feat: P1-P3 全栈集成 — 数据库基础 + DWS 扩展 + 小程序鉴权 + 工程化体系

## P1 数据库基础
- zqyy_app: 创建 auth/biz schema、FDW 连接 etl_feiqiu
- etl_feiqiu: 创建 app schema RLS 视图、商品库存预警表
- 清理 assistant_abolish 残留数据

## P2 ETL/DWS 扩展
- 新增 DWS 助教订单贡献度表 (dws.assistant_order_contribution)
- 新增 assistant_order_contribution_task 任务及 RLS 视图
- member_consumption 增加充值字段、assistant_daily 增加处罚字段
- 更新 ODS/DWD/DWS 任务文档及业务规则文档
- 更新 consistency_checker、flow_runner、task_registry 等核心模块

## P3 小程序鉴权系统
- 新增 xcx_auth 路由/schema（微信登录 + JWT）
- 新增 wechat/role/matching/application 服务层
- zqyy_app 鉴权表迁移 + 角色权限种子数据
- auth/dependencies.py 支持小程序 JWT 鉴权

## 文档与审计
- 新增 DOCUMENTATION-MAP 文档导航
- 新增 7 份 BD_Manual 数据库变更文档
- 更新 DDL 基线快照（etl_feiqiu 6 schema + zqyy_app auth）
- 新增全栈集成审计记录、部署检查清单更新
- 新增 BACKLOG 路线图、FDW→Core 迁移计划

## Kiro 工程化
- 新增 5 个 Spec（P1/P2/P3/全栈集成/核心业务）
- 新增审计自动化脚本（agent_on_stop/build_audit_context/compliance_prescan）
- 新增 6 个 Hook（合规检查/会话日志/提交审计等）
- 新增 doc-map steering 文件

## 运维与测试
- 新增 ops 脚本：迁移验证/API 健康检查/ETL 监控/集成报告
- 新增属性测试：test_dws_contribution / test_auth_system
- 清理过期 export 报告文件
- 更新 .gitignore 排除规则

apps/backend/app/auth/dependencies.py

@@ -5,9 +5,15 @@ FastAPI 依赖注入：从 JWT 提取当前用户信息。
     @router.get("/protected")
     async def protected_endpoint(user: CurrentUser = Depends(get_current_user)):
         print(user.user_id, user.site_id)
+
+    # 允许 pending 用户（受限令牌）访问
+    @router.get("/apply")
+    async def apply_endpoint(user: CurrentUser = Depends(get_current_user_or_limited)):
+        if user.limited:
+            ...  # 受限逻辑
 """
 
-from dataclasses import dataclass
+from dataclasses import dataclass, field
 
 from fastapi import Depends, HTTPException, status
 from fastapi.security import HTTPAuthorizationCredentials, HTTPBearer
@@ -24,7 +30,10 @@ class CurrentUser:
     """从 JWT 解析出的当前用户上下文。"""
 
     user_id: int
-    site_id: int
+    site_id: int = 0
+    roles: list[str] = field(default_factory=list)
+    status: str = "pending"
+    limited: bool = False
 
 
 async def get_current_user(
@@ -33,7 +42,7 @@ async def get_current_user(
     """
     FastAPI 依赖：从 Authorization header 提取 JWT，验证后返回用户信息。
 
-    失败时抛出 401。
+    要求完整令牌（非 limited），失败时抛出 401。
     """
     token = credentials.credentials
     try:
@@ -45,6 +54,14 @@ async def get_current_user(
             headers={"WWW-Authenticate": "Bearer"},
         )
 
+    # 受限令牌不允许通过此依赖
+    if payload.get("limited"):
+        raise HTTPException(
+            status_code=status.HTTP_401_UNAUTHORIZED,
+            detail="受限令牌无法访问此端点",
+            headers={"WWW-Authenticate": "Bearer"},
+        )
+
     user_id_raw = payload.get("sub")
     site_id = payload.get("site_id")
 
@@ -64,4 +81,78 @@ async def get_current_user(
             headers={"WWW-Authenticate": "Bearer"},
         )
 
-    return CurrentUser(user_id=user_id, site_id=site_id)
+    roles = payload.get("roles", [])
+
+    return CurrentUser(
+        user_id=user_id,
+        site_id=site_id,
+        roles=roles,
+        status="approved",
+        limited=False,
+    )
+
+
+async def get_current_user_or_limited(
+    credentials: HTTPAuthorizationCredentials = Depends(_bearer_scheme),
+) -> CurrentUser:
+    """
+    FastAPI 依赖：允许 pending 用户（受限令牌）访问。
+
+    - 受限令牌（limited=True）：返回 CurrentUser(limited=True, roles=[], status="pending")
+    - 完整令牌：正常返回 CurrentUser
+    """
+    token = credentials.credentials
+    try:
+        payload = decode_access_token(token)
+    except JWTError:
+        raise HTTPException(
+            status_code=status.HTTP_401_UNAUTHORIZED,
+            detail="无效的令牌",
+            headers={"WWW-Authenticate": "Bearer"},
+        )
+
+    user_id_raw = payload.get("sub")
+    if user_id_raw is None:
+        raise HTTPException(
+            status_code=status.HTTP_401_UNAUTHORIZED,
+            detail="令牌缺少必要字段",
+            headers={"WWW-Authenticate": "Bearer"},
+        )
+
+    try:
+        user_id = int(user_id_raw)
+    except (TypeError, ValueError):
+        raise HTTPException(
+            status_code=status.HTTP_401_UNAUTHORIZED,
+            detail="令牌中 user_id 格式无效",
+            headers={"WWW-Authenticate": "Bearer"},
+        )
+
+    # 受限令牌：pending 用户
+    if payload.get("limited"):
+        return CurrentUser(
+            user_id=user_id,
+            site_id=0,
+            roles=[],
+            status="pending",
+            limited=True,
+        )
+
+    # 完整令牌：要求 site_id
+    site_id = payload.get("site_id")
+    if site_id is None:
+        raise HTTPException(
+            status_code=status.HTTP_401_UNAUTHORIZED,
+            detail="令牌缺少必要字段",
+            headers={"WWW-Authenticate": "Bearer"},
+        )
+
+    roles = payload.get("roles", [])
+
+    return CurrentUser(
+        user_id=user_id,
+        site_id=site_id,
+        roles=roles,
+        status="approved",
+        limited=False,
+    )

apps/backend/app/auth/jwt.py

@@ -27,11 +27,14 @@ def hash_password(password: str) -> str:
     return bcrypt.hashpw(password.encode("utf-8"), bcrypt.gensalt()).decode("utf-8")
 
 
-def create_access_token(user_id: int, site_id: int) -> str:
+def create_access_token(
+    user_id: int, site_id: int, roles: list[str] | None = None
+) -> str:
     """
     生成 access_token。
 
-    payload: sub=user_id, site_id, type=access, exp
+    payload: sub=user_id, site_id, roles, type=access, exp
+    roles 参数默认 None，保持向后兼容。
     """
     expire = datetime.now(timezone.utc) + timedelta(
         minutes=config.JWT_ACCESS_TOKEN_EXPIRE_MINUTES
@@ -42,6 +45,8 @@ def create_access_token(user_id: int, site_id: int) -> str:
         "type": "access",
         "exp": expire,
     }
+    if roles is not None:
+        payload["roles"] = roles
     return jwt.encode(payload, config.JWT_SECRET_KEY, algorithm=config.JWT_ALGORITHM)
 
 
@@ -63,15 +68,46 @@ def create_refresh_token(user_id: int, site_id: int) -> str:
     return jwt.encode(payload, config.JWT_SECRET_KEY, algorithm=config.JWT_ALGORITHM)
 
 
-def create_token_pair(user_id: int, site_id: int) -> dict[str, str]:
+def create_token_pair(user_id: int, site_id: int, roles: list[str] | None = None) -> dict[str, str]:
     """生成 access_token + refresh_token 令牌对。"""
     return {
-        "access_token": create_access_token(user_id, site_id),
+        "access_token": create_access_token(user_id, site_id, roles=roles),
         "refresh_token": create_refresh_token(user_id, site_id),
         "token_type": "bearer",
     }
 
 
+def create_limited_token_pair(user_id: int) -> dict[str, str]:
+    """
+    为 pending 用户签发受限令牌。
+
+    payload 不含 site_id 和 roles，仅包含 user_id + type + limited=True。
+    受限令牌仅允许访问申请提交和状态查询端点。
+    """
+    now = datetime.now(timezone.utc)
+    access_payload = {
+        "sub": str(user_id),
+        "type": "access",
+        "limited": True,
+        "exp": now + timedelta(minutes=config.JWT_ACCESS_TOKEN_EXPIRE_MINUTES),
+    }
+    refresh_payload = {
+        "sub": str(user_id),
+        "type": "refresh",
+        "limited": True,
+        "exp": now + timedelta(days=config.JWT_REFRESH_TOKEN_EXPIRE_DAYS),
+    }
+    return {
+        "access_token": jwt.encode(
+            access_payload, config.JWT_SECRET_KEY, algorithm=config.JWT_ALGORITHM
+        ),
+        "refresh_token": jwt.encode(
+            refresh_payload, config.JWT_SECRET_KEY, algorithm=config.JWT_ALGORITHM
+        ),
+        "token_type": "bearer",
+    }
+
+
 def decode_token(token: str) -> dict:
     """
     解码并验证 JWT 令牌。

apps/backend/app/main.py

@@ -14,7 +14,8 @@ from app import config
 # CHANGE 2026-02-19 | 新增 xcx_test 路由（MVP 验证）+ wx_callback 路由（微信消息推送）
 # CHANGE 2026-02-22 | 新增 member_birthday 路由（助教手动补录会员生日）
 # CHANGE 2026-02-23 | 新增 ops_panel 路由（运维控制面板）
-from app.routers import auth, execution, schedules, tasks, env_config, db_viewer, etl_status, xcx_test, wx_callback, member_birthday, ops_panel
+# CHANGE 2026-02-25 | 新增 xcx_auth 路由（小程序微信登录 + 申请 + 状态查询 + 店铺切换）
+from app.routers import auth, execution, schedules, tasks, env_config, db_viewer, etl_status, xcx_test, wx_callback, member_birthday, ops_panel, xcx_auth
 from app.services.scheduler import scheduler
 from app.services.task_queue import task_queue
 from app.ws.logs import ws_router
@@ -64,6 +65,7 @@ app.include_router(xcx_test.router)
 app.include_router(wx_callback.router)
 app.include_router(member_birthday.router)
 app.include_router(ops_panel.router)
+app.include_router(xcx_auth.router)
 
 
 @app.get("/health", tags=["系统"])

apps/backend/app/routers/xcx_auth.py

@@ -0,0 +1,417 @@
+# -*- coding: utf-8 -*-
+"""
+小程序认证路由 —— 微信登录、申请提交、状态查询、店铺切换、令牌刷新。
+
+端点清单：
+- POST /api/xcx/login      — 微信登录（查找/创建用户 + 签发 JWT）
+- POST /api/xcx/apply       — 提交入驻申请
+- GET  /api/xcx/me          — 查询自身状态 + 申请列表
+- GET  /api/xcx/me/sites    — 查询关联店铺
+- POST /api/xcx/switch-site — 切换当前店铺
+- POST /api/xcx/refresh     — 刷新令牌
+"""
+
+from __future__ import annotations
+
+import logging
+
+from fastapi import APIRouter, Depends, HTTPException, status
+from jose import JWTError
+from psycopg2 import errors as pg_errors
+
+from app.auth.dependencies import (
+    CurrentUser,
+    get_current_user,
+    get_current_user_or_limited,
+)
+from app.auth.jwt import (
+    create_limited_token_pair,
+    create_token_pair,
+    decode_refresh_token,
+)
+from app.database import get_connection
+from app.services.application import (
+    create_application,
+    get_user_applications,
+)
+from app.schemas.xcx_auth import (
+    ApplicationRequest,
+    ApplicationResponse,
+    RefreshTokenRequest,
+    SiteInfo,
+    SwitchSiteRequest,
+    UserStatusResponse,
+    WxLoginRequest,
+    WxLoginResponse,
+)
+from app.services.wechat import WeChatAuthError, code2session
+
+logger = logging.getLogger(__name__)
+
+router = APIRouter(prefix="/api/xcx", tags=["小程序认证"])
+
+
+# ── 辅助：查询用户在指定 site_id 下的角色 code 列表 ──────────
+
+def _get_user_roles_at_site(conn, user_id: int, site_id: int) -> list[str]:
+    """查询用户在指定 site_id 下的角色 code 列表。"""
+    with conn.cursor() as cur:
+        cur.execute(
+            """
+            SELECT r.code
+              FROM auth.user_site_roles usr
+              JOIN auth.roles r ON usr.role_id = r.id
+             WHERE usr.user_id = %s AND usr.site_id = %s
+            """,
+            (user_id, site_id),
+        )
+        return [row[0] for row in cur.fetchall()]
+
+
+def _get_user_default_site(conn, user_id: int) -> int | None:
+    """获取用户第一个关联的 site_id（按创建时间排序）。"""
+    with conn.cursor() as cur:
+        cur.execute(
+            """
+            SELECT DISTINCT site_id
+              FROM auth.user_site_roles
+             WHERE user_id = %s
+             ORDER BY site_id
+             LIMIT 1
+            """,
+            (user_id,),
+        )
+        row = cur.fetchone()
+        return row[0] if row else None
+
+
+# ── POST /api/xcx/login ──────────────────────────────────
+
+@router.post("/login", response_model=WxLoginResponse)
+async def wx_login(body: WxLoginRequest):
+    """
+    微信登录。
+
+    流程：code → code2session(openid) → 查找/创建 auth.users → 签发 JWT。
+    - disabled 用户返回 403
+    - 新用户自动创建（status=pending）
+    - approved 用户签发包含 site_id + roles 的完整令牌
+    - pending/rejected 用户签发受限令牌
+    """
+    # 1. 调用微信 code2Session
+    try:
+        wx_result = await code2session(body.code)
+    except WeChatAuthError as exc:
+        raise HTTPException(status_code=exc.http_status, detail=exc.detail)
+    except RuntimeError as exc:
+        # 微信配置缺失
+        logger.error("微信配置错误: %s", exc)
+        raise HTTPException(
+            status_code=status.HTTP_500_INTERNAL_SERVER_ERROR,
+            detail="服务器配置错误",
+        )
+
+    openid = wx_result["openid"]
+    unionid = wx_result.get("unionid")
+
+    # 2. 查找/创建用户
+    conn = get_connection()
+    try:
+        with conn.cursor() as cur:
+            cur.execute(
+                "SELECT id, status FROM auth.users WHERE wx_openid = %s",
+                (openid,),
+            )
+            row = cur.fetchone()
+
+            if row is None:
+                # 新用户：创建 pending 记录
+                try:
+                    cur.execute(
+                        """
+                        INSERT INTO auth.users (wx_openid, wx_union_id, status)
+                        VALUES (%s, %s, 'pending')
+                        RETURNING id, status
+                        """,
+                        (openid, unionid),
+                    )
+                    row = cur.fetchone()
+                    conn.commit()
+                except pg_errors.UniqueViolation:
+                    # 并发创建：回滚后查询已有记录
+                    conn.rollback()
+                    cur.execute(
+                        "SELECT id, status FROM auth.users WHERE wx_openid = %s",
+                        (openid,),
+                    )
+                    row = cur.fetchone()
+
+            user_id, user_status = row
+
+            # 3. disabled 用户拒绝登录
+            if user_status == "disabled":
+                raise HTTPException(
+                    status_code=status.HTTP_403_FORBIDDEN,
+                    detail="账号已被禁用",
+                )
+
+            # 4. 签发令牌
+            if user_status == "approved":
+                # 查找默认 site_id 和角色
+                default_site_id = _get_user_default_site(conn, user_id)
+                if default_site_id is not None:
+                    roles = _get_user_roles_at_site(conn, user_id, default_site_id)
+                    tokens = create_token_pair(user_id, default_site_id, roles=roles)
+                else:
+                    # approved 但无 site 绑定（异常边界），签发受限令牌
+                    tokens = create_limited_token_pair(user_id)
+            else:
+                # pending / rejected → 受限令牌
+                tokens = create_limited_token_pair(user_id)
+
+    finally:
+        conn.close()
+
+    return WxLoginResponse(
+        access_token=tokens["access_token"],
+        refresh_token=tokens["refresh_token"],
+        token_type=tokens["token_type"],
+        user_status=user_status,
+        user_id=user_id,
+    )
+
+
+# ── POST /api/xcx/apply ──────────────────────────────────
+
+@router.post("/apply", response_model=ApplicationResponse)
+async def submit_application(
+    body: ApplicationRequest,
+    user: CurrentUser = Depends(get_current_user_or_limited),
+):
+    """
+    提交入驻申请。
+
+    委托 application service 处理：
+    检查重复 pending → site_code 映射 → 创建记录 → 更新 nickname。
+    """
+    result = await create_application(
+        user_id=user.user_id,
+        site_code=body.site_code,
+        applied_role_text=body.applied_role_text,
+        phone=body.phone,
+        employee_number=body.employee_number,
+        nickname=body.nickname,
+    )
+    return ApplicationResponse(**result)
+
+
+# ── GET /api/xcx/me ───────────────────────────────────────
+
+@router.get("/me", response_model=UserStatusResponse)
+async def get_my_status(
+    user: CurrentUser = Depends(get_current_user_or_limited),
+):
+    """
+    查询自身状态 + 所有申请记录。
+
+    pending / approved / rejected 用户均可访问。
+    """
+    conn = get_connection()
+    try:
+        with conn.cursor() as cur:
+            # 查询用户基本信息
+            cur.execute(
+                "SELECT id, status, nickname FROM auth.users WHERE id = %s",
+                (user.user_id,),
+            )
+            user_row = cur.fetchone()
+            if user_row is None:
+                raise HTTPException(
+                    status_code=status.HTTP_401_UNAUTHORIZED,
+                    detail="用户不存在",
+                )
+
+            user_id, user_status, nickname = user_row
+    finally:
+        conn.close()
+
+    # 委托 service 查询申请列表
+    app_list = await get_user_applications(user_id)
+    applications = [ApplicationResponse(**a) for a in app_list]
+
+    return UserStatusResponse(
+        user_id=user_id,
+        status=user_status,
+        nickname=nickname,
+        applications=applications,
+    )
+
+
+# ── GET /api/xcx/me/sites ────────────────────────────────
+
+@router.get("/me/sites", response_model=list[SiteInfo])
+async def get_my_sites(
+    user: CurrentUser = Depends(get_current_user),
+):
+    """
+    查询当前用户关联的所有店铺及对应角色。
+
+    仅 approved 用户可访问（通过 get_current_user 依赖保证）。
+    """
+    conn = get_connection()
+    try:
+        with conn.cursor() as cur:
+            cur.execute(
+                """
+                SELECT usr.site_id,
+                       COALESCE(scm.site_name, '未知店铺') AS site_name,
+                       r.code  AS role_code,
+                       r.name  AS role_name
+                  FROM auth.user_site_roles usr
+                  JOIN auth.roles r ON usr.role_id = r.id
+                  LEFT JOIN auth.site_code_mapping scm ON usr.site_id = scm.site_id
+                 WHERE usr.user_id = %s
+                 ORDER BY usr.site_id, r.code
+                """,
+                (user.user_id,),
+            )
+            rows = cur.fetchall()
+    finally:
+        conn.close()
+
+    # 按 site_id 分组
+    sites_map: dict[int, SiteInfo] = {}
+    for site_id, site_name, role_code, role_name in rows:
+        if site_id not in sites_map:
+            sites_map[site_id] = SiteInfo(
+                site_id=site_id, site_name=site_name, roles=[]
+            )
+        sites_map[site_id].roles.append({"code": role_code, "name": role_name})
+
+    return list(sites_map.values())
+
+
+# ── POST /api/xcx/switch-site ────────────────────────────
+
+@router.post("/switch-site", response_model=WxLoginResponse)
+async def switch_site(
+    body: SwitchSiteRequest,
+    user: CurrentUser = Depends(get_current_user),
+):
+    """
+    切换当前店铺。
+
+    验证用户在目标 site_id 下有角色绑定，然后签发包含新 site_id 的 JWT。
+    """
+    conn = get_connection()
+    try:
+        with conn.cursor() as cur:
+            # 验证用户在目标 site_id 下有角色
+            cur.execute(
+                """
+                SELECT 1 FROM auth.user_site_roles
+                 WHERE user_id = %s AND site_id = %s
+                 LIMIT 1
+                """,
+                (user.user_id, body.site_id),
+            )
+            if cur.fetchone() is None:
+                raise HTTPException(
+                    status_code=status.HTTP_403_FORBIDDEN,
+                    detail="您在该店铺下没有角色绑定",
+                )
+
+            roles = _get_user_roles_at_site(conn, user.user_id, body.site_id)
+
+            # 查询用户状态
+            cur.execute(
+                "SELECT status FROM auth.users WHERE id = %s",
+                (user.user_id,),
+            )
+            user_row = cur.fetchone()
+            user_status = user_row[0] if user_row else "pending"
+
+    finally:
+        conn.close()
+
+    tokens = create_token_pair(user.user_id, body.site_id, roles=roles)
+
+    return WxLoginResponse(
+        access_token=tokens["access_token"],
+        refresh_token=tokens["refresh_token"],
+        token_type=tokens["token_type"],
+        user_status=user_status,
+        user_id=user.user_id,
+    )
+
+
+# ── POST /api/xcx/refresh ────────────────────────────────
+
+@router.post("/refresh", response_model=WxLoginResponse)
+async def refresh_token(body: RefreshTokenRequest):
+    """
+    刷新令牌。
+
+    解码 refresh_token → 根据用户当前状态签发新的令牌对。
+    - 受限 refresh_token（limited=True）→ 签发新的受限令牌对
+    - 完整 refresh_token → 签发新的完整令牌对（保持原 site_id）
+    """
+    try:
+        payload = decode_refresh_token(body.refresh_token)
+    except JWTError:
+        raise HTTPException(
+            status_code=status.HTTP_401_UNAUTHORIZED,
+            detail="无效的刷新令牌",
+        )
+
+    user_id = int(payload["sub"])
+    is_limited = payload.get("limited", False)
+
+    conn = get_connection()
+    try:
+        with conn.cursor() as cur:
+            # 查询用户当前状态
+            cur.execute(
+                "SELECT id, status FROM auth.users WHERE id = %s",
+                (user_id,),
+            )
+            user_row = cur.fetchone()
+            if user_row is None:
+                raise HTTPException(
+                    status_code=status.HTTP_401_UNAUTHORIZED,
+                    detail="用户不存在",
+                )
+
+            _, user_status = user_row
+
+            if user_status == "disabled":
+                raise HTTPException(
+                    status_code=status.HTTP_403_FORBIDDEN,
+                    detail="账号已被禁用",
+                )
+
+            if is_limited or user_status != "approved":
+                # 受限令牌刷新 → 仍签发受限令牌
+                tokens = create_limited_token_pair(user_id)
+            else:
+                # 完整令牌刷新 → 使用原 site_id 签发
+                site_id = payload.get("site_id")
+                if site_id is None:
+                    # 回退到默认 site
+                    site_id = _get_user_default_site(conn, user_id)
+                if site_id is not None:
+                    roles = _get_user_roles_at_site(conn, user_id, site_id)
+                    tokens = create_token_pair(user_id, site_id, roles=roles)
+                else:
+                    tokens = create_limited_token_pair(user_id)
+
+    finally:
+        conn.close()
+
+    return WxLoginResponse(
+        access_token=tokens["access_token"],
+        refresh_token=tokens["refresh_token"],
+        token_type=tokens["token_type"],
+        user_status=user_status,
+        user_id=user_id,
+    )

apps/backend/app/schemas/xcx_auth.py

@@ -0,0 +1,104 @@
+"""
+小程序认证相关 Pydantic 模型。
+
+覆盖：微信登录、用户申请、审核、人员匹配、店铺切换等场景。
+"""
+
+from __future__ import annotations
+
+from pydantic import BaseModel, Field
+
+
+# ── 微信登录 ──────────────────────────────────────────────
+
+class WxLoginRequest(BaseModel):
+    """微信登录请求。"""
+    code: str = Field(..., min_length=1, description="微信临时登录凭证")
+
+
+class WxLoginResponse(BaseModel):
+    """微信登录响应。"""
+    access_token: str
+    refresh_token: str
+    token_type: str = "bearer"
+    user_status: str  # pending / approved / rejected / disabled
+    user_id: int
+
+
+# ── 用户申请 ──────────────────────────────────────────────
+
+class ApplicationRequest(BaseModel):
+    """用户申请提交请求。"""
+    site_code: str = Field(..., pattern=r"^[A-Za-z]{2}\d{3}$", description="球房ID")
+    applied_role_text: str = Field(..., min_length=1, max_length=100, description="申请身份")
+    phone: str = Field(..., pattern=r"^\d{11}$", description="手机号")
+    employee_number: str | None = Field(None, max_length=50, description="员工编号")
+    nickname: str | None = Field(None, max_length=50, description="昵称")
+
+
+class ApplicationResponse(BaseModel):
+    """申请记录响应。"""
+    id: int
+    site_code: str
+    applied_role_text: str
+    status: str
+    review_note: str | None = None
+    created_at: str
+    reviewed_at: str | None = None
+
+
+# ── 用户状态 ──────────────────────────────────────────────
+
+class UserStatusResponse(BaseModel):
+    """用户状态查询响应。"""
+    user_id: int
+    status: str
+    nickname: str | None = None
+    applications: list[ApplicationResponse] = []
+
+
+# ── 店铺 ──────────────────────────────────────────────────
+
+class SiteInfo(BaseModel):
+    """店铺信息。"""
+    site_id: int
+    site_name: str
+    roles: list[dict] = []
+
+
+class SwitchSiteRequest(BaseModel):
+    """切换店铺请求。"""
+    site_id: int
+
+
+# ── 刷新令牌 ──────────────────────────────────────────────
+
+class RefreshTokenRequest(BaseModel):
+    """刷新令牌请求。"""
+    refresh_token: str = Field(..., min_length=1, description="刷新令牌")
+
+
+# ── 人员匹配 ──────────────────────────────────────────────
+
+class MatchCandidate(BaseModel):
+    """匹配候选人。"""
+    source_type: str  # assistant / staff
+    id: int
+    name: str
+    mobile: str | None = None
+    job_num: str | None = None
+
+
+# ── 管理端审核 ────────────────────────────────────────────
+
+class ApproveRequest(BaseModel):
+    """批准申请请求。"""
+    role_id: int
+    binding: dict | None = None  # {"assistant_id": ..., "staff_id": ..., "binding_type": ...}
+    review_note: str | None = None
+
+
+class RejectRequest(BaseModel):
+    """拒绝申请请求。"""
+    review_note: str = Field(..., min_length=1, description="拒绝原因")
+

apps/backend/app/services/application.py

@@ -0,0 +1,347 @@
+# -*- coding: utf-8 -*-
+"""
+申请服务 —— 处理用户申请的创建、查询、审核。
+
+职责：
+- create_application()：创建申请 + site_code 映射查找
+- approve_application()：批准 + 创建绑定/角色
+- reject_application()：拒绝 + 记录原因
+- get_user_applications()：查询用户申请列表
+
+所有数据库操作使用 psycopg2 原生 SQL，不引入 ORM。
+"""
+
+from __future__ import annotations
+
+import logging
+
+from fastapi import HTTPException, status
+
+from app.database import get_connection
+
+logger = logging.getLogger(__name__)
+
+
+async def create_application(
+    user_id: int,
+    site_code: str,
+    applied_role_text: str,
+    phone: str,
+    employee_number: str | None = None,
+    nickname: str | None = None,
+) -> dict:
+    """
+    创建用户申请。
+
+    1. 检查是否有 pending 申请（有则 409）
+    2. 查找 site_code → site_id 映射
+    3. 插入 user_applications 记录
+    4. 更新 users.nickname（如提供）
+
+    返回:
+        申请记录 dict，包含 id / site_code / applied_role_text / status /
+        review_note / created_at / reviewed_at
+    """
+    conn = get_connection()
+    try:
+        with conn.cursor() as cur:
+            # 1. 检查重复 pending 申请
+            cur.execute(
+                """
+                SELECT id FROM auth.user_applications
+                 WHERE user_id = %s AND status = 'pending'
+                 LIMIT 1
+                """,
+                (user_id,),
+            )
+            if cur.fetchone() is not None:
+                raise HTTPException(
+                    status_code=status.HTTP_409_CONFLICT,
+                    detail="已有待审核的申请，请等待审核完成",
+                )
+
+            # 2. 查找 site_code → site_id 映射
+            site_id = None
+            cur.execute(
+                "SELECT site_id FROM auth.site_code_mapping WHERE site_code = %s",
+                (site_code,),
+            )
+            mapping_row = cur.fetchone()
+            if mapping_row is not None:
+                site_id = mapping_row[0]
+
+            # 3. 创建申请记录
+            cur.execute(
+                """
+                INSERT INTO auth.user_applications
+                    (user_id, site_code, site_id, applied_role_text,
+                     phone, employee_number, status)
+                VALUES (%s, %s, %s, %s, %s, %s, 'pending')
+                RETURNING id, site_code, applied_role_text, status,
+                          review_note, created_at::text, reviewed_at::text
+                """,
+                (
+                    user_id,
+                    site_code,
+                    site_id,
+                    applied_role_text,
+                    phone,
+                    employee_number,
+                ),
+            )
+            row = cur.fetchone()
+
+            # 4. 更新 nickname（如提供）
+            if nickname:
+                cur.execute(
+                    "UPDATE auth.users SET nickname = %s, updated_at = NOW() WHERE id = %s",
+                    (nickname, user_id),
+                )
+
+            conn.commit()
+    finally:
+        conn.close()
+
+    return {
+        "id": row[0],
+        "site_code": row[1],
+        "applied_role_text": row[2],
+        "status": row[3],
+        "review_note": row[4],
+        "created_at": row[5],
+        "reviewed_at": row[6],
+    }
+
+
+
+async def approve_application(
+    application_id: int,
+    reviewer_id: int,
+    role_id: int,
+    binding: dict | None = None,
+    review_note: str | None = None,
+) -> dict:
+    """
+    批准申请。
+
+    1. 查询申请记录（不存在则 404）
+    2. 检查申请状态为 pending（否则 409）
+    3. 更新 user_applications.status = 'approved'
+    4. 创建 user_site_roles 记录
+    5. 创建 user_assistant_binding 记录（如有 binding）
+    6. 更新 users.status = 'approved'
+    7. 记录 reviewer_id 和 reviewed_at
+
+    参数:
+        application_id: 申请 ID
+        reviewer_id: 审核人 user_id
+        role_id: 分配的角色 ID
+        binding: 绑定信息，格式 {"assistant_id": ..., "staff_id": ..., "binding_type": ...}
+        review_note: 审核备注（可选）
+
+    返回:
+        更新后的申请记录 dict
+    """
+    conn = get_connection()
+    try:
+        with conn.cursor() as cur:
+            # 1. 查询申请记录
+            cur.execute(
+                """
+                SELECT id, user_id, site_id, status
+                  FROM auth.user_applications
+                 WHERE id = %s
+                """,
+                (application_id,),
+            )
+            app_row = cur.fetchone()
+            if app_row is None:
+                raise HTTPException(
+                    status_code=status.HTTP_404_NOT_FOUND,
+                    detail="申请不存在",
+                )
+
+            _, app_user_id, app_site_id, app_status = app_row
+
+            # 2. 检查状态为 pending
+            if app_status != "pending":
+                raise HTTPException(
+                    status_code=status.HTTP_409_CONFLICT,
+                    detail=f"申请当前状态为 {app_status}，无法审核",
+                )
+
+            # 3. 更新申请状态为 approved
+            cur.execute(
+                """
+                UPDATE auth.user_applications
+                   SET status = 'approved',
+                       reviewer_id = %s,
+                       review_note = %s,
+                       reviewed_at = NOW()
+                 WHERE id = %s
+                RETURNING id, site_code, applied_role_text, status,
+                          review_note, created_at::text, reviewed_at::text
+                """,
+                (reviewer_id, review_note, application_id),
+            )
+            updated_row = cur.fetchone()
+
+            # 4. 创建 user_site_roles 记录（如果有 site_id）
+            if app_site_id is not None:
+                cur.execute(
+                    """
+                    INSERT INTO auth.user_site_roles (user_id, site_id, role_id)
+                    VALUES (%s, %s, %s)
+                    ON CONFLICT (user_id, site_id, role_id) DO NOTHING
+                    """,
+                    (app_user_id, app_site_id, role_id),
+                )
+
+            # 5. 创建 user_assistant_binding 记录（如有 binding 且有 site_id）
+            if binding and app_site_id is not None:
+                cur.execute(
+                    """
+                    INSERT INTO auth.user_assistant_binding
+                        (user_id, site_id, assistant_id, staff_id, binding_type)
+                    VALUES (%s, %s, %s, %s, %s)
+                    """,
+                    (
+                        app_user_id,
+                        app_site_id,
+                        binding.get("assistant_id"),
+                        binding.get("staff_id"),
+                        binding.get("binding_type", "assistant"),
+                    ),
+                )
+
+            # 6. 更新用户状态为 approved
+            cur.execute(
+                """
+                UPDATE auth.users
+                   SET status = 'approved', updated_at = NOW()
+                 WHERE id = %s
+                """,
+                (app_user_id,),
+            )
+
+            conn.commit()
+    finally:
+        conn.close()
+
+    return {
+        "id": updated_row[0],
+        "site_code": updated_row[1],
+        "applied_role_text": updated_row[2],
+        "status": updated_row[3],
+        "review_note": updated_row[4],
+        "created_at": updated_row[5],
+        "reviewed_at": updated_row[6],
+    }
+
+
+async def reject_application(
+    application_id: int,
+    reviewer_id: int,
+    review_note: str,
+) -> dict:
+    """
+    拒绝申请。
+
+    1. 查询申请记录（不存在则 404）
+    2. 检查申请状态为 pending（否则 409）
+    3. 更新 user_applications.status = 'rejected'
+    4. 记录 reviewer_id、review_note、reviewed_at
+
+    返回:
+        更新后的申请记录 dict
+    """
+    conn = get_connection()
+    try:
+        with conn.cursor() as cur:
+            # 1. 查询申请记录
+            cur.execute(
+                "SELECT id, status FROM auth.user_applications WHERE id = %s",
+                (application_id,),
+            )
+            app_row = cur.fetchone()
+            if app_row is None:
+                raise HTTPException(
+                    status_code=status.HTTP_404_NOT_FOUND,
+                    detail="申请不存在",
+                )
+
+            # 2. 检查状态为 pending
+            if app_row[1] != "pending":
+                raise HTTPException(
+                    status_code=status.HTTP_409_CONFLICT,
+                    detail=f"申请当前状态为 {app_row[1]}，无法审核",
+                )
+
+            # 3. 更新申请状态为 rejected
+            cur.execute(
+                """
+                UPDATE auth.user_applications
+                   SET status = 'rejected',
+                       reviewer_id = %s,
+                       review_note = %s,
+                       reviewed_at = NOW()
+                 WHERE id = %s
+                RETURNING id, site_code, applied_role_text, status,
+                          review_note, created_at::text, reviewed_at::text
+                """,
+                (reviewer_id, review_note, application_id),
+            )
+            updated_row = cur.fetchone()
+            conn.commit()
+    finally:
+        conn.close()
+
+    return {
+        "id": updated_row[0],
+        "site_code": updated_row[1],
+        "applied_role_text": updated_row[2],
+        "status": updated_row[3],
+        "review_note": updated_row[4],
+        "created_at": updated_row[5],
+        "reviewed_at": updated_row[6],
+    }
+
+
+async def get_user_applications(user_id: int) -> list[dict]:
+    """
+    查询用户的所有申请记录。
+
+    按创建时间倒序排列。
+
+    返回:
+        申请记录 dict 列表
+    """
+    conn = get_connection()
+    try:
+        with conn.cursor() as cur:
+            cur.execute(
+                """
+                SELECT id, site_code, applied_role_text, status,
+                       review_note, created_at::text, reviewed_at::text
+                  FROM auth.user_applications
+                 WHERE user_id = %s
+                 ORDER BY created_at DESC
+                """,
+                (user_id,),
+            )
+            rows = cur.fetchall()
+    finally:
+        conn.close()
+
+    return [
+        {
+            "id": r[0],
+            "site_code": r[1],
+            "applied_role_text": r[2],
+            "status": r[3],
+            "review_note": r[4],
+            "created_at": r[5],
+            "reviewed_at": r[6],
+        }
+        for r in rows
+    ]

apps/backend/app/services/matching.py

@@ -0,0 +1,170 @@
+# -*- coding: utf-8 -*-
+"""
+人员匹配服务 —— 根据申请信息在 FDW 外部表中查找候选匹配。
+
+职责：
+- find_candidates()：根据 site_id + phone（+ employee_number）在助教表和员工表中查找匹配
+
+查询通过业务库的 fdw_etl Schema 访问 ETL 库的 RLS 视图。
+查询前需 SET LOCAL app.current_site_id 以启用门店隔离。
+FDW 外部表可能不存在（测试库等场景），需优雅降级返回空列表。
+"""
+
+from __future__ import annotations
+
+import logging
+
+from app.database import get_connection
+
+logger = logging.getLogger(__name__)
+
+
+async def find_candidates(
+    site_id: int | None,
+    phone: str,
+    employee_number: str | None = None,
+) -> list[dict]:
+    """
+    在助教表和员工表中查找匹配候选。
+
+    查询逻辑：
+    1. 若 site_id 为 None，跳过匹配，返回空列表
+    2. 设置 app.current_site_id 进行 RLS 隔离
+    3. fdw_etl.v_dim_assistant: WHERE mobile = phone
+    4. fdw_etl.v_dim_staff JOIN fdw_etl.v_dim_staff_ex: WHERE mobile = phone OR job_num = employee_number
+    5. 合并结果返回统一候选列表
+
+    参数:
+        site_id: 门店 ID（None 时跳过匹配）
+        phone: 手机号
+        employee_number: 员工编号（可选，用于 job_num 匹配）
+
+    返回:
+        [{"source_type": "assistant"|"staff", "id": int, "name": str,
+          "mobile": str|None, "job_num": str|None}]
+    """
+    # site_id 为空时直接返回空列表（需求 5.6）
+    if site_id is None:
+        return []
+
+    candidates: list[dict] = []
+
+    conn = get_connection()
+    try:
+        conn.autocommit = False
+        with conn.cursor() as cur:
+            # 设置 RLS 隔离：FDW 会透传 session 变量到远端 ETL 库
+            cur.execute(
+                "SET LOCAL app.current_site_id = %s", (str(site_id),)
+            )
+
+            # 1. 查询助教匹配
+            candidates.extend(_query_assistants(cur, phone))
+
+            # 2. 查询员工匹配
+            candidates.extend(_query_staff(cur, phone, employee_number))
+
+        conn.commit()
+    except Exception:
+        logger.warning(
+            "FDW 人员匹配查询失败 (site_id=%s, phone=%s)，返回空列表",
+            site_id,
+            phone,
+            exc_info=True,
+        )
+        try:
+            conn.rollback()
+        except Exception:
+            pass
+        return []
+    finally:
+        conn.close()
+
+    return candidates
+
+
+def _query_assistants(cur, phone: str) -> list[dict]:
+    """查询 fdw_etl.v_dim_assistant 中按 mobile 匹配的助教记录。"""
+    try:
+        cur.execute(
+            """
+            SELECT assistant_id, real_name, mobile
+              FROM fdw_etl.v_dim_assistant
+             WHERE mobile = %s
+               AND scd2_is_current = TRUE
+            """,
+            (phone,),
+        )
+        rows = cur.fetchall()
+    except Exception:
+        logger.warning(
+            "查询 fdw_etl.v_dim_assistant 失败，跳过助教匹配",
+            exc_info=True,
+        )
+        return []
+
+    return [
+        {
+            "source_type": "assistant",
+            "id": row[0],
+            "name": row[1] or "",
+            "mobile": row[2],
+            "job_num": None,
+        }
+        for row in rows
+    ]
+
+
+def _query_staff(
+    cur, phone: str, employee_number: str | None
+) -> list[dict]:
+    """
+    查询 fdw_etl.v_dim_staff JOIN fdw_etl.v_dim_staff_ex
+    按 mobile 或 job_num 匹配的员工记录。
+    """
+    try:
+        # 构建 WHERE 条件：mobile = phone，或 job_num = employee_number
+        if employee_number:
+            cur.execute(
+                """
+                SELECT s.staff_id, s.staff_name, s.mobile, ex.job_num
+                  FROM fdw_etl.v_dim_staff s
+                  LEFT JOIN fdw_etl.v_dim_staff_ex ex
+                    ON s.staff_id = ex.staff_id
+                   AND ex.scd2_is_current = TRUE
+                 WHERE s.scd2_is_current = TRUE
+                   AND (s.mobile = %s OR ex.job_num = %s)
+                """,
+                (phone, employee_number),
+            )
+        else:
+            cur.execute(
+                """
+                SELECT s.staff_id, s.staff_name, s.mobile, ex.job_num
+                  FROM fdw_etl.v_dim_staff s
+                  LEFT JOIN fdw_etl.v_dim_staff_ex ex
+                    ON s.staff_id = ex.staff_id
+                   AND ex.scd2_is_current = TRUE
+                 WHERE s.scd2_is_current = TRUE
+                   AND s.mobile = %s
+                """,
+                (phone,),
+            )
+        rows = cur.fetchall()
+    except Exception:
+        logger.warning(
+            "查询 fdw_etl.v_dim_staff 失败，跳过员工匹配",
+            exc_info=True,
+        )
+        return []
+
+    return [
+        {
+            "source_type": "staff",
+            "id": row[0],
+            "name": row[1] or "",
+            "mobile": row[2],
+            "job_num": row[3],
+        }
+        for row in rows
+    ]

apps/backend/app/services/role.py

@@ -0,0 +1,129 @@
+# -*- coding: utf-8 -*-
+"""
+角色权限服务 —— 查询用户在指定店铺下的角色和权限。
+
+职责：
+- get_user_permissions()：获取用户在指定 site_id 下的权限 code 列表
+- get_user_sites()：获取用户关联的所有店铺及对应角色
+- check_user_has_site_role()：检查用户在指定 site_id 下是否有任何角色绑定
+
+所有数据库操作使用 psycopg2 原生 SQL，不引入 ORM。
+"""
+
+from __future__ import annotations
+
+import logging
+
+from app.database import get_connection
+
+logger = logging.getLogger(__name__)
+
+
+async def get_user_permissions(user_id: int, site_id: int) -> list[str]:
+    """
+    获取用户在指定 site_id 下的权限 code 列表。
+
+    通过 user_site_roles → role_permissions → permissions 三表联查，
+    返回去重后的权限 code 列表。
+
+    参数:
+        user_id: 用户 ID
+        site_id: 门店 ID
+
+    返回:
+        权限 code 字符串列表，如 ["view_tasks", "view_board"]
+    """
+    conn = get_connection()
+    try:
+        with conn.cursor() as cur:
+            cur.execute(
+                """
+                SELECT DISTINCT p.code
+                  FROM auth.user_site_roles usr
+                  JOIN auth.role_permissions rp ON usr.role_id = rp.role_id
+                  JOIN auth.permissions p ON rp.permission_id = p.id
+                 WHERE usr.user_id = %s AND usr.site_id = %s
+                """,
+                (user_id, site_id),
+            )
+            rows = cur.fetchall()
+    finally:
+        conn.close()
+
+    return [row[0] for row in rows]
+
+
+async def get_user_sites(user_id: int) -> list[dict]:
+    """
+    获取用户关联的所有店铺及对应角色。
+
+    查询 user_site_roles JOIN roles，LEFT JOIN site_code_mapping 获取店铺名称，
+    按 site_id 分组聚合角色列表。
+
+    参数:
+        user_id: 用户 ID
+
+    返回:
+        [{"site_id": int, "site_name": str, "roles": [{"code": str, "name": str}]}]
+    """
+    conn = get_connection()
+    try:
+        with conn.cursor() as cur:
+            cur.execute(
+                """
+                SELECT usr.site_id,
+                       COALESCE(scm.site_name, '') AS site_name,
+                       r.code,
+                       r.name
+                  FROM auth.user_site_roles usr
+                  JOIN auth.roles r ON usr.role_id = r.id
+                  LEFT JOIN auth.site_code_mapping scm ON usr.site_id = scm.site_id
+                 WHERE usr.user_id = %s
+                 ORDER BY usr.site_id, r.code
+                """,
+                (user_id,),
+            )
+            rows = cur.fetchall()
+    finally:
+        conn.close()
+
+    # 按 site_id 分组聚合
+    sites_map: dict[int, dict] = {}
+    for site_id, site_name, role_code, role_name in rows:
+        if site_id not in sites_map:
+            sites_map[site_id] = {
+                "site_id": site_id,
+                "site_name": site_name,
+                "roles": [],
+            }
+        sites_map[site_id]["roles"].append({"code": role_code, "name": role_name})
+
+    return list(sites_map.values())
+
+
+async def check_user_has_site_role(user_id: int, site_id: int) -> bool:
+    """
+    检查用户在指定 site_id 下是否有任何角色绑定。
+
+    参数:
+        user_id: 用户 ID
+        site_id: 门店 ID
+
+    返回:
+        True 表示有角色绑定，False 表示无
+    """
+    conn = get_connection()
+    try:
+        with conn.cursor() as cur:
+            cur.execute(
+                """
+                SELECT 1
+                  FROM auth.user_site_roles
+                 WHERE user_id = %s AND site_id = %s
+                 LIMIT 1
+                """,
+                (user_id, site_id),
+            )
+            return cur.fetchone() is not None
+    finally:
+        conn.close()

apps/backend/app/services/task_registry.py

@@ -44,7 +44,7 @@ class DwdTableDefinition:
 ODS_TASKS: list[TaskDefinition] = [
     TaskDefinition("ODS_ASSISTANT_ACCOUNT", "助教账号", "抽取助教账号主数据", "助教", "ODS", is_ods=True),
     TaskDefinition("ODS_ASSISTANT_LEDGER", "助教服务记录", "抽取助教服务流水", "助教", "ODS", is_ods=True),
-    TaskDefinition("ODS_ASSISTANT_ABOLISH", "助教取消记录", "抽取助教取消/作废记录", "助教", "ODS", is_ods=True),
+
     TaskDefinition("ODS_SETTLEMENT_RECORDS", "结算记录", "抽取订单结算记录", "结算", "ODS", is_ods=True),
     # CHANGE [2026-07-20] intent: 同步 ETL 侧移除——ODS_SETTLEMENT_TICKET 已在 Task 7.3 中彻底移除
     TaskDefinition("ODS_TABLE_USE", "台费流水", "抽取台费使用流水", "台桌", "ODS", is_ods=True),
@@ -65,6 +65,7 @@ ODS_TASKS: list[TaskDefinition] = [
     TaskDefinition("ODS_STORE_GOODS", "门店商品", "抽取门店商品主数据", "商品", "ODS", is_ods=True, requires_window=False),
     TaskDefinition("ODS_STORE_GOODS_SALES", "商品销售", "抽取门店商品销售记录", "商品", "ODS", is_ods=True),
     TaskDefinition("ODS_TENANT_GOODS", "租户商品", "抽取租户级商品主数据", "商品", "ODS", is_ods=True, requires_window=False),
+    TaskDefinition("ODS_STAFF_INFO", "员工档案", "抽取员工档案（含在职/离职）", "助教", "ODS", is_ods=True, requires_window=False),
 ]
 
 # ── DWD 任务定义 ──────────────────────────────────────────────
@@ -105,18 +106,17 @@ INDEX_TASKS: list[TaskDefinition] = [
     TaskDefinition("DWS_ML_MANUAL_IMPORT", "手动导入 (ML)", "手动导入机器学习数据", "指数", "INDEX", requires_window=False, is_common=False),
     # CHANGE [2026-02-19] intent: 补充说明 RelationIndexTask 产出 RS/OS/MS/ML 四个子指数
     TaskDefinition("DWS_RELATION_INDEX", "关系指数 (RS)", "产出 RS/OS/MS/ML 四个子指数", "指数", "INDEX"),
+    TaskDefinition("DWS_SPENDING_POWER_INDEX", "消费力指数 (SPI)", "计算会员消费力指数", "指数", "INDEX"),
 ]
 
 # ── 工具类任务定义 ────────────────────────────────────────────
 
 UTILITY_TASKS: list[TaskDefinition] = [
     TaskDefinition("MANUAL_INGEST", "手动导入", "从本地 JSON 文件手动导入数据", "工具", "UTILITY", requires_window=False, is_common=False),
-    TaskDefinition("INIT_ODS_SCHEMA", "初始化 ODS Schema", "创建 ODS 层表结构", "工具", "UTILITY", requires_window=False, is_common=False),
-    TaskDefinition("INIT_DWD_SCHEMA", "初始化 DWD Schema", "创建 DWD 层表结构", "工具", "UTILITY", requires_window=False, is_common=False),
-    TaskDefinition("INIT_DWS_SCHEMA", "初始化 DWS Schema", "创建 DWS 层表结构", "工具", "UTILITY", requires_window=False, is_common=False),
+    # CHANGE [2026-02-24] intent: 移除 4 个一次性初始化任务（INIT_ODS/DWD/DWS_SCHEMA、SEED_DWS_CONFIG），
+    #   环境已搭建完成，仅保留 ETL 侧实现供运维脚本直接 import 使用，UI 不再展示
     TaskDefinition("ODS_JSON_ARCHIVE", "ODS JSON 归档", "归档 ODS 原始 JSON 文件", "工具", "UTILITY", requires_window=False, is_common=False),
     TaskDefinition("CHECK_CUTOFF", "游标检查", "检查各任务数据游标截止点", "工具", "UTILITY", requires_window=False, is_common=False),
-    TaskDefinition("SEED_DWS_CONFIG", "DWS 配置种子", "初始化 DWS 配置数据", "工具", "UTILITY", requires_window=False, is_common=False),
     TaskDefinition("DATA_INTEGRITY_CHECK", "数据完整性校验", "校验跨层数据完整性", "工具", "UTILITY", requires_window=False, is_common=False),
 ]
 
@@ -202,8 +202,7 @@ DWD_TABLES: list[DwdTableDefinition] = [
     DwdTableDefinition("dwd.dwd_store_goods_sale_ex", "商品销售（扩展）", "商品", "ods.store_goods_sales_records"),
     DwdTableDefinition("dwd.dwd_assistant_service_log", "助教服务流水", "助教", "ods.assistant_service_records"),
     DwdTableDefinition("dwd.dwd_assistant_service_log_ex", "助教服务流水（扩展）", "助教", "ods.assistant_service_records"),
-    DwdTableDefinition("dwd.dwd_assistant_trash_event", "助教取消事件", "助教", "ods.assistant_cancellation_records"),
-    DwdTableDefinition("dwd.dwd_assistant_trash_event_ex", "助教取消事件（扩展）", "助教", "ods.assistant_cancellation_records"),
+    # CHANGE [2026-02-24] intent: 移除已废弃的 assistant_trash_event 表定义（ODS_ASSISTANT_ABOLISH 全链路已清理）
     DwdTableDefinition("dwd.dwd_member_balance_change", "会员余额变动", "会员", "ods.member_balance_changes"),
     DwdTableDefinition("dwd.dwd_member_balance_change_ex", "会员余额变动（扩展）", "会员", "ods.member_balance_changes"),
     DwdTableDefinition("dwd.dwd_groupbuy_redemption", "团购核销", "团购", "ods.group_buy_redemption_records"),

apps/backend/app/services/wechat.py

@@ -0,0 +1,90 @@
+# -*- coding: utf-8 -*-
+"""
+微信认证服务 —— 封装 code2Session API 调用。
+
+通过 httpx.AsyncClient 异步调用微信 jscode2session 接口，
+将小程序端的临时登录凭证 (code) 换取 openid / session_key。
+"""
+
+from __future__ import annotations
+
+import logging
+
+import httpx
+
+from app.config import get
+
+logger = logging.getLogger(__name__)
+
+CODE2SESSION_URL = "https://api.weixin.qq.com/sns/jscode2session"
+
+# 微信 errcode → (HTTP 状态码, 用户可见提示)
+_WX_ERROR_MAP: dict[int, tuple[int, str]] = {
+    40029: (401, "登录凭证无效，请重新登录"),
+    45011: (429, "请求过于频繁"),
+    40226: (403, "账号存在风险"),
+}
+
+
+class WeChatAuthError(Exception):
+    """微信认证错误，包含 errcode 和 errmsg。"""
+
+    def __init__(self, errcode: int, errmsg: str) -> None:
+        self.errcode = errcode
+        self.errmsg = errmsg
+        super().__init__(f"WeChatAuthError({errcode}): {errmsg}")
+
+    @property
+    def http_status(self) -> int:
+        """根据 errcode 映射到建议的 HTTP 状态码。"""
+        return _WX_ERROR_MAP.get(self.errcode, (401, ""))[0]
+
+    @property
+    def detail(self) -> str:
+        """根据 errcode 映射到用户可见的错误提示。"""
+        return _WX_ERROR_MAP.get(self.errcode, (401, "微信登录失败"))[1]
+
+
+async def code2session(code: str) -> dict:
+    """
+    调用微信 code2Session 接口。
+
+    参数:
+        code: 小程序端 wx.login() 获取的临时登录凭证
+
+    返回:
+        {"openid": str, "session_key": str, "unionid": str | None}
+
+    异常:
+        WeChatAuthError: 微信接口返回非零 errcode 时抛出
+        RuntimeError: WX_APPID / WX_SECRET 环境变量缺失时抛出
+    """
+    appid = get("WX_APPID", "")
+    secret = get("WX_SECRET", "")
+
+    if not appid or not secret:
+        raise RuntimeError("微信配置缺失：WX_APPID 或 WX_SECRET 未设置")
+
+    params = {
+        "appid": appid,
+        "secret": secret,
+        "js_code": code,
+        "grant_type": "authorization_code",
+    }
+
+    async with httpx.AsyncClient(timeout=10.0) as client:
+        resp = await client.get(CODE2SESSION_URL, params=params)
+        resp.raise_for_status()
+        data = resp.json()
+
+    errcode = data.get("errcode", 0)
+    if errcode != 0:
+        errmsg = data.get("errmsg", "unknown error")
+        logger.warning("微信 code2Session 失败: errcode=%s, errmsg=%s", errcode, errmsg)
+        raise WeChatAuthError(errcode, errmsg)
+
+    return {
+        "openid": data["openid"],
+        "session_key": data["session_key"],
+        "unionid": data.get("unionid"),
+    }