diff --git a/.claude/settings.local.json b/.claude/settings.local.json
index b454073..92c0945 100644
--- a/.claude/settings.local.json
+++ b/.claude/settings.local.json
@@ -19,7 +19,17 @@
       "Bash(curl:*)",
       "Bash(find:*)",
       "Bash(echo $JAVA_HOME)",
-      "Bash(java:*)"
+      "Bash(java:*)",
+      "Read(/Users/kazusa/Library/Mobile Documents/iCloud~md~obsidian/Documents/笔记/.obsidian/**)",
+      "Read(/Users/kazusa/Library/Mobile Documents/iCloud~md~obsidian/Documents/笔记/.obsidian/themes/Blue Topaz/**)",
+      "Read(/Users/kazusa/Library/Mobile Documents/iCloud~md~obsidian/Documents/笔记/.obsidian/themes/Blue Topaz/**)",
+      "Read(/Users/kazusa/Library/Mobile Documents/iCloud~md~obsidian/Documents/笔记/.obsidian/themes/Blue Topaz/**)",
+      "Read(/Users/kazusa/Library/Mobile Documents/iCloud~md~obsidian/Documents/笔记/.obsidian/snippets/**)",
+      "Read(/Users/kazusa/Library/Mobile Documents/iCloud~md~obsidian/Documents/笔记/.obsidian/**)",
+      "Read(/Users/kazusa/Library/Mobile Documents/iCloud~md~obsidian/Documents/笔记/.obsidian/**)",
+      "Read(/Users/kazusa/Library/Mobile Documents/iCloud~md~obsidian/Documents/笔记/.obsidian/themes/Obsidianite/**)",
+      "Read(/Users/kazusa/Library/Mobile Documents/iCloud~md~obsidian/Documents/笔记/.obsidian/themes/Obsidianite/**)",
+      "Read(/Users/kazusa/Library/Mobile Documents/iCloud~md~obsidian/Documents/笔记/.obsidian/themes/Obsidianite/**)"
     ],
     "deny": [],
     "ask": [],
diff --git a/.kiro/steering/common.md b/.kiro/steering/common.md
new file mode 100644
index 0000000..06ad486
--- /dev/null
+++ b/.kiro/steering/common.md
@@ -0,0 +1,41 @@
+---
+inclusion: always
+---
+
+# 项目开发规范
+
+## 语言规范
+- 所有回复和对话使用中文（简体中文）
+- 文档、注释和说明使用中文
+- 代码注释使用中文，保持简洁明了
+
+## 代码规范
+
+### Java 后端规范
+- 遵循 Spring Boot 最佳实践
+- 使用 MyBatis Plus 进行数据库操作
+- 统一异常处理和返回结果格式
+- 接口文档使用 Swagger 注解
+- 实体类使用 Lombok 简化代码
+- 服务层方法需要事务注解
+
+### Vue 前端规范
+- 使用 TypeScript 进行类型安全开发
+- 组件命名使用 PascalCase
+- 使用 Pinia 进行状态管理
+- API 调用统一封装在 api 目录
+- 路由配置支持权限控制
+
+## 架构模式
+- 前后端分离架构
+- RESTful API 设计
+- JWT 身份认证
+- RBAC 权限控制模型
+- 统一的错误处理和日志记录
+
+## 开发约定
+- 数据库表名使用 sys_ 前缀
+- API 接口统一使用 /api 前缀
+- 分页查询统一返回格式
+- 密码加密使用 BCrypt
+- 时间格式统一使用 ISO 8601
\ No newline at end of file
diff --git a/admin-backend/src/main/java/com/admin/config/CorsConfig.java b/admin-backend/src/main/java/com/admin/config/CorsConfig.java
index 77ea3e4..e482c34 100644
--- a/admin-backend/src/main/java/com/admin/config/CorsConfig.java
+++ b/admin-backend/src/main/java/com/admin/config/CorsConfig.java
@@ -1,14 +1,13 @@
 package com.admin.config;
 
+import java.util.Arrays;
+
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
 import org.springframework.web.cors.CorsConfiguration;
 import org.springframework.web.cors.CorsConfigurationSource;
 import org.springframework.web.cors.UrlBasedCorsConfigurationSource;
 
-import java.util.Arrays;
-import java.util.Collections;
-
 @Configuration
 public class CorsConfig {