,6 +91,12 @@
                 <div class="hidden lg:flex lg:items-center">
                     {% if user_id or current_user %}
                     <div class="flex items-center gap-4">
+                        {% if current_user and current_user.is_admin %}
+                        <a href="/web/admin/dashboard" class="inline-flex items-center justify-center px-3 py-1.5 border border-indigo-200 text-xs font-semibold rounded-md text-indigo-600 bg-indigo-50 hover:bg-indigo-100 transition duration-150 gap-1 mr-2 shadow-sm">
+                            <svg class="w-3.5 h-3.5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 15v2m-6 4h12a2 2 0 002-2v-6a2 2 0 00-2-2H6a2 2 0 00-2 2v6a2 2 0 002 2zm10-10V7a4 4 0 00-8 0v4h8z" /></svg>
+                            管理后台
+                        </a>
+                        {% endif %}
                         <a href="/web/profile" class="text-sm text-gray-500 hover:text-indigo-600 font-medium truncate max-w-[150px] inline-block align-middle" title="{% if current_user and current_user.email %}{{ current_user.email }}{% else %}已登录{% endif %}">
                             {% if current_user and current_user.email %}
                                 {{ current_user.email.split('@')[0] }}
@@ -120,7 +126,7 @@
                 </div>
                 <!-- Mobile menu button -->
                 <div class="flex items-center lg:hidden">
-                    <button type="button" onclick="toggleMobileMenu()" class="inline-flex items-center justify-center p-2 rounded-md text-gray-400 hover:text-gray-500 hover:bg-gray-100 focus:outline-none focus:ring-2 focus:ring-inset focus:ring-indigo-500" aria-controls="mobile-menu" aria-expanded="false">
+                    <button type="button" id="mobile-menu-btn" onclick="toggleMobileMenu()" class="inline-flex items-center justify-center p-2 rounded-md text-gray-400 hover:text-gray-500 hover:bg-gray-100 focus:outline-none focus:ring-2 focus:ring-inset focus:ring-indigo-500" aria-controls="mobile-menu" aria-expanded="false">
                         <span class="sr-only">打开菜单</span>
                         <svg class="h-6 w-6" id="menu-icon-open" fill="none" viewBox="0 0 24 24" stroke="currentColor">
                             <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M4 6h16M4 12h16M4 18h16" />
@@ -137,6 +143,11 @@
         <div class="hidden lg:hidden bg-white border-b border-gray-200" id="mobile-menu">
             <div class="px-2 pt-2 pb-3 space-y-1">
                 {% if user_id or current_user %}
+                {% if current_user and current_user.is_admin %}
+                <a href="/web/admin/dashboard" class="block px-3 py-2 rounded-md text-base font-semibold text-indigo-600 hover:bg-indigo-50">
+                    管理后台
+                </a>
+                {% endif %}
                 <a href="/web/dashboard" class="block px-3 py-2 rounded-md text-base font-medium {% if request.url.path == '/web/dashboard' or request.url.path.startswith('/web/dashboard/') %}bg-indigo-50 text-indigo-600{% else %}text-gray-500 hover:bg-gray-50 hover:text-gray-755{% endif %}">
                     仪表盘
                 </a>
@@ -342,14 +353,17 @@ <h3 class="text-xs font-bold text-gray-900 uppercase tracking-wider mb-3">商务
             const menu = document.getElementById('mobile-menu');
             const openIcon = document.getElementById('menu-icon-open');
             const closeIcon = document.getElementById('menu-icon-close');
+            const btn = document.getElementById('mobile-menu-btn');
             if (menu.classList.contains('hidden')) {
                 menu.classList.remove('hidden');
                 openIcon.classList.add('hidden');
                 closeIcon.classList.remove('hidden');
+                if (btn) btn.setAttribute('aria-expanded', 'true');
             } else {
                 menu.classList.add('hidden');
                 openIcon.classList.remove('hidden');
                 closeIcon.classList.add('hidden');
+                if (btn) btn.setAttribute('aria-expanded', 'false');
             }
         }