feat: 累积功能变更 — 聊天集成、租户管理、小程序更新、ETL 增强、迁移脚本

包含多个会话的累积代码变更：
- backend: AI 聊天服务、触发器调度、认证增强、WebSocket、调度器最小间隔
- admin-web: ETL 状态页、任务管理、调度配置、登录优化
- miniprogram: 看板页面、聊天集成、UI 组件、导航更新
- etl: DWS 新任务（finance_area_daily/board_cache）、连接器增强
- tenant-admin: 项目初始化
- db: 19 个迁移脚本（etl_feiqiu 11 + zqyy_app 8）
- packages/shared: 枚举和工具函数更新
- tools: 数据库工具、报表生成、健康检查
- docs: PRD/架构/部署/合约文档更新

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

apps/backend/app/routers/xcx_customers.py

@@ -14,20 +14,24 @@ from __future__ import annotations
 from fastapi import APIRouter, Depends, Query
 
 from app.auth.dependencies import CurrentUser
-from app.middleware.permission import require_approved
+from app.middleware.permission import require_approved, require_permission
 from app.schemas.xcx_customers import (
     CustomerDetailResponse,
     CustomerRecordsResponse,
+    CustomerConsumptionRecordsResponse,
 )
 from app.services import customer_service
+from app.trace.decorators import trace_service
 
 router = APIRouter(prefix="/api/xcx/customers", tags=["小程序客户"])
 
 
 @router.get("/{customer_id}", response_model=CustomerDetailResponse)
+@trace_service("获取客户详情", "Get customer detail")
 async def get_customer_detail(
     customer_id: int,
-    user: CurrentUser = Depends(require_approved()),
+    # CHANGE 2026-03-27 | 权限改造 W4：客户详情跟客户看板走
+    user: CurrentUser = Depends(require_permission("view_board_customer")),
 ):
     """客户详情（CUST-1）。"""
     return await customer_service.get_customer_detail(
@@ -36,6 +40,7 @@ async def get_customer_detail(
 
 
 @router.get("/{customer_id}/records", response_model=CustomerRecordsResponse)
+@trace_service("获取客户服务记录", "Get customer records")
 async def get_customer_records(
     customer_id: int,
     year: int = Query(...),
@@ -43,9 +48,24 @@ async def get_customer_records(
     table: str | None = Query(None),
     page: int = Query(1, ge=1),
     page_size: int = Query(20, ge=1, le=100),
-    user: CurrentUser = Depends(require_approved()),
+    user: CurrentUser = Depends(require_permission("view_board_customer")),
 ):
     """客户服务记录（CUST-2）。"""
     return await customer_service.get_customer_records(
-        customer_id, user.site_id, year, month, table, page, page_size
+        customer_id, user.site_id, user.user_id,
+        year, month, table, page, page_size,
+    )
+
+
+@router.get("/{customer_id}/consumption-records", response_model=CustomerConsumptionRecordsResponse)
+@trace_service("获取客户消费记录", "Get customer consumption records")
+async def get_customer_consumption_records(
+    customer_id: int,
+    year: int = Query(...),
+    month: int = Query(..., ge=1, le=12),
+    user: CurrentUser = Depends(require_permission("view_board_customer")),
+):
+    """客户消费记录（CUST-3）。"""
+    return await customer_service.get_customer_consumption_records(
+        customer_id, user.site_id, year, month,
     )