团队管理：重命名与删除团队

- 新接口：PATCH /api/teams/:id 重命名（1-40 字符）、DELETE /api/teams/:id 删除（均仅创建者）；删除随外键级联清理成员/共享空间/Mock 接口
- TeamDialog：卡片右上 ✎ 内联重命名、🗑 删除二次确认（红色警示条，明示连带删除范围）
- 删除后若当前停留在该团队空间自动切回本地空间
- curl E2E：改名/越权 403/删除/空间级联失效全通过；浏览器验证改名与删除全流程；53 前端测试 + Go 构建通过

apps/server/internal/api/api.go

@@ -35,6 +35,8 @@ func (a *API) Register(r *gin.Engine) {
 	g.POST("/auth/logout", a.auth(a.handleLogout))
 	g.GET("/me", a.auth(a.handleMe))
 	g.POST("/teams", a.auth(a.handleCreateTeam))
+	g.PATCH("/teams/:id", a.auth(a.handleRenameTeam))
+	g.DELETE("/teams/:id", a.auth(a.handleDeleteTeam))
 	g.POST("/teams/:id/members", a.auth(a.handleAddMember))
 	g.GET("/teams/:id/members", a.auth(a.handleListMembers))
 	g.PUT("/teams/:id/members/:uid", a.auth(a.handleUpdateSpecialty))
@@ -192,6 +194,51 @@ func (a *API) handleAddMember(c *gin.Context, user *store.User) {
 	c.JSON(http.StatusOK, gin.H{"ok": true, "member": member})
 }
 
+// handleRenameTeam 重命名团队（仅创建者）
+func (a *API) handleRenameTeam(c *gin.Context, user *store.User) {
+	teamID, err := strconv.ParseInt(c.Param("id"), 10, 64)
+	if err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"error": "无效的团队"})
+		return
+	}
+	owner, err := a.store.IsTeamOwner(teamID, user.ID)
+	if err != nil || !owner {
+		c.JSON(http.StatusForbidden, gin.H{"error": "仅团队创建者可重命名团队"})
+		return
+	}
+	var req struct {
+		Name string `json:"name" binding:"required,min=1,max=40"`
+	}
+	if err := c.ShouldBindJSON(&req); err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"error": "团队名称需 1-40 个字符"})
+		return
+	}
+	if err := a.store.RenameTeam(teamID, strings.TrimSpace(req.Name)); err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"error": "重命名失败：" + err.Error()})
+		return
+	}
+	c.JSON(http.StatusOK, gin.H{"ok": true})
+}
+
+// handleDeleteTeam 删除团队（仅创建者）：成员、共享空间与 Mock 数据一并删除
+func (a *API) handleDeleteTeam(c *gin.Context, user *store.User) {
+	teamID, err := strconv.ParseInt(c.Param("id"), 10, 64)
+	if err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"error": "无效的团队"})
+		return
+	}
+	owner, err := a.store.IsTeamOwner(teamID, user.ID)
+	if err != nil || !owner {
+		c.JSON(http.StatusForbidden, gin.H{"error": "仅团队创建者可删除团队"})
+		return
+	}
+	if err := a.store.DeleteTeam(teamID); err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"error": "删除失败：" + err.Error()})
+		return
+	}
+	c.JSON(http.StatusOK, gin.H{"ok": true})
+}
+
 // handleListMembers 团队成员列表（创建者与成员均可查看）
 func (a *API) handleListMembers(c *gin.Context, user *store.User) {
 	teamID, err := strconv.ParseInt(c.Param("id"), 10, 64)