v1.2.117：查寝二维码支持摄像头实时扫码

- 新增 QrScanner 组件：getUserMedia 调后置摄像头 + jsQR 每 120ms 识别一帧，命中即写入二维码ID
- 识别用整帧下采样（480→720 两档），取景框仅作视觉引导：object-cover 会放大裁切画面，
  只扫中心区时近距离对准反而扫不到（实测复现）
- 支持手电筒（设备支持时）；非 HTTPS / 权限被拒 / 无设备分别给出可操作的提示
- 保留「选图」回退到原有图片解析；扫码页 z-[400] 且显式恢复 pointer-events
  （reka modal 会把 body 设为 pointer-events:none，否则扫码页按钮点不动）

.woodpecker/build.yml

@@ -29,37 +29,67 @@ steps:
       # 应用配置由宿主机 /opt/cpdaily-xiaozhushou/config.toml 运维维护
       # （已移出版本库，避免密钥入库；容器以只读挂载方式读取）
 
+      # 两个固定槽位（蓝/绿），任一时刻都保持"两个容器都活着"：
+      #   活跃槽 = 反代当前指向的端口；备用槽 = 另一个端口（上一版，供秒级回滚）
+      SLOT_BLUE=8884
+      SLOT_GREEN=8885
+
       # ============================================================
-      # 第一步：读取当前反代端口，确定蓝绿状态
+      # 第一步：读取当前反代指向的端口，确定活跃/备用槽
       # 反代入口为 1Panel 站点 jinrixiaoyuan.top（frps 公网链路）：
       # /www/sites/jinrixiaoyuan.top/proxy/root.conf → proxy_pass http://127.0.0.1:8884|8885
+      # 该文件经 conf.d/jinrixiaoyuan.top.conf 的 include /www/sites/.../proxy/*.conf 载入。
       # ============================================================
       CURRENT_PORT=$(docker exec 1Panel-openresty-ESmn \
         grep -oE 'proxy_pass http://[0-9.]+:[0-9]+' \
         /www/sites/jinrixiaoyuan.top/proxy/root.conf | grep -o '[0-9]\+$')
       echo "=== 当前反代端口: $CURRENT_PORT ==="
 
-      if [ "$CURRENT_PORT" = "8884" ]; then
-        PORT_ACTIVE=8884
-        PORT_STANDBY=8885
-      elif [ "$CURRENT_PORT" = "8885" ]; then
-        PORT_ACTIVE=8885
-        PORT_STANDBY=8884
+      if [ "$CURRENT_PORT" = "$SLOT_BLUE" ]; then
+        PORT_ACTIVE=$SLOT_BLUE
+        PORT_STANDBY=$SLOT_GREEN
+      elif [ "$CURRENT_PORT" = "$SLOT_GREEN" ]; then
+        PORT_ACTIVE=$SLOT_GREEN
+        PORT_STANDBY=$SLOT_BLUE
       else
-        echo "ERROR: 未知反代端口 $CURRENT_PORT，中止部署（期望 8884/8885）"
+        echo "ERROR: 未知反代端口 $CURRENT_PORT，中止部署（期望 $SLOT_BLUE/$SLOT_GREEN）"
         exit 1
       fi
-      echo "   活跃: $PORT_ACTIVE | 备用: $PORT_STANDBY"
-
-      # 清理之前可能残留的临时容器
-      docker rm -f cpdaily-xiaozhushou-new 2>/dev/null || true
+      echo "   活跃槽: $PORT_ACTIVE | 备用槽: $PORT_STANDBY"
+      echo "   目标: 更新备用槽 :$PORT_STANDBY 到 $IMAGE_TAG 后，切换反代指向它（活跃槽保留，可回滚）"
 
       # ============================================================
-      # 第二步：在备用端口启动新容器
+      # 第一步附：一次性「收养」旧命名容器
+      # 迁移前的容器名为 cpdaily-xiaozhushou（无端口后缀），本脚本改用
+      # cpdaily-xiaozhushou-<端口>。若不改名，下次部署 rm -f 找不到它 → 端口
+      # 被占用导致 docker run 冲突、部署失败。此处按它实际映射的端口改名（幂等）。
+      # 同时清理历史遗留的 cpdaily-blue 陈尸容器。
       # ============================================================
-      echo "=== 蓝绿部署: 启动新容器 on :$PORT_STANDBY (image: $IMAGE_TAG) ==="
+      LEGACY_NAME=cpdaily-xiaozhushou
+      if docker inspect "$LEGACY_NAME" >/dev/null 2>&1; then
+        LEGACY_PORT=$(docker port "$LEGACY_NAME" 8093 2>/dev/null | head -1 | grep -oE '[0-9]+$' || true)
+        if [ -n "$LEGACY_PORT" ]; then
+          if docker inspect "cpdaily-xiaozhushou-$LEGACY_PORT" >/dev/null 2>&1; then
+            echo "   发现旧命名容器，但 cpdaily-xiaozhushou-$LEGACY_PORT 已存在，移除旧容器"
+            docker rm -f "$LEGACY_NAME" || true
+          else
+            echo "   收养旧命名容器: $LEGACY_NAME → cpdaily-xiaozhushou-$LEGACY_PORT"
+            docker rename "$LEGACY_NAME" "cpdaily-xiaozhushou-$LEGACY_PORT"
+          fi
+        else
+          echo "   旧命名容器未映射 8093 端口，跳过收养"
+        fi
+      fi
+      docker rm -f cpdaily-blue 2>/dev/null || true
 
-      docker run -d --name cpdaily-xiaozhushou-new \
+      # ============================================================
+      # 第二步：更新「备用槽」容器（此槽当前无流量，停它不会影响线上）
+      # ============================================================
+      echo "=== 停止并移除备用槽旧容器（:$PORT_STANDBY）==="
+      docker rm -f cpdaily-xiaozhushou-$PORT_STANDBY 2>/dev/null || true
+
+      echo "=== 在备用槽启动新容器 :$PORT_STANDBY (image: $IMAGE_TAG) ==="
+      docker run -d --name cpdaily-xiaozhushou-$PORT_STANDBY \
         --restart unless-stopped \
         --network likedream-net \
         -e TZ=Asia/Shanghai \
@@ -68,73 +98,92 @@ steps:
         cpdaily-xiaozhushou:$IMAGE_TAG
 
       # ============================================================
-      # 第三步：健康检查
+      # 第三步：健康检查（新容器必须就绪，否则直接失败且不动反代）
+      # 用 docker exec 在容器内自测，避免依赖宿主机到容器的网络路径。
       # ============================================================
       HEALTHY=false
-      for i in $(seq 1 15); do
-        if wget -q --timeout=3 -O /dev/null http://10.10.10.128:$PORT_STANDBY/health 2>/dev/null; then
+      for i in $(seq 1 30); do
+        if docker exec cpdaily-xiaozhushou-$PORT_STANDBY \
+             wget -q --timeout=3 -O /dev/null http://127.0.0.1:8093/health 2>/dev/null; then
           HEALTHY=true
           break
         fi
-        echo "  等待新容器就绪... ($i/15)"
+        echo "  等待新容器就绪... ($i/30)"
         sleep 2
       done
 
       if [ "$HEALTHY" = false ]; then
-        echo "ERROR: 新容器未通过健康检查，回滚"
-        docker stop cpdaily-xiaozhushou-new
-        docker rm cpdaily-xiaozhushou-new
+        echo "ERROR: 新容器未通过健康检查，中止部署（线上仍由活跃槽 :$PORT_ACTIVE 提供服务，未受影响）"
+        docker rm -f cpdaily-xiaozhushou-$PORT_STANDBY 2>/dev/null || true
         exit 1
       fi
       echo "   新容器已就绪 ✓"
 
       # ============================================================
-      # 第四步：切换 1Panel 反代到备用端口
+      # 第四步：切换 1Panel 反代到备用槽（唯一一次代理切换）
+      # 切换前先备份配置，nginx -t 通过后再 reload；reload 后等待旧 worker 退出，
+      # 确保旧连接不再按旧配置转发。
       # ============================================================
       echo "=== 切换 1Panel 反代 :$PORT_ACTIVE → :$PORT_STANDBY ==="
+      PROXY_CONF=/www/sites/jinrixiaoyuan.top/proxy/root.conf
       docker exec 1Panel-openresty-ESmn \
-        sed -i "s|:$PORT_ACTIVE|:$PORT_STANDBY|g" \
-        /www/sites/jinrixiaoyuan.top/proxy/root.conf
-      docker exec 1Panel-openresty-ESmn nginx -s reload
-      echo "   Nginx 热加载完成（零中断）✓"
-
-      # ============================================================
-      # 第五步：停止旧容器
-      # ============================================================
-      echo "=== 清理旧容器 ==="
-      docker stop cpdaily-xiaozhushou 2>/dev/null || true
-      docker rm cpdaily-xiaozhushou 2>/dev/null || true
-
-      # ============================================================
-      # 第六步：在活跃端口启动正式容器
-      # ============================================================
-      echo "=== 启动正式容器 on :$PORT_ACTIVE ==="
-      docker run -d --name cpdaily-xiaozhushou \
-        --restart unless-stopped \
-        --network likedream-net \
-        -e TZ=Asia/Shanghai \
-        -p $PORT_ACTIVE:8093 \
-        -v /opt/cpdaily-xiaozhushou/config.toml:/app/config.toml:ro \
-        cpdaily-xiaozhushou:$IMAGE_TAG
-
-      # ============================================================
-      # 第七步：切回 1Panel 反代到活跃端口
-      # ============================================================
-      echo "=== 切回 1Panel 反代 :$PORT_STANDBY → :$PORT_ACTIVE ==="
+        cp $PROXY_CONF $PROXY_CONF.bak
       docker exec 1Panel-openresty-ESmn \
-        sed -i "s|:$PORT_STANDBY|:$PORT_ACTIVE|g" \
-        /www/sites/jinrixiaoyuan.top/proxy/root.conf
-      docker exec 1Panel-openresty-ESmn nginx -s reload
-      echo "   Nginx 热加载完成（零中断）✓"
+        sed -i "s|:$PORT_ACTIVE|:$PORT_STANDBY|g" $PROXY_CONF
 
-      # ============================================================
-      # 第八步：清理
-      # ============================================================
-      echo "=== 清理 ==="
-      docker rm -f cpdaily-xiaozhushou-new 2>/dev/null || true
-      docker images cpdaily-xiaozhushou --format '{{.Tag}}' | grep -v latest | head -n -3 | while read tag; do
-        docker rmi cpdaily-xiaozhushou:$tag 2>/dev/null || true
+      if ! docker exec 1Panel-openresty-ESmn nginx -t 2>&1; then
+        echo "ERROR: nginx 配置校验失败，回滚反代配置"
+        docker exec 1Panel-openresty-ESmn cp $PROXY_CONF.bak $PROXY_CONF
+        docker rm -f cpdaily-xiaozhushou-$PORT_STANDBY 2>/dev/null || true
+        exit 1
+      fi
+
+      # 记录 reload 前的 worker pid，reload 后等其全部退出，避免旧 worker 按旧配置继续转发
+      OLD_WORKERS=$(docker exec 1Panel-openresty-ESmn \
+        sh -c 'ps -eo pid,cmd | grep "[n]ginx: worker" | awk "{print \$1}"' | tr '\n' ' ')
+      docker exec 1Panel-openresty-ESmn nginx -s reload
+      echo "   Nginx 热加载完成，等待旧 worker 退出..."
+
+      for i in $(seq 1 15); do
+        STILL=0
+        for p in $OLD_WORKERS; do
+          if docker exec 1Panel-openresty-ESmn sh -c "[ -d /proc/$p ]" 2>/dev/null; then
+            STILL=$((STILL + 1))
+          fi
+        done
+        if [ "$STILL" = "0" ]; then
+          echo "   旧 worker 已全部退出 ✓"
+          break
+        fi
+        echo "  等待旧 worker 释放连接... ($i/15, 剩余 $STILL)"
+        sleep 2
       done
-      echo "=== 部署完成 ✓ ==="
+      echo "   反代已指向 :$PORT_STANDBY ✓"
+
+      # ============================================================
+      # 第五步：验证线上确实由新槽服务
+      # ============================================================
+      if ! docker exec 1Panel-openresty-ESmn \
+           sh -c "wget -q --timeout=5 -O /dev/null http://127.0.0.1:$PORT_STANDBY/health" 2>/dev/null; then
+        echo "WARN: 新槽健康检查异常，但反代已切换，请人工核查"
+      else
+        echo "   线上验证通过（:$PORT_STANDBY 正常服务）✓"
+      fi
+
+      # ============================================================
+      # 第六步：保留活跃槽用于回滚说明；清理多余历史镜像
+      # 注：旧槽容器不删除 —— 它即上一版本，仍需回滚时可直接把反代切回。
+      #     下次部署时旧槽会被当作「备用槽」重建，因此不会无限堆积。
+      # ============================================================
+      echo "=== 当前容器 ==="
+      docker ps --filter "name=cpdaily-xiaozhushou-" --format '{{.Names}} → {{.Ports}} ({{.Status}})'
+
+      echo "=== 清理历史镜像（保留 latest 与最近 2 个版本）==="
+      docker images cpdaily-xiaozhushou --format '{{.Tag}}' \
+        | grep -v '^latest$' | head -n -2 | while read tag; do
+          docker rmi cpdaily-xiaozhushou:$tag 2>/dev/null || true
+        done
+
+      echo "=== 部署完成 ✓ 活跃槽 :$PORT_STANDBY（旧槽 :$PORT_ACTIVE 保留，可回滚）==="
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock

backed/cmd/server/main.go

@@ -4,6 +4,7 @@ import (
 	"fmt"
 	"log"
 	"net/http"
+	"strings"
 	"time"
 
 	"cpdaily-new/internal/config"
@@ -14,6 +15,7 @@ import (
 	"cpdaily-new/internal/service"
 
 	"github.com/gofiber/fiber/v2"
+	"github.com/gofiber/fiber/v2/middleware/compress"
 	"github.com/gofiber/fiber/v2/middleware/filesystem"
 )
 
@@ -35,6 +37,8 @@ func main() {
 
 	// 连接数据库
 	database.Init()
+	// 存量用户补齐邀请码（每个用户都应有邀请码；无缺失时仅一次查询）
+	handler.BackfillInviteCodes()
 
 	// 连接 Redis（验证码存储/限流）
 	service.InitRedis()
@@ -55,6 +59,18 @@ func main() {
 	// 中间件
 	app.Use(middleware.CORS())
 
+	// gzip 压缩：nginx 侧 gzip_types 未覆盖 application/json，接口返回的 JSON
+	// （历史上曾出现单次 2.9MB 的任务列表）会明文传输。在此按内容协商压缩，
+	// 随镜像走版本控制、只影响本服务。
+	// 必须排除 SSE 端点（/api/task/execute/*）：它用 SetBodyStreamWriter 流式推送，
+	// 压缩会缓冲响应导致事件无法即时到达。
+	app.Use(compress.New(compress.Config{
+		Level: compress.LevelBestSpeed, // 纯 CPU 敏感场景，优先速度
+		Next: func(c *fiber.Ctx) bool {
+			return strings.HasPrefix(c.Path(), "/api/task/execute/")
+		},
+	}))
+
 	// 路由
 	api := app.Group("/api")
 
@@ -63,12 +79,15 @@ func main() {
 	auth.Get("/captcha", handler.GetCaptcha)
 	auth.Get("/schools", handler.SearchSchools)
 	auth.Post("/login", handler.Login)
+	// 手机号验证码登录（无需选择学校：tenantId 由登录响应返回）
+	auth.Post("/sms/send", handler.SmsSend)
+	auth.Post("/sms/login", handler.SmsLogin)
 	auth.Post("/login/mfa", handler.MFAVerify)
 	auth.Post("/login/mfa/send", handler.MFASendCode)
 	auth.Post("/refresh", handler.RefreshToken)
 	auth.Get("/userinfo", middleware.AuthRequired(), handler.GetUserInfo)
-	auth.Post("/generate-invite", middleware.AuthRequired(), handler.GenerateMyInviteCode)
 	auth.Get("/my-invite", middleware.AuthRequired(), handler.GetMyInviteInfo)
+	auth.Post("/bind-invite", middleware.AuthRequired(), handler.BindInviteCode)
 	auth.Post("/redeem-invite", middleware.AuthRequired(), handler.RedeemInviteReward)
 	auth.Post("/guide/complete", middleware.AuthRequired(), handler.CompleteGuide)
 
@@ -80,6 +99,7 @@ func main() {
 	task.Get("/form/:id", handler.GetTaskForm)
 	task.Post("/form/:id", handler.SaveTaskForm)
 	task.Put("/form/:id", handler.SaveTaskForm)
+	task.Get("/form-data/:id", handler.GetTaskSavedForm)
 	task.Put("/update/:id", handler.UpdateTask)
 	task.Delete("/delete/:id", handler.DeleteTask)
 	task.Get("/execute/:id", handler.ExecuteTask)
@@ -98,6 +118,7 @@ func main() {
 	// 请假申请（同模块）
 	leave.Get("/types", handler.GetLeaveTypes)
 	leave.Post("/apply-approvers", handler.GetLeaveApplyApprovers)
+	leave.Post("/cc-search", handler.GetLeaveNewCcSearch)
 	leave.Post("/apply", handler.ExecuteLeaveApply)
 
 	// CDK 兑换
@@ -159,12 +180,14 @@ func main() {
 	adminAuth.Get("/my-announcements", handler.ListUserAnnouncements)
 	adminAuth.Get("/my-announcements/unread-count", handler.GetUnreadCount)
 	adminAuth.Get("/my-announcements/my-info", handler.GetMyAnnouncementInfo)
+	adminAuth.Get("/my-announcements/pinned", handler.ListPinnedAnnouncements)
 	adminAuth.Post("/my-announcements/:id/read", handler.MarkAnnouncementRead)
 
 	// 用户公告
 	api.Get("/announcements", middleware.AuthRequired(), handler.ListUserAnnouncements)
 	api.Get("/announcements/unread-count", middleware.AuthRequired(), handler.GetUnreadCount)
 	api.Get("/announcements/my-info", middleware.AuthRequired(), handler.GetMyAnnouncementInfo)
+	api.Get("/announcements/pinned", middleware.AuthRequired(), handler.ListPinnedAnnouncements)
 	api.Post("/announcements/:id/read", middleware.AuthRequired(), handler.MarkAnnouncementRead)
 
 	// 设备授权页面（纯 HTML）

backed/config.toml.example

@@ -31,7 +31,7 @@ length = 4
 appVersion = "9.8.8"
 systemVersion = "iOS 17"
 calVersion = "first_v4"
-sliderIds = ["1018764144934965", "sdhyxy", "hqdx"]
+sliderIds = ["1018764144934965", "sdhyxy", "hqdx", "lntu"]
 captchaBaseUrl = "http://127.0.0.1:8890"
 captchaApiKey = "your_captcha_api_key"
 

backed/go.mod

@@ -8,7 +8,6 @@ require (
 	github.com/go-resty/resty/v2 v2.16.5
 	github.com/gofiber/fiber/v2 v2.52.13
 	github.com/golang-jwt/jwt/v5 v5.3.1
-	github.com/makiuchi-d/gozxing v0.1.1
 	github.com/redis/go-redis/v9 v9.7.0
 	golang.org/x/crypto v0.50.0
 	golang.org/x/image v0.46.0
@@ -37,5 +36,4 @@ require (
 	golang.org/x/net v0.52.0 // indirect
 	golang.org/x/sys v0.48.0 // indirect
 	golang.org/x/text v0.42.0 // indirect
-	golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1 // indirect
 )

backed/go.sum

@@ -33,8 +33,6 @@ github.com/jinzhu/now v1.1.5 h1:/o9tlHleP7gOFmsnYNz3RGnqzefHA47wQpKrrdTIwXQ=
 github.com/jinzhu/now v1.1.5/go.mod h1:d3SSVoowX0Lcu0IBviAWJpolVfI5UJVZZ7cO71lE/z8=
 github.com/klauspost/compress v1.17.9 h1:6KIumPrER1LHsvBVuDa0r5xaG0Es51mhhB9BQB2qeMA=
 github.com/klauspost/compress v1.17.9/go.mod h1:Di0epgTjJY877eYKx5yC51cX2A2Vl2ibi7bDH9ttBbw=
-github.com/makiuchi-d/gozxing v0.1.1 h1:xxqijhoedi+/lZlhINteGbywIrewVdVv2wl9r5O9S1I=
-github.com/makiuchi-d/gozxing v0.1.1/go.mod h1:eRIHbOjX7QWxLIDJoQuMLhuXg9LAuw6znsUtRkNw9DU=
 github.com/mattn/go-colorable v0.1.13 h1:fFA4WZxdEF4tXPZVKMLwD8oUnCTTo08duU7wxecdEvA=
 github.com/mattn/go-colorable v0.1.13/go.mod h1:7S9/ev0klgBDR4GtXTXX8a3vIGJpMovkB8vQcUbaXHg=
 github.com/mattn/go-isatty v0.0.16/go.mod h1:kYGgaQfpe5nmfYZH+SKPsOc2e4SrIfOl2e/yFXSvRLM=
@@ -132,8 +130,6 @@ golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU=
 golang.org/x/tools v0.13.0/go.mod h1:HvlwmtVNQAhOuCjW7xxvovg8wbNq7LwfXh/k7wXUl58=
 golang.org/x/tools v0.21.1-0.20240508182429-e35e4ccd0d2d/go.mod h1:aiJjzUbINMkxbQROHiO6hDPo2LHcIPhhQsa9DLh0yGk=
 golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
-golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1 h1:go1bK/D/BFZV2I8cIQd1NKEZ+0owSTG1fDTci4IqFcE=
-golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 gorm.io/driver/mysql v1.6.0 h1:eNbLmNTpPpTOVZi8MMxCi2aaIm0ZpInbORNXDwyLGvg=
 gorm.io/driver/mysql v1.6.0/go.mod h1:D/oCC2GWK3M/dqoLxnOlaNKmXz8WNTfcS9y5ovaSqKo=
 gorm.io/driver/sqlite v1.6.0 h1:WHRRrIiulaPiPFmDcod6prc4l2VGVWHz80KspNsxSfQ=

backed/internal/handler/admin_announcement.go

@@ -20,6 +20,7 @@ type CreateAnnouncementRequest struct {
 	TargetUserID *uint  `json:"targetUserId,omitempty"` // 指定单个用户(null=推送全部)
 	ForcePopup   bool   `json:"forcePopup"`
 	LoopPopup    bool   `json:"loopPopup"`
+	IsPinned     bool   `json:"isPinned"` // 置顶公告：打卡页顶部横向滚动
 }
 
 // CreateAnnouncement 创建公告
@@ -39,6 +40,10 @@ func CreateAnnouncement(c *fiber.Ctx) error {
 	if req.TargetType != "agent" && req.TargetType != "user" {
 		return utils.Fail(c, 400, "目标类型必须为 agent 或 user")
 	}
+	// 置顶公告仅在打卡页（普通用户端）展示，仅普通用户公告可置顶
+	if req.IsPinned && req.TargetType != "user" {
+		return utils.Fail(c, 400, "仅普通用户公告可设为置顶")
+	}
 
 	// 如果指定了用户，验证用户存在
 	if req.TargetUserID != nil {
@@ -63,6 +68,7 @@ func CreateAnnouncement(c *fiber.Ctx) error {
 		TargetUserID: req.TargetUserID,
 		ForcePopup:   req.ForcePopup,
 		LoopPopup:    req.LoopPopup,
+		IsPinned:     req.IsPinned,
 		CreatedBy:    adminID,
 	}
 
@@ -83,6 +89,7 @@ type UpdateAnnouncementRequest struct {
 	TargetUserID *uint  `json:"targetUserId,omitempty"` // 指定单个用户(null=推送全部)
 	ForcePopup   bool   `json:"forcePopup"`
 	LoopPopup    bool   `json:"loopPopup"`
+	IsPinned     bool   `json:"isPinned"` // 置顶公告：打卡页顶部横向滚动
 }
 
 // UpdateAnnouncement 更新公告（仅手动创建的公告可编辑）
@@ -113,6 +120,10 @@ func UpdateAnnouncement(c *fiber.Ctx) error {
 	if req.TargetType != "agent" && req.TargetType != "user" {
 		return utils.Fail(c, 400, "目标类型必须为 agent 或 user")
 	}
+	// 置顶公告仅在打卡页（普通用户端）展示，仅普通用户公告可置顶
+	if req.IsPinned && req.TargetType != "user" {
+		return utils.Fail(c, 400, "仅普通用户公告可设为置顶")
+	}
 
 	// 如果指定了用户，验证用户存在
 	if req.TargetUserID != nil {
@@ -136,6 +147,7 @@ func UpdateAnnouncement(c *fiber.Ctx) error {
 		"target_user_id": req.TargetUserID,
 		"force_popup":    req.ForcePopup,
 		"loop_popup":     req.LoopPopup,
+		"is_pinned":      req.IsPinned,
 	}
 	if err := database.DB.Model(&announcement).Updates(updates).Error; err != nil {
 		slog.Error("更新公告失败", "error", err)

backed/internal/handler/admin_user.go

@@ -5,6 +5,7 @@ import (
 	"cpdaily-new/internal/model"
 	"cpdaily-new/internal/utils"
 	"log/slog"
+	"sort"
 	"strconv"
 	"strings"
 	"time"
@@ -22,7 +23,7 @@ type SysUserListItem struct {
 	RealName      string  `json:"realName"`
 	MobileCode    string  `json:"mobileCode"`
 	MobileType    string  `json:"mobileType"`
-	SignCount     int     `json:"signCount"`
+	SignCount     float64 `json:"signCount"`
 	InviteReward  float64 `json:"inviteReward"`
 	InvitedCount  int     `json:"invitedCount"`
 	InviterID     *uint   `json:"inviterId"`   // 邀请人用户ID（null=非邀请注册）
@@ -103,7 +104,8 @@ func ListUsers(c *fiber.Ctx) error {
 		taskCountMap[tc.UserID] = tc.Count
 	}
 
-	// 累计成功执行次数（cp_task_logs is_success=1）
+	// 累计成功执行次数（cp_task_logs 签到/查寝 + cp_leave_logs 请假/销假，含用户已删除的软删除记录）
+	// 说明：用户在客户端"删除"日志只是前台不可见（软删除），后台统计必须计入，否则执行次数会凭空减少
 	executedMap := make(map[uint]int64)
 	// 今天执行状态（success/fail/none）
 	todayStatusMap := make(map[uint]string)
@@ -118,23 +120,46 @@ func ListUsers(c *fiber.Ctx) error {
 			Count     int64
 			MaxStatus int
 		}
+		// 签到/查寝成功次数（Unscoped 包含软删除）
 		var logStats []LogStat
-		database.DB.Model(&model.CpTaskLog{}).
+		database.DB.Unscoped().Model(&model.CpTaskLog{}).
 			Select("user_id, COUNT(*) as count, MAX(is_success) as max_status").
 			Where("user_id IN ? AND is_success = 1", userIDs).
 			Group("user_id").
 			Scan(&logStats)
 		for _, ls := range logStats {
-			executedMap[ls.UserID] = ls.Count
+			executedMap[ls.UserID] += ls.Count
+		}
+		// 请假/销假成功次数（Unscoped 包含软删除）
+		var leaveStats []LogStat
+		database.DB.Unscoped().Model(&model.CpLeaveLog{}).
+			Select("user_id, COUNT(*) as count, MAX(is_success) as max_status").
+			Where("user_id IN ? AND is_success = 1", userIDs).
+			Group("user_id").
+			Scan(&leaveStats)
+		for _, ls := range leaveStats {
+			executedMap[ls.UserID] += ls.Count
 		}
 
-		// 今天 00:00 起的日志
+		// 今天 00:00 起的状态（含软删除）：签到/查寝 + 请假/销假两类日志统一判定
+		// 任一成功 → success；否则任有失败 → fail；都无 → none
 		todayStart := time.Now().Format("2006-01-02") + " 00:00:00"
-		var todayLogs []model.CpTaskLog
-		database.DB.Select("user_id, is_success").
+		var todayTaskLogs []model.CpTaskLog
+		database.DB.Unscoped().Select("user_id, is_success").
 			Where("user_id IN ? AND created_at >= ?", userIDs, todayStart).
-			Find(&todayLogs)
-		for _, tl := range todayLogs {
+			Find(&todayTaskLogs)
+		var todayLeaveLogs []model.CpLeaveLog
+		database.DB.Unscoped().Select("user_id, is_success").
+			Where("user_id IN ? AND created_at >= ?", userIDs, todayStart).
+			Find(&todayLeaveLogs)
+		for _, tl := range todayTaskLogs {
+			if tl.IsSuccess {
+				todayStatusMap[tl.UserID] = "success"
+			} else if todayStatusMap[tl.UserID] != "success" {
+				todayStatusMap[tl.UserID] = "fail"
+			}
+		}
+		for _, tl := range todayLeaveLogs {
 			if tl.IsSuccess {
 				todayStatusMap[tl.UserID] = "success"
 			} else if todayStatusMap[tl.UserID] != "success" {
@@ -215,10 +240,16 @@ func ListUsers(c *fiber.Ctx) error {
 	}
 
 	// 当天统计：执行总次数 / 成功执行总次数 / 新增用户数 / 登录用户数
+	// 执行类统计 = 签到/查寝 + 请假/销假（均含用户已删除的软删除记录）
 	todayStart := time.Now().Format("2006-01-02") + " 00:00:00"
 	var todayExecuteCount, todaySuccessCount int64
-	database.DB.Model(&model.CpTaskLog{}).Where("created_at >= ?", todayStart).Count(&todayExecuteCount)
-	database.DB.Model(&model.CpTaskLog{}).Where("created_at >= ? AND is_success = 1", todayStart).Count(&todaySuccessCount)
+	database.DB.Unscoped().Model(&model.CpTaskLog{}).Where("created_at >= ?", todayStart).Count(&todayExecuteCount)
+	database.DB.Unscoped().Model(&model.CpTaskLog{}).Where("created_at >= ? AND is_success = 1", todayStart).Count(&todaySuccessCount)
+	var todayLeaveExecute, todayLeaveSuccess int64
+	database.DB.Unscoped().Model(&model.CpLeaveLog{}).Where("created_at >= ?", todayStart).Count(&todayLeaveExecute)
+	database.DB.Unscoped().Model(&model.CpLeaveLog{}).Where("created_at >= ? AND is_success = 1", todayStart).Count(&todayLeaveSuccess)
+	todayExecuteCount += todayLeaveExecute
+	todaySuccessCount += todayLeaveSuccess
 	var todayNewUsers, todayLoginUsers int64
 	database.DB.Model(&model.SysUser{}).Where("created_at >= ?", todayStart).Count(&todayNewUsers)
 	database.DB.Model(&model.SysUser{}).Where("last_login_at >= ?", todayStart).Count(&todayLoginUsers)
@@ -229,9 +260,9 @@ func ListUsers(c *fiber.Ctx) error {
 		"page":     page,
 		"pageSize": pageSize,
 		"todayStats": fiber.Map{
-			"executeCount": todayExecuteCount,
-			"successCount": todaySuccessCount,
-			"newUserCount": todayNewUsers,
+			"executeCount":   todayExecuteCount,
+			"successCount":   todaySuccessCount,
+			"newUserCount":   todayNewUsers,
 			"loginUserCount": todayLoginUsers,
 		},
 	})
@@ -274,26 +305,26 @@ func GetUserDetail(c *fiber.Ctx) error {
 	}
 
 	return utils.Success(c, fiber.Map{
-		"id":            user.ID,
-		"username":      user.Username,
-		"schoolId":      user.SchoolID,
-		"schoolName":    user.SchoolName,
-		"studentId":     user.StudentID,
-		"realName":      user.RealName,
-		"password":      password,
-		"signCount":     user.SignCount,
-		"inviteReward":  user.InviteReward,
-		"invitedCount":  user.InvitedCount,
-		"inviterId":     user.InviterID,
-		"inviterName":   inviterName,
-		"status":        user.Status,
+		"id":             user.ID,
+		"username":       user.Username,
+		"schoolId":       user.SchoolID,
+		"schoolName":     user.SchoolName,
+		"studentId":      user.StudentID,
+		"realName":       user.RealName,
+		"password":       password,
+		"signCount":      user.SignCount,
+		"inviteReward":   user.InviteReward,
+		"invitedCount":   user.InvitedCount,
+		"inviterId":      user.InviterID,
+		"inviterName":    inviterName,
+		"status":         user.Status,
 		"disabledReason": user.DisabledReason,
-		"taskCount":     taskCount,
-		"mobileCode":    user.MobileCode,
-		"mobileType":    user.MobileType,
-		"createdAt":     user.CreatedAt.Format("2006-01-02 15:04:05"),
-		"lastLoginAt":   lastLogin,
-		"lastLoginIp":   user.LastLoginIP,
+		"taskCount":      taskCount,
+		"mobileCode":     user.MobileCode,
+		"mobileType":     user.MobileType,
+		"createdAt":      user.CreatedAt.Format("2006-01-02 15:04:05"),
+		"lastLoginAt":    lastLogin,
+		"lastLoginIp":    user.LastLoginIP,
 	})
 }
 
@@ -354,9 +385,35 @@ type AdminTaskLogItem struct {
 	IsSuccess    bool      `json:"isSuccess"`
 	ErrorMessage string    `json:"errorMessage"`
 	CreatedAt    time.Time `json:"createdAt"`
+	// Deleted 表示该记录已被用户在客户端删除（软删除），仅后台可见
+	Deleted bool `json:"deleted"`
+	// Source 数据来源：1=签到/查寝(cp_task_logs) 2=请假/销假(cp_leave_logs)，两表 id 独立自增，前端 key 需组合去重
+	Source int `json:"source"`
 }
 
+// adminLogUnionSQL 后台执行日志明细的数据源：cp_task_logs（签到/查寝）+ cp_leave_logs（请假/销假）UNION。
+// 原始 SQL 绕过 GORM 软删除过滤，故含用户已删除记录（deleted 标注）；source 区分来源（1=任务 2=请假销假）。
+// 占位符顺序：dayStart, dayEnd, dayStart, dayEnd
+// 注意：两表由不同时期建表，字符串列 collation 不一致（utf8mb4_unicode_ci vs general_ci），
+// 直接 UNION 会报 1271 Illegal mix of collations，故显式 COLLATE 统一到 utf8mb4_unicode_ci。
+const adminLogUnionSQL = `
+	SELECT id, user_id, task_type, title, real_title, is_success, error_message, created_at, deleted, source FROM (
+		SELECT id, user_id, task_type, title, real_title, is_success, error_message, created_at,
+		       (deleted_at IS NOT NULL) AS deleted, 1 AS source
+		FROM cp_task_logs
+		WHERE created_at >= ? AND created_at < ?
+		UNION ALL
+		SELECT id, user_id,
+		       (CASE action WHEN 'apply' THEN 'leave_apply' ELSE 'leave_report' END) COLLATE utf8mb4_unicode_ci AS task_type,
+		       title COLLATE utf8mb4_unicode_ci, '' COLLATE utf8mb4_unicode_ci AS real_title, is_success,
+		       error_message COLLATE utf8mb4_unicode_ci, created_at,
+		       (deleted_at IS NOT NULL) AS deleted, 2 AS source
+		FROM cp_leave_logs
+		WHERE created_at >= ? AND created_at < ?
+	) AS combined`
+
 // AdminListTaskLogs 任务执行日志列表（仅admin，供"当天执行总次数"卡片点击查看）
+// 数据源 = 签到/查寝（cp_task_logs）+ 请假/销假（cp_leave_logs），均含用户已删除的软删除记录（标注 deleted）；
 // 支持按日期（默认当天）、执行状态、关键字（用户名/姓名/任务标题）筛选，分页返回
 func AdminListTaskLogs(c *fiber.Ctx) error {
 	// 日期（yyyy-MM-dd，默认当天）
@@ -387,32 +444,90 @@ func AdminListTaskLogs(c *fiber.Ctx) error {
 		pageSize = 20
 	}
 
-	query := database.DB.Table("cp_task_logs").
-		Joins("LEFT JOIN sys_user ON sys_user.id = cp_task_logs.user_id").
-		Where("cp_task_logs.created_at >= ? AND cp_task_logs.created_at < ?", dayStart, dayEnd)
+	type combinedRow struct {
+		ID           uint
+		UserID       uint
+		TaskType     string
+		Title        string
+		RealTitle    string
+		IsSuccess    bool
+		ErrorMessage string
+		CreatedAt    time.Time
+		Deleted      bool
+		Source       int
+	}
+
+	var rows []combinedRow
+	raw := database.DB.Raw(adminLogUnionSQL, dayStart, dayEnd, dayStart, dayEnd)
 	if status == "success" {
-		query = query.Where("cp_task_logs.is_success = 1")
+		raw = database.DB.Raw("SELECT * FROM ("+adminLogUnionSQL+") t WHERE t.is_success = 1", dayStart, dayEnd, dayStart, dayEnd)
 	} else if status == "fail" {
-		query = query.Where("cp_task_logs.is_success = 0")
+		raw = database.DB.Raw("SELECT * FROM ("+adminLogUnionSQL+") t WHERE t.is_success = 0", dayStart, dayEnd, dayStart, dayEnd)
 	}
-	if keyword != "" {
-		like := "%" + keyword + "%"
-		query = query.Where("sys_user.username LIKE ? OR sys_user.real_name LIKE ? OR cp_task_logs.title LIKE ? OR cp_task_logs.real_title LIKE ?",
-			like, like, like, like)
+	raw.Scan(&rows)
+
+	// 用户信息一次性查询
+	userIDs := make([]uint, 0, len(rows))
+	seen := make(map[uint]bool, len(rows))
+	for _, r := range rows {
+		if !seen[r.UserID] {
+			seen[r.UserID] = true
+			userIDs = append(userIDs, r.UserID)
+		}
+	}
+	userMap := make(map[uint]model.SysUser, len(userIDs))
+	if len(userIDs) > 0 {
+		var us []model.SysUser
+		database.DB.Select("id, username, real_name, school_name").Where("id IN ?", userIDs).Find(&us)
+		for _, u := range us {
+			userMap[u.ID] = u
+		}
 	}
 
-	var total int64
-	query.Count(&total)
+	// 关键字过滤（用户名/姓名/标题）在内存中完成（跨表 UNION 后）
+	like := strings.ToLower(keyword)
+	filtered := make([]AdminTaskLogItem, 0, len(rows))
+	for _, r := range rows {
+		u := userMap[r.UserID]
+		if keyword != "" {
+			hay := strings.ToLower(u.Username + u.RealName + r.Title + r.RealTitle)
+			if !strings.Contains(hay, like) {
+				continue
+			}
+		}
+		filtered = append(filtered, AdminTaskLogItem{
+			ID:           r.ID,
+			UserID:       r.UserID,
+			Username:     u.Username,
+			RealName:     u.RealName,
+			SchoolName:   u.SchoolName,
+			TaskType:     r.TaskType,
+			Title:        r.Title,
+			RealTitle:    r.RealTitle,
+			IsSuccess:    r.IsSuccess,
+			ErrorMessage: r.ErrorMessage,
+			CreatedAt:    r.CreatedAt,
+			Deleted:      r.Deleted,
+			Source:       r.Source,
+		})
+	}
+	// 按时间倒序
+	sort.Slice(filtered, func(i, j int) bool {
+		return filtered[i].CreatedAt.After(filtered[j].CreatedAt)
+	})
 
-	var items []AdminTaskLogItem
-	query.Select("cp_task_logs.id, cp_task_logs.user_id, sys_user.username, sys_user.real_name, sys_user.school_name, cp_task_logs.task_type, cp_task_logs.title, cp_task_logs.real_title, cp_task_logs.is_success, cp_task_logs.error_message, cp_task_logs.created_at").
-		Order("cp_task_logs.created_at DESC").
-		Offset((page - 1) * pageSize).
-		Limit(pageSize).
-		Scan(&items)
+	total := int64(len(filtered))
+	start := (page - 1) * pageSize
+	if start > len(filtered) {
+		start = len(filtered)
+	}
+	end := start + pageSize
+	if end > len(filtered) {
+		end = len(filtered)
+	}
 
 	return utils.Success(c, fiber.Map{
-		"items":    items,
+		"items":    filtered[start:end],
 		"total":    total,
 		"page":     page,
 		"pageSize": pageSize,

backed/internal/handler/auth.go

@@ -26,11 +26,8 @@ import (
 
 // GetCaptcha 获取图片验证码（令牌桶限流：同 IP 5 分钟最多获取 10 次，防刷屏打爆资源）
 func GetCaptcha(c *fiber.Ctx) error {
-	// 优先取 XFF 真实客户端 IP（openresty 反代受信）；直连无 XFF 时回退 socket 源 IP
-	ip := c.IP()
-	if ip == "" {
-		ip = c.Context().RemoteIP().String()
-	}
+	// 限流 IP 与登录 IP 一致（utils.ClientIP 优先 X-Real-IP）
+	ip := utils.ClientIP(c)
 	ok, wait := service.AllowCaptchaToken(ip)
 	if !ok {
 		return utils.Fail(c, 429, fmt.Sprintf("验证码获取过于频繁，请 %s后再试", service.FormatWait(wait)))
@@ -67,7 +64,6 @@ type LoginRequest struct {
 	Password    string `json:"password"`
 	CaptchaID   string `json:"captchaId"`
 	CaptchaCode string `json:"captchaCode"`
-	InviteCode  string `json:"inviteCode,omitempty"` // 可选邀请码
 }
 
 // Login 登录
@@ -95,8 +91,8 @@ func Login(c *fiber.Ctx) error {
 	// 执行 cpdaily 登录
 	cookies, mfaCtx, err := cpd.CpdailyLogin(c.Context(), school, req.Username, req.Password)
 	if errors.Is(err, cpd.ErrMFARequired) && mfaCtx != nil {
-		// 多因子认证：验证码已自动发送，暂存会话并返回 mfaToken 给前端（携带邀请码，注册时同样生效）
-		return startMFALogin(c, school, req.Username, req.Password, req.InviteCode, mfaCtx)
+		// 多因子认证：验证码已自动发送，暂存会话并返回 mfaToken 给前端
+		return startMFALogin(c, school, req.Username, req.Password, mfaCtx)
 	}
 	if err != nil {
 		slog.Error("cpdaily登录失败", "error", err)
@@ -110,7 +106,7 @@ func Login(c *fiber.Ctx) error {
 	}
 
 	// 登录成功：公共处理（MOD_ 检查、用户注册、JWT 签发）
-	return finalizeLogin(c, school, req.Username, req.Password, cookies, false, req.InviteCode)
+	return finalizeLogin(c, school, req.Username, req.Password, cookies, false)
 }
 
 // MFAVerifyRequest 提交多因子认证验证码
@@ -157,7 +153,7 @@ func MFAVerify(c *fiber.Ctx) error {
 	deleteMFASession(c.Context(), req.MfaToken)
 
 	// 短期 JWT：与第三方 Cookie 有效期对齐（MFA 登录无法自动续期）
-	return finalizeLogin(c, school, sess.Username, sess.Password, cookies, true, sess.InviteCode)
+	return finalizeLogin(c, school, sess.Username, sess.Password, cookies, true)
 }
 
 // MFASendCodeRequest 发送多因子认证验证码（用户已选定验证方式）
@@ -209,7 +205,7 @@ func MFASendCode(c *fiber.Ctx) error {
 
 // finalizeLogin 登录成功后的公共处理：MOD_ 检查、Cookie 序列化、查找/注册用户、
 // 更新登录信息、签发 JWT。shortToken=true 时签发 MFA 短期 token。
-func finalizeLogin(c *fiber.Ctx, school *cpd.SchoolDetailInfo, username, password string, cookies []*http.Cookie, shortToken bool, referralCode string) error {
+func finalizeLogin(c *fiber.Ctx, school *cpd.SchoolDetailInfo, username, password string, cookies []*http.Cookie, shortToken bool) error {
 	// 检查 MOD_ cookie
 	hasMOD := false
 	for _, cookie := range cookies {
@@ -235,7 +231,7 @@ func finalizeLogin(c *fiber.Ctx, school *cpd.SchoolDetailInfo, username, passwor
 	userName := buildUsername(school, username)
 
 	// 查找或创建用户
-	user, isNew, err := findOrCreateUser(userName, password, school.ID, school.Name, username, cookieStr, referralCode)
+	user, isNew, err := findOrCreateUser(userName, password, school.ID, school.Name, username, cookieStr)
 	if err != nil {
 		slog.Error("用户处理失败", "error", err)
 		return utils.FailServer(c, "用户处理失败")
@@ -341,7 +337,7 @@ func GetUserInfo(c *fiber.Ctx) error {
 }
 
 // GuideCompleteVersion 当前新手引导版本：看过该版本即不再重复展示（数据库记录，跨设备一致）
-const GuideCompleteVersion = "v2"
+const GuideCompleteVersion = "v4"
 
 // CompleteGuide 记录用户已完成当前版本新手引导
 func CompleteGuide(c *fiber.Ctx) error {
@@ -353,17 +349,47 @@ func CompleteGuide(c *fiber.Ctx) error {
 	return utils.Success(c, nil)
 }
 
-// syncUserProfile 同步 cpdaily 用户信息到数据库
+// syncUserProfile 同步 cpdaily 用户信息到数据库。
+// 登录态失效（cookie 过期）时自动续期并重试一次，避免用户信息长期同步不上。
 func syncUserProfile(user *model.SysUser, cookieStr string, wecloudUrl string) {
+	syncUserProfileWith(user, cookieStr, wecloudUrl, true)
+}
+
+// syncUserProfileWith allowRefresh=false 时不做 cookie 续期，
+// 供续期流程内部调用，避免「续期 → 同步 → 再续期」的递归风暴。
+func syncUserProfileWith(user *model.SysUser, cookieStr string, wecloudUrl string, allowRefresh bool) {
 	cookieMap := cpd.ParseCookieJSON(cookieStr)
-	profile, err := cpd.FetchUserProfile(cookieMap, wecloudUrl)
-	if err != nil {
-		slog.Warn("同步用户信息失败", "userId", user.ID, "error", err)
+
+	fetch := func(cm map[string]string) (*cpd.CpdailyUserProfile, error) {
+		return cpd.FetchUserProfile(cm, wecloudUrl)
+	}
+
+	var profile *cpd.CpdailyUserProfile
+	if allowRefresh {
+		_, err := withCookieRefresh(user, cookieMap, wecloudUrl, func(cm map[string]string) error {
+			var e error
+			profile, e = fetch(cm)
+			return e
+		})
+		if err != nil {
+			slog.Warn("同步用户信息失败", "userId", user.ID, "error", err)
+			return
+		}
+	} else {
+		p, err := fetch(cookieMap)
+		if err != nil {
+			slog.Warn("同步用户信息失败（禁续期）", "userId", user.ID, "error", err)
+			return
+		}
+		profile = p
+	}
+	if profile == nil {
 		return
 	}
 
 	updates := syncProfileToUser(profile)
-	updates["cookie"] = cookieStr // 确保 cookie 最新
+	// 同步结果不覆盖 cookie：cookie 由调用方（登录/续期流程）负责维护，
+	// 避免异步同步与续期流程并发写 cookie 造成相互覆盖。
 	database.DB.Model(&user).Updates(updates)
 	slog.Info("用户信息同步成功", "userId", user.ID, "name", profile.Name)
 }
@@ -417,18 +443,6 @@ func getInviteeRewardAmount() float64 {
 	return 0.5
 }
 
-// getRegisterRewardAmount 获取直接注册（无邀请码）获得的奖励积分（从系统设置读取，默认 1.0）
-func getRegisterRewardAmount() float64 {
-	var cfg model.SystemConfig
-	result := database.DB.Where("`key` = ?", "register_reward").First(&cfg)
-	if result.Error == nil {
-		if v, err := strconv.ParseFloat(cfg.Value, 64); err == nil && v >= 0 {
-			return v
-		}
-	}
-	return 1.0
-}
-
 // createSystemAnnouncement 创建系统自动生成的公告（强制弹窗）
 func createSystemAnnouncement(userID uint, userType string, title, content string) {
 	announcement := model.Announcement{
@@ -466,10 +480,12 @@ func createInviteNotifications(inviterID, inviteeID uint, inviterReward, invitee
 
 // 查找或创建用户
 // findOrCreateUser 查找或自动注册用户；返回 (用户, 是否首次注册, 错误)
-func findOrCreateUser(username, password, schoolID, schoolName, studentID, cookie, referralCode string) (*model.SysUser, bool, error) {
+// 查找顺序：用户名 → 「同校 + 同学工号」（兼容手机号登录创建的账号）。
+func findOrCreateUser(username, password, schoolID, schoolName, studentID, cookie string) (*model.SysUser, bool, error) {
 	var user model.SysUser
 	err := database.DB.Where("username = ?", username).First(&user).Error
 	if err == nil {
+		ensureInviteCodeOnLogin(&user)
 		return &user, false, nil
 	}
 
@@ -477,27 +493,27 @@ func findOrCreateUser(username, password, schoolID, schoolName, studentID, cooki
 		return nil, false, err
 	}
 
-	// 自动注册：生成密码哈希和邀请码
+	// 兼容手机号登录：同一学校 + 同学工号 视为同一用户
+	if studentID != "" {
+		if e2 := database.DB.Where("school_id = ? AND student_id = ?", schoolID, studentID).First(&user).Error; e2 == nil {
+			slog.Info("按学工号匹配到已有账号（学工号登录）", "userId", user.ID, "studentId", studentID)
+			ensureInviteCodeOnLogin(&user)
+			return &user, false, nil
+		} else if !errors.Is(e2, gorm.ErrRecordNotFound) {
+			return nil, false, e2
+		}
+	}
+
+	// 自动注册：生成密码哈希和自身邀请码。
+	// 说明：登录不再携带邀请码，注册时不发放任何邀请/注册奖励、不写邀请关系；
+	// 用户可在登录后到「我的」填写他人邀请码完成绑定并领取奖励（见 BindInviteCode）。
 	hashedPwd, err := bcrypt.GenerateFromPassword([]byte(password), bcrypt.DefaultCost)
 	if err != nil {
 		return nil, false, err
 	}
 
-	// 为新用户生成一个唯一的邀请码（避免空字符串与 uniqueIndex 冲突）
-	myInviteCode := generateRandomCode(6)
-
-	// 读取可配置的奖励积分
-	inviterReward := getInviterRewardAmount()
-	inviteeReward := getInviteeRewardAmount()
-	registerReward := getRegisterRewardAmount()
-
-	// 记录邀请人ID，在事务外创建通知
-	var inviterID uint
-	hasValidReferral := false
-	hasRegisterReward := false
-
-	// 使用事务包裹：用户创建 + 奖励发放，保证原子性
-	err = database.DB.Transaction(func(tx *gorm.DB) error {
+	// 注册即生成邀请码：唯一索引冲突时换码重试（见 withUniqueInviteCode）
+	myInviteCode, err := withUniqueInviteCode(func(code string) error {
 		user = model.SysUser{
 			Username:   username,
 			Password:   string(hashedPwd),
@@ -505,125 +521,24 @@ func findOrCreateUser(username, password, schoolID, schoolName, studentID, cooki
 			SchoolName: schoolName,
 			StudentID:  studentID,
 			Cookie:     cookie,
-			InviteCode: myInviteCode, // 始终设置邀请码，避免空字符串唯一索引冲突
+			InviteCode: code,
 		}
-		if err := tx.Create(&user).Error; err != nil {
-			return err
-		}
-
-		// 处理邀请码奖励
-		if referralCode != "" {
-			var inviter model.SysUser
-			if err := tx.Where("invite_code = ?", referralCode).First(&inviter).Error; err != nil {
-				// 邀请码无效，仅记录日志，不中断注册流程
-				slog.Warn("邀请码无效，跳过奖励", "referralCode", referralCode, "newUserId", user.ID)
-				return nil
-			}
-
-			// 自邀请防护
-			if inviter.ID == user.ID {
-				slog.Warn("检测到自邀请，跳过奖励", "userId", user.ID)
-				return nil
-			}
-
-			// 记录邀请关系（后台用户管理可展示"被谁邀请"）
-			tx.Model(&user).Update("inviter_id", inviter.ID)
-
-			// 给邀请人发放奖励积分 + 增加邀请计数
-			if inviterReward > 0 {
-				tx.Model(&inviter).Updates(map[string]interface{}{
-					"invite_reward": gorm.Expr("invite_reward + ?", inviterReward),
-					"invited_count": gorm.Expr("invited_count + 1"),
-				})
-			}
-
-			// 给被邀请人（新用户）发放奖励积分
-			if inviteeReward > 0 {
-				tx.Model(&user).Update("invite_reward", gorm.Expr("invite_reward + ?", inviteeReward))
-			}
-
-			slog.Info("邀请奖励已发放",
-				"inviterId", inviter.ID,
-				"newUserId", user.ID,
-				"inviterReward", inviterReward,
-				"inviteeReward", inviteeReward,
-			)
-
-			inviterID = inviter.ID
-			hasValidReferral = true
-		} else if registerReward > 0 {
-			// 未填写邀请码：发放直接注册奖励积分
-			tx.Model(&user).Update("invite_reward", gorm.Expr("invite_reward + ?", registerReward))
-			slog.Info("直接注册奖励已发放",
-				"newUserId", user.ID,
-				"registerReward", registerReward,
-			)
-			hasRegisterReward = true
-		}
-
-		return nil
+		return database.DB.Create(&user).Error
 	})
-
 	if err != nil {
 		slog.Error("用户创建失败（可能用户名冲突）", "username", username, "error", err)
 		return nil, false, err
 	}
 
-	// 邀请成功后，在事务外创建系统通知（双方各一条强制弹窗公告）
-	if hasValidReferral {
-		createInviteNotifications(inviterID, user.ID, inviterReward, inviteeReward)
-	}
-
-	// 直接注册奖励到账通知
-	if hasRegisterReward {
-		createSystemAnnouncement(user.ID, "user",
-			"注册奖励到账",
-			"欢迎注册！您获得 "+strconv.FormatFloat(registerReward, 'f', 1, 64)+" 奖励积分。\n\n积分满 1 即可在个人中心兑换 1 次签到次数。",
-		)
-	}
-
-	slog.Info("新用户自动注册", "username", username, "school", schoolName, "referralCode", referralCode, "myInviteCode", myInviteCode)
+	slog.Info("新用户自动注册", "username", username, "school", schoolName, "myInviteCode", myInviteCode)
 	return &user, true, nil
 }
 
-// GenerateMyInviteCode 生成/获取当前用户的邀请码
-func GenerateMyInviteCode(c *fiber.Ctx) error {
-	userID := c.Locals("userId").(uint)
-
-	var user model.SysUser
-	if err := database.DB.First(&user, userID).Error; err != nil {
-		return utils.FailAuth(c, "用户不存在")
+// ensureInviteCodeOnLogin 登录时为缺少邀请码的老用户补发；失败只记日志，不影响登录
+func ensureInviteCodeOnLogin(user *model.SysUser) {
+	if err := ensureInviteCode(user); err != nil {
+		slog.Error("登录时补发邀请码失败", "userId", user.ID, "error", err)
 	}
-
-	// 已有邀请码直接返回
-	if user.InviteCode != "" {
-		return utils.Success(c, fiber.Map{
-			"inviteCode":             user.InviteCode,
-			"inviteReward":           user.InviteReward,
-			"invitedCount":           user.InvitedCount,
-			"canRedeem":              user.InviteReward >= 1.0,
-			"inviterRewardPerInvite": getInviterRewardAmount(),
-			"inviteeRewardPerInvite": getInviteeRewardAmount(),
-		})
-	}
-
-	// 生成新邀请码（6 位随机大写字母数字）
-	code := generateRandomCode(6)
-	user.InviteCode = code
-	if err := database.DB.Model(&user).Update("invite_code", code).Error; err != nil {
-		return utils.FailServer(c, "生成邀请码失败")
-	}
-
-	slog.Info("邀请码已生成", "userId", userID, "inviteCode", code)
-
-	return utils.Success(c, fiber.Map{
-		"inviteCode":             code,
-		"inviteReward":           0,
-		"invitedCount":           0,
-		"canRedeem":              false,
-		"inviterRewardPerInvite": getInviterRewardAmount(),
-		"inviteeRewardPerInvite": getInviteeRewardAmount(),
-	})
 }
 
 // GetMyInviteInfo 获取当前用户的邀请信息
@@ -633,15 +548,115 @@ func GetMyInviteInfo(c *fiber.Ctx) error {
 	if err := database.DB.First(&user, userID).Error; err != nil {
 		return utils.FailAuth(c, "用户不存在")
 	}
+	// 兜底：仍缺邀请码（如登录时补发失败）则在这里再补一次
+	ensureInviteCodeOnLogin(&user)
 
-	return utils.Success(c, fiber.Map{
+	return utils.Success(c, inviteInfoMap(&user))
+}
+
+// inviteInfoMap 组装邀请信息返回体（含是否已绑定邀请人，供前端控制「填写邀请码」入口显隐）
+func inviteInfoMap(user *model.SysUser) fiber.Map {
+	return fiber.Map{
 		"inviteCode":             user.InviteCode,
 		"inviteReward":           user.InviteReward,
 		"invitedCount":           user.InvitedCount,
 		"canRedeem":              user.InviteReward >= 1.0,
 		"inviterRewardPerInvite": getInviterRewardAmount(),
 		"inviteeRewardPerInvite": getInviteeRewardAmount(),
+		"hasInviter":             user.InviterID != nil,
+	}
+}
+
+// BindInviteCodeRequest 填写他人邀请码
+type BindInviteCodeRequest struct {
+	InviteCode string `json:"inviteCode"`
+}
+
+// BindInviteCode 填写他人邀请码：绑定邀请关系并给双方发放邀请奖励。
+// 约束：每人仅可绑定一次（已绑定邀请人则拒绝）；需已绑定设备码；不可填自己的邀请码。
+func BindInviteCode(c *fiber.Ctx) error {
+	userID := c.Locals("userId").(uint)
+
+	var req BindInviteCodeRequest
+	if err := c.BodyParser(&req); err != nil {
+		return utils.FailParam(c, "请求参数错误")
+	}
+	code := strings.TrimSpace(req.InviteCode)
+	if code == "" {
+		return utils.FailParam(c, "请输入邀请码")
+	}
+
+	var user model.SysUser
+	if err := database.DB.First(&user, userID).Error; err != nil {
+		return utils.FailAuth(c, "用户不存在")
+	}
+
+	// 仅可绑定一次
+	if user.InviterID != nil {
+		return utils.Fail(c, 400, "你已填写过邀请码，不可重复填写")
+	}
+	// 先校验设备码：未绑定设备码不允许绑定邀请关系
+	if strings.TrimSpace(user.MobileCode) == "" {
+		return utils.Fail(c, 400, "请先绑定设备码")
+	}
+
+	// 查找邀请人
+	var inviter model.SysUser
+	if err := database.DB.Where("invite_code = ?", code).First(&inviter).Error; err != nil {
+		if errors.Is(err, gorm.ErrRecordNotFound) {
+			return utils.Fail(c, 400, "邀请码无效")
+		}
+		return utils.FailServer(c, "查询邀请码失败")
+	}
+	if inviter.ID == user.ID {
+		return utils.Fail(c, 400, "不能填写自己的邀请码")
+	}
+
+	inviterReward := getInviterRewardAmount()
+	inviteeReward := getInviteeRewardAmount()
+
+	// 事务：绑定邀请关系 + 双方发放奖励积分
+	err := database.DB.Transaction(func(tx *gorm.DB) error {
+		// 再次校验（防止并发重复绑定）
+		var fresh model.SysUser
+		if err := tx.First(&fresh, user.ID).Error; err != nil {
+			return err
+		}
+		if fresh.InviterID != nil {
+			return gorm.ErrDuplicatedKey
+		}
+		if err := tx.Model(&model.SysUser{}).Where("id = ? AND inviter_id IS NULL", user.ID).
+			Update("inviter_id", inviter.ID).Error; err != nil {
+			return err
+		}
+		if inviterReward > 0 {
+			tx.Model(&model.SysUser{}).Where("id = ?", inviter.ID).Updates(map[string]interface{}{
+				"invite_reward": gorm.Expr("invite_reward + ?", inviterReward),
+				"invited_count": gorm.Expr("invited_count + 1"),
+			})
+		}
+		if inviteeReward > 0 {
+			tx.Model(&model.SysUser{}).Where("id = ?", user.ID).
+				Update("invite_reward", gorm.Expr("invite_reward + ?", inviteeReward))
+		}
+		return nil
 	})
+	if err != nil {
+		if errors.Is(err, gorm.ErrDuplicatedKey) {
+			return utils.Fail(c, 400, "你已填写过邀请码，不可重复填写")
+		}
+		slog.Error("绑定邀请码失败", "userId", userID, "code", code, "error", err)
+		return utils.FailServer(c, "绑定失败，请稍后重试")
+	}
+
+	createInviteNotifications(inviter.ID, user.ID, inviterReward, inviteeReward)
+	slog.Info("邀请码绑定成功", "userId", userID, "inviterId", inviter.ID,
+		"inviterReward", inviterReward, "inviteeReward", inviteeReward)
+
+	// 返回最新邀请信息（含新积分），供前端刷新
+	var refreshed model.SysUser
+	database.DB.First(&refreshed, userID)
+	return utils.Success(c, inviteInfoMap(&refreshed))
 }
 
 // RedeemInviteReward 兑换邀请奖励积分（满 1 兑换 1 次签到）
@@ -674,12 +689,16 @@ func RedeemInviteReward(c *fiber.Ctx) error {
 // generateRandomCode 生成 N 位随机大写字母数字码
 func generateRandomCode(n int) string {
 	const chars = "ABCDEFGHJKLMNPQRSTUVWXYZ23456789"
-	code := make([]byte, n)
-	for i := range code {
-		code[i] = chars[time.Now().UnixNano()%int64(len(chars))]
-		time.Sleep(1)
+	code, err := randomFromCharset(chars, n)
+	if err != nil {
+		// crypto/rand 读取失败极罕见；退回时间种子，保证调用方总能拿到非空串
+		b := make([]byte, n)
+		for i := range b {
+			b[i] = chars[(time.Now().UnixNano()+int64(i)*7919)%int64(len(chars))]
+		}
+		return string(b)
 	}
-	return string(code)
+	return code
 }
 
 // ========== 多因子认证（MFA）会话暂存 ==========
@@ -691,16 +710,15 @@ const (
 
 // mfaSession Redis 暂存的 MFA 中间会话（Password AES 加密存储）
 type mfaSession struct {
-	SchoolID   string          `json:"schoolId"`
-	Username   string          `json:"username"`
-	Password   string          `json:"password"`
-	InviteCode string          `json:"inviteCode,omitempty"` // 注册时携带的邀请码（MFA 通道注册同样生效）
-	MFA        *cpd.MFAContext `json:"mfa"`
+	SchoolID string          `json:"schoolId"`
+	Username string          `json:"username"`
+	Password string          `json:"password"`
+	MFA      *cpd.MFAContext `json:"mfa"`
 }
 
 // startMFALogin 暂存 MFA 会话并返回 mfaToken 与可用验证方式列表，
 // 前端引导用户选择验证方式后调用 /auth/login/mfa/send 获取验证码
-func startMFALogin(c *fiber.Ctx, school *cpd.SchoolDetailInfo, username, password, inviteCode string, mfaCtx *cpd.MFAContext) error {
+func startMFALogin(c *fiber.Ctx, school *cpd.SchoolDetailInfo, username, password string, mfaCtx *cpd.MFAContext) error {
 	if service.Redis == nil {
 		return utils.FailServer(c, "多因子认证暂不可用（存储服务未就绪），请稍后重试")
 	}
@@ -718,11 +736,10 @@ func startMFALogin(c *fiber.Ctx, school *cpd.SchoolDetailInfo, username, passwor
 	}
 
 	data, _ := json.Marshal(mfaSession{
-		SchoolID:   school.ID,
-		Username:   username,
-		Password:   encPassword,
-		InviteCode: inviteCode,
-		MFA:        mfaCtx,
+		SchoolID: school.ID,
+		Username: username,
+		Password: encPassword,
+		MFA:      mfaCtx,
 	})
 	if err := service.Redis.Set(context.Background(), fmt.Sprintf(mfaSessionKeyFmt, mfaToken), data, mfaSessionTTL).Err(); err != nil {
 		slog.Error("MFA会话暂存失败", "error", err)
@@ -781,11 +798,10 @@ func updateMFASession(ctx context.Context, mfaToken string, sess *mfaSession) er
 		return err
 	}
 	data, err := json.Marshal(mfaSession{
-		SchoolID:   sess.SchoolID,
-		Username:   sess.Username,
-		Password:   encPassword,
-		InviteCode: sess.InviteCode,
-		MFA:        sess.MFA,
+		SchoolID: sess.SchoolID,
+		Username: sess.Username,
+		Password: encPassword,
+		MFA:      sess.MFA,
 	})
 	if err != nil {
 		return err

backed/internal/handler/auth_helper.go

@@ -4,6 +4,7 @@ import (
 	"context"
 	"encoding/base64"
 	"errors"
+	"fmt"
 	"log/slog"
 	"strings"
 
@@ -46,26 +47,51 @@ func updateRawPassword(userID uint, rawPassword string) error {
 	return saveRawPassword(userID, rawPassword)
 }
 
-// isCookieExpired 判断错误是否由 cpdaily cookie 过期引起
+// isCookieExpired 判断错误是否由 cpdaily 登录态失效（cookie 过期）引起。
+// 两种来源：
+//   1. cpd.ErrCookieExpired：响应体是 HTML（被重定向到统一身份认证登录页），
+//      这是最常见、也最容易被漏判的情形（原文案匹配不到 "invalid character '<'"）；
+//   2. 接口以 JSON 形式返回的「未登录 / 登录已过期」。
 func isCookieExpired(err error) bool {
 	if err == nil {
 		return false
 	}
+	if errors.Is(err, cpd.ErrCookieExpired) {
+		return true
+	}
 	msg := err.Error()
 	return strings.Contains(msg, "未登录") ||
 		strings.Contains(msg, "登录已过期")
 }
 
+// isCpdailyAuthError 语义化别名：今日校园登录态失效。
+func isCpdailyAuthError(err error) bool {
+	return isCookieExpired(err)
+}
+
 // refreshCpdailyCookie 使用数据库中的 raw_password 重新登录 cpdaily 并更新 cookie
 // 密码错误时返回 ErrPasswordChanged
 func refreshCpdailyCookie(user *model.SysUser) error {
-	// 重新从数据库加载用户（获取最新 raw_password）
+	// 重新从数据库加载用户（获取最新 raw_password 与 cookie）
 	var fresh model.SysUser
 	if err := database.DB.First(&fresh, user.ID).Error; err != nil {
 		slog.Error("刷新cookie: 查询用户失败", "userId", user.ID, "error", err)
 		return err
 	}
 
+	// 优先尝试用长期 cookie（sessionToken/CASTGC）直接换取新的 CAS cookie。
+	// 手机号验证码登录的账号没有 raw_password，只能走此路径自动续期。
+	if refreshed, err := refreshCookieByLongTermToken(&fresh); err == nil && refreshed != "" {
+		if err := database.DB.Model(&fresh).Update("cookie", refreshed).Error; err != nil {
+			slog.Warn("刷新cookie: 写回长期凭证续期结果失败", "userId", user.ID, "error", err)
+		} else {
+			slog.Info("刷新cookie: 已用长期凭证续期成功", "userId", user.ID)
+			return nil
+		}
+	} else if err != nil {
+		slog.Info("刷新cookie: 长期凭证续期未成功，回退密码重登", "userId", user.ID, "error", err)
+	}
+
 	if fresh.RawPassword == "" {
 		slog.Warn("刷新cookie: 未保存密码", "userId", user.ID)
 		return errors.New("未保存登录密码，无法自动重新登录")
@@ -128,12 +154,77 @@ func refreshCpdailyCookie(user *model.SysUser) error {
 		return err
 	}
 
-	// 同步用户信息（异步）
-	go syncUserProfile(user, cookieStr, school.WecloudUrl)
-
-	// 更新传入用户的 cookie（引用），上层重试时使用
+	// 先更新传入用户的 cookie（引用），上层重试与后续同步均使用最新值
 	user.Cookie = cookieStr
 
+	// 同步用户信息（异步，禁续期：避免「续期 → 同步 → 再续期」递归）
+	go syncUserProfileWith(user, cookieStr, school.WecloudUrl, false)
+
 	slog.Info("刷新cookie: 成功", "userId", user.ID)
 	return nil
 }
+
+// refreshCookieByLongTermToken 用已保存的长期 cookie（sessionToken/CASTGC）重新换取 CAS cookie。
+// 适用于手机号验证码登录（无 raw_password）的账号自动续期；失败时返回错误，由调用方回退。
+func refreshCookieByLongTermToken(user *model.SysUser) (string, error) {
+	cookieMap := cpd.ParseCookieJSON(user.Cookie)
+	if cookieMap["sessionToken"] == "" {
+		return "", errors.New("缺少长期凭证 sessionToken")
+	}
+
+	school, err := cpd.GetSchoolDetail(user.SchoolID)
+	if err != nil {
+		return "", err
+	}
+
+	cookies, err := cpd.RefreshCasCookie(context.Background(), cookieMap, school.WecloudUrl, user.MobileCode)
+	if err != nil {
+		return "", err
+	}
+
+	hasMOD := false
+	for _, c := range cookies {
+		if strings.HasPrefix(c.Name, "MOD_") {
+			hasMOD = true
+			break
+		}
+	}
+	if !hasMOD {
+		return "", errors.New("续期未获取到 MOD_ cookie")
+	}
+
+	cookieStr := cpd.SerializeCookies(cookies)
+	// 回写传入用户，供上层重试使用
+	user.Cookie = cookieStr
+	return cookieStr, nil
+}
+
+// withCookieRefresh 执行一次今日校园调用；若因登录态失效失败，则尝试续期 cookie 后重试一次。
+//   - 返回 (调用结果, 续期后的 cookieMap, error)。cookieMap 有变化时调用方可用于后续调用。
+//   - 续期失败（如 MFA 学校无法自动续期、密码已改）时，返回错误里带上 ErrCookieExpired，
+//     由上层转成「登录凭证已过期，请重新登录」引导用户重登。
+//
+// 说明：MFA 学校登录后签发的是短期 JWT，到期会要求重新登录，本就无需自动续期；
+// 普通学校（非 MFA）的 cookie 会在此处用长期凭证/密码自动续期，避免用户被莫名踢出。
+func withCookieRefresh(user *model.SysUser, cookieMap map[string]string, host string,
+	fn func(cm map[string]string) error) (map[string]string, error) {
+
+	err := fn(cookieMap)
+	if err == nil || !isCpdailyAuthError(err) {
+		return cookieMap, err
+	}
+
+	slog.Info("检测到今日校园登录态失效，尝试自动续期 cookie", "userId", user.ID, "host", host)
+	if refreshErr := refreshCpdailyCookie(user); refreshErr != nil {
+		// 续期失败：保留原始错误语义，让上层引导重新登录
+		slog.Warn("cookie 自动续期失败", "userId", user.ID, "error", refreshErr)
+		return cookieMap, fmt.Errorf("%w: %v", cpd.ErrCookieExpired, refreshErr)
+	}
+
+	// 用续期后的 cookie 重试一次
+	newMap := cpd.ParseCookieJSON(user.Cookie)
+	if retryErr := fn(newMap); retryErr != nil {
+		return newMap, retryErr
+	}
+	return newMap, nil
+}

backed/internal/handler/deduction.go

@@ -0,0 +1,46 @@
+package handler
+
+import (
+	"cpdaily-new/internal/database"
+	"cpdaily-new/internal/model"
+	"strconv"
+)
+
+// 扣款额度系统设置 key（每次成功执行对应操作扣减的可签到次数）
+const (
+	settingDeductCheckin = "deduct_checkin" // 打卡
+	settingDeductLeave   = "deduct_leave"   // 请假
+	settingDeductReport  = "deduct_report"  // 销假
+)
+
+// parseDeductValue 解析扣款额度字符串：非法或负数时回退到 def。
+// 允许 0（0 表示不扣费），仅负数与解析失败视为无效。
+func parseDeductValue(value string, def float64) float64 {
+	if v, err := strconv.ParseFloat(value, 64); err == nil && v >= 0 {
+		return v
+	}
+	return def
+}
+
+// getDeduct 从系统设置读取扣款额度；缺省/非法/负数时回退到 def，允许 0。
+func getDeduct(key string, def float64) float64 {
+	var cfg model.SystemConfig
+	if database.DB.Where("`key` = ?", key).First(&cfg).Error == nil {
+		return parseDeductValue(cfg.Value, def)
+	}
+	return def
+}
+
+// getCheckinDeduct 打卡扣减额度（默认 1）
+func getCheckinDeduct() float64 { return getDeduct(settingDeductCheckin, 1) }
+
+// getLeaveDeduct 请假扣减额度（默认 1）
+func getLeaveDeduct() float64 { return getDeduct(settingDeductLeave, 1) }
+
+// getReportDeduct 销假扣减额度（默认 1）
+func getReportDeduct() float64 { return getDeduct(settingDeductReport, 1) }
+
+// fmtDeduct 额度展示：整数去尾零（1.00→1，0.50→0.5，0→0）
+func fmtDeduct(v float64) string {
+	return strconv.FormatFloat(v, 'f', -1, 64)
+}

backed/internal/handler/deduction_test.go

@@ -0,0 +1,47 @@
+package handler
+
+import "testing"
+
+// TestParseDeductValue 扣款额度解析：允许 0 与小数，非法/负数回退默认值。
+func TestParseDeductValue(t *testing.T) {
+	cases := []struct {
+		name  string
+		value string
+		def   float64
+		want  float64
+	}{
+		{"空字符串回退默认", "", 1, 1},
+		{"整数", "2", 1, 2},
+		{"小数", "0.5", 1, 0.5},
+		{"零不扣费", "0", 1, 0},
+		{"零带小数", "0.0", 1, 0},
+		{"负数回退默认", "-1", 1, 1},
+		{"非数字回退默认", "abc", 1, 1},
+		{"科学计数", "1e1", 1, 10},
+	}
+	for _, c := range cases {
+		t.Run(c.name, func(t *testing.T) {
+			if got := parseDeductValue(c.value, c.def); got != c.want {
+				t.Fatalf("parseDeductValue(%q, %v) = %v, want %v", c.value, c.def, got, c.want)
+			}
+		})
+	}
+}
+
+// TestFmtDeduct 额度展示去尾零。
+func TestFmtDeduct(t *testing.T) {
+	cases := []struct {
+		in   float64
+		want string
+	}{
+		{1, "1"},
+		{0, "0"},
+		{0.5, "0.5"},
+		{2.25, "2.25"},
+	}
+	for _, c := range cases {
+		if got := fmtDeduct(c.in); got != c.want {
+			t.Fatalf("fmtDeduct(%v) = %q, want %q", c.in, got, c.want)
+		}
+	}
+}

backed/internal/handler/invite_code.go

@@ -0,0 +1,139 @@
+package handler
+
+import (
+	"crypto/rand"
+	"errors"
+	"fmt"
+	"log/slog"
+	"math/big"
+	"strings"
+
+	"cpdaily-new/internal/database"
+	"cpdaily-new/internal/model"
+)
+
+// 邀请码规则：每个用户在注册（首次登录）时自动获得一个邀请码，不再提供手动生成接口。
+//   - 字符集去掉易混淆的 0/O、1/I/L，便于口头/截图分享；
+//   - 长度 6，字符集 31 个 → 约 8.9 亿种组合，配合唯一索引冲突重试，碰撞概率可忽略；
+//   - 使用 crypto/rand：旧实现以纳秒时间戳取模，可预测且并发注册时易生成相同码，
+//     在 invite_code 唯一索引下会直接导致用户创建（登录）失败。
+const (
+	inviteCodeChars    = "ABCDEFGHJKMNPQRSTUVWXYZ23456789"
+	inviteCodeLength   = 6
+	inviteCodeAttempts = 8
+)
+
+// newInviteCode 生成一个随机邀请码（不保证唯一，唯一性由调用方的写库重试保证）
+func newInviteCode() (string, error) {
+	return randomFromCharset(inviteCodeChars, inviteCodeLength)
+}
+
+// randomFromCharset 用 crypto/rand 从字符集中均匀取 n 个字符
+func randomFromCharset(charset string, n int) (string, error) {
+	max := big.NewInt(int64(len(charset)))
+	var sb strings.Builder
+	sb.Grow(n)
+	for i := 0; i < n; i++ {
+		idx, err := rand.Int(rand.Reader, max)
+		if err != nil {
+			return "", err
+		}
+		sb.WriteByte(charset[idx.Int64()])
+	}
+	return sb.String(), nil
+}
+
+// isInviteCodeConflict 判断是否为「邀请码」唯一索引冲突。
+// 只认 invite_code 索引：用户名等其他唯一键冲突也会报 Duplicate entry，换邀请码重试毫无意义，
+// 必须原样返回给调用方。MySQL 报错形如：
+//
+//	Error 1062 (23000): Duplicate entry 'ABC123' for key 'sys_user.idx_sys_user_invite_code'
+func isInviteCodeConflict(err error) bool {
+	if err == nil {
+		return false
+	}
+	msg := err.Error()
+	return strings.Contains(msg, "Duplicate entry") && strings.Contains(msg, "invite_code")
+}
+
+// withUniqueInviteCode 生成邀请码并执行写库操作 write(code)；
+// 若写库因唯一索引冲突失败，则换一个新码重试，最多 inviteCodeAttempts 次。
+// 冲突判定交给数据库唯一索引（而非「先查后写」），并发下依然正确。
+func withUniqueInviteCode(write func(code string) error) (string, error) {
+	var lastErr error
+	for i := 0; i < inviteCodeAttempts; i++ {
+		code, err := newInviteCode()
+		if err != nil {
+			return "", fmt.Errorf("生成邀请码失败: %w", err)
+		}
+		err = write(code)
+		if err == nil {
+			return code, nil
+		}
+		if !isInviteCodeConflict(err) {
+			return "", err
+		}
+		lastErr = err
+	}
+	return "", fmt.Errorf("邀请码重复次数过多: %w", lastErr)
+}
+
+// ensureInviteCode 确保用户拥有邀请码：已有则直接返回；没有则生成并写库。
+// 写库条件带 invite_code 为空，避免并发登录时把已生成的码覆盖掉；
+// 若条件未命中（被并发请求抢先写入），重新读取最新值。
+func ensureInviteCode(user *model.SysUser) error {
+	if strings.TrimSpace(user.InviteCode) != "" {
+		return nil
+	}
+	code, err := withUniqueInviteCode(func(code string) error {
+		res := database.DB.Model(&model.SysUser{}).
+			Where("id = ? AND (invite_code IS NULL OR invite_code = '')", user.ID).
+			Update("invite_code", code)
+		if res.Error != nil {
+			return res.Error
+		}
+		if res.RowsAffected == 0 {
+			return errInviteCodeAlreadySet
+		}
+		return nil
+	})
+	if errors.Is(err, errInviteCodeAlreadySet) {
+		var fresh model.SysUser
+		if e := database.DB.Select("id", "invite_code").First(&fresh, user.ID).Error; e != nil {
+			return e
+		}
+		user.InviteCode = fresh.InviteCode
+		return nil
+	}
+	if err != nil {
+		return err
+	}
+	user.InviteCode = code
+	slog.Info("已为用户补发邀请码", "userId", user.ID, "inviteCode", code)
+	return nil
+}
+
+var errInviteCodeAlreadySet = errors.New("invite code already set")
+
+// BackfillInviteCodes 启动时为所有缺少邀请码的存量用户补齐邀请码（幂等，无缺失时只执行一次计数查询）。
+func BackfillInviteCodes() {
+	var users []model.SysUser
+	if err := database.DB.Select("id", "invite_code").
+		Where("invite_code IS NULL OR invite_code = ''").
+		Find(&users).Error; err != nil {
+		slog.Error("查询缺少邀请码的用户失败", "error", err)
+		return
+	}
+	if len(users) == 0 {
+		return
+	}
+	ok := 0
+	for i := range users {
+		if err := ensureInviteCode(&users[i]); err != nil {
+			slog.Error("补发邀请码失败", "userId", users[i].ID, "error", err)
+			continue
+		}
+		ok++
+	}
+	slog.Info("存量用户邀请码补齐完成", "total", len(users), "success", ok)
+}

backed/internal/handler/invite_code_integration_test.go

@@ -0,0 +1,186 @@
+package handler
+
+import (
+	"fmt"
+	"os"
+	"sync"
+	"testing"
+
+	"cpdaily-new/internal/database"
+	"cpdaily-new/internal/model"
+
+	"gorm.io/driver/mysql"
+	"gorm.io/gorm"
+	"gorm.io/gorm/logger"
+)
+
+// 集成测试：仅在设置 INVITE_IT_DSN 时运行（指向一次性测试库，会建表/清表）。
+//
+//	INVITE_IT_DSN='root:test@tcp(127.0.0.1:33099)/invtest?charset=utf8mb4&parseTime=True&loc=Local' go test -run Integration ./internal/handler/
+func setupInviteIT(t *testing.T) {
+	dsn := os.Getenv("INVITE_IT_DSN")
+	if dsn == "" {
+		t.Skip("未设置 INVITE_IT_DSN，跳过数据库集成测试")
+	}
+	db, err := gorm.Open(mysql.Open(dsn), &gorm.Config{Logger: logger.Default.LogMode(logger.Silent)})
+	if err != nil {
+		t.Fatalf("连接测试库失败: %v", err)
+	}
+	if err := db.Migrator().DropTable(&model.SysUser{}); err != nil {
+		t.Fatalf("清表失败: %v", err)
+	}
+	if err := db.AutoMigrate(&model.SysUser{}); err != nil {
+		t.Fatalf("建表失败: %v", err)
+	}
+	database.DB = db
+}
+
+func insertUser(t *testing.T, name, code string) model.SysUser {
+	u := model.SysUser{Username: name, Password: "x", SchoolID: "s", SchoolName: "S", StudentID: name}
+	if err := database.DB.Create(&u).Error; err != nil {
+		t.Fatalf("插入用户失败: %v", err)
+	}
+	// invite_code 为 varchar NULL + 唯一索引；用原生 SQL 精确构造 NULL / '' 两种缺失形态
+	if code == "<NULL>" {
+		database.DB.Exec("UPDATE sys_user SET invite_code = NULL WHERE id = ?", u.ID)
+	} else {
+		database.DB.Exec("UPDATE sys_user SET invite_code = ? WHERE id = ?", code, u.ID)
+	}
+	return u
+}
+
+// TestIntegrationConflictErrorText 真实 MySQL 的唯一索引冲突报错能被 isInviteCodeConflict 识别；
+// 用户名冲突不会被误判
+func TestIntegrationConflictErrorText(t *testing.T) {
+	setupInviteIT(t)
+	insertUser(t, "u1", "AAAAAA")
+	u2 := insertUser(t, "u2", "BBBBBB")
+	err := database.DB.Model(&model.SysUser{}).Where("id = ?", u2.ID).Update("invite_code", "AAAAAA").Error
+	if err == nil {
+		t.Fatal("应触发唯一索引冲突")
+	}
+	t.Logf("邀请码冲突真实报错: %v", err)
+	if !isInviteCodeConflict(err) {
+		t.Fatalf("未识别为邀请码冲突: %v", err)
+	}
+	err = database.DB.Create(&model.SysUser{Username: "u1", Password: "x", InviteCode: "CCCCCC"}).Error
+	if err == nil {
+		t.Fatal("应触发用户名唯一冲突")
+	}
+	t.Logf("用户名冲突真实报错: %v", err)
+	if isInviteCodeConflict(err) {
+		t.Fatalf("用户名冲突被误判为邀请码冲突: %v", err)
+	}
+}
+
+// TestIntegrationEnsureAndBackfill 已有码不覆盖；NULL 与空串都会被补齐；补齐后全部唯一
+func TestIntegrationEnsureAndBackfill(t *testing.T) {
+	setupInviteIT(t)
+	keep := insertUser(t, "keep", "KEEP23")
+	insertUser(t, "n1", "<NULL>")
+	insertUser(t, "n2", "<NULL>")
+	insertUser(t, "e1", "") // 空串最多一行（唯一索引），正好覆盖历史数据形态
+
+	BackfillInviteCodes()
+
+	var users []model.SysUser
+	database.DB.Order("id").Find(&users)
+	seen := map[string]bool{}
+	for _, u := range users {
+		if u.InviteCode == "" {
+			t.Fatalf("用户 %s 仍无邀请码", u.Username)
+		}
+		if seen[u.InviteCode] {
+			t.Fatalf("邀请码重复: %s", u.InviteCode)
+		}
+		seen[u.InviteCode] = true
+		if u.ID == keep.ID && u.InviteCode != "KEEP23" {
+			t.Fatalf("已有邀请码被覆盖: %s", u.InviteCode)
+		}
+	}
+	// 再跑一次应为幂等（不改动任何人）
+	before := map[uint]string{}
+	for _, u := range users {
+		before[u.ID] = u.InviteCode
+	}
+	BackfillInviteCodes()
+	database.DB.Order("id").Find(&users)
+	for _, u := range users {
+		if before[u.ID] != u.InviteCode {
+			t.Fatalf("第二次补齐改动了用户 %s 的邀请码", u.Username)
+		}
+	}
+}
+
+// TestIntegrationEnsureConcurrent 同一用户并发补发：只写入一次，所有调用方拿到同一个码
+func TestIntegrationEnsureConcurrent(t *testing.T) {
+	setupInviteIT(t)
+	u := insertUser(t, "race", "<NULL>")
+	const n = 20
+	codes := make([]string, n)
+	var wg sync.WaitGroup
+	for i := 0; i < n; i++ {
+		wg.Add(1)
+		go func(i int) {
+			defer wg.Done()
+			cp := model.SysUser{ID: u.ID}
+			if err := ensureInviteCode(&cp); err != nil {
+				t.Errorf("ensureInviteCode: %v", err)
+			}
+			codes[i] = cp.InviteCode
+		}(i)
+	}
+	wg.Wait()
+	var fresh model.SysUser
+	database.DB.First(&fresh, u.ID)
+	for i, c := range codes {
+		if c != fresh.InviteCode {
+			t.Fatalf("第 %d 个调用拿到 %q，库里是 %q", i, c, fresh.InviteCode)
+		}
+	}
+}
+
+// TestIntegrationRegisterAndLoginBackfill 新用户注册自带邀请码；老用户（无码）登录时补发
+func TestIntegrationRegisterAndLoginBackfill(t *testing.T) {
+	setupInviteIT(t)
+	nu, isNew, err := findOrCreateUser("newbie", "pw", "s", "S", "2025001", "")
+	if err != nil || !isNew || nu.InviteCode == "" {
+		t.Fatalf("新用户注册应带邀请码: user=%+v isNew=%v err=%v", nu, isNew, err)
+	}
+	old := insertUser(t, "olduser", "<NULL>")
+	got, isNew, err := findOrCreateUser("olduser", "pw", "s", "S", "olduser", "")
+	if err != nil || isNew {
+		t.Fatalf("老用户登录: isNew=%v err=%v", isNew, err)
+	}
+	if got.ID != old.ID || got.InviteCode == "" {
+		t.Fatalf("老用户登录应补发邀请码: %+v", got)
+	}
+	var fresh model.SysUser
+	database.DB.First(&fresh, old.ID)
+	if fresh.InviteCode != got.InviteCode {
+		t.Fatalf("补发的邀请码未落库: 返回 %q 库里 %q", got.InviteCode, fresh.InviteCode)
+	}
+	// 并发注册多个新用户，邀请码互不重复
+	var wg sync.WaitGroup
+	errs := make(chan error, 30)
+	for i := 0; i < 30; i++ {
+		wg.Add(1)
+		go func(i int) {
+			defer wg.Done()
+			name := fmt.Sprintf("bulk%02d", i)
+			if _, _, e := findOrCreateUser(name, "pw", "s", "S", name, ""); e != nil {
+				errs <- e
+			}
+		}(i)
+	}
+	wg.Wait()
+	close(errs)
+	for e := range errs {
+		t.Fatalf("并发注册失败: %v", e)
+	}
+	var dup int64
+	database.DB.Raw("SELECT COUNT(*) FROM (SELECT invite_code FROM sys_user GROUP BY invite_code HAVING COUNT(*) > 1) t").Scan(&dup)
+	if dup != 0 {
+		t.Fatalf("存在 %d 组重复邀请码", dup)
+	}
+}

backed/internal/handler/invite_code_test.go

@@ -0,0 +1,113 @@
+package handler
+
+import (
+	"errors"
+	"strings"
+	"testing"
+)
+
+// TestNewInviteCodeFormat 邀请码长度、字符集（不含易混淆的 0/O/1/I/L）
+func TestNewInviteCodeFormat(t *testing.T) {
+	for i := 0; i < 2000; i++ {
+		code, err := newInviteCode()
+		if err != nil {
+			t.Fatalf("newInviteCode error: %v", err)
+		}
+		if len(code) != inviteCodeLength {
+			t.Fatalf("长度应为 %d，得到 %q", inviteCodeLength, code)
+		}
+		for _, ch := range code {
+			if !strings.ContainsRune(inviteCodeChars, ch) {
+				t.Fatalf("出现字符集外字符 %q（code=%q）", ch, code)
+			}
+			if strings.ContainsRune("0O1IL", ch) {
+				t.Fatalf("出现易混淆字符 %q（code=%q）", ch, code)
+			}
+		}
+	}
+}
+
+// TestNewInviteCodeRandomness 连续生成不应大量重复（旧实现按纳秒取模，快速连续调用会高度重复）
+func TestNewInviteCodeRandomness(t *testing.T) {
+	const n = 5000
+	seen := make(map[string]struct{}, n)
+	for i := 0; i < n; i++ {
+		code, _ := newInviteCode()
+		seen[code] = struct{}{}
+	}
+	// 31^6 ≈ 8.9 亿空间，5000 个样本的期望碰撞数 ≈ 0.014；允许极少量
+	if dup := n - len(seen); dup > 2 {
+		t.Fatalf("5000 次生成出现 %d 个重复，随机性异常", dup)
+	}
+}
+
+func dupErr(key string) error {
+	return errors.New("Error 1062 (23000): Duplicate entry 'ABC123' for key '" + key + "'")
+}
+
+// TestWithUniqueInviteCodeRetriesOnConflict 邀请码唯一索引冲突时换码重试，成功返回最终写入的码
+func TestWithUniqueInviteCodeRetriesOnConflict(t *testing.T) {
+	calls := 0
+	var tried []string
+	code, err := withUniqueInviteCode(func(c string) error {
+		calls++
+		tried = append(tried, c)
+		if calls < 3 {
+			return dupErr("sys_user.idx_sys_user_invite_code")
+		}
+		return nil
+	})
+	if err != nil {
+		t.Fatalf("应重试成功，得到错误 %v", err)
+	}
+	if calls != 3 {
+		t.Fatalf("应调用 3 次，实际 %d", calls)
+	}
+	if code != tried[len(tried)-1] {
+		t.Fatalf("返回的码应为最后一次写入的码：got %q, want %q", code, tried[len(tried)-1])
+	}
+}
+
+// TestWithUniqueInviteCodeNoRetryOnOtherErrors 用户名冲突等其他错误不重试，原样返回
+func TestWithUniqueInviteCodeNoRetryOnOtherErrors(t *testing.T) {
+	cases := []error{
+		dupErr("sys_user.idx_sys_user_username"),
+		errors.New("connection refused"),
+	}
+	for _, want := range cases {
+		calls := 0
+		_, err := withUniqueInviteCode(func(string) error { calls++; return want })
+		if calls != 1 {
+			t.Fatalf("非邀请码冲突不应重试（%v），实际调用 %d 次", want, calls)
+		}
+		if !errors.Is(err, want) && err.Error() != want.Error() {
+			t.Fatalf("应原样返回错误 %v，得到 %v", want, err)
+		}
+	}
+}
+
+// TestWithUniqueInviteCodeGivesUp 持续冲突时有上限，不会死循环
+func TestWithUniqueInviteCodeGivesUp(t *testing.T) {
+	calls := 0
+	_, err := withUniqueInviteCode(func(string) error {
+		calls++
+		return dupErr("sys_user.idx_sys_user_invite_code")
+	})
+	if err == nil {
+		t.Fatal("持续冲突应返回错误")
+	}
+	if calls != inviteCodeAttempts {
+		t.Fatalf("应尝试 %d 次，实际 %d", inviteCodeAttempts, calls)
+	}
+}
+
+// TestGenerateRandomCode 短信登录占位密码等仍使用该函数：长度正确且不重复
+func TestGenerateRandomCode(t *testing.T) {
+	a, b := generateRandomCode(32), generateRandomCode(32)
+	if len(a) != 32 || len(b) != 32 {
+		t.Fatalf("长度应为 32：%q %q", a, b)
+	}
+	if a == b {
+		t.Fatal("两次生成不应相同")
+	}
+}

backed/internal/handler/leave.go

@@ -36,19 +36,26 @@ func GetPendingLeaves(c *fiber.Ctx) error {
 	cookieMap := cpd.ParseCookieJSON(user.Cookie)
 	host := getSchoolHost(user.SchoolID)
 
-	items, err := cpd.FetchLeaveList(cookieMap, host)
-	if err != nil && isCookieExpired(err) {
-		slog.Info("获取待销假列表cookie过期，尝试刷新", "userId", userID)
-		if refreshErr := refreshCpdailyCookie(&user); refreshErr == nil {
-			cookieMap = cpd.ParseCookieJSON(user.Cookie)
-			items, err = cpd.FetchLeaveList(cookieMap, host)
-		} else if errors.Is(refreshErr, ErrPasswordChanged) {
-			err = ErrPasswordChanged
+	// 应用套件分流：新套（leave-new）走独立链路
+	isNewFlavor := schoolLeaveFlavor(&user, cookieMap) == cpd.LeaveFlavorNew
+
+	var items []cpd.LeaveItem
+	_, err := withCookieRefresh(&user, cookieMap, host, func(cm map[string]string) error {
+		if isNewFlavor {
+			// 套件判定用的是会话开始时解析的 cookie；续期后重新判定以保持准确
+			if schoolLeaveFlavor(&user, cm) == cpd.LeaveFlavorNew {
+				var e error
+				items, e = fetchLeaveNewPendingList(cm, host, &user)
+				return e
+			}
 		}
-	}
+		var e error
+		items, e = cpd.FetchLeaveList(cm, host)
+		return e
+	})
 	if err != nil {
 		slog.Error("获取待销假列表失败", "userId", userID, "error", err)
-		if errors.Is(err, ErrPasswordChanged) {
+		if isCpdailyAuthError(err) {
 			return utils.Fail(c, 401, "登录凭证已过期，请重新登录")
 		}
 		return utils.Fail(c, 503, "获取待销假列表失败: "+err.Error())
@@ -92,6 +99,11 @@ func ExecuteLeave(c *fiber.Ctx) error {
 	if user.Cookie == "" {
 		return utils.Fail(c, 400, "请先登录")
 	}
+	// 设备码后端硬校验：销假执行需携带设备码（对齐打卡侧拦截语义），
+	// 账密登录创建的账号可能未绑定设备码，空设备码会触发学校端风控异常
+	if strings.TrimSpace(user.MobileCode) == "" {
+		return utils.Fail(c, 400, "请先在个人中心绑定设备码后再执行销假")
+	}
 
 	// SSE 头
 	c.Set("Content-Type", "text/event-stream")
@@ -124,9 +136,12 @@ func ExecuteLeave(c *fiber.Ctx) error {
 		// VIP 判定：VIP 且未过期则免扣次数直接执行
 		isVip := user.VipExpireAt != nil && user.VipExpireAt.After(time.Now())
 
-		// 检查可用次数（VIP 免检查）
-		if !isVip && user.SignCount <= 0 {
-			slog.Warn("销假次数不足，拒绝执行", "userId", userID)
+		// 本次销假扣减额度（后台可配置，允许小数与 0=不扣费）
+		deduct := getReportDeduct()
+
+		// 检查可用次数（VIP 免检查；0 额度时恒放行）
+		if !isVip && user.SignCount < deduct {
+			slog.Warn("销假次数不足，拒绝执行", "userId", userID, "signCount", user.SignCount, "deduct", deduct)
 			sendEvent("task_error", map[string]interface{}{"message": "可用次数不足，请购买CDK或通过邀请获得次数"})
 			return
 		}
@@ -150,6 +165,38 @@ func ExecuteLeave(c *fiber.Ctx) error {
 		cookieMap := cpd.ParseCookieJSON(user.Cookie)
 		host := getSchoolHost(user.SchoolID)
 
+		// 新套（leave-new）：独立销假链路（详情校验 → 销假提交）
+		if schoolLeaveFlavor(&user, cookieMap) == cpd.LeaveFlavorNew {
+			sendEvent("fetching_detail", map[string]interface{}{"status": "fetching_detail", "message": "正在获取请假详情..."})
+			title := "销假"
+			if d, derr := cpd.FetchLeaveNewDetail(cookieMap, host, req.LeaveID); derr == nil {
+				title = leaveLogTitle(&cpd.LeaveDetail{LeaveType: d.TopicName}, req.LeaveID)
+			}
+			sendEvent("submitting", map[string]interface{}{"status": "submitting", "message": "正在提交销假..."})
+			ok, errMsg, needReLogin := leaveNewExecuteReport(&user, cookieMap, host,
+				req.LeaveID, req.Address, req.Longitude, req.Latitude, req.ImageURL, req.ApproverWid)
+			if !ok {
+				slog.Error("销假失败(新套)", "userId", userID, "leaveId", req.LeaveID, "error", errMsg)
+				saveLog(false, errMsg, title)
+				sendEvent("task_error", map[string]interface{}{"status": "error", "message": errMsg, "needReLogin": needReLogin})
+				return
+			}
+			saveLog(true, "", title)
+			if !isVip {
+				database.DB.Model(&model.SysUser{}).Where("id = ? AND sign_count >= ?", userID, deduct).
+					Update("sign_count", gorm.Expr("sign_count - ?", deduct))
+				msg := "销假成功！（已扣 " + fmtDeduct(deduct) + " 次）"
+				if deduct <= 0 {
+					msg = "销假成功！（免扣次数）"
+				}
+				sendEvent("success", map[string]interface{}{"status": "success", "message": msg})
+			} else {
+				sendEvent("success", map[string]interface{}{"status": "success", "message": "销假成功！（VIP 免扣次数）"})
+			}
+			slog.Info("销假成功(新套)", "userId", userID, "leaveId", req.LeaveID, "title", title, "isVip", isVip)
+			return
+		}
+
 		// 2. 获取请假详情
 		sendEvent("fetching_detail", map[string]interface{}{"status": "fetching_detail", "message": "正在获取请假详情..."})
 		detail, err := cpd.FetchLeaveDetail(cookieMap, host, req.LeaveID)
@@ -217,11 +264,15 @@ func ExecuteLeave(c *fiber.Ctx) error {
 		// 4. 成功：写日志 + 扣减可用次数（VIP 有效期内免扣）
 		saveLog(true, "", title)
 		if !isVip {
-			database.DB.Model(&model.SysUser{}).Where("id = ? AND sign_count > 0", userID).
-				Update("sign_count", gorm.Expr("sign_count - 1"))
+			database.DB.Model(&model.SysUser{}).Where("id = ? AND sign_count >= ?", userID, deduct).
+				Update("sign_count", gorm.Expr("sign_count - ?", deduct))
+			msg := "销假成功！（已扣 " + fmtDeduct(deduct) + " 次）"
+			if deduct <= 0 {
+				msg = "销假成功！（免扣次数）"
+			}
 			sendEvent("success", map[string]interface{}{
 				"status":  "success",
-				"message": "销假成功！",
+				"message": msg,
 			})
 		} else {
 			sendEvent("success", map[string]interface{}{
@@ -263,6 +314,27 @@ func GetLeaveApprovers(c *fiber.Ctx) error {
 	cookieMap := cpd.ParseCookieJSON(user.Cookie)
 	host := getSchoolHost(user.SchoolID)
 
+	// 新套：销假确认人（getReportApprovers by leaveId）
+	if schoolLeaveFlavor(&user, cookieMap) == cpd.LeaveFlavorNew {
+		approvers, err := fetchLeaveNewReportApprovers(cookieMap, host, req.LeaveID, &user)
+		if err != nil && isCookieExpired(err) {
+			if refreshErr := refreshCpdailyCookie(&user); refreshErr == nil {
+				cookieMap = cpd.ParseCookieJSON(user.Cookie)
+				approvers, err = fetchLeaveNewReportApprovers(cookieMap, host, req.LeaveID, &user)
+			} else if errors.Is(refreshErr, ErrPasswordChanged) {
+				err = ErrPasswordChanged
+			}
+		}
+		if err != nil {
+			slog.Error("获取销假审批人失败(新套)", "userId", userID, "leaveId", req.LeaveID, "error", err)
+			if errors.Is(err, ErrPasswordChanged) {
+				return utils.Fail(c, 401, "登录凭证已过期，请重新登录")
+			}
+			return utils.Fail(c, 503, "获取销假审批人失败: "+err.Error())
+		}
+		return utils.Success(c, approvers)
+	}
+
 	detail, err := cpd.FetchLeaveDetail(cookieMap, host, req.LeaveID)
 	if err != nil && isCookieExpired(err) {
 		if refreshErr := refreshCpdailyCookie(&user); refreshErr == nil {

backed/internal/handler/leave_apply.go

@@ -35,7 +35,8 @@ func loadLeaveUser(c *fiber.Ctx) (*model.SysUser, error) {
 	return &user, nil
 }
 
-// GetLeaveTypes 获取请假类型列表（含全部权威开关，前端据此渲染表单）
+// GetLeaveTypes 获取请假类型列表（含全部权威开关，前端据此渲染表单）。
+// 按学校应用的套件分流：新套（leave-new）翻译为同一契约返回。
 func GetLeaveTypes(c *fiber.Ctx) error {
 	user, err := loadLeaveUser(c)
 	if err != nil {
@@ -45,17 +46,28 @@ func GetLeaveTypes(c *fiber.Ctx) error {
 	cookieMap := cpd.ParseCookieJSON(user.Cookie)
 	host := getSchoolHost(user.SchoolID)
 
-	types, err := cpd.FetchLeaveTypes(cookieMap, host)
+	flavor := schoolLeaveFlavor(user, cookieMap)
+
+	var types []cpd.LeaveType
+	if flavor == cpd.LeaveFlavorNew {
+		types, err = fetchLeaveNewTypesWithDetail(cookieMap, host, user)
+	} else {
+		types, err = cpd.FetchLeaveTypes(cookieMap, host)
+	}
 	if err != nil && isCookieExpired(err) {
 		if refreshErr := refreshCpdailyCookie(user); refreshErr == nil {
 			cookieMap = cpd.ParseCookieJSON(user.Cookie)
-			types, err = cpd.FetchLeaveTypes(cookieMap, host)
+			if flavor == cpd.LeaveFlavorNew {
+				types, err = fetchLeaveNewTypesWithDetail(cookieMap, host, user)
+			} else {
+				types, err = cpd.FetchLeaveTypes(cookieMap, host)
+			}
 		} else if errors.Is(refreshErr, ErrPasswordChanged) {
 			err = ErrPasswordChanged
 		}
 	}
 	if err != nil {
-		slog.Error("获取请假类型失败", "userId", user.ID, "error", err)
+		slog.Error("获取请假类型失败", "userId", user.ID, "flavor", flavor.String(), "error", err)
 		if errors.Is(err, ErrPasswordChanged) {
 			return utils.Fail(c, 401, "登录凭证已过期，请重新登录")
 		}
@@ -67,6 +79,7 @@ func GetLeaveTypes(c *fiber.Ctx) error {
 
 // GetLeaveApplyApprovers 获取请假可选审批人（needApproval=1 的类型）。
 // 请求：{ leaveType, startTime, endTime }（与销假审批人接口区分：此处选择类型发生在提交前）。
+// 新套额外返回 flowData（提交请假时原样回传），前端不透明缓存即可。
 func GetLeaveApplyApprovers(c *fiber.Ctx) error {
 	user, err := loadLeaveUser(c)
 	if err != nil {
@@ -88,6 +101,29 @@ func GetLeaveApplyApprovers(c *fiber.Ctx) error {
 	cookieMap := cpd.ParseCookieJSON(user.Cookie)
 	host := getSchoolHost(user.SchoolID)
 
+	flavor := schoolLeaveFlavor(user, cookieMap)
+
+	if flavor == cpd.LeaveFlavorNew {
+		res, err := fetchLeaveNewApplyApprovers(cookieMap, host, req.LeaveType, req.StartTime, req.EndTime)
+		if err != nil && isCookieExpired(err) {
+			if refreshErr := refreshCpdailyCookie(user); refreshErr == nil {
+				cookieMap = cpd.ParseCookieJSON(user.Cookie)
+				res, err = fetchLeaveNewApplyApprovers(cookieMap, host, req.LeaveType, req.StartTime, req.EndTime)
+			} else if errors.Is(refreshErr, ErrPasswordChanged) {
+				err = ErrPasswordChanged
+			}
+		}
+		if err != nil {
+			slog.Error("获取请假审批人失败(新套)", "userId", user.ID, "leaveType", req.LeaveType, "error", err)
+			if errors.Is(err, ErrPasswordChanged) {
+				return utils.Fail(c, 401, "登录凭证已过期，请重新登录")
+			}
+			return utils.Fail(c, 503, "获取请假审批人失败: "+err.Error())
+		}
+		// 保持与旧套一致的数组契约（flowData 由服务端在执行时重新获取，前端无需感知）
+		return utils.Success(c, res.Approvers)
+	}
+
 	approvers, err := cpd.FetchReportApprovers(cookieMap, host, req.LeaveType, req.StartTime, req.EndTime)
 	if err != nil && isCookieExpired(err) {
 		if refreshErr := refreshCpdailyCookie(user); refreshErr == nil {
@@ -110,21 +146,39 @@ func GetLeaveApplyApprovers(c *fiber.Ctx) error {
 
 // ExecuteLeaveApplyRequest 请假申请执行参数
 type ExecuteLeaveApplyRequest struct {
-	LeaveType     int    `json:"leaveType"`     // 类型编码
-	StartTime     string `json:"startTime"`     // yyyy-MM-dd HH:mm:ss
-	EndTime       string `json:"endTime"`       // yyyy-MM-dd HH:mm:ss
-	LeaveReason   string `json:"leaveReason"`   // 请假原因
-	OutStatus     bool   `json:"outStatus"`     // 是否离校
-	UrgencyMobile string `json:"urgencyMobile"` // 紧急联系人（离校必填）
-	Address       string `json:"address"`       // 目的地（离校必填）
-	DetailAddress string `json:"detailAddress"` // 详细地址（离校必填）
-	Longitude     string `json:"longitude"`     // 定位经度
-	Latitude      string `json:"latitude"`      // 定位纬度
-	LocationAddr  string `json:"locationAddr"`  // 定位地址
-	ImageURL      string `json:"imageUrl"`      // 附件（可选）
-	ApproverWid   string `json:"approverWid"`   // 审批人 userWid
-	ApproverId    string `json:"approverId"`    // 审批人 userId
-	ApproverName  string `json:"approverName"`  // 审批人姓名
+	LeaveType     int                 `json:"leaveType"`     // 类型编码
+	StartTime     string              `json:"startTime"`     // yyyy-MM-dd HH:mm:ss
+	EndTime       string              `json:"endTime"`       // yyyy-MM-dd HH:mm:ss
+	LeaveReason   string              `json:"leaveReason"`   // 请假原因
+	OutStatus     bool                `json:"outStatus"`     // 是否离校
+	UrgencyMobile string              `json:"urgencyMobile"` // 紧急联系人（离校必填）
+	Address       string              `json:"address"`       // 目的地（离校必填）
+	DetailAddress string              `json:"detailAddress"` // 详细地址（离校必填）
+	Longitude     string              `json:"longitude"`     // 定位经度
+	Latitude      string              `json:"latitude"`      // 定位纬度
+	LocationAddr  string              `json:"locationAddr"`  // 定位地址
+	ImageURLs     []string            `json:"imageUrls"`     // 附件图片 URL 列表（可选，最多4张且不超学校上限）
+	ImageURL      string              `json:"imageUrl"`      // 兼容旧前端：单附件 URL（与 imageUrls 合并去重）
+	ApproverWid   string              `json:"approverWid"`   // 审批人 userWid（候选为空时可不传）
+	ApproverId    string              `json:"approverId"`    // 审批人 userId
+	ApproverName  string              `json:"approverName"`  // 审批人姓名
+	CcUsers       []cpd.LeaveApprover `json:"ccUsers"`       // 抄送人（非必填，候选取自审批人列表）
+	SignatureURL  string              `json:"signatureUrl"`  // 手写承诺书签名图 URL（requireSign=1 的类型必填）
+}
+
+// mergeApplyImageURLs 合并 imageUrls 与兼容字段 imageUrl，保序去重并剔除空串
+func mergeApplyImageURLs(urls []string, legacy string) []string {
+	out := make([]string, 0, len(urls)+1)
+	seen := make(map[string]bool, len(urls)+1)
+	for _, u := range append(append([]string{}, urls...), legacy) {
+		u = strings.TrimSpace(u)
+		if u == "" || seen[u] {
+			continue
+		}
+		seen[u] = true
+		out = append(out, u)
+	}
+	return out
 }
 
 // ExecuteLeaveApply 执行请假申请（SSE 同步执行：checkOnceLeave → 提交）。
@@ -143,6 +197,11 @@ func ExecuteLeaveApply(c *fiber.Ctx) error {
 	req.Latitude = strings.TrimSpace(req.Latitude)
 	req.LocationAddr = strings.TrimSpace(req.LocationAddr)
 	req.ApproverWid = strings.TrimSpace(req.ApproverWid)
+	// 附件：多图字段 + 旧前端兼容单图字段，去重合并
+	imageURLs := mergeApplyImageURLs(req.ImageURLs, req.ImageURL)
+	if len(imageURLs) > cpd.LeaveMaxAttachCount(0) {
+		return utils.FailParam(c, "附件最多 4 张")
+	}
 
 	if req.StartTime == "" || req.EndTime == "" {
 		return utils.FailParam(c, "开始/结束时间不能为空")
@@ -175,6 +234,11 @@ func ExecuteLeaveApply(c *fiber.Ctx) error {
 	if user.Cookie == "" {
 		return utils.Fail(c, 400, "请先登录")
 	}
+	// 设备码后端硬校验：请假执行需携带设备码（对齐打卡侧拦截语义），
+	// 账密登录创建的账号可能未绑定设备码，空设备码会触发学校端风控异常
+	if strings.TrimSpace(user.MobileCode) == "" {
+		return utils.Fail(c, 400, "请先在个人中心绑定设备码后再执行请假")
+	}
 
 	// SSE 头
 	c.Set("Content-Type", "text/event-stream")
@@ -209,8 +273,11 @@ func ExecuteLeaveApply(c *fiber.Ctx) error {
 
 		isVip := user.VipExpireAt != nil && user.VipExpireAt.After(time.Now())
 
-		if !isVip && user.SignCount <= 0 {
-			slog.Warn("请假次数不足，拒绝执行", "userId", userID)
+		// 本次请假扣减额度（后台可配置，允许小数与 0=不扣费）
+		deduct := getLeaveDeduct()
+
+		if !isVip && user.SignCount < deduct {
+			slog.Warn("请假次数不足，拒绝执行", "userId", userID, "signCount", user.SignCount, "deduct", deduct)
 			sendEvent("task_error", map[string]interface{}{"message": "可用次数不足，请购买CDK或通过邀请获得次数"})
 			return
 		}
@@ -233,6 +300,37 @@ func ExecuteLeaveApply(c *fiber.Ctx) error {
 		cookieMap := cpd.ParseCookieJSON(user.Cookie)
 		host := getSchoolHost(user.SchoolID)
 
+		// 新套（leave-new）：独立请假链路（类型详情复核 + 审批流 + 明文 JSON 提交）
+		if schoolLeaveFlavor(&user, cookieMap) == cpd.LeaveFlavorNew {
+			sendEvent("submitting", map[string]interface{}{"status": "submitting", "message": "正在提交请假申请..."})
+			ok, errMsg, needReLogin, needApprover := leaveNewExecuteApply(&user, cookieMap, host, req, imageURLs)
+			if !ok {
+				slog.Error("请假申请失败(新套)", "userId", userID, "error", errMsg)
+				saveLog(false, errMsg)
+				sendEvent("task_error", map[string]interface{}{
+					"status":       "error",
+					"message":      errMsg,
+					"needReLogin":  needReLogin,
+					"needApprover": needApprover,
+				})
+				return
+			}
+			saveLog(true, "")
+			if !isVip {
+				database.DB.Model(&model.SysUser{}).Where("id = ? AND sign_count >= ?", userID, deduct).
+					Update("sign_count", gorm.Expr("sign_count - ?", deduct))
+				msg := "请假申请提交成功！（已扣 " + fmtDeduct(deduct) + " 次）"
+				if deduct <= 0 {
+					msg = "请假申请提交成功！（免扣次数）"
+				}
+				sendEvent("success", map[string]interface{}{"status": "success", "message": msg})
+			} else {
+				sendEvent("success", map[string]interface{}{"status": "success", "message": "请假申请提交成功！（VIP 免扣次数）"})
+			}
+			slog.Info("请假申请成功(新套)", "userId", userID, "leaveType", req.LeaveType, "start", req.StartTime, "end", req.EndTime, "isVip", isVip)
+			return
+		}
+
 		// 1. 获取类型配置（服务端复核开关，避免前端被绕过）
 		cfg, err := cpd.FetchLeaveTypeCfg(cookieMap, host, req.LeaveType)
 		if err != nil && isCookieExpired(err) {
@@ -265,11 +363,42 @@ func ExecuteLeaveApply(c *fiber.Ctx) error {
 			sendEvent("task_error", map[string]interface{}{"status": "error", "message": errMsg})
 			return
 		}
+		// 审批人：needApproval=1 且学校配置了候选审批人时必选；
+		// 候选列表为空（学校未配置审批节点人员，如 ysdwl「大四学生请假」）时允许不选，跳过即可
 		if cfg.NeedApproval == 1 && req.ApproverWid == "" {
-			errMsg := "该请假类型需要选择审批人"
-			saveLog(false, errMsg)
-			sendEvent("task_error", map[string]interface{}{"status": "error", "message": errMsg, "needApprover": true})
-			return
+			candidates, err := cpd.FetchReportApprovers(cookieMap, host, req.LeaveType, req.StartTime, req.EndTime)
+			if err != nil {
+				errMsg := "获取请假审批人失败: " + err.Error()
+				slog.Warn("校验审批人候选失败", "userId", userID, "error", err)
+				saveLog(false, errMsg)
+				sendEvent("task_error", map[string]interface{}{"status": "error", "message": errMsg})
+				return
+			}
+			if len(candidates) > 0 {
+				errMsg := "该请假类型需要选择审批人"
+				saveLog(false, errMsg)
+				sendEvent("task_error", map[string]interface{}{"status": "error", "message": errMsg, "needApprover": true})
+				return
+			}
+			slog.Info("该类型无候选审批人，允许不选提交", "userId", userID, "leaveType", req.LeaveType)
+		}
+
+		// 附件复核：类型开关 + 数量上限（学校配置为准，产品上限 4 张）
+		// 注意：实测多所旧套学校 enableAttach 恒为 0（该字段在旧套不代表"可传附件"），
+		// 是否允许以 attachmentNumberLimit>0 为准；仅当两者都表明不可用时才拒绝。
+		if len(imageURLs) > 0 {
+			if cfg.EnableAttach != 1 && cfg.AttachmentNumberLimit <= 0 {
+				errMsg := "该请假类型不支持上传附件"
+				saveLog(false, errMsg)
+				sendEvent("task_error", map[string]interface{}{"status": "error", "message": errMsg})
+				return
+			}
+			if maxN := cpd.LeaveMaxAttachCount(cfg.AttachmentNumberLimit); len(imageURLs) > maxN {
+				errMsg := fmt.Sprintf("附件最多 %d 张", maxN)
+				saveLog(false, errMsg)
+				sendEvent("task_error", map[string]interface{}{"status": "error", "message": errMsg})
+				return
+			}
 		}
 
 		// 2. 可请假检查
@@ -295,10 +424,11 @@ func ExecuteLeaveApply(c *fiber.Ctx) error {
 			Longitude:     req.Longitude,
 			Latitude:      req.Latitude,
 			LocationAddr:  req.LocationAddr,
-			ImageURL:      req.ImageURL,
+			ImageURLs:     imageURLs,
 			ApproverWid:   req.ApproverWid,
 			ApproverId:    req.ApproverId,
 			ApproverName:  req.ApproverName,
+			CcUsers:       req.CcUsers,
 		}
 		form := cpd.BuildLeaveApplyForm(p, user.MobileCode, "15", "9.9.6")
 		err = cpd.SubmitLeaveApply(cookieMap, host, form, req.Longitude, req.Latitude, user.MobileCode, user.StudentID)
@@ -325,11 +455,15 @@ func ExecuteLeaveApply(c *fiber.Ctx) error {
 		// 4. 成功：写日志 + 扣减可用次数（VIP 有效期内免扣）
 		saveLog(true, "")
 		if !isVip {
-			database.DB.Model(&model.SysUser{}).Where("id = ? AND sign_count > 0", userID).
-				Update("sign_count", gorm.Expr("sign_count - 1"))
+			database.DB.Model(&model.SysUser{}).Where("id = ? AND sign_count >= ?", userID, deduct).
+				Update("sign_count", gorm.Expr("sign_count - ?", deduct))
+			msg := "请假申请提交成功！（已扣 " + fmtDeduct(deduct) + " 次）"
+			if deduct <= 0 {
+				msg = "请假申请提交成功！（免扣次数）"
+			}
 			sendEvent("success", map[string]interface{}{
 				"status":  "success",
-				"message": "请假申请提交成功！",
+				"message": msg,
 			})
 		} else {
 			sendEvent("success", map[string]interface{}{

backed/internal/handler/leave_apply_attach_test.go

@@ -0,0 +1,142 @@
+package handler
+
+import (
+	"testing"
+
+	cpd "cpdaily-new/internal/service/cpdaily"
+)
+
+// TestMergeApplyImageURLs 附件合并：多图字段 + 旧前端兼容单图字段，
+// 保序去重、剔除空串与首尾空白（避免旧缓存包附件被静默丢弃或重复提交）。
+func TestMergeApplyImageURLs(t *testing.T) {
+	cases := []struct {
+		name   string
+		urls   []string
+		legacy string
+		want   []string
+	}{
+		{
+			name:   "仅多图字段",
+			urls:   []string{"a", "b"},
+			legacy: "",
+			want:   []string{"a", "b"},
+		},
+		{
+			name:   "仅旧单图字段",
+			urls:   nil,
+			legacy: "a",
+			want:   []string{"a"},
+		},
+		{
+			name:   "旧字段与多图重复应去重",
+			urls:   []string{"a", "b"},
+			legacy: "a",
+			want:   []string{"a", "b"},
+		},
+		{
+			name:   "旧字段不在多图中应追加",
+			urls:   []string{"a"},
+			legacy: "c",
+			want:   []string{"a", "c"},
+		},
+		{
+			name:   "空串与空白剔除",
+			urls:   []string{"", "  ", "a"},
+			legacy: " ",
+			want:   []string{"a"},
+		},
+		{
+			name:   "首尾空白裁剪",
+			urls:   []string{" a ", "  b"},
+			legacy: "",
+			want:   []string{"a", "b"},
+		},
+		{
+			name:   "全部为空",
+			urls:   []string{""},
+			legacy: "",
+			want:   []string{},
+		},
+	}
+	for _, c := range cases {
+		t.Run(c.name, func(t *testing.T) {
+			got := mergeApplyImageURLs(c.urls, c.legacy)
+			if len(got) != len(c.want) {
+				t.Fatalf("mergeApplyImageURLs(%v, %q) = %v, want %v", c.urls, c.legacy, got, c.want)
+			}
+			for i := range got {
+				if got[i] != c.want[i] {
+					t.Fatalf("mergeApplyImageURLs(%v, %q) = %v, want %v", c.urls, c.legacy, got, c.want)
+				}
+			}
+		})
+	}
+}
+
+// TestLeaveNewToLeaveTypesAttachGating 新套类型翻译：材料区不可见时不得带出数量上限，
+// 否则前端按「上限>0」的条件会误显示上传入口（旧套学校 enableAttach 恒为 0 的同类问题）。
+func TestLeaveNewToLeaveTypesAttachGating(t *testing.T) {
+	types := []cpd.LeaveNewType{
+		{TypeWid: 1, TypeName: "可见类型"},
+		{TypeWid: 2, TypeName: "不可见类型"},
+	}
+	details := map[int]*cpd.LeaveNewFormDetail{
+		1: {TypeName: "可见类型", IsVisibledEvidenceFile: true, EvidenceFileCountMax: 4},
+		2: {TypeName: "不可见类型", IsVisibledEvidenceFile: false, EvidenceFileCountMax: 10},
+	}
+	out := leaveNewToLeaveTypes(types, func(wid int) *cpd.LeaveNewFormDetail { return details[wid] })
+	if len(out) != 2 {
+		t.Fatalf("期望 2 个类型, got %d", len(out))
+	}
+	if out[0].EnableAttach != 1 || out[0].AttachmentNumberLimit != 4 {
+		t.Errorf("可见类型应带出开关与上限: %+v", out[0])
+	}
+	if out[1].EnableAttach != 0 || out[1].AttachmentNumberLimit != 0 {
+		t.Errorf("不可见类型不应带出上限（否则前端误显示）: %+v", out[1])
+	}
+}
+
+// TestLeaveNewRequireSignMapping 手写承诺书需求透传：新套 queryLeaveType.isSign → LeaveType.requireSign
+func TestLeaveNewRequireSignMapping(t *testing.T) {
+	types := []cpd.LeaveNewType{
+		{TypeWid: 8484, TypeName: "事假", IsSign: true},
+		{TypeWid: 6185, TypeName: "病假", IsSign: false},
+	}
+	out := leaveNewToLeaveTypes(types, func(int) *cpd.LeaveNewFormDetail { return nil })
+	if out[0].RequireSign != 1 {
+		t.Errorf("isSign=true 应标记 requireSign=1: %+v", out[0])
+	}
+	if out[1].RequireSign != 0 {
+		t.Errorf("isSign=false 不应标记 requireSign: %+v", out[1])
+	}
+}
+
+// TestBuildLeaveNewApplyFormSignature 手写承诺书作为 attachs 中 isStuSign 项附加
+func TestBuildLeaveNewApplyFormSignature(t *testing.T) {
+	// 无签名时不应出现 isStuSign 项
+	without := cpd.BuildLeaveNewApplyForm(cpd.LeaveNewApplyParams{TypeWid: 1, ImageURLs: []string{"https://obs/a.jpg"}})
+	as := without["attachs"].([]map[string]interface{})
+	if len(as) != 1 {
+		t.Fatalf("无签名时期望 1 个附件, got %d", len(as))
+	}
+	if _, ok := as[0]["isStuSign"]; ok {
+		t.Errorf("普通附件不应带 isStuSign")
+	}
+
+	// 有签名时附加带 isStuSign 的项
+	with := cpd.BuildLeaveNewApplyForm(cpd.LeaveNewApplyParams{TypeWid: 1, SignatureURL: "https://obs/newBucket/sign.jpg?x=1"})
+	as2 := with["attachs"].([]map[string]interface{})
+	if len(as2) != 1 {
+		t.Fatalf("有签名时期望 1 个附件, got %d", len(as2))
+	}
+	sig := as2[0]
+	if sig["isStuSign"] != true {
+		t.Errorf("签名项应带 isStuSign=true: %+v", sig)
+	}
+	if sig["attachName"] != "学生手写承诺书" {
+		t.Errorf("签名项 attachName 应为主学生手写承诺书: %+v", sig)
+	}
+	if sig["obsKey"] != "newBucket/sign.jpg" {
+		t.Errorf("签名项 obsKey 应从 URL 推导: %+v", sig)
+	}
+}

backed/internal/handler/leave_flavor.go

@@ -0,0 +1,130 @@
+package handler
+
+import (
+	"log/slog"
+	"sync"
+	"time"
+
+	"cpdaily-new/internal/model"
+	cpd "cpdaily-new/internal/service/cpdaily"
+)
+
+// 请假应用套件分流（新旧两套 API 并存）：
+//
+//	新套 wec-counselor-leave-new-apps（「请销假」应用，部分学校已迁移，旧前缀被 420 拦截）
+//	旧套 wec-counselor-leave-apps（「请假」应用，默认）
+//
+// 分流依据：辅导猫 getAppInfos 返回的本校应用列表（openUrl 指向哪套）；
+// 探测失败时试探新套端点兜底；结果按学校缓存 30 分钟。
+
+type leaveFlavorCacheEntry struct {
+	flavor  cpd.LeaveAppFlavor
+	expire  time.Time
+}
+
+var leaveFlavorCache sync.Map // schoolID -> leaveFlavorCacheEntry
+
+const leaveFlavorCacheTTL = 30 * time.Minute
+
+// schoolLeaveFlavor 获取（并缓存）学校请假应用套件类型
+func schoolLeaveFlavor(user *model.SysUser, cookieMap map[string]string) cpd.LeaveAppFlavor {
+	if v, ok := leaveFlavorCache.Load(user.SchoolID); ok {
+		if e, ok2 := v.(leaveFlavorCacheEntry); ok2 && time.Now().Before(e.expire) {
+			return e.flavor
+		}
+	}
+
+	host := getSchoolHost(user.SchoolID)
+	flavor, openURL := cpd.FetchLeaveAppFlavor(cookieMap, host)
+	if flavor == cpd.LeaveFlavorUnknown {
+		// getAppInfos 失败/无请假应用：试探新套端点兜底
+		if cpd.PingLeaveNew(cookieMap, host) {
+			flavor = cpd.LeaveFlavorNew
+		} else {
+			// 默认按旧套处理（cookie 过期等场景下旧套错误的语义更准确）
+			flavor = cpd.LeaveFlavorOld
+		}
+	}
+	slog.Info("请假应用套件分流", "schoolId", user.SchoolID, "flavor", flavor.String(), "openUrl", openURL)
+	leaveFlavorCache.Store(user.SchoolID, leaveFlavorCacheEntry{flavor: flavor, expire: time.Now().Add(leaveFlavorCacheTTL)})
+	return flavor
+}
+
+// invalidateLeaveFlavor 清缓存（应用迁移后可强制重探）
+func invalidateLeaveFlavor(schoolID string) {
+	leaveFlavorCache.Delete(schoolID)
+}
+
+// ---------- 新套 → 现有前端契约的翻译 ----------
+
+// leaveNewToLeaveTypes 新套类型列表 → 旧契约 LeaveType（前端零改动消费）
+func leaveNewToLeaveTypes(list []cpd.LeaveNewType, detailOf func(typeWid int) *cpd.LeaveNewFormDetail) []cpd.LeaveType {
+	out := make([]cpd.LeaveType, 0, len(list))
+	for _, t := range list {
+		item := cpd.LeaveType{
+			Code: t.TypeWid,
+			Name: t.TypeName,
+		}
+		// 需先手写承诺书签名后提交（新套 queryLeaveType.isSign）
+		if t.IsSign {
+			item.RequireSign = 1
+		}
+		if d := detailOf(t.TypeWid); d != nil {
+			if d.TypeName != "" {
+				item.Name = d.TypeName
+			}
+			// 注意：新套 extendInfoBean.isLeaveOut（0/1/2）只是表单「是否离校」的初始默认值，
+			// 不是强制开关，故不映射为 MustOut（旧套 mustOut 才是"必须离校"语义）。
+			// 透传为 OutStatusDefault，前端据此设置开关初始状态（1=默认是，2 或 0=默认否）。
+			item.OutStatusDefault = d.IsLeaveOut
+			// 是否需要审批人由 apply-approvers 实际候选判断；
+			// 类型列表阶段以审批流存在性做提示（有审批流则显示审批人区）
+			item.NeedApproval = 1
+			if d.IsVisibledEvidenceFile {
+				item.EnableAttach = 1
+				item.AttachmentNumberLimit = d.EvidenceFileCountMax
+			} else {
+				// 材料区不可见时不得带出上限，否则前端按「上限>0」会误显示上传入口
+				item.AttachmentNumberLimit = 0
+			}
+			item.ReasonWordLimit = d.LeaveReasonWordsMini
+			item.DisableTime = 0
+			item.LimitDay = 0
+		} else {
+			// 详情获取失败：保守默认（不阻塞列表）
+			item.NeedApproval = 1
+			item.EnableAttach = 1
+		}
+		out = append(out, item)
+	}
+	return out
+}
+
+// leaveNewPlacesToLeaveReportPlaces 新套销假位置 → 旧契约 LeaveReportPlace
+func leaveNewPlacesToLeaveReportPlaces(list []cpd.LeaveNewReportPlace) []cpd.LeaveReportPlace {
+	out := make([]cpd.LeaveReportPlace, 0, len(list))
+	for _, p := range list {
+		out = append(out, cpd.LeaveReportPlace{
+			Wid:       p.Wid,
+			Address:   p.Address,
+			Longitude: p.Longitude,
+			Latitude:  p.Latitude,
+			Radius:    p.Radius,
+			CounName:  p.CounName,
+		})
+	}
+	return out
+}
+
+// leaveNewApproversToLeaveApprovers 新套审批人 → 旧契约 LeaveApprover（前端展示用）
+func leaveNewApproversToLeaveApprovers(list []cpd.LeaveNewApprover) []cpd.LeaveApprover {
+	out := make([]cpd.LeaveApprover, 0, len(list))
+	for _, a := range list {
+		out = append(out, cpd.LeaveApprover{
+			UserWid:  a.UserWid,
+			UserId:   a.UserId,
+			UserName: a.UserName,
+		})
+	}
+	return out
+}

backed/internal/handler/leave_new_exec.go

@@ -0,0 +1,289 @@
+package handler
+
+import (
+	"errors"
+	"fmt"
+	"log/slog"
+	"strings"
+
+	"cpdaily-new/internal/model"
+	cpd "cpdaily-new/internal/service/cpdaily"
+)
+
+// ---------- 新套执行链路（请假/销假） ----------
+
+// leaveNewResolveApproverAndFlow 服务端自取审批流：按 userWid 匹配完整审批人对象 + flowData。
+// 返回 (approver, flowData, candidates, err)：
+//   - approver 为 nil 表示未提供 userWid 或未匹配（调用方决定是否放行）
+//   - candidates 为全部候选（用于「无候选可放行」判定）
+func leaveNewResolveApproverAndFlow(cookieMap map[string]string, host string, typeWid int, startTime, endTime, approverWid string) (*cpd.LeaveNewApprover, map[string]interface{}, []cpd.LeaveNewApprover, error) {
+	flow, err := cpd.FetchLeaveNewApproveFlow(cookieMap, host, typeWid, startTime, endTime, "")
+	if err != nil {
+		return nil, nil, nil, err
+	}
+	if approverWid == "" {
+		return nil, flow.FlowData, flow.ApproveUsers, nil
+	}
+	for i := range flow.ApproveUsers {
+		if flow.ApproveUsers[i].UserWid == approverWid {
+			return &flow.ApproveUsers[i], flow.FlowData, flow.ApproveUsers, nil
+		}
+	}
+	return nil, flow.FlowData, flow.ApproveUsers, nil
+}
+
+// leaveNewResolveCcUsers 抄送人 userWid 列表 → 完整对象（新套 getCcSearchList 全量匹配）
+func leaveNewResolveCcUsers(cookieMap map[string]string, host string, widList []string) []cpd.LeaveNewApprover {
+	if len(widList) == 0 {
+		return nil
+	}
+	all, err := cpd.FetchLeaveNewCcSearch(cookieMap, host, "")
+	if err != nil {
+		slog.Warn("获取抄送人候选失败，抄送人将被忽略", "error", err)
+		return nil
+	}
+	want := make(map[string]bool, len(widList))
+	for _, w := range widList {
+		if w != "" {
+			want[w] = true
+		}
+	}
+	out := make([]cpd.LeaveNewApprover, 0, len(widList))
+	seen := make(map[string]bool, len(widList))
+	for _, a := range all {
+		if want[a.UserWid] && !seen[a.UserWid] {
+			seen[a.UserWid] = true
+			out = append(out, a)
+		}
+	}
+	return out
+}
+
+// leaveNewTypeIsSign 该类型是否需手写承诺书（queryLeaveType.isSign；查询失败按 false 容错）
+func leaveNewTypeIsSign(cookieMap map[string]string, host string, typeWid int) bool {
+	types, err := cpd.FetchLeaveNewTypes(cookieMap, host)
+	if err != nil {
+		slog.Warn("获取请假类型列表失败，跳过手写承诺书校验", "typeWid", typeWid, "error", err)
+		return false
+	}
+	for _, t := range types {
+		if t.TypeWid == typeWid {
+			return t.IsSign
+		}
+	}
+	return false
+}
+
+// leaveNewOutStatusValue 用户「是否离校」布尔 → 学校端 isLeaveOut 枚举值（1=是，2=否）。
+// 学校端仅接受 1/2，切勿用 0（0 非合法枚举，会被判为「否」或异常）。
+func leaveNewOutStatusValue(outStatus bool) int {
+	if outStatus {
+		return 1
+	}
+	return 2
+}
+
+// leaveNewValidateApplyForm 新套请假表单的服务端复核（标题/原因字数/证明材料）
+func leaveNewValidateApplyForm(d *cpd.LeaveNewFormDetail, req ExecuteLeaveApplyRequest, imageURLs []string) string {
+	if d == nil {
+		return ""
+	}
+	if d.IsRequiredLeaveReason && strings.TrimSpace(req.LeaveReason) == "" {
+		return "请填写请假原因"
+	}
+	if d.LeaveReasonWordsMini > 0 && len([]rune(req.LeaveReason)) < d.LeaveReasonWordsMini {
+		return fmt.Sprintf("请假原因不能少于 %d 字", d.LeaveReasonWordsMini)
+	}
+	// 证明材料（附件）：多图复核 —— 可见性开关 / 必填 / 张数下限 / 学校上限（产品上限 4）
+	if len(imageURLs) > 0 {
+		if !d.IsVisibledEvidenceFile {
+			return "该请假类型不支持上传附件"
+		}
+		if maxN := cpd.LeaveMaxAttachCount(d.EvidenceFileCountMax); len(imageURLs) > maxN {
+			return fmt.Sprintf("附件最多 %d 张", maxN)
+		}
+	}
+	if d.IsRequiredEvidence {
+		if len(imageURLs) == 0 {
+			return "请上传证明材料"
+		}
+		if d.EvidenceFileCountMini > 0 && len(imageURLs) < d.EvidenceFileCountMini {
+			return fmt.Sprintf("证明材料至少 %d 张", d.EvidenceFileCountMini)
+		}
+	}
+	return ""
+}
+
+// ---------- 新套销假执行 ----------
+
+// leaveNewExecuteReport 新套销假执行（供 handler SSE 调用）。
+// 返回 (是否成功, 用户可见错误信息, 需要重新登录)
+func leaveNewExecuteReport(user *model.SysUser, cookieMap map[string]string, host string,
+	leaveID, address, longitude, latitude, imageURL, approverWid string) (bool, string, bool) {
+
+	// 1. 详情 + 状态复核（是否处于可销假状态）
+	detail, err := cpd.FetchLeaveNewDetail(cookieMap, host, leaveID)
+	if err != nil {
+		if isCookieExpired(err) {
+			if refreshErr := refreshCpdailyCookie(user); refreshErr == nil {
+				cookieMap = cpd.ParseCookieJSON(user.Cookie)
+				detail, err = cpd.FetchLeaveNewDetail(cookieMap, host, leaveID)
+			} else if errors.Is(refreshErr, ErrPasswordChanged) {
+				return false, "登录凭证已过期，请重新登录", true
+			}
+		}
+		if err != nil {
+			return false, "获取请假详情失败: " + err.Error(), false
+		}
+	}
+	if !detail.CanReport {
+		return false, fmt.Sprintf("当前请假单不可销假（状态：%s）", detail.StatusText), false
+	}
+
+	// 2. 确认人（reportMode=2 老师审批销假时需要）
+	var approver *cpd.LeaveNewApprover
+	if detail.ReportMode == "2" && approverWid != "" {
+		list, err := cpd.FetchLeaveNewReportApprovers(cookieMap, host, leaveID)
+		if err == nil {
+			for i := range list {
+				if list[i].UserWid == approverWid {
+					approver = &list[i]
+					break
+				}
+			}
+		}
+	}
+
+	// 3. 构造并提交
+	form := cpd.BuildLeaveNewReportForm(cpd.LeaveNewReportParams{
+		LeaveID:   leaveID,
+		Address:   address,
+		Longitude: longitude,
+		Latitude:  latitude,
+		ImageURL:  imageURL,
+		Approver:  approver,
+		UserID:    user.StudentID,
+		DeviceID:  user.MobileCode,
+		Model:     "cpdaily",
+	})
+	err = cpd.SubmitLeaveNewReport(cookieMap, host, form)
+	if err != nil && isCookieExpired(err) {
+		if refreshErr := refreshCpdailyCookie(user); refreshErr == nil {
+			cookieMap = cpd.ParseCookieJSON(user.Cookie)
+			err = cpd.SubmitLeaveNewReport(cookieMap, host, form)
+		} else if errors.Is(refreshErr, ErrPasswordChanged) {
+			return false, "登录凭证已过期，请重新登录", true
+		}
+	}
+	if err != nil {
+		return false, "销假失败: " + err.Error(), false
+	}
+	return true, "", false
+}
+
+// ---------- 新套请假执行 ----------
+
+// leaveNewExecuteApply 新套请假执行（供 handler SSE 调用）。
+// 返回 (是否成功, 用户可见错误信息, 需要重新登录, 需要选择审批人)
+func leaveNewExecuteApply(user *model.SysUser, cookieMap map[string]string, host string, req ExecuteLeaveApplyRequest, imageURLs []string) (bool, string, bool, bool) {
+	// 1. 类型详情复核
+	detail, err := cpd.FetchLeaveNewTypeDetail(cookieMap, host, req.LeaveType)
+	if err != nil {
+		if isCookieExpired(err) {
+			if refreshErr := refreshCpdailyCookie(user); refreshErr == nil {
+				cookieMap = cpd.ParseCookieJSON(user.Cookie)
+				detail, err = cpd.FetchLeaveNewTypeDetail(cookieMap, host, req.LeaveType)
+			} else if errors.Is(refreshErr, ErrPasswordChanged) {
+				return false, "登录凭证已过期，请重新登录", true, false
+			}
+		}
+		if err != nil {
+			return false, "获取请假类型配置失败: " + err.Error(), false, false
+		}
+	}
+	if msg := leaveNewValidateApplyForm(detail, req, imageURLs); msg != "" {
+		return false, msg, false, false
+	}
+	// 手写承诺书：isSign=1 的类型必须携带签名图。
+	// isSign 只出现在 queryLeaveType（详情接口不返回），故单独取一次类型列表匹配。
+	if leaveNewTypeIsSign(cookieMap, host, req.LeaveType) && strings.TrimSpace(req.SignatureURL) == "" {
+		return false, "请先手写承诺书签名", false, false
+	}
+
+	// 2. 审批流：取 flowData + 匹配完整审批人
+	approver, flowData, candidates, err := leaveNewResolveApproverAndFlow(cookieMap, host, req.LeaveType, req.StartTime, req.EndTime, req.ApproverWid)
+	if err != nil {
+		if isCookieExpired(err) {
+			if refreshErr := refreshCpdailyCookie(user); refreshErr == nil {
+				cookieMap = cpd.ParseCookieJSON(user.Cookie)
+				approver, flowData, candidates, err = leaveNewResolveApproverAndFlow(cookieMap, host, req.LeaveType, req.StartTime, req.EndTime, req.ApproverWid)
+			} else if errors.Is(refreshErr, ErrPasswordChanged) {
+				return false, "登录凭证已过期，请重新登录", true, false
+			}
+		}
+		if err != nil {
+			return false, "获取请假审批人失败: " + err.Error(), false, false
+		}
+	}
+	if req.ApproverWid == "" && len(candidates) > 0 {
+		return false, "该请假类型需要选择审批人", false, true
+	}
+
+	// 3. 抄送人解析（非必填）
+	ccWids := make([]string, 0, len(req.CcUsers))
+	for _, cc := range req.CcUsers {
+		ccWids = append(ccWids, cc.UserWid)
+	}
+	ccUsers := leaveNewResolveCcUsers(cookieMap, host, ccWids)
+
+	// 4. 离校语义：学校端 isLeaveOut 为枚举 1=是 / 2=否，以用户选择为准。
+	// 注意：类型配置 extendInfoBean.isLeaveOut（0=无默认/1=默认是/2=默认否）仅是表单初始默认值，
+	// 不表示"强制"；此前把它当作"强制离校/强制不离校"，导致默认值为 0 的类型会把用户选择的
+	// "是"覆盖成 0，学校端因 0 非合法枚举而显示为"否"。
+	isLeaveOut := leaveNewOutStatusValue(req.OutStatus)
+
+	form := cpd.BuildLeaveNewApplyForm(cpd.LeaveNewApplyParams{
+		TypeWid:         req.LeaveType,
+		BeginTime:       trimSeconds(req.StartTime),
+		EndTime:         trimSeconds(req.EndTime),
+		LeaveReason:     req.LeaveReason,
+		ImageURLs:       imageURLs,
+		SignatureURL:    req.SignatureURL,
+		LocationAddr:    req.LocationAddr,
+		Longitude:       req.Longitude,
+		Latitude:        req.Latitude,
+		IsLeaveOut:      isLeaveOut,
+		Destination:     req.Address,
+		Detail:          req.DetailAddress,
+		EmergencyName:   req.UrgencyMobile,
+		EmergencyMobile: req.UrgencyMobile,
+		Approver:        approver,
+		CcUsers:         ccUsers,
+		FlowData:        flowData,
+		UserID:          user.StudentID,
+		DeviceID:        user.MobileCode,
+		Model:           "cpdaily",
+	})
+	err = cpd.SubmitLeaveNewApply(cookieMap, host, form)
+	if err != nil && isCookieExpired(err) {
+		if refreshErr := refreshCpdailyCookie(user); refreshErr == nil {
+			cookieMap = cpd.ParseCookieJSON(user.Cookie)
+			err = cpd.SubmitLeaveNewApply(cookieMap, host, form)
+		} else if errors.Is(refreshErr, ErrPasswordChanged) {
+			return false, "登录凭证已过期，请重新登录", true, false
+		}
+	}
+	if err != nil {
+		return false, "请假申请失败: " + err.Error(), false, false
+	}
+	return true, "", false, false
+}
+
+// trimSeconds "yyyy-MM-dd HH:mm:ss" → "yyyy-MM-dd HH:mm"（新套时间格式）
+func trimSeconds(t string) string {
+	t = strings.TrimSpace(t)
+	if len(t) == 19 && t[16] == ':' && t[13] == ':' {
+		return t[:16]
+	}
+	return t
+}

backed/internal/handler/leave_new_exec_test.go

@@ -0,0 +1,14 @@
+package handler
+
+import "testing"
+
+// TestLeaveNewOutStatusValue 用户「是否离校」布尔 → 学校端 isLeaveOut 枚举（1=是 / 2=否）。
+// 关键回归：选「是」必须得到 1（此前被类型默认值覆盖成 0，学校端显示为「否」）。
+func TestLeaveNewOutStatusValue(t *testing.T) {
+	if got := leaveNewOutStatusValue(true); got != 1 {
+		t.Errorf("选择离校应得到 1，got %d", got)
+	}
+	if got := leaveNewOutStatusValue(false); got != 2 {
+		t.Errorf("选择不离校应得到 2（不可为 0），got %d", got)
+	}
+}

backed/internal/handler/leave_new_handler.go

@@ -0,0 +1,228 @@
+package handler
+
+import (
+	"errors"
+	"fmt"
+	"log/slog"
+
+	"cpdaily-new/internal/database"
+	"cpdaily-new/internal/model"
+	cpd "cpdaily-new/internal/service/cpdaily"
+	"cpdaily-new/internal/utils"
+
+	"github.com/gofiber/fiber/v2"
+)
+
+// ---------- 新套（wec-counselor-leave-new-apps）handler 适配 ----------
+//
+// 设计：新套数据在 handler 层翻译为现有前端契约（LeaveType/LeaveItem/LeaveApprover），
+// 前端无需感知新旧差异；老套逻辑保持原样，仅按 flavor 分流。
+
+// refreshAfterCookieExpired 通用「cookie 过期→刷新→重试一次」包装
+func refreshAfterCookieExpired(user *model.SysUser, err error, retry func() error) error {
+	if err == nil || !isCookieExpired(err) {
+		return err
+	}
+	slog.Info("cookie过期，尝试刷新", "userId", user.ID)
+	if refreshErr := refreshCpdailyCookie(user); refreshErr != nil {
+		if errors.Is(refreshErr, ErrPasswordChanged) {
+			return ErrPasswordChanged
+		}
+		return err
+	}
+	return retry()
+}
+
+// ---------- 销假：待销假列表（新套） ----------
+
+// fetchLeaveNewPendingList 新套待销假列表：拉全部记录 → 过滤可销假 → 补位置与开关
+func fetchLeaveNewPendingList(cookieMap map[string]string, host string, user *model.SysUser) ([]cpd.LeaveItem, error) {
+	records, err := cpd.FetchLeaveNewList(cookieMap, host, 1, 50, "1")
+	if err != nil {
+		return nil, err
+	}
+
+	// 规定销假位置全局一份（reportList 与记录无关）
+	places := []cpd.LeaveReportPlace{}
+	if p, err := cpd.FetchLeaveNewReportPlaces(cookieMap, host); err == nil {
+		places = leaveNewPlacesToLeaveReportPlaces(p)
+	} else {
+		slog.Warn("获取新套规定销假位置失败", "userId", user.ID, "error", err)
+	}
+
+	list := make([]cpd.LeaveItem, 0, len(records))
+	for _, r := range records {
+		// 列表接口不返回 reportMode/reportUploadMode/isLeaveOut，需补拉详情判断；
+		// 仅对可能可销假的状态（3 休假中 / 4 销假逾期）补详情，减少请求
+		if r.Status != "3" && r.Status != "4" {
+			continue
+		}
+		detail, derr := cpd.FetchLeaveNewDetail(cookieMap, host, r.LeaveID)
+		if derr != nil {
+			slog.Warn("获取新套请假详情失败，跳过该记录", "leaveId", r.LeaveID, "error", derr)
+			continue
+		}
+		if !detail.CanReport {
+			continue
+		}
+		// 销假需要确认人：reportMode=2（老师审批销假）
+		needApprover := detail.ReportMode == "2"
+		enableAttach := detail.ReportUploadMode == "2" || (detail.ReportUploadMode == "1" && detail.IsLeaveOut == "1")
+		list = append(list, cpd.LeaveItem{
+			ID:              detail.LeaveID,
+			LeaveType:       leaveNewTypeNameOfTopic(detail.TopicName, detail.TypeWid),
+			Reason:          detail.LeaveReason,
+			CreateTime:      r.ApplyTime,
+			ActEndTime:      detail.EndTime,
+			Status:          detail.Status,
+			StatusText:      detail.StatusText,
+			ReportPlaces:    places,
+			ReportApplyFlow: needApprover,
+			EnableAttach:    enableAttach,
+		})
+	}
+	return list, nil
+}
+
+// leaveNewTypeNameOfTopic 从 topicName（如「李闯闯的事假」）提取类型名兜底
+func leaveNewTypeNameOfTopic(topicName, typeIcon string) string {
+	if topicName == "" {
+		return "请假"
+	}
+	return topicName
+}
+
+// ---------- 请假类型（新套） ----------
+
+// fetchLeaveNewTypesWithDetail 新套类型列表，逐类型补详情（权威开关）
+func fetchLeaveNewTypesWithDetail(cookieMap map[string]string, host string, user *model.SysUser) ([]cpd.LeaveType, error) {
+	types, err := cpd.FetchLeaveNewTypes(cookieMap, host)
+	if err != nil {
+		return nil, err
+	}
+	details := make(map[int]*cpd.LeaveNewFormDetail, len(types))
+	for _, t := range types {
+		d, err := cpd.FetchLeaveNewTypeDetail(cookieMap, host, t.TypeWid)
+		if err != nil {
+			slog.Warn("获取新套类型详情失败，使用基础信息", "typeWid", t.TypeWid, "error", err)
+			continue
+		}
+		details[t.TypeWid] = d
+	}
+	return leaveNewToLeaveTypes(types, func(wid int) *cpd.LeaveNewFormDetail {
+		return details[wid]
+	}), nil
+}
+
+// ---------- 销假审批人（新套） ----------
+
+// fetchLeaveNewReportApprovers 新套销假确认人（getReportApprovers by leaveId）
+func fetchLeaveNewReportApprovers(cookieMap map[string]string, host, leaveID string, user *model.SysUser) ([]cpd.LeaveApprover, error) {
+	list, err := cpd.FetchLeaveNewReportApprovers(cookieMap, host, leaveID)
+	if err != nil {
+		return nil, err
+	}
+	return leaveNewApproversToLeaveApprovers(list), nil
+}
+
+// ---------- 请假审批人（新套） ----------
+
+// leaveNewApplyApproversResult 新套请假审批人结果（含 flowData 透传）
+type leaveNewApplyApproversResult struct {
+	Approvers []cpd.LeaveApprover  `json:"approvers"`
+	NeedApproval bool              `json:"needApproval"`
+	InFlowScope  bool              `json:"inFlowScope"`
+	FlowData     map[string]interface{} `json:"flowData"`
+}
+
+// fetchLeaveNewApplyApprovers 新套请假审批人 + 审批流数据
+func fetchLeaveNewApplyApprovers(cookieMap map[string]string, host string, typeWid int, startTime, endTime string) (*leaveNewApplyApproversResult, error) {
+	flow, err := cpd.FetchLeaveNewApproveFlow(cookieMap, host, typeWid, startTime, endTime, "")
+	if err != nil {
+		return nil, err
+	}
+	return &leaveNewApplyApproversResult{
+		Approvers:    leaveNewApproversToLeaveApprovers(flow.ApproveUsers),
+		NeedApproval: flow.IsNeedApproval,
+		InFlowScope:  flow.IsInFlowScope,
+		FlowData:     flow.FlowData,
+	}, nil
+}
+
+// GetLeaveNewCcSearch 抄送人搜索（新套；searchKey 为空返回全部）
+func GetLeaveNewCcSearch(c *fiber.Ctx) error {
+	user, err := loadLeaveUser(c)
+	if err != nil {
+		return utils.FailAuth(c, err.Error())
+	}
+
+	var req struct {
+		SearchKey string `json:"searchKey"`
+	}
+	if err := c.BodyParser(&req); err != nil {
+		return utils.FailParam(c, "请求参数错误")
+	}
+
+	cookieMap := cpd.ParseCookieJSON(user.Cookie)
+	host := getSchoolHost(user.SchoolID)
+
+	list, err := cpd.FetchLeaveNewCcSearch(cookieMap, host, req.SearchKey)
+	if err != nil {
+		_ = refreshAfterCookieExpired(user, err, func() error {
+			cookieMap = cpd.ParseCookieJSON(user.Cookie)
+			var e error
+			list, e = cpd.FetchLeaveNewCcSearch(cookieMap, host, req.SearchKey)
+			return e
+		})
+	}
+	if err != nil {
+		slog.Error("获取抄送人失败", "userId", user.ID, "error", err)
+		if errors.Is(err, ErrPasswordChanged) {
+			return utils.Fail(c, 401, "登录凭证已过期，请重新登录")
+		}
+		return utils.Fail(c, 503, "获取抄送人失败: "+err.Error())
+	}
+
+	return utils.Success(c, leaveNewApproversToLeaveApprovers(list))
+}
+
+// buildLeaveNewApproverByWid 从审批人列表找 userWid 对应完整对象（提交表单用）
+func buildLeaveNewApproverByWid(list []cpd.LeaveNewApprover, userWid string) *cpd.LeaveNewApprover {
+	if userWid == "" {
+		return nil
+	}
+	for i := range list {
+		if list[i].UserWid == userWid {
+			return &list[i]
+		}
+	}
+	return nil
+}
+
+// leaveNewCheckCookieFresh 简单的 cookie 新鲜度检查（新套首次调用失败即触发刷新重试）
+func leaveNewRetryOnExpired(user *model.SysUser, err error, retry func() error) error {
+	return refreshAfterCookieExpired(user, err, retry)
+}
+
+// leaveNewFriendlyErr 新套错误统一包装（带 401 语义）
+func leaveNewFriendlyErr(c *fiber.Ctx, action string, err error) error {
+	if errors.Is(err, ErrPasswordChanged) {
+		return utils.Fail(c, 401, "登录凭证已过期，请重新登录")
+	}
+	return utils.Fail(c, 503, fmt.Sprintf("%s: %v", action, err))
+}
+
+// ---------- 数据库日志辅助 ----------
+
+// saveLeaveLogEntry 请假/销假日志落库（两套共用）
+func saveLeaveLogEntry(userID uint, leaveID, title, schoolName, action string, isSuccess bool, errMsg string) {
+	database.DB.Create(&model.CpLeaveLog{
+		UserID:       userID,
+		LeaveID:      leaveID,
+		Title:        title,
+		SchoolName:   schoolName,
+		Action:       action,
+		IsSuccess:    isSuccess,
+		ErrorMessage: errMsg,
+	})
+}

backed/internal/handler/settings.go

@@ -6,6 +6,7 @@ import (
 	"cpdaily-new/internal/service"
 	"cpdaily-new/internal/utils"
 	"log/slog"
+	"strconv"
 
 	"github.com/gofiber/fiber/v2"
 )
@@ -31,15 +32,21 @@ func GetSettings(c *fiber.Ctx) error {
 	if _, ok := settings["invitee_reward_per_invite"]; !ok {
 		settings["invitee_reward_per_invite"] = "0.50"
 	}
-	if _, ok := settings["register_reward"]; !ok {
-		settings["register_reward"] = "1.00"
-	}
 	if _, ok := settings["vip_price_week"]; !ok {
 		settings["vip_price_week"] = "30.00"
 	}
 	if _, ok := settings["vip_price_month"]; !ok {
 		settings["vip_price_month"] = "100.00"
 	}
+	if _, ok := settings[settingDeductCheckin]; !ok {
+		settings[settingDeductCheckin] = "1.00"
+	}
+	if _, ok := settings[settingDeductLeave]; !ok {
+		settings[settingDeductLeave] = "1.00"
+	}
+	if _, ok := settings[settingDeductReport]; !ok {
+		settings[settingDeductReport] = "1.00"
+	}
 
 	return utils.Success(c, settings)
 }
@@ -65,9 +72,12 @@ func UpdateSetting(c *fiber.Ctx) error {
 		"base_deduction_per_run":    true,
 		"inviter_reward_per_invite": true,
 		"invitee_reward_per_invite": true,
-		"register_reward":           true,
 		"vip_price_week":            true,
 		"vip_price_month":           true,
+		// 扣款额度（打卡/请假/销假，每次成功执行扣减的可签到次数，允许小数与 0）
+		settingDeductCheckin: true,
+		settingDeductLeave:   true,
+		settingDeductReport:  true,
 		// 邮件通知（SMTP）
 		"smtp_host":      true,
 		"smtp_port":      true,
@@ -82,6 +92,14 @@ func UpdateSetting(c *fiber.Ctx) error {
 		return utils.Fail(c, 400, "不支持的设置项: "+req.Key)
 	}
 
+	// 扣款额度：必须为非负数字（允许 0 = 不扣费）
+	if req.Key == settingDeductCheckin || req.Key == settingDeductLeave || req.Key == settingDeductReport {
+		v, err := strconv.ParseFloat(req.Value, 64)
+		if err != nil || v < 0 {
+			return utils.FailParam(c, "扣款额度必须为不小于 0 的数字")
+		}
+	}
+
 	var cfg model.SystemConfig
 	result := database.DB.Where("`key` = ?", req.Key).First(&cfg)
 	if result.Error != nil {

backed/internal/handler/sms_login.go

@@ -0,0 +1,223 @@
+package handler
+
+import (
+	"cpdaily-new/internal/database"
+	"cpdaily-new/internal/model"
+	"cpdaily-new/internal/service"
+	cpd "cpdaily-new/internal/service/cpdaily"
+	"cpdaily-new/internal/utils"
+	"errors"
+	"log/slog"
+	"strings"
+	"time"
+
+	"github.com/gofiber/fiber/v2"
+	"gorm.io/gorm"
+)
+
+// ========== 手机号验证码登录（无需选择学校） ==========
+
+// SmsSendRequest 发送短信验证码请求（需独立的图片验证码）
+type SmsSendRequest struct {
+	Phone       string `json:"phone"`
+	CaptchaID   string `json:"captchaId"`
+	CaptchaCode string `json:"captchaCode"`
+}
+
+// SmsSend 发送手机短信验证码（对接今日校园）
+func SmsSend(c *fiber.Ctx) error {
+	var req SmsSendRequest
+	if err := c.BodyParser(&req); err != nil {
+		return utils.FailParam(c, "请求参数错误")
+	}
+	phone := strings.TrimSpace(req.Phone)
+	if phone == "" {
+		return utils.FailParam(c, "请输入手机号")
+	}
+	// 独立的图片验证码校验（防脚本刷短信）
+	if req.CaptchaID == "" || req.CaptchaCode == "" {
+		return utils.FailParam(c, "请输入图片验证码")
+	}
+	if !service.VerifyCaptcha(req.CaptchaID, req.CaptchaCode) {
+		return utils.FailParam(c, "验证码错误或已过期")
+	}
+
+	// 按 IP 限流，避免短信轰炸（复用验证码令牌桶）；IP 取值与登录 IP 一致
+	ip := utils.ClientIP(c)
+	if ok, wait := service.AllowCaptchaToken("sms:" + ip); !ok {
+		return utils.Fail(c, 429, "验证码发送过于频繁，请 "+service.FormatWait(wait)+"后再试")
+	}
+
+	result, err := cpd.SendSmsCode(c.Context(), phone)
+	if err != nil {
+		slog.Warn("短信验证码发送失败", "phone", maskPhone(phone), "error", err)
+		return utils.Fail(c, 400, err.Error())
+	}
+
+	return utils.Success(c, fiber.Map{
+		"countdown": result.Countdown,
+		"tipMsg":    result.TipMsg,
+	})
+}
+
+// SmsLoginRequest 手机号登录请求（需独立的图片验证码）
+type SmsLoginRequest struct {
+	Phone       string `json:"phone"`
+	Code        string `json:"code"`
+	CaptchaID   string `json:"captchaId"`
+	CaptchaCode string `json:"captchaCode"`
+}
+
+// SmsLogin 手机号 + 短信验证码登录。
+// 登录响应自带 tenantId（学校）与 openId（学工号），故无需用户选择学校。
+// 用户匹配：优先「同校 + 同学工号」复用已有账号，保证与学工号登录指向同一用户。
+func SmsLogin(c *fiber.Ctx) error {
+	var req SmsLoginRequest
+	if err := c.BodyParser(&req); err != nil {
+		return utils.FailParam(c, "请求参数错误")
+	}
+	phone := strings.TrimSpace(req.Phone)
+	code := strings.TrimSpace(req.Code)
+	if phone == "" || code == "" {
+		return utils.FailParam(c, "请输入手机号和验证码")
+	}
+	// 独立的图片验证码校验（登录使用与发码不同的验证码）
+	if req.CaptchaID == "" || req.CaptchaCode == "" {
+		return utils.FailParam(c, "请输入图片验证码")
+	}
+	if !service.VerifyCaptcha(req.CaptchaID, req.CaptchaCode) {
+		return utils.FailParam(c, "验证码错误或已过期")
+	}
+
+	loginData, err := cpd.MobileLoginByCode(c.Context(), phone, code)
+	if err != nil {
+		slog.Warn("手机号登录失败", "phone", maskPhone(phone), "error", err)
+		return utils.Fail(c, 401, "登录失败: "+err.Error())
+	}
+	if loginData.OpenID == "" {
+		return utils.FailServer(c, "登录失败：未获取到学工号")
+	}
+
+	// tenantId 即学校 ID
+	school, err := cpd.GetSchoolDetail(loginData.TenantID)
+	if err != nil {
+		slog.Error("获取学校详情失败", "tenantId", loginData.TenantID, "error", err)
+		return utils.FailServer(c, "获取学校信息失败")
+	}
+
+	// 换取 CAS cookie（含 MOD_AUTH_CAS）
+	deviceID := cpd.CreateDeviceID()
+	cookies, err := cpd.ExchangeCasCookie(c.Context(), school, loginData, deviceID)
+	if err != nil {
+		slog.Warn("换取 CAS cookie 失败", "tenantId", loginData.TenantID, "error", err)
+		return utils.Fail(c, 401, "登录失败: "+err.Error())
+	}
+
+	// 校验是否拿到 MOD_ 认证 cookie
+	hasMOD := false
+	for _, ck := range cookies {
+		if strings.HasPrefix(ck.Name, "MOD_") {
+			hasMOD = true
+			break
+		}
+	}
+	if !hasMOD {
+		return utils.Fail(c, 401, "登录失败，未获取到有效的认证信息")
+	}
+
+	cookieStr := cpd.SerializeCookies(cookies)
+
+	// 用户匹配：同校 + 同学工号 复用已有账号，否则走通用注册流程新建
+	user, isNew, err := findUserByStudentIDOrRegister(school, loginData.OpenID, phone, cookieStr)
+	if err != nil {
+		slog.Error("手机号登录用户处理失败", "error", err)
+		return utils.FailServer(c, "用户处理失败")
+	}
+
+	if user.Status == "disabled" {
+		reason := user.DisabledReason
+		if reason == "" {
+			reason = "您的账号已被管理员禁用，如有疑问请联系客服"
+		}
+		return c.Status(403).JSON(utils.Response{Code: 403, Message: reason})
+	}
+
+	// 更新 cookie / 登录时间 / 学工号回填
+	now := time.Now()
+	updates := map[string]interface{}{
+		"cookie":        cookieStr,
+		"last_login_at": now,
+		"last_login_ip": utils.ClientIP(c),
+	}
+	// 手机号登录用户也保存其学工号，便于之后用学工号登录时能匹配到同一账号
+	if user.StudentID != loginData.OpenID {
+		updates["student_id"] = loginData.OpenID
+	}
+	if user.MobilePhone == "" {
+		updates["mobile_phone"] = phone
+	}
+	database.DB.Model(user).Updates(updates)
+	user.StudentID = loginData.OpenID
+
+	// 同步 cpdaily 主页信息（头像/姓名等）
+	if school.WecloudUrl != "" {
+		go syncUserProfile(user, cookieStr, school.WecloudUrl)
+	}
+
+	tokenPair, err := service.GenerateTokens(user.ID, user.Username, user.SchoolID)
+	if err != nil {
+		return utils.FailServer(c, "生成token失败")
+	}
+
+	slog.Info("手机号登录成功", "userId", user.ID, "tenantId", loginData.TenantID,
+		"studentId", loginData.OpenID, "isNew", isNew)
+
+	return utils.Success(c, fiber.Map{
+		"user":       user,
+		"token":      tokenPair,
+		"firstLogin": isNew,
+	})
+}
+
+// findUserByStudentIDOrRegister 按「学校 + 学工号」查找用户并复用；
+// 未命中则调用通用注册流程（findOrCreateUser，复用邀请/注册奖励逻辑），
+// 用户名同样由「学校短码 + 学工号」构成，保证与学工号登录是同一账号。
+func findUserByStudentIDOrRegister(school *cpd.SchoolDetailInfo, studentID, phone, cookie string) (*model.SysUser, bool, error) {
+	// 1. 同校 + 同学工号
+	var user model.SysUser
+	err := database.DB.Where("school_id = ? AND student_id = ?", school.ID, studentID).First(&user).Error
+	if err == nil {
+		return &user, false, nil
+	}
+	if !errors.Is(err, gorm.ErrRecordNotFound) {
+		return nil, false, err
+	}
+
+	// 2. 按 username（学校短码 + 学工号）匹配历史数据，命中则回填 school_id/student_id
+	username := buildUsername(school, studentID)
+	err = database.DB.Where("username = ?", username).First(&user).Error
+	if err == nil {
+		database.DB.Model(&user).Updates(map[string]interface{}{
+			"school_id":  school.ID,
+			"student_id": studentID,
+		})
+		return &user, false, nil
+	}
+	if !errors.Is(err, gorm.ErrRecordNotFound) {
+		return nil, false, err
+	}
+
+	// 3. 未命中：走通用注册流程（仅创建账号，不发放邀请/注册奖励）。
+	// 密码用随机串（SMS 登录用户无密码凭证，仅占位满足非空约束）；
+	// 注意不要用设备码样式的值，避免与 MobileCode 绑定语义混淆——
+	// 设备码只能由用户在设备页主动绑定，登录流程不做任何自动绑定。
+	return findOrCreateUser(username, generateRandomCode(32), school.ID, school.Name, studentID, cookie)
+}
+
+// maskPhone 手机号脱敏（日志用）
+func maskPhone(p string) string {
+	if len(p) <= 4 {
+		return "****"
+	}
+	return p[:3] + "****" + p[len(p)-4:]
+}

backed/internal/handler/softdelete_probe_test.go

@@ -0,0 +1,178 @@
+package handler
+
+// 事务级软删除探针：验证「用户删除日志 → 仅软删除」的四处语义。
+// 默认跳过；仅在显式设置 PROBE_DB=1 时连接真实数据库执行（需要 backed/config.toml）。
+// 全过程在单个事务内进行并最终回滚，不写入任何持久数据（AutoMigrate 除外，与 server 启动行为一致）。
+//
+//	go test ./internal/handler -run TestSoftDeleteProbe -v   # 需 PROBE_DB=1
+//
+// 覆盖点：
+//  1. 前台列表（GORM 默认作用域）不展示已删除记录
+//  2. 任务完成状态判定（Unscoped 查当天成功日志）不受删除影响
+//  3. 后台统计（已执行累计 / 今日状态 / 今日卡片）计入已删除记录
+//  4. 后台明细 UNION SQL（adminLogUnionSQL，与 handler 同一常量）含已删除记录并正确标注 deleted/source
+
+import (
+	"fmt"
+	"os"
+	"testing"
+	"time"
+
+	"cpdaily-new/internal/config"
+	"cpdaily-new/internal/database"
+	"cpdaily-new/internal/model"
+)
+
+func TestSoftDeleteProbe(t *testing.T) {
+	if os.Getenv("PROBE_DB") != "1" {
+		t.Skip("跳过：需要 PROBE_DB=1 且可连接数据库")
+	}
+	if err := config.Load("../../config.toml"); err != nil {
+		t.Fatalf("加载配置失败: %v", err)
+	}
+	database.Init()
+
+	tx := database.DB.Begin()
+	if tx.Error != nil {
+		t.Fatalf("开启事务失败: %v", tx.Error)
+	}
+	defer tx.Rollback() // 无论成败一律回滚，探针不留痕
+
+	// ---------- 构造数据（全部在事务内，ID 由自增分配） ----------
+	user := model.SysUser{
+		Username:   fmt.Sprintf("sdprobe_%d", time.Now().UnixNano()),
+		Password:   "probe",
+		SchoolID:   "probe",
+		StudentID:  "probe",
+		InviteCode: fmt.Sprintf("p%09d", time.Now().UnixNano()%1000000000), // 避免唯一索引冲突
+	}
+	if err := tx.Create(&user).Error; err != nil {
+		t.Fatalf("创建探针用户失败: %v", err)
+	}
+	uid := user.ID
+
+	taskLog := model.CpTaskLog{
+		CpTaskID: 1, UserID: uid, TaskType: "sign",
+		Title: "探针签到", RealTitle: "探针签到", IsSuccess: true,
+	}
+	leaveLog := model.CpLeaveLog{
+		UserID: uid, LeaveID: "probe_leave", Title: "探针请假",
+		SchoolName: "探针学校", Action: model.LeaveActionApply, IsSuccess: true,
+	}
+	if err := tx.Create(&taskLog).Error; err != nil {
+		t.Fatalf("创建任务日志失败: %v", err)
+	}
+	if err := tx.Create(&leaveLog).Error; err != nil {
+		t.Fatalf("创建请假日志失败: %v", err)
+	}
+
+	// 用户端「删除」= GORM 软删除（handler 中即 database.DB.Delete(&log)）
+	if err := tx.Delete(&taskLog).Error; err != nil {
+		t.Fatalf("软删除任务日志失败: %v", err)
+	}
+	if err := tx.Delete(&leaveLog).Error; err != nil {
+		t.Fatalf("软删除请假日志失败: %v", err)
+	}
+
+	// 回读确认 deleted_at 已置位（而非物理删除）
+	var rawCount int64
+	if err := tx.Unscoped().Model(&model.CpTaskLog{}).Where("id = ? AND deleted_at IS NOT NULL", taskLog.ID).Count(&rawCount).Error; err != nil || rawCount != 1 {
+		t.Fatalf("任务日志未软删除: count=%d err=%v", rawCount, err)
+	}
+	if err := tx.Unscoped().Model(&model.CpLeaveLog{}).Where("id = ? AND deleted_at IS NOT NULL", leaveLog.ID).Count(&rawCount).Error; err != nil || rawCount != 1 {
+		t.Fatalf("请假日志未软删除: count=%d err=%v", rawCount, err)
+	}
+
+	// ---------- 1. 前台列表不可见（GORM 默认作用域过滤 deleted_at） ----------
+	var frontTask []model.CpTaskLog
+	tx.Where("user_id = ?", uid).Order("created_at DESC").Limit(10).Find(&frontTask)
+	if len(frontTask) != 0 {
+		t.Errorf("[1] 前台任务日志应不可见已删除记录, got %d 条", len(frontTask))
+	}
+	var frontLeave []model.CpLeaveLog
+	tx.Where("user_id = ?", uid).Order("created_at DESC").Limit(10).Find(&frontLeave)
+	if len(frontLeave) != 0 {
+		t.Errorf("[1] 前台请假日志应不可见已删除记录, got %d 条", len(frontLeave))
+	}
+
+	// ---------- 2. 任务完成状态不受删除影响（task.go ListTasks 的跨天重置查询） ----------
+	now := time.Now()
+	startOfToday := time.Date(now.Year(), now.Month(), now.Day(), 0, 0, 0, 0, now.Location())
+	var todaySuccessIDs []uint
+	tx.Unscoped().Model(&model.CpTaskLog{}).
+		Where("user_id = ? AND is_success = 1 AND created_at >= ?", uid, startOfToday).
+		Distinct("cp_task_id").Pluck("cp_task_id", &todaySuccessIDs)
+	if len(todaySuccessIDs) != 1 || todaySuccessIDs[0] != 1 {
+		t.Errorf("[2] 删除当天成功日志后任务完成状态被误重置: IDs=%v", todaySuccessIDs)
+	}
+
+	// ---------- 3. 后台统计计入已删除 ----------
+	var taskSuccess, leaveSuccess int64
+	tx.Unscoped().Model(&model.CpTaskLog{}).Where("user_id = ? AND is_success = 1", uid).Count(&taskSuccess)
+	tx.Unscoped().Model(&model.CpLeaveLog{}).Where("user_id = ? AND is_success = 1", uid).Count(&leaveSuccess)
+	if taskSuccess != 1 || leaveSuccess != 1 {
+		t.Errorf("[3] 后台已执行累计应计入已删除: task=%d leave=%d", taskSuccess, leaveSuccess)
+	}
+	var todayTask, todayLeave int64
+	tx.Unscoped().Model(&model.CpTaskLog{}).Where("user_id = ? AND created_at >= ?", uid, startOfToday).Count(&todayTask)
+	tx.Unscoped().Model(&model.CpLeaveLog{}).Where("user_id = ? AND created_at >= ?", uid, startOfToday).Count(&todayLeave)
+	if todayTask != 1 || todayLeave != 1 {
+		t.Errorf("[3] 今日统计卡片应计入已删除: task=%d leave=%d", todayTask, todayLeave)
+	}
+
+	// ---------- 4. 后台明细 UNION（同一 adminLogUnionSQL 常量） ----------
+	dayStart := time.Date(now.Year(), now.Month(), now.Day(), 0, 0, 0, 0, now.Location())
+	dayEnd := dayStart.AddDate(0, 0, 1)
+	type combinedRow struct {
+		ID        uint
+		UserID    uint
+		TaskType  string
+		Deleted   bool
+		Source    int
+		IsSuccess bool
+	}
+	var rows []combinedRow
+	if err := tx.Raw(adminLogUnionSQL, dayStart, dayEnd, dayStart, dayEnd).Scan(&rows).Error; err != nil {
+		t.Fatalf("[4] UNION 查询失败: %v", err)
+	}
+	var mine []combinedRow
+	for _, r := range rows {
+		if r.UserID == uid {
+			mine = append(mine, r)
+		}
+	}
+	if len(mine) != 2 {
+		t.Fatalf("[4] UNION 应返回 2 条（任务+请假，均含已删除）, got %d", len(mine))
+	}
+	sourceSeen := map[int]bool{}
+	taskTypeSeen := map[string]bool{}
+	for _, r := range mine {
+		if !r.Deleted {
+			t.Errorf("[4] 已删除记录在明细中未标注 deleted: %+v", r)
+		}
+		sourceSeen[r.Source] = true
+		taskTypeSeen[r.TaskType] = true
+	}
+	if !sourceSeen[1] || !sourceSeen[2] {
+		t.Errorf("[4] source 标注缺失: %v", sourceSeen)
+	}
+	if !taskTypeSeen["sign"] || !taskTypeSeen["leave_apply"] {
+		t.Errorf("[4] task_type 映射缺失: %v", taskTypeSeen)
+	}
+
+	// 用户端状态筛选（success=1）走 UNION 包裹分支，确认占位符与包裹 SQL 兼容
+	var successRows []combinedRow
+	tx.Raw("SELECT * FROM ("+adminLogUnionSQL+") t WHERE t.is_success = 1", dayStart, dayEnd, dayStart, dayEnd).Scan(&successRows)
+	found := 0
+	for _, r := range successRows {
+		if r.UserID == uid {
+			found++
+		}
+	}
+	if found != 2 {
+		t.Errorf("[4] success 过滤分支应保留 2 条已删除成功记录, got %d", found)
+	}
+
+	t.Log("软删除探针全部通过：前台隐藏 / 状态不受影响 / 后台计入 / 明细标注")
+	// defer 回滚，探针不落库
+}

backed/internal/handler/task.go

@@ -36,7 +36,20 @@ func GetTaskTitles(c *fiber.Ctx) error {
 	cookieMap := cpd.ParseCookieJSON(user.Cookie)
 	host := getSchoolHost(user.SchoolID)
 
-	tasks := cpd.FetchAllRecentTasks(cookieMap, host)
+	// 登录态失效时自动续期并重试一次；仍失败则明确提示重新登录
+	var tasks []cpd.TodayTaskInfo
+	_, err := withCookieRefresh(&user, cookieMap, host, func(cm map[string]string) error {
+		var fetchErr error
+		tasks, fetchErr = cpd.FetchAllRecentTasks(cm, host)
+		return fetchErr
+	})
+	if err != nil {
+		if isCpdailyAuthError(err) {
+			return utils.Fail(c, 401, "登录凭证已过期，请重新登录")
+		}
+		return utils.Fail(c, 503, "获取打卡任务失败: "+err.Error())
+	}
+
 	return utils.Success(c, tasks)
 }
 
@@ -148,6 +161,15 @@ func GetTaskForm(c *fiber.Ctx) error {
 		return utils.FailServer(c, "查询失败")
 	}
 
+	// 返校登记无形表单：直接返回空表单，前端保存空 formData 即可
+	if cpd.TaskType(task.TaskType) == cpd.TaskTypeReturnRegister {
+		return utils.Success(c, fiber.Map{
+			"formItems": []model.CpTaskFormItem{},
+			"realTitle": task.RealTitle,
+			"isPhoto":   false,
+		})
+	}
+
 	var user model.SysUser
 	if err := database.DB.First(&user, userID).Error; err != nil {
 		return utils.FailAuth(c, "用户不存在")
@@ -242,10 +264,20 @@ func SaveTaskForm(c *fiber.Ctx) error {
 	return utils.Success(c, nil)
 }
 
-// TaskWithMatch 任务列表附带匹配状态
-type TaskWithMatch struct {
-	model.CpTask
-	MatchStatus string `json:"matchStatus"` // matched_unsigned, matched_signed, no_match, check_failed
+// TaskListItem 任务列表的轻量响应项。
+// 关键：**不包含 formData**。formData 可能是 longtext（历史数据里存过 base64 图片，
+// 单条曾达 2.9MB），把它放进列表接口会让首页每次多传数 MB。
+// 列表渲染只需要下面这些字段；表单内容另走 /task/form-data/:id 获取。
+type TaskListItem struct {
+	ID            uint      `json:"id"`
+	TaskType      string    `json:"taskType"`
+	Title         string    `json:"title"`
+	RealTitle     string    `json:"realTitle"`
+	TaskStatus    string    `json:"taskStatus"`
+	ErrorMessage  string    `json:"errorMessage"`
+	CreatedAt     time.Time `json:"createdAt"`
+	MatchStatus   string    `json:"matchStatus"`
+	MissingFields []string  `json:"missingFields"` // 必填但为空的字段标题（服务端预计算，前端无需解析 formData）
 }
 
 // globMatch 简单通配符匹配（仅支持 *）
@@ -295,7 +327,9 @@ func ListTasks(c *fiber.Ctx) error {
 	now := time.Now()
 	startOfToday := time.Date(now.Year(), now.Month(), now.Day(), 0, 0, 0, 0, now.Location())
 	var todaySuccessIDs []uint
-	database.DB.Model(&model.CpTaskLog{}).
+	// Unscoped：用户在客户端"删除"日志只是软删除，不代表当天没执行过；
+	// 若漏加会因当天成功日志被删而把任务重置回 pending，导致重复打卡
+	database.DB.Unscoped().Model(&model.CpTaskLog{}).
 		Where("user_id = ? AND is_success = 1 AND created_at >= ?", userID, startOfToday).
 		Distinct("cp_task_id").
 		Pluck("cp_task_id", &todaySuccessIDs)
@@ -315,6 +349,8 @@ func ListTasks(c *fiber.Ctx) error {
 	// 尝试获取今日任务进行匹配
 	var user model.SysUser
 	var todayTasks []cpd.TodayTaskInfo
+	// 返校登记待办（taskWid:stuWid 集合），用于匹配 return_register 任务
+	var returnRegisterPending map[string]bool
 	fetchOk := false
 
 	if err := database.DB.First(&user, userID).Error; err == nil && user.Cookie != "" {
@@ -345,12 +381,46 @@ func ListTasks(c *fiber.Ctx) error {
 				fetchOk = true
 			}
 		}
+
+		// 返校登记待办（供 return_register 任务匹配；失败不影响签到类）
+		returnRegisterPending = map[string]bool{}
+		if rr, rerr := cpd.FetchReturnRegisterTasks(cookieMap, host); rerr == nil {
+			for _, t := range rr {
+				returnRegisterPending[t.SignWid] = true
+			}
+		} else {
+			slog.Warn("获取返校登记待办失败", "userId", userID, "error", rerr)
+		}
 	}
 
-	// 构造返回结果
-	result := make([]TaskWithMatch, len(tasks))
+	// 构造返回结果（轻量 DTO：不含 formData）
+	result := make([]TaskListItem, len(tasks))
 	for i, task := range tasks {
-		item := TaskWithMatch{CpTask: task, MatchStatus: "check_failed"}
+		item := TaskListItem{
+			ID:            task.ID,
+			TaskType:      task.TaskType,
+			Title:         task.Title,
+			RealTitle:     task.RealTitle,
+			TaskStatus:    task.TaskStatus,
+			ErrorMessage:  task.ErrorMessage,
+			CreatedAt:     task.CreatedAt,
+			MatchStatus:   "check_failed",
+			MissingFields: missingRequiredFormFields(task.FormData),
+		}
+		// 返校登记：按待办集合判断（在待办中=未登记；不在=已登记/已过期）
+		if task.TaskType == string(cpd.TaskTypeReturnRegister) {
+			if returnRegisterPending != nil {
+				item.MatchStatus = "no_match"
+				if returnRegisterPending[task.SignWid] {
+					item.MatchStatus = "matched_unsigned"
+				} else {
+					item.MatchStatus = "matched_signed"
+				}
+			}
+			item.MissingFields = nil // 返校登记无形表单
+			result[i] = item
+			continue
+		}
 		if fetchOk {
 			item.MatchStatus = "no_match"
 			// 用 title 做 glob 匹配（支持 * 通配符）
@@ -374,6 +444,26 @@ func ListTasks(c *fiber.Ctx) error {
 	return utils.Success(c, result)
 }
 
+// GetTaskSavedForm 返回该任务**已保存**的表单内容（formData），供编辑弹窗预填。
+// 与 GetTaskForm 的区别：后者是从今日校园重新拉取表单模板（会丢失用户已填值）。
+// 单独成接口，是为了让列表接口（/task/list）不必携带大字段 formData。
+func GetTaskSavedForm(c *fiber.Ctx) error {
+	userID := c.Locals("userId").(uint)
+	id := c.Params("id")
+
+	var task model.CpTask
+	if err := database.DB.Select("id", "form_data").
+		Where("id = ? AND user_id = ?", id, userID).First(&task).Error; err != nil {
+		if errors.Is(err, gorm.ErrRecordNotFound) {
+			return utils.Fail(c, 404, "任务不存在")
+		}
+		return utils.FailServer(c, "查询失败")
+	}
+
+	return utils.Success(c, fiber.Map{"formData": task.FormData})
+}
+
+
 // DeleteTask 删除任务
 func DeleteTask(c *fiber.Ctx) error {
 	userID := c.Locals("userId").(uint)
@@ -387,7 +477,8 @@ func DeleteTask(c *fiber.Ctx) error {
 	return utils.Success(c, nil)
 }
 
-// ExecuteTask 同步执行签到（SSE 流式返回状态）
+// ExecuteTask 执行任务（按 taskType 分流）。
+// sign / sleep_check → 签到提交流程；return_register → 返校登记（确认到达）。
 func ExecuteTask(c *fiber.Ctx) error {
 	userID := c.Locals("userId").(uint)
 	id := c.Params("id")
@@ -400,6 +491,51 @@ func ExecuteTask(c *fiber.Ctx) error {
 		return utils.FailServer(c, "查询失败")
 	}
 
+	switch cpd.TaskType(task.TaskType) {
+	case cpd.TaskTypeReturnRegister:
+		return executeReturnRegisterTask(c, &task)
+	default:
+		return executeSignTask(c)
+	}
+}
+
+// isOutOfRangeSign 判断提交表单是否为「范围外签到」。
+// 值来源：cpd 组装 submitForm 时 isMalposition 为 1（范围外）或 0（范围内）；
+// 兼容字符串 "是"/"1"/"true" 与数值 1。
+func isOutOfRangeSign(submitForm map[string]interface{}) bool {
+	v, ok := submitForm["isMalposition"]
+	if !ok || v == nil {
+		return false
+	}
+	switch t := v.(type) {
+	case bool:
+		return t
+	case int:
+		return t == 1
+	case int64:
+		return t == 1
+	case float64:
+		return t == 1
+	case string:
+		s := strings.TrimSpace(t)
+		return s == "是" || s == "1" || s == "true" || s == "True"
+	}
+	return false
+}
+
+// executeSignTask 同步执行签到/查寝（SSE 流式返回状态）
+func executeSignTask(c *fiber.Ctx) error {
+	userID := c.Locals("userId").(uint)
+	id := c.Params("id")
+
+	var task model.CpTask
+	if err := database.DB.Where("id = ? AND user_id = ?", id, userID).First(&task).Error; err != nil {
+		if errors.Is(err, gorm.ErrRecordNotFound) {
+			return utils.Fail(c, 404, "任务不存在")
+		}
+		return utils.FailServer(c, "查询失败")
+	}
+
 	if task.TaskStatus == "executing" {
 		return utils.Fail(c, 400, "任务正在执行中")
 	}
@@ -414,6 +550,11 @@ func ExecuteTask(c *fiber.Ctx) error {
 	if err := database.DB.First(&user, userID).Error; err != nil {
 		return utils.FailAuth(c, "用户不存在")
 	}
+	// 设备码后端硬校验：打卡执行需携带设备码。此前仅前端新建任务入口弹窗引导，
+	// 账密登录创建的账号可能未绑定设备码，空设备码会触发学校端风控异常
+	if strings.TrimSpace(user.MobileCode) == "" {
+		return utils.Fail(c, 400, "请先在个人中心绑定设备码后再执行签到")
+	}
 
 	// 设置 SSE 头
 	c.Set("Content-Type", "text/event-stream")
@@ -446,9 +587,12 @@ func ExecuteTask(c *fiber.Ctx) error {
 		// VIP 判定：VIP 且未过期则免扣次数直接执行
 		isVip := user.VipExpireAt != nil && user.VipExpireAt.After(time.Now())
 
-		// 检查可用次数（VIP 免检查）
-		if !isVip && user.SignCount <= 0 {
-			slog.Warn("签到次数不足，拒绝执行", "userId", userID, "taskId", id)
+		// 本次打卡扣减额度（后台可配置，允许小数与 0=不扣费）
+		deduct := getCheckinDeduct()
+
+		// 检查可用次数（VIP 免检查；0 额度时恒放行）
+		if !isVip && user.SignCount < deduct {
+			slog.Warn("签到次数不足，拒绝执行", "userId", userID, "taskId", id, "signCount", user.SignCount, "deduct", deduct)
 			sendEvent("task_error", map[string]interface{}{"message": "可用次数不足，请购买CDK或通过邀请获得次数"})
 			return
 		}
@@ -540,8 +684,12 @@ func ExecuteTask(c *fiber.Ctx) error {
 			sendEvent("task_error", map[string]interface{}{"status": "error", "message": errMsg})
 			return
 		}
-		// 历史位置超出查寝组所有签到范围时自动改用最近签到点，避免"位置不在签到范围内"
-		cpd.AdjustSubmitFormToSignRange(submitForm, detail.Rows)
+		// 历史位置超出签到范围时自动改用最近签到点，避免"位置不在签到范围内"。
+		// 但用户主动选择「范围外签到=是」时不得调整：此时用户就是要填范围外的位置
+		// （如回家/实习），强行改回学校坐标会导致实际打卡地点变成学校。
+		if !isOutOfRangeSign(submitForm) {
+			cpd.AdjustSubmitFormToSignRange(submitForm, detail.Rows)
+		}
 		// 照片仍是本地预览(base64)时自动上传换取正式 URL（用户上传失败保存的表单/历史遗留数据）
 		if photo, ok := submitForm["signPhotoUrl"].(string); ok && cpd.IsDataURIImage(photo) {
 			sendEvent("submitting", map[string]interface{}{"status": "submitting", "message": "正在上传照片..."})
@@ -592,11 +740,15 @@ func ExecuteTask(c *fiber.Ctx) error {
 
 		// 扣减可用次数（原子操作，防止并发超卖；VIP 有效期内免扣）
 		if !isVip {
-			database.DB.Model(&model.SysUser{}).Where("id = ? AND sign_count > 0", userID).
-				Update("sign_count", gorm.Expr("sign_count - 1"))
+			database.DB.Model(&model.SysUser{}).Where("id = ? AND sign_count >= ?", userID, deduct).
+				Update("sign_count", gorm.Expr("sign_count - ?", deduct))
+			msg := "签到成功！（已扣 " + fmtDeduct(deduct) + " 次）"
+			if deduct <= 0 {
+				msg = "签到成功！（免扣次数）"
+			}
 			sendEvent("success", map[string]interface{}{
 				"status":  "success",
-				"message": "签到成功！",
+				"message": msg,
 			})
 		} else {
 			sendEvent("success", map[string]interface{}{
@@ -716,6 +868,27 @@ func GetUploadPolicy(c *fiber.Ctx) error {
 	cookieMap := cpd.ParseCookieJSON(user.Cookie)
 	host := getSchoolHost(user.SchoolID)
 
+	// 请假类图片：新套学校走 leave-new OBS 协议（COS 风格），旧套保持原路径
+	if req.TaskType == string(cpd.TaskTypeLeave) && schoolLeaveFlavor(&user, cookieMap) == cpd.LeaveFlavorNew {
+		policy, err := cpd.GetLeaveNewUploadPolicy(cookieMap, host)
+		if err != nil && isCookieExpired(err) {
+			if refreshErr := refreshCpdailyCookie(&user); refreshErr == nil {
+				cookieMap = cpd.ParseCookieJSON(user.Cookie)
+				policy, err = cpd.GetLeaveNewUploadPolicy(cookieMap, host)
+			} else if errors.Is(refreshErr, ErrPasswordChanged) {
+				err = ErrPasswordChanged
+			}
+		}
+		if err != nil {
+			slog.Error("获取上传策略失败(新套)", "error", err)
+			if errors.Is(err, ErrPasswordChanged) {
+				return utils.Fail(c, 401, "登录凭证已过期，请重新登录")
+			}
+			return utils.Fail(c, 503, "获取上传策略失败: "+err.Error())
+		}
+		return utils.Success(c, policy)
+	}
+
 	policy, err := cpd.GetUploadPolicy(cookieMap, host, cpd.TaskType(req.TaskType))
 	if err != nil && isCookieExpired(err) {
 		slog.Info("获取上传策略cookie过期，尝试刷新", "userId", userID)
@@ -760,6 +933,27 @@ func GetPreviewUrl(c *fiber.Ctx) error {
 	cookieMap := cpd.ParseCookieJSON(user.Cookie)
 	host := getSchoolHost(user.SchoolID)
 
+	// 请假类图片预览：新套学校走 leave-new OBS 协议（参数 obsKey）
+	if req.TaskType == string(cpd.TaskTypeLeave) && schoolLeaveFlavor(&user, cookieMap) == cpd.LeaveFlavorNew {
+		previewUrl, err := cpd.GetLeaveNewPreviewURL(cookieMap, host, req.FileKey)
+		if err != nil && isCookieExpired(err) {
+			if refreshErr := refreshCpdailyCookie(&user); refreshErr == nil {
+				cookieMap = cpd.ParseCookieJSON(user.Cookie)
+				previewUrl, err = cpd.GetLeaveNewPreviewURL(cookieMap, host, req.FileKey)
+			} else if errors.Is(refreshErr, ErrPasswordChanged) {
+				err = ErrPasswordChanged
+			}
+		}
+		if err != nil {
+			slog.Error("获取预览 URL 失败(新套)", "error", err)
+			if errors.Is(err, ErrPasswordChanged) {
+				return utils.Fail(c, 401, "登录凭证已过期，请重新登录")
+			}
+			return utils.Fail(c, 503, "获取预览 URL 失败: "+err.Error())
+		}
+		return utils.Success(c, fiber.Map{"previewUrl": previewUrl})
+	}
+
 	previewUrl, err := cpd.GetPreviewUrl(cookieMap, host, cpd.TaskType(req.TaskType), req.FileKey)
 	if err != nil && isCookieExpired(err) {
 		slog.Info("获取预览URL cookie过期，尝试刷新", "userId", userID)

backed/internal/handler/task_outofrange_test.go

@@ -0,0 +1,31 @@
+package handler
+
+import "testing"
+
+// TestIsOutOfRangeSign 判定「范围外签到」：值来源为 cpd 组装 submitForm 时的 isMalposition（1=范围外/0=范围内），
+// 兼容字符串。用于决定是否跳过坐标自动回退到学校签到点。
+func TestIsOutOfRangeSign(t *testing.T) {
+	cases := []struct {
+		name string
+		form map[string]interface{}
+		want bool
+	}{
+		{"缺字段默认范围内", map[string]interface{}{}, false},
+		{"数值1=范围外", map[string]interface{}{"isMalposition": 1}, true},
+		{"数值0=范围内", map[string]interface{}{"isMalposition": 0}, false},
+		{"int64 1", map[string]interface{}{"isMalposition": int64(1)}, true},
+		{"float64 1", map[string]interface{}{"isMalposition": float64(1)}, true},
+		{"字符串是", map[string]interface{}{"isMalposition": "是"}, true},
+		{"字符串否", map[string]interface{}{"isMalposition": "否"}, false},
+		{"字符串1", map[string]interface{}{"isMalposition": "1"}, true},
+		{"布尔true", map[string]interface{}{"isMalposition": true}, true},
+		{"nil", map[string]interface{}{"isMalposition": nil}, false},
+	}
+	for _, c := range cases {
+		t.Run(c.name, func(t *testing.T) {
+			if got := isOutOfRangeSign(c.form); got != c.want {
+				t.Fatalf("isOutOfRangeSign(%v) = %v, want %v", c.form, got, c.want)
+			}
+		})
+	}
+}

backed/internal/handler/task_return_register.go

@@ -0,0 +1,162 @@
+package handler
+
+import (
+	"bufio"
+	"encoding/json"
+	"fmt"
+	"log/slog"
+	"time"
+
+	"cpdaily-new/internal/database"
+	"cpdaily-new/internal/model"
+	"cpdaily-new/internal/ratelimit"
+	cpd "cpdaily-new/internal/service/cpdaily"
+	"cpdaily-new/internal/utils"
+
+	"github.com/gofiber/fiber/v2"
+	"gorm.io/gorm"
+)
+
+// executeReturnRegisterTask 执行返校登记任务（SSE 流式返回，与签到执行体验一致）。
+// 返校登记无形表单：直接取学校配置的校区坐标，对 signWid 中的 (taskWid, stuWid) 提交确认到达。
+// 事件流：connecting → submitting → success / task_error
+func executeReturnRegisterTask(c *fiber.Ctx, task *model.CpTask) error {
+	userID := c.Locals("userId").(uint)
+
+	// 解析任务标识 "taskWid:stuWid"（在打开 SSE 流前完成，参数错误可直接返回 JSON）
+	taskWid, stuWid, perr := cpd.ParseLeaveReturnSignWid(task.SignWid)
+	if perr != nil {
+		return utils.FailParam(c, "任务配置无效，请删除后重新创建")
+	}
+
+	if task.TaskStatus == "executing" {
+		return utils.Fail(c, 400, "任务正在执行中")
+	}
+
+	var user model.SysUser
+	if err := database.DB.First(&user, userID).Error; err != nil {
+		return utils.FailAuth(c, "用户不存在")
+	}
+	if user.Cookie == "" {
+		return utils.Fail(c, 400, "请先登录")
+	}
+
+	// 设置 SSE 头
+	c.Set("Content-Type", "text/event-stream")
+	c.Set("Cache-Control", "no-cache")
+	c.Set("Connection", "keep-alive")
+	c.Set("X-Accel-Buffering", "no")
+
+	c.Context().SetBodyStreamWriter(func(w *bufio.Writer) {
+		sendEvent := func(event string, data map[string]interface{}) {
+			d, _ := json.Marshal(data)
+			fmt.Fprintf(w, "event: %s\ndata: %s\n\n", event, string(d))
+			w.Flush()
+		}
+
+		saveLog := func(isSuccess bool, errMsg string) {
+			database.DB.Create(&model.CpTaskLog{
+				CpTaskID:     task.ID,
+				UserID:       userID,
+				TaskType:     task.TaskType,
+				Title:        task.Title,
+				RealTitle:    task.RealTitle,
+				IsSuccess:    isSuccess,
+				ErrorMessage: errMsg,
+			})
+		}
+
+		isVip := user.VipExpireAt != nil && user.VipExpireAt.After(time.Now())
+		deduct := getCheckinDeduct()
+		if !isVip && user.SignCount < deduct {
+			slog.Warn("返校登记次数不足，拒绝执行", "userId", userID, "taskId", task.ID, "signCount", user.SignCount, "deduct", deduct)
+			sendEvent("task_error", map[string]interface{}{"message": "可用次数不足，请购买CDK或通过邀请获得次数"})
+			return
+		}
+
+		// 限流：同一用户同一任务
+		rateKey := fmt.Sprintf("task:%d:%d", userID, task.ID)
+		rules := []ratelimit.Rule{
+			{Limit: 3, Window: 2 * time.Minute, Label: "2m"},
+			{Limit: 6, Window: 1 * time.Hour, Label: "1h"},
+			{Limit: 10, Window: 24 * time.Hour, Label: "1d"},
+		}
+		if ok, msg := ratelimit.AllowMulti(rateKey, rules); !ok {
+			slog.Warn("返校登记触发限流", "userId", userID, "taskId", task.ID, "msg", msg)
+			sendEvent("task_error", map[string]interface{}{"message": msg, "rateLimit": true})
+			return
+		}
+
+		database.DB.Model(task).Updates(map[string]interface{}{
+			"task_status":   "executing",
+			"error_message": "",
+		})
+
+		sendEvent("connecting", map[string]interface{}{"status": "connecting", "message": "正在连接今日校园..."})
+
+		cookieMap := cpd.ParseCookieJSON(user.Cookie)
+		host := getSchoolHost(user.SchoolID)
+
+		// 取学校配置的校区坐标（范围内登记）
+		places, err := cpd.FetchLeaveReturnPlaces(cookieMap, host)
+		if err != nil && isCookieExpired(err) {
+			if refreshErr := refreshCpdailyCookie(&user); refreshErr == nil {
+				cookieMap = cpd.ParseCookieJSON(user.Cookie)
+				places, err = cpd.FetchLeaveReturnPlaces(cookieMap, host)
+			}
+		}
+		if err != nil {
+			errMsg := "获取返校位置配置失败: " + err.Error()
+			slog.Error("返校登记失败", "taskId", task.ID, "error", err)
+			database.DB.Model(task).Updates(map[string]interface{}{"task_status": "fail", "error_message": errMsg})
+			saveLog(false, errMsg)
+			sendEvent("task_error", map[string]interface{}{"status": "error", "message": errMsg})
+			return
+		}
+		if len(places) == 0 {
+			errMsg := "学校未配置返校确认位置，无法自动登记"
+			database.DB.Model(task).Updates(map[string]interface{}{"task_status": "fail", "error_message": errMsg})
+			saveLog(false, errMsg)
+			sendEvent("task_error", map[string]interface{}{"status": "error", "message": errMsg})
+			return
+		}
+		place := places[0]
+
+		sendEvent("submitting", map[string]interface{}{"status": "submitting", "message": "正在提交返校登记..."})
+
+		err = cpd.SubmitLeaveReturnRegister(cookieMap, host, taskWid, stuWid, place.Address, place.Longitude, place.Latitude, 1, "")
+		if err != nil && isCookieExpired(err) {
+			if refreshErr := refreshCpdailyCookie(&user); refreshErr == nil {
+				cookieMap = cpd.ParseCookieJSON(user.Cookie)
+				err = cpd.SubmitLeaveReturnRegister(cookieMap, host, taskWid, stuWid, place.Address, place.Longitude, place.Latitude, 1, "")
+			}
+		}
+		if err != nil {
+			errMsg := "返校登记失败: " + err.Error()
+			slog.Error("返校登记失败", "taskId", task.ID, "error", err)
+			database.DB.Model(task).Updates(map[string]interface{}{"task_status": "fail", "error_message": errMsg})
+			saveLog(false, errMsg)
+			sendEvent("task_error", map[string]interface{}{"status": "error", "message": errMsg})
+			return
+		}
+
+		database.DB.Model(task).Updates(map[string]interface{}{"task_status": "success"})
+		saveLog(true, "")
+
+		if !isVip {
+			database.DB.Model(&model.SysUser{}).Where("id = ? AND sign_count >= ?", userID, deduct).
+				Update("sign_count", gorm.Expr("sign_count - ?", deduct))
+			msg := "返校登记成功！（已扣 " + fmtDeduct(deduct) + " 次）"
+			if deduct <= 0 {
+				msg = "返校登记成功！（免扣次数）"
+			}
+			sendEvent("success", map[string]interface{}{"status": "success", "message": msg})
+		} else {
+			sendEvent("success", map[string]interface{}{"status": "success", "message": "返校登记成功！（VIP 免扣次数）"})
+		}
+
+		slog.Info("返校登记成功", "taskId", task.ID, "userId", userID, "taskWid", taskWid, "stuWid", stuWid)
+	})
+
+	return nil
+}

backed/internal/handler/ticket.go

@@ -44,6 +44,8 @@ type AdminTicketListItem struct {
 	Username   string `json:"username"`
 	RealName   string `json:"realName"`
 	SchoolName string `json:"schoolName"`
+	// 用户是否已删除该工单（软删除）；管理端仍展示，便于追溯
+	Deleted bool `json:"deleted"`
 }
 
 type TicketDetail struct {
@@ -73,6 +75,9 @@ type TicketNotificationRes struct {
 	Content   string `json:"content"`
 	IsRead    bool   `json:"isRead"`
 	CreatedAt string `json:"createdAt"`
+	// 关联工单当前状态（pending/processing/resolved/closed）；用于前端排序：
+	// 未关闭工单的回复通知排在前面，已关闭的排在后面
+	TicketStatus string `json:"ticketStatus"`
 }
 
 // ---------- 通知辅助函数 ----------
@@ -272,7 +277,9 @@ func CloseTicket(c *fiber.Ctx) error {
 	return utils.Success(c, fiber.Map{"status": "closed"})
 }
 
-// DeleteTicket 用户删除工单
+// DeleteTicket 用户删除工单（软删除）。
+// 仅标记 tickets.deleted_at：用户端列表不再展示，管理端仍可见并可查看完整对话，
+// 因此不再级联删除消息/通知，避免用户删除后抹掉处理痕迹。
 func DeleteTicket(c *fiber.Ctx) error {
 	userID := c.Locals("userId").(uint)
 	ticketID, err := c.ParamsInt("id")
@@ -288,10 +295,10 @@ func DeleteTicket(c *fiber.Ctx) error {
 		return utils.FailServer(c, "查询失败")
 	}
 
-	// 级联删除：消息、通知
-	database.DB.Where("ticket_id = ?", ticket.ID).Delete(&model.TicketMessage{})
-	database.DB.Where("ticket_id = ?", ticket.ID).Delete(&model.TicketNotification{})
-	database.DB.Delete(&ticket)
+	// 软删除（GORM 自动转为 UPDATE deleted_at）；消息与通知保留，供管理端追溯
+	if err := database.DB.Delete(&ticket).Error; err != nil {
+		return utils.FailServer(c, "删除失败")
+	}
 
 	return utils.Success(c, fiber.Map{"deleted": true})
 }
@@ -305,15 +312,30 @@ func ListTicketNotifications(c *fiber.Ctx) error {
 	var notifs []model.TicketNotification
 	database.DB.Where("user_id = ?", userID).Order("created_at DESC").Limit(50).Find(&notifs)
 
+	// 批量取关联工单状态（用于前端把「未关闭工单」的通知排在前面）
+	ticketIDs := make([]uint, 0, len(notifs))
+	for _, n := range notifs {
+		ticketIDs = append(ticketIDs, n.TicketID)
+	}
+	statusByTicket := map[uint]string{}
+	if len(ticketIDs) > 0 {
+		var tickets []model.Ticket
+		database.DB.Unscoped().Select("id", "status").Where("id IN ?", ticketIDs).Find(&tickets)
+		for _, t := range tickets {
+			statusByTicket[t.ID] = t.Status
+		}
+	}
+
 	items := make([]TicketNotificationRes, 0, len(notifs))
 	for _, n := range notifs {
 		items = append(items, TicketNotificationRes{
-			ID:        n.ID,
-			TicketID:  n.TicketID,
-			Title:     n.Title,
-			Content:   n.Content,
-			IsRead:    n.IsRead,
-			CreatedAt: n.CreatedAt.Format("2006-01-02 15:04"),
+			ID:           n.ID,
+			TicketID:     n.TicketID,
+			Title:        n.Title,
+			Content:      n.Content,
+			IsRead:       n.IsRead,
+			CreatedAt:    n.CreatedAt.Format("2006-01-02 15:04"),
+			TicketStatus: statusByTicket[n.TicketID],
 		})
 	}
 
@@ -346,11 +368,12 @@ func MarkTicketNotificationRead(c *fiber.Ctx) error {
 // ---------- 管理端 API ----------
 
 // AdminListTickets 管理端工单列表
+// 使用 Unscoped 包含用户已软删除的工单，便于管理员追溯（列表中标记「用户已删除」）。
 func AdminListTickets(c *fiber.Ctx) error {
 	status := c.Query("status")
 	keyword := c.Query("keyword")
 
-	query := database.DB.Table("tickets").
+	query := database.DB.Unscoped().Table("tickets").
 		Select("tickets.*, sys_user.username, sys_user.real_name, sys_user.school_id").
 		Joins("LEFT JOIN sys_user ON sys_user.id = tickets.user_id").
 		Order("tickets.created_at DESC")
@@ -389,6 +412,7 @@ func AdminListTickets(c *fiber.Ctx) error {
 			Username:   r.Username,
 			RealName:   r.RealName,
 			SchoolName: r.SchoolID,
+			Deleted:    r.DeletedAt.Valid,
 		})
 	}
 
@@ -403,7 +427,8 @@ func AdminGetTicket(c *fiber.Ctx) error {
 	}
 
 	var ticket model.Ticket
-	if err := database.DB.First(&ticket, ticketID).Error; err != nil {
+	// Unscoped：管理员可查看用户已软删除的工单（含完整对话）
+	if err := database.DB.Unscoped().First(&ticket, ticketID).Error; err != nil {
 		if err == gorm.ErrRecordNotFound {
 			return utils.Fail(c, 404, "工单不存在")
 		}
@@ -441,6 +466,7 @@ func AdminGetTicket(c *fiber.Ctx) error {
 		"schoolName": user.SchoolID,
 		"createdAt":  ticket.CreatedAt.Format("2006-01-02 15:04"),
 		"updatedAt":  ticket.UpdatedAt.Format("2006-01-02 15:04"),
+		"deleted":    ticket.DeletedAt.Valid,
 		"messages":   msgRes,
 	})
 }
@@ -462,7 +488,8 @@ func AdminReplyTicket(c *fiber.Ctx) error {
 	}
 
 	var ticket model.Ticket
-	if err := database.DB.First(&ticket, ticketID).Error; err != nil {
+	// Unscoped：允许对用户已软删除的工单继续回复（工单内容仍保留可追溯）
+	if err := database.DB.Unscoped().First(&ticket, ticketID).Error; err != nil {
 		if err == gorm.ErrRecordNotFound {
 			return utils.Fail(c, 404, "工单不存在")
 		}
@@ -521,7 +548,8 @@ func AdminUpdateTicketStatus(c *fiber.Ctx) error {
 	}
 
 	var ticket model.Ticket
-	if err := database.DB.First(&ticket, ticketID).Error; err != nil {
+	// Unscoped：允许对用户已软删除的工单更新状态
+	if err := database.DB.Unscoped().First(&ticket, ticketID).Error; err != nil {
 		if err == gorm.ErrRecordNotFound {
 			return utils.Fail(c, 404, "工单不存在")
 		}

backed/internal/handler/user_announcement.go

@@ -38,7 +38,7 @@ func ListUserAnnouncements(c *fiber.Ctx) error {
 
 	var announcements []model.Announcement
 	database.DB.Where(
-		"target_type = ? AND (target_user_id IS NULL OR target_user_id = ?)",
+		"is_pinned = 0 AND target_type = ? AND (target_user_id IS NULL OR target_user_id = ?)",
 		userType, userID,
 	).Order("created_at DESC").Find(&announcements)
 
@@ -66,6 +66,40 @@ func ListUserAnnouncements(c *fiber.Ctx) error {
 	return utils.Success(c, items)
 }
 
+// PinnedAnnouncementItem 置顶公告项（打卡页顶部横向滚动展示）
+type PinnedAnnouncementItem struct {
+	ID        uint   `json:"id"`
+	Title     string `json:"title"`
+	Content   string `json:"content"`
+	CreatedAt string `json:"createdAt"`
+}
+
+// ListPinnedAnnouncements 获取当前用户可见的置顶公告（打卡页顶部横向滚动）
+func ListPinnedAnnouncements(c *fiber.Ctx) error {
+	userID, userType, err := getCurrentUser(c)
+	if err != nil {
+		return utils.FailAuth(c, "未认证")
+	}
+
+	var announcements []model.Announcement
+	database.DB.Where(
+		"is_pinned = 1 AND target_type = ? AND (target_user_id IS NULL OR target_user_id = ?)",
+		userType, userID,
+	).Order("created_at DESC").Find(&announcements)
+
+	items := make([]PinnedAnnouncementItem, 0, len(announcements))
+	for _, a := range announcements {
+		items = append(items, PinnedAnnouncementItem{
+			ID:        a.ID,
+			Title:     a.Title,
+			Content:   a.Content,
+			CreatedAt: a.CreatedAt.Format("2006-01-02 15:04:05"),
+		})
+	}
+
+	return utils.Success(c, items)
+}
+
 // GetUnreadCount 获取未读公告数
 func GetUnreadCount(c *fiber.Ctx) error {
 	userID, userType, err := getCurrentUser(c)
@@ -75,7 +109,7 @@ func GetUnreadCount(c *fiber.Ctx) error {
 
 	var totalCount int64
 	database.DB.Model(&model.Announcement{}).
-		Where("target_type = ? AND (target_user_id IS NULL OR target_user_id = ?)", userType, userID).
+		Where("is_pinned = 0 AND target_type = ? AND (target_user_id IS NULL OR target_user_id = ?)", userType, userID).
 		Count(&totalCount)
 
 	var readCount int64
@@ -118,10 +152,10 @@ func GetMyAnnouncementInfo(c *fiber.Ctx) error {
 		return utils.FailAuth(c, "未认证")
 	}
 
-	// 1. 总公告数（包含指定给当前用户的）
+	// 1. 总公告数（包含指定给当前用户的；不含置顶公告）
 	var totalCount int64
 	database.DB.Model(&model.Announcement{}).
-		Where("target_type = ? AND (target_user_id IS NULL OR target_user_id = ?)", userType, userID).
+		Where("is_pinned = 0 AND target_type = ? AND (target_user_id IS NULL OR target_user_id = ?)", userType, userID).
 		Count(&totalCount)
 
 	// 2. 已读数
@@ -185,6 +219,11 @@ func MarkAnnouncementRead(c *fiber.Ctx) error {
 		return utils.Fail(c, 404, "公告不存在")
 	}
 
+	// 置顶公告不进入用户公告列表，不可被标记已读
+	if announcement.IsPinned {
+		return utils.Fail(c, 400, "置顶公告无需标记已读")
+	}
+
 	// 验证公告目标类型匹配（agent 公告仅代理/管理员可见，user 公告仅用户可见）
 	if announcement.TargetType != userType {
 		return utils.Fail(c, 403, "无权操作此公告")

backed/internal/middleware/jwt.go

@@ -54,6 +54,20 @@ func AuthRequired() fiber.Handler {
 		if err != nil {
 			return utils.FailAuth(c, "token无效或已过期")
 		}
+		// 封号拦截：token 有效但账号已被封禁时，所有接口一律拒绝并返回封号原因。
+		// 注意：必须用 query 只取 status/disabled_reason，避免加载长字段；用户不存在按放行处理
+		//（由各 handler 自行兜底），避免误伤。
+		var u model.SysUser
+		if err := database.DB.Select("id", "status", "disabled_reason").First(&u, claims.UserID).Error; err == nil {
+			if u.Status == "disabled" {
+				reason := strings.TrimSpace(u.DisabledReason)
+				if reason == "" {
+					reason = "您的账号已被管理员封禁，如有疑问请联系客服"
+				}
+				// HTTP 403 + 业务码 4030：前端据此弹出封号原因并登出，不触发 token 刷新
+				return c.Status(403).JSON(utils.Response{Code: 4030, Message: reason})
+			}
+		}
 		// 将用户信息存入 context
 		c.Locals("userId", claims.UserID)
 		c.Locals("username", claims.Username)

backed/internal/model/announcement.go

@@ -12,9 +12,11 @@ type Announcement struct {
 	TargetUserID *uint   `gorm:"index" json:"targetUserId"`                                     // 指定单个用户(null=推送全部)
 	ForcePopup bool      `gorm:"default:false" json:"forcePopup"`
 	LoopPopup  bool      `gorm:"default:false" json:"loopPopup"`
-	CreatedBy  uint      `gorm:"not null" json:"createdBy"` // admin_id (system公告为0)
-	CreatedAt  time.Time `json:"createdAt"`
-	UpdatedAt  time.Time `json:"updatedAt"`
+	// 置顶公告：在打卡页顶部横向滚动展示
+	IsPinned  bool      `gorm:"default:false;index" json:"isPinned"`
+	CreatedBy uint      `gorm:"not null" json:"createdBy"` // admin_id (system公告为0)
+	CreatedAt time.Time `json:"createdAt"`
+	UpdatedAt time.Time `json:"updatedAt"`
 }
 
 func (Announcement) TableName() string {

backed/internal/model/cp_leave_log.go

@@ -1,19 +1,26 @@
 package model
 
-import "time"
+import (
+	"time"
+
+	"gorm.io/gorm"
+)
 
 // CpLeaveLog 请假/销假执行日志
+// 说明：DeletedAt 软删除字段——用户在客户端"删除"日志时仅标记 deleted_at，
+// 前台日志列表不再展示，但后台统计仍计入。
 type CpLeaveLog struct {
-	ID           uint      `gorm:"primaryKey;autoIncrement" json:"id"`
-	UserID       uint      `gorm:"not null;index" json:"userId"`
-	LeaveID      string    `gorm:"type:varchar(64);not null" json:"leaveId"`               // 今日校园请假记录 ID（请假申请为 apply_<时间戳>）
-	Title        string    `gorm:"type:varchar(255);not null" json:"title"`                // 日志标题（请假类型名 + 动作）
-	SchoolName   string    `gorm:"type:varchar(255)" json:"schoolName"`                    // 学校名称
-	Action       string    `gorm:"type:varchar(16);not null;default:report" json:"action"` // report=销假 / apply=请假
-	IsSuccess    bool      `gorm:"not null;default:0" json:"isSuccess"`                    // 是否成功
-	ErrorMessage string    `gorm:"type:text" json:"errorMessage"`                          // 失败时的错误信息
-	CreatedAt    time.Time `json:"createdAt"`
-	UpdatedAt    time.Time `json:"updatedAt"`
+	ID           uint           `gorm:"primaryKey;autoIncrement" json:"id"`
+	UserID       uint           `gorm:"not null;index" json:"userId"`
+	LeaveID      string         `gorm:"type:varchar(64);not null" json:"leaveId"`               // 今日校园请假记录 ID（请假申请为 apply_<时间戳>）
+	Title        string         `gorm:"type:varchar(255);not null" json:"title"`                // 日志标题（请假类型名 + 动作）
+	SchoolName   string         `gorm:"type:varchar(255)" json:"schoolName"`                    // 学校名称
+	Action       string         `gorm:"type:varchar(16);not null;default:report" json:"action"` // report=销假 / apply=请假
+	IsSuccess    bool           `gorm:"not null;default:0" json:"isSuccess"`                    // 是否成功
+	ErrorMessage string         `gorm:"type:text" json:"errorMessage"`                          // 失败时的错误信息
+	CreatedAt    time.Time      `json:"createdAt"`
+	UpdatedAt    time.Time      `json:"updatedAt"`
+	DeletedAt    gorm.DeletedAt `gorm:"index" json:"deletedAt"`
 }
 
 func (CpLeaveLog) TableName() string {

backed/internal/model/cp_task.go

@@ -6,10 +6,10 @@ import "time"
 type CpTask struct {
 	ID              uint      `gorm:"primaryKey;autoIncrement" json:"id"`
 	UserID          uint      `gorm:"not null;index" json:"userId"`
-	TaskType        string    `gorm:"type:varchar(32);not null" json:"taskType"`           // sign, sleep_check
+	TaskType        string    `gorm:"type:varchar(32);not null" json:"taskType"`           // sign, sleep_check, return_register
 	Title           string    `gorm:"type:varchar(255);not null" json:"title"`              // 用户选择的标题（支持通配符）
 	RealTitle       string    `gorm:"type:varchar(255)" json:"realTitle"`                   // cpdaily 返回的实际标题
-	SignWid         string    `gorm:"type:varchar(255)" json:"signWid"`                     // cpdaily 任务标识
+	SignWid         string    `gorm:"type:varchar(255)" json:"signWid"`                     // cpdaily 任务标识（return_register 为 "taskWid:stuWid"）
 	SignInstanceWid string    `gorm:"type:varchar(255)" json:"signInstanceWid"`             // cpdaily 实例标识
 	FormData        string    `gorm:"type:longtext" json:"formData"`                        // JSON: []CpTaskFormItem
 	TaskStatus      string    `gorm:"type:varchar(32);default:pending" json:"taskStatus"`   // pending, executing, success, fail

backed/internal/model/cp_task_log.go

@@ -1,19 +1,26 @@
 package model
 
-import "time"
+import (
+	"time"
+
+	"gorm.io/gorm"
+)
 
 // CpTaskLog 任务执行日志
+// 说明：DeletedAt 软删除字段——用户在客户端"删除"日志时仅标记 deleted_at，
+// 前台日志列表不再展示，但后台统计（已执行次数/今日状态/执行总次数）仍计入。
 type CpTaskLog struct {
-	ID           uint      `gorm:"primaryKey;autoIncrement" json:"id"`
-	CpTaskID     uint      `gorm:"not null;index" json:"cpTaskId"`
-	UserID       uint      `gorm:"not null;index" json:"userId"`
-	TaskType     string    `gorm:"type:varchar(32);not null" json:"taskType"`        // sign / sleep_check
-	Title        string    `gorm:"type:varchar(255);not null" json:"title"`          // 用户设置的任务标题（支持通配符）
-	RealTitle    string    `gorm:"type:varchar(255)" json:"realTitle"`               // 本次执行实际匹配的标题
-	IsSuccess    bool      `gorm:"not null;default:0" json:"isSuccess"`              // 是否成功
-	ErrorMessage string    `gorm:"type:text" json:"errorMessage"`                    // 失败时的错误信息
-	CreatedAt    time.Time `json:"createdAt"`
-	UpdatedAt    time.Time `json:"updatedAt"`
+	ID           uint           `gorm:"primaryKey;autoIncrement" json:"id"`
+	CpTaskID     uint           `gorm:"not null;index" json:"cpTaskId"`
+	UserID       uint           `gorm:"not null;index" json:"userId"`
+	TaskType     string         `gorm:"type:varchar(32);not null" json:"taskType"` // sign / sleep_check / return_register
+	Title        string         `gorm:"type:varchar(255);not null" json:"title"`   // 用户设置的任务标题（支持通配符）
+	RealTitle    string         `gorm:"type:varchar(255)" json:"realTitle"`        // 本次执行实际匹配的标题
+	IsSuccess    bool           `gorm:"not null;default:0" json:"isSuccess"`       // 是否成功
+	ErrorMessage string         `gorm:"type:text" json:"errorMessage"`             // 失败时的错误信息
+	CreatedAt    time.Time      `json:"createdAt"`
+	UpdatedAt    time.Time      `json:"updatedAt"`
+	DeletedAt    gorm.DeletedAt `gorm:"index" json:"deletedAt"`
 }
 
 func (CpTaskLog) TableName() string {

backed/internal/model/sys_user.go

@@ -35,8 +35,8 @@ type SysUser struct {
 	MobileCode string `gorm:"type:varchar(255)" json:"mobileCode"`
 	// 设备码类型 random/authorize/manual
 	MobileType string `gorm:"type:varchar(32)" json:"mobileType"`
-	// 可签到次数
-	SignCount int `gorm:"type:int;default:0" json:"signCount"`
+	// 可签到次数（支持小数；每次打卡/请假/销假按后台配置的额度扣减，0 表示不扣费）
+	SignCount float64 `gorm:"type:decimal(12,2);default:0" json:"signCount"`
 	// VIP 到期时间（null=从未开通；VIP 有效期内执行任务免扣次数）
 	VipExpireAt *time.Time `gorm:"type:datetime" json:"vipExpireAt"`
 	// 邀请码

backed/internal/model/ticket.go

@@ -2,17 +2,23 @@ package model
 
 import (
 	"time"
+
+	"gorm.io/gorm"
 )
 
 // Ticket 工单
+// 说明：DeletedAt 软删除字段——用户在客户端"删除"工单时仅标记 deleted_at，
+// 用户端列表不再展示，但管理端仍可查看（并标记「用户已删除」），
+// 保留工单内容与其全部消息记录，避免用户删除后抹掉处理痕迹。
 type Ticket struct {
-	ID        uint      `gorm:"primaryKey;autoIncrement" json:"id"`
-	UserID    uint      `gorm:"not null;index" json:"userId"`
-	Title     string    `gorm:"size:200;not null" json:"title"`
-	Content   string    `gorm:"type:text;not null" json:"content"`
-	Status    string    `gorm:"size:20;not null;default:pending;index" json:"status"`
-	CreatedAt time.Time `json:"createdAt"`
-	UpdatedAt time.Time `json:"updatedAt"`
+	ID        uint           `gorm:"primaryKey;autoIncrement" json:"id"`
+	UserID    uint           `gorm:"not null;index" json:"userId"`
+	Title     string         `gorm:"size:200;not null" json:"title"`
+	Content   string         `gorm:"type:text;not null" json:"content"`
+	Status    string         `gorm:"size:20;not null;default:pending;index" json:"status"`
+	CreatedAt time.Time      `json:"createdAt"`
+	UpdatedAt time.Time      `json:"updatedAt"`
+	DeletedAt gorm.DeletedAt `gorm:"index" json:"deletedAt"`
 }
 
 func (Ticket) TableName() string {

backed/internal/service/cpdaily/image.go

@@ -72,7 +72,7 @@ func GetUploadPolicy(cookieMap map[string]string, host string, taskType TaskType
 		ErrMsg  string               `json:"errMsg"`
 		Datas   *CpImageUploadPolicy `json:"datas"`
 	}
-	if err := json.Unmarshal(body, &result); err != nil {
+	if err := unmarshalBody(body, &result); err != nil {
 		return nil, fmt.Errorf("解析上传策略失败: %w", err)
 	}
 	if result.ErrCode != 0 || result.Datas == nil {
@@ -175,7 +175,7 @@ func GetPreviewUrl(cookieMap map[string]string, host string, taskType TaskType,
 		Message string          `json:"message"`
 		Datas   json.RawMessage `json:"datas"`
 	}
-	if err := json.Unmarshal(body, &result); err != nil {
+	if err := unmarshalBody(body, &result); err != nil {
 		return "", fmt.Errorf("解析预览 URL 响应失败: %w (body: %.200s)", err, string(body))
 	}
 	if result.ErrCode != 0 {

backed/internal/service/cpdaily/leave.go

@@ -46,6 +46,8 @@ type LeaveItem struct {
 	CreateTime string `json:"createTime"` // 请假提交时间
 	ActEndTime string `json:"actEndTime"` // 预计结束时间
 	Status     string `json:"status"`     // 系统请假状态码（4=已完成，已过滤）
+	// 状态文案（新套有明确文案映射；旧套为空，前端回退本地映射）
+	StatusText string `json:"statusText,omitempty"`
 	// 学校规定的销假位置（详情 reportPlaces）。有值时前端展示可选列表并预填经纬度；
 	// 无值时提示用户手动填写
 	ReportPlaces []LeaveReportPlace `json:"reportPlaces"`
@@ -159,7 +161,20 @@ func leavePost(cookieMap map[string]string, url string, body interface{}, extens
 		return nil, err
 	}
 	defer resp.RawBody().Close()
-	return io.ReadAll(resp.RawBody())
+	respBody, err := io.ReadAll(resp.RawBody())
+	if err != nil {
+		return nil, err
+	}
+	// HTTP 状态码异常：学校网关/WAF 拦截或上游故障常返回无 body 的 4xx/5xx，
+	// 若不在这里拦截，上层会把空 body 报成无意义的 JSON 解析错误。
+	if code := resp.StatusCode(); code < 200 || code >= 300 {
+		return respBody, fmt.Errorf("学校服务端响应异常(HTTP %d): %s", code, strings.TrimSpace(string(respBody)))
+	}
+	// 状态码正常但 body 为空：多见于重复提交触发风控或网关瞬时故障
+	if len(respBody) == 0 {
+		return respBody, fmt.Errorf("学校服务端返回空响应(HTTP %d)，可能触发风控或瞬时故障，请稍后重试", resp.StatusCode())
+	}
+	return respBody, nil
 }
 
 // FetchLeaveList 获取今日校园待销假列表。
@@ -184,7 +199,7 @@ func FetchLeaveList(cookieMap map[string]string, host string) ([]LeaveItem, erro
 			Rows []map[string]interface{} `json:"rows"`
 		} `json:"datas"`
 	}
-	if err := json.Unmarshal(body, &result); err != nil {
+	if err := unmarshalBody(body, &result); err != nil {
 		return nil, fmt.Errorf("解析待销假列表失败: %w (body: %.200s)", err, string(body))
 	}
 	if result.ErrCode != 0 {
@@ -202,7 +217,10 @@ func FetchLeaveList(cookieMap map[string]string, host string) ([]LeaveItem, erro
 	list := make([]LeaveItem, 0, len(result.Datas.Rows))
 	for _, row := range result.Datas.Rows {
 		status := leaveMapStr(row, "status")
-		if status == "4" { // 已完成，无需销假
+		// 待销假列表只保留可销假的记录：
+		//   4=已完成、3=已驳回、10=逾期自动驳回 均无需（也不应）销假，直接过滤。
+		// 注：驳回状态若不过滤，已驳回的请假会出现在待销假列表中（用户无法对其销假）。
+		if status == "4" || status == "3" || status == "10" {
 			continue
 		}
 		id := leaveMapStr(row, "id")
@@ -268,7 +286,7 @@ func FetchLeaveDetail(cookieMap map[string]string, host, leaveID string) (*Leave
 			} `json:"reportPlaces"`
 		} `json:"datas"`
 	}
-	if err := json.Unmarshal(body, &result); err != nil {
+	if err := unmarshalBody(body, &result); err != nil {
 		return nil, fmt.Errorf("解析请假详情失败: %w (body: %.200s)", err, string(body))
 	}
 	if result.ErrCode != 0 {
@@ -337,7 +355,7 @@ func FetchReportApprovers(cookieMap map[string]string, host string, leaveCodeNum
 			} `json:"approveNodes"`
 		} `json:"datas"`
 	}
-	if err := json.Unmarshal(body, &result); err != nil {
+	if err := unmarshalBody(body, &result); err != nil {
 		return nil, fmt.Errorf("解析销假审批人失败: %w (body: %.200s)", err, string(body))
 	}
 	code, _ := result.Code.Int64()
@@ -429,15 +447,22 @@ func SubmitLeaveReport(cookieMap map[string]string, host string, form map[string
 		Code    json.Number `json:"code"`
 		Message string      `json:"message"`
 	}
-	if err := json.Unmarshal(body, &result); err != nil {
+	if err := unmarshalBody(body, &result); err != nil {
 		return fmt.Errorf("解析销假响应失败: %w, body: %s", err, string(body))
 	}
 	code, _ := result.Code.Int64()
 	slog.Info("leave/report 响应", "code", result.Code.String(), "message", result.Message, "body", string(body))
 	if code != 0 {
-		msg := result.Message
-		if msg == "" {
-			msg = "未知错误"
+		// 优先透传学校返回的 message：该校 2210990000 是通用错误码，可能表示
+		// 「需要添加附件」「设备更换，无法查看，请联系管理老师」等多种原因，
+		// 不能一律翻译成"需要附件"（曾因此误导用户以为已上传附件仍报错）。
+		msg := strings.TrimSpace(result.Message)
+		if msg == "" || msg == "failed" {
+			if code == 2210990000 {
+				msg = "销假失败，请检查是否已按要求上传附件或设备信息是否有效，或联系管理老师"
+			} else {
+				msg = "未知错误"
+			}
 		}
 		return fmt.Errorf("%s", msg)
 	}

backed/internal/service/cpdaily/leave_apply.go

@@ -30,6 +30,8 @@ type LeaveType struct {
 	ChooseAttendance      int    `json:"chooseAttendance"`      // 1=需要打卡相关核验（透传）
 	DisableTime           int    `json:"disableTime"`           // 1=当前类型不可用
 	LimitDay              int    `json:"limitDay"`              // 单次最长可请假天数（0=不限）
+	RequireSign           int    `json:"requireSign"`           // 1=需先手写承诺书签名后提交
+	OutStatusDefault      int    `json:"outStatusDefault"`      // 「是否离校」默认值（0=无默认 1=默认是 2=默认否；仅新套）
 }
 
 // CheckOnceLeave 检查是否允许请假（学校可能配置同一时间仅一条请假单等限制）
@@ -42,7 +44,7 @@ func CheckOnceLeave(cookieMap map[string]string, host string) error {
 		Code    json.Number `json:"code"`
 		Message string      `json:"message"`
 	}
-	if err := json.Unmarshal(body, &result); err != nil {
+	if err := unmarshalBody(body, &result); err != nil {
 		return fmt.Errorf("解析请假资格响应失败: %w (body: %.200s)", err, string(body))
 	}
 	code, _ := result.Code.Int64()
@@ -77,7 +79,7 @@ func FetchLeaveTypes(cookieMap map[string]string, host string) ([]LeaveType, err
 			} `json:"leaveType"`
 		} `json:"datas"`
 	}
-	if err := json.Unmarshal(body, &result); err != nil {
+	if err := unmarshalBody(body, &result); err != nil {
 		return nil, fmt.Errorf("解析请假类型失败: %w (body: %.200s)", err, string(body))
 	}
 	code, _ := result.Code.Int64()
@@ -144,7 +146,7 @@ func FetchLeaveTypeCfg(cookieMap map[string]string, host string, code int) (*Lea
 			LimitDay              interface{} `json:"limitDay"`
 		} `json:"datas"`
 	}
-	if err := json.Unmarshal(body, &result); err != nil {
+	if err := unmarshalBody(body, &result); err != nil {
 		return nil, fmt.Errorf("解析请假类型配置失败: %w (body: %.200s)", err, string(body))
 	}
 	codeVal, _ := result.Code.Int64()
@@ -172,21 +174,75 @@ func FetchLeaveTypeCfg(cookieMap map[string]string, host string, code int) (*Lea
 
 // LeaveApplyParams 请假申请提交参数
 type LeaveApplyParams struct {
-	LeaveType     int    // 类型编码
-	StartTime     string // yyyy-MM-dd HH:mm:ss
-	EndTime       string // yyyy-MM-dd HH:mm:ss
-	LeaveReason   string // 请假原因
-	OutStatus     bool   // 是否离校
-	UrgencyMobile string // 紧急联系人手机号（离校必填）
-	Address       string // 目的地（离校必填，如 xx省/xx市/xx区）
-	DetailAddress string // 详细地址（离校必填）
-	Longitude     string // 定位经度
-	Latitude      string // 定位纬度
-	LocationAddr  string // 定位地址
-	ImageURL      string // 附件图片 URL（可选）
-	ApproverWid   string // 审批人 userWid（needApproval=1 时必填）
-	ApproverId    string // 审批人 userId
-	ApproverName  string // 审批人姓名
+	LeaveType     int             // 类型编码
+	StartTime     string          // yyyy-MM-dd HH:mm:ss
+	EndTime       string          // yyyy-MM-dd HH:mm:ss
+	LeaveReason   string          // 请假原因
+	OutStatus     bool            // 是否离校
+	UrgencyMobile string          // 紧急联系人手机号（离校必填）
+	Address       string          // 目的地（离校必填，如 xx省/xx市/xx区）
+	DetailAddress string          // 详细地址（离校必填）
+	Longitude     string          // 定位经度
+	Latitude      string          // 定位纬度
+	LocationAddr  string          // 定位地址
+	ImageURLs     []string        // 附件图片 URL 列表（可选，最多 4 张且不超学校上限）
+	ApproverWid   string          // 审批人 userWid（needApproval=1 且学校配置了候选审批人时必填；候选为空可不选）
+	ApproverId    string          // 审批人 userId
+	ApproverName  string          // 审批人姓名
+	CcUsers       []LeaveApprover // 抄送人（非必填；候选取自审批人列表）
+}
+
+// LeaveMaxAttachCount 附件数量上限：学校配置为准，但产品上限 4 张。
+// limit<=0（学校未配置）按 4；limit>4 收敛为 4；否则取学校值。
+func LeaveMaxAttachCount(schoolLimit int) int {
+	if schoolLimit <= 0 || schoolLimit > 4 {
+		return 4
+	}
+	return schoolLimit
+}
+
+// BuildLeaveCcInfo 构造抄送人信息（ccInfo）。
+// 官方结构：{totalSize, teachers:[], students:[]}，人员含 personType（0=老师 1=学生）。
+// 审批人接口不返回 personType，按 userId 是否纯数字推断（学号纯数字，教师工号常含字母）。
+func BuildLeaveCcInfo(users []LeaveApprover) map[string]interface{} {
+	teachers := make([]interface{}, 0, len(users))
+	students := make([]interface{}, 0, len(users))
+	for _, u := range users {
+		if u.UserWid == "" {
+			continue
+		}
+		personType := 1 // 默认学生
+		if u.UserId == "" {
+			personType = 0
+		} else {
+			for _, ch := range u.UserId {
+				if ch < '0' || ch > '9' {
+					personType = 0 // 含非数字字符 → 教师
+					break
+				}
+			}
+		}
+		person := map[string]interface{}{
+			"userWid":     u.UserWid,
+			"userId":      u.UserId,
+			"userName":    u.UserName,
+			"name2Id":     u.UserName + "/" + u.UserId,
+			"personType":  personType,
+			"dept":        nil,
+			"sex":         nil,
+			"teacherName": u.UserName,
+		}
+		if personType == 0 {
+			teachers = append(teachers, person)
+		} else {
+			students = append(students, person)
+		}
+	}
+	return map[string]interface{}{
+		"totalSize": len(teachers) + len(students),
+		"teachers":  teachers,
+		"students":  students,
+	}
 }
 
 // BuildLeaveApplyForm 构造请假申请表单（/leave/apply 的明文 JSON body，
@@ -224,12 +280,9 @@ func BuildLeaveApplyForm(p LeaveApplyParams, deviceId, systemVersion, appVersion
 		"holidayAutoDefineVos": []interface{}{},
 		"appVersion":           appVersion,
 		"deviceId":             deviceId,
-		"ccInfo": map[string]interface{}{
-			"teachers": []interface{}{},
-			"students": []interface{}{},
-		},
-		"cheatType": nil,
-		"source":    1,
+		"ccInfo":               BuildLeaveCcInfo(p.CcUsers),
+		"cheatType":            nil,
+		"source":               1,
 		"location": map[string]interface{}{
 			"deviceId":      deviceId,
 			"systemName":    "Android",
@@ -249,9 +302,18 @@ func BuildLeaveApplyForm(p LeaveApplyParams, deviceId, systemVersion, appVersion
 		form["approverId"] = p.ApproverId
 		form["approverName"] = p.ApproverName
 	}
-	if p.ImageURL != "" {
-		form["applyAttach"] = []map[string]interface{}{
-			{"type": 1, "url": p.ImageURL},
+	if len(p.ImageURLs) > 0 {
+		attachs := make([]map[string]interface{}, 0, len(p.ImageURLs))
+		for _, u := range p.ImageURLs {
+			if u == "" {
+				continue
+			}
+			attachs = append(attachs, map[string]interface{}{"type": 1, "url": u})
+		}
+		if len(attachs) > 0 {
+			form["applyAttach"] = attachs
+		} else {
+			form["applyAttach"] = []interface{}{}
 		}
 	} else {
 		form["applyAttach"] = []interface{}{}
@@ -272,7 +334,7 @@ func SubmitLeaveApply(cookieMap map[string]string, host string, form map[string]
 		Code    json.Number `json:"code"`
 		Message string      `json:"message"`
 	}
-	if err := json.Unmarshal(body, &result); err != nil {
+	if err := unmarshalBody(body, &result); err != nil {
 		return fmt.Errorf("解析请假响应失败: %w, body: %s", err, string(body))
 	}
 	code, _ := result.Code.Int64()

backed/internal/service/cpdaily/leave_apply_test.go

@@ -114,7 +114,7 @@ func TestBuildLeaveApplyForm(t *testing.T) {
 		Longitude:     "118.1",
 		Latitude:      "24.6",
 		LocationAddr:  "福建省厦门市思明区",
-		ImageURL:      "https://obs.example.com/a.jpg",
+		ImageURLs:     []string{"https://obs.example.com/a.jpg", "https://obs.example.com/b.jpg"},
 		ApproverWid:   "93458825",
 		ApproverId:    "20220109",
 		ApproverName:  "罗亭",
@@ -131,8 +131,11 @@ func TestBuildLeaveApplyForm(t *testing.T) {
 		t.Errorf("审批人字段错误: %v/%v/%v", form["approverWid"], form["approverId"], form["approverName"])
 	}
 	attach, ok := form["applyAttach"].([]map[string]interface{})
-	if !ok || len(attach) != 1 || attach[0]["url"] != "https://obs.example.com/a.jpg" {
-		t.Errorf("附件结构错误: %v", form["applyAttach"])
+	if !ok || len(attach) != 2 || attach[0]["url"] != "https://obs.example.com/a.jpg" || attach[1]["url"] != "https://obs.example.com/b.jpg" {
+		t.Errorf("多附件结构错误: %v", form["applyAttach"])
+	}
+	if attach[0]["type"] != 1 || attach[1]["type"] != 1 {
+		t.Errorf("附件 type 应为 1: %v", attach)
 	}
 	loc, ok := form["location"].(map[string]interface{})
 	if !ok || loc["longitude"] != "118.1" || loc["latitude"] != "24.6" || loc["address"] != "福建省厦门市思明区" {
@@ -166,6 +169,56 @@ func TestBuildLeaveApplyForm(t *testing.T) {
 	if attach, ok := form2["applyAttach"].([]interface{}); !ok || len(attach) != 0 {
 		t.Errorf("无附件时 applyAttach 应为空数组: %v", form2["applyAttach"])
 	}
+	// 无抄送人：ccInfo 仍必须存在且为空结构
+	cc, ok := form2["ccInfo"].(map[string]interface{})
+	if !ok || cc["totalSize"] != 0 {
+		t.Errorf("无抄送人时 ccInfo 应为空结构: %v", form2["ccInfo"])
+	}
+}
+
+func TestBuildLeaveCcInfo(t *testing.T) {
+	// 学生（纯数字 userId）+ 教师（含字母 userId）分组
+	users := []LeaveApprover{
+		{UserWid: "92274797", UserId: "02727", UserName: "王欣然"},    // 纯数字 → students
+		{UserWid: "915560902", UserId: "kjxy0003", UserName: "杨瑚"}, // 含字母 → teachers
+	}
+	cc := BuildLeaveCcInfo(users)
+	if cc["totalSize"] != 2 {
+		t.Errorf("totalSize 应为 2，实际 %v", cc["totalSize"])
+	}
+	students, _ := cc["students"].([]interface{})
+	teachers, _ := cc["teachers"].([]interface{})
+	if len(students) != 1 || len(teachers) != 1 {
+		t.Fatalf("分组错误: students=%d teachers=%d", len(students), len(teachers))
+	}
+	st, _ := students[0].(map[string]interface{})
+	if st["userWid"] != "92274797" || st["name2Id"] != "王欣然/02727" || st["personType"] != 1 {
+		t.Errorf("学生抄送人字段错误: %v", st)
+	}
+	tc, _ := teachers[0].(map[string]interface{})
+	if tc["userWid"] != "915560902" || tc["personType"] != 0 {
+		t.Errorf("教师抄送人字段错误: %v", tc)
+	}
+
+	// 空列表：结构完整但 totalSize=0
+	empty := BuildLeaveCcInfo(nil)
+	if empty["totalSize"] != 0 {
+		t.Errorf("空抄送人 totalSize 应为 0: %v", empty["totalSize"])
+	}
+	if arr, ok := empty["teachers"].([]interface{}); !ok || len(arr) != 0 {
+		t.Errorf("空抄送人 teachers 应为空数组: %v", empty["teachers"])
+	}
+
+	// 提交表单携带抄送人
+	form := BuildLeaveApplyForm(LeaveApplyParams{
+		LeaveType: 1, StartTime: "2026-09-15 08:00:00", EndTime: "2026-09-15 18:00:00",
+		LeaveReason: "身体不适需休息", Longitude: "118.1", Latitude: "24.6", LocationAddr: "校内",
+		CcUsers: users,
+	}, "device-1", "15", "9.9.6")
+	fcc, _ := form["ccInfo"].(map[string]interface{})
+	if fcc == nil || fcc["totalSize"] != 2 {
+		t.Errorf("表单 ccInfo 应包含 2 名抄送人: %v", form["ccInfo"])
+	}
 }
 
 func TestSubmitLeaveApply(t *testing.T) {
@@ -181,3 +234,44 @@ func TestSubmitLeaveApply(t *testing.T) {
 		t.Errorf("SubmitLeaveApply 应成功: %v", err)
 	}
 }
+
+// TestLeaveMaxAttachCount 附件数量上限：学校未配置/超 4 张收敛为 4，否则取学校值
+func TestLeaveMaxAttachCount(t *testing.T) {
+	cases := []struct {
+		schoolLimit int
+		want        int
+	}{
+		{0, 4},  // 未配置
+		{-1, 4}, // 异常值
+		{2, 2},
+		{4, 4},
+		{9, 4}, // 超产品上限
+	}
+	for _, c := range cases {
+		if got := LeaveMaxAttachCount(c.schoolLimit); got != c.want {
+			t.Errorf("LeaveMaxAttachCount(%d) = %d, want %d", c.schoolLimit, got, c.want)
+		}
+	}
+}
+
+// TestBuildLeaveApplyFormEmptyAttachURLs 多图字段中的空串应被剔除，全空时仍输出空数组
+func TestBuildLeaveApplyFormEmptyAttachURLs(t *testing.T) {
+	form := BuildLeaveApplyForm(LeaveApplyParams{
+		LeaveType: 1, StartTime: "2026-09-15 08:00:00", EndTime: "2026-09-15 18:00:00",
+		LeaveReason: "身体不适需休息", Longitude: "118.1", Latitude: "24.6", LocationAddr: "校内",
+		ImageURLs: []string{"", "https://obs.example.com/only.jpg", ""},
+	}, "device-1", "15", "9.9.6")
+	attach, ok := form["applyAttach"].([]map[string]interface{})
+	if !ok || len(attach) != 1 || attach[0]["url"] != "https://obs.example.com/only.jpg" {
+		t.Errorf("空串应被剔除: %v", form["applyAttach"])
+	}
+
+	form2 := BuildLeaveApplyForm(LeaveApplyParams{
+		LeaveType: 1, StartTime: "2026-09-15 08:00:00", EndTime: "2026-09-15 18:00:00",
+		LeaveReason: "身体不适需休息", Longitude: "118.1", Latitude: "24.6", LocationAddr: "校内",
+		ImageURLs: []string{"", ""},
+	}, "device-1", "15", "9.9.6")
+	if attach2, ok := form2["applyAttach"].([]interface{}); !ok || len(attach2) != 0 {
+		t.Errorf("全空时应为空数组: %v", form2["applyAttach"])
+	}
+}

backed/internal/service/cpdaily/leave_new_test.go

@@ -0,0 +1,165 @@
+package cpdaily
+
+import (
+	"testing"
+)
+
+// TestLeaveNewObsKeyOf 验证 obsKey 推导（与官方前端 AA 函数一致）
+func TestLeaveNewObsKeyOf(t *testing.T) {
+	cases := []struct {
+		name string
+		url  string
+		want string
+	}{
+		{"普通路径", "https://counselor-cos-wecres.campusphere.net/counselor/leave/1020385267004784/attachment/abc.jpeg?sign=xxx", "/counselor/leave/1020385267004784/attachment/abc.jpeg"},
+		{"newBucket形态", "https://cdn.example.com/foo/newBucket/leave/abc.png", "newBucket/leave/abc.png"},
+		{"空URL", "", ""},
+	}
+	for _, c := range cases {
+		t.Run(c.name, func(t *testing.T) {
+			if got := LeaveNewObsKeyOf(c.url); got != c.want {
+				t.Errorf("LeaveNewObsKeyOf(%q) = %q, want %q", c.url, got, c.want)
+			}
+		})
+	}
+}
+
+// TestLeaveAppFlavorFromApps 验证应用列表 → 套件判定
+func TestLeaveNewCanReport(t *testing.T) {
+	cases := []struct {
+		status, reportMode string
+		want               bool
+	}{
+		{"3", "1", true},
+		{"4", "1", true},
+		{"3", "2", true},
+		{"4", "2", true},
+		{"3", "0", false},
+		{"4", "3", false},
+		{"2", "1", false},
+		{"7", "1", false},
+	}
+	for _, c := range cases {
+		got := leaveNewCanReport(LeaveNewItem{Status: c.status, ReportMode: c.reportMode})
+		if got != c.want {
+			t.Errorf("canReport(status=%s, reportMode=%s) = %v, want %v", c.status, c.reportMode, got, c.want)
+		}
+	}
+}
+
+// TestLeaveNewStatusText 验证状态文案映射完整
+func TestLeaveNewStatusText(t *testing.T) {
+	for _, code := range []string{"1", "2", "3", "4", "5", "6", "7", "8", "9", "10"} {
+		if LeaveNewStatusText[code] == "" {
+			t.Errorf("status %s 缺少文案映射", code)
+		}
+	}
+}
+
+// TestBuildLeaveNewReportForm 验证销假表单结构（含确认人与附件）
+func TestBuildLeaveNewReportForm(t *testing.T) {
+	approver := &LeaveNewApprover{UserWid: "92271929", UserId: "2022110006", UserName: "张文烨", RoleCode: "1003", RoleName: "辅导员", DeptName: "智能制造学院"}
+	form := BuildLeaveNewReportForm(LeaveNewReportParams{
+		LeaveID:   "e1529da9d4c94341b0b1f7f2278eb2ab",
+		Address:   "泰州学院",
+		Longitude: "119.948267",
+		Latitude:  "32.474102",
+		Approver:  approver,
+	})
+	if form["leaveId"] != "e1529da9d4c94341b0b1f7f2278eb2ab" {
+		t.Errorf("leaveId 缺失: %v", form["leaveId"])
+	}
+	loc, ok := form["location"].(map[string]interface{})
+	if !ok || loc["address"] != "泰州学院" {
+		t.Errorf("location 结构错误: %v", form["location"])
+	}
+	if form["approverWid"] != "92271929" || form["approverRoleCode"] != "1003" {
+		t.Errorf("确认人字段错误: approverWid=%v approverRoleCode=%v", form["approverWid"], form["approverRoleCode"])
+	}
+	if attachs, ok := form["attachs"].([]interface{}); !ok || len(attachs) != 0 {
+		t.Errorf("无附件时 attachs 应为空数组: %v", form["attachs"])
+	}
+
+	form2 := BuildLeaveNewReportForm(LeaveNewReportParams{
+		LeaveID: "x", Address: "a", Longitude: "1", Latitude: "2",
+		ImageURL: "https://cos.example.com/counselor/leave/1/attachment/a.jpeg?sign=1",
+	})
+	attachs2 := form2["attachs"].([]map[string]interface{})
+	if len(attachs2) != 1 || attachs2[0]["obsKey"] != "/counselor/leave/1/attachment/a.jpeg" {
+		t.Errorf("附件结构错误: %v", attachs2)
+	}
+}
+
+// TestBuildLeaveNewApplyForm 验证请假表单结构（离校/不离校两分支 + 抄送人）
+func TestBuildLeaveNewApplyForm(t *testing.T) {
+	approver := &LeaveNewApprover{UserWid: "92271929", UserId: "2022110006", UserName: "张文烨"}
+	form := BuildLeaveNewApplyForm(LeaveNewApplyParams{
+		TypeWid:         8214,
+		BeginTime:       "2026-09-16 08:00",
+		EndTime:         "2026-09-16 18:00",
+		LeaveReason:     "测试原因",
+		LocationAddr:    "泰州学院",
+		Longitude:       "119.9",
+		Latitude:        "32.4",
+		IsLeaveOut:      1,
+		Destination:     "江苏省/南京市/玄武区",
+		Detail:          "某地",
+		EmergencyName:   "张三",
+		EmergencyMobile: "13800000000",
+		Approver:        approver,
+		CcUsers:         []LeaveNewApprover{{UserWid: "1", UserId: "s1", UserName: "李四", RoleCode: "1003"}},
+		ImageURLs: []string{
+			"https://cos.example.com/counselor/leave/1/attachment/a.jpeg?sign=1",
+			"https://cos.example.com/counselor/leave/1/attachment/b.png?sign=2",
+		},
+	})
+	if form["typeWid"] != 8214 {
+		t.Errorf("typeWid 错误: %v", form["typeWid"])
+	}
+	attachs := form["attachs"].([]map[string]interface{})
+	if len(attachs) != 2 {
+		t.Fatalf("多附件应为 2 张: %v", attachs)
+	}
+	if attachs[0]["attachUrl"] != "https://cos.example.com/counselor/leave/1/attachment/a.jpeg?sign=1" ||
+		attachs[0]["obsKey"] != "/counselor/leave/1/attachment/a.jpeg" {
+		t.Errorf("第 1 张附件结构错误: %v", attachs[0])
+	}
+	if attachs[1]["attachUrl"] != "https://cos.example.com/counselor/leave/1/attachment/b.png?sign=2" ||
+		attachs[1]["obsKey"] != "/counselor/leave/1/attachment/b.png" {
+		t.Errorf("第 2 张附件结构错误: %v", attachs[1])
+	}
+	if attachs[0]["attachType"] != 1 || attachs[1]["attachType"] != 1 {
+		t.Errorf("attachType 应为 1: %v", attachs)
+	}
+	lo := form["leaveOutInfo"].(map[string]interface{})
+	if lo["isLeaveOut"] != 1 || lo["destination"] != "江苏省/南京市/玄武区" || lo["emergencyConcat"] != "张三" {
+		t.Errorf("leaveOutInfo 错误: %v", lo)
+	}
+	cc := form["ccObjects"].([]map[string]interface{})
+	if len(cc) != 1 || cc[0]["userWid"] != "1" || cc[0]["source"] != "2" {
+		t.Errorf("ccObjects 错误: %v", cc)
+	}
+
+	// 不离校分支：离校字段应清空
+	form2 := BuildLeaveNewApplyForm(LeaveNewApplyParams{TypeWid: 8216, IsLeaveOut: 0, Destination: "不该出现", EmergencyMobile: "138"})
+	lo2 := form2["leaveOutInfo"].(map[string]interface{})
+	if lo2["destination"] != "" || lo2["emergencyMobile"] != "" {
+		t.Errorf("不离校时离校字段应清空: %v", lo2)
+	}
+	if attachs2, ok := form2["attachs"].([]map[string]interface{}); !ok || len(attachs2) != 0 {
+		t.Errorf("无附件时 attachs 应为空数组: %v", form2["attachs"])
+	}
+}
+
+// TestLeaveNewResultErr 验证响应码解析（code 为字符串 "0"）
+func TestLeaveNewResultErr(t *testing.T) {
+	if _, err := leaveNewResultErr([]byte(`{"code":"0","message":"SUCCESS","datas":{}}`), "测试"); err != nil {
+		t.Errorf("code=0 不应报错: %v", err)
+	}
+	if _, err := leaveNewResultErr([]byte(`{"code":"-1","message":"参数错误"}`), "测试"); err == nil || err.Error() != "参数错误" {
+		t.Errorf("非 0 应返回 message: %v", err)
+	}
+	if _, err := leaveNewResultErr([]byte(`<html>404</html>`), "测试"); err == nil {
+		t.Error("非 JSON 应报错")
+	}
+}

backed/internal/service/cpdaily/leave_return.go

@@ -0,0 +1,239 @@
+package cpdaily
+
+import (
+	"encoding/json"
+	"fmt"
+	"io"
+	"log/slog"
+	"strconv"
+	"strings"
+)
+
+// ========== 节假日离返校（wec-counselor-leave-return-apps）返校登记 ==========
+//
+// 该应用为部分学校（如合肥大学）的"节假日离返校"应用，学生端流程为：
+//   离校登记（登记假期去向）→ 假期结束返校时「返校登记 / 确认到达」（提交返校位置）。
+// 本文件只覆盖「返校登记/确认到达」：列出待办 + 提交返校位置。
+//
+// 接口（明文 JSON，Header 与签到一致：CpdailyClientType: CPDAILY）：
+//   POST /stu/leave/queryReturnConfigList  返校确认位置配置（校区坐标 + 半径）
+//   POST /stu/leave/queryStuRegisterList   登记列表（hasHistory=false 取当前待办）
+//   POST /stu/leave/submitStuReturnRegisterInfo  提交返校登记
+//
+// 待办判定：status=="1"（返校登记阶段）且 returnRegisterInfo==null（尚未登记返校）。
+
+const leaveReturnAPIBase = "/wec-counselor-leave-return-apps"
+
+// LeaveReturnPlace 返校确认位置（校区坐标 + 允许半径）
+type LeaveReturnPlace struct {
+	Wid       int     `json:"wid"`
+	Address   string  `json:"address"`
+	Longitude string  `json:"longitude"`
+	Latitude  string  `json:"latitude"`
+	Scope     float64 `json:"scope"` // 允许半径（米）
+}
+
+// LeaveReturnTask 待办返校登记（一名学生在一期离返校任务中的返校登记）
+type LeaveReturnTask struct {
+	TaskWid   int    `json:"taskWid"`
+	StuWid    int    `json:"stuWid"`
+	LeaveName string `json:"leaveName"`  // 如「2026年中秋节离返校」
+	StartTime string `json:"startTime"`  // 假期开始
+	EndTime   string `json:"endTime"`    // 假期结束
+	SignType  int    `json:"signType"`   // 1=范围内 2=范围外（提交时按坐标计算）
+	Disclaimer string `json:"disclaimer"` // 承诺书文案（透传给前端展示）
+}
+
+// leaveReturnPost 通用 POST（明文 JSON，与签到同 Header）
+func leaveReturnPost(cookieMap map[string]string, url string, body interface{}) ([]byte, error) {
+	client := newTaskClient()
+	resp, err := client.R().
+		SetHeader("User-Agent", "Mozilla/5.0 (Linux; Android 15; Redmi Note 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/131.0.6778.81 Mobile Safari/537.36 cpdaily/9.9.6 wisedu/9.9.6").
+		SetHeader("CpdailyClientType", "CPDAILY").
+		SetHeader("Content-Type", "application/json; charset=UTF-8").
+		SetHeader("Cookie", cookiesToStr(cookieMap)).
+		SetBody(body).
+		Post(url)
+	if err != nil {
+		return nil, err
+	}
+	defer resp.RawBody().Close()
+	respBody, err := io.ReadAll(resp.RawBody())
+	if err != nil {
+		return nil, err
+	}
+	if code := resp.StatusCode(); code < 200 || code >= 300 {
+		return respBody, fmt.Errorf("学校服务端响应异常(HTTP %d): %s", code, strings.TrimSpace(string(respBody)))
+	}
+	if len(respBody) == 0 {
+		return respBody, fmt.Errorf("学校服务端返回空响应(HTTP %d)", resp.StatusCode())
+	}
+	return respBody, nil
+}
+
+// FetchLeaveReturnPlaces 返校确认位置配置（取第一条；该校通常一个校区）
+func FetchLeaveReturnPlaces(cookieMap map[string]string, host string) ([]LeaveReturnPlace, error) {
+	body, err := leaveReturnPost(cookieMap, host+leaveReturnAPIBase+"/stu/leave/queryReturnConfigList", map[string]interface{}{
+		"pageNumber": 1,
+		"pageSize":   20,
+	})
+	if err != nil {
+		return nil, fmt.Errorf("获取返校位置配置失败: %w", err)
+	}
+	var result struct {
+		Code  string `json:"code"`
+		Datas struct {
+			Rows []LeaveReturnPlace `json:"rows"`
+		} `json:"datas"`
+	}
+	if err := unmarshalBody(body, &result); err != nil {
+		return nil, fmt.Errorf("解析返校位置配置失败: %w (body: %.200s)", err, string(body))
+	}
+	if result.Code != "0" {
+		return nil, fmt.Errorf("返校位置配置接口返回异常(code=%s)", result.Code)
+	}
+	return result.Datas.Rows, nil
+}
+
+// leaveReturnListRow queryStuRegisterList 行
+type leaveReturnListRow struct {
+	TaskWid            int             `json:"taskWid"`
+	StuWid             int             `json:"stuWid"`
+	Status             string          `json:"status"`
+	LeaveName          string          `json:"leaveName"`
+	StartTime          string          `json:"startTime"`
+	EndTime            string          `json:"endTime"`
+	ReturnSignType     string          `json:"returnSignType"`
+	Disclaimer         string          `json:"disclaimer"`
+	ReturnRegisterInfo json.RawMessage `json:"returnRegisterInfo"`
+}
+
+// FetchLeaveReturnPending 待办返校登记：status=="1" 且 returnRegisterInfo 为空的行。
+// hasHistory=false 表示只取当前（未归档）任务。
+func FetchLeaveReturnPending(cookieMap map[string]string, host string) ([]LeaveReturnTask, error) {
+	body, err := leaveReturnPost(cookieMap, host+leaveReturnAPIBase+"/stu/leave/queryStuRegisterList", map[string]interface{}{
+		"hasHistory": false,
+		"pageNumber": 1,
+		"pageSize":   20,
+	})
+	if err != nil {
+		return nil, fmt.Errorf("获取返校登记列表失败: %w", err)
+	}
+	var result struct {
+		Code  string `json:"code"`
+		Datas struct {
+			Rows []leaveReturnListRow `json:"rows"`
+		} `json:"datas"`
+	}
+	if err := unmarshalBody(body, &result); err != nil {
+		return nil, fmt.Errorf("解析返校登记列表失败: %w (body: %.200s)", err, string(body))
+	}
+	if result.Code != "0" {
+		return nil, fmt.Errorf("返校登记列表接口返回异常(code=%s)", result.Code)
+	}
+	return leaveReturnTasksFromRows(result.Datas.Rows), nil
+}
+
+// leaveReturnTasksFromRows 从列表行中筛出待办返校登记：
+// status=="1"（返校登记阶段）且 returnRegisterInfo 为空（尚未登记返校）。
+func leaveReturnTasksFromRows(rows []leaveReturnListRow) []LeaveReturnTask {
+	out := make([]LeaveReturnTask, 0)
+	for _, r := range rows {
+		if r.Status != "1" {
+			continue
+		}
+		ri := strings.TrimSpace(string(r.ReturnRegisterInfo))
+		if ri != "" && ri != "null" {
+			continue // 已登记返校
+		}
+		signType := 1
+		if strings.TrimSpace(r.ReturnSignType) == "2" {
+			signType = 2
+		}
+		out = append(out, LeaveReturnTask{
+			TaskWid:    r.TaskWid,
+			StuWid:     r.StuWid,
+			LeaveName:  r.LeaveName,
+			StartTime:  r.StartTime,
+			EndTime:    r.EndTime,
+			SignType:   signType,
+			Disclaimer: r.Disclaimer,
+		})
+	}
+	return out
+}
+
+// LeaveReturnSignWidOf 从返校登记任务派生 SignWid（"taskWid:stuWid"，供统一任务体系存取）
+func LeaveReturnSignWidOf(taskWid, stuWid int) string {
+	return fmt.Sprintf("%d:%d", taskWid, stuWid)
+}
+
+// ParseLeaveReturnSignWid 解析 SignWid → (taskWid, stuWid)
+func ParseLeaveReturnSignWid(signWid string) (int, int, error) {
+	parts := strings.SplitN(strings.TrimSpace(signWid), ":", 2)
+	if len(parts) != 2 {
+		return 0, 0, fmt.Errorf("返校登记标识格式错误: %q", signWid)
+	}
+	taskWid, err1 := strconv.Atoi(parts[0])
+	stuWid, err2 := strconv.Atoi(parts[1])
+	if err1 != nil || err2 != nil {
+		return 0, 0, fmt.Errorf("返校登记标识解析失败: %q", signWid)
+	}
+	return taskWid, stuWid, nil
+}
+
+// FetchReturnRegisterTasks 返校登记待办 → 统一任务项（供打卡任务标题来源）。
+// TaskName=假期名；SignWid="taskWid:stuWid"。
+func FetchReturnRegisterTasks(cookieMap map[string]string, host string) ([]TodayTaskInfo, error) {
+	pending, err := FetchLeaveReturnPending(cookieMap, host)
+	if err != nil {
+		return nil, err
+	}
+	out := make([]TodayTaskInfo, 0, len(pending))
+	for _, t := range pending {
+		out = append(out, TodayTaskInfo{
+			TaskName: t.LeaveName,
+			SignWid:  LeaveReturnSignWidOf(t.TaskWid, t.StuWid),
+			IsSigned: false,
+			TaskType: string(TaskTypeReturnRegister),
+		})
+	}
+	return out, nil
+}
+
+// SubmitLeaveReturnRegister 提交返校登记（确认到达）
+// taskWid/stuWid 取自列表；address/longitude/latitude 为返校位置。
+// 范围内使用配置坐标（signType=1）；范围外（signType=2）须填原因。
+func SubmitLeaveReturnRegister(cookieMap map[string]string, host string, taskWid, stuWid int, address, longitude, latitude string, signType int, outsideReason string) error {
+	payload := map[string]interface{}{
+		"taskWid":         taskWid,
+		"stuWid":          stuWid,
+		"returnAddress":   address,
+		"returnLongitude": longitude,
+		"returnLatitude":  latitude,
+		"returnSignType":  fmt.Sprintf("%d", signType),
+	}
+	if signType == 2 {
+		payload["outsideSignReason"] = outsideReason
+	}
+	body, err := leaveReturnPost(cookieMap, host+leaveReturnAPIBase+"/stu/leave/submitStuReturnRegisterInfo", payload)
+	if err != nil {
+		return fmt.Errorf("提交返校登记失败: %w", err)
+	}
+	var result struct {
+		Code    string `json:"code"`
+		Message string `json:"message"`
+	}
+	if err := unmarshalBody(body, &result); err != nil {
+		return fmt.Errorf("解析返校登记响应失败: %w (body: %.300s)", err, string(body))
+	}
+	slog.Info("leave-return/submit 响应", "code", result.Code, "message", result.Message)
+	if result.Code != "0" {
+		msg := strings.TrimSpace(result.Message)
+		if msg == "" || msg == "failed" {
+			msg = "返校登记失败，请稍后重试"
+		}
+		return fmt.Errorf("%s", msg)
+	}
+	return nil
+}

backed/internal/service/cpdaily/leave_return_test.go

@@ -0,0 +1,40 @@
+package cpdaily
+
+import "testing"
+
+// TestLeaveReturnSignWidRoundTrip 任务标识 "taskWid:stuWid" 编解码
+func TestLeaveReturnSignWidRoundTrip(t *testing.T) {
+	s := LeaveReturnSignWidOf(25, 471179)
+	if s != "25:471179" {
+		t.Fatalf("LeaveReturnSignWidOf = %q", s)
+	}
+	tw, sw, err := ParseLeaveReturnSignWid(s)
+	if err != nil || tw != 25 || sw != 471179 {
+		t.Fatalf("ParseLeaveReturnSignWid(%q) = %d,%d,%v", s, tw, sw, err)
+	}
+	if _, _, err := ParseLeaveReturnSignWid("bad"); err == nil {
+		t.Fatalf("非法标识应报错")
+	}
+}
+
+// TestLeaveReturnTasksFromRows 待办筛选：仅 status=1 且 returnRegisterInfo 为空才算待办。
+func TestLeaveReturnTasksFromRows(t *testing.T) {
+	rows := []leaveReturnListRow{
+		{TaskWid: 25, StuWid: 471179, Status: "1", LeaveName: "2026年中秋节离返校", ReturnRegisterInfo: []byte("null")}, // 待办
+		{TaskWid: 25, StuWid: 471179, Status: "0", LeaveName: "2026年中秋节离返校"},                                     // 非返校阶段
+		{TaskWid: 24, StuWid: 455702, Status: "1", LeaveName: "26年暑假离返校",
+			ReturnRegisterInfo: []byte(`{"returnTime":"2026-09-04 11:21"}`)}, // 已登记
+		{TaskWid: 22, StuWid: 1, Status: "1", LeaveName: "五一离返校",
+			ReturnSignType: "2"}, // 待办，范围外
+	}
+	got := leaveReturnTasksFromRows(rows)
+	if len(got) != 2 {
+		t.Fatalf("期望 2 条待办, got %d: %+v", len(got), got)
+	}
+	if got[0].TaskWid != 25 || got[0].StuWid != 471179 || got[0].SignType != 1 {
+		t.Errorf("第 1 条待办不符: %+v", got[0])
+	}
+	if got[1].TaskWid != 22 || got[1].SignType != 2 {
+		t.Errorf("第 2 条待办（范围外）不符: %+v", got[1])
+	}
+}

backed/internal/service/cpdaily/login_cas.go

@@ -100,6 +100,8 @@ func casLogin(ctx context.Context, school *SchoolDetailInfo, username, password
 
 	// 4. 解析表单
 	allInputs := parseLoginForm(loginPageBytes, username, password)
+	// CAS-PaaS 定制 CAS：密码需 RSA 加密（"__RSA__"+密文），覆盖上面解出的明文密码
+	casPaasEncryptIfNeeded(sc.Client, loginResponseUrl, loginPageBytes, allInputs, password)
 	slog.Info("CAS表单解析", "inputs", fmt.Sprintf("%v", allInputs))
 
 	// 5. 判断是否需要验证码

backed/internal/service/cpdaily/login_caspaas.go

@@ -0,0 +1,84 @@
+package cpdaily
+
+import (
+	"encoding/base64"
+	"encoding/hex"
+	"fmt"
+	"log/slog"
+	"net/url"
+	"strings"
+
+	"github.com/go-resty/resty/v2"
+)
+
+// ========== CAS-PaaS（深信息 suncaper 定制 CAS）适配 ==========
+//
+// 部分学校（如兰州理工大学 cas-paas.lut.edu.cn）使用 CAS-PaaS 统一身份认证：
+// 登录页为 JS 渲染，密码需用 RSA（JSEncrypt）加密后提交，格式为 "__RSA__" + RSA密文。
+// 公钥来自登录页同域接口 /cas/jwt/publicKey（PEM 格式）。
+//
+// 判定：登录页 HTML 同时含 "/cas/jwt/publicKey" 或 "__RSA__" 特征。
+
+// isCasPaasLoginPage 登录页是否为 CAS-PaaS 定制 CAS
+func isCasPaasLoginPage(page []byte) bool {
+	s := string(page)
+	return strings.Contains(s, "/cas/jwt/publicKey") || strings.Contains(s, "__RSA__")
+}
+
+// casPaasEncryptPassword 拉取 CAS-PaaS 公钥并加密密码，返回 "__RSA__"+密文。
+// casHost 形如 https://cas-paas.lut.edu.cn
+func casPaasEncryptPassword(client *resty.Client, casHost, password string) (string, error) {
+	resp, err := client.R().Get(casHost + "/cas/jwt/publicKey")
+	if err != nil {
+		return "", fmt.Errorf("获取 CAS-PaaS 公钥失败: %w", err)
+	}
+	pub := strings.TrimSpace(string(readBody(resp)))
+	// 去掉 PEM 头尾，取 base64 主体（NewRSAKeyPairFromPublicKey 接收 base64）
+	pub = strings.ReplaceAll(pub, "-----BEGIN PUBLIC KEY-----", "")
+	pub = strings.ReplaceAll(pub, "-----END PUBLIC KEY-----", "")
+	pub = strings.ReplaceAll(pub, "\n", "")
+	pub = strings.ReplaceAll(pub, "\r", "")
+	pub = strings.TrimSpace(pub)
+	if pub == "" {
+		return "", fmt.Errorf("CAS-PaaS 公钥为空")
+	}
+	key, err := NewRSAKeyPairFromPublicKey(pub)
+	if err != nil {
+		return "", fmt.Errorf("解析 CAS-PaaS 公钥失败: %w", err)
+	}
+	encHex, err := key.Encrypt(password)
+	if err != nil {
+		return "", fmt.Errorf("CAS-PaaS 密码加密失败: %w", err)
+	}
+	// JSEncrypt 的 encrypt() 返回 base64；本仓库 RSAKeyPair.Encrypt 返回 hex，需转 base64。
+	// Go 侧 hex→bytes→base64 与 JS 的 b64tohex 逆运算一致（均为无符号大端字节序列）。
+	raw, err := hex.DecodeString(encHex)
+	if err != nil {
+		return "", fmt.Errorf("CAS-PaaS 密文转码失败: %w", err)
+	}
+	enc := base64.StdEncoding.EncodeToString(raw)
+	return "__RSA__" + enc, nil
+}
+
+// casPaasBaseOf 由登录页 URL 推导 CAS-PaaS 基础地址（scheme://host）
+func casPaasBaseOf(loginURL *url.URL) string {
+	if loginURL == nil {
+		return ""
+	}
+	return loginURL.Scheme + "://" + loginURL.Host
+}
+
+// casPaasEncryptIfNeeded 若登录页为 CAS-PaaS，则把表单密码替换为加密值，返回是否已处理。
+func casPaasEncryptIfNeeded(client *resty.Client, loginURL *url.URL, page []byte, inputs map[string]string, password string) bool {
+	if !isCasPaasLoginPage(page) {
+		return false
+	}
+	enc, err := casPaasEncryptPassword(client, casPaasBaseOf(loginURL), password)
+	if err != nil {
+		slog.Warn("CAS-PaaS 密码加密失败", "error", err)
+		return false
+	}
+	inputs["password"] = enc
+	slog.Info("CAS-PaaS 密码已加密")
+	return true
+}

backed/internal/service/cpdaily/login_caspaas_test.go

@@ -0,0 +1,49 @@
+package cpdaily
+
+import (
+	"encoding/base64"
+	"encoding/hex"
+	"testing"
+)
+
+// TestIsCasPaasLoginPage CAS-PaaS 登录页特征识别
+func TestIsCasPaasLoginPage(t *testing.T) {
+	if !isCasPaasLoginPage([]byte(`<script src="/cas/deps/js/jsencrypt.min.js"></script>var url="/cas/jwt/publicKey"`)) {
+		t.Error("含 /cas/jwt/publicKey 应判定为 CAS-PaaS")
+	}
+	if !isCasPaasLoginPage([]byte(`var encodedPassword = "__RSA__"+encrypt.encrypt(password);`)) {
+		t.Error("含 __RSA__ 应判定为 CAS-PaaS")
+	}
+	if isCasPaasLoginPage([]byte(`<form id="casLoginForm" action="/authserver/login">`)) {
+		t.Error("普通 wisedu CAS 不应判定为 CAS-PaaS")
+	}
+}
+
+// TestCasPaasEncryptFormat CAS-PaaS 密码密文格式：__RSA__ + base64(PKCS#1 v1.5)。
+// 用固定 PEM 公钥验证：前缀正确、密文 base64 可解码且长度等于模长。
+func TestCasPaasEncryptFormat(t *testing.T) {
+	// 用仓库内 RSA 工具直接产出一个 base64 密文，校验与 CAS-PaaS 一致（hex→base64）
+	key, err := NewRSAKeyPairFromPublicKey(testPubKeyB64)
+	if err != nil {
+		t.Fatalf("构造公钥失败: %v", err)
+	}
+	encHex, err := key.Encrypt("pw")
+	if err != nil {
+		t.Fatalf("加密失败: %v", err)
+	}
+	raw, err := hex.DecodeString(encHex)
+	if err != nil {
+		t.Fatalf("hex 解码失败: %v", err)
+	}
+	b64 := base64.StdEncoding.EncodeToString(raw)
+	if _, err := base64.StdEncoding.DecodeString(b64); err != nil {
+		t.Fatalf("base64 解码失败: %v", err)
+	}
+	// 长度应为模长（2048 位 → 256 字节）；此处用 1024 位测试密钥 → 128 字节
+	if len(raw) != 128 {
+		t.Fatalf("密文长度应为 128（1024 位模长），got %d", len(raw))
+	}
+}
+
+// testPubKeyB64 1024 位 RSA 公钥（base64 DER/PKIX），仅测试用
+const testPubKeyB64 = "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCqGKukO1De7zhZj6+H0qtjTkVxwTCpvKe4eCZ0FPqri0cb2JZfXJ/DgYSF6vUpwmJG8wVQZKjeGcjDOL5UlsuusFncCzWBQ7RKNUSesmQRMSGkVb1/3j+skZ6UtW+5u09lHNsj6tQ51s1SPrCBkedbNf0Tp0GbMJDyR4e9T04ZZwIDAQAB"

backed/internal/service/cpdaily/login_lntu.go

@@ -0,0 +1,43 @@
+package cpdaily
+
+import (
+	"context"
+	"net/http"
+	"strings"
+)
+
+// ========== 辽宁工程技术大学（lntu）单独适配 ==========
+
+// LntuSchoolId 辽宁工程技术大学 tenant id
+const LntuSchoolId = "lntu"
+
+// lntuCasLoginEntry 计算辽宁工程技术大学 CAS 登录入口：
+// 网关域 fdm.lntu.edu.cn 的 /iap（school.IdsUrl）会 302 到学校 CAS
+// （authserver.lntu.edu.cn/authserver/login），service 参数携带网关回调
+// /iap/loginSuccess?sessionToken=...；走完 CAS 账密后回调该地址，
+// cookie 才能正确落在 fdm.lntu.edu.cn 域（wec-* 任务接口所在域）。
+func lntuCasLoginEntry(school *SchoolDetailInfo) string {
+	if school == nil {
+		return ""
+	}
+	if school.IdsUrl != "" && strings.Contains(school.IdsUrl, "/iap") {
+		return school.IdsUrl
+	}
+	if school.WecloudUrl != "" {
+		return strings.TrimSuffix(school.WecloudUrl, "/") + "/iap"
+	}
+	return school.AmpUrl
+}
+
+// lntuCasLogin 辽宁工程技术大学强制走 CAS：
+// 平台接口返回 joinType=CLOUD（IsIap()=true），但网关 /iap/doLogin 不存在（HTTP 405），
+// IAP 账密提交必然失败并报 FAIL_UPNOTMATCH（"用户名或密码不匹配"，误导用户）；
+// 实际链路为 IAP 入口（fdm.lntu.edu.cn/iap）302 → 学校 CAS 账密 → 回调
+// /iap/loginSuccess 建立网关会话。因此强制走 CAS 流程（同许昌学院 xcu 模式）。
+func lntuCasLogin(ctx context.Context, school *SchoolDetailInfo, username, password string) ([]*http.Cookie, *MFAContext, error) {
+	lntu := *school
+	if entry := lntuCasLoginEntry(school); entry != "" {
+		lntu.AmpUrl = entry
+	}
+	return casLogin(ctx, &lntu, username, password)
+}

backed/internal/service/cpdaily/login_lntu_test.go

@@ -0,0 +1,91 @@
+package cpdaily
+
+import "testing"
+
+// TestLntuCasLoginEntry 覆盖辽宁工程技术大学 CAS 登录入口计算逻辑
+func TestLntuCasLoginEntry(t *testing.T) {
+	cases := []struct {
+		name   string
+		school *SchoolDetailInfo
+		want   string
+	}{
+		{
+			name:   "正常idsUrl（/iap 网关入口）",
+			school: &SchoolDetailInfo{IdsUrl: "https://fdm.lntu.edu.cn/iap"},
+			want:   "https://fdm.lntu.edu.cn/iap",
+		},
+		{
+			name:   "idsUrl缺失回退wecloud+/iap",
+			school: &SchoolDetailInfo{WecloudUrl: "https://fdm.lntu.edu.cn"},
+			want:   "https://fdm.lntu.edu.cn/iap",
+		},
+		{
+			name:   "wecloud带尾斜杠",
+			school: &SchoolDetailInfo{WecloudUrl: "https://fdm.lntu.edu.cn/"},
+			want:   "https://fdm.lntu.edu.cn/iap",
+		},
+		{
+			name:   "idsUrl非iap路径回退wecloud",
+			school: &SchoolDetailInfo{IdsUrl: "https://ids.lntu.edu.cn/authserver", WecloudUrl: "https://fdm.lntu.edu.cn"},
+			want:   "https://fdm.lntu.edu.cn/iap",
+		},
+		{
+			name:   "均缺失回退ampUrl",
+			school: &SchoolDetailInfo{AmpUrl: "https://fdm.lntu.edu.cn/wec-portal-mobile/client"},
+			want:   "https://fdm.lntu.edu.cn/wec-portal-mobile/client",
+		},
+		{
+			name:   "均为空",
+			school: &SchoolDetailInfo{},
+			want:   "",
+		},
+		{
+			name:   "nil学校",
+			school: nil,
+			want:   "",
+		},
+	}
+	for _, c := range cases {
+		t.Run(c.name, func(t *testing.T) {
+			if got := lntuCasLoginEntry(c.school); got != c.want {
+				t.Errorf("lntuCasLoginEntry() = %q, want %q", got, c.want)
+			}
+		})
+	}
+}
+
+// TestLntuCasLoginEntryOverridesAmpUrl 确认 lntuCasLogin 用网关入口覆盖 ampUrl 后走 CAS 流程
+func TestLntuCasLoginEntryOverridesAmpUrl(t *testing.T) {
+	school := &SchoolDetailInfo{
+		ID:         LntuSchoolId,
+		Name:       "辽宁工程技术大学",
+		JoinType:   "CLOUD", // 平台标记为 CLOUD，但 IAP 不可用，需强制 CAS
+		IdsUrl:     "https://fdm.lntu.edu.cn/iap",
+		WecloudUrl: "https://fdm.lntu.edu.cn",
+		AmpUrl:     "https://fdm.lntu.edu.cn/wec-portal-mobile/client",
+	}
+	// 模拟 lntuCasLogin 内部的入口覆盖（不发起网络请求）
+	clone := *school
+	clone.AmpUrl = lntuCasLoginEntry(school)
+	if got := getCasValidLoginUrl(&clone); got != "https://fdm.lntu.edu.cn/iap" {
+		t.Errorf("getCasValidLoginUrl() = %q, want 网关 /iap 入口", got)
+	}
+	// 原对象不被修改
+	if school.AmpUrl != "https://fdm.lntu.edu.cn/wec-portal-mobile/client" {
+		t.Errorf("原 school 对象 ampUrl 被意外修改: %q", school.AmpUrl)
+	}
+}
+
+// TestLntuIsSliderCaptchaSchool 确认 lntu 归入滑块验证码学校需通过配置声明
+// （captchaSwitch=2 + createSliderCaptcha → /common/toSliderCaptcha.htl，与 hqdx 同协议）
+func TestLntuSliderProtocolSameAsHqu(t *testing.T) {
+	// 协议一致性由配置驱动：lntu 与 hqdx 共用 resolveWiseduSliderCaptcha
+	//（openSliderCaptcha.htl 取图 → 打码 → verifySliderCaptcha.htl sign 提交）。
+	// 此处仅断言常量存在且不与其他学校 ID 冲突。
+	if LntuSchoolId == "" || LntuSchoolId != "lntu" {
+		t.Errorf("LntuSchoolId = %q, want lntu", LntuSchoolId)
+	}
+	if HquSchoolId == LntuSchoolId {
+		t.Errorf("lntu 与 hqdx 学校 ID 冲突")
+	}
+}

backed/internal/service/cpdaily/login_lut.go

@@ -0,0 +1,45 @@
+package cpdaily
+
+import (
+	"context"
+	"net/http"
+	"strings"
+)
+
+// ========== 兰州理工大学（lut）单独适配 ==========
+
+// LutSchoolId 兰州理工大学 tenant id
+const LutSchoolId = "28fbe96b-cb5e-44a1-b31a-e6a44a556fe8"
+
+// lutCasLoginEntry 兰州理工大学 CAS 登录入口：
+// wecloud/ampUrl（fdm.lut.edu.cn）的 /iap 或 /wec-portal-mobile/client 会 302 到
+// 学校统一身份认证（cas-paas.lut.edu.cn/cas/login），service 携带网关回调
+// /iap/loginSuccess?sessionToken=...；从网关入口进入才能让回调后 cookie 落在
+// fdm.lut.edu.cn 域（wec-* 任务接口所在域）。
+func lutCasLoginEntry(school *SchoolDetailInfo) string {
+	if school == nil {
+		return ""
+	}
+	if school.AmpUrl != "" {
+		return school.AmpUrl
+	}
+	if school.WecloudUrl != "" {
+		return strings.TrimSuffix(school.WecloudUrl, "/") + "/iap"
+	}
+	return school.IdsUrl
+}
+
+// lutCasLogin 兰州理工大学强制走 CAS：
+// 平台配置 joinType=CLOUD（IsIap=true），但学校实际使用 CAS-PaaS 统一身份认证
+// （cas-paas.lut.edu.cn/cas/login，密码需 RSA 加密，前缀 "__RSA__"），
+// IAP 账密接口提交报 FAIL_UPNOTMATCH（误导为"密码错误"）。
+// 真实链路为网关入口 302 → CAS-PaaS 账密（RSA 加密密码）→ 回调 /iap/loginSuccess。
+// casLogin 内已按登录页特征自动识别 CAS-PaaS 并加密密码（见 login_caspaas.go）。
+func lutCasLogin(ctx context.Context, school *SchoolDetailInfo, username, password string) ([]*http.Cookie, *MFAContext, error) {
+	lut := *school
+	if entry := lutCasLoginEntry(school); entry != "" {
+		lut.AmpUrl = entry
+		lut.IdsUrl = entry
+	}
+	return casLogin(ctx, &lut, username, password)
+}

backed/internal/service/cpdaily/login_xzmy.go

@@ -0,0 +1,206 @@
+package cpdaily
+
+import (
+	"context"
+	"encoding/hex"
+	"fmt"
+	"math/big"
+	"net/http"
+	"net/url"
+	"strings"
+
+	"github.com/go-resty/resty/v2"
+)
+
+// ========== 西藏民族大学（xzmy）单独适配 ==========
+
+// XzmySchoolId 西藏民族大学 tenant id
+const XzmySchoolId = "1019389288913029"
+
+// 该校统一身份认证平台公钥（来自 cas.xzmu.edu.cn 前端 app.js 的 config 对象）
+const (
+	xzmyRsaModulusHex = "00b5eeb166e069920e80bebd1fea4829d3d1f3216f2aabe79b6c47a3c18dcee5fd22c2e7ac519cab59198ece036dcf289ea8201e2a0b9ded307f8fb704136eaeb670286f5ad44e691005ba9ea5af04ada5367cd724b5a26fdb5120cc95b6431604bd219c6b7d83a6f8f24b43918ea988a76f93c333aa5a20991493d4eb1117e7b1"
+	xzmyRsaExpHex     = "010001"
+)
+
+// xzmyCasEntry 该校 CAS 登录入口：wecloud 网关的 /iap 会 302 到学校 CAS
+// （cas.xzmu.edu.cn/lyuapServer/login），service 携带网关回调
+// /iap/loginSuccess?sessionToken=...；从网关入口进入才能让回调后 cookie 落在
+// xzmy.campusphere.net 域（wec-* 任务接口所在域）。
+func xzmyCasEntry(school *SchoolDetailInfo) string {
+	if school == nil {
+		return ""
+	}
+	if school.WecloudUrl != "" {
+		return strings.TrimSuffix(school.WecloudUrl, "/") + "/iap"
+	}
+	if school.IdsUrl != "" {
+		return school.IdsUrl
+	}
+	return school.AmpUrl
+}
+
+// xzmyEncryptPassword 该校（Leyan/lyuapServer 定制 CAS）密码加密：
+// 教科书式 RSA（无填充）——明文按字符铺入 chunkSize 字节块（小端序），
+// m^e mod n 后输出小写 hex。与通用 wisedu 的 PKCS#1 v1.5（crypto/rsa.EncryptPKCS1v15）
+// 完全不同：该校后端按小端 hex 解出原文，用 PKCS#1 填充会解成乱码 → PASSERROR。
+// 对应前端库 app.js 模块 24 的加密函数 W（barrett.powMod(m, e) → hex）。
+func xzmyEncryptPassword(password string) (string, error) {
+	modBytes, err := hex.DecodeString(xzmyRsaModulusHex)
+	if err != nil {
+		return "", fmt.Errorf("解析公钥 modulus 失败: %w", err)
+	}
+	n := new(big.Int).SetBytes(modBytes)
+	chunkSize := (n.BitLen() + 7) / 8
+	block := make([]byte, chunkSize)
+	copy(block, []byte(password))
+	// 小端序组装明文块
+	m := new(big.Int)
+	for i := chunkSize - 1; i >= 0; i-- {
+		m.Lsh(m, 8)
+		m.Or(m, big.NewInt(int64(block[i])))
+	}
+	expBytes, _ := hex.DecodeString(xzmyRsaExpHex)
+	e := new(big.Int).SetBytes(expBytes)
+	c := new(big.Int).Exp(m, e, n)
+	return c.Text(16), nil
+}
+
+// xzmyCasLogin 西藏民族大学强制走其定制 CAS：
+// 平台接口返回 joinType=CLOUD（IsIap()=true），但网关 /iap/doLogin 实际不可用，
+// IAP 账密提交报 FAIL_UPNOTMATCH（误导为"密码错误"）；
+// 真实链路为 /iap 302 → cas.xzmu.edu.cn/lyuapServer/login →（表单 POST
+// /lyuapServer/v1/tickets，密码=教科书RSA小端hex）→ 得 TGT/ST →
+// 回调 /iap/loginSuccess?sessionToken=...&ticket=ST 建立网关会话（MOD_AUTH_CAS）。
+func xzmyCasLogin(ctx context.Context, school *SchoolDetailInfo, username, password string) ([]*http.Cookie, *MFAContext, error) {
+	entry := xzmyCasEntry(school)
+	if entry == "" {
+		return nil, nil, fmt.Errorf("西藏民族大学登录入口缺失")
+	}
+
+	sc := newSessionClient()
+
+	// 1. 从网关 /iap 进入，302 到 CAS，拿到带 service 的登录页地址
+	pageResp, err := sc.R().SetContext(ctx).Get(entry)
+	if err != nil {
+		return nil, nil, fmt.Errorf("请求登录入口失败: %w", err)
+	}
+	loginURL := pageResp.RawResponse.Request.URL.String()
+	if !strings.Contains(loginURL, "/lyuapServer/login") {
+		// 未落到 CAS 登录页（网关异常），退回通用 CAS 流程兜底
+		return casLogin(ctx, school, username, password)
+	}
+	casBase := fmt.Sprintf("%s://%s/lyuapServer", pageResp.RawResponse.Request.URL.Scheme, pageResp.RawResponse.Request.URL.Host)
+	service := ""
+	if u, perr := url.Parse(loginURL); perr == nil {
+		service = u.Query().Get("service")
+	}
+	if service == "" {
+		return nil, nil, fmt.Errorf("未获取到登录回调 service")
+	}
+
+	encPwd, err := xzmyEncryptPassword(password)
+	if err != nil {
+		return nil, nil, err
+	}
+
+	// 2. 提交账密到 /lyuapServer/v1/tickets（表单编码）
+	ticketResp, err := sc.R().SetContext(ctx).
+		SetHeader("Content-Type", "application/x-www-form-urlencoded").
+		SetFormData(map[string]string{
+			"username":  username,
+			"password":  encPwd,
+			"service":   service,
+			"loginType": "",
+			"id":        "",
+			"code":      "",
+		}).
+		Post(casBase + "/v1/tickets")
+	if err != nil {
+		return nil, nil, fmt.Errorf("提交登录失败: %w", err)
+	}
+	respBody := readBody(ticketResp)
+	tkt := parseXzmyTicket(string(respBody))
+	if tkt.ticket == "" {
+		// 有业务码则翻译为可读错误（NOAUTH/PASSERROR 等）
+		if msg := xzmyLoginError(string(respBody)); msg != "" {
+			return nil, nil, fmt.Errorf("%s", msg)
+		}
+		return nil, nil, fmt.Errorf("登录失败，请检查账号密码")
+	}
+
+	// 3. 回调 service + ticket 建立网关会话
+	sep := "&"
+	if !strings.Contains(service, "?") {
+		sep = "?"
+	}
+	sc.SetRedirectPolicy(resty.FlexibleRedirectPolicy(20))
+	cbResp, err := sc.R().SetContext(ctx).Get(service + sep + "ticket=" + tkt.ticket)
+	if err != nil {
+		return nil, nil, fmt.Errorf("回调建立会话失败: %w", err)
+	}
+	_ = cbResp
+
+	activateSession(ctx, school.WecloudUrl, sc.Client)
+
+	cookies := sc.jar.AllCookies()
+	hasMOD := false
+	for _, ck := range cookies {
+		if strings.HasPrefix(ck.Name, "MOD_") {
+			hasMOD = true
+			break
+		}
+	}
+	if !hasMOD {
+		return nil, nil, fmt.Errorf("登录失败，未获取到有效的认证信息")
+	}
+	return cookies, nil, nil
+}
+
+// xzmyTicketResult v1/tickets 成功响应
+type xzmyTicketResult struct {
+	tgt    string
+	ticket string
+}
+
+// parseXzmyTicket 解析 {"tgt":"...","ticket":"..."}
+func parseXzmyTicket(body string) xzmyTicketResult {
+	return xzmyTicketResult{
+		tgt:    jsonStrField(body, "tgt"),
+		ticket: jsonStrField(body, "ticket"),
+	}
+}
+
+// xzmyLoginError 解析登录失败的 meta.message / data.code，返回可读错误（无则空串）
+func xzmyLoginError(body string) string {
+	if code := jsonStrField(body, "code"); code != "" {
+		switch code {
+		case "PASSERROR", "PWDERROR", "PASSWORDERROR":
+			return "用户名或密码不匹配，请检查后重试"
+		case "NOAUTH", "USERNOTFOUND", "NOUSER":
+			return "账号不存在或未注册统一身份认证"
+		case "CODEFALSE":
+			return "验证码错误"
+		}
+		return code
+	}
+	if msg := jsonStrField(body, "message"); msg != "" && msg != "ok" {
+		return msg
+	}
+	return ""
+}
+
+// jsonStrField 从（可能嵌套的）JSON 文本中提取指定 key 的字符串值（简化实现，够用即止）
+func jsonStrField(body, key string) string {
+	needle := "\"" + key + "\":\""
+	i := strings.Index(body, needle)
+	if i < 0 {
+		return ""
+	}
+	i += len(needle)
+	j := strings.Index(body[i:], "\"")
+	if j < 0 {
+		return ""
+	}
+	return body[i : i+j]
+}

backed/internal/service/cpdaily/login_xzmy_test.go

@@ -0,0 +1,54 @@
+package cpdaily
+
+import (
+	"encoding/hex"
+	"math/big"
+	"testing"
+)
+
+// TestXzmyEncryptPassword 西藏民族大学密码加密：
+// 教科书式 RSA（无填充）+ 小端序零填充 + 小写 hex，与站点前端库一致。
+func TestXzmyEncryptPassword(t *testing.T) {
+	got, err := xzmyEncryptPassword("zzynb666")
+	if err != nil {
+		t.Fatalf("加密失败: %v", err)
+	}
+	// 金标准：由同一算法对 "zzynb666" 计算得到（该校 RSA 无填充，结果确定）
+	const golden = "1605e4173d74759db8ed176c1ba5c2e7a1fed2e1e9fb081977e1debb659868c6287c563b8baa74274339618bae9806defd96b3c4e779ac09f5e26ce03d593057998e212e271dacf547e5c53fded7d912113f8cbb52b8fc1f7ecbfda4ba0fd30d2f812ba4f667c29a1d8082169b5c9261babdeb56f7a255d1a27968e99a66083d"
+	if got != golden {
+		t.Fatalf("密文与预期不符\n got=%s\nwant=%s", got, golden)
+	}
+	// 复原：密文按公钥长度应为 chunkSize(=modulus 字节数) 的 hex（无前导零时位数可少）
+	modBytes, _ := hex.DecodeString(xzmyRsaModulusHex)
+	n := new(big.Int).SetBytes(modBytes)
+	if len(got) == 0 || len(got) > 2*((n.BitLen()+7)/8) {
+		t.Fatalf("密文长度异常: %d", len(got))
+	}
+}
+
+// TestXzmyTicketParse 票据解析
+func TestXzmyTicketParse(t *testing.T) {
+	body := `{"tgt":"TGT-1-abc","ticket":"ST-1-xyz"}`
+	r := parseXzmyTicket(body)
+	if r.tgt != "TGT-1-abc" || r.ticket != "ST-1-xyz" {
+		t.Fatalf("解析错误: %+v", r)
+	}
+}
+
+// TestXzmyLoginError 登录失败业务码翻译
+func TestXzmyLoginError(t *testing.T) {
+	cases := map[string]string{
+		`{"meta":{"success":true,"statusCode":200,"message":"ok"},"data":{"code":"PASSERROR","data":"5,1","userId":"1"}}`: "用户名或密码不匹配，请检查后重试",
+		`{"meta":{"success":true,"statusCode":200,"message":"ok"},"data":{"code":"NOAUTH"}}`:                             "账号不存在或未注册统一身份认证",
+		`{"meta":{"success":true,"statusCode":200,"message":"ok"},"data":{"code":"CODEFALSE"}}`:                           "验证码错误",
+	}
+	for body, want := range cases {
+		if got := xzmyLoginError(body); got != want {
+			t.Fatalf("xzmyLoginError(%s) = %q, want %q", body, got, want)
+		}
+	}
+	// 成功响应应返回空串（不误判为错误）
+	if got := xzmyLoginError(`{"tgt":"T","ticket":"ST"}`); got != "" {
+		t.Fatalf("成功响应不应报错, got %q", got)
+	}
+}

backed/internal/service/cpdaily/profile.go

@@ -57,7 +57,7 @@ func fetchFromWecloud(wecloudUrl string, cookieMap map[string]string) (*CpdailyU
 			MobilePhone string `json:"mobilePhone"`
 		} `json:"data"`
 	}
-	if err := json.Unmarshal(body, &result); err != nil {
+	if err := unmarshalBody(body, &result); err != nil {
 		return nil, fmt.Errorf("解析 wecloud 用户信息失败: %w", err)
 	}
 	if result.ErrCode != 0 || result.Data == nil {

backed/internal/service/cpdaily/qrcode.go

@@ -1,32 +1,26 @@
 package cpdaily
 
 import (
-	"bytes"
-	"encoding/base64"
-	"fmt"
-	"image"
-	_ "image/gif"
-	_ "image/jpeg"
-	_ "image/png"
 	"regexp"
 	"strings"
-	"time"
-
-	"github.com/go-resty/resty/v2"
-	"github.com/makiuchi-d/gozxing"
-	"github.com/makiuchi-d/gozxing/qrcode"
-	"golang.org/x/image/draw"
-	_ "golang.org/x/image/webp"
 )
 
 // qrUuidPattern 匹配二维码内容中的 uuid 参数（如 ...?uuid=1583a6...&isNeedExtra=0）
 var qrUuidPattern = regexp.MustCompile(`uuid=([0-9a-zA-Z_-]+)`)
 
-// bareUuidPattern 匹配纯 uuid（32 位十六进制字符串）
+// bareUuidPattern 匹配纯 uuid（32 位十六进制字符串，如 1583a66272854585833eb13b56fc1937）
 var bareUuidPattern = regexp.MustCompile(`^[0-9a-fA-F]{32}$`)
 
+// bareTokenPattern 匹配"整串即 uuid 的裸值"，用于存库后回读的场景。
+// 链接里的 uuid 允许 [0-9a-zA-Z_-]+（见 qrUuidPattern），并非都是 32 位 hex，
+// 因此仅靠 bareUuidPattern 无法反解非 hex 的 uuid，会导致签到失败。
+// 长度限制 8~64 且不含空白/URL 符号，避免把普通文本误判为 uuid。
+var bareTokenPattern = regexp.MustCompile(`^[0-9a-zA-Z_-]{8,64}$`)
+
 // ExtractQrUuid 从二维码文本内容中提取签到二维码 uuid。
-// 支持完整链接（取 uuid= 参数值）或纯 uuid 字符串。
+// 支持三种形式：完整链接（取 uuid= 参数值）、32 位 hex 裸 uuid、其它形式的裸 uuid token。
+//
+// 二维码图片的识别在前端完成（jsQR），后端只接收解析后的 uuid 文本，故此处不涉及图片解码。
 func ExtractQrUuid(text string) string {
 	text = strings.TrimSpace(text)
 	if text == "" {
@@ -38,105 +32,8 @@ func ExtractQrUuid(text string) string {
 	if bareUuidPattern.MatchString(text) {
 		return strings.ToLower(text)
 	}
+	if bareTokenPattern.MatchString(text) {
+		return text
+	}
 	return ""
 }
-
-// DecodeQRFromImage 解码图片数据中的二维码，返回其中文本内容。
-// 先直接解码，失败后放大图片重试（应对小尺寸/低分辨率截图）。
-func DecodeQRFromImage(data []byte) (string, error) {
-	img, _, err := image.Decode(bytes.NewReader(data))
-	if err != nil {
-		return "", fmt.Errorf("识别图片格式失败: %w", err)
-	}
-
-	text, err := decodeQRImage(img)
-	if err == nil {
-		return text, nil
-	}
-	// 放大 3 倍重试
-	if text, err2 := decodeQRImage(scaleImage(img, 3)); err2 == nil {
-		return text, nil
-	}
-	return "", fmt.Errorf("未能识别图片中的二维码: %w", err)
-}
-
-func decodeQRImage(img image.Image) (string, error) {
-	bmp, err := gozxing.NewBinaryBitmapFromImage(img)
-	if err != nil {
-		return "", err
-	}
-	hints := map[gozxing.DecodeHintType]interface{}{
-		gozxing.DecodeHintType_TRY_HARDER: true,
-	}
-	result, err := qrcode.NewQRCodeReader().Decode(bmp, hints)
-	if err != nil {
-		return "", err
-	}
-	return result.GetText(), nil
-}
-
-// scaleImage 将图片按整数倍放大（用于提高小图二维码的识别率）
-func scaleImage(img image.Image, factor int) image.Image {
-	b := img.Bounds()
-	dst := image.NewRGBA(image.Rect(0, 0, b.Dx()*factor, b.Dy()*factor))
-	draw.CatmullRom.Scale(dst, dst.Bounds(), img, b, draw.Over, nil)
-	return dst
-}
-
-// ResolveQrUuidFromContent 从用户提供的二维码内容中解析出签到 uuid。
-// 支持三种形式：
-//  1. 文本直填（二维码链接或纯 uuid）
-//  2. base64 图片（dataURI，前端上传的本地预览图）
-//  3. http(s) 图片链接（下载后解码）
-func ResolveQrUuidFromContent(content string) (string, error) {
-	content = strings.TrimSpace(content)
-	if content == "" {
-		return "", fmt.Errorf("尚未上传签到二维码")
-	}
-
-	// 1) 内容本身已是文本（链接或 uuid），直接提取
-	if uuid := ExtractQrUuid(content); uuid != "" {
-		return uuid, nil
-	}
-
-	// 2) base64 图片（dataURI）
-	if IsDataURIImage(content) {
-		idx := strings.Index(content, ",")
-		if idx < 0 {
-			return "", fmt.Errorf("二维码图片数据格式不正确")
-		}
-		imgBytes, err := base64.StdEncoding.DecodeString(content[idx+1:])
-		if err != nil {
-			return "", fmt.Errorf("解码二维码图片失败: %w", err)
-		}
-		return decodeQrTextToUuid(imgBytes)
-	}
-
-	// 3) http(s) 图片链接：下载后解码
-	if strings.HasPrefix(content, "http://") || strings.HasPrefix(content, "https://") {
-		client := resty.New().SetTimeout(30 * time.Second)
-		resp, err := client.R().
-			SetHeader("User-Agent", "Mozilla/5.0 (Linux; Android 15) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.6778.81 Mobile Safari/537.36").
-			Get(content)
-		if err != nil {
-			return "", fmt.Errorf("下载二维码图片失败: %w", err)
-		}
-		if resp.StatusCode() > 299 {
-			return "", fmt.Errorf("下载二维码图片失败(HTTP %d)", resp.StatusCode())
-		}
-		return decodeQrTextToUuid(resp.Body())
-	}
-
-	return "", fmt.Errorf("无法识别的二维码内容，请上传二维码图片或粘贴二维码链接")
-}
-
-func decodeQrTextToUuid(imgBytes []byte) (string, error) {
-	text, err := DecodeQRFromImage(imgBytes)
-	if err != nil {
-		return "", err
-	}
-	if uuid := ExtractQrUuid(text); uuid != "" {
-		return uuid, nil
-	}
-	return "", fmt.Errorf("二维码内容中未找到 uuid: %s", text)
-}

backed/internal/service/cpdaily/qrcode_test.go

@@ -1,8 +1,6 @@
 package cpdaily
 
 import (
-	"encoding/base64"
-	"os"
 	"testing"
 )
 
@@ -15,6 +13,13 @@ func TestExtractQrUuid(t *testing.T) {
 		{"  xxxxx?uuid=abc123XYZ&y=1  ", "abc123XYZ"},
 		{"no uuid here", ""},
 		{"", ""},
+		// 裸 uuid 回读（formData 只存 uuid 后的解析路径）
+		{"abc123XYZ", "abc123XYZ"}, // 非 32-hex 的裸 uuid
+		{"1583a66272854585833eb13b56fc1937", "1583a66272854585833eb13b56fc1937"}, // 32-hex
+		{"uuid_with-dash", "uuid_with-dash"},                                     // 含 _ 和 -
+		{"ab", ""},                                                               // 太短，不认为是 uuid
+		{"has space x", ""},                                                      // 含空白，不认为是 uuid
+		{"https://x.edu.cn/a/b", ""},                                             // URL 含符号，不走裸 token 分支
 	}
 	for _, c := range cases {
 		if got := ExtractQrUuid(c.in); got != c.want {
@@ -22,39 +27,3 @@ func TestExtractQrUuid(t *testing.T) {
 		}
 	}
 }
-
-func TestResolveQrUuidFromLinkText(t *testing.T) {
-	uuid, err := ResolveQrUuidFromContent("https://ynu.campusphere.net/wec-counselor-sign-apps/stu/qrsign/index.html?uuid=1583a66272854585833eb13b56fc1937&isNeedExtra=0")
-	if err != nil || uuid != testQrUuid {
-		t.Fatalf("link text resolve = (%q, %v), want (%q, nil)", uuid, err, testQrUuid)
-	}
-	if _, err := ResolveQrUuidFromContent(""); err == nil {
-		t.Fatal("empty content should return error")
-	}
-	if _, err := ResolveQrUuidFromContent("some random text"); err == nil {
-		t.Fatal("unrecognized content should return error")
-	}
-}
-
-func TestDecodeQrImageAndResolve(t *testing.T) {
-	imgBytes, err := os.ReadFile("testdata/test_qr.png")
-	if err != nil {
-		t.Fatalf("read test qr image: %v", err)
-	}
-
-	// 1) 直接解码图片中的二维码
-	text, err := DecodeQRFromImage(imgBytes)
-	if err != nil {
-		t.Fatalf("decode qr image: %v", err)
-	}
-	if got := ExtractQrUuid(text); got != testQrUuid {
-		t.Fatalf("decoded text %q -> uuid %q, want %q", text, got, testQrUuid)
-	}
-
-	// 2) dataURI 形式（前端本地上传的图片）
-	dataURI := "data:image/png;base64," + base64.StdEncoding.EncodeToString(imgBytes)
-	uuid, err := ResolveQrUuidFromContent(dataURI)
-	if err != nil || uuid != testQrUuid {
-		t.Fatalf("dataURI resolve = (%q, %v), want (%q, nil)", uuid, err, testQrUuid)
-	}
-}

backed/internal/service/cpdaily/service.go

@@ -17,6 +17,44 @@ import (
 	"github.com/go-resty/resty/v2"
 )
 
+// ========== 登录态失效的统一识别 ==========
+
+// ErrCookieExpired 表示今日校园的登录态（cookie）已失效：
+// 请求被重定向到统一身份认证登录页，返回 HTML 而非接口 JSON。
+// handler 层据此触发 cookie 续期（raw_password 重登 或 长期凭证换取），
+// 续期失败则引导用户重新登录，而不是把「解析失败」这种模糊错误抛给用户。
+var ErrCookieExpired = fmt.Errorf("cpdaily_cookie_expired")
+
+// looksLikeHTML 判断响应体是否为一个 HTML 页面（而非接口 JSON）。
+// 登录态失效时，今日校园会把请求 302 到 authserver 登录页，响应体是 HTML。
+func looksLikeHTML(body []byte) bool {
+	head := body
+	if len(head) > 512 {
+		head = head[:512]
+	}
+	trimmed := strings.TrimSpace(string(head))
+	if trimmed == "" {
+		return false
+	}
+	if strings.HasPrefix(trimmed, "<") {
+		return true
+	}
+	lower := strings.ToLower(trimmed)
+	return strings.Contains(lower, "<!doctype html") ||
+		strings.Contains(lower, "<html")
+}
+
+// unmarshalBody 解析接口 JSON 响应体。
+// 若响应体是 HTML（登录态失效被重定向到认证页），返回 ErrCookieExpired，
+// 以便上层触发 cookie 续期或引导重新登录，而不是抛出难以理解的
+// "invalid character '<' looking for beginning of value"。
+func unmarshalBody(body []byte, v interface{}) error {
+	if looksLikeHTML(body) {
+		return ErrCookieExpired
+	}
+	return json.Unmarshal(body, v)
+}
+
 // ========== HTTP 客户端 ==========
 
 var httpClient *resty.Client
@@ -176,6 +214,24 @@ func CpdailyLogin(ctx context.Context, school *SchoolDetailInfo, username, passw
 	if school.ID == XcuSchoolId {
 		return xcuCasLogin(ctx, school, username, password)
 	}
+	// 辽宁工程技术大学：平台配置 joinType=CLOUD（IsIap=true），但网关 /iap/doLogin 不存在（405），
+	// IAP 提交报 FAIL_UPNOTMATCH 误导为"密码错误"；实际链路为 /iap 302 → 学校 CAS（authserver.lntu.edu.cn）
+	// → 回调 /iap/loginSuccess 建立网关会话，同 xcu 模式单独强制走 CAS（详见 login_lntu.go）
+	if school.ID == LntuSchoolId {
+		return lntuCasLogin(ctx, school, username, password)
+	}
+	// 西藏民族大学：平台配置 joinType=CLOUD（IsIap=true），但网关 IAP 账密不可用，
+	// IAP 提交报 FAIL_UPNOTMATCH（"密码错误"）；实际为定制 CAS（cas.xzmu.edu.cn/lyuapServer，
+	// 密码=教科书RSA小端hex，POST /v1/tickets），单独适配（详见 login_xzmy.go）
+	if school.ID == XzmySchoolId {
+		return xzmyCasLogin(ctx, school, username, password)
+	}
+	// 兰州理工大学：平台配置 joinType=CLOUD（IsIap=true），但实际为 CAS-PaaS 统一身份认证
+	//（cas-paas.lut.edu.cn/cas/login，密码 RSA 加密 "__RSA__"+密文），IAP 提交报 FAIL_UPNOTMATCH
+	//（"密码错误"）；单独强制走 CAS（详见 login_lut.go；CAS-PaaS 加密见 login_caspaas.go）
+	if school.ID == LutSchoolId {
+		return lutCasLogin(ctx, school, username, password)
+	}
 	// 华侨大学：写死强制走通用 CAS 流程——CAS 账密登录需 wisedu 定制滑块验证码
 	//（casLogin 内按 sliderIds 配置分流，见 slider.go），IAP 账密接口不兼容（FAIL_UPNOTMATCH）
 	if school.ID == HquSchoolId {

backed/internal/service/cpdaily/sms_login.go

@@ -0,0 +1,352 @@
+package cpdaily
+
+import (
+	"context"
+	"crypto/tls"
+	"encoding/base64"
+	"encoding/json"
+	"fmt"
+	"net/http"
+	"net/http/cookiejar"
+	"net/url"
+	"strings"
+	"time"
+
+	"github.com/go-resty/resty/v2"
+)
+
+// ========== 手机号验证码登录（无需选择学校） ==========
+//
+// 与 CAS 登录的差别：直接调用今日校园移动端鉴权接口，登录成功后响应里就带有
+// tenantId（学校租户）与 openId（学工号），因此**无需用户先选择学校**。
+//
+// 流程（对标旧项目 likedream-go login/sms.go）：
+//  1. SendSmsCode(phone)         → 今日校园下发短信验证码
+//  2. MobileLoginByCode(phone, code) → 返回 tenantId/openId/sessionToken/tgc(CASTGC)
+//  3. ExchangeCasCookie(loginData)   → 用 sessionToken 换取学校 CAS cookie（含 MOD_AUTH_CAS）
+//
+// 该 cookie（含 CASTGC，长期有效）后续可反复换取 CAS cookie，即「长期凭证」。
+// 加密方式与项目既有 crypto.go 一致（AES-128-CBC / DES-CBC，PKCS7）。
+
+const (
+	smsSendURL    = "https://mobile.campushoy.com/app/auth/authentication/mobile/messageCode/v-8222"
+	smsLoginURL   = "https://mobile.campushoy.com/app/auth/authentication/mobileLogin/v-8222"
+	encryptVerion = "first_v4"
+)
+
+// SmsSendResult 发送短信验证码结果
+type SmsSendResult struct {
+	Countdown int    `json:"countdown"` // 可再次发送的倒计时（秒）
+	TipMsg    string `json:"tipMsg"`
+	Status    int    `json:"status"`
+}
+
+// SmsLoginResult 手机号验证码登录结果（mobileLogin 响应解密后）
+type SmsLoginResult struct {
+	AuthID                 string `json:"authId"`
+	AuthStatus             string `json:"authStatus"`
+	CompleteUserInfoStatus string `json:"completeUserInfoStatus"`
+	DeviceExceptionMsg     string `json:"deviceExceptionMsg"`
+	DeviceStatus           string `json:"deviceStatus"`
+	FirstLogin             bool   `json:"firstLogin"`
+	Mobile                 string `json:"mobile"`
+	MsgTip                 string `json:"msgTip"`
+	Name                   string `json:"name"`
+	OpenID                 string `json:"openId"` // 学工号
+	PersonID               string `json:"personId"`
+	SessionToken           string `json:"sessionToken"`
+	Status                 string `json:"status"`
+	TenantID               string `json:"tenantId"` // 学校租户 ID（= sys_user.school_id）
+	TenantName             string `json:"tenantName"`
+	Tgc                    string `json:"tgc"` // CASTGC（长期凭证）
+	TgcStatus              string `json:"tgcStatus"`
+	UserID                 string `json:"userId"` // 今日校园内部用户 ID（非学工号）
+	UserType               string `json:"userType"`
+}
+
+// smsCommonResponse 今日校园短信接口通用响应
+type smsCommonResponse[T any] struct {
+	ErrCode int    `json:"errCode"`
+	ErrMsg  string `json:"errMsg"`
+	Data    T      `json:"data"`
+}
+
+func newSmsClient() *resty.Client {
+	c := resty.New().
+		SetTimeout(20*time.Second).
+		SetTLSClientConfig(&tls.Config{InsecureSkipVerify: true})
+	// resty 默认 http.Client 无 CookieJar，需显式设置，否则 Set-Cookie 不会被保存
+	jar, _ := cookiejar.New(nil)
+	c.SetCookieJar(jar)
+	return c
+}
+
+// setSmsHeaders 设置短信接口所需的公共请求头（deviceId 可空）
+func setSmsHeaders(req *resty.Request, deviceID, sessionToken string) {
+	if sessionToken != "" {
+		enc := base64.StdEncoding.EncodeToString(DesEncryptForCat([]byte(sessionToken)))
+		req.SetHeader("SessionToken", enc)
+		req.SetHeader("sessionTokenKey", enc)
+	}
+
+	cpdailyInfo := map[string]interface{}{
+		"deviceId":       deviceID,
+		"systemName":     "android",
+		"userId":         "",
+		"appVersion":     "9.8.8",
+		"model":          "Unknown",
+		"lon":            "0",
+		"lat":            "0",
+		"cpdailyVersion": "9.8.8",
+		"systemVersion":  "11",
+	}
+	infoBytes, _ := json.Marshal(cpdailyInfo)
+	encodedInfo := base64.StdEncoding.EncodeToString(DesEncryptForCat(infoBytes))
+
+	req.SetHeaders(map[string]string{
+		"clientType":        "cpdaily_student",
+		"deviceType":        "1",
+		"CpdailyClientType": "CPDAILY",
+		"CpdailyStandAlone": "0",
+		"User-Agent":        "Mozilla/5.0 (Linux; Android 11; Redmi Note 8 Pro Build/RP1A.230805.003; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.106 Mobile Safari/537.36 cpdaily/9.8.8 wisedu/9.8.8",
+		"CpdailyInfo":       encodedInfo,
+	})
+}
+
+// CreateDeviceID 生成一个今日校园设备码（用于短信登录，避免设备异常校验）
+func CreateDeviceID() string {
+	s := fmt.Sprintf("%x", time.Now().UnixNano())
+	if len(s) < 32 {
+		s = s + strings.Repeat("0", 32-len(s))
+	}
+	return s[0:8] + "-" + s[8:12] + "-" + s[12:16] + "-" + s[16:20]
+}
+
+// SendSmsCode 发送手机短信验证码
+func SendSmsCode(ctx context.Context, phone string) (*SmsSendResult, error) {
+	phoneEncrypted := base64.StdEncoding.EncodeToString(AesEncrypt([]byte(phone)))
+
+	client := newSmsClient()
+	req := client.R().
+		SetContext(ctx).
+		SetBody(map[string]string{
+			"a": phoneEncrypted,
+			"b": encryptVerion,
+		})
+	setSmsHeaders(req, "", "")
+
+	resp, err := req.Post(smsSendURL)
+	if err != nil {
+		return nil, fmt.Errorf("发送验证码请求失败: %w", err)
+	}
+	body := resp.Body()
+
+	var result smsCommonResponse[SmsSendResult]
+	if err := json.Unmarshal(body, &result); err != nil {
+		return nil, fmt.Errorf("解析发送验证码响应失败: %w (body: %.200s)", err, string(body))
+	}
+	if result.ErrCode != 0 {
+		return nil, fmt.Errorf("%s", result.ErrMsg)
+	}
+	return &result.Data, nil
+}
+
+// MobileLoginByCode 手机号 + 短信验证码登录，返回 tenantId/openId/sessionToken/tgc 等
+func MobileLoginByCode(ctx context.Context, phone, code string) (*SmsLoginResult, error) {
+	payload := map[string]any{
+		"d": code,
+		"e": "CPDAILY",
+		"c": phone,
+		"f": "86",
+	}
+	payloadBytes, _ := json.Marshal(payload)
+	encodedPayload := base64.StdEncoding.EncodeToString(AesEncrypt(payloadBytes))
+
+	client := newSmsClient()
+	req := client.R().
+		SetContext(ctx).
+		SetBody(map[string]any{
+			"a": encodedPayload,
+			"b": encryptVerion,
+		})
+	setSmsHeaders(req, "", "")
+
+	resp, err := req.Post(smsLoginURL)
+	if err != nil {
+		return nil, fmt.Errorf("登录请求失败: %w", err)
+	}
+	body := resp.Body()
+
+	var result smsCommonResponse[string]
+	if err := json.Unmarshal(body, &result); err != nil {
+		return nil, fmt.Errorf("解析登录响应失败: %w (body: %.200s)", err, string(body))
+	}
+	if result.ErrCode != 0 {
+		return nil, fmt.Errorf("%s", result.ErrMsg)
+	}
+
+	// data 为 base64(AES(json))
+	decoded, err := base64.StdEncoding.DecodeString(result.Data)
+	if err != nil {
+		return nil, fmt.Errorf("登录数据 base64 解码失败: %w", err)
+	}
+	plain := AesDecrypt(decoded)
+
+	var loginData SmsLoginResult
+	if err := json.Unmarshal(plain, &loginData); err != nil {
+		return nil, fmt.Errorf("登录数据解析失败: %w (raw: %.200s)", err, string(plain))
+	}
+	if loginData.TenantID == "" {
+		return nil, fmt.Errorf("登录响应缺少 tenantId")
+	}
+	return &loginData, nil
+}
+
+// ExchangeCasCookie 用短信登录得到的 sessionToken 换取学校 CAS cookie（含 MOD_AUTH_CAS）。
+// 返回可直接序列化保存的 cookie 列表；其中 CASTGC（loginData.Tgc）为长期凭证。
+func ExchangeCasCookie(ctx context.Context, school *SchoolDetailInfo, loginData *SmsLoginResult, deviceID string) ([]*http.Cookie, error) {
+	if school.WecloudUrl == "" {
+		return nil, fmt.Errorf("学校无可用域名")
+	}
+	host := strings.TrimSuffix(school.WecloudUrl, "/")
+
+	// AmpCookies 头：DES 加密后的 {AMP1,AMP2:[{name:sessionToken,value:...}]}
+	ampCookieMap := map[string]any{
+		"AMP2": []map[string]any{
+			{"path": "/", "value": loginData.SessionToken, "domain": "", "name": "sessionToken"},
+		},
+		"AMP1": []map[string]any{
+			{"path": "/", "value": loginData.SessionToken, "domain": "", "name": "sessionToken"},
+		},
+	}
+	ampBytes, _ := json.Marshal(ampCookieMap)
+	ampToken := base64.StdEncoding.EncodeToString(DesEncryptForCat(ampBytes))
+
+	client := newSmsClient()
+	// 不复制 Cookie 头，交由 resty 默认 cookie jar 管理（避免重定向时旧 cookie 覆盖新 cookie）
+	client.SetRedirectPolicy(resty.RedirectPolicyFunc(func(req *http.Request, via []*http.Request) error {
+		if len(via) >= 50 {
+			return fmt.Errorf("重定向次数过多")
+		}
+		for key, val := range via[0].Header {
+			if !strings.EqualFold(key, "Cookie") {
+				req.Header[key] = val
+			}
+		}
+		return nil
+	}))
+
+	// 预置基础 cookie（clientType/tenantId/standAlone/sessionToken；CASTGC 为长期凭证）
+	presetCookies := map[string]string{
+		"clientType":   "cpdaily_student",
+		"tenantId":     school.ID,
+		"standAlone":   "0",
+		"sessionToken": loginData.SessionToken,
+	}
+	if loginData.Tgc != "" {
+		presetCookies["CASTGC"] = loginData.Tgc
+	}
+	targetSchoolURL, err := url.Parse(host)
+	if err != nil {
+		return nil, fmt.Errorf("解析学校地址失败: %w", err)
+	}
+	targetAPIURL, _ := url.Parse("https://api.campushoy.com")
+	for name, value := range presetCookies {
+		c := &http.Cookie{Name: name, Value: value}
+		if jar := client.GetClient().Jar; jar != nil {
+			jar.SetCookies(targetSchoolURL, []*http.Cookie{c})
+			if targetAPIURL != nil {
+				jar.SetCookies(targetAPIURL, []*http.Cookie{c})
+			}
+		}
+	}
+
+	req := client.R().
+		SetContext(ctx).
+		SetHeader("AmpCookies", ampToken)
+	setSmsHeaders(req, deviceID, loginData.SessionToken)
+
+	resp, err := req.Get(host + "/wec-im-group/group/imUserToken/getImUserToken")
+	if err != nil {
+		return nil, fmt.Errorf("换取 CAS cookie 请求失败: %w", err)
+	}
+
+	var common smsCommonResponse[json.RawMessage]
+	if err := json.Unmarshal(resp.Body(), &common); err != nil {
+		return nil, fmt.Errorf("解析换取 cookie 响应失败: %w (body: %.200s)", err, string(resp.Body()))
+	}
+	if common.ErrCode != 0 {
+		return nil, fmt.Errorf("换取 CAS cookie 失败: %s", common.ErrMsg)
+	}
+
+	// 从 jar 收集所有 cookie
+	var cookies []*http.Cookie
+	seen := map[string]bool{}
+	hosts := []string{host, "https://api.campushoy.com"}
+	for _, h := range hosts {
+		u, err := url.Parse(h)
+		if err != nil {
+			continue
+		}
+		for _, c := range client.GetClient().Jar.Cookies(u) {
+			if c.Name == "" || seen[c.Name] {
+				continue
+			}
+			seen[c.Name] = true
+			cookies = append(cookies, c)
+		}
+	}
+	if len(cookies) == 0 {
+		return nil, fmt.Errorf("未获取到有效 cookie")
+	}
+	return cookies, nil
+}
+
+// RefreshCasCookie 用已保存的长期 cookie（含 CASTGC/sessionToken）重新换取 CAS cookie。
+// 适用于 cookie 过期时自动续期，避免要求用户重新登录。
+func RefreshCasCookie(ctx context.Context, cookieMap map[string]string, host string, deviceID string) ([]*http.Cookie, error) {
+	sessionToken := cookieMap["sessionToken"]
+	if sessionToken == "" {
+		return nil, fmt.Errorf("缺少 sessionToken，无法续期")
+	}
+
+	client := newSmsClient()
+
+	ampCookieMap := map[string]any{
+		"AMP2": []map[string]any{
+			{"path": "/", "value": sessionToken, "domain": "", "name": "sessionToken"},
+		},
+		"AMP1": []map[string]any{
+			{"path": "/", "value": sessionToken, "domain": "", "name": "sessionToken"},
+		},
+	}
+	ampBytes, _ := json.Marshal(ampCookieMap)
+	ampToken := base64.StdEncoding.EncodeToString(DesEncryptForCat(ampBytes))
+
+	req := client.R().
+		SetContext(ctx).
+		SetHeader("AmpCookies", ampToken)
+	setSmsHeaders(req, deviceID, sessionToken)
+
+	resp, err := req.Get(strings.TrimSuffix(host, "/") + "/wec-im-group/group/imUserToken/getImUserToken")
+	if err != nil {
+		return nil, fmt.Errorf("续期请求失败: %w", err)
+	}
+	var common smsCommonResponse[json.RawMessage]
+	if err := json.Unmarshal(resp.Body(), &common); err != nil {
+		return nil, fmt.Errorf("解析续期响应失败: %w", err)
+	}
+	if common.ErrCode != 0 {
+		return nil, fmt.Errorf("续期失败: %s", common.ErrMsg)
+	}
+
+	var cookies []*http.Cookie
+	u, err := url.Parse(host)
+	if err != nil {
+		return nil, err
+	}
+	for _, c := range client.GetClient().Jar.Cookies(u) {
+		cookies = append(cookies, c)
+	}
+	return cookies, nil
+}

backed/internal/service/cpdaily/submit_captcha.go

@@ -97,7 +97,7 @@ func (r *submitCaptchaResolver) GetValidationInfo() (*ValidationInfo, error) {
 	body, _ := io.ReadAll(resp.RawBody())
 
 	var apiResp apiResponse
-	if err := json.Unmarshal(body, &apiResp); err != nil {
+	if err := unmarshalBody(body, &apiResp); err != nil {
 		return nil, fmt.Errorf("解析验证信息响应失败: %w", err)
 	}
 
@@ -165,7 +165,7 @@ func (r *submitCaptchaResolver) createCaptcha(info *ValidationInfo) (*CpSubmitCa
 	body, _ := io.ReadAll(resp.RawBody())
 
 	var apiResp apiResponse
-	if err := json.Unmarshal(body, &apiResp); err != nil {
+	if err := unmarshalBody(body, &apiResp); err != nil {
 		return nil, fmt.Errorf("解析创建验证码响应失败: %w", err)
 	}
 
@@ -261,7 +261,7 @@ func (r *submitCaptchaResolver) submitCaptcha(info *ValidationInfo, captchaInfo
 	body, _ := io.ReadAll(resp.RawBody())
 
 	var apiResp apiResponse
-	if err := json.Unmarshal(body, &apiResp); err != nil {
+	if err := unmarshalBody(body, &apiResp); err != nil {
 		return "", fmt.Errorf("解析提交验证码响应失败: %w", err)
 	}
 

backed/internal/service/cpdaily/task.go

@@ -27,6 +27,8 @@ const (
 	TaskTypeSign       TaskType = "sign"
 	TaskTypeSleepCheck TaskType = "sleep_check"
 	TaskTypeLeave      TaskType = "leave" // 销假（请假销假）图片上传使用
+	// TaskTypeReturnRegister 节假日离返校的返校登记（确认到达）
+	TaskTypeReturnRegister TaskType = "return_register"
 )
 
 // 各任务类型的 API 基础路径
@@ -161,7 +163,7 @@ func fetchTasksByEndpoint(cookieMap map[string]string, host string, taskType Tas
 		ErrMsg  string                 `json:"errMsg"`
 		Datas   map[string]interface{} `json:"datas"`
 	}
-	if err := json.Unmarshal(body, &result); err != nil {
+	if err := unmarshalBody(body, &result); err != nil {
 		return nil, fmt.Errorf("解析任务列表响应失败: %w", err)
 	}
 	if result.ErrCode != 0 {
@@ -241,8 +243,11 @@ func parseTasksFromDatas(datas map[string]interface{}) []TodayTaskInfo {
 	return tasks
 }
 
-// FetchAllRecentTasks 并发查询 sign + sleep_check 两种任务类型，聚合去重后返回
-func FetchAllRecentTasks(cookieMap map[string]string, host string) []TodayTaskInfo {
+// FetchAllRecentTasks 并发查询 sign + sleep_check 两种签到类任务；
+// 若启用返校登记（GetReturnRegisterTasks 提供），额外聚合其待办。去重后返回。
+// 若签到/查寝两类查询都失败则返回错误（供上层识别登录态失效并续期重试）；
+// 只要有一类成功就返回结果（另一类失败仅记录日志）。
+func FetchAllRecentTasks(cookieMap map[string]string, host string) ([]TodayTaskInfo, error) {
 	type result struct {
 		tasks []TodayTaskInfo
 		err   error
@@ -267,9 +272,18 @@ func FetchAllRecentTasks(cookieMap map[string]string, host string) []TodayTaskIn
 
 	seen := map[string]bool{}
 	var all []TodayTaskInfo
+	var firstErr error
+	successCount := 0
 
 	for i := 0; i < 2; i++ {
 		r := <-ch
+		if r.err != nil {
+			if firstErr == nil {
+				firstErr = r.err
+			}
+		} else {
+			successCount++
+		}
 		for _, t := range r.tasks {
 			key := t.TaskName + "|" + t.TaskType
 			if !seen[key] {
@@ -279,10 +293,28 @@ func FetchAllRecentTasks(cookieMap map[string]string, host string) []TodayTaskIn
 		}
 	}
 
-	if len(all) == 0 {
-		return []TodayTaskInfo{}
+	// 两类都失败：返回错误（cookie 失效等场景由上层续期重试）
+	if successCount == 0 && firstErr != nil {
+		return nil, firstErr
 	}
-	return all
+
+	// 返校登记待办（节假日离返校应用；接口失败不影响签到类任务）
+	if rr, rerr := FetchReturnRegisterTasks(cookieMap, host); rerr == nil {
+		for _, t := range rr {
+			key := t.TaskName + "|" + t.TaskType
+			if !seen[key] {
+				seen[key] = true
+				all = append(all, t)
+			}
+		}
+	} else {
+		slog.Warn("获取返校登记待办失败", "host", host, "error", rerr)
+	}
+
+	if len(all) == 0 {
+		return []TodayTaskInfo{}, nil
+	}
+	return all, nil
 }
 func fetchTasksByYearMonth(cookieMap map[string]string, host string, taskType TaskType, year, month string) ([]TodayTaskInfo, error) {
 	yearMonth := fmt.Sprintf("%s-%s", year, month)
@@ -371,8 +403,11 @@ func GetTaskDetailByWid(cookieMap map[string]string, host string, taskType TaskT
 	return fetchTaskDetailByWid(cookieMap, host, taskType, signWid, signInstanceWid, title)
 }
 
-// FetchTodayTaskDetail 任务执行专用：按任务名从当天列表实时匹配未签到的实例并拉取详情。
+// FetchTodayTaskDetail 任务执行专用：按任务名从当天列表实时匹配任务实例并拉取详情。
 // wid 每次执行时自动获取，不依赖配置快照；匹配失败直接报明确错误，不做任何回退。
+// 匹配优先级：优先未签到实例（正常签到）；若无未签到实例但存在已签到实例，则用已签到实例
+// 重新提交（允许重签，便于用户在首次位置填错、或需范围外重签时再次执行；是否真正接受
+// 由今日校园服务端决定）。
 func FetchTodayTaskDetail(cookieMap map[string]string, host string, taskType TaskType, title string) (*TaskFormDetail, error) {
 	tasks, err := fetchTasksByEndpoint(cookieMap, host, taskType, "")
 	if err != nil {
@@ -393,14 +428,22 @@ func FetchTodayTaskDetail(cookieMap map[string]string, host string, taskType Tas
 			signed = &s
 		}
 	}
+	// 无未签到实例但有已签到实例：放开重签，用已签到实例继续提交
+	resign := false
 	if target == nil {
-		if signed != nil {
-			return nil, fmt.Errorf("「%s」今日已签到，无需重复执行", title)
+		if signed == nil {
+			return nil, fmt.Errorf("当日任务列表中未找到「%s」", title)
 		}
-		return nil, fmt.Errorf("当日任务列表中未找到「%s」", title)
+		target = signed
+		resign = true
+	}
+	if resign {
+		slog.Info("无未签到实例，允许对已签到实例重新提交",
+			"title", title, "signInstanceWid", target.SignInstanceWid, "taskType", taskType)
+	} else {
+		slog.Info("按任务名实时匹配到当日任务实例",
+			"title", title, "signInstanceWid", target.SignInstanceWid, "taskType", taskType)
 	}
-	slog.Info("按任务名实时匹配到当日任务实例",
-		"title", title, "signInstanceWid", target.SignInstanceWid, "taskType", taskType)
 	detail, err := fetchTaskDetailByWid(cookieMap, host, taskType, target.SignWid, target.SignInstanceWid, target.TaskName)
 	if err != nil {
 		return nil, err
@@ -439,7 +482,7 @@ func fetchTaskDetailByWid(cookieMap map[string]string, host string, taskType Tas
 		ErrMsg  string                 `json:"errMsg"`
 		Datas   map[string]interface{} `json:"datas"`
 	}
-	if err := json.Unmarshal(body, &result); err != nil {
+	if err := unmarshalBody(body, &result); err != nil {
 		return nil, fmt.Errorf("解析任务详情响应失败: %w", err)
 	}
 	if result.ErrCode != 0 {
@@ -498,47 +541,59 @@ func ParseTaskForm(detail *TaskFormDetail, historyRows map[string]interface{}) [
 	histSignPhotoUrl := ""
 	histIsMalposition := ""
 
-	// 优先从 signPlaceSelected 提取（学校配置的签到范围点，cpdaily 返回 JSON 字符串或数组两种格式）
-	// 有历史表单时是历史已选地点，无历史表单时是学校设置的默认签到范围，用于兜底填充
-	if sps, ok := histRows["signPlaceSelected"]; ok {
-		var places []map[string]interface{}
-		switch v := sps.(type) {
-		case string:
-			if v != "" && v != "[]" {
-				if err := json.Unmarshal([]byte(v), &places); err != nil {
-					places = nil
-				}
-			}
-		case []interface{}:
-			for _, p := range v {
-				if m, ok := p.(map[string]interface{}); ok {
-					places = append(places, m)
-				}
-			}
-		}
-		if len(places) > 0 {
-			// 取第一个签到范围点（主校区）；无历史记录时作为默认坐标兜底
-			if lng := mapValueStr(places[0], "longitude"); lng != "" {
-				histLon = lng
-			}
-			if lat := mapValueStr(places[0], "latitude"); lat != "" {
-				histLat = lat
-			}
-			if addr := mapValueStr(places[0], "address"); addr != "" {
-				histAddress = addr
-			}
-		}
+	// 签到范围点（校验坐标是否在打卡范围内）：优先当前任务详情，其次历史详情
+	rangePlaces := parseSignPlaces(rows)
+	if len(rangePlaces) == 0 {
+		rangePlaces = parseSignPlaces(histRows)
 	}
-	// 降级到 histRows 中的 longitude/latitude
+
+	// 优先使用历史记录中的真实签到位置（坐标 + 地址），
+	// 但坐标必须仍落在打卡范围内——超出范围的坐标提交会被服务端以「位置不在签到范围内」拒绝，
+	// 此时丢弃历史坐标，改由下方回退到学校配置的签到范围点。
+	histLon = mapValueStr(histRows, "longitude")
+	histLat = mapValueStr(histRows, "latitude")
+	if histLon != "" && histLat != "" && coordsWithinSignRange(histLat, histLon, rangePlaces) {
+		histAddress = mapValueStr(histRows, "signAddress")
+		if histAddress == "" {
+			histAddress = mapValueStr(histRows, "position")
+		}
+	} else {
+		// 历史坐标缺失或超出范围：不采用历史坐标（地址一并丢弃，保持与坐标同源）
+		histLon, histLat = "", ""
+	}
+
+	// 回退：学校配置的签到范围点（signPlaceSelected[0]，主校区），无历史记录时作为默认坐标
 	if histLon == "" || histLat == "" {
-		if lon, ok := histRows["longitude"]; ok && lon != nil {
-			histLon = fmt.Sprintf("%v", lon)
-		}
-		if lat, ok := histRows["latitude"]; ok && lat != nil {
-			histLat = fmt.Sprintf("%v", lat)
+		if sps, ok := histRows["signPlaceSelected"]; ok {
+			var places []map[string]interface{}
+			switch v := sps.(type) {
+			case string:
+				if v != "" && v != "[]" {
+					if err := json.Unmarshal([]byte(v), &places); err != nil {
+						places = nil
+					}
+				}
+			case []interface{}:
+				for _, p := range v {
+					if m, ok := p.(map[string]interface{}); ok {
+						places = append(places, m)
+					}
+				}
+			}
+			if len(places) > 0 {
+				if lng := mapValueStr(places[0], "longitude"); lng != "" {
+					histLon = lng
+				}
+				if lat := mapValueStr(places[0], "latitude"); lat != "" {
+					histLat = lat
+				}
+				if addr := mapValueStr(places[0], "address"); addr != "" {
+					histAddress = addr
+				}
+			}
 		}
 	}
-	// 如果还是空的，再降级到当前表单中的 longitude/latitude（任务默认坐标）
+	// 再降级到当前表单中的 longitude/latitude（任务默认坐标）
 	if histLon == "" || histLat == "" {
 		if lon, ok := rows["longitude"]; ok && lon != nil {
 			histLon = fmt.Sprintf("%v", lon)
@@ -547,7 +602,7 @@ func ParseTaskForm(detail *TaskFormDetail, historyRows map[string]interface{}) [
 			histLat = fmt.Sprintf("%v", lat)
 		}
 	}
-	// 地址降级链：signPlaceSelected[].address → histRows.position → histRows.signAddress → rows.position → rows.signAddress
+	// 地址兜底链：histRows.position → histRows.signAddress → rows.position → rows.signAddress
 	if histAddress == "" {
 		if pos, ok := histRows["position"]; ok && pos != nil {
 			histAddress = fmt.Sprintf("%v", pos)
@@ -725,27 +780,124 @@ func ParseTaskForm(detail *TaskFormDetail, historyRows map[string]interface{}) [
 	return list
 }
 
+// extractScanPosition 提取扫码签到的经纬度与地址，供表单预填与提交使用。
+// 取值优先级与普通签到一致：signPlaceSelected[0]（学校配置/历史已选范围点）
+// → 历史表单 / 详情的 longitude|latitude → 详情的 position|signAddress（地址）。
+// 扫码签到若不带定位，服务端会因经度/纬度为空串而拒绝提交（报 "empty String"）。
+func extractScanPosition(detail *TaskFormDetail, histRows map[string]interface{}) (lon, lat, address string) {
+	rows := detail.Rows
+
+	if histRows != nil {
+		if sps, ok := histRows["signPlaceSelected"]; ok {
+			var places []map[string]interface{}
+			switch v := sps.(type) {
+			case string:
+				if v != "" && v != "[]" {
+					if err := json.Unmarshal([]byte(v), &places); err != nil {
+						places = nil
+					}
+				}
+			case []interface{}:
+				for _, p := range v {
+					if m, ok := p.(map[string]interface{}); ok {
+						places = append(places, m)
+					}
+				}
+			}
+			if len(places) > 0 {
+				lon = mapValueStr(places[0], "longitude")
+				lat = mapValueStr(places[0], "latitude")
+				address = mapValueStr(places[0], "address")
+			}
+		}
+	}
+
+	// 降级：历史表单里的 longitude/latitude
+	if histRows != nil {
+		if lon == "" {
+			lon = mapValueStr(histRows, "longitude")
+		}
+		if lat == "" {
+			lat = mapValueStr(histRows, "latitude")
+		}
+	}
+	// 再降级：当前任务详情里的 longitude/latitude（学校默认坐标）
+	if lon == "" {
+		lon = mapValueStr(rows, "longitude")
+	}
+	if lat == "" {
+		lat = mapValueStr(rows, "latitude")
+	}
+
+	// 地址降级链
+	if address == "" && histRows != nil {
+		address = mapValueStr(histRows, "position")
+	}
+	if address == "" && histRows != nil {
+		address = mapValueStr(histRows, "signAddress")
+	}
+	if address == "" {
+		address = mapValueStr(rows, "position")
+	}
+	if address == "" {
+		address = mapValueStr(rows, "signAddress")
+	}
+	return lon, lat, address
+}
+
 // parseScanTaskForm 生成扫码签到任务（signMode=2）的表单项：
-// 签到二维码（必填，支持上传图片或粘贴链接）+ 可选签到照片 + 可选额外字段
+// 经纬度/地址 + 可选签到照片 + 可选额外字段 + 签到二维码（放最后）。
+// 字段顺序与普通签到保持一致（定位在前），二维码作为扫码任务特有项置于末尾。
 func parseScanTaskForm(detail *TaskFormDetail, histRows map[string]interface{}) []cpdmodel.CpTaskFormItem {
 	rows := detail.Rows
 	var list []cpdmodel.CpTaskFormItem
 
-	// 签到二维码
+	// 二维码ID（uuid）：历史值若为可解析的链接/文本，统一归一化为 uuid 存储，
+	// 避免把整条链接（乃至 base64 图片）写进 formData。
 	histQr := ""
 	if histRows != nil {
 		if v, ok := histRows["qrCode"]; ok && v != nil {
-			histQr = fmt.Sprintf("%v", v)
+			raw := fmt.Sprintf("%v", v)
+			if uuid := ExtractQrUuid(raw); uuid != "" {
+				histQr = uuid
+			} else if !IsDataURIImage(raw) {
+				histQr = raw
+			}
 		}
 	}
+
+	// 经纬度与地址：扫码签到接口同样要求提交定位（缺省会因空串被服务端拒绝，
+	// 报 "empty String"），且用户可在表单中选择签到范围点，故与普通签到保持一致的字段。
+	scanLon, scanLat, scanAddress := extractScanPosition(detail, histRows)
 	list = append(list, cpdmodel.CpTaskFormItem{
-		Title:    "签到二维码",
-		ColName:  "qrCode",
-		Type:     cpdmodel.ItemTypeImage,
+		Title:    "经度",
+		ColName:  "lon",
+		Type:     cpdmodel.ItemTypeInput,
 		Required: true,
-		Content:  histQr,
+		Content:  scanLon,
+		Default:  scanLon,
 		Show:     true,
-		Tip:      "上传现场签到二维码图片（或直接粘贴二维码链接/内容），执行时自动解析出 uuid 提交",
+		Tip:      "签到地点经度坐标",
+	})
+	list = append(list, cpdmodel.CpTaskFormItem{
+		Title:    "纬度",
+		ColName:  "lat",
+		Type:     cpdmodel.ItemTypeInput,
+		Required: true,
+		Content:  scanLat,
+		Default:  scanLat,
+		Show:     true,
+		Tip:      "签到地点纬度坐标",
+	})
+	list = append(list, cpdmodel.CpTaskFormItem{
+		Title:    "签到具体地址",
+		ColName:  "address",
+		Type:     cpdmodel.ItemTypeInput,
+		Required: true,
+		Content:  scanAddress,
+		Default:  scanAddress,
+		Show:     true,
+		Tip:      "签到完毕后查看时最底部那个最详细的地址信息",
 	})
 
 	// 签到照片（任务要求时保留）
@@ -816,6 +968,17 @@ func parseScanTaskForm(detail *TaskFormDetail, histRows map[string]interface{})
 		}
 	}
 
+	// 二维码ID（uuid）放最后：扫码任务特有项，置于定位/照片/额外字段之后
+	list = append(list, cpdmodel.CpTaskFormItem{
+		Title:    "二维码ID",
+		ColName:  "uuid",
+		Type:     cpdmodel.ItemTypeImage,
+		Required: true,
+		Content:  histQr,
+		Show:     true,
+		Tip:      "上传现场签到二维码图片，自动解析并保存二维码ID（uuid）",
+	})
+
 	return list
 }
 
@@ -968,24 +1131,66 @@ func fillExtraFields(rows map[string]interface{}, formItems []cpdmodel.CpTaskFor
 }
 
 // fillScanSubmitForm 生成扫码签到（signMode=2）的提交表单：
-// 解析签到二维码（图片/链接）得到 uuid，用 qrUuid 替代 signInstanceWid（两者不并存），
-// 不携带经纬度等定位字段。
+// 取二维码ID（uuid）字段，提取 uuid 后用 qrUuid 替代 signInstanceWid（两者不并存）。
+// 定位字段与普通签到一致地提交：服务端对扫码签到的提交体同样要求经度/纬度，
+// 缺失会因空串转数字失败而返回 "empty String"，故此处带上 lon/lat/position。
+// 字段名兼容：新数据为 uuid，历史数据为 qrCode。
+// 二维码图片的识别在前端完成，这里只处理已解析出的 uuid 文本。
 func fillScanSubmitForm(rows map[string]interface{}, formItems []cpdmodel.CpTaskFormItem) (map[string]interface{}, error) {
 	qrContent := ""
 	for _, v := range formItems {
-		if v.ColName == "qrCode" {
+		if v.ColName == "uuid" || v.ColName == "qrCode" {
 			qrContent = strings.TrimSpace(v.Content)
 			break
 		}
 	}
-	uuid, err := ResolveQrUuidFromContent(qrContent)
-	if err != nil {
-		return nil, fmt.Errorf("二维码签到任务缺少有效签到二维码: %w", err)
+	uuid := ExtractQrUuid(qrContent)
+	if uuid == "" {
+		return nil, fmt.Errorf("二维码签到任务缺少有效的二维码ID（uuid），请重新上传二维码解析")
+	}
+
+	// 经纬度与地址（与普通签到一致）：缺失会被服务端判定为参数为空
+	var scanLon, scanLat, scanAddress string
+	for _, v := range formItems {
+		switch v.ColName {
+		case "lon":
+			scanLon = strings.TrimSpace(v.Content)
+		case "lat":
+			scanLat = strings.TrimSpace(v.Content)
+		case "address":
+			scanAddress = strings.TrimSpace(v.Content)
+		case "latAndLon":
+			parts := strings.Split(v.Content, ",")
+			if len(parts) == 2 {
+				if scanLon == "" {
+					scanLon = strings.TrimSpace(parts[0])
+				}
+				if scanLat == "" {
+					scanLat = strings.TrimSpace(parts[1])
+				}
+			}
+		}
+	}
+	// 表单未提供定位时，回退到任务详情中的学校默认坐标
+	if scanLon == "" {
+		scanLon = mapValueStr(rows, "longitude")
+	}
+	if scanLat == "" {
+		scanLat = mapValueStr(rows, "latitude")
+	}
+	if scanAddress == "" {
+		scanAddress = mapValueStr(rows, "position")
+	}
+	if scanAddress == "" {
+		scanAddress = mapValueStr(rows, "signAddress")
 	}
 
 	result := map[string]interface{}{
 		"qrUuid":       uuid,
 		"uaIsCpadaily": true,
+		"longitude":    scanLon,
+		"latitude":     scanLat,
+		"position":     scanAddress,
 	}
 
 	// 签到照片（任务要求时保留，与普通签到一致）
@@ -1079,6 +1284,25 @@ func parseSignPlaces(rows map[string]interface{}) []SignPlace {
 	return places
 }
 
+// coordsWithinSignRange 判断坐标是否落在任一签到范围点内。
+// places 为空（学校未配置范围点）时返回 true——无范围信息则不做限制，沿用历史坐标。
+func coordsWithinSignRange(latStr, lonStr string, places []SignPlace) bool {
+	if len(places) == 0 {
+		return true
+	}
+	lat, err1 := strconv.ParseFloat(strings.TrimSpace(latStr), 64)
+	lon, err2 := strconv.ParseFloat(strings.TrimSpace(lonStr), 64)
+	if err1 != nil || err2 != nil {
+		return false
+	}
+	for _, p := range places {
+		if haversineMeters(lat, lon, p.LatitudeF, p.LongitudeF) <= p.RadiusMeters {
+			return true
+		}
+	}
+	return false
+}
+
 // haversineMeters 计算两个经纬度坐标之间的球面距离（米）
 func haversineMeters(lat1, lon1, lat2, lon2 float64) float64 {
 	const earthRadius = 6371000.0
@@ -1248,7 +1472,7 @@ func SubmitSign(cookieMap map[string]string, host string, taskType TaskType, sub
 		Code    json.Number `json:"code"`
 		Message string      `json:"message"`
 	}
-	if err := json.Unmarshal(body, &result); err != nil {
+	if err := unmarshalBody(body, &result); err != nil {
 		return fmt.Errorf("解析签到响应失败: %w, body: %s", err, string(body))
 	}
 	code, _ := result.Code.Int64()

backed/internal/service/cpdaily/task_scan_test.go

@@ -6,14 +6,17 @@ import (
 	cpdmodel "cpdaily-new/internal/model"
 )
 
-// 扫码任务：提交表单必须用 qrUuid 替代 signInstanceWid，且不携带经纬度
+// 扫码任务：提交表单必须用 qrUuid 替代 signInstanceWid，并携带经纬度/地址
 func TestFillScanSubmitForm(t *testing.T) {
 	rows := map[string]interface{}{
 		"signMode":        float64(2),
 		"signInstanceWid": "397161",
+		"longitude":       "102.7",
+		"latitude":        "25.0",
+		"position":        "昆明文理学院",
 	}
 	formItems := []cpdmodel.CpTaskFormItem{
-		{Title: "签到二维码", ColName: "qrCode", Type: cpdmodel.ItemTypeImage,
+		{Title: "二维码ID", ColName: "uuid", Type: cpdmodel.ItemTypeImage,
 			Content: "https://ynu.campusphere.net/wec-counselor-sign-apps/stu/qrsign/index.html?uuid=1583a66272854585833eb13b56fc1937&isNeedExtra=0"},
 	}
 	form, err := FillSubmitForm(rows, formItems, "device-1")
@@ -26,11 +29,12 @@ func TestFillScanSubmitForm(t *testing.T) {
 	if _, ok := form["signInstanceWid"]; ok {
 		t.Fatal("scan submit form must NOT contain signInstanceWid")
 	}
-	if _, ok := form["latitude"]; ok {
-		t.Fatal("scan submit form must NOT contain latitude")
+	// 定位字段必须携带（缺失会因空串被服务端拒绝，报 "empty String"）
+	if form["longitude"] != "102.7" || form["latitude"] != "25.0" {
+		t.Fatalf("scan form must carry lon/lat, got lon=%v lat=%v", form["longitude"], form["latitude"])
 	}
-	if _, ok := form["longitude"]; ok {
-		t.Fatal("scan submit form must NOT contain longitude")
+	if form["position"] != "昆明文理学院" {
+		t.Fatalf("scan form must carry position, got %v", form["position"])
 	}
 	if form["uaIsCpadaily"] != true {
 		t.Fatal("uaIsCpadaily missing")
@@ -38,7 +42,29 @@ func TestFillScanSubmitForm(t *testing.T) {
 
 	// 缺少二维码 → 明确报错（不再静默生成会假成功的表单）
 	if _, err := FillSubmitForm(rows, nil, "device-1"); err == nil {
-		t.Fatal("missing qrCode should return error")
+		t.Fatal("missing uuid should return error")
+	}
+
+	// 只存 uuid 的裸值（新流程）：必须能正确解析并提交（含非 32-hex 的 uuid）
+	for _, bare := range []string{"1583a66272854585833eb13b56fc1937", "abc123XYZ"} {
+		items := []cpdmodel.CpTaskFormItem{
+			{Title: "二维码ID", ColName: "uuid", Type: cpdmodel.ItemTypeImage, Content: bare},
+		}
+		f, err := FillSubmitForm(rows, items, "device-1")
+		if err != nil {
+			t.Fatalf("bare uuid %q should resolve, got error: %v", bare, err)
+		}
+		if f["qrUuid"] != bare {
+			t.Fatalf("bare uuid %q → qrUuid = %v", bare, f["qrUuid"])
+		}
+	}
+
+	// 历史数据（colName 仍为 qrCode）继续兼容
+	oldItems := []cpdmodel.CpTaskFormItem{
+		{Title: "签到二维码", ColName: "qrCode", Type: cpdmodel.ItemTypeImage, Content: "1583a66272854585833eb13b56fc1937"},
+	}
+	if f, err := FillSubmitForm(rows, oldItems, "device-1"); err != nil || f["qrUuid"] != "1583a66272854585833eb13b56fc1937" {
+		t.Fatalf("legacy qrCode field should still work: form=%v err=%v", f, err)
 	}
 
 	// 普通任务（无 signMode）不受影响：走原逻辑，且不含 qrUuid
@@ -60,16 +86,49 @@ func TestFillScanSubmitForm(t *testing.T) {
 	}
 }
 
-// 扫码任务表单项解析：ParseTaskForm 应生成「签到二维码」图片项，不含经纬度项
+// 扫码任务表单项解析：ParseTaskForm 应生成经纬度/地址项 + 「二维码ID」图片项（二维码在最后）
 func TestParseScanTaskForm(t *testing.T) {
 	detail := &TaskFormDetail{
 		Rows: map[string]interface{}{"signMode": float64(2)},
 	}
 	items := ParseTaskForm(detail, nil)
-	if len(items) != 1 {
-		t.Fatalf("scan form items = %d, want 1: %+v", len(items), items)
+	// 经度 + 纬度 + 地址 + 二维码ID
+	if len(items) != 4 {
+		t.Fatalf("scan form items = %d, want 4: %+v", len(items), items)
 	}
-	if items[0].ColName != "qrCode" || items[0].Type != cpdmodel.ItemTypeImage || !items[0].Required {
-		t.Fatalf("unexpected qrCode item: %+v", items[0])
+	// 二维码ID 位于最后
+	last := items[len(items)-1]
+	if last.ColName != "uuid" || last.Type != cpdmodel.ItemTypeImage || !last.Required {
+		t.Fatalf("unexpected uuid item (should be last): %+v", last)
+	}
+	wantPos := map[string]bool{"lon": false, "lat": false, "address": false}
+	for _, it := range items[:len(items)-1] {
+		if _, ok := wantPos[it.ColName]; ok {
+			wantPos[it.ColName] = true
+		}
+	}
+	for k, ok := range wantPos {
+		if !ok {
+			t.Fatalf("scan form missing position item %q: %+v", k, items)
+		}
+	}
+}
+
+// 历史行数据里的二维码链接应被归一化为 uuid 存储（不把整条链接写入 formData）
+func TestParseScanTaskFormNormalizesUuid(t *testing.T) {
+	detail := &TaskFormDetail{Rows: map[string]interface{}{"signMode": float64(2)}}
+	histRows := map[string]interface{}{
+		"qrCode": "https://ynu.campusphere.net/wec-counselor-sign-apps/stu/qrsign/index.html?uuid=1583a66272854585833eb13b56fc1937&isNeedExtra=0",
+	}
+	items := ParseTaskForm(detail, histRows)
+	if len(items) < 1 {
+		t.Fatalf("unexpected items: %+v", items)
+	}
+	uuidItem := items[len(items)-1]
+	if uuidItem.ColName != "uuid" {
+		t.Fatalf("last item should be uuid, got %+v", uuidItem)
+	}
+	if uuidItem.Content != "1583a66272854585833eb13b56fc1937" {
+		t.Fatalf("history link should normalize to uuid, got %q", uuidItem.Content)
 	}
 }

frondend/index.html

@@ -4,16 +4,40 @@
     <meta charset="UTF-8" />
     <link rel="icon" type="image/svg+xml" href="/vite.svg" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no, viewport-fit=cover" />
-    <meta name="theme-color" content="#f5f5f5" />
+    <meta name="theme-color" content="#f3faf7" />
     <title>小助手</title>
     <script>
-      // 暗色主题防闪烁：与 composables/useTheme.ts 保持同一时间规则
-      // （18:00–次日 06:00 暗色），在首屏渲染前预设 html.dark 与状态栏色
+      // 老内核（Chrome 78~92，即微信 XWEB / 国产浏览器）缺失的 ES2022 运行时 API 补齐。
+      // 背景：reka-ui（其弹窗组件）与 @vueuse/shared 内部直接调用 Object.hasOwn
+      // （Chrome 93+），而 esbuild/vite 的 target 只降语法、不降运行时 API，
+      // 构建产物在 Chrome 78 上会在弹窗挂载时抛 TypeError。
+      // 该内联脚本先于 module 产物执行（module 默认 defer），故此处按需补齐即可；
+      // 现代内核因特性检测成立而跳过，零开销。写法保持 ES5，避免老内核解析失败。
       ;(function () {
+        if (typeof Object.hasOwn !== 'function') {
+          Object.defineProperty(Object, 'hasOwn', {
+            value: function (obj, prop) {
+              if (obj === null || obj === undefined) {
+                throw new TypeError('Cannot convert undefined or null to object')
+              }
+              return Object.prototype.hasOwnProperty.call(Object(obj), prop)
+            },
+            configurable: true,
+            writable: true,
+          })
+        }
+      })()
+    </script>
+    <script>
+      // 暗色主题防闪烁：与 composables/useTheme.ts 保持同一规则
+      // （用户选择 light/dark 优先；auto 时 18:00–次日 06:00 暗色），在首屏渲染前预设 html.dark 与状态栏色
+      ;(function () {
+        var mode = 'auto'
+        try { mode = localStorage.getItem('xz_theme') || 'auto' } catch (e) {}
         var h = new Date().getHours()
-        if (h >= 18 || h < 6) {
+        if (mode === 'dark' || (mode !== 'light' && (h >= 18 || h < 6))) {
           document.documentElement.classList.add('dark')
-          document.querySelector('meta[name="theme-color"]').setAttribute('content', '#15151f')
+          document.querySelector('meta[name="theme-color"]').setAttribute('content', '#0f1815')
         }
       })()
     </script>

frondend/package-lock.json

@@ -11,8 +11,10 @@
         "axios": "^1.13.6",
         "class-variance-authority": "^0.7.1",
         "clsx": "^2.1.1",
+        "jsqr": "^1.4.0",
         "lucide-vue-next": "^1.0.0",
         "qrcode": "^1.5.4",
+        "reka-ui": "^2.10.4",
         "tailwind-merge": "^3.5.0",
         "vue": "^3.5.30",
         "vue-router": "^5.0.4"
@@ -22,6 +24,7 @@
         "@types/node": "^26.0.1",
         "@types/qrcode": "^1.5.6",
         "@vitejs/plugin-vue": "^6.0.5",
+        "lightningcss": "^1.33.0",
         "tailwindcss": "^4.2.2",
         "typescript": "~5.9.3",
         "vite": "^8.0.1",
@@ -159,6 +162,79 @@
         "tslib": "^2.4.0"
       }
     },
+    "node_modules/@floating-ui/core": {
+      "version": "1.8.0",
+      "resolved": "https://registry.npmjs.org/@floating-ui/core/-/core-1.8.0.tgz",
+      "integrity": "sha512-0CIZ5itps/8x7BG8dEIhs53BvCUH2PCoogtakwRTut+Arm58sJooJ0AuZhLw2HJYIR5cMLNPBSS728sPho2khQ==",
+      "dependencies": {
+        "@floating-ui/utils": "^0.2.12"
+      }
+    },
+    "node_modules/@floating-ui/dom": {
+      "version": "1.8.0",
+      "resolved": "https://registry.npmjs.org/@floating-ui/dom/-/dom-1.8.0.tgz",
+      "integrity": "sha512-yXSrzeHZBTZadLOlfyhCkJHNeLJnHRnRInwdZ40L7ZiaAtrBwoYlsDrX3v5zB1Utk7CLfzcOVnVVWoXEky7Ceg==",
+      "dependencies": {
+        "@floating-ui/core": "^1.8.0",
+        "@floating-ui/utils": "^0.2.12"
+      }
+    },
+    "node_modules/@floating-ui/utils": {
+      "version": "0.2.12",
+      "resolved": "https://registry.npmjs.org/@floating-ui/utils/-/utils-0.2.12.tgz",
+      "integrity": "sha512-HpCo8tmWzLVad5s2d19EhAz5zqrrQ6s69qd6moPMQvkOuSwDT1YgRfWSVuc4ennqrgv3OHppiOGMQ7oC13yIww=="
+    },
+    "node_modules/@floating-ui/vue": {
+      "version": "1.1.11",
+      "resolved": "https://registry.npmjs.org/@floating-ui/vue/-/vue-1.1.11.tgz",
+      "integrity": "sha512-HzHKCNVxnGS35r9fCHBc3+uCnjw9IWIlCPL683cGgM9Kgj2BiAl8x1mS7vtvP6F9S/e/q4O6MApwSHj8hNLGfw==",
+      "dependencies": {
+        "@floating-ui/dom": "^1.7.6",
+        "@floating-ui/utils": "^0.2.11",
+        "vue-demi": ">=0.13.0"
+      }
+    },
+    "node_modules/@floating-ui/vue/node_modules/vue-demi": {
+      "version": "0.14.10",
+      "resolved": "https://registry.npmjs.org/vue-demi/-/vue-demi-0.14.10.tgz",
+      "integrity": "sha512-nMZBOwuzabUO0nLgIcc6rycZEebF6eeUfaiQx9+WSk8e29IbLvPU9feI6tqW4kTo3hvoYAJkMh8n8D0fuISphg==",
+      "hasInstallScript": true,
+      "bin": {
+        "vue-demi-fix": "bin/vue-demi-fix.js",
+        "vue-demi-switch": "bin/vue-demi-switch.js"
+      },
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/antfu"
+      },
+      "peerDependencies": {
+        "@vue/composition-api": "^1.0.0-rc.1",
+        "vue": "^3.0.0-0 || ^2.6.0"
+      },
+      "peerDependenciesMeta": {
+        "@vue/composition-api": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/@internationalized/date": {
+      "version": "3.12.4",
+      "resolved": "https://registry.npmjs.org/@internationalized/date/-/date-3.12.4.tgz",
+      "integrity": "sha512-M1dEn4c1U1HsSlaVR8upZtSqvXrTkHDfv18H01uCSJyjVLDxnBR38v/fMxecmlwXKR4i9HeZcmgQAPE6A+aGJQ==",
+      "dependencies": {
+        "@swc/helpers": "^0.5.0"
+      }
+    },
+    "node_modules/@internationalized/number": {
+      "version": "3.6.8",
+      "resolved": "https://registry.npmjs.org/@internationalized/number/-/number-3.6.8.tgz",
+      "integrity": "sha512-8UmMFia46DUt+k97zKd9fKWXcWHR+k8ae3eYzILETuT2KbIvLyOfac7zesw+sJdRAAZ7Q9pM1Mk22aXp2LD0Ig==",
+      "dependencies": {
+        "@swc/helpers": "^0.5.0"
+      }
+    },
     "node_modules/@jridgewell/gen-mapping": {
       "version": "0.3.13",
       "resolved": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.13.tgz",
@@ -474,6 +550,14 @@
       "integrity": "sha512-2j9bGt5Jh8hj+vPtgzPtl72j0yRxHAyumoo6TNfAjsLB04UtpSvPbPcDcBMxz7n+9CYB0c1GxQFxYRg2jimqGw==",
       "devOptional": true
     },
+    "node_modules/@swc/helpers": {
+      "version": "0.5.23",
+      "resolved": "https://registry.npmjs.org/@swc/helpers/-/helpers-0.5.23.tgz",
+      "integrity": "sha512-5lSsMOTXURePglDfvuAQUqkGek9Hg2kksOYay2m0+XR++b2NWYL/4sWyuvVBIs8oKnJaxkdi9whaL/sqN13afw==",
+      "dependencies": {
+        "tslib": "^2.8.0"
+      }
+    },
     "node_modules/@tailwindcss/node": {
       "version": "4.3.2",
       "resolved": "https://registry.npmjs.org/@tailwindcss/node/-/node-4.3.2.tgz",
@@ -489,6 +573,255 @@
         "tailwindcss": "4.3.2"
       }
     },
+    "node_modules/@tailwindcss/node/node_modules/lightningcss": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss/-/lightningcss-1.32.0.tgz",
+      "integrity": "sha512-NXYBzinNrblfraPGyrbPoD19C1h9lfI/1mzgWYvXUTe414Gz/X1FD2XBZSZM7rRTrMA8JL3OtAaGifrIKhQ5yQ==",
+      "dev": true,
+      "dependencies": {
+        "detect-libc": "^2.0.3"
+      },
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      },
+      "optionalDependencies": {
+        "lightningcss-android-arm64": "1.32.0",
+        "lightningcss-darwin-arm64": "1.32.0",
+        "lightningcss-darwin-x64": "1.32.0",
+        "lightningcss-freebsd-x64": "1.32.0",
+        "lightningcss-linux-arm-gnueabihf": "1.32.0",
+        "lightningcss-linux-arm64-gnu": "1.32.0",
+        "lightningcss-linux-arm64-musl": "1.32.0",
+        "lightningcss-linux-x64-gnu": "1.32.0",
+        "lightningcss-linux-x64-musl": "1.32.0",
+        "lightningcss-win32-arm64-msvc": "1.32.0",
+        "lightningcss-win32-x64-msvc": "1.32.0"
+      }
+    },
+    "node_modules/@tailwindcss/node/node_modules/lightningcss-android-arm64": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-android-arm64/-/lightningcss-android-arm64-1.32.0.tgz",
+      "integrity": "sha512-YK7/ClTt4kAK0vo6w3X+Pnm0D2cf2vPHbhOXdoNti1Ga0al1P4TBZhwjATvjNwLEBCnKvjJc2jQgHXH0NEwlAg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/@tailwindcss/node/node_modules/lightningcss-darwin-arm64": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-darwin-arm64/-/lightningcss-darwin-arm64-1.32.0.tgz",
+      "integrity": "sha512-RzeG9Ju5bag2Bv1/lwlVJvBE3q6TtXskdZLLCyfg5pt+HLz9BqlICO7LZM7VHNTTn/5PRhHFBSjk5lc4cmscPQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/@tailwindcss/node/node_modules/lightningcss-darwin-x64": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-darwin-x64/-/lightningcss-darwin-x64-1.32.0.tgz",
+      "integrity": "sha512-U+QsBp2m/s2wqpUYT/6wnlagdZbtZdndSmut/NJqlCcMLTWp5muCrID+K5UJ6jqD2BFshejCYXniPDbNh73V8w==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/@tailwindcss/node/node_modules/lightningcss-freebsd-x64": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-freebsd-x64/-/lightningcss-freebsd-x64-1.32.0.tgz",
+      "integrity": "sha512-JCTigedEksZk3tHTTthnMdVfGf61Fky8Ji2E4YjUTEQX14xiy/lTzXnu1vwiZe3bYe0q+SpsSH/CTeDXK6WHig==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/@tailwindcss/node/node_modules/lightningcss-linux-arm-gnueabihf": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm-gnueabihf/-/lightningcss-linux-arm-gnueabihf-1.32.0.tgz",
+      "integrity": "sha512-x6rnnpRa2GL0zQOkt6rts3YDPzduLpWvwAF6EMhXFVZXD4tPrBkEFqzGowzCsIWsPjqSK+tyNEODUBXeeVHSkw==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/@tailwindcss/node/node_modules/lightningcss-linux-arm64-gnu": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-gnu/-/lightningcss-linux-arm64-gnu-1.32.0.tgz",
+      "integrity": "sha512-0nnMyoyOLRJXfbMOilaSRcLH3Jw5z9HDNGfT/gwCPgaDjnx0i8w7vBzFLFR1f6CMLKF8gVbebmkUN3fa/kQJpQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/@tailwindcss/node/node_modules/lightningcss-linux-arm64-musl": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-musl/-/lightningcss-linux-arm64-musl-1.32.0.tgz",
+      "integrity": "sha512-UpQkoenr4UJEzgVIYpI80lDFvRmPVg6oqboNHfoH4CQIfNA+HOrZ7Mo7KZP02dC6LjghPQJeBsvXhJod/wnIBg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/@tailwindcss/node/node_modules/lightningcss-linux-x64-gnu": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-gnu/-/lightningcss-linux-x64-gnu-1.32.0.tgz",
+      "integrity": "sha512-V7Qr52IhZmdKPVr+Vtw8o+WLsQJYCTd8loIfpDaMRWGUZfBOYEJeyJIkqGIDMZPwPx24pUMfwSxxI8phr/MbOA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/@tailwindcss/node/node_modules/lightningcss-linux-x64-musl": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-musl/-/lightningcss-linux-x64-musl-1.32.0.tgz",
+      "integrity": "sha512-bYcLp+Vb0awsiXg/80uCRezCYHNg1/l3mt0gzHnWV9XP1W5sKa5/TCdGWaR/zBM2PeF/HbsQv/j2URNOiVuxWg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/@tailwindcss/node/node_modules/lightningcss-win32-arm64-msvc": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-win32-arm64-msvc/-/lightningcss-win32-arm64-msvc-1.32.0.tgz",
+      "integrity": "sha512-8SbC8BR40pS6baCM8sbtYDSwEVQd4JlFTOlaD3gWGHfThTcABnNDBda6eTZeqbofalIJhFx0qKzgHJmcPTnGdw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/@tailwindcss/node/node_modules/lightningcss-win32-x64-msvc": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-win32-x64-msvc/-/lightningcss-win32-x64-msvc-1.32.0.tgz",
+      "integrity": "sha512-Amq9B/SoZYdDi1kFrojnoqPLxYhQ4Wo5XiL8EVJrVsB8ARoC1PWW6VGtT0WKCemjy8aC+louJnjS7U18x3b06Q==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
     "node_modules/@tailwindcss/oxide": {
       "version": "4.3.2",
       "resolved": "https://registry.npmjs.org/@tailwindcss/oxide/-/oxide-4.3.2.tgz",
@@ -731,6 +1064,30 @@
         "vite": "^5.2.0 || ^6 || ^7 || ^8"
       }
     },
+    "node_modules/@tanstack/virtual-core": {
+      "version": "3.17.11",
+      "resolved": "https://registry.npmjs.org/@tanstack/virtual-core/-/virtual-core-3.17.11.tgz",
+      "integrity": "sha512-+ILjvtHup6Y2hzQ6YzwMgX1Q+oQpxEGOXCEsCNaPoIP0VxMbizIBTmYTDtkerkIQS8/CbP1BRuyt8V/8BCsy1g==",
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/tannerlinsley"
+      }
+    },
+    "node_modules/@tanstack/vue-virtual": {
+      "version": "3.13.39",
+      "resolved": "https://registry.npmjs.org/@tanstack/vue-virtual/-/vue-virtual-3.13.39.tgz",
+      "integrity": "sha512-AG8sI+6nfrDvN6ixuHJL9LaJTf3//0V5VITZYW3UOaIuSVexnEzsbMu4LH/JhMfRTxwhUXPnLqkl1DlzkZbRtg==",
+      "dependencies": {
+        "@tanstack/virtual-core": "3.17.11"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/tannerlinsley"
+      },
+      "peerDependencies": {
+        "vue": "^2.7.0 || ^3.0.0"
+      }
+    },
     "node_modules/@tybys/wasm-util": {
       "version": "0.10.3",
       "resolved": "https://registry.npmjs.org/@tybys/wasm-util/-/wasm-util-0.10.3.tgz",
@@ -764,6 +1121,11 @@
         "@types/node": "*"
       }
     },
+    "node_modules/@types/web-bluetooth": {
+      "version": "0.0.21",
+      "resolved": "https://registry.npmjs.org/@types/web-bluetooth/-/web-bluetooth-0.0.21.tgz",
+      "integrity": "sha512-oIQLCGWtcFZy2JW77j9k8nHzAOpqMHLQejDA48XXMWH6tjCQHz5RCFz1bzsmROyL6PUm+LLnUiI4BCn221inxA=="
+    },
     "node_modules/@vitejs/plugin-vue": {
       "version": "6.0.7",
       "resolved": "https://registry.npmjs.org/@vitejs/plugin-vue/-/plugin-vue-6.0.7.tgz",
@@ -962,6 +1324,41 @@
       "resolved": "https://registry.npmjs.org/@vue/shared/-/shared-3.5.39.tgz",
       "integrity": "sha512-l1rrBtBfTnmxvtsvdQDXltUUy8S1Y+ZaqdfUzmAnJkTd8Z8rv5v/ytW+TKiqEOWyHPoqtPlNFSs0lhRmYVSHVA=="
     },
+    "node_modules/@vueuse/core": {
+      "version": "14.4.0",
+      "resolved": "https://registry.npmjs.org/@vueuse/core/-/core-14.4.0.tgz",
+      "integrity": "sha512-X4WHz1HlCzCBoYXesUkifzzWBAcZgXG8Fi5iNPQg/epdzOB3gu8Fawj3hvuwYR1nGcXGnvxwYYcUC/71++svtQ==",
+      "dependencies": {
+        "@types/web-bluetooth": "^0.0.21",
+        "@vueuse/metadata": "14.4.0",
+        "@vueuse/shared": "14.4.0"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/antfu"
+      },
+      "peerDependencies": {
+        "vue": "^3.5.0"
+      }
+    },
+    "node_modules/@vueuse/metadata": {
+      "version": "14.4.0",
+      "resolved": "https://registry.npmjs.org/@vueuse/metadata/-/metadata-14.4.0.tgz",
+      "integrity": "sha512-swx/255R6JyHZFJhx845iz5CRWDZdCfvkZOpACWc5+c5WHcG24mv8gUT1WIdFQaHt6dq79rvILd9QnCWiyVm9g==",
+      "funding": {
+        "url": "https://github.com/sponsors/antfu"
+      }
+    },
+    "node_modules/@vueuse/shared": {
+      "version": "14.4.0",
+      "resolved": "https://registry.npmjs.org/@vueuse/shared/-/shared-14.4.0.tgz",
+      "integrity": "sha512-JRgY90Sz8DDtPMsaDflvPMp9xYk69JZAmbuDvAquUVXKr2gEjqtzGNTTthLfckH0BzBqvnu31gb4a8TGLRe79g==",
+      "funding": {
+        "url": "https://github.com/sponsors/antfu"
+      },
+      "peerDependencies": {
+        "vue": "^3.5.0"
+      }
+    },
     "node_modules/acorn": {
       "version": "8.17.0",
       "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.17.0.tgz",
@@ -1012,6 +1409,17 @@
         "url": "https://github.com/chalk/ansi-styles?sponsor=1"
       }
     },
+    "node_modules/aria-hidden": {
+      "version": "1.2.6",
+      "resolved": "https://registry.npmjs.org/aria-hidden/-/aria-hidden-1.2.6.tgz",
+      "integrity": "sha512-ik3ZgC9dY/lYVVM++OISsaYDeg1tb0VtP5uL3ouh1koGOaUMDPpbFIei4JkFimWUFPn90sbMNMXQAIVOlnYKJA==",
+      "dependencies": {
+        "tslib": "^2.0.0"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
     "node_modules/ast-kit": {
       "version": "2.2.0",
       "resolved": "https://registry.npmjs.org/ast-kit/-/ast-kit-2.2.0.tgz",
@@ -1191,6 +1599,11 @@
         "node": ">=0.10.0"
       }
     },
+    "node_modules/defu": {
+      "version": "6.1.7",
+      "resolved": "https://registry.npmjs.org/defu/-/defu-6.1.7.tgz",
+      "integrity": "sha512-7z22QmUWiQ/2d0KkdYmANbRUVABpZ9SNYyH5vx6PZ+nE5bcC0l7uFvEfHlyld/HcGBFTL536ClDt3DEcSlEJAQ=="
+    },
     "node_modules/delayed-stream": {
       "version": "1.0.0",
       "resolved": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz",
@@ -1542,10 +1955,15 @@
         "node": ">=6"
       }
     },
+    "node_modules/jsqr": {
+      "version": "1.4.0",
+      "resolved": "https://registry.npmjs.org/jsqr/-/jsqr-1.4.0.tgz",
+      "integrity": "sha512-dxLob7q65Xg2DvstYkRpkYtmKm2sPJ9oFhrhmudT1dZvNFFTlroai3AWSpLey/w5vMcLBXRgOJsbXpdN9HzU/A=="
+    },
     "node_modules/lightningcss": {
-      "version": "1.32.0",
-      "resolved": "https://registry.npmjs.org/lightningcss/-/lightningcss-1.32.0.tgz",
-      "integrity": "sha512-NXYBzinNrblfraPGyrbPoD19C1h9lfI/1mzgWYvXUTe414Gz/X1FD2XBZSZM7rRTrMA8JL3OtAaGifrIKhQ5yQ==",
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss/-/lightningcss-1.33.0.tgz",
+      "integrity": "sha512-WkUDrojuJs0xkgGf2udWxa3yGBRxPtxUkB79i6aCZLRgc7PM8fZe9TosfPDcvEpQZbuFASnHYmRLBLUbmLOIIA==",
       "devOptional": true,
       "dependencies": {
         "detect-libc": "^2.0.3"
@@ -1558,23 +1976,23 @@
         "url": "https://opencollective.com/parcel"
       },
       "optionalDependencies": {
-        "lightningcss-android-arm64": "1.32.0",
-        "lightningcss-darwin-arm64": "1.32.0",
-        "lightningcss-darwin-x64": "1.32.0",
-        "lightningcss-freebsd-x64": "1.32.0",
-        "lightningcss-linux-arm-gnueabihf": "1.32.0",
-        "lightningcss-linux-arm64-gnu": "1.32.0",
-        "lightningcss-linux-arm64-musl": "1.32.0",
-        "lightningcss-linux-x64-gnu": "1.32.0",
-        "lightningcss-linux-x64-musl": "1.32.0",
-        "lightningcss-win32-arm64-msvc": "1.32.0",
-        "lightningcss-win32-x64-msvc": "1.32.0"
+        "lightningcss-android-arm64": "1.33.0",
+        "lightningcss-darwin-arm64": "1.33.0",
+        "lightningcss-darwin-x64": "1.33.0",
+        "lightningcss-freebsd-x64": "1.33.0",
+        "lightningcss-linux-arm-gnueabihf": "1.33.0",
+        "lightningcss-linux-arm64-gnu": "1.33.0",
+        "lightningcss-linux-arm64-musl": "1.33.0",
+        "lightningcss-linux-x64-gnu": "1.33.0",
+        "lightningcss-linux-x64-musl": "1.33.0",
+        "lightningcss-win32-arm64-msvc": "1.33.0",
+        "lightningcss-win32-x64-msvc": "1.33.0"
       }
     },
     "node_modules/lightningcss-android-arm64": {
-      "version": "1.32.0",
-      "resolved": "https://registry.npmjs.org/lightningcss-android-arm64/-/lightningcss-android-arm64-1.32.0.tgz",
-      "integrity": "sha512-YK7/ClTt4kAK0vo6w3X+Pnm0D2cf2vPHbhOXdoNti1Ga0al1P4TBZhwjATvjNwLEBCnKvjJc2jQgHXH0NEwlAg==",
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-android-arm64/-/lightningcss-android-arm64-1.33.0.tgz",
+      "integrity": "sha512-gEpRTalKdosp4Bb8qWtc2iOgE5SeIHlpS1up9bFq2wAyYhl1UdTObYiHe98zEM9SQvSoqQZ1IQD0JNpg3Ml5pg==",
       "cpu": [
         "arm64"
       ],
@@ -1592,9 +2010,9 @@
       }
     },
     "node_modules/lightningcss-darwin-arm64": {
-      "version": "1.32.0",
-      "resolved": "https://registry.npmjs.org/lightningcss-darwin-arm64/-/lightningcss-darwin-arm64-1.32.0.tgz",
-      "integrity": "sha512-RzeG9Ju5bag2Bv1/lwlVJvBE3q6TtXskdZLLCyfg5pt+HLz9BqlICO7LZM7VHNTTn/5PRhHFBSjk5lc4cmscPQ==",
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-darwin-arm64/-/lightningcss-darwin-arm64-1.33.0.tgz",
+      "integrity": "sha512-Sciaz8eenNTKn9b3t7+xr0ipTp9YxKQY4npwQ3mrRuL0BAVHBLyZxofhaKBAVtzmtRZ/zTyo0/to4B1uWG/Djg==",
       "cpu": [
         "arm64"
       ],
@@ -1612,9 +2030,9 @@
       }
     },
     "node_modules/lightningcss-darwin-x64": {
-      "version": "1.32.0",
-      "resolved": "https://registry.npmjs.org/lightningcss-darwin-x64/-/lightningcss-darwin-x64-1.32.0.tgz",
-      "integrity": "sha512-U+QsBp2m/s2wqpUYT/6wnlagdZbtZdndSmut/NJqlCcMLTWp5muCrID+K5UJ6jqD2BFshejCYXniPDbNh73V8w==",
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-darwin-x64/-/lightningcss-darwin-x64-1.33.0.tgz",
+      "integrity": "sha512-Z5UPAxzrjlWNNyGy6i65cJzzvgJ5D3T6wMvs+gWpY9d7qRhANrxqAp6LhxIgZhWEw18RfJTGcRxjuLIBr+m8XQ==",
       "cpu": [
         "x64"
       ],
@@ -1632,9 +2050,9 @@
       }
     },
     "node_modules/lightningcss-freebsd-x64": {
-      "version": "1.32.0",
-      "resolved": "https://registry.npmjs.org/lightningcss-freebsd-x64/-/lightningcss-freebsd-x64-1.32.0.tgz",
-      "integrity": "sha512-JCTigedEksZk3tHTTthnMdVfGf61Fky8Ji2E4YjUTEQX14xiy/lTzXnu1vwiZe3bYe0q+SpsSH/CTeDXK6WHig==",
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-freebsd-x64/-/lightningcss-freebsd-x64-1.33.0.tgz",
+      "integrity": "sha512-QQM/Ti/hQajJwCY+RiWuCZ9sdtI/XQk7nDK5vC8kkdwixezOlDgvDx7+RT+QjK6FcFT4MpsuoBnHIo/O3StRRg==",
       "cpu": [
         "x64"
       ],
@@ -1652,9 +2070,9 @@
       }
     },
     "node_modules/lightningcss-linux-arm-gnueabihf": {
-      "version": "1.32.0",
-      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm-gnueabihf/-/lightningcss-linux-arm-gnueabihf-1.32.0.tgz",
-      "integrity": "sha512-x6rnnpRa2GL0zQOkt6rts3YDPzduLpWvwAF6EMhXFVZXD4tPrBkEFqzGowzCsIWsPjqSK+tyNEODUBXeeVHSkw==",
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm-gnueabihf/-/lightningcss-linux-arm-gnueabihf-1.33.0.tgz",
+      "integrity": "sha512-N7FVBe6iS24MlM6R/4RBTxGhQheZGs7tiQ9U32UtF75NzP5Q7xWPRqLBCKxlRQRk3rY1jCIPLzx7WzOhuUIRLQ==",
       "cpu": [
         "arm"
       ],
@@ -1672,9 +2090,9 @@
       }
     },
     "node_modules/lightningcss-linux-arm64-gnu": {
-      "version": "1.32.0",
-      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-gnu/-/lightningcss-linux-arm64-gnu-1.32.0.tgz",
-      "integrity": "sha512-0nnMyoyOLRJXfbMOilaSRcLH3Jw5z9HDNGfT/gwCPgaDjnx0i8w7vBzFLFR1f6CMLKF8gVbebmkUN3fa/kQJpQ==",
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-gnu/-/lightningcss-linux-arm64-gnu-1.33.0.tgz",
+      "integrity": "sha512-j2v/itmy4HlNxlc6voKXYgBqNi0Ng2LShg4z7GufpEgs05P+2suBVyi9I6YHq5uoVFx9ETin3eCEhLVyXGQnKg==",
       "cpu": [
         "arm64"
       ],
@@ -1692,9 +2110,9 @@
       }
     },
     "node_modules/lightningcss-linux-arm64-musl": {
-      "version": "1.32.0",
-      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-musl/-/lightningcss-linux-arm64-musl-1.32.0.tgz",
-      "integrity": "sha512-UpQkoenr4UJEzgVIYpI80lDFvRmPVg6oqboNHfoH4CQIfNA+HOrZ7Mo7KZP02dC6LjghPQJeBsvXhJod/wnIBg==",
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-musl/-/lightningcss-linux-arm64-musl-1.33.0.tgz",
+      "integrity": "sha512-yiO5ROMuYQgXbC60yjZU5CYSFZGKXL0HFATXt9mHJn1+zW55oCtMI9NfcVhYLMFDL7gV7oBPon/EmMMGg2OvtQ==",
       "cpu": [
         "arm64"
       ],
@@ -1712,9 +2130,9 @@
       }
     },
     "node_modules/lightningcss-linux-x64-gnu": {
-      "version": "1.32.0",
-      "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-gnu/-/lightningcss-linux-x64-gnu-1.32.0.tgz",
-      "integrity": "sha512-V7Qr52IhZmdKPVr+Vtw8o+WLsQJYCTd8loIfpDaMRWGUZfBOYEJeyJIkqGIDMZPwPx24pUMfwSxxI8phr/MbOA==",
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-gnu/-/lightningcss-linux-x64-gnu-1.33.0.tgz",
+      "integrity": "sha512-ar+Ju7LmcN0Jo4FpL4hpFybwNG9/3A/Br5KW2n2jyODg3MEZXaDYADdemoNS+BDNfMgKvylJLj4S5tyRActuAg==",
       "cpu": [
         "x64"
       ],
@@ -1732,9 +2150,9 @@
       }
     },
     "node_modules/lightningcss-linux-x64-musl": {
-      "version": "1.32.0",
-      "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-musl/-/lightningcss-linux-x64-musl-1.32.0.tgz",
-      "integrity": "sha512-bYcLp+Vb0awsiXg/80uCRezCYHNg1/l3mt0gzHnWV9XP1W5sKa5/TCdGWaR/zBM2PeF/HbsQv/j2URNOiVuxWg==",
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-musl/-/lightningcss-linux-x64-musl-1.33.0.tgz",
+      "integrity": "sha512-RYiYbkokw0trfKqqzfF55lginwEPrD3OJDfTuJzFs1MK6iFnDenaz1fqLLtX4ITG3OktJQXOeTaw1awrBAlZPw==",
       "cpu": [
         "x64"
       ],
@@ -1752,9 +2170,9 @@
       }
     },
     "node_modules/lightningcss-win32-arm64-msvc": {
-      "version": "1.32.0",
-      "resolved": "https://registry.npmjs.org/lightningcss-win32-arm64-msvc/-/lightningcss-win32-arm64-msvc-1.32.0.tgz",
-      "integrity": "sha512-8SbC8BR40pS6baCM8sbtYDSwEVQd4JlFTOlaD3gWGHfThTcABnNDBda6eTZeqbofalIJhFx0qKzgHJmcPTnGdw==",
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-win32-arm64-msvc/-/lightningcss-win32-arm64-msvc-1.33.0.tgz",
+      "integrity": "sha512-1K+MPfLSFVpphzpdbfkhlWk6wBrTObBzS2T6db10PNOZgR9GoVsAWzwNyuhUYYbTp23j+4RrncfujZ4uAzXvwA==",
       "cpu": [
         "arm64"
       ],
@@ -1772,9 +2190,9 @@
       }
     },
     "node_modules/lightningcss-win32-x64-msvc": {
-      "version": "1.32.0",
-      "resolved": "https://registry.npmjs.org/lightningcss-win32-x64-msvc/-/lightningcss-win32-x64-msvc-1.32.0.tgz",
-      "integrity": "sha512-Amq9B/SoZYdDi1kFrojnoqPLxYhQ4Wo5XiL8EVJrVsB8ARoC1PWW6VGtT0WKCemjy8aC+louJnjS7U18x3b06Q==",
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-win32-x64-msvc/-/lightningcss-win32-x64-msvc-1.33.0.tgz",
+      "integrity": "sha512-OlEICDx/Xl0FqSp4bry8zFnCvGpig3Gl4gCquvYwHuqJKEC1+n9NgDniFvqHGmMv1ZkqDJrDqKKSykTDX+ehuA==",
       "cpu": [
         "x64"
       ],
@@ -1929,6 +2347,11 @@
         "node": "^10 || ^12 || ^13.7 || ^14 || >=15.0.1"
       }
     },
+    "node_modules/ohash": {
+      "version": "2.0.12",
+      "resolved": "https://registry.npmjs.org/ohash/-/ohash-2.0.12.tgz",
+      "integrity": "sha512-65S/5gk9YSsaRjcyf7Nfa6h/d3E8/1gslpXfI4W7Dxn/oap8IKRuNT5VXkLQ1YFKIEg4apRY4Pj6aiwFzrDdmw=="
+    },
     "node_modules/p-limit": {
       "version": "2.3.0",
       "resolved": "https://registry.npmjs.org/p-limit/-/p-limit-2.3.0.tgz",
@@ -2098,6 +2521,30 @@
         "url": "https://paulmillr.com/funding/"
       }
     },
+    "node_modules/reka-ui": {
+      "version": "2.10.4",
+      "resolved": "https://registry.npmjs.org/reka-ui/-/reka-ui-2.10.4.tgz",
+      "integrity": "sha512-kbS5GAbkHkYj0EVKAg5ZPEPndhBjeUFSa1Aq5m5ftQwyHnB1v5tw8X6fcwfKH/ry3StPXblMWM1DW82MVS71cw==",
+      "dependencies": {
+        "@floating-ui/dom": "^1.6.13",
+        "@floating-ui/vue": "^1.1.6",
+        "@internationalized/date": "^3.5.0",
+        "@internationalized/number": "^3.5.0",
+        "@tanstack/vue-virtual": "^3.12.0",
+        "@vueuse/core": "^14.1.0",
+        "@vueuse/shared": "^14.1.0",
+        "aria-hidden": "^1.2.4",
+        "defu": "^6.1.5",
+        "ohash": "^2.0.11"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/zernonia"
+      },
+      "peerDependencies": {
+        "vue": ">= 3.4.0"
+      }
+    },
     "node_modules/require-directory": {
       "version": "2.1.1",
       "resolved": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz",
@@ -2232,9 +2679,7 @@
     "node_modules/tslib": {
       "version": "2.8.1",
       "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.8.1.tgz",
-      "integrity": "sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w==",
-      "dev": true,
-      "optional": true
+      "integrity": "sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w=="
     },
     "node_modules/typescript": {
       "version": "5.9.3",

frondend/package.json

@@ -5,15 +5,17 @@
   "type": "module",
   "scripts": {
     "dev": "vite",
-    "build": "vite build",
+    "build": "vite build && node scripts/postbuild-css.mjs",
     "preview": "vite preview"
   },
   "dependencies": {
     "axios": "^1.13.6",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
+    "jsqr": "^1.4.0",
     "lucide-vue-next": "^1.0.0",
     "qrcode": "^1.5.4",
+    "reka-ui": "^2.10.4",
     "tailwind-merge": "^3.5.0",
     "vue": "^3.5.30",
     "vue-router": "^5.0.4"
@@ -23,6 +25,7 @@
     "@types/node": "^26.0.1",
     "@types/qrcode": "^1.5.6",
     "@vitejs/plugin-vue": "^6.0.5",
+    "lightningcss": "^1.33.0",
     "tailwindcss": "^4.2.2",
     "typescript": "~5.9.3",
     "vite": "^8.0.1",

frondend/scripts/postbuild-css.mjs

@@ -0,0 +1,256 @@
+// 老内核兼容后处理（构建期执行）：
+//
+// 背景：Tailwind v4 的产物大量使用较新的 CSS 能力，老内核（国产浏览器/微信内置
+// 内核，实测线上存在 Chrome 78/85/91/97）会丢弃不认识的部分，表现为“只剩基础
+// 元素、没有样式”。逐项处理如下：
+//
+//   ① CSS 级联层 @layer（Chrome 99+）：老内核不认识该 at-rule，会把整块工具类
+//      直接丢弃 —— 这是“无样式”的主因，必须剥离；
+//   ② oklch() 颜色（Chrome 111+）：降级为十六进制色值（lightningcss）；
+//   ③ :where() 选择器（Chrome 88+）：其特异性为 0 的设计依赖较新引擎，
+//      老内核整条规则丢弃；解包为等价选择器（保持原有特异性位置）；
+//   ④ JS 语法（可选链等）由 vite build.target 统一降级，不在此处处理。
+//
+// 处理顺序：先解包 :where（lightningcss 不处理它），再整体按目标内核降级，
+// 最后剥离 @layer 并做完整性校验。
+import { readdir, readFile, writeFile } from 'node:fs/promises'
+import { join, resolve } from 'node:path'
+import { transform } from 'lightningcss'
+
+const assetsDir = resolve(process.cwd(), 'dist/assets')
+
+// lightningcss 目标版本：Chrome 78（微信 XWEB 常见下限，线上真实存在）
+const TARGETS = {
+  chrome: 78 << 16,
+  safari: 12 << 16,
+  ios_saf: 12 << 16,
+  android: 78 << 16,
+}
+
+/** 按顶层逗号拆分（忽略括号/方括号内的逗号） */
+function splitTopLevel(s) {
+  const parts = []
+  let depth = 0
+  let start = 0
+  for (let k = 0; k < s.length; k++) {
+    const ch = s[k]
+    if (ch === '(' || ch === '[') depth++
+    else if (ch === ')' || ch === ']') depth--
+    else if (ch === ',' && depth === 0) {
+      parts.push(s.slice(start, k))
+      start = k + 1
+    }
+  }
+  parts.push(s.slice(start))
+  return parts.map((p) => p.trim())
+}
+
+/**
+ * 把 :where 的单个备选项 alt 合并回原选择器（before + :where(alt) + after）。
+ *  - alt 是单个复合选择器（如 `.dark`、`[type=button]`）：直接拼进同一复合选择器；
+ *  - alt 形如 `A *`（祖先 A 的任意后代，Tailwind dark 变体即 `.dark *`）：
+ *    语义为「元素满足 before/after，且有祖先满足 A」→ `A ` + before + after。
+ *    若 before 自身含组合符（祖先链），A 放在最前面；dark 变体的 `.dark` 在 <html> 上，
+ *    是所有元素的祖先，结果与原语义一致。
+ *  - 其他带组合符的形式无法在不支持 :is() 的老内核上等价表达 → 直接报错，绝不静默产出错误 CSS。
+ */
+function expandAlternative(before, alt, after, whole) {
+  const parts = alt.split(/\s+/).filter(Boolean)
+  if (parts.length === 1 && !/[>+~]/.test(alt)) return before + alt + after
+  if (parts.length === 2 && parts[1] === '*' && !/[>+~]/.test(parts[0])) {
+    // `before` 为空（规则本身就是 `:where(A *)`）时退化为 `A *`
+    const rest = before + after
+    return parts[0] + ' ' + (rest.trim() ? rest : '*')
+  }
+  throw new Error(`[postbuild-css] 无法安全展开的 :where 备选项「${alt}」（选择器：${whole}）`)
+}
+
+/**
+ * 展开选择器里「带逗号列表」的 :where(A, B)：
+ *   X:where(A, B)Y  →  XAY, XBY（含组合符的备选项见 expandAlternative）
+ * 直接去壳会得到 `XA, BY`：逗号把选择器拆开，后半段 B 变成一条独立的全局规则。
+ * 典型事故：dark 变体 `.dark\:bg-x:where(.dark, .dark *)` 去壳成
+ * `.dark\:bg-x.dark, .dark *` —— `.dark *` 命中暗色下所有元素，全站被刷成同一背景色。
+ * 只处理规则选择器（`{` 之前的部分），声明块内容原样保留。
+ */
+function expandWhereLists(css) {
+  return css.replace(/([^{}]+)\{/g, (whole, selectorList) => {
+    if (!selectorList.includes(':where(')) return whole
+    // 跳过 at-rule 前缀（如 @media (...) / @supports (...)），这些不是选择器
+    if (selectorList.trim().startsWith('@')) return whole
+    const expanded = []
+    for (const sel of splitTopLevel(selectorList)) {
+      let queue = [sel]
+      for (let guard = 0; guard < 8; guard++) {
+        let changed = false
+        const next = []
+        for (const s of queue) {
+          const m = s.indexOf(':where(')
+          if (m < 0) {
+            next.push(s)
+            continue
+          }
+          let depth = 0
+          let end = -1
+          for (let k = m + 6; k < s.length; k++) {
+            if (s[k] === '(') depth++
+            else if (s[k] === ')') {
+              depth--
+              if (depth === 0) {
+                end = k
+                break
+              }
+            }
+          }
+          if (end < 0) {
+            next.push(s)
+            continue
+          }
+          const inner = splitTopLevel(s.slice(m + 7, end))
+          if (inner.length < 2) {
+            next.push(s)
+            continue
+          }
+          changed = true
+          const before = s.slice(0, m)
+          const after = s.slice(end + 1)
+          for (const alt of inner) next.push(expandAlternative(before, alt, after, s))
+        }
+        queue = next
+        if (!changed) break
+      }
+      expanded.push(...queue)
+    }
+    return expanded.join(',') + '{'
+  })
+}
+
+/** 解包 :where(...) → 内部选择器（老内核不支持 :where，会整条丢弃规则）。
+ *  须先经 expandWhereLists 展开逗号列表，此处只剩单项 :where(A)，去壳即等价 */
+function unwrapWhere(css) {
+  let out = ''
+  let i = 0
+  while (i < css.length) {
+    const m = css.indexOf(':where(', i)
+    if (m < 0) {
+      out += css.slice(i)
+      break
+    }
+    // 避免误伤字符串/注释中的 :where（本项目 CSS 产物中无此类内容，保守处理仍做括号配对）
+    out += css.slice(i, m)
+    let depth = 0
+    let end = -1
+    for (let k = m + 6; k < css.length; k++) {
+      if (css[k] === '(') depth++
+      else if (css[k] === ')') {
+        depth--
+        if (depth === 0) {
+          end = k
+          break
+        }
+      }
+    }
+    if (end < 0) {
+      out += css.slice(m)
+      break
+    }
+    out += css.slice(m + 7, end) // 去掉 ":where(" 与末端 ")"
+    i = end + 1
+  }
+  return out
+}
+
+/** 剥离 @layer 包裹：保留块内规则与顺序（层叠仍由源顺序 + 选择器优先级决定） */
+function unwrapCascadeLayers(css) {
+  let out = css
+  const re = /@layer\s+[A-Za-z0-9_,\s-]+?\{/g
+
+  // 反复处理，兼容理论上的嵌套 @layer
+  for (let pass = 0; pass < 8; pass++) {
+    const heads = []
+    let m
+    re.lastIndex = 0
+    while ((m = re.exec(out)) !== null) {
+      heads.push({ head: m.index, bodyStart: re.lastIndex - 1 })
+    }
+    if (heads.length === 0) break
+
+    for (let i = heads.length - 1; i >= 0; i--) {
+      const { head, bodyStart } = heads[i]
+      let depth = 0
+      let end = -1
+      for (let k = bodyStart; k < out.length; k++) {
+        if (out[k] === '{') depth++
+        else if (out[k] === '}') {
+          depth--
+          if (depth === 0) {
+            end = k
+            break
+          }
+        }
+      }
+      if (end < 0) continue
+      out = out.slice(0, head) + out.slice(bodyStart + 1, end) + out.slice(end + 1)
+    }
+  }
+
+  // 移除裸 @layer 声明语句（如 `@layer components;`）
+  out = out.replace(/@layer\s+[A-Za-z0-9_,\s-]+;/g, '')
+  return out
+}
+
+/** 校验：括号闭合（剥离过程中出现异常时立刻失败，避免把坏 CSS 发上线） */
+function assertBalanced(css, file) {
+  let depth = 0
+  for (const ch of css) {
+    if (ch === '{') depth++
+    else if (ch === '}') {
+      depth--
+      if (depth < 0) throw new Error(`[postbuild-css] ${file} 括号不闭合（出现多余的 }）`)
+    }
+  }
+  if (depth !== 0) throw new Error(`[postbuild-css] ${file} 括号不闭合（缺少 ${depth} 个 }）`)
+}
+
+const files = (await readdir(assetsDir)).filter((f) => f.endsWith('.css'))
+if (files.length === 0) {
+  throw new Error('[postbuild-css] dist/assets 下未找到 CSS 产物，构建流程异常')
+}
+
+for (const file of files) {
+  const path = join(assetsDir, file)
+  const src = await readFile(path)
+
+  // ① 解包 :where()（lightningcss 不会处理它，需先做）：
+  //    先把 :where(A, B) 展开成多条选择器，再对剩余单项 :where(A) 去壳
+  let prepared = Buffer.from(unwrapWhere(expandWhereLists(src.toString('utf8'))))
+  const whereCount = (src.toString('utf8').match(/:where\(/g) || []).length
+
+  // ② 按目标内核降级（oklch 等新颜色函数 → 老内核可识别的色值）
+  const { code } = transform({
+    filename: file,
+    code: prepared,
+    minify: true,
+    targets: TARGETS,
+  })
+  let out = code.toString()
+
+  // ③ 剥离 @layer 包裹
+  out = unwrapCascadeLayers(out)
+
+  // ④ 兜底校验：任何一项残留都说明处理逻辑失效，直接失败避免上线残缺样式
+  if (/@layer/.test(out)) throw new Error(`[postbuild-css] ${file} 仍残留 @layer`)
+  if (/oklch\(/.test(out)) throw new Error(`[postbuild-css] ${file} 仍残留 oklch(`)
+  if (/:where\(/.test(out)) throw new Error(`[postbuild-css] ${file} 仍残留 :where(`)
+  // 暗色变体去壳错误的特征：出现一条以 `.dark *` 开头的独立全局规则（会把暗色下所有元素刷成同一样式）
+  if (/(^|[{},])\s*\.dark \*\s*\{/.test(out)) {
+    throw new Error(`[postbuild-css] ${file} 出现全局 \`.dark *\` 规则，:where 逗号列表展开失败`)
+  }
+  assertBalanced(out, file)
+
+  await writeFile(path, out)
+  console.log(
+    `[postbuild-css] ${file}: ${src.length} → ${out.length} bytes` +
+      `（解包 ${whereCount} 处 :where + 降级颜色 + 剥离 @layer）`
+  )
+}

frondend/src/App.vue

@@ -2,6 +2,9 @@
 import { watch } from 'vue'
 import { useRoute } from 'vue-router'
 import { useMessage } from '@/composables/useMessage'
+import UpdateChecker from '@/components/UpdateChecker.vue'
+import ConfirmHost from '@/components/ConfirmHost.vue'
+import { Check, X, Info } from 'lucide-vue-next'
 
 const route = useRoute()
 const { toasts, removeToast } = useMessage()
@@ -26,25 +29,45 @@ watch(
 <template>
   <router-view />
 
+  <!-- 全局新版本检测（无 UI，发现更新时弹窗提示刷新） -->
+  <UpdateChecker />
+
+  <!-- 全局确认/提示弹窗宿主（confirmDialog / alertDialog） -->
+  <ConfirmHost />
+
   <!-- Toast 容器 -->
   <Teleport to="body">
-    <div class="fixed top-4 right-4 z-[100] flex flex-col gap-2 max-w-sm">
+    <!-- 顶部居中胶囊 Toast（液态玻璃，iOS 风格灵动提示） -->
+    <div
+      class="fixed inset-x-0 top-0 z-[100] flex flex-col items-center gap-2 px-4 pointer-events-none"
+      style="padding-top: calc(var(--safe-top) + 12px)"
+      role="status"
+      aria-live="polite"
+    >
       <TransitionGroup name="toast">
         <div
           v-for="toast in toasts"
           :key="toast.id"
-          :class="[
-            'px-4 py-3 rounded-lg shadow-lg border text-sm flex items-center gap-2 transition-all',
-            toast.type === 'success' && 'bg-green-50 border-green-200 text-green-700',
-            toast.type === 'error' && 'bg-red-50 border-red-200 text-red-700',
-            toast.type === 'info' && 'bg-blue-50 border-blue-200 text-blue-700',
-          ]"
+          class="glass pointer-events-auto max-w-sm w-fit pl-3 pr-2.5 py-2.5 rounded-full text-sm font-medium text-gray-800 flex items-center gap-2 transition-all"
         >
-          <span class="flex-1">{{ toast.message }}</span>
+          <span
+            :class="[
+              'w-5 h-5 rounded-full flex items-center justify-center flex-shrink-0 text-white',
+              toast.type === 'success' && 'bg-green-500',
+              toast.type === 'error' && 'bg-red-500',
+              toast.type === 'info' && 'bg-brand-500',
+            ]"
+          >
+            <Check v-if="toast.type === 'success'" class="w-3.5 h-3.5" :stroke-width="3" />
+            <X v-else-if="toast.type === 'error'" class="w-3.5 h-3.5" :stroke-width="3" />
+            <Info v-else class="w-3.5 h-3.5" :stroke-width="3" />
+          </span>
+          <span class="flex-1 min-w-0 break-words">{{ toast.message }}</span>
           <button
-            class="text-current opacity-50 hover:opacity-100 text-lg leading-none"
+            class="w-6 h-6 rounded-full flex items-center justify-center text-gray-400 hover:text-gray-600 flex-shrink-0"
+            aria-label="关闭提示"
             @click="removeToast(toast.id)"
-          >&times;</button>
+          ><X class="w-3.5 h-3.5" /></button>
         </div>
       </TransitionGroup>
     </div>
@@ -53,17 +76,17 @@ watch(
 
 <style scoped>
 .toast-enter-active {
-  transition: all 0.3s ease-out;
+  transition: all 0.42s cubic-bezier(0.34, 1.36, 0.64, 1);
 }
 .toast-leave-active {
-  transition: all 0.2s ease-in;
+  transition: all 0.22s ease-in;
 }
 .toast-enter-from {
   opacity: 0;
-  transform: translateX(40px);
+  transform: translateY(-16px) scale(0.92);
 }
 .toast-leave-to {
   opacity: 0;
-  transform: translateX(40px);
+  transform: translateY(-10px) scale(0.96);
 }
 </style>

frondend/src/api/admin.ts

@@ -246,6 +246,7 @@ export interface Announcement {
   targetUserId: number | null
   forcePopup: boolean
   loopPopup: boolean
+  isPinned: boolean
   createdBy: number
   createdAt: string
   updatedAt: string
@@ -265,6 +266,7 @@ export interface CreateAnnouncementParams {
   targetUserId?: number
   forcePopup: boolean
   loopPopup: boolean
+  isPinned: boolean
 }
 
 export interface ReadUser {
@@ -381,12 +383,14 @@ export interface AdminTaskLogItem {
   username: string
   realName: string
   schoolName: string
-  taskType: string // sign / sleep_check
+  taskType: string // sign / sleep_check / leave_apply / leave_report
   title: string
   realTitle: string
   isSuccess: boolean
   errorMessage: string
   createdAt: string
+  deleted: boolean // 用户已在客户端删除（软删除），仅后台可见
+  source: number // 1=签到/查寝 2=请假/销假（两表 id 独立自增，列表 key 需组合）
 }
 
 export interface AdminTaskLogResult {

frondend/src/api/announcement.ts

@@ -33,6 +33,20 @@ export function getUnreadCount() {
   return api.get<{ data: UnreadCount }>('/announcements/unread-count')
 }
 
+// ======== 置顶公告（打卡页顶部横向滚动） ========
+
+export interface PinnedAnnouncement {
+  id: number
+  title: string
+  content: string
+  createdAt: string
+}
+
+/** 获取当前用户可见的置顶公告 */
+export function getPinnedAnnouncements() {
+  return api.get<{ data: PinnedAnnouncement[] }>('/announcements/pinned')
+}
+
 // ======== 公告聚合信息 ========
 
 export interface PopupAnnouncement {

frondend/src/api/auth.ts

@@ -18,7 +18,6 @@ export interface LoginParams {
   password: string
   captchaId: string
   captchaCode: string
-  inviteCode?: string
 }
 
 export interface LoginResult {
@@ -75,6 +74,8 @@ export interface MyInviteInfo {
   inviterRewardPerInvite: number
   /** 被邀请人注册登录后获得的奖励积分（系统配置） */
   inviteeRewardPerInvite: number
+  /** 是否已绑定邀请人（已填写过他人邀请码）；用于控制「填写邀请码」入口显隐 */
+  hasInviter: boolean
 }
 
 /** 搜索学校 */
@@ -139,6 +140,32 @@ export function verifyMFA(params: MFAVerifyParams) {
   return api.post<{ code: number; message: string; data?: LoginResult }>('/auth/login/mfa', params)
 }
 
+// ---- 手机号验证码登录（无需选择学校：tenantId 由登录响应返回） ----
+
+/** 发送手机短信验证码（需图片验证码） */
+export function sendSmsCode(phone: string, captchaId: string, captchaCode: string) {
+  return api.post<{ data: { countdown: number; tipMsg: string } }>('/auth/sms/send', {
+    phone,
+    captchaId,
+    captchaCode,
+  })
+}
+
+/** 手机号 + 短信验证码登录（需图片验证码） */
+export function smsLogin(
+  phone: string,
+  code: string,
+  captchaId: string,
+  captchaCode: string,
+) {
+  return api.post<{ code: number; message: string; data?: LoginResult }>('/auth/sms/login', {
+    phone,
+    code,
+    captchaId,
+    captchaCode,
+  })
+}
+
 /** 刷新 token */
 export function refreshToken(refreshToken: string) {
   return api.post<{ data: { accessToken: string; refreshToken: string } }>(
@@ -200,12 +227,15 @@ export interface TaskInfo {
   realTitle: string
   signWid: string
   signInstanceWid: string
-  formData: string
+  /** 列表接口不再返回（可能达 MB 级）；需要时走 getTaskSavedForm */
+  formData?: string
   taskStatus: string
   errorMessage: string
   createdAt: string
   updatedAt: string
   matchStatus: string
+  /** 服务端预计算的「必填但为空」字段标题，替代前端解析 formData */
+  missingFields?: string[]
 }
 
 export interface TaskTitleItem {
@@ -241,11 +271,16 @@ export function createTask(params: { taskType: string; title: string; realTitle:
   return api.post<{ data: TaskInfo }>('/task/create', params)
 }
 
-/** 获取任务表单 */
+/** 获取任务表单（从今日校园重新拉取模板，不含用户已填值） */
 export function getTaskForm(id: number) {
   return api.get<{ data: { formItems: FormItem[]; realTitle: string; isPhoto: boolean } }>(`/task/form/${id}`)
 }
 
+/** 获取该任务已保存的表单内容（编辑弹窗预填用，避免列表接口携带大字段） */
+export function getTaskSavedForm(id: number) {
+  return api.get<{ data: { formData: string } }>(`/task/form-data/${id}`)
+}
+
 /** 保存任务表单 */
 export function saveTaskForm(id: number, formData: FormItem[]) {
   return api.post(`/task/form/${id}`, { formData })
@@ -337,11 +372,6 @@ export function deleteTaskLog(id: number) {
   return api.delete(`/task/logs/${id}`)
 }
 
-/** 获取/生成邀请码 */
-export function getMyInvite() {
-  return api.post<{ data: MyInviteInfo }>('/auth/generate-invite')
-}
-
 /** 查询邀请信息 */
 export function getMyInviteInfo() {
   return api.get<{ data: MyInviteInfo }>('/auth/my-invite')
@@ -352,6 +382,11 @@ export function redeemInviteReward() {
   return api.post<{ data: { quota: number } }>('/auth/redeem-invite')
 }
 
+/** 填写他人邀请码（绑定邀请关系，双方发放积分） */
+export function bindInviteCode(inviteCode: string) {
+  return api.post<{ data: MyInviteInfo }>('/auth/bind-invite', { inviteCode })
+}
+
 /** 上报已完成当前版本新手引导（数据库记录，跨设备不再重复展示） */
 export function completeGuide() {
   return api.post('/auth/guide/complete')

frondend/src/api/index.ts

@@ -2,6 +2,8 @@ import axios from 'axios'
 
 // 自定义事件：cpdaily 密码错误，通知组件弹窗
 export const CPD_PASSWORD_ERROR = 'cpd-password-error'
+// 自定义事件：账号被封禁（携带 detail: { message }），通知组件弹出封号原因
+export const ACCOUNT_BANNED = 'account-banned'
 
 const api = axios.create({
   baseURL: import.meta.env.VITE_API_BASE_URL || '/api',
@@ -44,6 +46,14 @@ api.interceptors.response.use(
   async (error) => {
     const originalRequest = error.config
 
+    // 账号封禁：后台在所有接口统一返回 HTTP 403 + code 4030，message 为封号原因。
+    // 清除登录态、广播事件让界面弹出封号原因并跳登录页；不触发 token 刷新。
+    if (error.response?.status === 403 && error.response?.data?.code === 4030) {
+      const message = error.response.data.message || '您的账号已被封禁'
+      handleAccountBanned(message)
+      return Promise.reject(error)
+    }
+
     // admin API 401：直接清理 admin token 并跳管理后台登录页，
     // 不触碰用户端 access_token/refresh_token（两端登录互不影响）
     if (error.response?.status === 401 && originalRequest.url?.startsWith('/admin/')) {
@@ -69,11 +79,15 @@ api.interceptors.response.use(
     }
 
     // 用户端 401 且不是刷新/登录的请求，尝试刷新 token
+    // 注意：登录类接口（含手机号验证码登录 /auth/sms/*）返回的 401 表示「登录凭据错误」，
+    // 与「登录态过期」语义不同，必须排除，否则会被误判为 token 过期 →
+    // 清空登录态并跳回 /login（表现为：登录失败却无任何提示、页面被重置）。
     if (
       error.response?.status === 401 &&
       !originalRequest._retry &&
       !originalRequest.url?.includes('/auth/refresh') &&
       !originalRequest.url?.includes('/auth/login') &&
+      !originalRequest.url?.includes('/auth/sms/') &&
       !originalRequest.url?.includes('/report-failed-login')
     ) {
       originalRequest._retry = true
@@ -124,4 +138,19 @@ function handleCpdailyPasswordError() {
   }, 500)
 }
 
+// handleAccountBanned 处理账号封禁：清除登录态、广播封号原因并跳登录页
+function handleAccountBanned(message: string) {
+  if ((window as any).__accountBannedHandled) return
+  ;(window as any).__accountBannedHandled = true
+
+  localStorage.removeItem('access_token')
+  localStorage.removeItem('refresh_token')
+
+  // 广播事件（若页面有监听则弹窗）；同时用原生 alert 兜底，确保封号原因一定可见
+  window.dispatchEvent(new CustomEvent(ACCOUNT_BANNED, { detail: { message } }))
+  try { window.alert(message) } catch { /* ignore */ }
+
+  window.location.href = '/login'
+}
+
 export default api

frondend/src/api/leave.ts

@@ -22,6 +22,8 @@ export interface LeaveItem {
   createTime: string
   actEndTime: string
   status: string
+  /** 状态文案（服务端权威映射，新套学校返回；旧套为空时前端本地映射兜底） */
+  statusText?: string
   /** 学校规定的销假位置列表；为空时需用户手动输入 */
   reportPlaces: LeaveReportPlace[]
   /** 该请假类型销假是否需要选择审批人（leaveType.reportApplyFlow=1） */
@@ -81,6 +83,10 @@ export interface LeaveType {
   disableTime: number
   /** 单次最长可请假天数（0=不限） */
   limitDay: number
+  /** 1=需先手写承诺书签名后提交（新套学校） */
+  requireSign: number
+  /** 「是否离校」默认值（0=无默认 1=默认是 2=默认否；仅新套类型返回，非强制） */
+  outStatusDefault: number
 }
 
 /** 请假执行参数 */
@@ -96,10 +102,15 @@ export interface ExecuteLeaveApplyParams {
   longitude: string
   latitude: string
   locationAddr: string
-  imageUrl?: string
+  /** 附件图片 URL 列表（最多 4 张且不超学校上限；后端兼容旧 imageUrl 单图字段） */
+  imageUrls?: string[]
   approverWid?: string
   approverId?: string
   approverName?: string
+  /** 抄送人（非必填；候选取自审批人列表） */
+  ccUsers?: LeaveApprover[]
+  /** 手写承诺书签名图 URL（requireSign=1 的类型必填） */
+  signatureUrl?: string
 }
 
 // ======== API ========

frondend/src/api/ticket.ts

@@ -15,6 +15,8 @@ export interface AdminTicketListItem extends TicketListItem {
   username: string
   realName: string
   schoolName: string
+  /** 用户是否已删除该工单（软删除）；管理端仍可见 */
+  deleted?: boolean
 }
 
 export interface TicketMessageRes {
@@ -37,6 +39,8 @@ export interface TicketDetail {
   schoolName?: string
   createdAt: string
   updatedAt: string
+  /** 用户是否已删除该工单（软删除）；管理端仍可查看 */
+  deleted?: boolean
   messages: TicketMessageRes[]
 }
 
@@ -47,6 +51,8 @@ export interface TicketNotificationItem {
   content: string
   isRead: boolean
   createdAt: string
+  /** 关联工单当前状态（pending/processing/resolved/closed）；用于把未关闭工单的通知排前 */
+  ticketStatus: string
 }
 
 // ======== 用户端 API ========
@@ -144,8 +150,8 @@ export const TICKET_STATUS_MAP: Record<string, string> = {
 
 /** 工单状态颜色映射 */
 export const TICKET_STATUS_COLOR: Record<string, string> = {
-  pending: 'bg-amber-100 text-amber-700',
-  processing: 'bg-blue-100 text-blue-700',
-  resolved: 'bg-green-100 text-green-700',
-  closed: 'bg-gray-100 text-gray-500',
+  pending: 'adm-badge-amber',
+  processing: 'adm-badge-brand',
+  resolved: 'adm-badge-green',
+  closed: 'adm-badge-gray',
 }

frondend/src/assets/styles/globals.css

@@ -1,34 +1,180 @@
 @import "tailwindcss";
 
 /* 基于 class 的暗色变体：html.dark 时启用 dark:* 工具类
-   （切换逻辑见 composables/useTheme.ts，按浏览器系统时间自动切换） */
+   （切换逻辑见 composables/useTheme.ts：自动 / 亮 / 暗 三档） */
 @custom-variant dark (&:where(.dark, .dark *));
 
+/* ============================================================
+ * 设计令牌 · 薄荷汽水（Mint Soda）× 轻量液态玻璃
+ *
+ * 换肤方式：直接重映射 Tailwind 色阶 —— blue → 薄荷品牌色、gray → 薄荷中性灰、
+ * red/rose → 珊瑚、amber → 柠檬、green → 清新绿。全站 1000+ 处色阶类无需逐个
+ * 改写即可统一换肤（历史代码里的 blue-* 即品牌色）；新代码请优先用 brand-*。
+ *
+ * 对比度（WCAG AA，已逐色计算）：亮色下 *-500/600 作文字或白字底色均 ≥ 4.5；
+ * 暗色下品牌按钮白字 ≥ 3（AA 大字/UI 组件级），正文文字 ≥ 4.5。
+ * ============================================================ */
 @theme {
-  --color-background: #f5f5f5;
-  --color-foreground: #1a1a1a;
+  --font-sans: -apple-system, BlinkMacSystemFont, "SF Pro Text", "PingFang SC", "HarmonyOS Sans SC",
+    "MiSans", "Hiragino Sans GB", "Microsoft YaHei", "Helvetica Neue", Arial, sans-serif;
+
+  /* —— 品牌 · 薄荷青（brand 与 blue 同值；blue 为历史类名兼容）—— */
+  --color-brand-50: #eafaf5;
+  --color-brand-100: #d2f4ea;
+  --color-brand-200: #a8e9d7;
+  --color-brand-300: #74dac2;
+  --color-brand-400: #2cc5a8;
+  --color-brand-500: #0b8672;
+  --color-brand-600: #0a7866;
+  --color-brand-700: #08604f;
+  --color-brand-800: #0a4d41;
+  --color-brand-900: #0b3f36;
+  --color-blue-50: #eafaf5;
+  --color-blue-100: #d2f4ea;
+  --color-blue-200: #a8e9d7;
+  --color-blue-300: #74dac2;
+  --color-blue-400: #2cc5a8;
+  --color-blue-500: #0b8672;
+  --color-blue-600: #0a7866;
+  --color-blue-700: #08604f;
+  --color-blue-800: #0a4d41;
+  --color-blue-900: #0b3f36;
+
+  /* —— 点缀 · 天空蓝（信息/次强调，取代原 indigo/sky 的位置）—— */
+  --color-sky-50: #eef6ff;
+  --color-sky-100: #dcecfe;
+  --color-sky-400: #5aa9f5;
+  --color-sky-500: #2373c4;
+  --color-sky-600: #1d63a9;
+  --color-indigo-50: #eef6ff;
+  --color-indigo-100: #dcecfe;
+  --color-indigo-500: #2373c4;
+  --color-cyan-400: #5aa9f5;
+
+  /* —— 中性 · 薄荷灰（带一丝青调，比纯灰更通透）—— */
+  --color-gray-50: #f6faf8;
+  --color-gray-100: #edf3f0;
+  --color-gray-200: #dfe8e4;
+  --color-gray-300: #c9d5d0;
+  --color-gray-400: #808e89;
+  --color-gray-500: #66756f;
+  --color-gray-600: #4f5d58;
+  --color-gray-700: #3a4743;
+  --color-gray-800: #263330;
+  --color-gray-900: #17221f;
+  --color-gray-950: #0e1714;
+
+  /* —— 语义 · 珊瑚（危险/错误；red 与 rose 合一，比纯红柔和）—— */
+  --color-red-50: #fff1f2;
+  --color-red-100: #ffe1e4;
+  --color-red-200: #ffc7cd;
+  --color-red-300: #ffa1ab;
+  --color-red-400: #f77a87;
+  --color-red-500: #d63f52;
+  --color-red-600: #bf3446;
+  --color-red-700: #9e2a3a;
+  --color-rose-50: #fff1f4;
+  --color-rose-100: #ffe1e8;
+  --color-rose-200: #ffc8d5;
+  --color-rose-300: #ffa3b8;
+  --color-rose-400: #f7809c;
+  --color-rose-500: #d23c68;
+  --color-rose-600: #b8325a;
+  --color-rose-700: #96284a;
+
+  /* —— 语义 · 清新绿（成功）—— */
+  --color-green-50: #ecfaf2;
+  --color-green-100: #d5f4e2;
+  --color-green-200: #ade8c6;
+  --color-green-400: #4ccb86;
+  --color-green-500: #1f9d58;
+  --color-green-600: #16864a;
+  --color-green-700: #126b3b;
+  --color-emerald-50: #ecfaf2;
+  --color-emerald-200: #ade8c6;
+  --color-emerald-400: #4ccb86;
+  --color-emerald-600: #16864a;
+
+  /* —— 语义 · 柠檬（提醒/公告/积分）—— */
+  --color-amber-50: #fffaeb;
+  --color-amber-100: #fff1c7;
+  --color-amber-200: #ffe39a;
+  --color-amber-300: #ffd45c;
+  --color-amber-400: #f5bd2e;
+  --color-amber-500: #e3a008;
+  --color-amber-600: #9a6200;
+  --color-amber-700: #8a5a00;
+  --color-amber-800: #6e4700;
+  --color-amber-900: #573800;
+  --color-orange-50: #fff5ec;
+  --color-orange-100: #ffe8d4;
+  --color-orange-400: #ffa45c;
+  --color-orange-500: #f08a3c;
+  --color-orange-600: #b35a12;
+
+  /* —— 点缀 · 薰衣草（VIP/特殊标签）—— */
+  --color-purple-50: #f5f2ff;
+  --color-purple-100: #ebe5ff;
+  --color-purple-200: #d9cfff;
+  --color-purple-500: #8b6ce6;
+  --color-purple-600: #6a4bcb;
+
+  /* —— 语义 token（ui/ 组件与语义类使用）—— */
+  --color-background: #f3faf7;
+  --color-foreground: #17221f;
   --color-card: #ffffff;
-  --color-card-foreground: #1a1a1a;
-  --color-primary: #2563eb;
+  --color-card-foreground: #17221f;
+  --color-primary: #0b8672;
   --color-primary-foreground: #ffffff;
-  --color-secondary: #f3f4f6;
-  --color-secondary-foreground: #1f2937;
-  --color-muted: #f3f4f6;
-  --color-muted-foreground: #6b7280;
-  --color-accent: #f3f4f6;
-  --color-accent-foreground: #1f2937;
-  --color-destructive: #ef4444;
+  --color-secondary: #edf3f0;
+  --color-secondary-foreground: #263330;
+  --color-muted: #edf3f0;
+  --color-muted-foreground: #66756f;
+  --color-accent: #eafaf5;
+  --color-accent-foreground: #08604f;
+  --color-destructive: #d63f52;
   --color-destructive-foreground: #ffffff;
-  --color-border: #e5e7eb;
-  --color-input: #e5e7eb;
-  --color-ring: #2563eb;
-  --radius: 0.5rem;
+  --color-border: #dfe8e4;
+  --color-input: #dfe8e4;
+  --color-ring: #2cc5a8;
+
+  /* —— 圆角：控件 / 卡片 / 浮层（同心圆角：内层 = 外层 − 内边距）—— */
+  --radius: 0.75rem;
+  --radius-md: 0.5rem;
+  --radius-lg: 0.75rem;
+  --radius-xl: 1.25rem;
+  --radius-2xl: 1.5rem;
+  --radius-3xl: 1.75rem;
+
+  /* —— 阴影：柔和、带一点品牌色调 —— */
+  --shadow-sm: 0 1px 2px rgb(14 40 34 / 0.04), 0 2px 8px rgb(14 40 34 / 0.04);
+  --shadow: 0 2px 6px rgb(14 40 34 / 0.05), 0 6px 18px rgb(14 40 34 / 0.06);
+  --shadow-md: 0 4px 12px rgb(14 40 34 / 0.07), 0 10px 28px rgb(14 40 34 / 0.06);
+  --shadow-lg: 0 8px 24px rgb(14 40 34 / 0.09), 0 18px 44px rgb(14 40 34 / 0.08);
+  --shadow-xl: 0 12px 32px rgb(14 40 34 / 0.12), 0 24px 60px rgb(14 40 34 / 0.1);
+  --shadow-2xl: 0 20px 50px rgb(14 40 34 / 0.18);
+
+  /* —— 动效 —— */
+  --ease-spring: cubic-bezier(0.34, 1.36, 0.64, 1);
+  --ease-out-soft: cubic-bezier(0.22, 1, 0.36, 1);
 }
 
 * {
   border-color: var(--color-border);
 }
 
+/* 顶部安全区：只在「添加到主屏幕」全屏打开（standalone）时避让状态栏。
+   普通浏览器与 App 内置 WebView（今日校园/微信等）本身已把网页放在状态栏下方，
+   但部分内核仍会上报 safe-area-inset-top，直接叠加会让顶部内容凭空下移几十像素。 */
+:root {
+  --safe-top: 0px;
+}
+@media (display-mode: standalone), (display-mode: fullscreen) {
+  :root {
+    --safe-top: env(safe-area-inset-top, 0px);
+  }
+}
+
 html, body {
   margin: 0;
   padding: 0;
@@ -37,12 +183,18 @@ html, body {
 }
 
 body {
-  font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, sans-serif;
-  background-color: #e8e8e8;
+  font-family: var(--font-sans);
+  background-color: #e4efea;
   color: var(--color-foreground);
+  -webkit-font-smoothing: antialiased;
+  -moz-osx-font-smoothing: grayscale;
+  -webkit-tap-highlight-color: transparent;
+  text-rendering: optimizeLegibility;
 }
 
-/* 手机容器 — 固定最大宽度，全屏高度，水平居中 */
+/* 手机容器 — 固定最大宽度，全屏高度，水平居中。
+   背景 = 底色 + 三处柔光斑（薄荷 / 天空蓝 / 柠檬），为玻璃层提供可折射的底图；
+   纯 radial-gradient 实现，无 filter: blur，低端机零额外开销。 */
 #app {
   max-width: 430px;
   width: 100%;
@@ -51,89 +203,581 @@ body {
   height: 100vh;
   height: 100dvh;
   margin: 0 auto;
-  background-color: #ffffff;
+  background-color: var(--color-background);
+  background-image:
+    radial-gradient(70% 38% at 0% 0%, rgb(44 197 168 / 0.22), transparent 72%),
+    radial-gradient(55% 32% at 100% 18%, rgb(90 169 245 / 0.16), transparent 72%),
+    radial-gradient(65% 36% at 60% 100%, rgb(255 212 92 / 0.16), transparent 72%);
+  background-attachment: local;
   overflow: hidden;
   display: flex;
   flex-direction: column;
-  box-shadow: 0 0 20px rgba(0, 0, 0, 0.08);
+  box-shadow: 0 0 40px rgb(14 40 34 / 0.1);
+  position: relative;
 }
 
-/* 管理后台模式 — 全屏宽度 */
+/* 管理后台模式 — 全屏宽度，不使用光斑背景 */
 #app.admin-mode {
   max-width: none;
   box-shadow: none;
   background-color: transparent;
+  background-image: none;
 }
 
 /* ============================================================
- * 暗色主题（html.dark，由 useTheme.ts 按系统时间自动切换）
+ * 液态玻璃（Liquid Glass，网页近似实现）
+ * 仅用于「浮在内容之上的控件层」：底部胶囊 Tab、顶栏、弹层/抽屉。
+ * 内容卡片保持不透明，保证可读性与低端机滚动性能。
+ * 降级：不支持 backdrop-filter / 系统「减弱透明度」→ 高不透明实底。
+ * ============================================================ */
+.glass {
+  background-color: rgb(255 255 255 / 0.66);
+  -webkit-backdrop-filter: blur(22px) saturate(180%);
+  backdrop-filter: blur(22px) saturate(180%);
+  border: 1px solid rgb(255 255 255 / 0.6);
+  box-shadow:
+    inset 0 1px 0 rgb(255 255 255 / 0.75),
+    inset 0 -1px 0 rgb(255 255 255 / 0.25),
+    0 8px 28px rgb(14 40 34 / 0.12);
+}
+.glass-bar {
+  background-color: rgb(243 250 247 / 0.72);
+  -webkit-backdrop-filter: blur(20px) saturate(180%);
+  backdrop-filter: blur(20px) saturate(180%);
+}
+.glass-panel {
+  background-color: rgb(255 255 255 / 0.86);
+  -webkit-backdrop-filter: blur(28px) saturate(180%);
+  backdrop-filter: blur(28px) saturate(180%);
+}
+.dark .glass {
+  background-color: rgb(30 44 40 / 0.62);
+  border-color: rgb(255 255 255 / 0.09);
+  box-shadow:
+    inset 0 1px 0 rgb(255 255 255 / 0.08),
+    0 10px 30px rgb(0 0 0 / 0.45);
+}
+.dark .glass-bar {
+  background-color: rgb(15 24 21 / 0.72);
+}
+.dark .glass-panel {
+  background-color: rgb(26 38 34 / 0.88);
+}
+@supports not ((backdrop-filter: blur(1px)) or (-webkit-backdrop-filter: blur(1px))) {
+  .glass { background-color: rgb(255 255 255 / 0.96); }
+  .glass-bar { background-color: rgb(243 250 247 / 0.97); }
+  .glass-panel { background-color: #ffffff; }
+  .dark .glass { background-color: rgb(30 44 40 / 0.98); }
+  .dark .glass-bar { background-color: rgb(15 24 21 / 0.98); }
+  .dark .glass-panel { background-color: #1a2622; }
+}
+@media (prefers-reduced-transparency: reduce) {
+  .glass, .glass-bar, .glass-panel {
+    -webkit-backdrop-filter: none;
+    backdrop-filter: none;
+  }
+  .glass { background-color: rgb(255 255 255 / 0.97); }
+  .glass-bar { background-color: rgb(243 250 247 / 0.98); }
+  .glass-panel { background-color: #ffffff; }
+  .dark .glass { background-color: #1e2c28; }
+  .dark .glass-bar { background-color: #0f1815; }
+  .dark .glass-panel { background-color: #1a2622; }
+}
+
+/* 品牌渐变（顶栏/头图/主按钮）：薄荷 → 青绿，右上带一点天空蓝 */
+.bg-brand-gradient {
+  background-color: #0b8672;
+  background-image: linear-gradient(135deg, #12a58b 0%, #0b8672 55%, #0a7a6e 100%);
+}
+.dark .bg-brand-gradient {
+  background-color: #0e6f60;
+  background-image: linear-gradient(135deg, #10856f 0%, #0c6d5d 60%, #0b5f55 100%);
+}
+
+/* 头卡装饰光斑容器：overflow:hidden 仍可被 scrollIntoView 等程序化滚动横向推动；
+   clip 彻底禁止滚动（老内核不识别 clip 时回落为同元素上的 overflow-hidden） */
+.overflow-hidden.hero-clip {
+  overflow: clip;
+}
+
+/* 按压反馈：轻微缩放，iOS 风格 */
+.press {
+  transition: transform 0.18s var(--ease-out-soft), opacity 0.18s ease, background-color 0.2s ease, color 0.2s ease;
+}
+.press:active {
+  transform: scale(0.96);
+}
+
+/* 内容进场：轻微上浮淡入 */
+@keyframes rise-in {
+  from { opacity: 0; transform: translateY(8px); }
+  to { opacity: 1; transform: none; }
+}
+.rise-in {
+  animation: rise-in 0.42s var(--ease-out-soft) both;
+}
+
+/* 系统「减弱动态效果」：关闭位移/弹簧动画（保留极短时长，保证 animationend 仍会触发） */
+@media (prefers-reduced-motion: reduce) {
+  *, ::before, ::after {
+    animation-duration: 0.01ms !important;
+    animation-iteration-count: 1 !important;
+    transition-duration: 0.01ms !important;
+    scroll-behavior: auto !important;
+  }
+}
+
+/* ============================================================
+ * 暗色主题（html.dark）· 墨绿夜
  *
  * Tailwind v4 的颜色工具类均引用 --color-* CSS 变量（bg-white →
- * var(--color-white)），此处整体覆盖变量即可让全站 1000+ 处硬编码
- * 颜色类自动适配，无需逐个加 dark: 变体。深彩色（blue-500 等
- * 品牌/状态色）与遮罩黑保持原值。彩底上的白色元素用类名级规则恢复。
+ * var(--color-white)），此处整体覆盖变量即可让全站硬编码颜色类自动适配。
+ * 规则：
+ *   - 白 / 灰阶反转（越浅的灰在暗色下越亮，保持层次感）；
+ *   - 彩色 50/100/200 浅底 → 对应深色调底；
+ *   - 彩色 400–700 文字色提亮，保证在暗卡片上 ≥ 4.5 对比度；
+ *   - 彩底上的白色元素用类名级规则恢复为纯白（见下方）。
  * ============================================================ */
 .dark {
-  /* —— 基础调色板：白与灰阶（越浅的灰在暗色下越亮，保持层次感）—— */
-  --color-white: #1e1e2a;
-  --color-gray-50: #232331;
-  --color-gray-100: #2a2a3a;
-  --color-gray-200: #36364a;
-  --color-gray-300: #474763;
-  --color-gray-400: #8f8fab;
-  --color-gray-500: #a5a5c3;
-  --color-gray-600: #bcbcd6;
-  --color-gray-700: #d4d4e6;
-  --color-gray-800: #e5e5f0;
-  --color-gray-900: #ededf6;
-  --color-gray-950: #f4f4fa;
-  /* —— 彩色浅底 → 对应暗色调 —— */
-  --color-blue-50: #1c2a4d;
-  --color-blue-100: #243660;
-  --color-red-50: #3d1c28;
-  --color-red-100: #522534;
+  --color-white: #18221f;
+  --color-gray-50: #1c2724;
+  --color-gray-100: #22302c;
+  --color-gray-200: #2c3b36;
+  --color-gray-300: #3b4c46;
+  --color-gray-400: #7f908a;
+  --color-gray-500: #98aba4;
+  --color-gray-600: #b6c5bf;
+  --color-gray-700: #cbd8d3;
+  --color-gray-800: #dde7e3;
+  --color-gray-900: #eaf2ef;
+  --color-gray-950: #f4f8f6;
+
+  --color-brand-50: #163a33;
+  --color-brand-100: #1b4840;
+  --color-brand-200: #22594f;
+  --color-brand-300: #2d7a6b;
+  --color-brand-400: #3ad3b6;
+  --color-brand-500: #16a88d;
+  --color-brand-600: #0e9079;
+  --color-brand-700: #7fe6d0;
+  --color-blue-50: #163a33;
+  --color-blue-100: #1b4840;
+  --color-blue-200: #22594f;
+  --color-blue-300: #2d7a6b;
+  --color-blue-400: #3ad3b6;
+  --color-blue-500: #16a88d;
+  --color-blue-600: #0e9079;
+  --color-blue-700: #7fe6d0;
+  --color-blue-800: #a6efdf;
+
+  --color-sky-50: #172c40;
+  --color-sky-100: #1d3850;
+  --color-sky-500: #6cb4ff;
+  --color-sky-600: #8cc4ff;
+  --color-indigo-50: #172c40;
+  --color-indigo-100: #1d3850;
+  --color-indigo-500: #6cb4ff;
+
+  --color-red-50: #3a1d24;
+  --color-red-100: #4a232c;
+  --color-red-200: #5e2b36;
+  --color-red-300: #7a3442;
+  --color-red-400: #ff8c96;
+  --color-red-500: #f2636f;
+  --color-red-600: #ff8c96;
+  --color-red-700: #ffb3ba;
   --color-rose-50: #3a1c2b;
-  --color-rose-100: #4d2539;
-  --color-green-50: #173224;
-  --color-green-100: #1f4430;
-  --color-amber-50: #3a2f16;
-  --color-amber-100: #4d3f1e;
-  --color-purple-100: #322552;
-  /* —— 语义 token（ui/ 组件与语义类使用）—— */
-  --color-background: #15151f;
-  --color-foreground: #ededf6;
-  --color-card: #1e1e2a;
-  --color-card-foreground: #ededf6;
-  --color-secondary: #262636;
-  --color-secondary-foreground: #d4d4e6;
-  --color-muted: #262636;
-  --color-muted-foreground: #9c9cb8;
-  --color-accent: #262636;
-  --color-accent-foreground: #d4d4e6;
-  --color-border: #33334a;
-  --color-input: #3a3a55;
-  --color-ring: #3b82f6;
+  --color-rose-100: #4a2337;
+  --color-rose-200: #5e2c45;
+  --color-rose-300: #7a3758;
+  --color-rose-400: #ff8fab;
+  --color-rose-500: #ef6a8e;
+  --color-rose-600: #ff8fab;
+  --color-rose-700: #ffb8cb;
+
+  --color-green-50: #14301f;
+  --color-green-100: #183b27;
+  --color-green-200: #1f4d33;
+  --color-green-400: #4ccb86;
+  --color-green-500: #3fbf79;
+  --color-green-600: #4ccb86;
+  --color-green-700: #8fe3b5;
+  --color-emerald-50: #14301f;
+  --color-emerald-200: #1f4d33;
+  --color-emerald-600: #4ccb86;
+
+  --color-amber-50: #332a16;
+  --color-amber-100: #40331a;
+  --color-amber-200: #52411f;
+  --color-amber-300: #b08a2e;
+  --color-amber-400: #f7c54a;
+  --color-amber-500: #e9b23a;
+  --color-amber-600: #f7c54a;
+  --color-amber-700: #ffd978;
+  --color-amber-800: #ffe39a;
+  --color-amber-900: #fff0c2;
+  --color-orange-50: #35251a;
+  --color-orange-100: #44301f;
+  --color-orange-600: #ffb47a;
+
+  --color-purple-50: #261f3d;
+  --color-purple-100: #2f264d;
+  --color-purple-200: #3b3061;
+  --color-purple-600: #b9a5ff;
+
+  --color-background: #0f1815;
+  --color-foreground: #eaf2ef;
+  --color-card: #18221f;
+  --color-card-foreground: #eaf2ef;
+  --color-primary: #0e9079;
+  --color-secondary: #22302c;
+  --color-secondary-foreground: #cbd8d3;
+  --color-muted: #22302c;
+  --color-muted-foreground: #98aba4;
+  --color-accent: #163a33;
+  --color-accent-foreground: #7fe6d0;
+  --color-destructive: #e0505e;
+  --color-border: #2a3934;
+  --color-input: #33443e;
+  --color-ring: #3ad3b6;
 }
 
 /* —— 彩底上的白色元素恢复纯白（--color-white 已被覆盖为卡片暗色）—— */
 .dark .text-white { color: #fff; }
 .dark .text-white\/95 { color: rgb(255 255 255 / 0.95); }
+.dark .text-white\/90 { color: rgb(255 255 255 / 0.9); }
 .dark .text-white\/80 { color: rgb(255 255 255 / 0.8); }
+.dark .text-white\/75 { color: rgb(255 255 255 / 0.75); }
 .dark .text-white\/70 { color: rgb(255 255 255 / 0.7); }
+.dark .bg-white\/10 { background-color: rgb(255 255 255 / 0.1); }
 .dark .bg-white\/15 { background-color: rgb(255 255 255 / 0.15); }
 .dark .bg-white\/20 { background-color: rgb(255 255 255 / 0.2); }
 .dark .bg-white\/25 { background-color: rgb(255 255 255 / 0.25); }
 .dark .hover\:bg-white\/25:hover { background-color: rgb(255 255 255 / 0.25); }
 .dark .ring-white\/30 { --tw-ring-color: rgb(255 255 255 / 0.3); }
+.dark .border-white\/30 { border-color: rgb(255 255 255 / 0.3); }
 
 /* —— 全局容器暗色 —— */
 .dark body {
-  background-color: #0d0d14;
+  background-color: #070c0a;
 }
 .dark #app {
-  background-color: #15151f;
-  box-shadow: 0 0 20px rgba(0, 0, 0, 0.45);
+  background-color: var(--color-background);
+  background-image:
+    radial-gradient(70% 38% at 0% 0%, rgb(44 197 168 / 0.14), transparent 72%),
+    radial-gradient(55% 32% at 100% 18%, rgb(90 169 245 / 0.09), transparent 72%),
+    radial-gradient(65% 36% at 60% 100%, rgb(255 212 92 / 0.06), transparent 72%);
+  box-shadow: 0 0 40px rgb(0 0 0 / 0.5);
 }
 .dark #app.admin-mode {
   background-color: transparent;
+  background-image: none;
+}
+
+/* ============================================================
+ * 管理后台组件类（adm-*）
+ * 后台以信息密度与可读性优先：不用玻璃，实底卡片 + 细边框 + 柔和阴影；
+ * 统一页头、卡片、表格、徽标、工具栏、分页、空状态，各页只需套类名。
+ * ============================================================ */
+.adm-page {
+  padding: 16px;
+  max-width: 1480px;
+  margin: 0 auto;
+}
+@media (min-width: 768px) {
+  .adm-page { padding: 28px 32px 40px; }
+}
+/* 页头：图标 + 标题 + 副标题，右侧放主操作 */
+.adm-head {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 12px;
+  flex-wrap: wrap;
+  margin-bottom: 20px;
+}
+.adm-head-icon {
+  width: 42px;
+  height: 42px;
+  border-radius: 14px;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  flex-shrink: 0;
+  color: #fff;
+  background-image: linear-gradient(135deg, #12a58b 0%, #0b8672 100%);
+  box-shadow: 0 6px 16px rgb(11 134 114 / 0.22);
+}
+.adm-title {
+  font-size: 20px;
+  line-height: 1.25;
+  font-weight: 700;
+  letter-spacing: -0.01em;
+  color: var(--color-gray-900);
+}
+.adm-sub {
+  margin-top: 2px;
+  font-size: 13px;
+  color: var(--color-gray-500);
+}
+/* 卡片 */
+.adm-card {
+  background-color: var(--color-card);
+  border: 1px solid var(--color-gray-200);
+  border-radius: 18px;
+  box-shadow: 0 1px 2px rgb(14 40 34 / 0.04), 0 4px 14px rgb(14 40 34 / 0.04);
+}
+.adm-card-head {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 12px;
+  padding: 14px 18px;
+  border-bottom: 1px solid var(--color-gray-100);
+}
+.adm-card-title {
+  font-size: 15px;
+  font-weight: 600;
+  color: var(--color-gray-900);
+}
+/* 统计卡 */
+.adm-stat {
+  display: flex;
+  align-items: center;
+  gap: 14px;
+  padding: 16px 18px;
+}
+.adm-stat-icon {
+  width: 44px;
+  height: 44px;
+  border-radius: 14px;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  flex-shrink: 0;
+}
+.adm-stat-label {
+  font-size: 12px;
+  color: var(--color-gray-500);
+}
+.adm-stat-value {
+  margin-top: 2px;
+  font-size: 22px;
+  line-height: 1.2;
+  font-weight: 700;
+  color: var(--color-gray-900);
+  font-variant-numeric: tabular-nums;
+}
+/* 工具栏（搜索 + 筛选 + 操作） */
+.adm-toolbar {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  flex-wrap: wrap;
+  margin-bottom: 14px;
+}
+/* 表格 */
+.adm-table {
+  width: 100%;
+  font-size: 13px;
+  border-collapse: separate;
+  border-spacing: 0;
+}
+.adm-table thead th {
+  position: sticky;
+  top: 0;
+  z-index: 1;
+  background-color: var(--color-gray-50);
+  color: var(--color-gray-500);
+  font-size: 12px;
+  font-weight: 600;
+  text-align: left;
+  white-space: nowrap;
+  border-bottom: 1px solid var(--color-gray-200);
+}
+.adm-table tbody tr {
+  transition: background-color 0.15s ease;
+}
+.adm-table tbody tr:hover {
+  background-color: var(--color-gray-50);
+}
+.adm-table tbody td {
+  border-bottom: 1px solid var(--color-gray-100);
+  color: var(--color-gray-700);
+  vertical-align: middle;
+}
+.adm-table tbody tr:last-child td {
+  border-bottom: 0;
+}
+/* 徽标 */
+.adm-badge {
+  display: inline-flex;
+  align-items: center;
+  gap: 4px;
+  height: 22px;
+  padding: 0 8px;
+  border-radius: 999px;
+  font-size: 12px;
+  font-weight: 600;
+  white-space: nowrap;
+  line-height: 1;
+}
+.adm-badge::before {
+  content: '';
+  width: 6px;
+  height: 6px;
+  border-radius: 999px;
+  background-color: currentColor;
+  opacity: 0.85;
+}
+.adm-badge.no-dot::before { display: none; }
+.adm-badge-green { background-color: var(--color-green-50); color: var(--color-green-700); }
+.adm-badge-red { background-color: var(--color-red-50); color: var(--color-red-600); }
+.adm-badge-amber { background-color: var(--color-amber-50); color: var(--color-amber-700); }
+.adm-badge-brand { background-color: var(--color-brand-50); color: var(--color-brand-700); }
+.adm-badge-purple { background-color: var(--color-purple-50); color: var(--color-purple-600); }
+.adm-badge-sky { background-color: var(--color-sky-50); color: var(--color-sky-600); }
+.adm-badge-gray { background-color: var(--color-gray-100); color: var(--color-gray-600); }
+/* 行内文字按钮（表格操作） */
+.adm-link {
+  display: inline-flex;
+  align-items: center;
+  gap: 4px;
+  height: 28px;
+  padding: 0 8px;
+  border-radius: 8px;
+  font-size: 12px;
+  font-weight: 600;
+  white-space: nowrap;
+  transition: background-color 0.15s ease, color 0.15s ease;
+}
+.adm-link-brand { color: var(--color-brand-600); }
+.adm-link-brand:hover { background-color: var(--color-brand-50); }
+.adm-link-red { color: var(--color-red-600); }
+.adm-link-red:hover { background-color: var(--color-red-50); }
+.adm-link-green { color: var(--color-green-600); }
+.adm-link-green:hover { background-color: var(--color-green-50); }
+.adm-link-gray { color: var(--color-gray-600); }
+.adm-link-gray:hover { background-color: var(--color-gray-100); }
+/* 弱化占位（--、/、未设置）：比 gray-300 深，保证 ≥ 3:1 */
+.adm-muted { color: var(--color-gray-400); }
+/* 分段筛选（全部 / 状态） */
+.adm-seg {
+  display: inline-flex;
+  padding: 3px;
+  gap: 2px;
+  border-radius: 12px;
+  background-color: var(--color-gray-100);
+}
+.adm-seg > button {
+  height: 30px;
+  padding: 0 12px;
+  border-radius: 9px;
+  font-size: 13px;
+  font-weight: 500;
+  color: var(--color-gray-600);
+  white-space: nowrap;
+  transition: background-color 0.2s ease, color 0.2s ease, box-shadow 0.2s ease;
+}
+.adm-seg > button.is-active {
+  background-color: var(--color-card);
+  color: var(--color-brand-600);
+  font-weight: 600;
+  box-shadow: 0 1px 2px rgb(14 40 34 / 0.08), 0 0 0 1px rgb(14 40 34 / 0.04);
+}
+/* 空状态 */
+.adm-empty {
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  justify-content: center;
+  padding: 56px 16px;
+  color: var(--color-gray-500);
+  font-size: 13px;
+  text-align: center;
+}
+.adm-empty-icon {
+  width: 52px;
+  height: 52px;
+  border-radius: 16px;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  margin-bottom: 10px;
+  background-color: var(--color-gray-100);
+  color: var(--color-gray-400);
+}
+.dark .adm-card {
+  box-shadow: 0 1px 2px rgb(0 0 0 / 0.3);
+}
+.dark .adm-seg > button.is-active {
+  background-color: var(--color-gray-300);
+  color: var(--color-brand-700);
+}
+.dark .adm-head-icon {
+  background-image: linear-gradient(135deg, #10856f 0%, #0c6d5d 100%);
+  box-shadow: none;
+}
+/* 分页 */
+.adm-pager {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 12px;
+  flex-wrap: wrap;
+  padding: 12px 18px;
+  border-top: 1px solid var(--color-gray-100);
+  font-size: 12px;
+  color: var(--color-gray-500);
+}
+.adm-pager-btn {
+  width: 32px;
+  height: 32px;
+  border-radius: 10px;
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  color: var(--color-gray-600);
+  border: 1px solid var(--color-gray-200);
+  background-color: var(--color-card);
+  transition: background-color 0.15s ease, border-color 0.15s ease;
+}
+.adm-pager-btn:hover:not(:disabled) {
+  background-color: var(--color-gray-50);
+  border-color: var(--color-gray-300);
+}
+.adm-pager-btn:disabled {
+  opacity: 0.4;
+  cursor: not-allowed;
+}
+.adm-select {
+  height: 32px;
+  padding: 0 8px;
+  border-radius: 10px;
+  border: 1px solid var(--color-gray-200);
+  background-color: var(--color-card);
+  color: var(--color-gray-600);
+  font-size: 12px;
+}
+.adm-select:focus {
+  outline: none;
+  border-color: var(--color-brand-400);
+  box-shadow: 0 0 0 3px rgb(44 197 168 / 0.15);
+}
+/* 今日已登录用户行：浅绿底 + 左侧色条 */
+.adm-row-today td {
+  background-color: var(--color-green-50);
+}
+.adm-row-today td:first-child {
+  box-shadow: inset 3px 0 0 var(--color-green-500);
+}
+/* 成功操作按钮：固定绿（白字 ≥ 4.5:1）。bg-green-500 在暗色色板下会被提亮，白字看不清 */
+.adm-btn-success {
+  color: #fff;
+  background-image: linear-gradient(135deg, #1f9d58 0%, #16864a 100%);
+}
+/* 品牌实色按钮/开关（固定色，白字 ≥ 4.5:1；bg-blue-500 在暗色色板下被提亮，不宜放白字） */
+.adm-btn-brand {
+  color: #fff;
+  background-color: #0b8672;
 }

frondend/src/components/ConfirmHost.vue

@@ -0,0 +1,61 @@
+<script setup lang="ts">
+// ConfirmHost —— 全局确认/提示弹窗宿主，挂在 App.vue，全站仅此一个实例。
+//
+// 与 useConfirm 的单例状态配合：任何组件 await confirmDialog()/alertDialog() 都会
+// 反映到这里渲染的 AppDialog 上。视觉对齐 HomeView「确认再次打卡 / 签到次数不足」那类
+// 居中弹窗（圆形图标底 + 标题 + 灰色说明 + 双按钮）。
+import AppDialog from '@/components/ui/dialog/AppDialog.vue'
+import { Button } from '@/components/ui/button'
+import { AlertTriangle, CircleAlert } from 'lucide-vue-next'
+import { useConfirm } from '@/composables/useConfirm'
+
+const { state, respond } = useConfirm()
+</script>
+
+<template>
+  <AppDialog
+    :open="state?.open || false"
+    variant="center"
+    z-class="z-[300]"
+    panel-class="w-[85%] sm:max-w-sm"
+    :fade="true"
+    :title="state?.title || '提示'"
+    @update:open="(v: boolean) => { if (!v) respond(false) }"
+  >
+    <div v-if="state" class="p-6 text-center">
+      <div
+        :class="[
+          'w-14 h-14 rounded-full flex items-center justify-center mx-auto mb-4',
+          state.danger ? 'bg-red-100' : 'bg-brand-100',
+        ]"
+      >
+        <AlertTriangle v-if="state.danger" class="w-7 h-7 text-red-500" />
+        <CircleAlert v-else class="w-7 h-7 text-blue-500" />
+      </div>
+      <h3 class="text-base font-semibold text-gray-900 mb-2">{{ state.title }}</h3>
+      <p
+        v-if="state.content"
+        class="text-sm text-gray-500 leading-relaxed whitespace-pre-wrap"
+      >
+        {{ state.content }}
+      </p>
+      <div class="mt-5 flex gap-2">
+        <Button
+          v-if="!state.alertOnly"
+          variant="outline"
+          class="flex-1 h-11 text-sm"
+          @click="respond(false)"
+        >
+          {{ state.cancelText || '取消' }}
+        </Button>
+        <Button
+          :variant="state.danger ? 'destructive' : 'default'"
+          class="flex-1 h-11 text-sm"
+          @click="respond(true)"
+        >
+          {{ state.confirmText || '确定' }}
+        </Button>
+      </div>
+    </div>
+  </AppDialog>
+</template>

frondend/src/components/GuideOverlay.vue

@@ -50,19 +50,28 @@ interface GuideStep {
 }
 
 const steps: GuideStep[] = [
-  {
-    tab: 'profile',
-    title: '领取签到次数',
-    targets: ['[data-guide="profile-invite-redeem"]', '[data-guide="profile-invite-row"]'],
-    descByKind: () =>
-      '新用户注册即送奖励积分，邀请好友也能赚积分。\n积分满 1 后，点这里「兑换」按钮即可换成签到次数，1 积分 = 1 次签到，可重复兑换。',
-  },
   {
     tab: 'profile',
     title: '先绑定设备码',
     targets: ['[data-guide="profile-device-code"]'],
     descByKind: () =>
-      '签到任务依赖设备码执行。到这一栏点「重新绑定」用手机扫码授权，或点「随机」直接生成设备码。\n注意：随机设备码与真实手机不一致，执行签到时现有手机会提示「频繁切换设备」无法签到，建议优先扫码授权。',
+      '签到任务依赖设备码执行。到这一栏点「去绑定 / 重绑」用手机扫码授权，或点「随机」直接生成设备码。\n注意：随机设备码与真实手机不一致，执行签到时现有手机会提示「频繁切换设备」无法签到，建议优先扫码授权。',
+  },
+  {
+    tab: 'profile',
+    title: '填写邀请码',
+    targets: ['[data-guide="profile-fill-invite"]', '[data-guide="profile-invite-row"]'],
+    descByKind: (kind) =>
+      kind === 'profile-fill-invite'
+        ? '如果你有好友的邀请码，点这里填写后，你和好友都能获得奖励积分。'
+        : '如果你有好友的邀请码，可在「邀请同学」卡片里点「点此填写」输入，你和好友都能获得奖励积分。',
+  },
+  {
+    tab: 'profile',
+    title: '兑换积分',
+    targets: ['[data-guide="profile-invite-redeem"]'],
+    descByKind: () =>
+      '邀请好友可赚取积分，积分满 1 后，点这个「邀请积分」格子即可换成执行次数，1 积分 = 1 次，可重复兑换。',
   },
   {
     tab: 'home',
@@ -83,26 +92,26 @@ const steps: GuideStep[] = [
   },
   {
     tab: 'profile',
-    title: '次数不够？邀请好友赚积分',
-    targets: ['[data-guide="profile-invite-copy"]', '[data-guide="profile-invite-generate"]'],
+    title: '推广赚积分',
+    targets: ['[data-guide="profile-invite-copy"]', '[data-guide="profile-fill-invite"]'],
     descByKind: (kind) => {
       const inviter = fmtReward(props.inviterRewardPerInvite)
       const invitee = fmtReward(props.inviteeRewardPerInvite)
-      if (kind === 'profile-invite-generate') {
-        return '先点「生成邀请码」，生成后把链接发给同学；TA 通过你的链接注册登录后，你们都能获得奖励积分，多邀多得。'
+      if (kind === 'profile-fill-invite') {
+        return '你还没填写邀请码。点「点此填写」输入好友的邀请码，双方都能获得奖励积分。'
       }
       if (inviter !== null && invitee !== null) {
-        return `把链接发给同学，TA 通过你的链接注册登录后，你可得 ${inviter} 积分、TA 得 ${invitee} 积分，多邀多得，随时可兑换签到次数。`
+        return `把邀请码复制发给同学，TA 在「我的」填写后，你可得 ${inviter} 积分、TA 得 ${invitee} 积分，多邀多得，随时可兑换执行次数。`
       }
-      return '把链接发给同学，TA 通过你的链接注册登录后，你和 TA 都能获得一定积分奖励，多邀多得，随时可兑换签到次数。'
+      return '把邀请码发给同学，TA 填写后你和 TA 都能获得奖励积分，多邀多得，随时可兑换执行次数。'
     },
   },
   {
     tab: 'profile',
-    title: 'VIP 会员：签到不限次',
+    title: 'VIP 会员：执行不限次',
     targets: ['[data-guide="profile-vip-btn"]'],
     descByKind: () =>
-      '普通签到次数：每执行一次任务扣 1 次，用完需要再兑换。\nVIP 会员：有效期内执行任务不限次数（无限次），不再扣签到次数。\n点「续费 VIP」输入 VIP 兑换码即可开通，到期时间自动顺延。',
+      '普通执行次数：每执行一次任务扣 1 次，用完需要再兑换。\nVIP 会员：有效期内执行任务不限次数（无限次），不再扣执行次数。\n点会员卡上的「开通 VIP / 续费」输入 VIP 兑换码即可开通，到期时间自动顺延。',
   },
 ]
 
@@ -120,18 +129,18 @@ const resolvedKind = computed(() => {
 })
 
 const guideDesc = computed(() => {
-  // 第四步命中示例卡自身的执行按钮（mock 场景）时的专属文案
+  // 执行签到步命中示例卡自身的执行按钮（mock 场景）时的专属文案
   const el = curTarget.value
-  if (step.value === 3 && el && resolvedKind.value === 'home-task-exec' && el.closest('.guide-root')) {
+  if (step.value === 4 && el && resolvedKind.value === 'home-task-exec' && el.closest('.guide-root')) {
     return '点这张示例卡片右侧的「执行」按钮，即可开始今天的签到，之后每天无需再手动操作。'
   }
   return current.value.descByKind(resolvedKind.value)
 })
 
-// 无真实任务时（第三步/第四步）：展示示例任务卡引导；
-// 第四步升级命中示例卡自身的执行按钮（位于 guide-root 内）时仍属 mock 场景
+// 无真实任务时（新建任务/执行签到两步）：展示示例任务卡引导；
+// 执行签到步升级命中示例卡自身的执行按钮（位于 guide-root 内）时仍属 mock 场景
 const mockMode = computed(() => {
-  if (!props.show || (step.value !== 2 && step.value !== 3)) return false
+  if (!props.show || (step.value !== 3 && step.value !== 4)) return false
   if (resolvedKind.value === 'home-task-empty') return true
   const el = curTarget.value
   return !!(el && resolvedKind.value === 'home-task-exec' && el.closest('.guide-root'))
@@ -317,7 +326,9 @@ async function locate() {
   // 排在目标上/下方，不会停留在顶部兜底样式遮住目标
   measure(el)
   try {
-    if (moved) el.scrollIntoView({ block: 'center', inline: 'center' })
+    // 只做纵向居中（inline: 'nearest'）：inline: 'center' 会把 overflow:hidden 的祖先
+    // （如头卡装饰光斑超出边界的容器）横向滚动，导致整块内容向左错位
+    if (moved) el.scrollIntoView({ block: 'center', inline: 'nearest' })
   } catch {
     // ignore（个别浏览器不支持 options）
   }
@@ -528,18 +539,18 @@ const bubbleStyle = computed(() => {
             <div class="flex-1 min-w-0 mr-2">
               <div class="flex items-center gap-1.5">
                 <span class="text-sm font-medium text-gray-900 whitespace-nowrap">晚签到</span>
-                <span class="text-[10px] px-1.5 py-0.5 rounded-full bg-purple-100 text-purple-600 whitespace-nowrap">晚归签到</span>
+                <span class="text-xs px-1.5 py-0.5 rounded-full bg-purple-100 text-purple-600 whitespace-nowrap">晚归签到</span>
               </div>
               <div class="flex items-center gap-2 mt-1">
-                <span class="text-[10px] px-1.5 py-0.5 rounded-full font-medium bg-amber-100 text-amber-600 whitespace-nowrap">待签到</span>
-                <span class="text-[10px] text-gray-400 whitespace-nowrap">示例任务</span>
+                <span class="text-xs px-1.5 py-0.5 rounded-full font-medium bg-amber-100 text-amber-600 whitespace-nowrap">待签到</span>
+                <span class="text-xs text-gray-400 whitespace-nowrap">示例任务</span>
               </div>
             </div>
             <button
               type="button"
-              :data-guide="step === 3 ? 'home-task-exec' : undefined"
+              :data-guide="step === 4 ? 'home-task-exec' : undefined"
               class="w-8 h-8 flex items-center justify-center rounded-lg bg-blue-500 text-white shadow-sm flex-shrink-0"
-              :class="step === 3 ? 'guide-mock-pulse' : ''"
+              :class="step === 4 ? 'guide-mock-pulse' : ''"
               title="执行签到"
             >
               <Play class="w-4 h-4" />
@@ -551,7 +562,7 @@ const bubbleStyle = computed(() => {
         <div ref="bubbleEl" :style="bubbleStyle" class="guide-bubble absolute z-10">
           <!-- 顶部：标识 + 步骤 + 跳过 -->
           <div class="flex items-center gap-2">
-            <span class="flex items-center gap-1 text-[10px] font-semibold text-blue-600 flex-shrink-0">
+            <span class="flex items-center gap-1 text-xs font-semibold text-blue-600 flex-shrink-0">
               <Sparkles class="w-3 h-3" />
               新手引导
             </span>
@@ -574,7 +585,7 @@ const bubbleStyle = computed(() => {
 
           <!-- 标题与说明 -->
           <h3 class="text-[15px] font-bold text-gray-900 mt-2.5">{{ current.title }}</h3>
-          <p v-if="waitingTarget" class="text-[11px] text-blue-500 mt-1.5 font-medium">正在为你切换到目标页面…</p>
+          <p v-if="waitingTarget" class="text-xs text-blue-500 mt-1.5 font-medium">正在为你切换到目标页面…</p>
           <p class="text-xs text-gray-500 leading-relaxed whitespace-pre-line mt-1.5 guide-desc">{{ guideDesc }}</p>
 
           <!-- 操作按钮 -->

frondend/src/components/PinnedNotice.vue

@@ -0,0 +1,267 @@
+<script setup lang="ts">
+// 置顶公告条（首页顶部）。
+// 交互：一次展示一条，每 4 秒向上翻页切换；内容过长时先横向缓慢滚动到末尾再翻页；
+// 点击整条打开底部面板查看全部置顶公告全文。页面切到后台 / 系统「减弱动态效果」时暂停轮播。
+import { computed, nextTick, onMounted, onUnmounted, ref, watch } from 'vue'
+import { Megaphone, ChevronRight, X } from 'lucide-vue-next'
+import AppDialog from '@/components/ui/dialog/AppDialog.vue'
+import type { PinnedAnnouncement } from '@/api/announcement'
+
+const props = defineProps<{ items: PinnedAnnouncement[] }>()
+
+const index = ref(0)
+const showAll = ref(false)
+const current = computed(() => props.items[index.value] || null)
+
+// —— 长文本横向滚动：测量溢出宽度，按 40px/s 速度滚动到末尾 ——
+const viewport = ref<HTMLElement | null>(null)
+const track = ref<HTMLElement | null>(null)
+const overflow = ref(0)
+const DWELL = 4000 // 短内容停留时长
+const SCROLL_SPEED = 55 // px/s（长文本按此速度滚动，总时长再夹在 3–9 秒之间）
+const reduceMotion = typeof window !== 'undefined' && window.matchMedia?.('(prefers-reduced-motion: reduce)').matches
+
+let timer: ReturnType<typeof setTimeout> | null = null
+
+function clearTimer() {
+  if (timer) clearTimeout(timer)
+  timer = null
+}
+
+async function measure() {
+  overflow.value = 0
+  await nextTick()
+  const v = viewport.value
+  const t = track.value
+  if (!v || !t) return
+  overflow.value = Math.max(0, Math.ceil(t.scrollWidth - v.clientWidth))
+}
+
+/** 当前条展示时长：短内容固定停留；长内容 = 起步停顿 + 滚动时长 + 末尾停顿 */
+const scrollDuration = computed(() => (overflow.value > 0 ? Math.min(9, Math.max(3, overflow.value / SCROLL_SPEED)) : 0))
+
+function schedule() {
+  clearTimer()
+  if (props.items.length < 2 && overflow.value === 0) return
+  if (reduceMotion || document.visibilityState !== 'visible' || showAll.value) return
+  const ms = overflow.value > 0 ? 1000 + scrollDuration.value * 1000 + 1200 : DWELL
+  timer = setTimeout(next, ms)
+}
+
+function next() {
+  if (props.items.length > 1) {
+    index.value = (index.value + 1) % props.items.length
+  } else {
+    // 只有一条且内容过长：重置后重新滚动一遍
+    overflow.value = 0
+    void measure().then(schedule)
+  }
+}
+
+watch(index, async () => {
+  await measure()
+  schedule()
+})
+
+watch(
+  () => props.items,
+  async () => {
+    if (index.value >= props.items.length) index.value = 0
+    await measure()
+    schedule()
+  },
+  { deep: false },
+)
+
+function onVisibility() {
+  if (document.visibilityState === 'visible') schedule()
+  else clearTimer()
+}
+
+function openAll() {
+  showAll.value = true
+  clearTimer()
+}
+
+function closeAll(v: boolean) {
+  if (v) return
+  showAll.value = false
+  schedule()
+}
+
+function fmtDate(s: string) {
+  if (!s) return ''
+  const d = new Date(s)
+  if (Number.isNaN(d.getTime())) return ''
+  return `${d.getMonth() + 1}月${d.getDate()}日`
+}
+
+onMounted(async () => {
+  await measure()
+  schedule()
+  document.addEventListener('visibilitychange', onVisibility)
+  window.addEventListener('resize', measure)
+})
+
+onUnmounted(() => {
+  clearTimer()
+  document.removeEventListener('visibilitychange', onVisibility)
+  window.removeEventListener('resize', measure)
+})
+</script>
+
+<template>
+  <button
+    v-if="current"
+    type="button"
+    class="press notice-card w-full flex items-center gap-2.5 rounded-2xl pl-2 pr-2.5 py-2 text-left"
+    :aria-label="`置顶公告：${current.title}，点击查看全部`"
+    @click="openAll"
+  >
+    <!-- 图标：柠檬色圆底 + 轻微摆动 -->
+    <span class="notice-icon w-8 h-8 rounded-xl flex items-center justify-center flex-shrink-0">
+      <Megaphone class="w-4 h-4" :stroke-width="2.4" />
+    </span>
+
+    <!-- 内容视窗：上下翻页切换 + 长文本横向滚动 -->
+    <span ref="viewport" class="relative flex-1 min-w-0 h-5 overflow-hidden">
+      <Transition name="notice-flip">
+        <span
+          :key="current.id + '-' + index"
+          class="absolute inset-0 flex items-center"
+        >
+          <span
+            ref="track"
+            class="notice-track whitespace-nowrap text-[13px] leading-5"
+            :class="overflow > 0 && 'is-scrolling'"
+            :style="overflow > 0 ? { '--notice-shift': `-${overflow}px`, '--notice-dur': `${scrollDuration}s` } : undefined"
+          >
+            <span class="notice-title font-semibold">{{ current.title }}</span>
+            <span class="notice-sep mx-1.5">·</span>
+            <span class="notice-text">{{ current.content }}</span>
+          </span>
+        </span>
+      </Transition>
+    </span>
+
+    <!-- 计数 + 箭头 -->
+    <span class="flex items-center gap-0.5 flex-shrink-0">
+      <span v-if="items.length > 1" class="notice-count text-xs tabular-nums font-medium">{{ index + 1 }}/{{ items.length }}</span>
+      <ChevronRight class="notice-arrow w-4 h-4" />
+    </span>
+  </button>
+
+  <!-- 全部置顶公告（底部面板） -->
+  <AppDialog
+    :open="showAll"
+    overlay-class="bg-black/40"
+    panel-class="sm:max-w-sm max-h-[75vh] shadow-2xl"
+    :fade="true"
+    title="置顶公告"
+    @update:open="closeAll"
+  >
+    <div class="flex justify-center pt-2.5 pb-1 flex-shrink-0">
+      <div class="w-9 h-1 rounded-full bg-gray-300" />
+    </div>
+    <div class="flex items-center justify-between px-5 py-2 flex-shrink-0">
+      <div class="flex items-center gap-2">
+        <span class="notice-icon w-8 h-8 rounded-xl flex items-center justify-center">
+          <Megaphone class="w-4 h-4" :stroke-width="2.4" />
+        </span>
+        <span class="font-bold text-gray-900 text-base">置顶公告</span>
+      </div>
+      <button class="w-8 h-8 rounded-full hover:bg-gray-100 flex items-center justify-center" aria-label="关闭" @click="closeAll(false)">
+        <X class="w-4 h-4 text-gray-400" />
+      </button>
+    </div>
+    <div class="flex-1 overflow-y-auto px-5 pt-1 pb-6 space-y-3">
+      <article
+        v-for="(a, i) in items"
+        :key="a.id"
+        class="rounded-2xl border p-4"
+        :class="i === index ? 'border-amber-200 bg-amber-50' : 'border-gray-100 bg-gray-50'"
+      >
+        <div class="flex items-start justify-between gap-3 mb-1.5">
+          <h4 class="text-sm font-semibold text-gray-900 leading-snug">{{ a.title }}</h4>
+          <span v-if="fmtDate(a.createdAt)" class="text-xs text-gray-400 flex-shrink-0 mt-0.5">{{ fmtDate(a.createdAt) }}</span>
+        </div>
+        <p class="text-sm text-gray-600 leading-relaxed whitespace-pre-wrap break-words">{{ a.content }}</p>
+      </article>
+    </div>
+  </AppDialog>
+</template>
+
+<style scoped>
+/* 卡片：柠檬暖色玻璃（亮）/ 暗金半透明（暗），与品牌薄荷色区分开，表达「提醒」语义 */
+.notice-card {
+  background: linear-gradient(135deg, rgb(255 246 214 / 0.92), rgb(255 250 235 / 0.86));
+  border: 1px solid rgb(245 189 46 / 0.32);
+  box-shadow: 0 1px 2px rgb(138 90 0 / 0.06), 0 6px 16px rgb(227 160 8 / 0.1);
+  -webkit-backdrop-filter: blur(12px) saturate(160%);
+  backdrop-filter: blur(12px) saturate(160%);
+}
+.notice-icon {
+  color: #8a5a00;
+  background: linear-gradient(135deg, #ffe08a, #f5bd2e);
+  box-shadow: inset 0 1px 0 rgb(255 255 255 / 0.6);
+  animation: notice-wiggle 4s ease-in-out infinite;
+  transform-origin: 60% 60%;
+}
+.notice-title { color: #6e4700; }
+.notice-sep { color: rgb(138 90 0 / 0.7); }
+.notice-text { color: #8a5a00; }
+.notice-count { color: rgb(138 90 0 / 0.75); }
+.notice-arrow { color: rgb(138 90 0 / 0.55); }
+
+/* 喇叭轻摆：每 4 秒摆两下，吸引注意但不吵闹 */
+@keyframes notice-wiggle {
+  0%, 86%, 100% { transform: rotate(0); }
+  89% { transform: rotate(-12deg); }
+  92% { transform: rotate(9deg); }
+  95% { transform: rotate(-5deg); }
+}
+
+/* 长文本：起步停顿 1s → 匀速滚到末尾 → 停住（翻页由脚本计时） */
+.notice-track.is-scrolling {
+  animation: notice-scroll var(--notice-dur, 6s) linear 1s forwards;
+}
+@keyframes notice-scroll {
+  to { transform: translateX(var(--notice-shift, 0)); }
+}
+
+/* 上下翻页切换 */
+.notice-flip-enter-active,
+.notice-flip-leave-active {
+  transition: transform 0.45s cubic-bezier(0.22, 1, 0.36, 1), opacity 0.35s ease;
+}
+.notice-flip-enter-from {
+  transform: translateY(100%);
+  opacity: 0;
+}
+.notice-flip-leave-to {
+  transform: translateY(-100%);
+  opacity: 0;
+}
+
+@media (prefers-reduced-motion: reduce) {
+  .notice-icon,
+  .notice-track.is-scrolling {
+    animation: none;
+  }
+}
+</style>
+
+<style>
+/* 暗色覆盖：放在非 scoped 块里（scoped 中的 :global(.dark) .x 会被编译成仅 `.dark`，规则失效）；
+   用 html.dark 提高优先级，稳定压过 scoped 的 .x[data-v] */
+html.dark .notice-card {
+  background: linear-gradient(135deg, rgb(64 51 26 / 0.85), rgb(51 42 22 / 0.8));
+  border-color: rgb(247 197 74 / 0.22);
+  box-shadow: 0 6px 18px rgb(0 0 0 / 0.3);
+}
+html.dark .notice-title { color: #ffe39a; }
+html.dark .notice-sep { color: rgb(255 217 120 / 0.65); }
+html.dark .notice-text { color: #f2d48a; }
+html.dark .notice-count { color: rgb(255 217 120 / 0.7); }
+html.dark .notice-arrow { color: rgb(255 217 120 / 0.5); }
+</style>

frondend/src/components/QrScanner.vue

@@ -0,0 +1,242 @@
+<script setup lang="ts">
+// 全屏摄像头扫码（查寝二维码等）。
+// 流程：getUserMedia 打开后置摄像头 → 每 ~120ms 截取取景框区域 → jsQR 识别 → 命中即回调并关闭。
+// 不支持摄像头（非 https、WebView 未授权、无设备）时显示原因，并提供「从相册选择」回退到原有图片解析。
+import { onBeforeUnmount, onMounted, ref } from 'vue'
+import jsQR from 'jsqr'
+import { X, ImagePlus, Flashlight, CameraOff } from 'lucide-vue-next'
+
+const emit = defineEmits<{
+  (e: 'result', text: string): void
+  (e: 'pick'): void
+  (e: 'close'): void
+}>()
+
+const videoEl = ref<HTMLVideoElement | null>(null)
+const state = ref<'starting' | 'scanning' | 'error'>('starting')
+const errMsg = ref('')
+const torchOn = ref(false)
+const torchSupported = ref(false)
+
+let stream: MediaStream | null = null
+let track: MediaStreamTrack | null = null
+let timer: ReturnType<typeof setTimeout> | null = null
+let canvas: HTMLCanvasElement | null = null
+let stopped = false
+
+/** 环境自检：给出可操作的失败原因，而不是笼统的「打开失败」 */
+function unsupportedReason(): string {
+  if (!window.isSecureContext && location.hostname !== 'localhost') {
+    return '当前页面不是 HTTPS，浏览器禁止调用摄像头。请用 https 地址打开，或改用「从相册选择」。'
+  }
+  if (!navigator.mediaDevices?.getUserMedia) {
+    return '当前浏览器不支持调用摄像头，请改用「从相册选择」。'
+  }
+  return ''
+}
+
+function failMsg(e: unknown): string {
+  const name = (e as { name?: string })?.name || ''
+  if (name === 'NotAllowedError' || name === 'SecurityError') {
+    return '摄像头权限被拒绝。请在浏览器地址栏或系统设置中允许摄像头权限后重试。'
+  }
+  if (name === 'NotFoundError' || name === 'OverconstrainedError') {
+    return '未检测到可用摄像头，请改用「从相册选择」。'
+  }
+  if (name === 'NotReadableError') {
+    return '摄像头被其他应用占用，请关闭后重试。'
+  }
+  return '摄像头打开失败，请改用「从相册选择」。'
+}
+
+async function start() {
+  const reason = unsupportedReason()
+  if (reason) {
+    state.value = 'error'
+    errMsg.value = reason
+    return
+  }
+  try {
+    // facingMode 用 ideal：部分设备没有后置摄像头，exact 会直接失败
+    stream = await navigator.mediaDevices.getUserMedia({
+      video: { facingMode: { ideal: 'environment' }, width: { ideal: 1280 }, height: { ideal: 720 } },
+      audio: false,
+    })
+    if (stopped) {
+      release()
+      return
+    }
+    track = stream.getVideoTracks()[0] || null
+    torchSupported.value = !!(track?.getCapabilities?.() as { torch?: boolean } | undefined)?.torch
+    const v = videoEl.value
+    if (!v) return
+    v.srcObject = stream
+    await v.play().catch(() => {})
+    state.value = 'scanning'
+    tick()
+  } catch (e) {
+    state.value = 'error'
+    errMsg.value = failMsg(e)
+  }
+}
+
+/** 单帧识别：按整帧下采样识别。
+ *  不裁中心区：object-cover 下画面被放大裁切，二维码常常超出中心框而识别不到；
+ *  取景框只作视觉引导，实际整幅画面内的码都能扫到（与微信/支付宝的体感一致）。
+ *  两档缩放：先 480（快），失败再 720（远距离小码更清晰）。 */
+function scanFrame(): string | null {
+  const v = videoEl.value
+  if (!v || v.readyState < 2 || !v.videoWidth) return null
+  if (!canvas) canvas = document.createElement('canvas')
+  const ctx = canvas.getContext('2d', { willReadFrequently: true })
+  if (!ctx) return null
+  for (const target of [480, 720]) {
+    const scale = Math.min(1, target / Math.max(v.videoWidth, v.videoHeight))
+    const w = Math.max(1, Math.round(v.videoWidth * scale))
+    const h = Math.max(1, Math.round(v.videoHeight * scale))
+    canvas.width = w
+    canvas.height = h
+    ctx.drawImage(v, 0, 0, w, h)
+    const data = ctx.getImageData(0, 0, w, h)
+    const code = jsQR(data.data, data.width, data.height, { inversionAttempts: 'attemptBoth' })
+    if (code?.data) return code.data
+    // 原始分辨率已小于首档时无需再试更大尺寸
+    if (scale >= 1) break
+  }
+  return null
+}
+
+function tick() {
+  if (stopped) return
+  let text: string | null = null
+  try {
+    text = scanFrame()
+  } catch {
+    // 单帧失败（如设备暂时无画面）忽略，下一帧继续
+  }
+  if (text) {
+    emit('result', text)
+    return
+  }
+  timer = setTimeout(tick, 120)
+}
+
+async function toggleTorch() {
+  if (!track || !torchSupported.value) return
+  try {
+    await track.applyConstraints({ advanced: [{ torch: !torchOn.value }] } as unknown as MediaTrackConstraints)
+    torchOn.value = !torchOn.value
+  } catch {
+    torchSupported.value = false
+  }
+}
+
+function release() {
+  if (timer) clearTimeout(timer)
+  timer = null
+  if (track && torchOn.value) {
+    track.applyConstraints({ advanced: [{ torch: false }] } as unknown as MediaTrackConstraints).catch(() => {})
+  }
+  stream?.getTracks().forEach((t) => t.stop())
+  stream = null
+  track = null
+  if (videoEl.value) videoEl.value.srcObject = null
+}
+
+onMounted(start)
+onBeforeUnmount(() => {
+  stopped = true
+  release()
+})
+</script>
+
+<template>
+  <!-- 全屏置顶：扫码需要大取景区域，且要盖住底部 TabBar -->
+  <Teleport to="body">
+    <!-- z-[400] 高于 AppDialog(≤300)；pointer-events:auto 必须显式恢复：
+         reka 的 modal 弹窗会把 body 设为 pointer-events:none，只给弹窗面板恢复，
+         teleport 到 body 的本组件否则点不动（实测「从相册选择」被弹窗层拦截）。 -->
+    <div
+      class="fixed inset-0 z-[400] bg-black flex flex-col"
+      style="pointer-events: auto"
+      role="dialog"
+      aria-modal="true"
+      aria-label="扫描二维码"
+    >
+      <!-- 顶栏 -->
+      <div class="relative z-10 flex items-center gap-2 px-3 text-white" style="padding-top: calc(var(--safe-top) + 10px)">
+        <button class="w-10 h-10 flex items-center justify-center rounded-full bg-white/15 active:scale-95 transition-transform" aria-label="关闭" @click="emit('close')">
+          <X class="w-5 h-5" />
+        </button>
+        <p class="flex-1 text-center text-[15px] font-semibold">扫描二维码</p>
+        <button
+          v-if="torchSupported"
+          class="w-10 h-10 flex items-center justify-center rounded-full active:scale-95 transition-transform"
+          :class="torchOn ? 'bg-amber-300 text-amber-900' : 'bg-white/15'"
+          aria-label="手电筒"
+          @click="toggleTorch"
+        >
+          <Flashlight class="w-5 h-5" />
+        </button>
+        <span v-else class="w-10" />
+      </div>
+
+      <!-- 取景区 -->
+      <div class="relative flex-1 min-h-0 overflow-hidden">
+        <video ref="videoEl" class="absolute inset-0 w-full h-full object-cover" playsinline muted autoplay />
+
+        <!-- 取景框：仅视觉引导，识别用整帧（见 scanFrame） -->
+        <div v-if="state === 'scanning'" class="absolute inset-0 flex items-center justify-center">
+          <div class="relative w-[72%] aspect-square">
+            <div class="absolute inset-0 rounded-3xl ring-2 ring-white/70" />
+            <span class="absolute -top-px -left-px w-9 h-9 border-t-4 border-l-4 border-brand-400 rounded-tl-3xl" />
+            <span class="absolute -top-px -right-px w-9 h-9 border-t-4 border-r-4 border-brand-400 rounded-tr-3xl" />
+            <span class="absolute -bottom-px -left-px w-9 h-9 border-b-4 border-l-4 border-brand-400 rounded-bl-3xl" />
+            <span class="absolute -bottom-px -right-px w-9 h-9 border-b-4 border-r-4 border-brand-400 rounded-br-3xl" />
+            <div class="qr-laser absolute left-3 right-3 h-0.5 rounded-full bg-brand-400 shadow-[0_0_12px_2px_rgb(44_197_168/0.8)]" />
+          </div>
+        </div>
+
+        <!-- 启动中 -->
+        <div v-if="state === 'starting'" class="absolute inset-0 flex flex-col items-center justify-center text-white/90 gap-3">
+          <div class="w-9 h-9 rounded-full border-2 border-white/30 border-t-white animate-spin" />
+          <p class="text-sm">正在打开摄像头…</p>
+        </div>
+
+        <!-- 失败 -->
+        <div v-else-if="state === 'error'" class="absolute inset-0 flex flex-col items-center justify-center px-8 text-center gap-3">
+          <div class="w-14 h-14 rounded-2xl bg-white/10 flex items-center justify-center">
+            <CameraOff class="w-7 h-7 text-white/80" />
+          </div>
+          <p class="text-sm text-white/90 leading-relaxed">{{ errMsg }}</p>
+        </div>
+      </div>
+
+      <!-- 底部操作 -->
+      <div class="relative z-10 px-6 pb-[calc(env(safe-area-inset-bottom)+20px)] pt-4 text-center">
+        <p v-if="state === 'scanning'" class="text-xs text-white/70 mb-3">将二维码放入框内，自动识别</p>
+        <button
+          class="w-full h-12 rounded-full bg-white/15 text-white text-sm font-semibold flex items-center justify-center gap-2 active:scale-[0.98] transition-transform"
+          @click="emit('pick')"
+        >
+          <ImagePlus class="w-4 h-4" />
+          从相册选择图片
+        </button>
+      </div>
+    </div>
+  </Teleport>
+</template>
+
+<style scoped>
+/* 扫描线上下往复 */
+@keyframes qr-laser {
+  0%, 100% { top: 8%; }
+  50% { top: 92%; }
+}
+.qr-laser {
+  animation: qr-laser 2.4s ease-in-out infinite;
+}
+@media (prefers-reduced-motion: reduce) {
+  .qr-laser { animation: none; top: 50%; }
+}
+</style>

frondend/src/components/UpdateChecker.vue

@@ -0,0 +1,166 @@
+<script setup lang="ts">
+// 版本更新检测：定时拉取首页 index.html，比对 JS/CSS 资源文件名。
+// 后端每次发布都会重新打包，文件名带内容 hash；资源名变化即说明有新版本，
+// 弹窗提示用户刷新（确认后立即 reload，拿到新 index.html 与新资源）。
+import { onMounted, onUnmounted, ref } from 'vue'
+import AppDialog from '@/components/ui/dialog/AppDialog.vue'
+
+const CHECK_INTERVAL = 2 * 60 * 1000 // 2 分钟
+const FIRST_DELAY = 10 * 1000 // 启动 10 秒后首次检查（避免与首屏请求抢占）
+// 回到前台时补查：手机浏览器/App 内 WebView 切后台会暂停定时器，用户切回来时立即检查一次；
+// 两次检查至少间隔 MIN_GAP，避免频繁切换造成请求风暴
+const MIN_GAP = 20 * 1000
+const DISMISS_KEY = 'xz_update_dismissed_version'
+
+const showUpdate = ref(false)
+// 当前页面加载时使用的资源名集合（相对路径）
+const currentAssets = new Set<string>()
+let timer: ReturnType<typeof setTimeout> | null = null
+let stopped = false
+let prompting = false
+let pendingVersion = ''
+let lastCheckAt = 0
+
+/** 从 HTML 文本中提取 /assets/ 下的 js/css 资源名 */
+function extractAssets(html: string): Set<string> {
+  const out = new Set<string>()
+  const re = /\/assets\/[A-Za-z0-9_.-]+\.(?:js|css)/g
+  let m: RegExpExecArray | null
+  while ((m = re.exec(html)) !== null) {
+    out.add(m[0])
+  }
+  return out
+}
+
+/** 读取当前页面已加载的资源名（由 script/link 标签推导，等同当前构建版本） */
+function collectCurrentAssets(): Set<string> {
+  const out = new Set<string>()
+  document.querySelectorAll<HTMLScriptElement>('script[src]').forEach((el) => {
+    const m = el.src.match(/\/assets\/[A-Za-z0-9_.-]+\.(?:js|css)/)
+    if (m) out.add(m[0])
+  })
+  document.querySelectorAll<HTMLLinkElement>('link[href]').forEach((el) => {
+    const m = el.href.match(/\/assets\/[A-Za-z0-9_.-]+\.(?:js|css)/)
+    if (m) out.add(m[0])
+  })
+  return out
+}
+
+async function checkUpdate() {
+  if (stopped || prompting || showUpdate.value) return
+  lastCheckAt = Date.now()
+  prompting = true
+  try {
+    // 版本探测必须绕过 HTTP 缓存（后端 index.html 有 1 小时 MaxAge），故带时间戳参数
+    const res = await fetch(`/?_v=${Date.now()}`, {
+      cache: 'no-store',
+      headers: { 'Cache-Control': 'no-cache', Pragma: 'no-cache' },
+    })
+    if (!res.ok) return
+    const html = await res.text()
+    const latest = extractAssets(html)
+    if (latest.size === 0 || currentAssets.size === 0) return
+
+    // 任一新资源名未在当前页面出现 → 有新版本
+    const hasNew = [...latest].some((a) => !currentAssets.has(a))
+    if (!hasNew) return
+
+    const newVersion = [...latest].join(',')
+    if (sessionStorage.getItem(DISMISS_KEY) === newVersion) return // 本会话已提示过
+
+    pendingVersion = newVersion
+    showUpdate.value = true
+  } catch {
+    // 网络异常静默跳过，等待下一轮
+  } finally {
+    prompting = false
+  }
+}
+
+function schedule(delay: number) {
+  if (stopped) return
+  timer = setTimeout(async () => {
+    await checkUpdate()
+    schedule(CHECK_INTERVAL)
+  }, delay)
+}
+
+/** 用户确认刷新：立即重载（拿新版本资源） */
+function reloadNow() {
+  showUpdate.value = false
+  location.reload()
+}
+
+/** 用户选择稍后：记录本次版本，本会话内不再重复提示 */
+function dismiss() {
+  showUpdate.value = false
+  if (pendingVersion) sessionStorage.setItem(DISMISS_KEY, pendingVersion)
+}
+
+/** 弹窗关闭统一入口（按钮 / 点遮罩 / Esc 都走这里），关闭即视为「稍后」 */
+function onDialogOpenChange(value: boolean) {
+  if (value) {
+    showUpdate.value = true
+    return
+  }
+  dismiss()
+}
+
+/** 页面回到前台（切回标签页 / 从后台唤起 App / bfcache 恢复）时补查一次 */
+function onForeground() {
+  if (document.visibilityState !== 'visible') return
+  if (Date.now() - lastCheckAt < MIN_GAP) return
+  void checkUpdate()
+}
+
+onMounted(() => {
+  currentAssets.clear()
+  collectCurrentAssets().forEach((a) => currentAssets.add(a))
+  // 刚加载的页面本身就是最新版：以挂载时刻为基线，避免首屏 focus/pageshow 立即触发探测
+  lastCheckAt = Date.now()
+  schedule(FIRST_DELAY)
+  document.addEventListener('visibilitychange', onForeground)
+  window.addEventListener('focus', onForeground)
+  window.addEventListener('pageshow', onForeground)
+})
+
+onUnmounted(() => {
+  stopped = true
+  if (timer) clearTimeout(timer)
+  document.removeEventListener('visibilitychange', onForeground)
+  window.removeEventListener('focus', onForeground)
+  window.removeEventListener('pageshow', onForeground)
+})
+</script>
+
+<template>
+  <!-- 新版本提示弹窗：标题 + 说明 + 稍后/立即刷新 -->
+  <AppDialog
+    :open="showUpdate"
+    variant="center"
+    z-class="z-[200]"
+    panel-class="w-[86%] max-w-[340px] p-5"
+    title="发现新版本"
+    description="网站已更新，刷新后即可使用最新功能，是否立即刷新？"
+    @update:open="onDialogOpenChange"
+  >
+    <h3 class="text-base font-semibold text-gray-900 mb-2">发现新版本</h3>
+    <p class="text-sm text-gray-500 leading-relaxed mb-5">
+      网站已更新，刷新后即可使用最新功能，是否立即刷新？
+    </p>
+    <div class="flex gap-2">
+      <button
+        class="press flex-1 py-3 rounded-full border border-gray-200 text-sm font-semibold text-gray-600 active:bg-gray-50"
+        @click="dismiss"
+      >
+        稍后
+      </button>
+      <button
+        class="press flex-1 py-3 rounded-full bg-brand-gradient text-white text-sm font-semibold shadow-md shadow-brand-500/20"
+        @click="reloadNow"
+      >
+        立即刷新
+      </button>
+    </div>
+  </AppDialog>
+</template>

frondend/src/components/ui/button.ts

@@ -3,25 +3,25 @@ import { cva, type VariantProps } from 'class-variance-authority'
 export { default as Button } from './button.vue'
 
 export const buttonVariants = cva(
-  'inline-flex items-center justify-center gap-2 whitespace-nowrap rounded-md text-sm font-medium transition-colors focus-visible:outline-none focus-visible:ring-1 focus-visible:ring-ring disabled:pointer-events-none disabled:opacity-50 [&_svg]:pointer-events-none [&_svg]:size-4 [&_svg]:shrink-0',
+  'inline-flex items-center justify-center gap-2 whitespace-nowrap rounded-full text-sm font-semibold transition-all duration-200 active:scale-[0.97] focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring/60 focus-visible:ring-offset-1 disabled:pointer-events-none disabled:opacity-50 [&_svg]:pointer-events-none [&_svg]:size-4 [&_svg]:shrink-0',
   {
     variants: {
       variant: {
-        default: 'bg-primary text-primary-foreground shadow hover:bg-primary/90',
+        default: 'bg-primary text-primary-foreground shadow-md shadow-brand-500/20 hover:brightness-105',
         destructive:
-          'bg-destructive text-destructive-foreground shadow-sm hover:bg-destructive/90',
+          'bg-destructive text-destructive-foreground shadow-md shadow-red-500/20 hover:brightness-105',
         outline:
-          'border border-input bg-background shadow-sm hover:bg-accent hover:text-accent-foreground',
+          'border border-input bg-card shadow-sm hover:bg-accent hover:text-accent-foreground',
         secondary:
-          'bg-secondary text-secondary-foreground shadow-sm hover:bg-secondary/80',
+          'bg-secondary text-secondary-foreground hover:bg-gray-200',
         ghost: 'hover:bg-accent hover:text-accent-foreground',
         link: 'text-primary underline-offset-4 hover:underline',
       },
       size: {
-        default: 'h-9 px-4 py-2',
-        sm: 'h-8 rounded-md px-3 text-xs',
-        lg: 'h-10 rounded-md px-8',
-        icon: 'h-9 w-9',
+        default: 'h-10 px-5 py-2',
+        sm: 'h-8 px-3.5 text-xs',
+        lg: 'h-12 px-8 text-base',
+        icon: 'h-10 w-10',
       },
     },
     defaultVariants: {

frondend/src/components/ui/card.vue

@@ -9,7 +9,7 @@ const props = defineProps<Props>()
 </script>
 
 <template>
-  <div :class="cn('rounded-xl border bg-card text-card-foreground shadow', props.class)">
+  <div :class="cn('rounded-2xl border border-gray-100 bg-card text-card-foreground shadow-sm', props.class)">
     <slot />
   </div>
 </template>

frondend/src/components/ui/dialog/AppDialog.vue

@@ -0,0 +1,223 @@
+<script setup lang="ts">
+// AppDialog —— 全站统一弹窗封装（reka-ui Dialog 底座）。
+//
+// 目的：用 Dialog 原语换取焦点捕获、Esc 关闭、body 滚动锁定、aria 语义与 Portal 渲染，
+// 同时保持与现有手写弹窗一致的视觉（白色卡片 + 圆角 + 遮罩）。
+//
+// 结构说明（与 reka 的约定）：
+//   - DialogContent（DismissableLayer）本身不带定位样式，只作为焦点/事件容器；
+//   - 真正的「铺满全屏的定位层」是它内部的 div：pointer-events:none 让点击穿透到底下的
+//     DialogOverlay，从而「点遮罩关闭」才能成立（点在自己身上不算 outside，不会关闭）；
+//   - 面板单独 pointer-events:auto，恢复可交互。
+//   这与项目里 MobileLayout 手写弹窗的 pointer-events 处理方式一致。
+//
+// 面板基础样式（w-full / bg-white / flex flex-col / overflow-hidden / max-h-[85vh] / shadow-xl）
+// 与原手写弹窗一致；**原弹窗没有阴影时**必须在 panelClass 里显式传 shadow-none
+// （经 tailwind-merge 覆盖，实测 cn('shadow-xl','shadow-none') → 'shadow-none'），
+// 否则会凭空多出阴影（LeaveView 等页面的面板原本无阴影）。
+//
+// 形态（variant）：
+//   - sheet（默认）：移动端贴底、桌面端居中（≈原 items-end sm:items-center），
+//     面板默认 rounded-t-2xl sm:rounded-2xl，调用方在 panelClass 里给 sm:max-w-sm；
+//   - center：始终居中（≈原 items-center），调用方在 panelClass 里给宽度与内边距。
+//
+// 典型用法：
+//   <AppDialog v-model:open="show" variant="center" z-class="z-[200]"
+//              panel-class="w-[86%] max-w-[340px] p-5" title="发现新版本" :description="desc">
+//     <!-- 面板内容（视觉标题由业务自己渲染，组件内的 Title/Description 仅供读屏） -->
+//   </AppDialog>
+//
+// 关闭控制：dismissable=false 时拦截遮罩点击与 Esc（对应「执行中不允许关闭」）；
+// 关闭动作统一经 update:open 冒泡，调用方按需守卫。
+import {
+  DialogRoot,
+  DialogPortal,
+  DialogOverlay,
+  DialogContent,
+  DialogTitle,
+  DialogDescription,
+} from 'reka-ui'
+import type { FocusOutsideEvent, PointerDownOutsideEvent } from 'reka-ui'
+import { cn } from '@/lib/utils'
+
+const props = withDefaults(
+  defineProps<{
+    open: boolean
+    /** sheet=移动端贴底/桌面居中；center=始终居中 */
+    variant?: 'sheet' | 'center'
+    /** 层级类（遮罩与定位层同层，如 z-[60]） */
+    zClass?: string
+    /** 遮罩浓度类（默认 bg-black/40，部分弹窗用 /50） */
+    overlayClass?: string
+    /**
+     * 淡入淡出（默认关）。
+     * 注意：reka-ui 的 Presence 只识别 CSS animation（读 computed animation-name），
+     * **不识别 Vue <Transition> 的 class 过渡**，且 DialogContent 根是 fragment
+     * 无法被 <Transition> 包裹。故原手写弹窗的 `<Transition name="fade">`（0.2s 透明度）
+     * 需由本组件的 CSS animation 承接（见文件末尾 style）。
+     */
+    fade?: boolean
+    /** 定位层附加类（如 px-6 给居中弹窗留边距） */
+    wrapperClass?: string
+    /** 面板附加类（宽度/内边距/圆角等，经 tailwind-merge 合并） */
+    panelClass?: string
+    /** false 时禁止点遮罩与 Esc 关闭（执行中场景） */
+    dismissable?: boolean
+    /** 读屏标题；视觉标题由业务在默认插槽自渲染 */
+    title?: string
+    /** 读屏描述（缺省回退为标题，避免 aria-describedby 指向不存在的节点） */
+    description?: string
+  }>(),
+  {
+    variant: 'sheet',
+    zClass: 'z-50',
+    overlayClass: 'bg-black/40',
+    wrapperClass: '',
+    panelClass: '',
+    dismissable: true,
+    fade: false,
+    title: '提示',
+    description: '',
+  },
+)
+
+const emit = defineEmits<{
+  (e: 'update:open', value: boolean): void
+}>()
+
+function onOpenChange(value: boolean) {
+  emit('update:open', value)
+}
+
+// reka 以 CustomEvent 派发，preventDefault 即阻止 dismiss（见 DismissableLayer 实现）
+function onInteractOutside(e: PointerDownOutsideEvent | FocusOutsideEvent) {
+  if (!props.dismissable) e.preventDefault()
+}
+
+function onEscapeKeyDown(e: KeyboardEvent) {
+  if (!props.dismissable) e.preventDefault()
+}
+</script>
+
+<template>
+  <DialogRoot :open="props.open" @update:open="onOpenChange">
+    <DialogPortal>
+      <!-- 遮罩：reka 会自动加 pointer-events:auto 并响应「点遮罩关闭」 -->
+      <DialogOverlay
+        :class="cn('fixed inset-0 app-dialog-overlay', props.overlayClass, props.zClass, props.fade && 'app-dialog-fade')"
+      />
+
+      <!-- 事件/焦点容器：本身不承载布局（零尺寸），只作为焦点/事件容器。
+           fade 类必须挂在这里：它会 forward 到 role="dialog" 那个根节点，也就是
+           Presence 追踪的节点；Presence 靠监听该节点自身的 animationend 判断离场
+           结束，动画挂到子节点上则读不到，会直接卸载（瞬间消失）。
+           fade 时额外加 relative + 同层 z：淡入淡出的 opacity<1 会让本节点形成
+           z-index:0 的层叠上下文，届时内部 fixed 面板被困其中，而 overlay（正 z）
+           会在其后绘制、把面板盖住 0.2s 再突然跳回；加上定位与 zClass 后本节点
+           与 overlay 同级且 DOM 在后 → 始终在上。不加 fade 时保持原样（零改动）。 -->
+      <DialogContent
+        :class="cn('outline-none', props.fade && ['relative', props.zClass, 'app-dialog-fade'])"
+        @interact-outside="onInteractOutside"
+        @escape-key-down="onEscapeKeyDown"
+      >
+        <!-- 定位层：铺满全屏但点击穿透（点空白处落到遮罩上才能关闭） -->
+        <div
+          :class="
+            cn(
+              'fixed inset-0 flex justify-center',
+              props.variant === 'sheet' ? 'items-end sm:items-center' : 'items-center',
+              props.wrapperClass,
+              props.zClass,
+            )
+          "
+          style="pointer-events: none"
+        >
+          <!-- 面板：视觉与手写弹窗一致；pointer-events 恢复以便交互 -->
+          <div
+            :class="
+              cn(
+                'relative w-full bg-white flex flex-col overflow-hidden shadow-xl max-h-[85vh]',
+                props.variant === 'sheet' ? 'rounded-t-3xl sm:rounded-3xl app-dialog-sheet' : 'rounded-3xl app-dialog-pop',
+                props.panelClass,
+              )
+            "
+            style="pointer-events: auto"
+          >
+            <!-- 读屏标题/描述（视觉标题由业务自渲染，这里不重复显示） -->
+            <DialogTitle class="sr-only">{{ props.title }}</DialogTitle>
+            <DialogDescription class="sr-only">{{ props.description || props.title }}</DialogDescription>
+            <slot />
+          </div>
+        </div>
+      </DialogContent>
+    </DialogPortal>
+  </DialogRoot>
+</template>
+
+<style>
+/* 淡入淡出（fade=true 时启用）。
+ *
+ * 为什么不用 <Transition>：reka-ui 的 Presence 通过读取 computed style 的
+ * animation-name 判断「是否正在动画」，只认 CSS animation；Vue 的 <Transition>
+ * 是 class 过渡，Presence 感知不到，会导致离场动画被直接跳过（瞬间消失）。
+ * 因此这里用 CSS animation + reka 输出的 data-state="open|closed" 实现进出场。
+ * 非 scoped：内容经 DialogPortal 传送到 body，且需同时作用于 overlay 与 content。 */
+.app-dialog-fade[data-state='open'] {
+  animation: app-dialog-fade-in 0.2s ease;
+}
+.app-dialog-fade[data-state='closed'] {
+  animation: app-dialog-fade-out 0.2s ease;
+}
+/* 遮罩轻度虚化（iOS 弹层背景效果）；低端机仅 2px，开销可控；「减弱透明度」时关闭 */
+.app-dialog-overlay {
+  -webkit-backdrop-filter: blur(2px);
+  backdrop-filter: blur(2px);
+}
+@media (prefers-reduced-transparency: reduce) {
+  .app-dialog-overlay {
+    -webkit-backdrop-filter: none;
+    backdrop-filter: none;
+  }
+}
+/* 面板进场：sheet 自底部滑入，center 轻微放大弹出（仅进场；离场随容器一起淡出/卸载）。
+ * fill-mode 用 backwards：动画结束后不残留 transform，避免给内部 fixed 元素制造包含块。 */
+.app-dialog-sheet {
+  animation: app-dialog-sheet-in 0.36s cubic-bezier(0.22, 1, 0.36, 1) backwards;
+}
+.app-dialog-pop {
+  animation: app-dialog-pop-in 0.28s cubic-bezier(0.34, 1.36, 0.64, 1) backwards;
+}
+@media (min-width: 640px) {
+  .app-dialog-sheet {
+    animation-name: app-dialog-pop-in;
+  }
+}
+@keyframes app-dialog-sheet-in {
+  from {
+    transform: translateY(40%);
+    opacity: 0.4;
+  }
+}
+@keyframes app-dialog-pop-in {
+  from {
+    transform: scale(0.94);
+    opacity: 0;
+  }
+}
+@keyframes app-dialog-fade-in {
+  from {
+    opacity: 0;
+  }
+  to {
+    opacity: 1;
+  }
+}
+@keyframes app-dialog-fade-out {
+  from {
+    opacity: 1;
+  }
+  to {
+    opacity: 0;
+  }
+}
+</style>

frondend/src/components/ui/input.vue

@@ -31,7 +31,7 @@ function onInput(e: Event) {
     :placeholder="placeholder"
     :disabled="disabled"
     :class="cn(
-      'flex h-9 w-full rounded-md border border-input bg-transparent px-3 py-1 text-sm shadow-sm transition-colors file:border-0 file:bg-transparent file:text-sm file:font-medium file:text-foreground placeholder:text-muted-foreground focus-visible:outline-none focus-visible:ring-1 focus-visible:ring-ring disabled:cursor-not-allowed disabled:opacity-50',
+      'flex h-11 w-full rounded-xl border border-input bg-gray-50 px-3.5 py-1 text-sm transition-all file:border-0 file:bg-transparent file:text-sm file:font-medium file:text-foreground placeholder:text-muted-foreground focus-visible:outline-none focus-visible:bg-card focus-visible:border-brand-400 focus-visible:ring-4 focus-visible:ring-brand-400/15 disabled:cursor-not-allowed disabled:opacity-50',
       props.class
     )"
     @input="onInput"

frondend/src/composables/useConfirm.ts

@@ -0,0 +1,76 @@
+import { ref } from 'vue'
+
+// 全局确认/提示弹窗服务。
+//
+// 背景：项目此前用浏览器原生 confirm()/alert()（v1.2.55「弹窗统一化」只迁移了手写
+// role="dialog" 元素，原生调用不在其扫描范围内，故遗留至今）。这里提供与 useMessage
+// 同风格的模块级单例服务：任意组件调用 confirmDialog/alertDialog 即弹出统一的 AppDialog。
+//
+// 用法：
+//   const ok = await confirmDialog({ title: '删除任务', content: '确定要删除此任务吗？', danger: true })
+//   if (!ok) return
+//   await alertDialog({ title: '保存失败', content: msg })
+
+export interface ConfirmOptions {
+  /** 标题（同时作为读屏标题） */
+  title: string
+  /** 说明文字（可选，支持换行） */
+  content?: string
+  /** 确认按钮文案，默认「确定」 */
+  confirmText?: string
+  /** 取消按钮文案，默认「取消」 */
+  cancelText?: string
+  /** true 时用警示样式（红色图标 + destructive 确认按钮），用于删除等破坏性操作 */
+  danger?: boolean
+  /** true 时只显示确认按钮（提示框形态，对应原 alert） */
+  alertOnly?: boolean
+}
+
+interface ConfirmState extends ConfirmOptions {
+  open: boolean
+}
+
+const state = ref<ConfirmState | null>(null)
+let resolver: ((ok: boolean) => void) | null = null
+
+/**
+ * 弹出确认框，返回用户是否确认（取消/遮罩/Esc 均为 false）。
+ * 同一时刻只保留一个确认框：若上一个尚未结清，先以 false 结清，避免 Promise 悬挂。
+ */
+export function confirmDialog(options: ConfirmOptions): Promise<boolean> {
+  if (resolver) {
+    const prev = resolver
+    resolver = null
+    prev(false)
+  }
+  state.value = { ...options, open: true }
+  return new Promise<boolean>((resolve) => {
+    resolver = resolve
+  })
+}
+
+/** 弹出纯提示框（单按钮，对应原 alert），用户关闭后 resolve(true) */
+export function alertDialog(
+  options: Omit<ConfirmOptions, 'cancelText' | 'alertOnly'>,
+): Promise<boolean> {
+  return confirmDialog({
+    ...options,
+    alertOnly: true,
+    confirmText: options.confirmText || '我知道了',
+  })
+}
+
+export function useConfirm() {
+  function respond(ok: boolean) {
+    state.value = state.value ? { ...state.value, open: false } : null
+    const r = resolver
+    resolver = null
+    r?.(ok)
+    // 等离场动画结束再清空内容，避免关闭过程中文字/图标突然消失
+    setTimeout(() => {
+      if (state.value && !state.value.open) state.value = null
+    }, 200)
+  }
+
+  return { state, respond }
+}

frondend/src/composables/useTheme.ts

@@ -1,21 +1,44 @@
-// 亮暗主题：按浏览器系统时间自动切换（18:00–次日 06:00 为暗色，其余亮色）。
-// 首屏防闪烁由 index.html 内联脚本完成（同一规则，渲染前预设 .dark）；
-// 本模块在应用启动后接管：立即校正一次，并按分钟轮询，跨过时间阈值时自动切换。
+// 亮暗主题：三档模式 —— auto（默认，按系统时间 18:00–次日 06:00 为暗色）/ light / dark。
+// 用户选择持久化在 localStorage（THEME_KEY）；首屏防闪烁由 index.html 内联脚本完成
+// （同一规则，渲染前预设 .dark）；本模块在应用启动后接管：立即校正一次，
+// auto 模式下按分钟轮询，跨过时间阈值时自动切换。
 // 切换载体为 <html> 上的 .dark class，配合 globals.css 中的暗色变量板生效。
+import { ref } from 'vue'
 
+export type ThemeMode = 'auto' | 'light' | 'dark'
+
+/** 与 index.html 内联脚本保持一致 */
+export const THEME_KEY = 'xz_theme'
 const DARK_START_HOUR = 18
 const DARK_END_HOUR = 6
-const THEME_COLOR_LIGHT = '#f5f5f5'
-const THEME_COLOR_DARK = '#15151f'
+const THEME_COLOR_LIGHT = '#f3faf7'
+const THEME_COLOR_DARK = '#0f1815'
 
 export function isDarkTime(date: Date = new Date()): boolean {
   const h = date.getHours()
   return h >= DARK_START_HOUR || h < DARK_END_HOUR
 }
 
-/** 应用当前时段对应主题，返回是否处于暗色 */
+function readMode(): ThemeMode {
+  try {
+    const v = localStorage.getItem(THEME_KEY)
+    if (v === 'light' || v === 'dark' || v === 'auto') return v
+  } catch {
+    // 隐私模式等场景 localStorage 不可用，按自动处理
+  }
+  return 'auto'
+}
+
+/** 当前主题模式（响应式，供设置入口绑定） */
+export const themeMode = ref<ThemeMode>(readMode())
+/** 当前是否处于暗色（响应式） */
+export const isDark = ref(false)
+
+/** 应用当前模式对应主题，返回是否处于暗色 */
 export function applyTheme(): boolean {
-  const dark = isDarkTime()
+  const mode = themeMode.value
+  const dark = mode === 'dark' || (mode === 'auto' && isDarkTime())
+  isDark.value = dark
   document.documentElement.classList.toggle('dark', dark)
   document
     .querySelector('meta[name="theme-color"]')
@@ -23,9 +46,21 @@ export function applyTheme(): boolean {
   return dark
 }
 
+/** 切换主题模式并持久化 */
+export function setThemeMode(mode: ThemeMode): void {
+  themeMode.value = mode
+  try {
+    if (mode === 'auto') localStorage.removeItem(THEME_KEY)
+    else localStorage.setItem(THEME_KEY, mode)
+  } catch {
+    // 忽略持久化失败，本次会话内仍生效
+  }
+  applyTheme()
+}
+
 let timer: ReturnType<typeof setInterval> | null = null
 
-/** 应用入口调用：立即应用主题并启动分钟级自动切换 */
+/** 应用入口调用：立即应用主题并启动分钟级自动切换（仅 auto 模式下会产生变化） */
 export function initTheme(): void {
   applyTheme()
   if (timer) return

frondend/src/layouts/MobileLayout.vue

@@ -4,6 +4,7 @@ import { useRouter, useRoute } from 'vue-router'
 import { CalendarCheck2, CalendarX2, User, Bell, X, CheckCircle, ChevronDown, MessageSquare, Sparkles } from 'lucide-vue-next'
 import { useMessage } from '@/composables/useMessage'
 import { Button } from '@/components/ui/button'
+import AppDialog from '@/components/ui/dialog/AppDialog.vue'
 import GuideOverlay from '@/components/GuideOverlay.vue'
 import * as authApi from '@/api/auth'
 import * as announceApi from '@/api/announcement'
@@ -21,10 +22,74 @@ const avatarFailed = ref(false)
 const tabs = [
   { name: 'home', label: '打卡', icon: CalendarCheck2 },
   { name: 'leave', label: '请/销假', icon: CalendarX2 },
-  { name: 'profile', label: '个人中心', icon: User },
+  { name: 'profile', label: '我的', icon: User },
 ]
 
 const activeTab = ref(route.name as string || 'home')
+const activeTabIndex = computed(() => tabs.findIndex((t) => t.name === activeTab.value))
+
+// 悬浮顶栏：仅首页与请/销假页显示
+const showHeader = computed(() => activeTab.value === 'home' || activeTab.value === 'leave')
+
+// 问候语（按本地时间）
+const greeting = computed(() => {
+  const h = new Date().getHours()
+  if (h < 6) return '夜深了'
+  if (h < 11) return '早上好'
+  if (h < 14) return '中午好'
+  if (h < 18) return '下午好'
+  return '晚上好'
+})
+
+// 滚动联动：内容离开顶部 → 顶栏显出玻璃底；向下滚动 → 胶囊 TabBar 收窄，向上滚动 → 展开。
+// 防抖动规则（避免"刚缩就弹回"）：
+//   1. 页面可滚动距离不足 COLLAPSE_MIN_RANGE（如「我的」页只多出几十像素）时不收窄；
+//   2. scrollTop 夹在 [0, max]：iOS 顶/底回弹产生的越界位移不算反向滚动；
+//   3. 同一方向连续滚动超过 DIR_THRESHOLD 才切换状态（方向改变时重设起点），
+//      小幅来回抖动不会触发；
+//   4. 回到顶部附近（< TOP_ZONE）始终展开；到达底部不再强制展开（保持当前状态）。
+const COLLAPSE_MIN_RANGE = 200
+const DIR_THRESHOLD = 32
+const TOP_ZONE = 40
+const scrollEl = ref<HTMLElement | null>(null)
+const scrolled = ref(false)
+const tabCollapsed = ref(false)
+let lastScrollTop = 0
+let dirAnchor = 0
+let lastDir = 0
+function onContentScroll() {
+  const el = scrollEl.value
+  if (!el) return
+  const max = Math.max(0, el.scrollHeight - el.clientHeight)
+  const top = Math.min(Math.max(el.scrollTop, 0), max)
+  scrolled.value = top > 4
+  if (max < COLLAPSE_MIN_RANGE || top < TOP_ZONE) {
+    tabCollapsed.value = false
+    lastScrollTop = dirAnchor = top
+    lastDir = 0
+    return
+  }
+  const dir = Math.sign(top - lastScrollTop)
+  if (dir !== 0 && dir !== lastDir) {
+    dirAnchor = lastScrollTop
+    lastDir = dir
+  }
+  if (dir > 0 && top - dirAnchor > DIR_THRESHOLD) tabCollapsed.value = true
+  else if (dir < 0 && dirAnchor - top > DIR_THRESHOLD) tabCollapsed.value = false
+  lastScrollTop = top
+}
+
+// 切页回到顶部并复位滚动联动状态（各页共享同一滚动容器）
+watch(
+  () => route.name,
+  () => {
+    if (scrollEl.value) scrollEl.value.scrollTop = 0
+    lastScrollTop = dirAnchor = lastDir = 0
+    scrolled.value = false
+    tabCollapsed.value = false
+  },
+  { flush: 'post' },
+)
 
 // 路由变化时同步底部 tab 高亮；回到首页时尝试加载公告强制弹窗（若引导已完成）
 watch(() => route.name, (name) => {
@@ -60,7 +125,7 @@ const detailItem = ref<AnnouncementItem | null>(null)
 // main.ts 将其写入 sessionStorage（一次性，本组件读取即消费），仅当次加载生效。
 const GUIDE_FORCE_KEY = 'xz_guide_force'
 /** 与后端 handler.GuideCompleteVersion 一致 */
-const GUIDE_VERSION = 'v2'
+const GUIDE_VERSION = 'v4'
 const showGuide = ref(false)
 // 本次展示是否来自测试强播（?guide=1，仅当次加载）：强播关闭时不写库，可反复重播
 const guideForced = ref(false)
@@ -152,7 +217,12 @@ async function openAnnouncementPanel() {
       ticketApi.getTicketNotifications(),
     ])
     announcements.value = annRes.data.data || []
-    ticketNotifications.value = ticketRes.data.data || []
+    // 工单通知：未关闭工单（status≠closed）的通知排到前面，其余保持时间倒序
+    const notifList = ticketRes.data.data || []
+    ticketNotifications.value = [
+      ...notifList.filter((n) => n.ticketStatus && n.ticketStatus !== 'closed'),
+      ...notifList.filter((n) => !n.ticketStatus || n.ticketStatus === 'closed'),
+    ]
   } catch {
     announcements.value = []
     ticketNotifications.value = []
@@ -251,244 +321,281 @@ onUnmounted(() => {
 </script>
 
 <template>
-  <div class="flex flex-col h-full">
-    <!-- 顶部用户信息栏（首页与请/销假页显示，两页保持一致） -->
-    <div v-if="activeTab === 'home' || activeTab === 'leave'" class="flex-shrink-0 bg-gradient-to-r from-blue-500 to-blue-600 text-white px-4 pt-3 pb-3">
+  <div class="relative flex flex-col h-full">
+    <!-- 顶部用户信息栏（首页与请/销假页显示，两页保持一致）。
+         悬浮于内容之上：顶部时透明融入背景光斑，内容滚动后渐显液态玻璃底与细分隔线 -->
+    <div
+      v-if="showHeader"
+      class="absolute inset-x-0 top-0 z-30 px-4 pb-3 transition-[background-color,box-shadow,backdrop-filter] duration-300"
+      :class="scrolled ? 'glass-bar shadow-[0_1px_0_rgb(14_40_34/0.06)] dark:shadow-[0_1px_0_rgb(255_255_255/0.06)]' : ''"
+      style="padding-top: calc(var(--safe-top) + 16px)"
+    >
       <div v-if="userInfo" class="flex items-center gap-3">
-        <div class="w-10 h-10 rounded-full bg-white/20 flex items-center justify-center flex-shrink-0 overflow-hidden">
+        <div class="w-11 h-11 rounded-full bg-brand-gradient ring-2 ring-white shadow-md shadow-brand-500/20 flex items-center justify-center flex-shrink-0 overflow-hidden dark:ring-gray-200">
           <img v-show="userInfo.avatar && !avatarFailed" :src="userInfo.avatar" class="w-full h-full object-cover" @error="avatarFailed = true" />
-          <User v-if="!userInfo.avatar || avatarFailed" class="w-5 h-5 text-white" />
+          <span v-if="!userInfo.avatar || avatarFailed" class="text-base font-bold text-white">{{ (userInfo.realName || userInfo.username || '?')[0] }}</span>
         </div>
         <div class="flex-1 min-w-0">
-          <p class="font-semibold text-sm truncate">{{ userInfo.realName || userInfo.username }}</p>
-          <p class="text-xs text-white/70 truncate">{{ userInfo.schoolName }}</p>
+          <p class="text-xs text-gray-500 truncate">{{ greeting }} · {{ userInfo.schoolName }}</p>
+          <p class="text-[17px] font-bold text-gray-900 tracking-tight truncate">{{ userInfo.realName || userInfo.username }}</p>
         </div>
         <!-- 公告铃铛（首页与请/销假页均显示） -->
-        <button class="relative w-9 h-9 rounded-full bg-white/15 flex items-center justify-center hover:bg-white/25 transition-colors flex-shrink-0" @click="openAnnouncementPanel">
-          <Bell class="w-5 h-5 text-white" />
-          <span v-if="totalUnread > 0" class="absolute -top-0.5 -right-0.5 min-w-[16px] h-4 px-1 rounded-full bg-red-500 text-white text-[9px] font-bold flex items-center justify-center leading-none">{{ totalUnread > 99 ? '99+' : totalUnread }}</span>
+        <button class="press glass relative w-10 h-10 rounded-full flex items-center justify-center flex-shrink-0" aria-label="通知" @click="openAnnouncementPanel">
+          <Bell class="w-[18px] h-[18px] text-gray-700" />
+          <span v-if="totalUnread > 0" class="absolute -top-0.5 -right-0.5 min-w-[18px] h-[18px] px-1 rounded-full bg-red-500 text-white text-xs font-bold flex items-center justify-center leading-none ring-2 ring-white dark:ring-gray-50">{{ totalUnread > 99 ? '99+' : totalUnread }}</span>
         </button>
       </div>
       <div v-else class="flex items-center gap-3">
-        <div class="w-10 h-10 rounded-full bg-white/20 animate-pulse" />
+        <div class="w-11 h-11 rounded-full bg-gray-200 animate-pulse" />
         <div class="flex-1 space-y-1.5">
-          <div class="h-3 w-28 bg-white/20 rounded animate-pulse" />
-          <div class="h-2.5 w-40 bg-white/20 rounded animate-pulse" />
+          <div class="h-3 w-28 bg-gray-200 rounded animate-pulse" />
+          <div class="h-4 w-36 bg-gray-200 rounded animate-pulse" />
         </div>
       </div>
     </div>
 
-    <!-- 中间内容区（可滚动；bg-background 语义类，亮暗主题自动切换） -->
-    <div class="flex-1 overflow-y-auto bg-background">
-      <router-view />
+    <!-- 中间内容区（可滚动）：上下留出悬浮顶栏 / 胶囊 TabBar 的空间，内容可在玻璃层下方滚动 -->
+    <div
+      ref="scrollEl"
+      class="flex-1 overflow-y-auto overscroll-contain"
+      :style="{
+        // 预留 60 = 顶栏上内边距 16 + 头像行 44；页面自带 p-4 的 16 即头像行到首张卡片的间距 → 上下均为 16
+        paddingTop: showHeader ? 'calc(var(--safe-top) + 60px)' : undefined,
+        paddingBottom: 'calc(env(safe-area-inset-bottom) + 92px)',
+      }"
+      @scroll.passive="onContentScroll"
+    >
+      <router-view v-slot="{ Component }">
+        <!-- 切页淡入（仅 opacity：不引入 transform，避免页面内 fixed 元素临时以容器为定位基准） -->
+        <!-- grid-cols-1 = minmax(0,1fr)：列宽锁定为容器宽度，避免不换行内容（如置顶公告走马灯）撑宽整页；
+             grid 拉伸让子页面的 min-h-full 生效（我的页靠它把退出按钮推到底部） -->
+        <div :key="String(route.name)" class="page-fade min-h-full grid grid-cols-1">
+          <component :is="Component" />
+        </div>
+      </router-view>
     </div>
 
-    <!-- 底部 TabBar（env 安全区适配 iPhone/iPad 底部 Home 条） -->
-    <div class="flex-shrink-0 bg-white border-t border-gray-100 flex" style="padding-bottom: env(safe-area-inset-bottom)">
-      <button
-        v-for="tab in tabs"
-        :key="tab.name"
-        class="flex-1 flex flex-col items-center justify-center h-14 gap-0.5 transition-colors"
-        :class="activeTab === tab.name ? 'text-blue-500' : 'text-gray-400'"
-        @click="switchTab(tab.name)"
-      >
-        <component :is="tab.icon" class="w-5 h-5" />
-        <span class="text-[10px]">{{ tab.label }}</span>
-      </button>
-    </div>
-
-    <!-- ======== 公告面板遮罩 ======== -->
-    <transition name="fade">
-      <div v-if="showAnnPanel" class="fixed inset-0 z-50 bg-black/50" @click="showAnnPanel = false" />
-    </transition>
-
-    <!-- ======== 公告底部面板 ======== -->
-    <transition name="slide-up">
+    <!-- 底部悬浮胶囊 TabBar（液态玻璃）：滑动高亮块指示当前页；向下滚动时收窄、向上滚动时展开。
+         外层 pointer-events:none 让两侧空白处的点击穿透到内容 -->
+    <nav
+      class="absolute inset-x-0 bottom-0 z-30 flex justify-center px-5 pointer-events-none"
+      style="padding-bottom: calc(env(safe-area-inset-bottom) + 12px)"
+      aria-label="主导航"
+    >
       <div
-        v-if="showAnnPanel"
-        class="fixed inset-0 z-50 flex items-end sm:items-center justify-center pointer-events-none"
+        class="glass pointer-events-auto relative flex rounded-full p-1.5 transition-all duration-500 ease-[var(--ease-spring)]"
+        :class="tabCollapsed ? 'w-[64%] h-14' : 'w-full h-[66px]'"
       >
-        <div class="absolute inset-0 pointer-events-auto" @click="showAnnPanel = false" />
-        <div class="relative w-full sm:max-w-sm max-h-[80vh] bg-white sm:rounded-2xl rounded-t-2xl shadow-2xl flex flex-col overflow-hidden pointer-events-auto">
-          <!-- 拖拽指示条 -->
-          <div class="flex justify-center pt-2.5 pb-1 flex-shrink-0">
-            <div class="w-9 h-1 rounded-full bg-gray-300" />
+        <!-- 滑动高亮块 -->
+        <div
+          v-if="activeTabIndex >= 0"
+          class="absolute top-1.5 bottom-1.5 left-1.5 rounded-full bg-brand-500/12 dark:bg-brand-400/15 transition-transform duration-500 ease-[var(--ease-spring)]"
+          :style="{ width: `calc((100% - 12px) / ${tabs.length})`, transform: `translateX(${activeTabIndex * 100}%)` }"
+        />
+        <button
+          v-for="tab in tabs"
+          :key="tab.name"
+          class="press relative z-10 flex-1 flex flex-col items-center justify-center gap-0.5 rounded-full"
+          :class="activeTab === tab.name ? 'text-brand-500 dark:text-brand-400' : 'text-gray-500'"
+          :aria-current="activeTab === tab.name ? 'page' : undefined"
+          @click="switchTab(tab.name)"
+        >
+          <component :is="tab.icon" class="w-[22px] h-[22px] transition-transform duration-300" :class="activeTab === tab.name ? 'scale-110' : ''" :stroke-width="activeTab === tab.name ? 2.4 : 2" />
+          <span
+            class="text-xs leading-none overflow-hidden transition-all duration-300"
+            :class="[activeTab === tab.name ? 'font-semibold' : 'font-medium', tabCollapsed ? 'max-h-0 opacity-0' : 'max-h-4 opacity-100']"
+          >{{ tab.label }}</span>
+        </button>
+      </div>
+    </nav>
+
+    <!-- ======== 公告面板（遮罩 + 底部面板） ======== -->
+    <AppDialog
+      :open="showAnnPanel"
+      overlay-class="bg-black/50"
+      panel-class="sm:max-w-sm max-h-[80vh] shadow-2xl"
+      :fade="true"
+      title="通知"
+      @update:open="(v: boolean) => { if (!v) showAnnPanel = false }"
+    >
+      <!-- 拖拽指示条 -->
+      <div class="flex justify-center pt-2.5 pb-1 flex-shrink-0">
+        <div class="w-9 h-1 rounded-full bg-gray-300" />
+      </div>
+
+      <!-- 标题栏 -->
+      <div class="flex items-center justify-between px-5 py-2 flex-shrink-0">
+        <div class="flex items-center gap-2">
+          <div class="w-8 h-8 rounded-xl bg-brand-gradient flex items-center justify-center shadow-sm shadow-brand-500/20">
+            <Bell class="w-4 h-4 text-white" />
           </div>
+          <span class="font-bold text-gray-900 text-base">通知</span>
+          <span v-if="totalUnread > 0" class="text-xs px-2 py-0.5 rounded-full bg-red-50 text-red-500 font-medium border border-red-100">{{ totalUnread }} 条未读</span>
+        </div>
+        <button class="w-7 h-7 rounded-full hover:bg-gray-100 flex items-center justify-center transition-colors" @click="showAnnPanel = false">
+          <X class="w-4 h-4 text-gray-400" />
+        </button>
+      </div>
 
-          <!-- 标题栏 -->
-          <div class="flex items-center justify-between px-5 py-2 flex-shrink-0">
-            <div class="flex items-center gap-2">
-              <div class="w-7 h-7 rounded-lg bg-blue-100 flex items-center justify-center">
-                <Bell class="w-4 h-4 text-blue-500" />
-              </div>
-              <span class="font-semibold text-gray-900 text-sm">通知</span>
-              <span v-if="totalUnread > 0" class="text-[10px] px-2 py-0.5 rounded-full bg-red-50 text-red-500 font-medium border border-red-100">{{ totalUnread }} 条未读</span>
-            </div>
-            <button class="w-7 h-7 rounded-full hover:bg-gray-100 flex items-center justify-center transition-colors" @click="showAnnPanel = false">
-              <X class="w-4 h-4 text-gray-400" />
-            </button>
-          </div>
+      <!-- 分隔线 -->
+      <div class="mx-5 border-t border-gray-100 flex-shrink-0" />
 
-          <!-- 分隔线 -->
-          <div class="mx-5 border-t border-gray-100 flex-shrink-0" />
-
-          <!-- 通知列表 -->
-          <div class="flex-1 overflow-y-auto px-5 py-2">
-            <!-- ===== 公告分区 ===== -->
-            <div v-if="announcements.length > 0" class="mb-1">
-              <p class="text-[10px] font-medium text-gray-400 uppercase tracking-wider mb-2 mt-1">公告</p>
-              <div class="space-y-2">
-                <div
-                  v-for="item in announcements"
-                  :key="'ann-'+item.id"
-                  class="rounded-xl p-3.5 transition-all duration-200 cursor-pointer border"
-                  :class="item.isRead
-                    ? 'bg-white border-gray-100 hover:border-gray-200'
-                    : 'bg-blue-50/50 border-blue-100 hover:border-blue-200'"
-                  @click="openDetail(item)"
-                >
-                  <div class="flex items-start gap-3">
-                    <div class="mt-0.5 flex-shrink-0">
-                      <div v-if="!item.isRead" class="w-2.5 h-2.5 rounded-full bg-blue-500 mt-1.5" />
-                      <CheckCircle v-else class="w-4 h-4 text-green-400 mt-0.5" />
-                    </div>
-                    <div class="flex-1 min-w-0">
-                      <div class="flex items-center gap-1.5 mb-1">
-                        <p class="text-sm font-medium text-gray-900 truncate">{{ item.title }}</p>
-                      </div>
-                      <p class="text-xs text-gray-500 leading-relaxed line-clamp-1">{{ item.content }}</p>
-                      <p class="text-[10px] text-gray-400 mt-1">{{ new Date(item.createdAt).toLocaleString('zh-CN') }}</p>
-                    </div>
-                    <ChevronDown class="w-4 h-4 text-gray-300 flex-shrink-0 mt-1 -rotate-90" />
-                  </div>
+      <!-- 通知列表 -->
+      <div class="flex-1 overflow-y-auto px-5 py-2">
+        <!-- ===== 公告分区 ===== -->
+        <div v-if="announcements.length > 0" class="mb-1">
+          <p class="text-xs font-semibold text-gray-500 tracking-wider mb-2 mt-1">公告</p>
+          <div class="space-y-2">
+            <div
+              v-for="item in announcements"
+              :key="'ann-'+item.id"
+              class="press rounded-2xl p-3.5 cursor-pointer border"
+              :class="item.isRead
+                ? 'bg-white border-gray-100 hover:border-gray-200'
+                : 'bg-brand-50 border-brand-100 hover:border-brand-200'"
+              @click="openDetail(item)"
+            >
+              <div class="flex items-start gap-3">
+                <div class="mt-0.5 flex-shrink-0">
+                  <div v-if="!item.isRead" class="w-2.5 h-2.5 rounded-full bg-blue-500 mt-1.5" />
+                  <CheckCircle v-else class="w-4 h-4 text-green-400 mt-0.5" />
                 </div>
-              </div>
-            </div>
-
-            <!-- ===== 工单通知分区 ===== -->
-            <div v-if="ticketNotifications.length > 0" class="mb-1">
-              <div v-if="announcements.length > 0" class="border-t border-gray-100 my-3" />
-              <p class="text-[10px] font-medium text-gray-400 uppercase tracking-wider mb-2">工单通知</p>
-              <div class="space-y-2">
-                <div
-                  v-for="n in ticketNotifications"
-                  :key="'tkt-'+n.id"
-                  class="rounded-xl p-3.5 transition-all duration-200 cursor-pointer border"
-                  :class="n.isRead
-                    ? 'bg-white border-gray-100 hover:border-gray-200'
-                    : 'bg-rose-50/50 border-rose-100 hover:border-rose-200'"
-                  @click="handleTicketNotifClick(n)"
-                >
-                  <div class="flex items-start gap-3">
-                    <div class="mt-0.5 flex-shrink-0">
-                      <div v-if="!n.isRead" class="w-2.5 h-2.5 rounded-full bg-rose-500 mt-1.5" />
-                      <CheckCircle v-else class="w-4 h-4 text-green-400 mt-0.5" />
-                    </div>
-                    <div class="flex-1 min-w-0">
-                      <div class="flex items-center gap-1.5 mb-1">
-                        <MessageSquare class="w-3.5 h-3.5 text-rose-500 flex-shrink-0" />
-                        <p class="text-sm font-medium text-gray-900 truncate">{{ n.title }}</p>
-                      </div>
-                      <p class="text-xs text-gray-500 leading-relaxed line-clamp-1">{{ n.content }}</p>
-                      <p class="text-[10px] text-gray-400 mt-1">{{ n.createdAt }}</p>
-                    </div>
-                    <ChevronDown class="w-4 h-4 text-gray-300 flex-shrink-0 mt-1 -rotate-90" />
+                <div class="flex-1 min-w-0">
+                  <div class="flex items-center gap-1.5 mb-1">
+                    <p class="text-sm font-medium text-gray-900 truncate">{{ item.title }}</p>
                   </div>
+                  <p class="text-xs text-gray-500 leading-relaxed line-clamp-1">{{ item.content }}</p>
+                  <p class="text-xs text-gray-400 mt-1">{{ new Date(item.createdAt).toLocaleString('zh-CN') }}</p>
                 </div>
-              </div>
-            </div>
-
-            <!-- 空状态 -->
-            <div v-if="announcements.length === 0 && ticketNotifications.length === 0 && !loadingAnnouncements && !loadingTickets" class="flex flex-col items-center justify-center py-16 text-gray-400">
-              <Bell class="w-10 h-10 mb-3 opacity-30" />
-              <p class="text-sm font-medium">暂无通知</p>
-              <p class="text-xs mt-1">还没有收到任何公告或工单通知</p>
-            </div>
-
-            <!-- 加载中 -->
-            <div v-if="loadingAnnouncements || loadingTickets" class="space-y-3 py-4">
-              <div v-for="i in 3" :key="i" class="animate-pulse">
-                <div class="h-4 w-32 bg-gray-100 rounded mb-2" />
-                <div class="h-3 w-full bg-gray-100 rounded mb-1" />
-                <div class="h-3 w-3/4 bg-gray-100 rounded" />
+                <ChevronDown class="w-4 h-4 text-gray-300 flex-shrink-0 mt-1 -rotate-90" />
               </div>
             </div>
           </div>
         </div>
+
+        <!-- ===== 工单通知分区 ===== -->
+        <div v-if="ticketNotifications.length > 0" class="mb-1">
+          <div v-if="announcements.length > 0" class="border-t border-gray-100 my-3" />
+          <p class="text-xs font-semibold text-gray-500 tracking-wider mb-2">工单通知</p>
+          <div class="space-y-2">
+            <div
+              v-for="n in ticketNotifications"
+              :key="'tkt-'+n.id"
+              class="press rounded-2xl p-3.5 cursor-pointer border"
+              :class="n.isRead
+                ? 'bg-white border-gray-100 hover:border-gray-200'
+                : 'bg-rose-50 border-rose-100 hover:border-rose-200'"
+              @click="handleTicketNotifClick(n)"
+            >
+              <div class="flex items-start gap-3">
+                <div class="mt-0.5 flex-shrink-0">
+                  <div v-if="!n.isRead" class="w-2.5 h-2.5 rounded-full bg-rose-500 mt-1.5" />
+                  <CheckCircle v-else class="w-4 h-4 text-green-400 mt-0.5" />
+                </div>
+                <div class="flex-1 min-w-0">
+                  <div class="flex items-center gap-1.5 mb-1">
+                    <MessageSquare class="w-3.5 h-3.5 text-rose-500 flex-shrink-0" />
+                    <p class="text-sm font-medium text-gray-900 truncate">{{ n.title }}</p>
+                  </div>
+                  <p class="text-xs text-gray-500 leading-relaxed line-clamp-1">{{ n.content }}</p>
+                  <p class="text-xs text-gray-400 mt-1">{{ n.createdAt }}</p>
+                </div>
+                <ChevronDown class="w-4 h-4 text-gray-300 flex-shrink-0 mt-1 -rotate-90" />
+              </div>
+            </div>
+          </div>
+        </div>
+
+        <!-- 空状态 -->
+        <div v-if="announcements.length === 0 && ticketNotifications.length === 0 && !loadingAnnouncements && !loadingTickets" class="flex flex-col items-center justify-center py-16 text-gray-400">
+          <Bell class="w-10 h-10 mb-3 opacity-30" />
+          <p class="text-sm font-medium">暂无通知</p>
+          <p class="text-xs mt-1">还没有收到任何公告或工单通知</p>
+        </div>
+
+        <!-- 加载中 -->
+        <div v-if="loadingAnnouncements || loadingTickets" class="space-y-3 py-4">
+          <div v-for="i in 3" :key="i" class="animate-pulse">
+            <div class="h-4 w-32 bg-gray-100 rounded mb-2" />
+            <div class="h-3 w-full bg-gray-100 rounded mb-1" />
+            <div class="h-3 w-3/4 bg-gray-100 rounded" />
+          </div>
+        </div>
       </div>
-    </transition>
+    </AppDialog>
 
     <!-- ======== 公告详情 Dialog ======== -->
-    <Teleport to="body">
-      <transition name="fade">
-        <div
-          v-if="showDetail && detailItem"
-          class="fixed inset-0 z-[60] flex items-center justify-center px-6"
-        >
-          <div class="absolute inset-0 bg-black/50" @click="showDetail = false" />
-          <div class="relative w-full max-w-sm bg-white rounded-2xl shadow-2xl overflow-hidden">
-            <div class="h-1.5 bg-gradient-to-r from-blue-500 to-blue-400" />
-            <div class="p-6">
-              <div class="flex items-center justify-between mb-3">
-                <div class="flex items-center gap-2.5">
-                  <div class="w-9 h-9 rounded-xl bg-blue-100 flex items-center justify-center">
-                    <Bell class="w-5 h-5 text-blue-500" />
-                  </div>
-                  <h3 class="text-base font-bold text-gray-900">{{ detailItem.title }}</h3>
-                </div>
-                <button class="w-7 h-7 rounded-full hover:bg-gray-100 flex items-center justify-center flex-shrink-0" @click="showDetail = false">
-                  <X class="w-4 h-4 text-gray-400" />
-                </button>
-              </div>
-              <div class="flex items-center gap-2 mb-4">
-                <span class="text-[10px] text-gray-400">{{ new Date(detailItem.createdAt).toLocaleString('zh-CN') }}</span>
-              </div>
-              <div class="bg-gray-50 rounded-xl p-4 max-h-[50vh] overflow-y-auto">
-                <p class="text-sm text-gray-600 leading-relaxed whitespace-pre-wrap">{{ detailItem.content }}</p>
-              </div>
-              <Button class="mt-4 w-full h-11 text-sm font-medium rounded-xl" @click="showDetail = false">
-                关闭
-              </Button>
+    <AppDialog
+      :open="showDetail && !!detailItem"
+      variant="center"
+      z-class="z-[60]"
+      overlay-class="bg-black/50"
+      wrapper-class="px-6"
+      panel-class="max-w-sm shadow-2xl"
+      :fade="true"
+      :title="detailItem?.title || '公告详情'"
+      @update:open="(v: boolean) => { if (!v) showDetail = false }"
+    >
+      <div class="h-1.5 bg-gradient-to-r from-brand-400 to-sky-400" />
+      <div class="p-6">
+        <div class="flex items-center justify-between mb-3">
+          <div class="flex items-center gap-2.5">
+            <div class="w-9 h-9 rounded-xl bg-blue-100 flex items-center justify-center">
+              <Bell class="w-5 h-5 text-blue-500" />
             </div>
+            <h3 class="text-base font-bold text-gray-900">{{ detailItem?.title }}</h3>
           </div>
+          <button class="w-7 h-7 rounded-full hover:bg-gray-100 flex items-center justify-center flex-shrink-0" @click="showDetail = false">
+            <X class="w-4 h-4 text-gray-400" />
+          </button>
         </div>
-      </transition>
-    </Teleport>
+        <div class="flex items-center gap-2 mb-4">
+          <span class="text-xs text-gray-400">{{ detailItem ? new Date(detailItem.createdAt).toLocaleString('zh-CN') : '' }}</span>
+        </div>
+        <div class="bg-gray-50 rounded-xl p-4 max-h-[50vh] overflow-y-auto">
+          <p class="text-sm text-gray-600 leading-relaxed whitespace-pre-wrap">{{ detailItem?.content }}</p>
+        </div>
+        <Button class="mt-4 w-full h-11 text-sm font-medium rounded-xl" @click="showDetail = false">
+          关闭
+        </Button>
+      </div>
+    </AppDialog>
 
     <!-- ======== 强制弹出公告 Dialog ======== -->
-    <Teleport to="body">
-      <transition name="fade">
-        <div
-          v-if="currentForcePopup"
-          class="fixed inset-0 z-[60] flex items-center justify-center px-6"
-        >
-          <div class="absolute inset-0 bg-black/50" @click="handleForcePopupDismiss" />
-          <div class="relative w-full max-w-sm bg-white rounded-2xl shadow-2xl overflow-hidden">
-            <!-- 顶部装饰条 -->
-            <div class="h-1.5 bg-gradient-to-r from-blue-500 to-blue-400" />
-            <div class="p-6">
-              <div class="flex items-center gap-2.5 mb-2">
-                  <div class="w-9 h-9 rounded-xl bg-blue-100 flex items-center justify-center">
-                    <Bell class="w-5 h-5 text-blue-500" />
-                  </div>
-                  <h3 class="text-base font-bold text-gray-900">{{ currentForcePopup.title }}</h3>
-                </div>
-              <div class="bg-gray-50 rounded-xl p-4 mb-4">
-                <p class="text-sm text-gray-600 leading-relaxed whitespace-pre-wrap">{{ currentForcePopup.content }}</p>
-              </div>
-              <Button class="w-full h-11 text-sm font-medium rounded-xl" @click="handleForcePopupDismiss">
-                我知道了
-              </Button>
+    <AppDialog
+      :open="!!currentForcePopup"
+      variant="center"
+      z-class="z-[60]"
+      overlay-class="bg-black/50"
+      wrapper-class="px-6"
+      panel-class="max-w-sm shadow-2xl"
+      :fade="true"
+      :title="currentForcePopup?.title || '公告'"
+      @update:open="(v: boolean) => { if (!v) handleForcePopupDismiss() }"
+    >
+      <!-- 顶部装饰条 -->
+      <div class="h-1.5 bg-gradient-to-r from-brand-400 to-sky-400" />
+      <div class="p-6">
+        <div class="flex items-center gap-2.5 mb-2">
+            <div class="w-9 h-9 rounded-xl bg-blue-100 flex items-center justify-center">
+              <Bell class="w-5 h-5 text-blue-500" />
             </div>
+            <h3 class="text-base font-bold text-gray-900">{{ currentForcePopup?.title }}</h3>
           </div>
+        <div class="bg-gray-50 rounded-xl p-4 mb-4">
+          <p class="text-sm text-gray-600 leading-relaxed whitespace-pre-wrap">{{ currentForcePopup?.content }}</p>
         </div>
-      </transition>
-    </Teleport>
+        <Button class="w-full h-11 text-sm font-medium rounded-xl" @click="handleForcePopupDismiss">
+          我知道了
+        </Button>
+      </div>
+    </AppDialog>
 
     <!-- ======== 新手引导入口（全局：所有布局内页面显示；引导展示期间隐藏） ======== -->
     <button
       v-if="!showGuide"
-      class="guide-entry fixed right-3 bottom-20 z-40 flex items-center gap-1.5 rounded-full bg-blue-500/95 pl-3 pr-3.5 py-2 text-white text-xs font-medium shadow-lg shadow-blue-500/30 hover:bg-blue-600 active:scale-95 transition-all"
+      class="guide-entry fixed right-4 z-40 flex items-center gap-1.5 rounded-full bg-brand-gradient pl-3 pr-3.5 py-2 text-white text-xs font-semibold shadow-lg shadow-brand-500/30 active:scale-95 transition-all"
+      style="bottom: calc(env(safe-area-inset-bottom) + 96px)"
       @click="restartGuide"
     >
       <Sparkles class="w-3.5 h-3.5 flex-shrink-0" />
@@ -507,30 +614,19 @@ onUnmounted(() => {
 </template>
 
 <style scoped>
-.fade-enter-active,
-.fade-leave-active {
-  transition: opacity 0.25s ease;
-}
-.fade-enter-from,
-.fade-leave-to {
-  opacity: 0;
-}
-
-.slide-up-enter-active,
-.slide-up-leave-active {
-  transition: transform 0.3s cubic-bezier(0.32, 0.72, 0, 1);
-}
-.slide-up-enter-from,
-.slide-up-leave-to {
-  transition: translateY(100%);
-}
-
 /* 引导入口气泡：上下浮动跳动，吸引注意但不刺眼 */
 @keyframes guide-bob {
   0%, 100% { transform: translateY(0); }
   50% { transform: translateY(-6px); }
 }
 .guide-entry {
-  animation: guide-bob 1.5s ease-in-out infinite;
+  animation: guide-bob 1.8s ease-in-out infinite;
+}
+/* 切页淡入：仅 opacity，避免 transform 让页面内 fixed 元素临时相对容器定位 */
+.page-fade {
+  animation: page-fade-in 0.32s ease backwards;
+}
+@keyframes page-fade-in {
+  from { opacity: 0; }
 }
 </style>

frondend/src/router/index.ts

@@ -3,6 +3,7 @@ import LoginView from '@/views/login/LoginView.vue'
 import HomeView from '@/views/home/HomeView.vue'
 import ProfileView from '@/views/profile/ProfileView.vue'
 import LeaveView from '@/views/leave/LeaveView.vue'
+import CourseView from '@/views/course/CourseView.vue'
 import BindDeviceView from '@/views/bind/BindDeviceView.vue'
 import MobileLayout from '@/layouts/MobileLayout.vue'
 import BrowserGuideView from '@/views/guide/BrowserGuideView.vue'
@@ -151,6 +152,11 @@ const router = createRouter({
           name: 'leave',
           component: LeaveView,
         },
+        {
+          path: 'course',
+          name: 'course',
+          component: CourseView,
+        },
         {
           path: 'profile',
           name: 'profile',

frondend/src/utils/clipboard.ts

@@ -6,8 +6,25 @@
  * 若先 await Clipboard API 被拒（移动端 WebView 常见 NotAllowedError），
  * 手势上下文已丢失，后续 execCommand 会静默失败（返回 false 但剪贴板无内容）。
  *
+ * 弹窗内复制的坑：AppDialog（reka-ui）会用 FocusScope 锁定焦点——
+ * document 上的 focusin 监听发现焦点跑到 dialog 容器之外时会立即抢回。
+ * 若把临时 textarea 挂到 document.body（容器外），ta.focus() 会立刻被抢走，
+ * 选区失效，execCommand('copy') 仍返回 true 但复制的是空内容
+ *（表现为「提示已复制，实际粘贴不出东西」，且只发生在弹窗内的复制按钮）。
+ * 因此：优先挂到当前打开的 dialog 容器内；并显式校验选区是否真的取到文本。
+ *
  * 返回是否复制成功
  */
+function findActiveDialogContainer(): HTMLElement | null {
+  const dialogs = document.querySelectorAll<HTMLElement>('[role="dialog"]')
+  // 取最后一次渲染（DOM 中靠后）且可见的那个
+  for (let i = dialogs.length - 1; i >= 0; i--) {
+    const el = dialogs[i]
+    if (el && el.offsetParent !== null) return el
+  }
+  return dialogs.length > 0 ? dialogs[dialogs.length - 1] : null
+}
+
 export async function copyToClipboard(text: string): Promise<boolean> {
   // 1) 同步路径：隐藏 textarea + execCommand（用户手势内，兼容性最好）
   const ta = document.createElement('textarea')
@@ -16,17 +33,24 @@ export async function copyToClipboard(text: string): Promise<boolean> {
   // font-size ≥ 16px 避免 iOS focus 时触发页面缩放
   ta.style.cssText = 'position:fixed;top:0;left:0;width:1px;height:1px;opacity:0;font-size:16px;border:0;padding:0;margin:0;'
   ta.setAttribute('readonly', '')
-  document.body.appendChild(ta)
-  ta.focus()
-  ta.select()
-  ta.setSelectionRange(0, text.length)
+  // 关键：挂到 dialog 容器内（若有弹窗打开），否则焦点会被 FocusScope 抢回导致为空复制
+  const host: HTMLElement = findActiveDialogContainer() || document.body
+  host.appendChild(ta)
   let ok = false
   try {
-    ok = document.execCommand('copy')
+    ta.focus()
+    ta.select()
+    ta.setSelectionRange(0, text.length)
+    // 校验选区确实落在本 textarea 上（焦点被抢时 selectionStart/End 会异常）
+    const selectionValid =
+      ta.selectionStart === 0 && ta.selectionEnd === text.length && document.activeElement === ta
+    if (selectionValid) {
+      ok = document.execCommand('copy')
+    }
   } catch {
     ok = false
   }
-  document.body.removeChild(ta)
+  if (ta.parentNode) ta.parentNode.removeChild(ta)
   if (ok) return true
 
   // 2) 异步回退：Clipboard API（仅 HTTPS/localhost；注意此时手势可能已丢失，仅作兜底）

frondend/src/views/admin/AdminAgents.vue

@@ -10,7 +10,6 @@ import {
   Eye,
   EyeOff,
   CheckCircle,
-  XCircle,
   LoaderCircle,
   Ban,
   KeyRound,
@@ -18,7 +17,7 @@ import {
 import { Button } from '@/components/ui/button'
 import { Input } from '@/components/ui/input'
 import { Label } from '@/components/ui/label'
-import {  } from '@/components/ui/card'
+import AppDialog from '@/components/ui/dialog/AppDialog.vue'
 import { useMessage } from '@/composables/useMessage'
 import * as adminApi from '@/api/admin'
 
@@ -193,37 +192,45 @@ async function handleToggleStatus(agent: adminApi.AgentUser) {
 </script>
 
 <template>
-  <div class="p-6">
+  <div class="adm-page">
     <!-- 顶部 -->
-    <div class="flex items-center justify-between mb-6">
-      <h1 class="text-xl font-bold text-gray-900">代理管理</h1>
-      <Button variant="default" size="sm" @click="showCreateModal = true">
-        <UserPlus class="w-4 h-4 mr-1" />
+    <div class="adm-head">
+      <div class="flex items-center gap-3">
+        <div class="adm-head-icon"><Users class="w-5 h-5" /></div>
+        <div>
+          <h1 class="adm-title">代理管理</h1>
+          <p class="adm-sub">共 {{ filteredAgents.length }} 个代理 · 管理费率、余额与状态</p>
+        </div>
+      </div>
+      <Button class="h-10" @click="showCreateModal = true">
+        <UserPlus class="w-4 h-4" />
         创建代理
       </Button>
     </div>
 
     <!-- 搜索 -->
-    <div class="relative mb-4">
-      <Search class="absolute left-3 top-1/2 -translate-y-1/2 w-4 h-4 text-gray-400" />
-      <Input v-model="searchQuery" placeholder="搜索用户名..." class="pl-9 h-10 text-sm max-w-xs" />
+    <div class="adm-toolbar">
+      <div class="relative flex-1 min-w-[200px] max-w-sm">
+        <Search class="absolute left-3 top-1/2 -translate-y-1/2 w-4 h-4 text-gray-400" />
+        <Input v-model="searchQuery" placeholder="搜索用户名..." class="pl-9 h-10 text-sm" />
+      </div>
     </div>
 
     <!-- 列表 -->
-    <div class="overflow-x-auto rounded-xl border border-gray-200 bg-white shadow">
+    <div class="adm-card overflow-x-auto">
       <div v-if="loading" class="flex items-center justify-center py-16">
-        <LoaderCircle class="w-6 h-6 animate-spin text-blue-500" />
+        <LoaderCircle class="w-6 h-6 animate-spin text-brand-500" />
       </div>
 
-      <div v-else-if="filteredAgents.length === 0" class="text-center py-16 text-sm text-gray-400">
-        <Users class="w-12 h-12 mx-auto mb-3 text-gray-200" />
-        <p>暂无代理数据</p>
-        <p class="text-xs mt-1">点击右上角"创建代理"开始</p>
+      <div v-else-if="filteredAgents.length === 0" class="adm-empty">
+        <div class="adm-empty-icon"><Users class="w-6 h-6" /></div>
+        <p class="text-sm font-medium text-gray-700">暂无代理数据</p>
+        <p class="text-xs mt-1">点击右上角「创建代理」开始</p>
       </div>
 
-      <table v-else class="w-full text-sm">
+      <table v-else class="adm-table w-full">
         <thead>
-          <tr class="bg-gray-50 text-left text-xs text-gray-500">
+          <tr>
             <th class="px-4 py-3 font-medium">用户名</th>
             <th class="px-4 py-3 font-medium">费率</th>
             <th class="px-4 py-3 font-medium">余额</th>
@@ -234,35 +241,38 @@ async function handleToggleStatus(agent: adminApi.AgentUser) {
           </tr>
         </thead>
         <tbody>
-          <tr v-for="agent in filteredAgents" :key="agent.id" class="border-t border-gray-50 hover:bg-gray-50/50 transition-colors">
-            <td class="px-4 py-3 font-medium text-gray-900 whitespace-nowrap">{{ agent.username }}</td>
+          <tr v-for="agent in filteredAgents" :key="agent.id" class="">
+            <td class="px-4 py-3 whitespace-nowrap">
+              <div class="flex items-center gap-2.5">
+                <span class="w-8 h-8 rounded-full bg-brand-50 text-brand-700 flex items-center justify-center text-xs font-bold flex-shrink-0">{{ agent.username[0]?.toUpperCase() }}</span>
+                <span class="font-semibold text-gray-900">{{ agent.username }}</span>
+              </div>
+            </td>
             <td class="px-4 py-3 whitespace-nowrap">{{ (agent.rate * 100).toFixed(0) }}%</td>
-            <td class="px-4 py-3 font-mono whitespace-nowrap">{{ agent.balance.toFixed(2) }}</td>
+            <td class="px-4 py-3 whitespace-nowrap tabular-nums font-semibold text-gray-900">¥{{ agent.balance.toFixed(2) }}</td>
             <td class="px-4 py-3 whitespace-nowrap">
               <span
-                class="inline-flex items-center gap-1 px-2 py-0.5 rounded-full text-xs font-medium whitespace-nowrap"
-                :class="agent.status === 'active' ? 'bg-green-100 text-green-700' : 'bg-red-100 text-red-700'"
+                class="adm-badge"
+                :class="agent.status === 'active' ? 'adm-badge-green' : 'adm-badge-red'"
               >
-                <CheckCircle v-if="agent.status === 'active'" class="w-3 h-3 flex-shrink-0" />
-                <XCircle v-else class="w-3 h-3 flex-shrink-0" />
                 {{ agent.status === 'active' ? '正常' : '禁用' }}
               </span>
             </td>
             <td class="px-4 py-3 text-gray-500 text-xs">
               {{ agent.parentUsername || (agent.parentId ? 'ID:'+agent.parentId : '-') }}
             </td>
-            <td class="px-4 py-3 text-gray-500 text-xs">{{ new Date(agent.createdAt).toLocaleDateString() }}</td>
+            <td class="px-4 py-3 text-gray-500 text-xs">{{ new Date(agent.createdAt).toLocaleDateString('zh-CN') }}</td>
             <td class="px-4 py-3 text-right">
               <div class="flex items-center justify-end gap-1">
                 <button
-                  class="p-1.5 rounded-lg hover:bg-blue-50 text-blue-600 transition-colors"
+                  class="w-8 h-8 inline-flex items-center justify-center rounded-lg transition-colors text-brand-600 hover:bg-brand-50"
                   title="充值"
                   @click="openRecharge(agent)"
                 >
                   <DollarSign class="w-4 h-4" />
                 </button>
                 <button
-                  class="p-1.5 rounded-lg hover:bg-green-50 text-green-600 transition-colors"
+                  class="w-8 h-8 inline-flex items-center justify-center rounded-lg transition-colors text-green-600 hover:bg-green-50"
                   title="修改费率"
                   @click="openRate(agent)"
                 >
@@ -270,7 +280,7 @@ async function handleToggleStatus(agent: adminApi.AgentUser) {
                 </button>
                 <template v-if="isAdmin">
                   <button
-                    class="p-1.5 rounded-lg hover:bg-orange-50 text-orange-600 transition-colors"
+                    class="w-8 h-8 inline-flex items-center justify-center rounded-lg transition-colors text-amber-600 hover:bg-amber-50"
                     title="修改密码"
                     @click="openPassword(agent)"
                   >
@@ -294,149 +304,157 @@ async function handleToggleStatus(agent: adminApi.AgentUser) {
     </div>
 
     <!-- 创建代理弹窗 -->
-    <Teleport to="body">
-      <div v-if="showCreateModal" class="fixed inset-0 z-50 flex items-center justify-center bg-black/40" @click.self="showCreateModal = false">
-        <div class="bg-white rounded-xl shadow-xl w-full max-w-md mx-4 p-6">
-          <div class="flex items-center justify-between mb-4">
-            <h2 class="text-lg font-semibold text-gray-900">创建下级代理</h2>
-            <button class="text-gray-400 hover:text-gray-600" @click="showCreateModal = false">
-              <X class="w-5 h-5" />
-            </button>
-          </div>
+    <AppDialog
+      :open="showCreateModal"
+      variant="center"
+      panel-class="rounded-xl max-w-md mx-4 p-6"
+      title="创建下级代理"
+      @update:open="(v: boolean) => { if (!v) showCreateModal = false }"
+    >
+      <div class="flex items-center justify-between mb-4">
+        <h2 class="text-lg font-semibold text-gray-900">创建下级代理</h2>
+        <button class="text-gray-400 hover:text-gray-600" @click="showCreateModal = false">
+          <X class="w-5 h-5" />
+        </button>
+      </div>
 
-          <div class="space-y-3">
-            <div>
-              <Label class="mb-1 block text-sm text-gray-600">用户名</Label>
-              <Input v-model="createForm.username" placeholder="代理登录名" class="h-10 text-sm" />
-            </div>
-            <div>
-              <Label class="mb-1 block text-sm text-gray-600">密码</Label>
-              <Input v-model="createForm.password" type="password" placeholder="至少6位" class="h-10 text-sm" />
-            </div>
-            <div>
-              <Label class="mb-1 block text-sm text-gray-600">费率倍率</Label>
-              <Input v-model="createForm.rate" type="number" step="0.1" min="1" class="h-10 text-sm" />
-            </div>
-            <div>
-              <Label class="mb-1 block text-sm text-gray-600">初始充值金额（元）</Label>
-              <Input v-model="createForm.balance" type="number" step="10" min="0" class="h-10 text-sm" />
-            </div>
-          </div>
-
-          <div class="flex gap-2 mt-6">
-            <Button variant="outline" class="flex-1 h-10" @click="showCreateModal = false">取消</Button>
-            <Button class="flex-1 h-10" :disabled="createLoading" @click="handleCreateAgent">
-              <LoaderCircle v-if="createLoading" class="w-4 h-4 animate-spin mr-1" />
-              创建
-            </Button>
-          </div>
+      <div class="space-y-3">
+        <div>
+          <Label class="mb-1 block text-sm text-gray-600">用户名</Label>
+          <Input v-model="createForm.username" placeholder="代理登录名" class="h-10 text-sm" />
+        </div>
+        <div>
+          <Label class="mb-1 block text-sm text-gray-600">密码</Label>
+          <Input v-model="createForm.password" type="password" placeholder="至少6位" class="h-10 text-sm" />
+        </div>
+        <div>
+          <Label class="mb-1 block text-sm text-gray-600">费率倍率</Label>
+          <Input v-model="createForm.rate" type="number" step="0.1" min="1" class="h-10 text-sm" />
+        </div>
+        <div>
+          <Label class="mb-1 block text-sm text-gray-600">初始充值金额（元）</Label>
+          <Input v-model="createForm.balance" type="number" step="10" min="0" class="h-10 text-sm" />
         </div>
       </div>
-    </Teleport>
+
+      <div class="flex gap-2 mt-6">
+        <Button variant="outline" class="flex-1 h-10" @click="showCreateModal = false">取消</Button>
+        <Button class="flex-1 h-10" :disabled="createLoading" @click="handleCreateAgent">
+          <LoaderCircle v-if="createLoading" class="w-4 h-4 animate-spin mr-1" />
+          创建
+        </Button>
+      </div>
+    </AppDialog>
 
     <!-- 充值弹窗 -->
-    <Teleport to="body">
-      <div v-if="showRechargeModal" class="fixed inset-0 z-50 flex items-center justify-center bg-black/40" @click.self="showRechargeModal = false">
-        <div class="bg-white rounded-xl shadow-xl w-full max-w-sm mx-4 p-6">
-          <div class="flex items-center justify-between mb-4">
-            <h2 class="text-lg font-semibold text-gray-900">
-              充值 - {{ rechargeTarget?.username }}
-              <span class="text-sm font-normal text-gray-500 ml-2">当前余额: {{ rechargeTarget?.balance.toFixed(2) }}</span>
-            </h2>
-            <button class="text-gray-400 hover:text-gray-600" @click="showRechargeModal = false">
-              <X class="w-5 h-5" />
-            </button>
-          </div>
-
-          <div>
-            <Label class="mb-1 block text-sm text-gray-600">充值金额（元）</Label>
-            <Input v-model.number="rechargeAmount" type="number" step="10" min="0" class="h-10 text-sm" />
-          </div>
-
-          <div class="flex gap-2 mt-6">
-            <Button variant="outline" class="flex-1 h-10" @click="showRechargeModal = false">取消</Button>
-            <Button class="flex-1 h-10" :disabled="rechargeLoading || rechargeAmount <= 0" @click="handleRecharge">
-              <LoaderCircle v-if="rechargeLoading" class="w-4 h-4 animate-spin mr-1" />
-              充值
-            </Button>
-          </div>
-        </div>
+    <AppDialog
+      :open="showRechargeModal"
+      variant="center"
+      panel-class="rounded-xl max-w-sm mx-4 p-6"
+      title="充值"
+      @update:open="(v: boolean) => { if (!v) showRechargeModal = false }"
+    >
+      <div class="flex items-center justify-between mb-4">
+        <h2 class="text-lg font-semibold text-gray-900">
+          充值 - {{ rechargeTarget?.username }}
+          <span class="text-sm font-normal text-gray-500 ml-2">当前余额: {{ rechargeTarget?.balance.toFixed(2) }}</span>
+        </h2>
+        <button class="text-gray-400 hover:text-gray-600" @click="showRechargeModal = false">
+          <X class="w-5 h-5" />
+        </button>
       </div>
-    </Teleport>
+
+      <div>
+        <Label class="mb-1 block text-sm text-gray-600">充值金额（元）</Label>
+        <Input v-model.number="rechargeAmount" type="number" step="10" min="0" class="h-10 text-sm" />
+      </div>
+
+      <div class="flex gap-2 mt-6">
+        <Button variant="outline" class="flex-1 h-10" @click="showRechargeModal = false">取消</Button>
+        <Button class="flex-1 h-10" :disabled="rechargeLoading || rechargeAmount <= 0" @click="handleRecharge">
+          <LoaderCircle v-if="rechargeLoading" class="w-4 h-4 animate-spin mr-1" />
+          充值
+        </Button>
+      </div>
+    </AppDialog>
 
     <!-- 修改费率弹窗 -->
-    <Teleport to="body">
-      <div v-if="showRateModal" class="fixed inset-0 z-50 flex items-center justify-center bg-black/40" @click.self="showRateModal = false">
-        <div class="bg-white rounded-xl shadow-xl w-full max-w-sm mx-4 p-6">
-          <div class="flex items-center justify-between mb-4">
-            <h2 class="text-lg font-semibold text-gray-900">
-              修改费率 - {{ rateTarget?.username }}
-              <span class="text-sm font-normal text-gray-500 ml-2">当前: {{ rateTarget ? (rateTarget.rate * 100).toFixed(0) + '%' : '' }}</span>
-            </h2>
-            <button class="text-gray-400 hover:text-gray-600" @click="showRateModal = false">
-              <X class="w-5 h-5" />
-            </button>
-          </div>
-
-          <div>
-            <Label class="mb-1 block text-sm text-gray-600">新费率倍率</Label>
-            <Input v-model.number="rateValue" type="number" step="0.1" min="1" class="h-10 text-sm" />
-            <p class="text-xs text-gray-400 mt-1">不得低于自身费率</p>
-          </div>
-
-          <div class="flex gap-2 mt-6">
-            <Button variant="outline" class="flex-1 h-10" @click="showRateModal = false">取消</Button>
-            <Button class="flex-1 h-10" :disabled="rateLoading || rateValue <= 0" @click="handleUpdateRate">
-              <LoaderCircle v-if="rateLoading" class="w-4 h-4 animate-spin mr-1" />
-              保存
-            </Button>
-          </div>
-        </div>
+    <AppDialog
+      :open="showRateModal"
+      variant="center"
+      panel-class="rounded-xl max-w-sm mx-4 p-6"
+      title="修改费率"
+      @update:open="(v: boolean) => { if (!v) showRateModal = false }"
+    >
+      <div class="flex items-center justify-between mb-4">
+        <h2 class="text-lg font-semibold text-gray-900">
+          修改费率 - {{ rateTarget?.username }}
+          <span class="text-sm font-normal text-gray-500 ml-2">当前: {{ rateTarget ? (rateTarget.rate * 100).toFixed(0) + '%' : '' }}</span>
+        </h2>
+        <button class="text-gray-400 hover:text-gray-600" @click="showRateModal = false">
+          <X class="w-5 h-5" />
+        </button>
       </div>
-    </Teleport>
+
+      <div>
+        <Label class="mb-1 block text-sm text-gray-600">新费率倍率</Label>
+        <Input v-model.number="rateValue" type="number" step="0.1" min="1" class="h-10 text-sm" />
+        <p class="text-xs text-gray-400 mt-1">不得低于自身费率</p>
+      </div>
+
+      <div class="flex gap-2 mt-6">
+        <Button variant="outline" class="flex-1 h-10" @click="showRateModal = false">取消</Button>
+        <Button class="flex-1 h-10" :disabled="rateLoading || rateValue <= 0" @click="handleUpdateRate">
+          <LoaderCircle v-if="rateLoading" class="w-4 h-4 animate-spin mr-1" />
+          保存
+        </Button>
+      </div>
+    </AppDialog>
 
     <!-- 修改密码弹窗 (admin only) -->
-    <Teleport to="body">
-      <div v-if="showPasswordModal" class="fixed inset-0 z-50 flex items-center justify-center bg-black/40" @click.self="showPasswordModal = false">
-        <div class="bg-white rounded-xl shadow-xl w-full max-w-sm mx-4 p-6">
-          <div class="flex items-center justify-between mb-4">
-            <h2 class="text-lg font-semibold text-gray-900">
-              修改密码 - {{ passwordTarget?.username }}
-            </h2>
-            <button class="text-gray-400 hover:text-gray-600" @click="showPasswordModal = false">
-              <X class="w-5 h-5" />
-            </button>
-          </div>
+    <AppDialog
+      :open="showPasswordModal"
+      variant="center"
+      panel-class="rounded-xl max-w-sm mx-4 p-6"
+      title="修改密码"
+      @update:open="(v: boolean) => { if (!v) showPasswordModal = false }"
+    >
+      <div class="flex items-center justify-between mb-4">
+        <h2 class="text-lg font-semibold text-gray-900">
+          修改密码 - {{ passwordTarget?.username }}
+        </h2>
+        <button class="text-gray-400 hover:text-gray-600" @click="showPasswordModal = false">
+          <X class="w-5 h-5" />
+        </button>
+      </div>
 
-          <div>
-            <Label class="mb-1 block text-sm text-gray-600">新密码</Label>
-            <div class="relative">
-              <Input
-                :type="showNewPassword ? 'text' : 'password'"
-                v-model="newPassword"
-                placeholder="至少6位"
-                class="h-10 text-sm pr-9"
-              />
-              <button
-                type="button"
-                class="absolute right-3 top-1/2 -translate-y-1/2 text-gray-400 hover:text-gray-600"
-                @click="showNewPassword = !showNewPassword"
-              >
-                <Eye v-if="showNewPassword" class="h-4 w-4" />
-                <EyeOff v-else class="h-4 w-4" />
-              </button>
-            </div>
-          </div>
-
-          <div class="flex gap-2 mt-6">
-            <Button variant="outline" class="flex-1 h-10" @click="showPasswordModal = false">取消</Button>
-            <Button class="flex-1 h-10" :disabled="passwordLoading || !newPassword || newPassword.length < 6" @click="handleUpdatePassword">
-              <LoaderCircle v-if="passwordLoading" class="w-4 h-4 animate-spin mr-1" />
-              确认修改
-            </Button>
-          </div>
+      <div>
+        <Label class="mb-1 block text-sm text-gray-600">新密码</Label>
+        <div class="relative">
+          <Input
+            :type="showNewPassword ? 'text' : 'password'"
+            v-model="newPassword"
+            placeholder="至少6位"
+            class="h-10 text-sm pr-9"
+          />
+          <button
+            type="button"
+            class="absolute right-3 top-1/2 -translate-y-1/2 text-gray-400 hover:text-gray-600"
+            @click="showNewPassword = !showNewPassword"
+          >
+            <Eye v-if="showNewPassword" class="h-4 w-4" />
+            <EyeOff v-else class="h-4 w-4" />
+          </button>
         </div>
       </div>
-    </Teleport>
+
+      <div class="flex gap-2 mt-6">
+        <Button variant="outline" class="flex-1 h-10" @click="showPasswordModal = false">取消</Button>
+        <Button class="flex-1 h-10" :disabled="passwordLoading || !newPassword || newPassword.length < 6" @click="handleUpdatePassword">
+          <LoaderCircle v-if="passwordLoading" class="w-4 h-4 animate-spin mr-1" />
+          确认修改
+        </Button>
+      </div>
+    </AppDialog>
   </div>
 </template>

frondend/src/views/admin/AdminAnnouncements.vue

@@ -4,7 +4,9 @@ import { Megaphone, Plus, Pencil, Trash2, X, Bell, Users, User, Bot, Search } fr
 import { Button } from '@/components/ui/button'
 import { Input } from '@/components/ui/input'
 import { Label } from '@/components/ui/label'
+import AppDialog from '@/components/ui/dialog/AppDialog.vue'
 import { useMessage } from '@/composables/useMessage'
+import { confirmDialog } from '@/composables/useConfirm'
 import * as adminApi from '@/api/admin'
 
 const message = useMessage()
@@ -30,6 +32,7 @@ const formTargetMode = ref<'all' | 'specific'>('all') // 推送范围：全部 /
 const formTargetUserId = ref('')                        // 指定用户ID
 const formForcePopup = ref(false)
 const formLoopPopup = ref(false)
+const formIsPinned = ref(false)
 const creating = ref(false)
 
 onMounted(() => {
@@ -61,6 +64,7 @@ function openCreate() {
   formTargetUserId.value = ''
   formForcePopup.value = false
   formLoopPopup.value = false
+  formIsPinned.value = false
   showCreateModal.value = true
 }
 
@@ -73,6 +77,7 @@ function openEdit(item: AnnouncementEx) {
   formTargetUserId.value = item.targetUserId ? String(item.targetUserId) : ''
   formForcePopup.value = item.forcePopup
   formLoopPopup.value = item.loopPopup
+  formIsPinned.value = item.isPinned
   showCreateModal.value = true
 }
 
@@ -107,6 +112,7 @@ async function handleCreate() {
     targetUserId: targetUserId,
     forcePopup: formForcePopup.value,
     loopPopup: formLoopPopup.value,
+    isPinned: formIsPinned.value,
   }
 
   creating.value = true
@@ -133,7 +139,13 @@ async function handleDelete(id: number) {
     message.info('系统自动生成的公告不能删除')
     return
   }
-  if (!confirm('确定要删除此公告吗？')) return
+  const ok = await confirmDialog({
+    title: '删除公告',
+    content: '确定要删除此公告吗？',
+    confirmText: '删除',
+    danger: true,
+  })
+  if (!ok) return
   try {
     await adminApi.deleteAnnouncement(id)
     message.success('已删除')
@@ -160,16 +172,16 @@ function scopeLabel(item: AnnouncementEx) {
 </script>
 
 <template>
-  <div class="p-6">
+  <div class="adm-page">
     <!-- 标题栏 -->
-    <div class="flex items-center justify-between mb-6">
+    <div class="adm-head">
       <div class="flex items-center gap-3">
-        <div class="w-10 h-10 rounded-xl bg-purple-100 flex items-center justify-center">
-          <Megaphone class="w-5 h-5 text-purple-600" />
+        <div class="adm-head-icon">
+          <Megaphone class="w-5 h-5" />
         </div>
         <div>
-          <h1 class="text-lg font-bold text-gray-900">公告管理</h1>
-          <p class="text-sm text-gray-400">发布与管理系统公告</p>
+          <h1 class="adm-title">公告管理</h1>
+          <p class="adm-sub">发布与管理系统公告</p>
         </div>
       </div>
       <Button @click="openCreate" class="h-10 text-sm">
@@ -179,51 +191,33 @@ function scopeLabel(item: AnnouncementEx) {
     </div>
 
     <!-- 筛选栏 -->
-    <div class="flex items-center justify-between mb-4">
-      <div class="flex items-center gap-2">
-        <span class="text-sm text-gray-500">来源类型：</span>
-        <button
-          class="px-3 h-8 rounded-lg text-xs font-medium transition-colors"
-          :class="sourceFilter === '' ? 'bg-blue-500 text-white' : 'bg-gray-100 text-gray-600 hover:bg-gray-200'"
-          @click="sourceFilter = ''; changeSourceFilter()"
-        >
-          全部
-        </button>
-        <button
-          class="px-3 h-8 rounded-lg text-xs font-medium transition-colors"
-          :class="sourceFilter === 'manual' ? 'bg-blue-500 text-white' : 'bg-gray-100 text-gray-600 hover:bg-gray-200'"
-          @click="sourceFilter = 'manual'; changeSourceFilter()"
-        >
-          手动创建
-        </button>
-        <button
-          class="px-3 h-8 rounded-lg text-xs font-medium transition-colors"
-          :class="sourceFilter === 'system' ? 'bg-blue-500 text-white' : 'bg-gray-100 text-gray-600 hover:bg-gray-200'"
-          @click="sourceFilter = 'system'; changeSourceFilter()"
-        >
-          系统自动
-        </button>
+    <div class="adm-toolbar">
+      <span class="text-sm text-gray-500">来源</span>
+      <div class="adm-seg">
+        <button :class="sourceFilter === '' && 'is-active'" @click="sourceFilter = ''; changeSourceFilter()">全部</button>
+        <button :class="sourceFilter === 'manual' && 'is-active'" @click="sourceFilter = 'manual'; changeSourceFilter()">手动创建</button>
+        <button :class="sourceFilter === 'system' && 'is-active'" @click="sourceFilter = 'system'; changeSourceFilter()">系统自动</button>
       </div>
     </div>
 
     <!-- 表格 -->
-    <div class="bg-white rounded-xl border border-gray-200 overflow-hidden">
+    <div class="adm-card overflow-hidden">
       <!-- 加载骨架 -->
       <div v-if="loading" class="p-6 space-y-4">
         <div v-for="i in 4" :key="i" class="h-10 bg-gray-50 rounded animate-pulse" />
       </div>
 
       <!-- 空状态 -->
-      <div v-else-if="announcements.length === 0" class="text-center py-20 text-gray-400">
-        <Megaphone class="w-12 h-12 mx-auto mb-3 opacity-30" />
-        <p class="text-sm">暂无公告</p>
+      <div v-else-if="announcements.length === 0" class="adm-empty">
+        <div class="adm-empty-icon"><Megaphone class="w-6 h-6" /></div>
+        暂无公告
       </div>
 
       <!-- 表格 -->
       <div v-else class="overflow-x-auto">
-        <table class="w-full text-sm table-fixed min-w-[1000px]">
+        <table class="adm-table w-full text-sm table-fixed min-w-[1000px]">
           <thead>
-            <tr class="bg-gray-50 text-left text-xs text-gray-500">
+            <tr>
               <th class="px-4 py-3 font-medium w-[16%]">标题</th>
               <th class="px-4 py-3 font-medium w-[22%]">内容</th>
               <th class="px-4 py-3 font-medium w-[8%]">来源</th>
@@ -239,11 +233,17 @@ function scopeLabel(item: AnnouncementEx) {
           <tr
             v-for="item in announcements"
             :key="item.id"
-            class="border-t border-gray-50 hover:bg-gray-50/50 transition-colors"
+            class=""
           >
             <!-- 标题 -->
             <td class="px-4 py-3">
-              <span class="font-medium text-gray-900 truncate block">{{ item.title }}</span>
+              <span class="inline-flex items-center gap-1.5">
+                <span
+                  v-if="item.isPinned"
+                  class="text-xs px-1.5 py-0.5 rounded-full font-medium bg-rose-100 text-rose-600 whitespace-nowrap"
+                >置顶</span>
+                <span class="font-medium text-gray-900 truncate">{{ item.title }}</span>
+              </span>
             </td>
             <!-- 内容 -->
             <td class="px-4 py-3">
@@ -252,8 +252,8 @@ function scopeLabel(item: AnnouncementEx) {
             <!-- 来源 -->
             <td class="px-4 py-3">
               <span
-                class="text-[10px] px-1.5 py-0.5 rounded-full font-medium whitespace-nowrap"
-                :class="item.source === 'system' ? 'bg-gray-100 text-gray-600' : 'bg-blue-100 text-blue-700'"
+                class="text-xs px-1.5 py-0.5 rounded-full font-medium whitespace-nowrap"
+                :class="item.source === 'system' ? 'bg-gray-100 text-gray-600' : 'bg-brand-50 text-brand-700'"
               >
                 <Bot v-if="item.source === 'system'" class="w-3 h-3 inline mr-0.5" />
                 {{ sourceLabel(item.source) }}
@@ -261,8 +261,8 @@ function scopeLabel(item: AnnouncementEx) {
             </td>
             <!-- 推送范围 -->
             <td class="px-4 py-3">
-              <span class="text-[10px] px-1.5 py-0.5 rounded-full font-medium whitespace-nowrap"
-                :class="item.targetUserId ? 'bg-amber-100 text-amber-700' : (item.targetType === 'agent' ? 'bg-amber-100 text-amber-700' : 'bg-blue-100 text-blue-700')"
+              <span class="text-xs px-1.5 py-0.5 rounded-full font-medium whitespace-nowrap"
+                :class="item.targetUserId ? 'bg-amber-100 text-amber-700' : (item.targetType === 'agent' ? 'bg-amber-100 text-amber-700' : 'bg-brand-50 text-brand-700')"
               >
                 <User v-if="item.targetUserId" class="w-3 h-3 inline mr-0.5" />
                 <Users v-else class="w-3 h-3 inline mr-0.5" />
@@ -282,7 +282,7 @@ function scopeLabel(item: AnnouncementEx) {
             <td class="px-4 py-3">
               <span
                 class="text-xs font-medium"
-                :class="item.loopPopup ? 'text-blue-500' : 'text-gray-400'"
+                :class="item.loopPopup ? 'text-brand-600' : 'text-gray-400'"
               >
                 {{ item.loopPopup ? '是' : '否' }}
               </span>
@@ -293,7 +293,7 @@ function scopeLabel(item: AnnouncementEx) {
                 <div class="flex-1 h-1.5 rounded-full bg-gray-100 overflow-hidden max-w-[50px]">
                   <div
                     class="h-full rounded-full transition-all"
-                    :class="item.totalTargets > 0 && item.readCount >= item.totalTargets ? 'bg-green-400' : 'bg-blue-400'"
+                    :class="item.totalTargets > 0 && item.readCount >= item.totalTargets ? 'bg-green-400' : 'bg-brand-400'"
                     :style="{ width: item.totalTargets > 0 ? (item.readCount / item.totalTargets * 100) + '%' : '0%' }"
                   />
                 </div>
@@ -306,21 +306,21 @@ function scopeLabel(item: AnnouncementEx) {
             <td class="px-4 py-3 text-center whitespace-nowrap">
               <div v-if="item.source !== 'system'" class="flex items-center justify-center gap-1">
                 <button
-                  class="inline-flex items-center gap-1 px-2 py-1 rounded-lg text-xs text-blue-500 hover:bg-blue-50 transition-colors"
+                  class="adm-link adm-link-brand"
                   @click="openEdit(item)"
                 >
                   <Pencil class="w-3.5 h-3.5" />
                   编辑
                 </button>
                 <button
-                  class="inline-flex items-center gap-1 px-2 py-1 rounded-lg text-xs text-red-500 hover:bg-red-50 transition-colors"
+                  class="adm-link adm-link-red"
                   @click="handleDelete(item.id)"
                 >
                   <Trash2 class="w-3.5 h-3.5" />
                   删除
                 </button>
               </div>
-              <span v-else class="text-xs text-gray-300">--</span>
+              <span v-else class="text-xs adm-muted">--</span>
             </td>
           </tr>
         </tbody>
@@ -329,129 +329,152 @@ function scopeLabel(item: AnnouncementEx) {
     </div>
 
     <!-- 创建弹窗 -->
-    <Teleport to="body">
-      <div
-        v-if="showCreateModal"
-        class="fixed inset-0 z-50 flex items-center justify-center"
-      >
-        <div class="absolute inset-0 bg-black/40" @click="showCreateModal = false" />
-        <div class="relative w-[85%] sm:max-w-md bg-white rounded-2xl shadow-xl overflow-hidden">
-          <div class="flex items-center justify-between px-5 pt-5 pb-3">
-            <h3 class="text-base font-semibold text-gray-900">{{ editingId ? '编辑公告' : '新建公告' }}</h3>
-            <button class="w-7 h-7 rounded-full bg-gray-100 flex items-center justify-center text-gray-400 hover:text-gray-600" @click="showCreateModal = false">
-              <X class="w-4 h-4" />
-            </button>
-          </div>
+    <AppDialog
+      :open="showCreateModal"
+      variant="center"
+      wrapper-class="px-4 py-4"
+      panel-class="w-full sm:max-w-md max-h-[calc(100dvh-32px)]"
+      :title="editingId ? '编辑公告' : '新建公告'"
+      @update:open="(v: boolean) => { showCreateModal = v }"
+    >
+      <div class="flex items-center justify-between px-5 pt-5 pb-3 flex-shrink-0 border-b border-gray-100">
+        <h3 class="text-base font-semibold text-gray-900">{{ editingId ? '编辑公告' : '新建公告' }}</h3>
+        <button class="w-7 h-7 rounded-full bg-gray-100 flex items-center justify-center text-gray-400 hover:text-gray-600" @click="showCreateModal = false">
+          <X class="w-4 h-4" />
+        </button>
+      </div>
 
-          <div class="px-5 pb-5 space-y-4">
-            <div>
-              <label class="block text-xs font-medium text-gray-500 mb-1.5">公告标题</label>
-              <Input v-model="formTitle" placeholder="请输入公告标题" class="h-10 text-sm" />
-            </div>
+      <!-- 表单区：内容多时在此滚动，底部按钮始终可见 -->
+      <div class="flex-1 min-h-0 overflow-y-auto overscroll-contain px-5 py-4 space-y-4">
+        <div>
+          <label class="block text-xs font-medium text-gray-500 mb-1.5">公告标题</label>
+          <Input v-model="formTitle" placeholder="请输入公告标题" class="h-10 text-sm" />
+        </div>
 
-            <div>
-              <label class="block text-xs font-medium text-gray-500 mb-1.5">公告内容</label>
-              <textarea
-                v-model="formContent"
-                placeholder="请输入公告内容"
-                class="w-full h-24 px-3 py-2 text-sm border border-gray-200 rounded-lg resize-none focus:outline-none focus:ring-2 focus:ring-blue-500/20 focus:border-blue-400"
-              />
-            </div>
+        <div>
+          <label class="block text-xs font-medium text-gray-500 mb-1.5">公告内容</label>
+          <textarea
+            v-model="formContent"
+            placeholder="请输入公告内容"
+            class="w-full h-24 px-3 py-2 text-sm border border-gray-200 rounded-lg resize-none focus:outline-none focus:ring-2 focus:ring-brand-400/20 focus:border-brand-400"
+          />
+        </div>
 
-            <div>
-              <label class="block text-xs font-medium text-gray-500 mb-1.5">推送对象类型</label>
-              <div class="flex gap-2">
-                <button
-                  class="flex-1 h-10 rounded-lg text-sm font-medium transition-colors"
-                  :class="formTargetType === 'user' ? 'bg-blue-500 text-white' : 'bg-gray-100 text-gray-600 hover:bg-gray-200'"
-                  @click="formTargetType = 'user'"
-                >普通用户</button>
-                <button
-                  class="flex-1 h-10 rounded-lg text-sm font-medium transition-colors"
-                  :class="formTargetType === 'agent' ? 'bg-blue-500 text-white' : 'bg-gray-100 text-gray-600 hover:bg-gray-200'"
-                  @click="formTargetType = 'agent'"
-                >代理</button>
-              </div>
-            </div>
-
-            <div>
-              <label class="block text-xs font-medium text-gray-500 mb-1.5">推送范围</label>
-              <div class="flex gap-2">
-                <button
-                  class="flex-1 h-10 rounded-lg text-sm font-medium transition-colors"
-                  :class="formTargetMode === 'all' ? 'bg-blue-500 text-white' : 'bg-gray-100 text-gray-600 hover:bg-gray-200'"
-                  @click="formTargetMode = 'all'"
-                >
-                  <Users class="w-3.5 h-3.5 inline mr-1" />
-                  全部
-                </button>
-                <button
-                  class="flex-1 h-10 rounded-lg text-sm font-medium transition-colors"
-                  :class="formTargetMode === 'specific' ? 'bg-blue-500 text-white' : 'bg-gray-100 text-gray-600 hover:bg-gray-200'"
-                  @click="formTargetMode = 'specific'"
-                >
-                  <User class="w-3.5 h-3.5 inline mr-1" />
-                  指定用户
-                </button>
-              </div>
-            </div>
-
-            <!-- 指定用户ID输入 -->
-            <div v-if="formTargetMode === 'specific'">
-              <label class="block text-xs font-medium text-gray-500 mb-1.5">用户ID</label>
-              <Input
-                v-model="formTargetUserId"
-                type="number"
-                placeholder="输入用户ID"
-                class="h-10 text-sm"
-              />
-              <p class="text-[10px] text-gray-400 mt-1">可以在用户管理页面查看用户ID</p>
-            </div>
-
-            <div class="flex items-center gap-3">
-              <button
-                class="relative w-10 h-5 rounded-full transition-colors flex-shrink-0"
-                :class="formForcePopup ? 'bg-blue-500' : 'bg-gray-300'"
-                @click="formForcePopup = !formForcePopup"
-              >
-                <div
-                  class="absolute top-0.5 w-4 h-4 rounded-full bg-white shadow transition-transform"
-                  :class="formForcePopup ? 'translate-x-[22px]' : 'translate-x-0.5'"
-                />
-              </button>
-              <div>
-                <label class="text-sm font-medium text-gray-700">强制弹出</label>
-                <p class="text-[10px] text-gray-400">用户未读时自动弹出公告对话框</p>
-              </div>
-            </div>
-
-            <div class="flex items-center gap-3">
-              <button
-                class="relative w-10 h-5 rounded-full transition-colors flex-shrink-0"
-                :class="formLoopPopup ? 'bg-blue-500' : 'bg-gray-300'"
-                @click="formLoopPopup = !formLoopPopup"
-              >
-                <div
-                  class="absolute top-0.5 w-4 h-4 rounded-full bg-white shadow transition-transform"
-                  :class="formLoopPopup ? 'translate-x-[22px]' : 'translate-x-0.5'"
-                />
-              </button>
-              <div>
-                <label class="text-sm font-medium text-gray-700">循环弹窗</label>
-                <p class="text-[10px] text-gray-400">每次刷新页面或进入首页都会强制弹窗（无视已读状态，需同时开启强制弹窗）</p>
-              </div>
-            </div>
-
-            <Button
-              class="w-full h-10 text-sm font-medium mt-2"
-              :disabled="creating"
-              @click="handleCreate"
-            >
-              {{ creating ? '保存中...' : (editingId ? '保存修改' : '发布公告') }}
-            </Button>
+        <div>
+          <label class="block text-xs font-medium text-gray-500 mb-1.5">推送对象类型</label>
+          <div class="flex gap-2">
+            <button
+              class="flex-1 h-10 rounded-lg text-sm font-medium transition-colors"
+              :class="formTargetType === 'user' ? 'adm-btn-brand' : 'bg-gray-100 text-gray-600 hover:bg-gray-200'"
+              @click="formTargetType = 'user'"
+            >普通用户</button>
+            <button
+              class="flex-1 h-10 rounded-lg text-sm font-medium transition-colors"
+              :class="formTargetType === 'agent' ? 'adm-btn-brand' : 'bg-gray-100 text-gray-600 hover:bg-gray-200'"
+              @click="formTargetType = 'agent'; formIsPinned = false"
+            >代理</button>
           </div>
         </div>
+
+        <div>
+          <label class="block text-xs font-medium text-gray-500 mb-1.5">推送范围</label>
+          <div class="flex gap-2">
+            <button
+              class="flex-1 h-10 rounded-lg text-sm font-medium transition-colors"
+              :class="formTargetMode === 'all' ? 'adm-btn-brand' : 'bg-gray-100 text-gray-600 hover:bg-gray-200'"
+              @click="formTargetMode = 'all'"
+            >
+              <Users class="w-3.5 h-3.5 inline mr-1" />
+              全部
+            </button>
+            <button
+              class="flex-1 h-10 rounded-lg text-sm font-medium transition-colors"
+              :class="formTargetMode === 'specific' ? 'adm-btn-brand' : 'bg-gray-100 text-gray-600 hover:bg-gray-200'"
+              @click="formTargetMode = 'specific'"
+            >
+              <User class="w-3.5 h-3.5 inline mr-1" />
+              指定用户
+            </button>
+          </div>
+        </div>
+
+        <!-- 指定用户ID输入 -->
+        <div v-if="formTargetMode === 'specific'">
+          <label class="block text-xs font-medium text-gray-500 mb-1.5">用户ID</label>
+          <Input
+            v-model="formTargetUserId"
+            type="number"
+            placeholder="输入用户ID"
+            class="h-10 text-sm"
+          />
+          <p class="text-xs text-gray-400 mt-1">可以在用户管理页面查看用户ID</p>
+        </div>
+
+        <div class="flex items-center gap-3">
+          <button
+            class="relative w-10 h-5 rounded-full transition-colors flex-shrink-0"
+            :class="formForcePopup ? 'adm-btn-brand' : 'bg-gray-300'"
+            @click="formForcePopup = !formForcePopup"
+          >
+            <div
+              class="absolute top-0.5 w-4 h-4 rounded-full bg-white shadow transition-transform"
+              :class="formForcePopup ? 'translate-x-[22px]' : 'translate-x-0.5'"
+            />
+          </button>
+          <div>
+            <label class="text-sm font-medium text-gray-700">强制弹出</label>
+            <p class="text-xs text-gray-400">用户未读时自动弹出公告对话框</p>
+          </div>
+        </div>
+
+        <div class="flex items-center gap-3">
+          <button
+            class="relative w-10 h-5 rounded-full transition-colors flex-shrink-0"
+            :class="formLoopPopup ? 'adm-btn-brand' : 'bg-gray-300'"
+            @click="formLoopPopup = !formLoopPopup"
+          >
+            <div
+              class="absolute top-0.5 w-4 h-4 rounded-full bg-white shadow transition-transform"
+              :class="formLoopPopup ? 'translate-x-[22px]' : 'translate-x-0.5'"
+            />
+          </button>
+          <div>
+            <label class="text-sm font-medium text-gray-700">循环弹窗</label>
+            <p class="text-xs text-gray-400">每次刷新页面或进入首页都会强制弹窗（无视已读状态，需同时开启强制弹窗）</p>
+          </div>
+        </div>
+
+        <div class="flex items-center gap-3">
+          <button
+            class="relative w-10 h-5 rounded-full transition-colors flex-shrink-0"
+            :class="formIsPinned ? 'adm-btn-brand' : 'bg-gray-300'"
+            :disabled="formTargetType !== 'user'"
+            @click="formIsPinned = !formIsPinned"
+          >
+            <div
+              class="absolute top-0.5 w-4 h-4 rounded-full bg-white shadow transition-transform"
+              :class="formIsPinned ? 'translate-x-[22px]' : 'translate-x-0.5'"
+            />
+          </button>
+          <div>
+            <label class="text-sm font-medium text-gray-700">置顶公告</label>
+            <p class="text-xs text-gray-400">显示在打卡页面顶部，横向循环滚动展示（仅普通用户，不进入用户公告列表）</p>
+          </div>
+        </div>
+
       </div>
-    </Teleport>
+
+      <!-- 底部操作栏（固定） -->
+      <div class="flex-shrink-0 flex gap-2 px-5 py-3.5 border-t border-gray-100">
+        <Button variant="outline" class="flex-1 h-11 text-sm" @click="showCreateModal = false">取消</Button>
+        <Button
+          class="flex-[2] h-11 text-sm"
+          :disabled="creating"
+          @click="handleCreate"
+        >
+          {{ creating ? '保存中...' : (editingId ? '保存修改' : '发布公告') }}
+        </Button>
+      </div>
+    </AppDialog>
   </div>
 </template>

frondend/src/views/admin/AdminCdks.vue

@@ -2,6 +2,8 @@
 import { ref, onMounted, computed } from 'vue'
 import {
   QrCode,
+  Crown,
+  Ticket,
   Plus,
   Search,
   X,
@@ -17,6 +19,7 @@ import {
 import { Button } from '@/components/ui/button'
 import { Input } from '@/components/ui/input'
 import { Label } from '@/components/ui/label'
+import AppDialog from '@/components/ui/dialog/AppDialog.vue'
 import { useMessage } from '@/composables/useMessage'
 import { copyToClipboard } from '@/utils/clipboard'
 import * as adminApi from '@/api/admin'
@@ -182,8 +185,8 @@ async function copyCode(code: string, index: number) {
 
 async function copyResultCode(code: string, index: number) {
   if (await copyToClipboard(code)) {
-    resultCopiedIdx.value = index
-    setTimeout(() => { resultCopiedIdx.value = null }, 2000)
+    copiedResultIdx.value = index
+    setTimeout(() => { copiedResultIdx.value = null }, 2000)
     message.success('已复制')
   } else {
     message.error('复制失败，请长按 CDK 码手动复制')
@@ -240,85 +243,102 @@ function statusLabel(s: string) {
 }
 
 function statusClass(s: string) {
-  if (s === 'used') return 'bg-gray-100 text-gray-600'
-  if (s === 'disabled') return 'bg-red-50 text-red-600'
-  return 'bg-green-100 text-green-700'
+  if (s === 'used') return 'adm-badge-gray'
+  if (s === 'disabled') return 'adm-badge-red'
+  return 'adm-badge-green'
 }
+
+// 状态分段筛选
+const statusOptions = [
+  { value: '', label: '全部' },
+  { value: 'unused', label: '未使用' },
+  { value: 'used', label: '已使用' },
+  { value: 'disabled', label: '已禁用' },
+]
+
+// 统计卡片（点击即按该状态筛选）
+const summaryCards = computed(() => [
+  { key: '', label: '总计', value: summary.value.total, icon: QrCode, tone: 'bg-brand-50 text-brand-600' },
+  { key: 'unused', label: '未使用', value: summary.value.unused, icon: Ticket, tone: 'bg-green-50 text-green-600' },
+  { key: 'used', label: '已使用', value: summary.value.used, icon: CheckCheck, tone: 'bg-gray-100 text-gray-600' },
+  { key: 'disabled', label: '已禁用', value: summary.value.disabled, icon: Ban, tone: 'bg-red-50 text-red-600' },
+])
 </script>
 
 <template>
-  <div class="p-6">
+  <div class="adm-page">
     <!-- 顶部 -->
-    <div class="flex items-center justify-between mb-6">
-      <h1 class="text-xl font-bold text-gray-900">CDK管理</h1>
-      <Button variant="default" size="sm" @click="openGenerateModal">
-        <Plus class="w-4 h-4 mr-1" />
-        生成CDK
+    <div class="adm-head">
+      <div class="flex items-center gap-3">
+        <div class="adm-head-icon"><QrCode class="w-5 h-5" /></div>
+        <div>
+          <h1 class="adm-title">CDK 管理</h1>
+          <p class="adm-sub">生成与管理次数卡、VIP 卡兑换码</p>
+        </div>
+      </div>
+      <Button class="h-10" @click="openGenerateModal">
+        <Plus class="w-4 h-4" />
+        生成 CDK
       </Button>
     </div>
 
-    <!-- 统计 -->
-    <div class="flex gap-4 mb-4 flex-wrap">
-      <div class="bg-white rounded-lg border border-gray-200 px-4 py-2.5 flex items-center gap-2">
-        <span class="text-xs text-gray-500">总计</span>
-        <span class="text-lg font-bold text-gray-900">{{ summary.total }}</span>
-      </div>
-      <div class="bg-white rounded-lg border border-green-200 px-4 py-2.5 flex items-center gap-2">
-        <span class="text-xs text-green-600">未使用</span>
-        <span class="text-lg font-bold text-green-700">{{ summary.unused }}</span>
-      </div>
-      <div class="bg-white rounded-lg border border-gray-200 px-4 py-2.5 flex items-center gap-2">
-        <span class="text-xs text-gray-500">已使用</span>
-        <span class="text-lg font-bold text-gray-700">{{ summary.used }}</span>
-      </div>
-      <div class="bg-white rounded-lg border border-red-200 px-4 py-2.5 flex items-center gap-2">
-        <span class="text-xs text-red-500">已禁用</span>
-        <span class="text-lg font-bold text-red-600">{{ summary.disabled }}</span>
-      </div>
+    <!-- 统计（点击即按该状态筛选） -->
+    <div class="grid grid-cols-2 lg:grid-cols-4 gap-3 mb-4">
+      <button
+        v-for="c in summaryCards"
+        :key="c.key"
+        class="adm-card adm-stat text-left transition-all hover:shadow-md"
+        :class="statusFilter === c.key && 'ring-2 ring-brand-400/50 border-brand-300'"
+        @click="statusFilter = c.key; handleStatusChange()"
+      >
+        <div class="adm-stat-icon" :class="c.tone"><component :is="c.icon" class="w-5 h-5" /></div>
+        <div class="min-w-0">
+          <p class="adm-stat-label">{{ c.label }}</p>
+          <p class="adm-stat-value">{{ c.value }}</p>
+        </div>
+      </button>
     </div>
 
     <!-- 筛选：搜索 + 状态 -->
-    <div class="flex items-center gap-3 mb-4">
-      <div class="relative flex-1 max-w-xs">
+    <div class="adm-toolbar">
+      <div class="relative flex-1 min-w-[200px] max-w-sm">
         <Search class="absolute left-3 top-1/2 -translate-y-1/2 w-4 h-4 text-gray-400" />
         <Input
           v-model="keywordInput"
-          placeholder="搜索CDK码..."
+          placeholder="搜索 CDK 码..."
           class="pl-9 h-10 text-sm"
           @keyup.enter="handleSearch"
         />
       </div>
       <Button variant="outline" class="h-10" @click="handleSearch">
-        <Search class="w-4 h-4 mr-1" />
+        <Search class="w-4 h-4" />
         搜索
       </Button>
-      <select
-        v-model="statusFilter"
-        class="h-10 px-3 rounded-lg border border-gray-200 bg-white text-sm text-gray-600 focus:outline-none focus:ring-2 focus:ring-blue-500/20 focus:border-blue-400"
-        @change="handleStatusChange"
-      >
-        <option value="">全部状态</option>
-        <option value="unused">未使用</option>
-        <option value="used">已使用</option>
-        <option value="disabled">已禁用</option>
-      </select>
+      <div class="adm-seg">
+        <button
+          v-for="o in statusOptions"
+          :key="o.value"
+          :class="statusFilter === o.value && 'is-active'"
+          @click="statusFilter = o.value; handleStatusChange()"
+        >{{ o.label }}</button>
+      </div>
     </div>
 
     <!-- 列表 -->
-    <div class="overflow-x-auto rounded-xl border border-gray-200 bg-white shadow">
+    <div class="adm-card overflow-hidden"><div class="overflow-x-auto">
       <div v-if="loading" class="flex items-center justify-center py-16">
-        <LoaderCircle class="w-6 h-6 animate-spin text-blue-500" />
+        <LoaderCircle class="w-6 h-6 animate-spin text-brand-500" />
       </div>
 
-      <div v-else-if="cdks.length === 0" class="text-center py-16 text-sm text-gray-400">
-        <QrCode class="w-12 h-12 mx-auto mb-3 text-gray-200" />
-        <p>暂无CDK数据</p>
-        <p class="text-xs mt-1">点击右上角"生成CDK"开始创建</p>
+      <div v-else-if="cdks.length === 0" class="adm-empty">
+        <div class="adm-empty-icon"><QrCode class="w-6 h-6" /></div>
+        <p class="text-sm font-medium text-gray-700">暂无 CDK 数据</p>
+        <p class="text-xs mt-1">点击右上角「生成 CDK」开始创建</p>
       </div>
 
-      <table v-else class="w-full text-sm">
+      <table v-else class="adm-table w-full">
         <thead>
-          <tr class="bg-gray-50 text-left text-xs text-gray-500">
+          <tr>
             <th class="px-4 py-3 font-medium">CDK码</th>
             <th v-if="isAdmin" class="px-4 py-3 font-medium">生成代理</th>
             <th class="px-4 py-3 font-medium">售价</th>
@@ -333,11 +353,11 @@ function statusClass(s: string) {
           <tr
             v-for="(cdk, idx) in cdks"
             :key="cdk.id"
-            class="border-t border-gray-50 hover:bg-gray-50/50 transition-colors"
+            class=""
             :class="cdk.status === 'disabled' ? 'opacity-60' : ''"
           >
             <td class="px-4 py-3 whitespace-nowrap">
-              <code class="font-mono text-xs bg-gray-100 px-2 py-1 rounded">{{ cdk.code }}</code>
+              <code class="font-mono text-xs text-gray-900 bg-gray-100 px-2 py-1 rounded-lg">{{ cdk.code }}</code>
             </td>
             <td v-if="isAdmin" class="px-4 py-3 text-xs text-gray-600 whitespace-nowrap">
               {{ (cdk as any).agent?.username || cdk.agentId }}
@@ -346,11 +366,11 @@ function statusClass(s: string) {
             <td class="px-4 py-3 whitespace-nowrap">
               <span
                 v-if="cdk.type === 'vip'"
-                class="inline-flex items-center px-2 py-0.5 rounded-full text-xs font-medium bg-amber-100 text-amber-700 whitespace-nowrap"
-              >⭐ VIP{{ cdk.vipDays === 7 ? '周卡' : '月卡' }}</span>
+                class="adm-badge no-dot adm-badge-amber"
+              ><Crown class="w-3 h-3" />VIP{{ cdk.vipDays === 7 ? '周卡' : '月卡' }}</span>
               <span
                 v-else
-                class="inline-flex items-center px-2 py-0.5 rounded-full text-xs font-medium bg-blue-100 text-blue-700 whitespace-nowrap"
+                class="adm-badge no-dot adm-badge-sky"
               >次数卡</span>
             </td>
             <td class="px-4 py-3 text-xs text-gray-600 whitespace-nowrap">
@@ -358,18 +378,18 @@ function statusClass(s: string) {
             </td>
             <td class="px-4 py-3 whitespace-nowrap">
               <span
-                class="inline-flex items-center px-2 py-0.5 rounded-full text-xs font-medium whitespace-nowrap"
+                class="adm-badge"
                 :class="statusClass(cdk.status)"
               >
                 {{ statusLabel(cdk.status) }}
               </span>
             </td>
-            <td class="px-4 py-3 text-gray-500 text-xs whitespace-nowrap">{{ new Date(cdk.createdAt).toLocaleString() }}</td>
+            <td class="px-4 py-3 text-gray-500 text-xs whitespace-nowrap">{{ new Date(cdk.createdAt).toLocaleString('zh-CN') }}</td>
             <td class="px-4 py-3 whitespace-nowrap">
               <div class="flex items-center gap-1">
                 <button
-                  class="inline-flex items-center gap-1 px-2 py-1 rounded-lg text-xs transition-colors"
-                  :class="copiedIndex === idx ? 'bg-green-100 text-green-700' : 'bg-blue-50 text-blue-600 hover:bg-blue-100'"
+                  class="adm-link"
+                  :class="copiedIndex === idx ? 'adm-link-green' : 'adm-link-brand'"
                   @click="copyCode(cdk.code, idx)"
                 >
                   <Copy v-if="copiedIndex !== idx" class="w-3 h-3" />
@@ -378,7 +398,7 @@ function statusClass(s: string) {
                 </button>
                 <button
                   v-if="cdk.status === 'unused'"
-                  class="inline-flex items-center gap-1 px-2 py-1 rounded-lg text-xs text-red-500 hover:bg-red-50 transition-colors"
+                  class="adm-link adm-link-red"
                   @click="askDisable(cdk)"
                 >
                   <Ban class="w-3 h-3" />
@@ -386,7 +406,7 @@ function statusClass(s: string) {
                 </button>
                 <button
                   v-else-if="cdk.status === 'disabled'"
-                  class="inline-flex items-center gap-1 px-2 py-1 rounded-lg text-xs text-green-600 hover:bg-green-50 transition-colors"
+                  class="adm-link adm-link-green"
                   @click="askEnable(cdk)"
                 >
                   <RotateCcw class="w-3 h-3" />
@@ -397,17 +417,18 @@ function statusClass(s: string) {
           </tr>
         </tbody>
       </table>
+      </div>
 
       <!-- 分页 -->
       <div
         v-if="total > 0"
-        class="flex items-center justify-between px-4 py-3 border-t border-gray-100"
+        class="adm-pager"
       >
         <div class="flex items-center gap-3">
-          <span class="text-xs text-gray-400">共 {{ total }} 条</span>
+          <span>共 <b class="font-semibold text-gray-700 tabular-nums">{{ total }}</b> 条</span>
           <select
             :value="pageSize"
-            class="h-8 px-2 rounded-lg border border-gray-200 bg-white text-xs text-gray-500 focus:outline-none"
+            class="adm-select"
             @change="handlePageSize(Number(($event.target as HTMLSelectElement).value))"
           >
             <option v-for="n in pageSizeOptions" :key="n" :value="n">{{ n }} 条/页</option>
@@ -415,15 +436,15 @@ function statusClass(s: string) {
         </div>
         <div class="flex items-center gap-2">
           <button
-            class="w-8 h-8 rounded-lg flex items-center justify-center hover:bg-gray-100 disabled:opacity-30"
+            class="adm-pager-btn"
             :disabled="page <= 1"
             @click="handlePage(page - 1)"
           >
             <ChevronLeft class="w-4 h-4" />
           </button>
-          <span class="text-sm text-gray-600">{{ page }}/{{ totalPages }}</span>
+          <span class="text-sm text-gray-700 tabular-nums px-1">{{ page }} / {{ totalPages }}</span>
           <button
-            class="w-8 h-8 rounded-lg flex items-center justify-center hover:bg-gray-100 disabled:opacity-30"
+            class="adm-pager-btn"
             :disabled="page >= totalPages"
             @click="handlePage(page + 1)"
           >
@@ -434,181 +455,183 @@ function statusClass(s: string) {
     </div>
 
     <!-- 生成CDK弹窗（form / result 两视图） -->
-    <Teleport to="body">
-      <div v-if="showGenerateModal" class="fixed inset-0 z-50 flex items-center justify-center bg-black/40" @click.self="modalView === 'form' ? (showGenerateModal = false) : null">
-        <div
-          class="bg-white rounded-xl shadow-xl w-full mx-4 p-6 flex flex-col"
-          :class="modalView === 'result' ? 'max-w-lg max-h-[80vh]' : 'max-w-sm'"
-        >
-          <!-- 配置视图 -->
-          <template v-if="modalView === 'form'">
-            <div class="flex items-center justify-between mb-4 flex-shrink-0">
-              <h2 class="text-lg font-semibold text-gray-900">生成CDK</h2>
-              <button class="text-gray-400 hover:text-gray-600" @click="closeGenerateModal">
-                <X class="w-5 h-5" />
-              </button>
-            </div>
+    <AppDialog
+      :open="showGenerateModal"
+      variant="center"
+      :dismissable="modalView === 'form'"
+      :panel-class="modalView === 'result' ? 'rounded-xl mx-4 p-6 max-w-lg max-h-[80vh]' : 'rounded-xl mx-4 p-6 max-w-sm'"
+      title="生成CDK"
+      @update:open="(v: boolean) => { if (!v && modalView === 'form') showGenerateModal = false }"
+    >
+      <!-- 配置视图 -->
+      <template v-if="modalView === 'form'">
+        <div class="flex items-center justify-between mb-4 flex-shrink-0">
+          <h2 class="text-lg font-semibold text-gray-900">生成CDK</h2>
+          <button class="text-gray-400 hover:text-gray-600" @click="closeGenerateModal">
+            <X class="w-5 h-5" />
+          </button>
+        </div>
 
-            <div class="space-y-3">
-              <div>
-                <Label class="mb-2 block text-sm text-gray-600">CDK 类型</Label>
-                <div class="grid grid-cols-2 gap-2">
-                  <button
-                    type="button"
-                    class="h-10 rounded-md border text-sm font-medium transition-colors"
-                    :class="generateType === 'count' ? 'bg-emerald-600 text-white border-emerald-600' : 'bg-white text-gray-700 border-gray-300 hover:border-emerald-400'"
-                    @click="generateType = 'count'"
-                  >次数 CDK</button>
-                  <button
-                    type="button"
-                    class="h-10 rounded-md border text-sm font-medium transition-colors"
-                    :class="generateType === 'vip' ? 'bg-amber-500 text-white border-amber-500' : 'bg-white text-gray-700 border-gray-300 hover:border-amber-400'"
-                    @click="generateType = 'vip'"
-                  >⭐ VIP CDK</button>
-                </div>
-              </div>
-              <div>
-                <Label class="mb-1 block text-sm text-gray-600">生成数量</Label>
-                <Input v-model.number="generateCount" type="number" min="1" max="100" class="h-10 text-sm" />
-                <p class="text-xs text-gray-400 mt-1">单次最多100个</p>
-              </div>
-              <template v-if="generateType === 'count'">
-                <div>
-                  <Label class="mb-1 block text-sm text-gray-600">每张可运行次数</Label>
-                  <Input v-model.number="generateMaxRuns" type="number" min="1" max="999" class="h-10 text-sm" />
-                  <p class="text-xs text-gray-400 mt-1">每张CDK可兑换使用的次数，成本 = 基础单价 × 次数 × 费率</p>
-                </div>
-              </template>
-              <template v-else>
-                <div>
-                  <Label class="mb-1 block text-sm text-gray-600">VIP 卡类型</Label>
-                  <div class="grid grid-cols-2 gap-2">
-                    <button
-                      type="button"
-                      class="h-10 rounded-md border text-sm font-medium transition-colors"
-                      :class="generateVipDays === 7 ? 'bg-amber-500 text-white border-amber-500' : 'bg-white text-gray-700 border-gray-300 hover:border-amber-400'"
-                      @click="generateVipDays = 7"
-                    >周卡 · 7天</button>
-                    <button
-                      type="button"
-                      class="h-10 rounded-md border text-sm font-medium transition-colors"
-                      :class="generateVipDays === 30 ? 'bg-amber-500 text-white border-amber-500' : 'bg-white text-gray-700 border-gray-300 hover:border-amber-400'"
-                      @click="generateVipDays = 30"
-                    >月卡 · 30天</button>
-                  </div>
-                  <p class="text-xs text-gray-400 mt-1">兑换后从当前到期时间顺延，到期即享免扣次数执行任务</p>
-                </div>
-              </template>
+        <div class="space-y-3">
+          <div>
+            <Label class="mb-2 block text-sm text-gray-600">CDK 类型</Label>
+            <div class="grid grid-cols-2 gap-2">
+              <button
+                type="button"
+                class="h-10 rounded-md border text-sm font-medium transition-colors"
+                :class="generateType === 'count' ? 'bg-emerald-600 text-white border-emerald-600' : 'bg-white text-gray-700 border-gray-300 hover:border-emerald-400'"
+                @click="generateType = 'count'"
+              >次数 CDK</button>
+              <button
+                type="button"
+                class="h-10 rounded-md border text-sm font-medium transition-colors"
+                :class="generateType === 'vip' ? 'bg-amber-500 text-white border-amber-500' : 'bg-white text-gray-700 border-gray-300 hover:border-amber-400'"
+                @click="generateType = 'vip'"
+              >⭐ VIP CDK</button>
             </div>
-
-            <div class="flex gap-2 mt-6">
-              <Button variant="outline" class="flex-1 h-10" @click="showGenerateModal = false">取消</Button>
-              <Button class="flex-1 h-10" :disabled="generateLoading" @click="handleGenerate">
-                <LoaderCircle v-if="generateLoading" class="w-4 h-4 animate-spin mr-1" />
-                {{ generateLoading ? '生成中...' : '生成' }}
-              </Button>
+          </div>
+          <div>
+            <Label class="mb-1 block text-sm text-gray-600">生成数量</Label>
+            <Input v-model.number="generateCount" type="number" min="1" max="100" class="h-10 text-sm" />
+            <p class="text-xs text-gray-400 mt-1">单次最多100个</p>
+          </div>
+          <template v-if="generateType === 'count'">
+            <div>
+              <Label class="mb-1 block text-sm text-gray-600">每张可运行次数</Label>
+              <Input v-model.number="generateMaxRuns" type="number" min="1" max="999" class="h-10 text-sm" />
+              <p class="text-xs text-gray-400 mt-1">每张CDK可兑换使用的次数，成本 = 基础单价 × 次数 × 费率</p>
             </div>
           </template>
-
-          <!-- 结果视图：展示全部CDK -->
           <template v-else>
-            <div class="flex items-center justify-between mb-3 flex-shrink-0">
-              <div>
-                <h2 class="text-lg font-semibold text-gray-900 flex items-center gap-2">
-                  <CheckCircle2 class="w-5 h-5 text-green-500" />
-                  生成成功
-                </h2>
-                <p class="text-xs text-gray-400 mt-0.5">
-                  共 {{ resultCdks.length }} 个CDK ·
-                  <template v-if="generateType === 'vip'">{{ generateVipDays === 7 ? 'VIP 周卡 7 天' : 'VIP 月卡 30 天' }} · </template>
-                  <template v-else>每张 {{ generateMaxRuns }} 次 · </template>
-                  扣费
-                  <span class="font-mono text-gray-600">{{ resultCost.toFixed(2) }} 元</span>
-                </p>
-              </div>
-              <button class="text-gray-400 hover:text-gray-600" @click="closeGenerateModal">
-                <X class="w-5 h-5" />
-              </button>
-            </div>
-
-            <!-- CDK 列表（可滚动） -->
-            <div class="flex-1 overflow-y-auto border border-gray-100 rounded-lg bg-gray-50/60 min-h-[120px] max-h-[40vh]">
-              <div
-                v-for="cdk in resultCdks"
-                :key="cdk.id"
-                class="flex items-center justify-between px-3 py-2 border-b border-gray-100 last:border-0 bg-white"
-              >
-                <code class="font-mono text-xs text-gray-800">{{ cdk.code }}</code>
+            <div>
+              <Label class="mb-1 block text-sm text-gray-600">VIP 卡类型</Label>
+              <div class="grid grid-cols-2 gap-2">
                 <button
-                  class="flex-shrink-0 inline-flex items-center gap-1 px-2 py-1 rounded-md text-[11px] transition-colors"
-                  :class="copiedResultIdx === resultCdks.indexOf(cdk) ? 'text-green-600 bg-green-50' : 'text-blue-500 hover:bg-blue-50'"
-                  @click="copyResultCode(cdk.code, resultCdks.indexOf(cdk))"
-                >
-                  <Copy v-if="copiedResultIdx !== resultCdks.indexOf(cdk)" class="w-3 h-3" />
-                  <CheckCheck v-else class="w-3 h-3" />
-                  复制
-                </button>
+                  type="button"
+                  class="h-10 rounded-md border text-sm font-medium transition-colors"
+                  :class="generateVipDays === 7 ? 'bg-amber-500 text-white border-amber-500' : 'bg-white text-gray-700 border-gray-300 hover:border-amber-400'"
+                  @click="generateVipDays = 7"
+                >周卡 · 7天</button>
+                <button
+                  type="button"
+                  class="h-10 rounded-md border text-sm font-medium transition-colors"
+                  :class="generateVipDays === 30 ? 'bg-amber-500 text-white border-amber-500' : 'bg-white text-gray-700 border-gray-300 hover:border-amber-400'"
+                  @click="generateVipDays = 30"
+                >月卡 · 30天</button>
               </div>
+              <p class="text-xs text-gray-400 mt-1">兑换后从当前到期时间顺延，到期即享免扣次数执行任务</p>
             </div>
-
-            <div class="flex gap-2 mt-4 flex-shrink-0">
-              <Button variant="outline" class="h-10 px-4" @click="openGenerateModal">
-                <Plus class="w-4 h-4 mr-1" />
-                继续生成
-              </Button>
-              <Button class="flex-1 h-10" @click="copyAllCodes">
-                <CheckCheck v-if="copiedAll" class="w-4 h-4 mr-1" />
-                <Copy v-else class="w-4 h-4 mr-1" />
-                {{ copiedAll ? '已复制全部' : '复制全部CDK' }}
-              </Button>
-            </div>
-            <p class="text-center text-[10px] text-gray-300 mt-2">
-              提示：CDK 按行分隔，可直接粘贴到表格/文档批量分发
-            </p>
           </template>
         </div>
-      </div>
-    </Teleport>
+
+        <div class="flex gap-2 mt-6">
+          <Button variant="outline" class="flex-1 h-10" @click="showGenerateModal = false">取消</Button>
+          <Button class="flex-1 h-10" :disabled="generateLoading" @click="handleGenerate">
+            <LoaderCircle v-if="generateLoading" class="w-4 h-4 animate-spin mr-1" />
+            {{ generateLoading ? '生成中...' : '生成' }}
+          </Button>
+        </div>
+      </template>
+
+      <!-- 结果视图：展示全部CDK -->
+      <template v-else>
+        <div class="flex items-center justify-between mb-3 flex-shrink-0">
+          <div>
+            <h2 class="text-lg font-semibold text-gray-900 flex items-center gap-2">
+              <CheckCircle2 class="w-5 h-5 text-green-500" />
+              生成成功
+            </h2>
+            <p class="text-xs text-gray-400 mt-0.5">
+              共 {{ resultCdks.length }} 个CDK ·
+              <template v-if="generateType === 'vip'">{{ generateVipDays === 7 ? 'VIP 周卡 7 天' : 'VIP 月卡 30 天' }} · </template>
+              <template v-else>每张 {{ generateMaxRuns }} 次 · </template>
+              扣费
+              <span class="font-mono text-gray-600">{{ resultCost.toFixed(2) }} 元</span>
+            </p>
+          </div>
+          <button class="text-gray-400 hover:text-gray-600" @click="closeGenerateModal">
+            <X class="w-5 h-5" />
+          </button>
+        </div>
+
+        <!-- CDK 列表（可滚动） -->
+        <div class="flex-1 overflow-y-auto border border-gray-100 rounded-lg bg-gray-50/60 min-h-[120px] max-h-[40vh]">
+          <div
+            v-for="cdk in resultCdks"
+            :key="cdk.id"
+            class="flex items-center justify-between px-3 py-2 border-b border-gray-100 last:border-0 bg-white"
+          >
+            <code class="font-mono text-xs text-gray-800">{{ cdk.code }}</code>
+            <button
+              class="flex-shrink-0 inline-flex items-center gap-1 px-2 py-1 rounded-md text-xs transition-colors"
+              :class="copiedResultIdx === resultCdks.indexOf(cdk) ? 'text-green-600 bg-green-50' : 'text-brand-600 hover:bg-brand-50'"
+              @click="copyResultCode(cdk.code, resultCdks.indexOf(cdk))"
+            >
+              <Copy v-if="copiedResultIdx !== resultCdks.indexOf(cdk)" class="w-3 h-3" />
+              <CheckCheck v-else class="w-3 h-3" />
+              复制
+            </button>
+          </div>
+        </div>
+
+        <div class="flex gap-2 mt-4 flex-shrink-0">
+          <Button variant="outline" class="h-10 px-4" @click="openGenerateModal">
+            <Plus class="w-4 h-4 mr-1" />
+            继续生成
+          </Button>
+          <Button class="flex-1 h-10" @click="copyAllCodes">
+            <CheckCheck v-if="copiedAll" class="w-4 h-4 mr-1" />
+            <Copy v-else class="w-4 h-4 mr-1" />
+            {{ copiedAll ? '已复制全部' : '复制全部CDK' }}
+          </Button>
+        </div>
+        <p class="text-center text-xs adm-muted mt-2">
+          提示：CDK 按行分隔，可直接粘贴到表格/文档批量分发
+        </p>
+      </template>
+    </AppDialog>
 
     <!-- 禁用/恢复确认弹窗 -->
-    <Teleport to="body">
-      <div v-if="showStatusModal" class="fixed inset-0 z-50 flex items-center justify-center bg-black/40" @click.self="showStatusModal = false">
-        <div class="bg-white rounded-xl shadow-xl w-full max-w-sm mx-4 p-6">
-          <div class="flex items-center gap-2.5 mb-3">
-            <div
-              class="w-9 h-9 rounded-xl flex items-center justify-center"
-              :class="statusAction === 'disable' ? 'bg-red-100' : 'bg-green-100'"
-            >
-              <Ban v-if="statusAction === 'disable'" class="w-4 h-4 text-red-500" />
-              <RotateCcw v-else class="w-4 h-4 text-green-600" />
-            </div>
-            <div>
-              <h2 class="text-base font-semibold text-gray-900">{{ statusText }}</h2>
-              <p class="text-xs text-gray-400 mt-0.5">{{ statusTarget?.code }}</p>
-            </div>
-          </div>
-          <p class="text-sm text-gray-500 leading-relaxed text-justify">
-            <template v-if="statusAction === 'disable'">
-              禁用后该CDK将<strong class="text-red-500">无法被用户兑换</strong>，如需使用可随时恢复。
-            </template>
-            <template v-else>
-              恢复后该CDK将重新变为<strong class="text-green-600">未使用</strong>状态，可被用户兑换。
-            </template>
-          </p>
-          <div class="flex gap-2 mt-5">
-            <Button variant="outline" class="flex-1 h-10" @click="showStatusModal = false">取消</Button>
-            <Button
-              class="flex-1 h-10"
-              :class="statusAction === 'disable' ? 'bg-red-500 hover:bg-red-600' : 'bg-green-500 hover:bg-green-600'"
-              :disabled="statusLoading"
-              @click="confirmStatusChange"
-            >
-              <LoaderCircle v-if="statusLoading" class="w-4 h-4 animate-spin mr-1" />
-              {{ statusAction === 'disable' ? '确认禁用' : '确认恢复' }}
-            </Button>
-          </div>
+    <AppDialog
+      :open="showStatusModal"
+      variant="center"
+      panel-class="rounded-xl max-w-sm mx-4 p-6"
+      :title="statusText"
+      @update:open="(v: boolean) => { if (!v) showStatusModal = false }"
+    >
+      <div class="flex items-center gap-2.5 mb-3">
+        <div
+          class="w-9 h-9 rounded-xl flex items-center justify-center"
+          :class="statusAction === 'disable' ? 'bg-red-100' : 'bg-green-100'"
+        >
+          <Ban v-if="statusAction === 'disable'" class="w-4 h-4 text-red-500" />
+          <RotateCcw v-else class="w-4 h-4 text-green-600" />
+        </div>
+        <div>
+          <h2 class="text-base font-semibold text-gray-900">{{ statusText }}</h2>
+          <p class="text-xs text-gray-400 mt-0.5">{{ statusTarget?.code }}</p>
         </div>
       </div>
-    </Teleport>
+      <p class="text-sm text-gray-500 leading-relaxed text-justify">
+        <template v-if="statusAction === 'disable'">
+          禁用后该CDK将<strong class="text-red-500">无法被用户兑换</strong>，如需使用可随时恢复。
+        </template>
+        <template v-else>
+          恢复后该CDK将重新变为<strong class="text-green-600">未使用</strong>状态，可被用户兑换。
+        </template>
+      </p>
+      <div class="flex gap-2 mt-5">
+        <Button variant="outline" class="flex-1 h-10" @click="showStatusModal = false">取消</Button>
+        <Button
+          class="flex-1 h-10"
+          :class="statusAction === 'disable' ? 'bg-red-500 hover:bg-red-600' : 'bg-green-500 hover:bg-green-600'"
+          :disabled="statusLoading"
+          @click="confirmStatusChange"
+        >
+          <LoaderCircle v-if="statusLoading" class="w-4 h-4 animate-spin mr-1" />
+          {{ statusAction === 'disable' ? '确认禁用' : '确认恢复' }}
+        </Button>
+      </div>
+    </AppDialog>
   </div>
 </template>

frondend/src/views/admin/AdminDashboard.vue

@@ -1,7 +1,6 @@
 <script setup lang="ts">
-import { ref, onMounted } from 'vue'
-import { Users, QrCode, DollarSign, Activity } from 'lucide-vue-next'
-import { Card } from '@/components/ui/card'
+import { ref, computed, onMounted } from 'vue'
+import { Users, QrCode, Ticket, CheckCircle2, ChevronRight } from 'lucide-vue-next'
 import { useMessage } from '@/composables/useMessage'
 import * as adminApi from '@/api/admin'
 
@@ -20,6 +19,27 @@ const stats = ref({
   rate: 1,
 })
 
+const greeting = computed(() => {
+  const h = new Date().getHours()
+  if (h < 6) return '夜深了，注意休息'
+  if (h < 11) return '早上好'
+  if (h < 14) return '中午好'
+  if (h < 18) return '下午好'
+  return '晚上好'
+})
+
+// 统计卡片（余额与费率已在欢迎横幅展示）
+const statCards = computed(() => {
+  const s = stats.value
+  const usedRate = s.totalCDKs > 0 ? Math.round((s.usedCDKs / s.totalCDKs) * 100) : 0
+  return [
+    { label: '下级代理', value: s.totalAgents, hint: `${s.activeAgents} 个活跃`, hintClass: 'text-green-600', icon: Users, tone: 'bg-purple-50 text-purple-600' },
+    { label: 'CDK 总数', value: s.totalCDKs, hint: '', hintClass: '', icon: QrCode, tone: 'bg-brand-50 text-brand-600' },
+    { label: '已使用 CDK', value: s.usedCDKs, hint: `使用率 ${usedRate}%`, hintClass: 'text-gray-500', icon: CheckCircle2, tone: 'bg-green-50 text-green-600' },
+    { label: '未使用 CDK', value: Math.max(0, s.totalCDKs - s.usedCDKs), hint: '', hintClass: '', icon: Ticket, tone: 'bg-amber-50 text-amber-600' },
+  ]
+})
+
 onMounted(async () => {
   try {
     // 并行加载
@@ -50,100 +70,95 @@ onMounted(async () => {
 </script>
 
 <template>
-  <div class="p-6">
-    <h1 class="text-xl font-bold text-gray-900 mb-6">仪表盘</h1>
+  <div class="adm-page">
+    <!-- 欢迎横幅 -->
+    <div class="adm-welcome relative overflow-hidden hero-clip rounded-3xl p-6 mb-5 text-white rise-in">
+      <div class="pointer-events-none absolute -right-10 -top-16 w-56 h-56 rounded-full bg-white/10" />
+      <div class="pointer-events-none absolute right-24 top-16 w-24 h-24 rounded-full bg-white/10" />
+      <div class="relative flex items-center justify-between gap-4 flex-wrap">
+        <div>
+          <p class="text-sm text-white/90">{{ greeting }}</p>
+          <p class="mt-1 text-2xl font-bold tracking-tight">{{ me?.username || '管理员' }}</p>
+          <p class="mt-1 text-sm text-white/90">{{ me?.role === 'admin' ? '管理员' : '代理' }} · 费率 {{ (stats.rate * 100).toFixed(0) }}%</p>
+        </div>
+        <div class="text-right">
+          <p class="text-sm text-white/90">账户余额</p>
+          <p class="mt-0.5 text-3xl font-bold tabular-nums tracking-tight">¥{{ stats.balance.toFixed(2) }}</p>
+        </div>
+      </div>
+    </div>
 
     <!-- 统计卡片 -->
-    <div class="grid grid-cols-2 lg:grid-cols-4 gap-4 mb-8">
-      <Card class="p-4">
-        <div class="flex items-center gap-3">
-          <div class="w-10 h-10 rounded-lg bg-blue-100 text-blue-600 flex items-center justify-center">
-            <DollarSign class="w-5 h-5" />
-          </div>
-          <div>
-            <p class="text-xs text-gray-500">账户余额</p>
-            <p class="text-lg font-bold text-gray-900">{{ stats.balance.toFixed(2) }} 元</p>
-          </div>
+    <div class="grid grid-cols-2 lg:grid-cols-4 gap-3 md:gap-4 mb-5">
+      <div v-for="(c, i) in statCards" :key="c.label" class="adm-card adm-stat rise-in" :style="{ animationDelay: `${(i + 1) * 40}ms` }">
+        <div class="adm-stat-icon" :class="c.tone">
+          <component :is="c.icon" class="w-5 h-5" />
         </div>
-      </Card>
-
-      <Card class="p-4">
-        <div class="flex items-center gap-3">
-          <div class="w-10 h-10 rounded-lg bg-green-100 text-green-600 flex items-center justify-center">
-            <Activity class="w-5 h-5" />
-          </div>
-          <div>
-            <p class="text-xs text-gray-500">费率</p>
-            <p class="text-lg font-bold text-gray-900">{{ (stats.rate * 100).toFixed(0) }}%</p>
-          </div>
+        <div class="min-w-0">
+          <p class="adm-stat-label">{{ c.label }}</p>
+          <p class="adm-stat-value">{{ c.value }}</p>
+          <p v-if="c.hint" class="text-xs mt-0.5" :class="c.hintClass">{{ c.hint }}</p>
         </div>
-      </Card>
-
-      <Card class="p-4">
-        <div class="flex items-center gap-3">
-          <div class="w-10 h-10 rounded-lg bg-purple-100 text-purple-600 flex items-center justify-center">
-            <Users class="w-5 h-5" />
-          </div>
-          <div>
-            <p class="text-xs text-gray-500">下级代理</p>
-            <p class="text-lg font-bold text-gray-900">{{ stats.totalAgents }}</p>
-            <p class="text-xs text-green-600">{{ stats.activeAgents }} 个活跃</p>
-          </div>
-        </div>
-      </Card>
-
-      <Card class="p-4">
-        <div class="flex items-center gap-3">
-          <div class="w-10 h-10 rounded-lg bg-orange-100 text-orange-600 flex items-center justify-center">
-            <QrCode class="w-5 h-5" />
-          </div>
-          <div>
-            <p class="text-xs text-gray-500">CDK总数</p>
-            <p class="text-lg font-bold text-gray-900">{{ stats.totalCDKs }}</p>
-            <p class="text-xs text-green-600">{{ stats.usedCDKs }} 个已使用</p>
-          </div>
-        </div>
-      </Card>
+      </div>
     </div>
 
     <!-- 最近CDK -->
-    <Card class="p-5">
-      <div class="flex items-center justify-between mb-4">
-        <h2 class="font-semibold text-gray-900">最近生成的CDK</h2>
-        <router-link to="/admin/cdks" class="text-xs text-blue-600 hover:underline">查看全部</router-link>
+    <div class="adm-card overflow-hidden">
+      <div class="adm-card-head">
+        <p class="adm-card-title">最近生成的 CDK</p>
+        <router-link to="/admin/cdks" class="adm-link adm-link-brand">查看全部<ChevronRight class="w-3.5 h-3.5" /></router-link>
       </div>
 
-      <div v-if="cdks.length === 0" class="text-center py-8 text-sm text-gray-400">
-        暂无CDK数据
+      <div v-if="cdks.length === 0" class="adm-empty">
+        <div class="adm-empty-icon"><QrCode class="w-6 h-6" /></div>
+        暂无 CDK 数据
       </div>
 
       <div v-else class="overflow-x-auto">
-        <table class="w-full text-sm">
+        <table class="adm-table w-full">
           <thead>
-            <tr class="text-left text-xs text-gray-500 border-b border-gray-100">
-              <th class="pb-2 font-medium">CDK码</th>
-              <th class="pb-2 font-medium">售价</th>
-              <th class="pb-2 font-medium">状态</th>
-              <th class="pb-2 font-medium">创建时间</th>
+            <tr>
+              <th class="px-5 py-2.5">CDK 码</th>
+              <th class="px-5 py-2.5">类型</th>
+              <th class="px-5 py-2.5">售价</th>
+              <th class="px-5 py-2.5">状态</th>
+              <th class="px-5 py-2.5">创建时间</th>
             </tr>
           </thead>
           <tbody>
-            <tr v-for="cdk in cdks.slice(0, 10)" :key="cdk.id" class="border-b border-gray-50">
-              <td class="py-2.5 font-mono text-xs">{{ cdk.code }}</td>
-              <td class="py-2.5">{{ cdk.price.toFixed(2) }} 元</td>
-              <td class="py-2.5">
-                <span
-                  class="inline-flex items-center px-2 py-0.5 rounded-full text-xs font-medium"
-                  :class="cdk.status === 'used' ? 'bg-gray-100 text-gray-600' : cdk.status === 'disabled' ? 'bg-red-50 text-red-600' : 'bg-green-100 text-green-700'"
-                >
+            <tr v-for="cdk in cdks.slice(0, 10)" :key="cdk.id">
+              <td class="px-5 py-3 font-mono text-xs text-gray-900">{{ cdk.code }}</td>
+              <td class="px-5 py-3">
+                <span class="adm-badge no-dot" :class="cdk.type === 'vip' ? 'adm-badge-amber' : 'adm-badge-sky'">{{ cdk.type === 'vip' ? `VIP ${cdk.vipDays} 天` : `${cdk.maxRuns} 次` }}</span>
+              </td>
+              <td class="px-5 py-3 tabular-nums">¥{{ cdk.price.toFixed(2) }}</td>
+              <td class="px-5 py-3">
+                <span class="adm-badge" :class="cdk.status === 'used' ? 'adm-badge-gray' : cdk.status === 'disabled' ? 'adm-badge-red' : 'adm-badge-green'">
                   {{ cdk.status === 'used' ? '已使用' : cdk.status === 'disabled' ? '已禁用' : '未使用' }}
                 </span>
               </td>
-              <td class="py-2.5 text-gray-500">{{ new Date(cdk.createdAt).toLocaleString() }}</td>
+              <td class="px-5 py-3 text-gray-500 whitespace-nowrap">{{ new Date(cdk.createdAt).toLocaleString('zh-CN') }}</td>
             </tr>
           </tbody>
         </table>
       </div>
-    </Card>
+    </div>
   </div>
 </template>
+
+<style scoped>
+/* 欢迎横幅：品牌渐变，右上带天空蓝 */
+.adm-welcome {
+  background-color: #0b8672;
+  /* 渐变整体压在 #0b8672 及更深，白字 ≥ 4.5:1 */
+  background-image: linear-gradient(135deg, #0b8672 0%, #0a7a6e 55%, #08604f 100%);
+  box-shadow: 0 12px 30px rgb(11 134 114 / 0.22);
+}
+</style>
+
+<style>
+html.dark .adm-welcome {
+  background-image: linear-gradient(135deg, #0c6d5d 0%, #0b5f55 60%, #094c44 100%);
+  box-shadow: none;
+}
+</style>

frondend/src/views/admin/AdminLayout.vue

@@ -21,6 +21,7 @@ import {
 } from 'lucide-vue-next'
 import { useMessage } from '@/composables/useMessage'
 import { Button } from '@/components/ui/button'
+import AppDialog from '@/components/ui/dialog/AppDialog.vue'
 import type { AgentInfo } from '@/api/admin'
 import * as announceApi from '@/api/announcement'
 import type { AnnouncementItem } from '@/api/announcement'
@@ -49,7 +50,25 @@ const visibleNavItems = computed(() =>
   navItems.filter((item) => !item.adminOnly || adminInfo.value?.role === 'admin')
 )
 
-const activeNav = computed(() => route.name as string)
+// 详情类子路由（如工单详情）高亮其所属的列表项
+const activeNav = computed(() => {
+  const n = route.name as string
+  if (n === 'admin-ticket-detail') return 'admin-tickets'
+  return n
+})
+const currentNav = computed(() => navItems.find((i) => i.name === activeNav.value) || null)
+
+// 侧栏分组：概览 / 运营 / 系统
+const NAV_GROUPS: { title: string; names: string[] }[] = [
+  { title: '概览', names: ['admin-dashboard'] },
+  { title: '运营', names: ['admin-agents', 'admin-users', 'admin-cdks', 'admin-announcements', 'admin-tickets'] },
+  { title: '系统', names: ['admin-pending-schools', 'admin-settings'] },
+]
+const navGroups = computed(() =>
+  NAV_GROUPS.map((g) => ({ title: g.title, items: visibleNavItems.value.filter((i) => g.names.includes(i.name)) })).filter(
+    (g) => g.items.length > 0,
+  ),
+)
 
 // 公告相关（代理端）
 const showAnnPanel = ref(false)
@@ -153,122 +172,115 @@ function handleLogout() {
 </script>
 
 <template>
-  <div class="min-h-dvh bg-gray-100 flex">
-    <!-- 手机端顶栏 -->
-    <div class="fixed top-0 left-0 right-0 h-14 bg-white border-b border-gray-200 flex items-center px-4 gap-3 z-30 md:hidden">
-      <button
-        class="w-9 h-9 flex items-center justify-center rounded-lg hover:bg-gray-100 transition-colors"
-        @click="toggleSidebar"
-      >
+  <div class="adm-shell min-h-dvh flex">
+    <!-- ======== 手机端顶栏（玻璃） ======== -->
+    <div class="fixed top-0 left-0 right-0 h-14 glass-bar border-b border-gray-200/70 flex items-center px-3 gap-2 z-30 md:hidden">
+      <button class="w-10 h-10 flex items-center justify-center rounded-xl hover:bg-gray-100 transition-colors" aria-label="菜单" @click="toggleSidebar">
         <Menu v-if="!showSidebar" class="w-5 h-5 text-gray-700" />
         <X v-else class="w-5 h-5 text-gray-700" />
       </button>
-      <div class="flex items-center gap-2">
-        <div class="w-7 h-7 rounded-md bg-blue-600 flex items-center justify-center">
-          <Shield class="w-3.5 h-3.5 text-white" />
-        </div>
-        <span class="font-medium text-gray-900 text-sm">管理后台</span>
-      </div>
-      <div class="flex-1" />
-      <!-- 手机端铃铛 -->
-      <button class="relative w-8 h-8 flex items-center justify-center rounded-lg hover:bg-gray-100" @click="openAnnPanel">
+      <p class="flex-1 min-w-0 text-[15px] font-semibold text-gray-900 truncate">{{ currentNav?.label || '管理后台' }}</p>
+      <button class="relative w-10 h-10 flex items-center justify-center rounded-xl hover:bg-gray-100" aria-label="公告" @click="openAnnPanel">
         <Bell class="w-5 h-5 text-gray-600" />
-        <span v-if="unreadCount > 0" class="absolute -top-0.5 -right-0.5 min-w-[16px] h-4 px-1 rounded-full bg-red-500 text-white text-[9px] font-bold flex items-center justify-center leading-none">{{ unreadCount > 99 ? '99+' : unreadCount }}</span>
+        <span v-if="unreadCount > 0" class="absolute top-1 right-1 min-w-[18px] h-[18px] px-1 rounded-full bg-red-500 text-white text-xs font-bold flex items-center justify-center leading-none ring-2 ring-white dark:ring-gray-50">{{ unreadCount > 99 ? '99+' : unreadCount }}</span>
       </button>
     </div>
 
     <!-- 手机端遮罩层 -->
     <transition name="fade">
-      <div
-        v-if="showSidebar"
-        class="fixed inset-0 bg-black/40 z-40 md:hidden"
-        @click="showSidebar = false"
-      />
+      <div v-if="showSidebar" class="fixed inset-0 bg-black/40 z-40 md:hidden" @click="showSidebar = false" />
     </transition>
 
-    <!-- 左侧导航 -->
+    <!-- ======== 左侧导航 ======== -->
     <aside
-      class="bg-white border-r border-gray-200 flex flex-col flex-shrink-0 z-50
-             fixed inset-y-0 left-0 w-60 transition-transform duration-200 ease-in-out
-             md:relative md:inset-auto md:z-auto md:translate-x-0"
+      class="adm-aside flex flex-col flex-shrink-0 z-50 fixed inset-y-0 left-0 w-64 transition-transform duration-300 ease-[var(--ease-out-soft)]
+             md:sticky md:top-0 md:h-dvh md:translate-x-0"
       :class="showSidebar ? 'translate-x-0' : '-translate-x-full md:translate-x-0'"
     >
-        <!-- Logo（桌面） -->
-        <div class="h-16 flex items-center gap-2.5 px-5 border-b border-gray-100 hidden md:flex">
-          <div class="w-8 h-8 rounded-lg bg-blue-600 flex items-center justify-center">
-            <Shield class="w-4 h-4 text-white" />
-          </div>
-          <span class="font-semibold text-gray-900 text-sm flex-1">管理后台</span>
-          <!-- 桌面端铃铛 -->
-          <button class="relative w-8 h-8 flex items-center justify-center rounded-lg hover:bg-gray-100" @click="openAnnPanel">
-            <Bell class="w-4 h-4 text-gray-500" />
-            <span v-if="unreadCount > 0" class="absolute -top-0.5 -right-0.5 min-w-[14px] h-3.5 px-1 rounded-full bg-red-500 text-white text-[8px] font-bold flex items-center justify-center leading-none">{{ unreadCount > 99 ? '99+' : unreadCount }}</span>
-          </button>
+      <!-- 品牌区 -->
+      <div class="h-16 flex items-center gap-3 px-5 flex-shrink-0">
+        <div class="w-9 h-9 rounded-xl bg-brand-gradient flex items-center justify-center shadow-md shadow-brand-500/25">
+          <Shield class="w-[18px] h-[18px] text-white" />
         </div>
-
-        <!-- 手机端顶部关闭 -->
-        <div class="h-14 flex items-center justify-between px-4 border-b border-gray-100 md:hidden">
-          <div class="flex items-center gap-2">
-            <div class="w-7 h-7 rounded-md bg-blue-600 flex items-center justify-center">
-              <Shield class="w-3.5 h-3.5 text-white" />
-            </div>
-            <span class="font-medium text-gray-900 text-sm">管理后台</span>
-          </div>
-          <button class="w-8 h-8 flex items-center justify-center rounded-lg hover:bg-gray-100" @click="showSidebar = false">
-            <X class="w-4 h-4 text-gray-500" />
-          </button>
+        <div class="flex-1 min-w-0">
+          <p class="font-bold tracking-tight text-gray-900 text-[15px] leading-tight">小助手后台</p>
+          <p class="text-xs text-gray-500">{{ adminInfo?.role === 'admin' ? '管理员控制台' : '代理控制台' }}</p>
         </div>
+        <button class="w-8 h-8 flex items-center justify-center rounded-lg hover:bg-gray-100 md:hidden" aria-label="关闭菜单" @click="showSidebar = false">
+          <X class="w-4 h-4 text-gray-500" />
+        </button>
+      </div>
 
-        <!-- 导航菜单 -->
-        <nav class="flex-1 py-3 px-3 space-y-1 overflow-y-auto">
-          <button
-            v-for="item in visibleNavItems"
-            :key="item.name"
-            class="w-full flex items-center gap-3 px-3 py-2.5 rounded-lg text-sm transition-colors"
-            :class="activeNav === item.name
-              ? 'bg-blue-50 text-blue-700 font-medium'
-              : 'text-gray-600 hover:bg-gray-50 hover:text-gray-900'"
-            @click="navigateTo(item)"
-          >
-            <component :is="item.icon" class="w-4 h-4 flex-shrink-0" />
-            <span>{{ item.label }}</span>
-          </button>
-        </nav>
-
-        <!-- 底部用户信息 -->
-        <div class="border-t border-gray-100 p-3 relative">
-          <button
-            class="w-full flex items-center gap-3 px-3 py-2 rounded-lg hover:bg-gray-50 transition-colors"
-            @click="showUserMenu = !showUserMenu"
-          >
-            <div class="w-8 h-8 rounded-full bg-blue-100 text-blue-600 flex items-center justify-center text-sm font-medium flex-shrink-0">
-              {{ (adminInfo?.username || 'A')[0].toUpperCase() }}
-            </div>
-            <div class="flex-1 min-w-0 text-left">
-              <p class="text-sm font-medium text-gray-900 truncate">{{ adminInfo?.username }}</p>
-              <p class="text-xs text-gray-400 truncate">{{ adminInfo?.role === 'admin' ? '管理员' : '代理' }}</p>
-            </div>
-            <ChevronDown class="w-4 h-4 text-gray-400" />
-          </button>
-
-          <div
-            v-if="showUserMenu"
-            class="absolute bottom-full left-3 right-3 mb-1 bg-white rounded-lg border border-gray-200 shadow-lg overflow-hidden"
-          >
+      <!-- 导航菜单（分组） -->
+      <nav class="flex-1 px-3 pb-3 overflow-y-auto">
+        <template v-for="group in navGroups" :key="group.title">
+          <p class="px-3 pt-4 pb-1.5 text-xs font-semibold text-gray-400 tracking-wider">{{ group.title }}</p>
+          <div class="space-y-0.5">
             <button
-              class="w-full flex items-center gap-2 px-3 py-2.5 text-sm text-red-600 hover:bg-red-50 transition-colors"
-              @click="handleLogout"
+              v-for="item in group.items"
+              :key="item.name"
+              class="adm-nav-item w-full flex items-center gap-3 px-3 h-10 rounded-xl text-sm transition-colors"
+              :class="activeNav === item.name ? 'is-active' : 'text-gray-600 hover:bg-gray-100 hover:text-gray-900'"
+              :aria-current="activeNav === item.name ? 'page' : undefined"
+              @click="navigateTo(item)"
             >
-              <LogOut class="w-4 h-4" />
-              <span>退出登录</span>
+              <component :is="item.icon" class="w-[18px] h-[18px] flex-shrink-0" />
+              <span class="flex-1 text-left">{{ item.label }}</span>
             </button>
           </div>
-        </div>
-      </aside>
+        </template>
+      </nav>
 
-    <!-- 右侧内容区 -->
-    <main class="flex-1 overflow-y-auto pt-14 md:pt-0">
-      <router-view />
+      <!-- 底部用户信息 -->
+      <div class="p-3 relative flex-shrink-0 border-t border-gray-100">
+        <button
+          class="w-full flex items-center gap-3 px-2.5 py-2 rounded-xl hover:bg-gray-100 transition-colors"
+          @click="showUserMenu = !showUserMenu"
+        >
+          <div class="w-9 h-9 rounded-full bg-brand-gradient text-white flex items-center justify-center text-sm font-bold flex-shrink-0">
+            {{ (adminInfo?.username || 'A')[0].toUpperCase() }}
+          </div>
+          <div class="flex-1 min-w-0 text-left">
+            <p class="text-sm font-semibold text-gray-900 truncate">{{ adminInfo?.username }}</p>
+            <p class="text-xs text-gray-500 truncate">{{ adminInfo?.role === 'admin' ? '管理员' : '代理' }}</p>
+          </div>
+          <ChevronDown class="w-4 h-4 text-gray-400 transition-transform" :class="showUserMenu && 'rotate-180'" />
+        </button>
+
+        <div
+          v-if="showUserMenu"
+          class="absolute bottom-full left-3 right-3 mb-1 bg-white rounded-xl border border-gray-200 shadow-lg overflow-hidden"
+        >
+          <button
+            class="w-full flex items-center gap-2 px-3 py-2.5 text-sm text-red-600 hover:bg-red-50 transition-colors"
+            @click="handleLogout"
+          >
+            <LogOut class="w-4 h-4" />
+            <span>退出登录</span>
+          </button>
+        </div>
+      </div>
+    </aside>
+
+    <!-- ======== 右侧内容区 ======== -->
+    <!-- 内容区即滚动容器：html/body 为手机 H5 外壳设了 overflow:hidden，后台必须在这里滚动；
+         h-dvh 固定高度让 overflow-y-auto 生效，桌面顶栏 sticky 在此容器内吸顶 -->
+    <main class="flex-1 min-w-0 h-dvh overflow-y-auto overscroll-contain pt-14 md:pt-0 flex flex-col">
+      <!-- 桌面顶栏：面包屑 + 公告 -->
+      <div class="hidden md:flex sticky top-0 z-20 h-14 items-center gap-3 px-8 glass-bar border-b border-gray-200/70">
+        <p class="text-sm text-gray-500">管理后台</p>
+        <span class="adm-muted" aria-hidden="true">/</span>
+        <p class="text-sm font-semibold text-gray-900">{{ currentNav?.label || '' }}</p>
+        <div class="flex-1" />
+        <button class="relative h-9 px-3 flex items-center gap-1.5 rounded-xl text-sm text-gray-600 hover:bg-gray-100" @click="openAnnPanel">
+          <Bell class="w-4 h-4" />
+          公告
+          <span v-if="unreadCount > 0" class="min-w-[18px] h-[18px] px-1 rounded-full bg-red-500 text-white text-xs font-bold flex items-center justify-center leading-none">{{ unreadCount > 99 ? '99+' : unreadCount }}</span>
+        </button>
+      </div>
+      <div class="flex-1 min-w-0">
+        <router-view />
+      </div>
     </main>
 
     <!-- 公告面板遮罩 -->
@@ -278,12 +290,12 @@ function handleLogout() {
 
     <!-- 公告面板 -->
     <transition name="slide-right">
-      <div v-if="showAnnPanel" class="fixed top-0 right-0 bottom-0 z-50 w-[85%] max-w-sm bg-white shadow-xl flex flex-col">
-        <div class="flex items-center justify-between px-4 py-3 border-b border-gray-100">
+      <div v-if="showAnnPanel" class="fixed top-0 right-0 bottom-0 z-50 w-[85%] max-w-sm bg-white shadow-2xl flex flex-col rounded-l-3xl overflow-hidden">
+        <div class="flex items-center justify-between px-5 py-4 border-b border-gray-100">
           <div class="flex items-center gap-2">
-            <Bell class="w-5 h-5 text-blue-500" />
-            <span class="font-semibold text-gray-900 text-sm">公告</span>
-            <span v-if="unreadCount > 0" class="text-[10px] px-1.5 py-0.5 rounded-full bg-red-100 text-red-600 font-medium">{{ unreadCount }} 条未读</span>
+            <div class="w-8 h-8 rounded-xl bg-brand-gradient flex items-center justify-center"><Bell class="w-4 h-4 text-white" /></div>
+            <span class="font-bold text-gray-900 text-base">公告</span>
+            <span v-if="unreadCount > 0" class="text-xs px-1.5 py-0.5 rounded-full bg-red-100 text-red-600 font-medium">{{ unreadCount }} 条未读</span>
           </div>
           <button class="w-7 h-7 rounded-full hover:bg-gray-100 flex items-center justify-center" @click="showAnnPanel = false">
             <X class="w-4 h-4 text-gray-400" />
@@ -307,18 +319,18 @@ function handleLogout() {
               v-for="item in announcements"
               :key="item.id"
               class="px-4 py-3.5 hover:bg-gray-50 transition-colors cursor-pointer"
-              :class="{ 'bg-blue-50/30': !item.isRead }"
+              :class="{ 'bg-brand-50': !item.isRead }"
               @click="openAgentDetail(item)"
             >
               <div class="flex items-start gap-2.5">
                 <div class="mt-0.5 flex-shrink-0">
-                  <Circle v-if="!item.isRead" class="w-3 h-3 text-blue-500" />
+                  <Circle v-if="!item.isRead" class="w-3 h-3 text-brand-500 fill-current" />
                   <CheckCircle v-else class="w-3 h-3 text-green-400" />
                 </div>
                 <div class="flex-1 min-w-0">
                   <p class="text-sm font-medium text-gray-900" :class="{ 'font-semibold': !item.isRead }">{{ item.title }}</p>
                   <p class="text-xs text-gray-500 leading-relaxed mt-0.5 line-clamp-1">{{ item.content }}</p>
-                  <p class="text-[10px] text-gray-400 mt-1">{{ new Date(item.createdAt).toLocaleString('zh-CN') }}</p>
+                  <p class="text-xs text-gray-400 mt-1">{{ new Date(item.createdAt).toLocaleString('zh-CN') }}</p>
                 </div>
               </div>
             </div>
@@ -328,55 +340,60 @@ function handleLogout() {
     </transition>
 
     <!-- 代理端公告详情弹窗 -->
-    <Teleport to="body">
-      <transition name="fade">
-        <div v-if="showDetail && detailItem" class="fixed inset-0 z-[60] flex items-center justify-center px-4">
-          <div class="absolute inset-0 bg-black/50" @click="showDetail = false" />
-          <div class="relative w-[85%] sm:max-w-sm bg-white rounded-2xl shadow-2xl overflow-hidden">
-            <div class="h-1.5 bg-gradient-to-r from-blue-500 to-blue-400" />
-            <div class="p-6">
-              <div class="flex items-center justify-between mb-3">
-                <div class="flex items-center gap-2.5">
-                  <div class="w-9 h-9 rounded-xl bg-blue-100 flex items-center justify-center">
-                    <Bell class="w-5 h-5 text-blue-500" />
-                  </div>
-                  <h3 class="text-base font-bold text-gray-900">{{ detailItem.title }}</h3>
-                </div>
-                <button class="w-7 h-7 rounded-full hover:bg-gray-100 flex items-center justify-center flex-shrink-0" @click="showDetail = false">
-                  <X class="w-4 h-4 text-gray-400" />
-                </button>
-              </div>
-              <div class="flex items-center gap-2 mb-4">
-                <span class="text-[10px] text-gray-400">{{ new Date(detailItem.createdAt).toLocaleString('zh-CN') }}</span>
-              </div>
-              <div class="bg-gray-50 rounded-xl p-4 max-h-[50vh] overflow-y-auto">
-                <p class="text-sm text-gray-600 leading-relaxed whitespace-pre-wrap">{{ detailItem.content }}</p>
-              </div>
-              <Button class="mt-4 w-full h-11 text-sm font-medium rounded-xl" @click="showDetail = false">关闭</Button>
+    <AppDialog
+      :open="showDetail && !!detailItem"
+      variant="center"
+      z-class="z-[60]"
+      wrapper-class="px-4"
+      overlay-class="bg-black/50"
+      panel-class="w-[85%] sm:max-w-sm shadow-2xl"
+      :fade="true"
+      title="公告详情"
+      @update:open="(v: boolean) => { if (!v) showDetail = false }"
+    >
+      <div class="h-1.5 bg-gradient-to-r from-brand-400 to-sky-400" />
+      <div class="p-6">
+        <div class="flex items-center justify-between mb-3">
+          <div class="flex items-center gap-2.5">
+            <div class="w-9 h-9 rounded-xl bg-brand-100 flex items-center justify-center">
+              <Bell class="w-5 h-5 text-brand-600" />
             </div>
+            <h3 class="text-base font-bold text-gray-900">{{ detailItem?.title }}</h3>
           </div>
+          <button class="w-7 h-7 rounded-full hover:bg-gray-100 flex items-center justify-center flex-shrink-0" @click="showDetail = false">
+            <X class="w-4 h-4 text-gray-400" />
+          </button>
         </div>
-      </transition>
-    </Teleport>
+        <div class="flex items-center gap-2 mb-4">
+          <span class="text-xs text-gray-400">{{ detailItem ? new Date(detailItem.createdAt).toLocaleString('zh-CN') : '' }}</span>
+        </div>
+        <div class="bg-gray-50 rounded-xl p-4 max-h-[50vh] overflow-y-auto">
+          <p class="text-sm text-gray-600 leading-relaxed whitespace-pre-wrap">{{ detailItem?.content }}</p>
+        </div>
+        <Button class="mt-4 w-full h-11 text-sm font-medium rounded-xl" @click="showDetail = false">关闭</Button>
+      </div>
+    </AppDialog>
 
     <!-- 强制弹出公告 Dialog -->
-    <Teleport to="body">
-      <transition name="fade">
-        <div v-if="currentForcePopup" class="fixed inset-0 z-[60] flex items-center justify-center px-4">
-          <div class="absolute inset-0 bg-black/40" @click="dismissForcePopup" />
-          <div class="relative w-[85%] sm:max-w-sm bg-white rounded-2xl shadow-xl overflow-hidden">
-            <div class="p-6">
-              <div class="flex items-center gap-2 mb-1">
-                  <Bell class="w-5 h-5 text-blue-500" />
-                  <h3 class="text-base font-semibold text-gray-900">{{ currentForcePopup.title }}</h3>
-                </div>
-              <p class="text-sm text-gray-600 leading-relaxed mt-3 whitespace-pre-wrap">{{ currentForcePopup.content }}</p>
-              <Button class="mt-5 w-full h-10 text-sm font-medium" @click="dismissForcePopup">我知道了</Button>
-            </div>
+    <AppDialog
+      :open="!!currentForcePopup"
+      variant="center"
+      z-class="z-[60]"
+      wrapper-class="px-4"
+      panel-class="w-[85%] sm:max-w-sm"
+      :fade="true"
+      title="强制公告"
+      @update:open="(v: boolean) => { if (!v) dismissForcePopup() }"
+    >
+      <div class="p-6">
+        <div class="flex items-center gap-2 mb-1">
+            <Bell class="w-5 h-5 text-brand-600" />
+            <h3 class="text-base font-semibold text-gray-900">{{ currentForcePopup?.title }}</h3>
           </div>
-        </div>
-      </transition>
-    </Teleport>
+        <p class="text-sm text-gray-600 leading-relaxed mt-3 whitespace-pre-wrap">{{ currentForcePopup?.content }}</p>
+        <Button class="mt-5 w-full h-10 text-sm font-medium" @click="dismissForcePopup">我知道了</Button>
+      </div>
+    </AppDialog>
   </div>
 </template>
 
@@ -399,3 +416,20 @@ function handleLogout() {
   transform: translateX(100%);
 }
 </style>
+
+<style>
+/* 后台外壳：浅薄荷灰底 + 白色侧栏（非 scoped，暗色用 html.dark 覆盖） */
+.adm-shell { background-color: #f4f8f6; }
+.adm-aside {
+  background-color: var(--color-card);
+  border-right: 1px solid var(--color-gray-200);
+}
+.adm-nav-item.is-active {
+  background-color: var(--color-brand-50);
+  color: var(--color-brand-700);
+  font-weight: 600;
+  box-shadow: inset 3px 0 0 var(--color-brand-500);
+}
+html.dark .adm-shell { background-color: #0f1815; }
+html.dark .adm-nav-item.is-active { box-shadow: inset 3px 0 0 var(--color-brand-400); }
+</style>

frondend/src/views/admin/AdminLogin.vue

@@ -49,11 +49,11 @@ async function handleLogin() {
 </script>
 
 <template>
-  <div class="min-h-dvh flex items-center justify-center bg-gradient-to-br from-blue-50 to-indigo-100 p-4">
+  <div class="min-h-dvh flex items-center justify-center bg-gradient-to-br from-brand-50 via-gray-50 to-sky-50 p-4">
     <div class="w-full max-w-md">
       <!-- 标题 -->
       <div class="text-center mb-8">
-        <div class="w-16 h-16 rounded-2xl bg-blue-600 flex items-center justify-center mx-auto mb-4 shadow-lg shadow-blue-200">
+        <div class="w-16 h-16 rounded-2xl bg-brand-gradient flex items-center justify-center mx-auto mb-4 shadow-xl shadow-brand-500/30">
           <Shield class="w-8 h-8 text-white" />
         </div>
         <h1 class="text-2xl font-bold text-gray-900">管理后台</h1>

frondend/src/views/admin/AdminPendingSchools.vue

@@ -3,6 +3,7 @@ import { ref, onMounted } from 'vue'
 import { Shield, RefreshCw, CheckCircle, XCircle, Search, Eye, EyeOff, Copy } from 'lucide-vue-next'
 import { Button } from '@/components/ui/button'
 import { Input } from '@/components/ui/input'
+import AppDialog from '@/components/ui/dialog/AppDialog.vue'
 import { useMessage } from '@/composables/useMessage'
 import { copyToClipboard } from '@/utils/clipboard'
 import api from '@/api/index'
@@ -151,43 +152,39 @@ async function copyText(text: string) {
 </script>
 
 <template>
-  <div class="p-6">
+  <div class="adm-page">
     <!-- 标题栏 -->
-    <div class="flex items-center justify-between mb-6">
+    <div class="adm-head">
       <div class="flex items-center gap-3">
-        <div class="w-10 h-10 rounded-xl bg-amber-100 flex items-center justify-center">
-          <Shield class="w-5 h-5 text-amber-600" />
+        <div class="adm-head-icon">
+          <Shield class="w-5 h-5" />
         </div>
         <div>
-          <h1 class="text-lg font-bold text-gray-900">待适配学校</h1>
-          <p class="text-sm text-gray-400">用户提交的登录失败测试账号，用于适配新学校</p>
+          <h1 class="adm-title">待适配学校</h1>
+          <p class="adm-sub">用户提交的登录失败测试账号，用于适配新学校</p>
         </div>
       </div>
-      <div class="flex items-center gap-2">
+      <div class="flex items-center gap-2 flex-wrap">
         <!-- 筛选 -->
-        <div class="flex gap-1 bg-gray-100 rounded-lg p-0.5 mr-3">
+        <div class="adm-seg">
           <button
-            class="px-3 py-1.5 text-xs font-medium rounded-md transition-colors"
-            :class="statusFilter === 'pending' ? 'bg-white text-gray-900 shadow-sm' : 'text-gray-500 hover:text-gray-700'"
+            :class="statusFilter === 'pending' && 'is-active'"
             @click="statusFilter = 'pending'; loadData()"
           >待处理</button>
           <button
-            class="px-3 py-1.5 text-xs font-medium rounded-md transition-colors"
-            :class="statusFilter === 'completed' ? 'bg-white text-gray-900 shadow-sm' : 'text-gray-500 hover:text-gray-700'"
+            :class="statusFilter === 'completed' && 'is-active'"
             @click="statusFilter = 'completed'; loadData()"
           >已完成</button>
           <button
-            class="px-3 py-1.5 text-xs font-medium rounded-md transition-colors"
-            :class="statusFilter === 'rejected' ? 'bg-white text-gray-900 shadow-sm' : 'text-gray-500 hover:text-gray-700'"
+            :class="statusFilter === 'rejected' && 'is-active'"
             @click="statusFilter = 'rejected'; loadData()"
           >已拒绝</button>
           <button
-            class="px-3 py-1.5 text-xs font-medium rounded-md transition-colors"
-            :class="statusFilter === '' ? 'bg-white text-gray-900 shadow-sm' : 'text-gray-500 hover:text-gray-700'"
+            :class="statusFilter === '' && 'is-active'"
             @click="statusFilter = ''; loadData()"
           >全部</button>
         </div>
-        <Button variant="outline" size="sm" class="h-9 text-xs" @click="loadData">
+        <Button variant="outline" class="h-10" @click="loadData">
           <RefreshCw class="w-3.5 h-3.5 mr-1" />
           刷新
         </Button>
@@ -197,43 +194,43 @@ async function copyText(text: string) {
     <!-- 已适配学校信息 -->
     <div
       v-if="adaptedSchools.size > 0 && statusFilter !== 'completed'"
-      class="mb-6 bg-green-50 border border-green-200 rounded-xl px-4 py-3"
+      class="mb-4 bg-green-50 border border-green-200 rounded-2xl px-5 py-4"
     >
       <div class="flex items-center gap-2 text-sm font-medium text-green-700 mb-1.5">
         <CheckCircle class="w-4 h-4" />
         已适配学校（{{ adaptedSchools.size }} 所）
       </div>
-      <p class="text-xs text-green-600 leading-relaxed">
+      <p class="text-xs text-green-700 leading-relaxed">
         <template v-for="(name, schoolId, i) in adaptedSchools" :key="schoolId">
           {{ name }}<span v-if="i < adaptedSchools.size - 1">、</span>
         </template>
       </p>
-      <p class="text-[10px] text-green-500 mt-1">以下学校已适配完成，若有新登录失败反馈请优先核对该学校登录流程</p>
+      <p class="text-xs text-green-700 mt-1">以下学校已适配完成，若有新登录失败反馈请优先核对该学校登录流程</p>
     </div>
 
     <!-- 搜索 -->
-    <div class="relative max-w-xs mb-6">
+    <div class="adm-toolbar"><div class="relative flex-1 min-w-[200px] max-w-sm">
       <Search class="absolute left-3 top-1/2 -translate-y-1/2 w-4 h-4 text-gray-400" />
       <Input
         v-model="searchKeyword"
         placeholder="搜索学校名称..."
-        class="pl-9 h-9 text-sm"
+        class="pl-9 h-10 text-sm"
         @input="buildGroups"
       />
-    </div>
+    </div></div>
 
     <!-- 主卡片 -->
-    <div class="bg-white rounded-xl border border-gray-200 overflow-hidden">
+    <div class="adm-card overflow-hidden">
       <!-- 加载骨架 -->
       <div v-if="loading" class="p-6 space-y-4">
         <div v-for="i in 4" :key="i" class="h-10 bg-gray-50 rounded animate-pulse" />
       </div>
 
       <!-- 空状态 -->
-      <div v-else-if="groups.length === 0" class="text-center py-20 text-gray-400">
-        <Shield class="w-12 h-12 mx-auto mb-3 opacity-30" />
-        <p class="text-sm">暂无待适配学校</p>
-        <p class="text-xs text-gray-300 mt-1">当用户提交登录失败的测试账号后，将在这里显示</p>
+      <div v-else-if="groups.length === 0" class="adm-empty">
+        <div class="adm-empty-icon"><Shield class="w-6 h-6" /></div>
+        <p class="text-sm font-medium text-gray-700">暂无待适配学校</p>
+        <p class="text-xs mt-1">当用户提交登录失败的测试账号后，将在这里显示</p>
       </div>
 
       <!-- 学校列表 -->
@@ -243,26 +240,26 @@ async function copyText(text: string) {
           :key="group.schoolId"
         >
           <!-- 学校标题栏 -->
-          <div class="px-5 py-3 bg-gray-50/80 flex items-center justify-between border-b border-gray-100">
-            <div class="flex items-center gap-2.5">
-              <Shield class="w-4 h-4 text-amber-500" />
+          <div class="px-5 py-3 bg-gray-50 flex items-center justify-between gap-3 flex-wrap border-b border-gray-100">
+            <div class="flex items-center gap-2.5 flex-wrap">
+              <Shield class="w-4 h-4 text-amber-600" />
               <span class="text-sm font-semibold text-gray-900">{{ group.schoolName }}</span>
               <span
                 v-if="adaptedSchools.has(group.schoolId)"
-                class="text-[10px] px-1.5 py-0.5 rounded-full bg-green-50 text-green-600 font-medium border border-green-100"
+                class="adm-badge adm-badge-green"
               >
                 已适配
               </span>
-              <span class="text-[10px] px-1.5 py-0.5 rounded-full bg-amber-50 text-amber-600 font-medium border border-amber-100">
+              <span class="adm-badge no-dot adm-badge-amber">
                 {{ group.count }} 条
               </span>
-              <span class="text-[10px] text-gray-400 font-mono">{{ group.schoolId }}</span>
+              <span class="text-xs text-gray-500 font-mono">{{ group.schoolId }}</span>
             </div>
             <div class="flex items-center gap-1.5">
               <Button
                 v-if="statusFilter !== 'completed' && statusFilter !== 'rejected'"
                 size="sm"
-                class="h-7 text-xs whitespace-nowrap"
+                class="h-8 text-xs whitespace-nowrap"
                 @click="handleMarkDone(group.records[0])"
               >
                 <CheckCircle class="w-3 h-3 mr-1 shrink-0" />
@@ -272,7 +269,7 @@ async function copyText(text: string) {
                 v-if="statusFilter === 'pending'"
                 variant="outline"
                 size="sm"
-                class="h-7 text-xs text-red-500 border-red-200 hover:bg-red-50 whitespace-nowrap"
+                class="h-8 text-xs text-red-600 border-red-200 hover:bg-red-50 whitespace-nowrap"
                 @click="openRejectModal(group.records[0])"
               >
                 <XCircle class="w-3 h-3 mr-1 shrink-0" />
@@ -283,7 +280,7 @@ async function copyText(text: string) {
 
           <!-- 账号列表（小屏横向滚动） -->
           <div class="overflow-x-auto">
-            <table class="w-full text-sm min-w-[760px]">
+            <table class="adm-table w-full text-sm min-w-[760px]">
             <thead>
               <tr class="text-left text-xs text-gray-400 border-b border-gray-50">
                 <th class="px-5 py-2.5 font-medium w-[16%]">账号</th>
@@ -299,7 +296,7 @@ async function copyText(text: string) {
               <tr
                 v-for="r in group.records"
                 :key="r.id"
-                class="border-t border-gray-50 hover:bg-gray-50/50 transition-colors"
+                class=""
               >
                 <!-- 账号 -->
                 <td class="px-5 py-3">
@@ -316,14 +313,14 @@ async function copyText(text: string) {
                       {{ showPasswordMap[r.id] ? r.password : r.password }}
                     </span>
                     <button
-                      class="inline-flex items-center gap-0.5 text-gray-400 hover:text-blue-500 transition-colors"
+                      class="inline-flex items-center gap-0.5 text-gray-400 hover:text-brand-600 transition-colors"
                       @click="togglePassword(r.id)"
                     >
                       <Eye v-if="!showPasswordMap[r.id]" class="w-3.5 h-3.5" />
                       <EyeOff v-else class="w-3.5 h-3.5" />
                     </button>
                     <button
-                      class="inline-flex items-center gap-0.5 text-gray-400 hover:text-blue-500 transition-colors"
+                      class="inline-flex items-center gap-0.5 text-gray-400 hover:text-brand-600 transition-colors"
                       @click="copyText(r.password)"
                     >
                       <Copy class="w-3.5 h-3.5" />
@@ -333,7 +330,7 @@ async function copyText(text: string) {
                 <!-- 联系邮箱 -->
                 <td class="px-5 py-3">
                   <span v-if="r.email" class="text-gray-600 text-xs">{{ r.email }}</span>
-                  <span v-else class="text-gray-300 text-xs">--</span>
+                  <span v-else class="adm-muted text-xs">--</span>
                 </td>
                 <!-- IP -->
                 <td class="px-5 py-3">
@@ -342,14 +339,14 @@ async function copyText(text: string) {
                 <!-- 状态 -->
                 <td class="px-5 py-3">
                   <span
-                    class="inline-flex items-center px-1.5 py-0.5 rounded-full text-[10px] font-medium"
+                    class="inline-flex items-center px-1.5 py-0.5 rounded-full text-xs font-medium"
                     :class="r.status === 'pending' ? 'bg-amber-50 text-amber-600' : r.status === 'rejected' ? 'bg-red-50 text-red-600' : 'bg-green-50 text-green-600'"
                   >
                     {{ r.status === 'pending' ? '待处理' : r.status === 'rejected' ? '已拒绝' : '已完成' }}
                   </span>
                   <p
                     v-if="r.status === 'rejected' && r.rejectReason"
-                    class="text-[10px] text-red-400 mt-1 max-w-[180px] leading-snug"
+                    class="text-xs text-red-400 mt-1 max-w-[180px] leading-snug"
                     :title="r.rejectReason"
                   >理由：{{ r.rejectReason }}</p>
                 </td>
@@ -359,7 +356,7 @@ async function copyText(text: string) {
                 <td class="px-5 py-3 whitespace-nowrap">
                   <div v-if="r.status === 'pending'" class="flex items-center gap-1 whitespace-nowrap">
                     <button
-                      class="inline-flex items-center gap-1 px-2 py-1 rounded-lg text-xs whitespace-nowrap text-blue-500 hover:bg-blue-50 transition-colors"
+                      class="inline-flex items-center gap-1 px-2 py-1 rounded-lg text-xs whitespace-nowrap text-brand-600 hover:bg-brand-50 transition-colors"
                       @click="handleMarkDone(r)"
                     >
                       <CheckCircle class="w-3 h-3 shrink-0" />
@@ -383,42 +380,42 @@ async function copyText(text: string) {
     </div>
 
     <!-- 拒绝理由弹窗 -->
-    <Teleport to="body">
-      <div
-        v-if="rejectTarget"
-        class="fixed inset-0 z-50 bg-black/40 flex items-center justify-center px-4"
-        @click.self="closeRejectModal"
-      >
-        <div class="bg-white rounded-2xl w-full max-w-md p-6 shadow-xl">
-          <div class="flex items-center gap-3 mb-4">
-            <div class="w-9 h-9 rounded-full bg-red-50 flex items-center justify-center">
-              <XCircle class="w-5 h-5 text-red-500" />
-            </div>
-            <div>
-              <h3 class="text-base font-bold text-gray-900">拒绝适配申请</h3>
-              <p class="text-xs text-gray-400">{{ rejectTarget.schoolName }}</p>
-            </div>
-          </div>
-          <label class="block text-sm text-gray-600 mb-1.5">拒绝理由 <span class="text-red-500">*</span></label>
-          <textarea
-            v-model="rejectReason"
-            rows="4"
-            maxlength="500"
-            placeholder="请说明拒绝理由（必填），理由将通过邮件通知该学校的联系邮箱"
-            class="w-full rounded-lg border border-gray-200 px-3 py-2.5 text-sm text-gray-900 placeholder:text-gray-300 focus:outline-none focus:ring-2 focus:ring-red-100 focus:border-red-300 resize-none"
-          ></textarea>
-          <p class="text-[11px] text-gray-400 mt-1">发送后将邮件通知该条记录的联系邮箱</p>
-          <div class="flex justify-end gap-2 mt-5">
-            <Button variant="outline" size="sm" class="h-9 text-xs" :disabled="rejectSubmitting" @click="closeRejectModal">
-              取消
-            </Button>
-            <Button size="sm" class="h-9 text-xs bg-red-500 hover:bg-red-600 text-white" :disabled="rejectSubmitting" @click="confirmReject">
-              <XCircle class="w-3.5 h-3.5 mr-1" />
-              {{ rejectSubmitting ? '提交中...' : '确认拒绝' }}
-            </Button>
-          </div>
+    <AppDialog
+      :open="!!rejectTarget"
+      variant="center"
+      wrapper-class="px-4"
+      panel-class="max-w-md p-6"
+      :dismissable="!rejectSubmitting"
+      title="拒绝适配申请"
+      @update:open="(v: boolean) => { if (!v) closeRejectModal() }"
+    >
+      <div class="flex items-center gap-3 mb-4">
+        <div class="w-9 h-9 rounded-full bg-red-50 flex items-center justify-center">
+          <XCircle class="w-5 h-5 text-red-500" />
+        </div>
+        <div>
+          <h3 class="text-base font-bold text-gray-900">拒绝适配申请</h3>
+          <p class="text-xs text-gray-400">{{ rejectTarget?.schoolName }}</p>
         </div>
       </div>
-    </Teleport>
+      <label class="block text-sm text-gray-600 mb-1.5">拒绝理由 <span class="text-red-500">*</span></label>
+      <textarea
+        v-model="rejectReason"
+        rows="4"
+        maxlength="500"
+        placeholder="请说明拒绝理由（必填），理由将通过邮件通知该学校的联系邮箱"
+        class="w-full rounded-lg border border-gray-200 px-3 py-2.5 text-sm text-gray-900 placeholder:adm-muted focus:outline-none focus:ring-2 focus:ring-red-100 focus:border-red-300 resize-none"
+      ></textarea>
+      <p class="text-xs text-gray-400 mt-1">发送后将邮件通知该条记录的联系邮箱</p>
+      <div class="flex justify-end gap-2 mt-5">
+        <Button variant="outline" size="sm" class="h-9 text-xs" :disabled="rejectSubmitting" @click="closeRejectModal">
+          取消
+        </Button>
+        <Button size="sm" class="h-9 text-xs bg-red-500 hover:bg-red-600 text-white" :disabled="rejectSubmitting" @click="confirmReject">
+          <XCircle class="w-3.5 h-3.5 mr-1" />
+          {{ rejectSubmitting ? '提交中...' : '确认拒绝' }}
+        </Button>
+      </div>
+    </AppDialog>
   </div>
 </template>

frondend/src/views/admin/AdminSettings.vue

@@ -1,6 +1,6 @@
 <script setup lang="ts">
 import { ref, onMounted } from 'vue'
-import { Save, LoaderCircle, Euro, Gift, Mail, Send, KeyRound } from 'lucide-vue-next'
+import { Save, LoaderCircle, Euro, Gift, Mail, Send, KeyRound, Coins, Settings as SettingsIcon } from 'lucide-vue-next'
 import { Button } from '@/components/ui/button'
 import { Input } from '@/components/ui/input'
 import { Label } from '@/components/ui/label'
@@ -17,7 +17,12 @@ const vipWeekPrice = ref('')
 const vipMonthPrice = ref('')
 const inviterReward = ref('')
 const inviteeReward = ref('')
-const registerReward = ref('')
+
+// 扣款额度设置（打卡/请假/销假每次成功扣减的可签到次数，支持小数与 0）
+const deductSaving = ref(false)
+const deductCheckin = ref('1')
+const deductLeave = ref('1')
+const deductReport = ref('1')
 
 // 邮件通知（SMTP）设置
 const mailSaving = ref(false)
@@ -45,7 +50,9 @@ async function loadSettings() {
     vipMonthPrice.value = settings['vip_price_month'] || '100.00'
     inviterReward.value = settings['inviter_reward_per_invite'] || '0.50'
     inviteeReward.value = settings['invitee_reward_per_invite'] || '0.50'
-    registerReward.value = settings['register_reward'] || '1.00'
+    deductCheckin.value = settings['deduct_checkin'] || '1.00'
+    deductLeave.value = settings['deduct_leave'] || '1.00'
+    deductReport.value = settings['deduct_report'] || '1.00'
     smtpHost.value = settings['smtp_host'] || ''
     smtpPort.value = settings['smtp_port'] || '465'
     smtpSecure.value = settings['smtp_secure'] || ''
@@ -106,6 +113,37 @@ async function handleTestMail() {
   }
 }
 
+// ======== 扣款额度设置 ========
+async function handleSaveDeduct() {
+  const checkin = parseFloat(deductCheckin.value)
+  if (isNaN(checkin) || checkin < 0) {
+    message.info('打卡扣款额度请输入不小于 0 的数字')
+    return
+  }
+  const leave = parseFloat(deductLeave.value)
+  if (isNaN(leave) || leave < 0) {
+    message.info('请假扣款额度请输入不小于 0 的数字')
+    return
+  }
+  const report = parseFloat(deductReport.value)
+  if (isNaN(report) || report < 0) {
+    message.info('销假扣款额度请输入不小于 0 的数字')
+    return
+  }
+
+  deductSaving.value = true
+  try {
+    await adminApi.updateSetting('deduct_checkin', String(checkin))
+    await adminApi.updateSetting('deduct_leave', String(leave))
+    await adminApi.updateSetting('deduct_report', String(report))
+    message.success('保存成功')
+  } catch (e: any) {
+    message.error(e?.response?.data?.message || e?.message || '保存失败')
+  } finally {
+    deductSaving.value = false
+  }
+}
+
 async function handleSave() {
   const deduction = parseFloat(baseDeduction.value)
   if (isNaN(deduction) || deduction <= 0) {
@@ -122,11 +160,6 @@ async function handleSave() {
     message.info('被邀请人奖励积分请输入有效的非负数')
     return
   }
-  const regReward = parseFloat(registerReward.value)
-  if (isNaN(regReward) || regReward < 0) {
-    message.info('直接注册奖励积分请输入有效的非负数')
-    return
-  }
   const vipWeek = parseFloat(vipWeekPrice.value)
   if (isNaN(vipWeek) || vipWeek <= 0) {
     message.info('VIP 周卡售价请输入有效的正数')
@@ -145,7 +178,6 @@ async function handleSave() {
     await adminApi.updateSetting('vip_price_month', vipMonth.toFixed(2))
     await adminApi.updateSetting('inviter_reward_per_invite', invReward.toFixed(2))
     await adminApi.updateSetting('invitee_reward_per_invite', ineeReward.toFixed(2))
-    await adminApi.updateSetting('register_reward', regReward.toFixed(2))
     message.success('保存成功')
   } catch (e: any) {
     message.error(e?.response?.data?.message || e?.message || '保存失败')
@@ -156,58 +188,67 @@ async function handleSave() {
 </script>
 
 <template>
-  <div class="p-6">
-    <h1 class="text-xl font-bold text-gray-900 mb-6">系统设置</h1>
+  <div class="adm-page">
+    <div class="adm-head">
+      <div class="flex items-center gap-3">
+        <div class="adm-head-icon"><SettingsIcon class="w-5 h-5" /></div>
+        <div>
+          <h1 class="adm-title">系统设置</h1>
+          <p class="adm-sub">扣费、价格、邀请奖励与邮件通知</p>
+        </div>
+      </div>
+    </div>
 
-    <Card class="max-w-lg">
-      <div class="border-b border-gray-100 px-6 py-4 flex items-center gap-2">
-        <Euro class="w-4 h-4 text-blue-500" />
-        <span class="font-semibold text-gray-900 text-sm">基础扣费设置</span>
+    <div class="grid grid-cols-1 xl:grid-cols-2 gap-4 md:gap-5 items-start">
+    <Card class="adm-card shadow-none">
+      <div class="adm-card-head justify-start">
+        <span class="w-8 h-8 rounded-xl bg-brand-50 text-brand-600 flex items-center justify-center"><Euro class="w-4 h-4" /></span>
+        <span class="adm-card-title">基础扣费设置</span>
       </div>
       <div class="p-6 space-y-4">
         <div v-if="loading" class="flex items-center justify-center py-8">
-          <LoaderCircle class="w-5 h-5 animate-spin text-blue-500" />
+          <LoaderCircle class="w-5 h-5 animate-spin text-brand-500" />
         </div>
 
         <template v-else>
           <div>
-            <Label class="mb-1 block text-sm text-gray-600">每次运行基础抵扣金额（元）</Label>
+            <Label class="mb-1.5 block text-sm font-medium text-gray-700">每次运行基础抵扣金额（元）</Label>
             <Input
               v-model="baseDeduction"
               type="number"
               step="0.01"
               min="0.01"
-              class="h-10 text-sm max-w-[200px]"
+              class="h-10 text-sm max-w-[240px]"
             />
-            <p class="text-xs text-gray-400 mt-1">
+            <p class="text-xs text-gray-500 mt-1.5">
               生成CDK时的成本基价，实际成本 = 基价 × 次数 × 代理费率
             </p>
           </div>
 
           <div>
-            <Label class="mb-1 block text-sm text-gray-600">⭐ VIP 周卡售价（元 / 7天）</Label>
+            <Label class="mb-1.5 block text-sm font-medium text-gray-700">VIP 周卡售价（元 / 7天）</Label>
             <Input
               v-model="vipWeekPrice"
               type="number"
               step="0.01"
               min="0.01"
-              class="h-10 text-sm max-w-[200px]"
+              class="h-10 text-sm max-w-[240px]"
             />
-            <p class="text-xs text-gray-400 mt-1">
+            <p class="text-xs text-gray-500 mt-1.5">
               生成 VIP 周卡 CDK 的单张售价，VIP 有效期内执行任务免扣次数
             </p>
           </div>
 
           <div>
-            <Label class="mb-1 block text-sm text-gray-600">⭐ VIP 月卡售价（元 / 30天）</Label>
+            <Label class="mb-1.5 block text-sm font-medium text-gray-700">VIP 月卡售价（元 / 30天）</Label>
             <Input
               v-model="vipMonthPrice"
               type="number"
               step="0.01"
               min="0.01"
-              class="h-10 text-sm max-w-[200px]"
+              class="h-10 text-sm max-w-[240px]"
             />
-            <p class="text-xs text-gray-400 mt-1">
+            <p class="text-xs text-gray-500 mt-1.5">
               生成 VIP 月卡 CDK 的单张售价，前台开通/续费 VIP 展示此价格
             </p>
           </div>
@@ -222,65 +263,84 @@ async function handleSave() {
       </div>
     </Card>
 
+    <!-- 扣款额度设置 -->
+    <Card class="adm-card shadow-none">
+      <div class="adm-card-head justify-start">
+        <span class="w-8 h-8 rounded-xl bg-brand-50 text-brand-600 flex items-center justify-center"><Coins class="w-4 h-4" /></span>
+        <span class="adm-card-title">扣款额度设置</span>
+      </div>
+      <div class="p-6 space-y-4">
+        <p class="text-xs text-gray-400 leading-relaxed -mt-2">
+          每次成功执行对应操作扣减的可签到次数，支持小数（如 0.5）与 0（0 = 不扣费）。VIP 会员有效期内始终免扣。
+        </p>
+        <div v-if="loading" class="flex items-center justify-center py-8">
+          <LoaderCircle class="w-5 h-5 animate-spin text-brand-500" />
+        </div>
+        <template v-else>
+          <div>
+            <Label class="mb-1.5 block text-sm font-medium text-gray-700">打卡扣款额度（次）</Label>
+            <Input v-model="deductCheckin" type="number" step="0.1" min="0" class="h-10 text-sm max-w-[240px]" />
+          </div>
+          <div>
+            <Label class="mb-1.5 block text-sm font-medium text-gray-700">请假扣款额度（次）</Label>
+            <Input v-model="deductLeave" type="number" step="0.1" min="0" class="h-10 text-sm max-w-[240px]" />
+          </div>
+          <div>
+            <Label class="mb-1.5 block text-sm font-medium text-gray-700">销假扣款额度（次）</Label>
+            <Input v-model="deductReport" type="number" step="0.1" min="0" class="h-10 text-sm max-w-[240px]" />
+          </div>
+          <div class="flex gap-2 pt-2">
+            <Button :disabled="deductSaving" @click="handleSaveDeduct">
+              <Save class="w-4 h-4 mr-1" />
+              {{ deductSaving ? '保存中...' : '保存设置' }}
+            </Button>
+          </div>
+        </template>
+      </div>
+    </Card>
+
     <!-- 邀请奖励设置 -->
-    <Card class="max-w-lg mt-6">
-      <div class="border-b border-gray-100 px-6 py-4 flex items-center gap-2">
-        <Gift class="w-4 h-4 text-purple-500" />
-        <span class="font-semibold text-gray-900 text-sm">邀请奖励设置</span>
+    <Card class="adm-card shadow-none">
+      <div class="adm-card-head justify-start">
+        <span class="w-8 h-8 rounded-xl bg-brand-50 text-brand-600 flex items-center justify-center"><Gift class="w-4 h-4" /></span>
+        <span class="adm-card-title">邀请奖励设置</span>
       </div>
       <div class="p-6 space-y-4">
         <template v-if="!loading">
           <div>
-            <Label class="mb-1 block text-sm text-gray-600">邀请人每次获奖励积分</Label>
+            <Label class="mb-1.5 block text-sm font-medium text-gray-700">邀请人每次获奖励积分</Label>
             <div class="flex items-center gap-2">
               <Input
                 v-model="inviterReward"
                 type="number"
                 step="0.1"
                 min="0"
-                class="h-10 text-sm max-w-[200px]"
+                class="h-10 text-sm max-w-[240px]"
               />
               <span class="text-sm text-gray-500">积分</span>
             </div>
-            <p class="text-xs text-gray-400 mt-1">
+            <p class="text-xs text-gray-500 mt-1.5">
               每成功邀请一位新用户，邀请人获得的奖励积分数（满1积分可兑换1次签到）
             </p>
           </div>
 
           <div>
-            <Label class="mb-1 block text-sm text-gray-600">被邀请人每次获奖励积分</Label>
+            <Label class="mb-1.5 block text-sm font-medium text-gray-700">被邀请人每次获奖励积分</Label>
             <div class="flex items-center gap-2">
               <Input
                 v-model="inviteeReward"
                 type="number"
                 step="0.1"
                 min="0"
-                class="h-10 text-sm max-w-[200px]"
+                class="h-10 text-sm max-w-[240px]"
               />
               <span class="text-sm text-gray-500">积分</span>
             </div>
-            <p class="text-xs text-gray-400 mt-1">
+            <p class="text-xs text-gray-500 mt-1.5">
               新用户通过邀请链接注册时，新用户获得的奖励积分数（满1积分可兑换1次签到）
             </p>
           </div>
 
-          <div>
-            <Label class="mb-1 block text-sm text-gray-600">直接注册奖励积分</Label>
-            <div class="flex items-center gap-2">
-              <Input
-                v-model="registerReward"
-                type="number"
-                step="0.1"
-                min="0"
-                class="h-10 text-sm max-w-[200px]"
-              />
-              <span class="text-sm text-gray-500">积分</span>
-            </div>
-            <p class="text-xs text-gray-400 mt-1">
-              新用户未填写邀请码直接注册时，赠送的奖励积分数（满1积分可兑换1次签到），设为 0 表示不赠送
-            </p>
-          </div>
-
           <div class="flex gap-2 pt-2">
             <Button :disabled="saving" @click="handleSave">
               <Save class="w-4 h-4 mr-1" />
@@ -292,10 +352,10 @@ async function handleSave() {
     </Card>
 
     <!-- 邮件通知设置 -->
-    <Card class="max-w-2xl mt-6">
-      <div class="border-b border-gray-100 px-6 py-4 flex items-center gap-2">
-        <Mail class="w-4 h-4 text-green-500" />
-        <span class="font-semibold text-gray-900 text-sm">邮件通知设置（SMTP）</span>
+    <Card class="adm-card shadow-none xl:col-span-2">
+      <div class="adm-card-head justify-start">
+        <span class="w-8 h-8 rounded-xl bg-brand-50 text-brand-600 flex items-center justify-center"><Mail class="w-4 h-4" /></span>
+        <span class="adm-card-title">邮件通知设置（SMTP）</span>
       </div>
       <div class="p-6 space-y-4">
         <p class="text-xs text-gray-400 leading-relaxed -mt-2">
@@ -303,49 +363,49 @@ async function handleSave() {
           未配置时相关邮件通知自动跳过，不影响其他功能。
         </p>
 
-        <div class="grid grid-cols-2 gap-4">
+        <div class="grid grid-cols-1 sm:grid-cols-2 gap-4">
           <div>
-            <Label class="mb-1 block text-sm text-gray-600">SMTP 服务器地址</Label>
+            <Label class="mb-1.5 block text-sm font-medium text-gray-700">SMTP 服务器地址</Label>
             <Input v-model="smtpHost" placeholder="smtp.qq.com" class="h-10 text-sm" />
           </div>
           <div>
-            <Label class="mb-1 block text-sm text-gray-600">SMTP 端口</Label>
+            <Label class="mb-1.5 block text-sm font-medium text-gray-700">SMTP 端口</Label>
             <Input v-model="smtpPort" placeholder="465" class="h-10 text-sm" />
-            <p class="text-xs text-gray-400 mt-1">465=SSL，587/25=STARTTLS，端口决定加密方式</p>
+            <p class="text-xs text-gray-500 mt-1.5">465=SSL，587/25=STARTTLS，端口决定加密方式</p>
           </div>
         </div>
 
-        <div class="grid grid-cols-2 gap-4">
+        <div class="grid grid-cols-1 sm:grid-cols-2 gap-4">
           <div>
-            <Label class="mb-1 block text-sm text-gray-600">SMTP 用户名</Label>
+            <Label class="mb-1.5 block text-sm font-medium text-gray-700">SMTP 用户名</Label>
             <Input v-model="smtpUser" placeholder="your@qq.com" class="h-10 text-sm" />
           </div>
           <div>
-            <Label class="mb-1 block text-sm text-gray-600">SMTP 密码 / 授权码</Label>
+            <Label class="mb-1.5 block text-sm font-medium text-gray-700">SMTP 密码 / 授权码</Label>
             <div class="relative">
               <Input v-model="smtpPassword" type="password" placeholder="授权码" class="h-10 text-sm pr-9" />
-              <KeyRound class="absolute right-3 top-1/2 -translate-y-1/2 w-4 h-4 text-gray-300" />
+              <KeyRound class="absolute right-3 top-1/2 -translate-y-1/2 w-4 h-4 adm-muted" />
             </div>
           </div>
         </div>
 
-        <div class="grid grid-cols-2 gap-4">
+        <div class="grid grid-cols-1 sm:grid-cols-2 gap-4">
           <div>
-            <Label class="mb-1 block text-sm text-gray-600">发件人地址</Label>
+            <Label class="mb-1.5 block text-sm font-medium text-gray-700">发件人地址</Label>
             <Input v-model="smtpFrom" placeholder="留空则使用 SMTP 用户名" class="h-10 text-sm" />
           </div>
           <div>
-            <Label class="mb-1 block text-sm text-gray-600">发件人显示名称</Label>
+            <Label class="mb-1.5 block text-sm font-medium text-gray-700">发件人显示名称</Label>
             <Input v-model="smtpFromName" placeholder="小助手" class="h-10 text-sm" />
           </div>
         </div>
 
-        <div class="grid grid-cols-2 gap-4">
+        <div class="grid grid-cols-1 sm:grid-cols-2 gap-4">
           <div>
-            <Label class="mb-1 block text-sm text-gray-600">加密方式</Label>
+            <Label class="mb-1.5 block text-sm font-medium text-gray-700">加密方式</Label>
             <select
               v-model="smtpSecure"
-              class="h-10 w-full px-3 rounded-lg border border-gray-200 text-sm text-gray-700 bg-white focus:outline-none focus:ring-2 focus:ring-blue-500/30 focus:border-blue-400"
+              class="h-10 w-full px-3 rounded-lg border border-gray-200 text-sm text-gray-700 bg-white focus:outline-none focus:ring-2 focus:ring-brand-400/20 focus:border-brand-400"
             >
               <option value="">自动（按端口判断）</option>
               <option value="ssl">SSL（465）</option>
@@ -354,9 +414,9 @@ async function handleSave() {
             </select>
           </div>
           <div>
-            <Label class="mb-1 block text-sm text-gray-600">管理员通知邮箱</Label>
+            <Label class="mb-1.5 block text-sm font-medium text-gray-700">管理员通知邮箱</Label>
             <Input v-model="adminEmails" placeholder="admin@qq.com（多个用逗号分隔）" class="h-10 text-sm" />
-            <p class="text-xs text-gray-400 mt-1">新待适配学校提交时提醒到此邮箱</p>
+            <p class="text-xs text-gray-500 mt-1.5">新待适配学校提交时提醒到此邮箱</p>
           </div>
         </div>
 
@@ -369,7 +429,7 @@ async function handleSave() {
             variant="outline"
             :disabled="mailTesting || mailSaving"
             @click="handleTestMail"
-            class="text-blue-500"
+            class="text-brand-600"
           >
             <Send v-if="!mailTesting" class="w-4 h-4 mr-1" />
             <LoaderCircle v-else class="w-4 h-4 mr-1 animate-spin" />
@@ -378,5 +438,6 @@ async function handleSave() {
         </div>
       </div>
     </Card>
+    </div>
   </div>
 </template>

frondend/src/views/admin/AdminSetup.vue

@@ -59,11 +59,11 @@ async function handleSetup() {
 </script>
 
 <template>
-  <div class="min-h-dvh flex items-center justify-center bg-gradient-to-br from-blue-50 to-indigo-100 p-4">
+  <div class="min-h-dvh flex items-center justify-center bg-gradient-to-br from-brand-50 via-gray-50 to-sky-50 p-4">
     <div class="w-full max-w-md">
       <!-- 标题 -->
       <div class="text-center mb-8">
-        <div class="w-16 h-16 rounded-2xl bg-blue-600 flex items-center justify-center mx-auto mb-4 shadow-lg shadow-blue-200">
+        <div class="w-16 h-16 rounded-2xl bg-brand-gradient flex items-center justify-center mx-auto mb-4 shadow-xl shadow-brand-500/30">
           <Shield class="w-8 h-8 text-white" />
         </div>
         <h1 class="text-2xl font-bold text-gray-900">初始化管理员</h1>

frondend/src/views/admin/AdminTicketDetail.vue

@@ -75,66 +75,77 @@ async function changeStatus(status: string) {
 </script>
 
 <template>
-  <div class="flex flex-col min-h-full bg-gray-50">
-    <!-- 顶部导航 -->
-    <div class="sticky top-0 z-10 bg-white border-b border-gray-100">
-      <div class="flex items-center px-4 h-12">
-        <button class="w-8 h-8 flex items-center justify-center -ml-1 text-gray-600" @click="router.back()">
+  <div class="adm-page flex flex-col">
+    <!-- 页头：返回 + 标题 -->
+    <div class="adm-head">
+      <div class="flex items-center gap-3 min-w-0">
+        <button class="w-10 h-10 flex-shrink-0 flex items-center justify-center rounded-xl border border-gray-200 bg-white text-gray-600 hover:bg-gray-50" aria-label="返回" @click="router.back()">
           <ArrowLeft class="w-5 h-5" />
         </button>
-        <h1 class="flex-1 text-base font-semibold text-gray-900 truncate mr-7">
-          {{ ticket?.title || '工单详情' }}
-        </h1>
+        <div class="min-w-0">
+          <h1 class="adm-title truncate">{{ ticket?.title || '工单详情' }}</h1>
+          <p class="adm-sub">工单 #{{ ticket?.id ?? '' }}</p>
+        </div>
       </div>
     </div>
 
     <div v-if="loading" class="flex-1 flex items-center justify-center">
-      <p class="text-sm text-gray-400">加载中...</p>
+      <p class="adm-sub">加载中...</p>
     </div>
 
-    <template v-else-if="ticket">
+    <div v-else-if="ticket" class="adm-card overflow-hidden flex flex-col">
       <!-- 用户信息卡片 -->
-      <div class="bg-white border-b border-gray-100 px-4 py-3">
+      <div class="px-5 py-4 border-b border-gray-100">
         <div class="flex items-center justify-between">
-          <div>
-            <p class="text-sm font-medium text-gray-900">{{ ticket.realName || ticket.username }}</p>
-            <p class="text-xs text-gray-400">{{ ticket.schoolName }}</p>
+          <div class="flex items-center gap-3 min-w-0">
+            <span class="w-10 h-10 rounded-full bg-sky-50 text-sky-600 flex items-center justify-center font-bold flex-shrink-0">{{ ticket.realName?.[0] || ticket.username?.[0] || '用' }}</span>
+            <div class="min-w-0">
+              <p class="text-sm font-semibold text-gray-900 truncate">{{ ticket.realName || ticket.username }}</p>
+              <p class="text-xs text-gray-500 truncate">{{ ticket.schoolName }}</p>
+            </div>
           </div>
           <div class="flex items-center gap-2">
             <span
-              class="inline-flex items-center px-2.5 py-1 rounded-full text-xs font-medium"
-              :class="ticketApi.TICKET_STATUS_COLOR[ticket.status] || 'bg-gray-100 text-gray-600'"
+              v-if="ticket.deleted"
+              class="adm-badge no-dot adm-badge-gray"
+              title="用户已在客户端删除该工单，管理员仍可见"
+            >
+              用户已删除
+            </span>
+            <span
+              class="adm-badge"
+              :class="ticketApi.TICKET_STATUS_COLOR[ticket.status] || 'adm-badge-gray'"
             >
               {{ ticketApi.TICKET_STATUS_MAP[ticket.status] || ticket.status }}
             </span>
           </div>
         </div>
         <!-- 状态操作按钮 -->
-        <div class="flex gap-2 mt-3">
+        <div class="flex gap-2 mt-3 flex-wrap">
           <button
             v-if="ticket.status === 'pending'"
-            class="px-3 py-1 rounded-lg text-xs font-medium bg-blue-500 text-white hover:bg-blue-600 transition-colors"
+            class="h-8 px-3.5 rounded-full text-xs font-semibold bg-brand-gradient text-white shadow-sm shadow-brand-500/20 hover:brightness-105"
             @click="changeStatus('processing')"
           >
             开始处理
           </button>
           <button
             v-if="ticket.status === 'processing'"
-            class="px-3 py-1 rounded-lg text-xs font-medium bg-green-500 text-white hover:bg-green-600 transition-colors"
+            class="h-8 px-3.5 rounded-full text-xs font-semibold adm-btn-success hover:brightness-105"
             @click="changeStatus('resolved')"
           >
             标记已解决
           </button>
           <button
             v-if="ticket.status !== 'closed' && ticket.status !== 'resolved'"
-            class="px-3 py-1 rounded-lg text-xs font-medium bg-green-100 text-green-700 hover:bg-green-200 transition-colors"
+            class="h-8 px-3.5 rounded-full text-xs font-semibold bg-green-50 text-green-700 hover:bg-green-100"
             @click="changeStatus('resolved')"
           >
             直接解决
           </button>
           <button
             v-if="ticket.status !== 'closed'"
-            class="px-3 py-1 rounded-lg text-xs font-medium bg-gray-100 text-gray-600 hover:bg-gray-200 transition-colors"
+            class="h-8 px-3.5 rounded-full text-xs font-semibold bg-gray-100 text-gray-600 hover:bg-gray-200"
             @click="changeStatus('closed')"
           >
             关闭工单
@@ -143,12 +154,12 @@ async function changeStatus(status: string) {
       </div>
 
       <!-- 消息区域 -->
-      <div class="flex-1 overflow-y-auto px-4 py-4 space-y-4">
+      <div class="flex-1 overflow-y-auto px-5 py-5 space-y-4 bg-gray-50 min-h-[320px] max-h-[60vh]">
         <!-- 初始内容 -->
         <div class="flex justify-start">
           <div class="max-w-[85%]">
             <div class="flex items-center gap-2 mb-1">
-              <span class="w-6 h-6 rounded-full bg-blue-500 text-white text-xs flex items-center justify-center font-medium">
+              <span class="w-7 h-7 rounded-full bg-sky-50 text-sky-600 text-xs flex items-center justify-center font-bold">
                 {{ ticket.realName?.[0] || ticket.username?.[0] || '用' }}
               </span>
               <span class="text-xs text-gray-400">{{ ticket.createdAt }}</span>
@@ -170,8 +181,8 @@ async function changeStatus(status: string) {
           <div class="max-w-[85%]">
             <div class="flex items-center gap-2 mb-1" :class="msg.senderType === 'user' ? 'flex-row-reverse' : ''">
               <span
-                class="w-6 h-6 rounded-full text-white text-xs flex items-center justify-center font-medium flex-shrink-0"
-                :class="msg.senderType === 'admin' ? 'bg-green-500' : 'bg-blue-500'"
+                class="w-7 h-7 rounded-full text-xs flex items-center justify-center font-bold flex-shrink-0"
+                :class="msg.senderType === 'admin' ? 'bg-brand-gradient text-white' : 'bg-sky-50 text-sky-600'"
               >
                 {{ msg.senderType === 'admin' ? '管' : ticket.realName?.[0] || ticket.username?.[0] || '用' }}
               </span>
@@ -181,8 +192,8 @@ async function changeStatus(status: string) {
               class="px-4 py-3 border shadow-sm"
               :class="
                 msg.senderType === 'admin'
-                  ? 'bg-green-50 rounded-2xl rounded-tr-sm border-green-100'
-                  : 'bg-white rounded-2xl rounded-tl-sm border-gray-100'
+                  ? 'bg-brand-50 rounded-2xl rounded-tl-sm border-brand-100'
+                  : 'bg-white rounded-2xl rounded-tr-sm border-gray-100'
               "
             >
               <p class="text-sm text-gray-700 whitespace-pre-wrap">{{ msg.content }}</p>
@@ -194,17 +205,17 @@ async function changeStatus(status: string) {
       </div>
 
       <!-- 回复输入 -->
-      <div v-if="ticket.status !== 'closed'" class="bg-white border-t border-gray-100 px-4 py-3">
+      <div v-if="ticket.status !== 'closed'" class="border-t border-gray-100 px-5 py-3.5">
         <div class="flex items-center gap-2">
           <textarea
             v-model="replyContent"
             placeholder="输入回复内容..."
-            class="flex-1 h-10 max-h-24 px-3 py-2.5 text-sm border border-gray-200 rounded-xl resize-none focus:outline-none focus:ring-2 focus:ring-blue-500/20 focus:border-blue-400"
+            class="flex-1 h-11 max-h-24 px-3.5 py-2.5 text-sm bg-gray-50 border border-gray-200 rounded-xl resize-none focus:outline-none focus:bg-card focus:border-brand-400 focus:ring-4 focus:ring-brand-400/15"
             rows="1"
             @keydown.ctrl.enter="handleReply"
           ></textarea>
           <Button
-            class="h-10 w-10 rounded-xl flex-shrink-0"
+            class="h-11 w-11 rounded-xl flex-shrink-0"
             :disabled="!replyContent.trim() || replying"
             @click="handleReply"
           >
@@ -212,6 +223,6 @@ async function changeStatus(status: string) {
           </Button>
         </div>
       </div>
-    </template>
+    </div>
   </div>
 </template>

frondend/src/views/admin/AdminTicketList.vue

@@ -62,12 +62,20 @@ function goDetail(id: number) {
 </script>
 
 <template>
-  <div class="p-6">
-    <h1 class="text-xl font-bold text-gray-900 mb-6">工单管理</h1>
+  <div class="adm-page">
+    <div class="adm-head">
+      <div class="flex items-center gap-3">
+        <div class="adm-head-icon"><MessageSquare class="w-5 h-5" /></div>
+        <div>
+          <h1 class="adm-title">工单管理</h1>
+          <p class="adm-sub">处理用户的咨询与反馈</p>
+        </div>
+      </div>
+    </div>
 
     <!-- 筛选栏 -->
-    <div class="flex flex-col sm:flex-row gap-3 mb-4">
-      <div class="relative flex-1">
+    <div class="adm-toolbar">
+      <div class="relative flex-1 min-w-[200px] max-w-sm">
         <Search class="absolute left-3 top-1/2 -translate-y-1/2 w-4 h-4 text-gray-400" />
         <Input
           v-model="keyword"
@@ -75,16 +83,11 @@ function goDetail(id: number) {
           class="h-10 pl-9 text-sm"
         />
       </div>
-      <div class="flex gap-2 overflow-x-auto">
+      <div class="adm-seg overflow-x-auto max-w-full">
         <button
           v-for="opt in statusOptions"
           :key="opt.value"
-          class="px-3 py-1.5 rounded-lg text-xs font-medium whitespace-nowrap transition-colors"
-          :class="
-            filterStatus === opt.value
-              ? 'bg-blue-500 text-white'
-              : 'bg-gray-100 text-gray-600 hover:bg-gray-200'
-          "
+          :class="filterStatus === opt.value && 'is-active'"
           @click="filterStatus = opt.value"
         >
           {{ opt.label }}
@@ -93,29 +96,36 @@ function goDetail(id: number) {
     </div>
 
     <!-- 工单列表 -->
-    <div v-if="loading" class="text-center py-12 text-sm text-gray-400">加载中...</div>
-    <div v-else-if="filteredTickets.length === 0" class="text-center py-12">
-      <MessageSquare class="w-12 h-12 mx-auto text-gray-300 mb-2" />
-      <p class="text-sm text-gray-400">暂无工单</p>
+    <div v-if="loading" class="adm-card adm-empty">加载中...</div>
+    <div v-else-if="filteredTickets.length === 0" class="adm-card adm-empty">
+      <div class="adm-empty-icon"><MessageSquare class="w-6 h-6" /></div>
+      暂无工单
     </div>
-    <div v-else class="space-y-2">
+    <div v-else class="adm-card overflow-hidden divide-y divide-gray-100">
       <div
         v-for="t in filteredTickets"
         :key="t.id"
-        class="bg-white rounded-xl border border-gray-100 px-4 py-3.5 hover:bg-gray-50 transition-colors cursor-pointer"
+        class="px-5 py-4 hover:bg-gray-50 transition-colors cursor-pointer"
         @click="goDetail(t.id)"
       >
         <div class="flex items-center justify-between mb-1">
-          <h3 class="text-sm font-medium text-gray-900 truncate flex-1">{{ t.title }}</h3>
+          <h3 class="text-sm font-semibold text-gray-900 truncate flex-1">{{ t.title }}</h3>
           <span
-            class="ml-2 inline-flex items-center px-2 py-0.5 rounded-full text-xs font-medium flex-shrink-0"
-            :class="ticketApi.TICKET_STATUS_COLOR[t.status] || 'bg-gray-100 text-gray-600'"
+            v-if="t.deleted"
+            class="ml-2 adm-badge no-dot adm-badge-gray flex-shrink-0"
+            title="用户已在客户端删除该工单，管理员仍可见"
+          >
+            用户已删除
+          </span>
+          <span
+            class="ml-2 adm-badge flex-shrink-0"
+            :class="ticketApi.TICKET_STATUS_COLOR[t.status] || 'adm-badge-gray'"
           >
             {{ ticketApi.TICKET_STATUS_MAP[t.status] || t.status }}
           </span>
         </div>
-        <div class="flex items-center gap-3 text-xs text-gray-400">
-          <span class="text-gray-500 font-medium">{{ t.realName || t.username }}</span>
+        <div class="flex items-center gap-3 flex-wrap text-xs text-gray-500">
+          <span class="text-gray-700 font-medium">{{ t.realName || t.username }}</span>
           <span>{{ t.schoolName }}</span>
           <span>{{ t.createdAt }}</span>
           <span class="flex items-center gap-1">

frondend/src/views/admin/AdminUsers.vue

@@ -30,7 +30,7 @@ import {
 import { Button } from '@/components/ui/button'
 import { Input } from '@/components/ui/input'
 import { Label } from '@/components/ui/label'
-import { Card } from '@/components/ui/card'
+import AppDialog from '@/components/ui/dialog/AppDialog.vue'
 import { useMessage } from '@/composables/useMessage'
 import * as adminApi from '@/api/admin'
 
@@ -125,6 +125,8 @@ interface AdminTaskLogItem {
   isSuccess: boolean
   errorMessage: string
   createdAt: string
+  deleted: boolean
+  source: number
 }
 
 const showLogsModal = ref(false)
@@ -146,6 +148,12 @@ const logsStatusOptions = [
 
 const logsTotalPages = computed(() => Math.ceil(logsTotal.value / logsPageSize.value) || 1)
 
+// 格式化签到次数：整数不带小数点（3 → "3"），小数去尾零（0.50 → "0.5"）
+function fmtCount(v: number | null): string {
+  if (v === null || v === undefined) return '0'
+  return String(Math.round(v * 100) / 100)
+}
+
 function todayStr() {
   const d = new Date()
   const m = String(d.getMonth() + 1).padStart(2, '0')
@@ -229,6 +237,9 @@ function isTodayLogin(lastLoginAt: string) {
 function taskTypeLabel(t: string) {
   if (t === 'sign') return '签到'
   if (t === 'sleep_check') return '查寝'
+  if (t === 'return_register') return '返校登记'
+  if (t === 'leave_apply') return '请假'
+  if (t === 'leave_report') return '销假'
   return t
 }
 
@@ -362,16 +373,16 @@ function todayStatusLabel(s: string) {
 </script>
 
 <template>
-  <div class="p-6">
+  <div class="adm-page">
     <!-- 标题栏 -->
-    <div class="flex items-center justify-between mb-6">
+    <div class="adm-head">
       <div class="flex items-center gap-3">
-        <div class="w-10 h-10 rounded-xl bg-green-100 flex items-center justify-center">
-          <Users class="w-5 h-5 text-green-600" />
+        <div class="adm-head-icon">
+          <Users class="w-5 h-5" />
         </div>
         <div>
-          <h1 class="text-lg font-bold text-gray-900">用户管理</h1>
-          <p class="text-sm text-gray-400">管理今日校园用户</p>
+          <h1 class="adm-title">用户管理</h1>
+          <p class="adm-sub">管理今日校园用户</p>
         </div>
       </div>
     </div>
@@ -379,51 +390,51 @@ function todayStatusLabel(s: string) {
     <!-- 当天统计卡片 -->
     <div class="grid grid-cols-2 lg:grid-cols-4 gap-3 mb-5">
       <div
-        class="bg-white rounded-xl border border-gray-200 p-4 flex items-center gap-3 cursor-pointer transition-all hover:border-blue-300 hover:shadow-md group"
+        class="adm-card adm-stat cursor-pointer transition-all hover:border-brand-300 hover:shadow-md group"
         title="点击查看执行日志明细"
         @click="openTodayLogs"
       >
-        <div class="w-10 h-10 rounded-xl bg-blue-100 flex items-center justify-center flex-shrink-0">
-          <Activity class="w-5 h-5 text-blue-600" />
+        <div class="adm-stat-icon bg-brand-50 text-brand-600">
+          <Activity class="w-5 h-5" />
         </div>
         <div class="min-w-0 flex-1">
-          <p class="text-xs text-gray-400">当天执行总次数</p>
-          <p class="text-xl font-bold text-gray-900 leading-tight">{{ todayStats.executeCount }}</p>
+          <p class="adm-stat-label">当天执行总次数</p>
+          <p class="adm-stat-value">{{ todayStats.executeCount }}</p>
         </div>
-        <ChevronRight class="w-4 h-4 text-gray-300 group-hover:text-blue-400 transition-colors flex-shrink-0" />
+        <ChevronRight class="w-4 h-4 adm-muted group-hover:text-brand-500 transition-colors flex-shrink-0" />
       </div>
-      <div class="bg-white rounded-xl border border-gray-200 p-4 flex items-center gap-3">
-        <div class="w-10 h-10 rounded-xl bg-green-100 flex items-center justify-center flex-shrink-0">
-          <CheckCircle2 class="w-5 h-5 text-green-600" />
+      <div class="adm-card adm-stat">
+        <div class="adm-stat-icon bg-green-50 text-green-600">
+          <CheckCircle2 class="w-5 h-5" />
         </div>
         <div class="min-w-0">
           <p class="text-xs text-gray-400">成功执行总次数</p>
-          <p class="text-xl font-bold text-gray-900 leading-tight">{{ todayStats.successCount }}</p>
+          <p class="adm-stat-value">{{ todayStats.successCount }}</p>
         </div>
       </div>
-      <div class="bg-white rounded-xl border border-gray-200 p-4 flex items-center gap-3">
-        <div class="w-10 h-10 rounded-xl bg-orange-100 flex items-center justify-center flex-shrink-0">
-          <UserPlus class="w-5 h-5 text-orange-600" />
+      <div class="adm-card adm-stat">
+        <div class="adm-stat-icon bg-amber-50 text-amber-600">
+          <UserPlus class="w-5 h-5" />
         </div>
         <div class="min-w-0">
-          <p class="text-xs text-gray-400">当天新增用户数</p>
-          <p class="text-xl font-bold text-gray-900 leading-tight">{{ todayStats.newUserCount }}</p>
+          <p class="adm-stat-label">当天新增用户数</p>
+          <p class="adm-stat-value">{{ todayStats.newUserCount }}</p>
         </div>
       </div>
-      <div class="bg-white rounded-xl border border-gray-200 p-4 flex items-center gap-3">
-        <div class="w-10 h-10 rounded-xl bg-purple-100 flex items-center justify-center flex-shrink-0">
-          <LogIn class="w-5 h-5 text-purple-600" />
+      <div class="adm-card adm-stat">
+        <div class="adm-stat-icon bg-purple-50 text-purple-600">
+          <LogIn class="w-5 h-5" />
         </div>
         <div class="min-w-0">
-          <p class="text-xs text-gray-400">当天登录用户数</p>
-          <p class="text-xl font-bold text-gray-900 leading-tight">{{ todayStats.loginUserCount }}</p>
+          <p class="adm-stat-label">当天登录用户数</p>
+          <p class="adm-stat-value">{{ todayStats.loginUserCount }}</p>
         </div>
       </div>
     </div>
 
     <!-- 搜索栏 -->
-    <div class="mb-4 flex gap-2">
-      <div class="relative flex-1 max-w-xs">
+    <div class="adm-toolbar">
+      <div class="relative flex-1 min-w-[200px] max-w-sm">
         <Search class="absolute left-3 top-1/2 -translate-y-1/2 h-4 w-4 text-gray-400" />
         <Input
           v-model="keyword"
@@ -439,7 +450,7 @@ function todayStatusLabel(s: string) {
     </div>
 
     <!-- 表格 -->
-    <div class="bg-white rounded-xl border border-gray-200 overflow-hidden">
+    <div class="adm-card overflow-hidden">
       <!-- 加载骨架 -->
       <div v-if="loading" class="p-6 space-y-4">
         <div v-for="i in 5" :key="i" class="h-10 bg-gray-50 rounded animate-pulse" />
@@ -453,9 +464,9 @@ function todayStatusLabel(s: string) {
 
       <!-- 表格 -->
       <div v-else class="overflow-x-auto">
-        <table class="w-full text-sm table-fixed min-w-[1360px]">
+        <table class="adm-table w-full text-sm table-fixed min-w-[1360px]">
           <thead>
-            <tr class="bg-gray-50 text-left text-xs text-gray-500">
+            <tr>
               <th class="px-4 py-3 font-medium w-[10%]">学工号/姓名</th>
               <th class="px-4 py-3 font-medium w-[12%]">学校/设备码</th>
               <th class="px-4 py-3 font-medium w-[8%]">可执行/已执行</th>
@@ -472,24 +483,24 @@ function todayStatusLabel(s: string) {
           <tr
             v-for="user in users"
             :key="user.id"
-            class="border-t border-gray-50 transition-colors"
+            class=""
             :class="isTodayLogin(user.lastLoginAt)
-              ? 'bg-green-50 hover:bg-green-100/70'
-              : 'hover:bg-gray-50/50'"
+              ? 'adm-row-today'
+              : ''"
             :title="isTodayLogin(user.lastLoginAt) ? '该用户当天已登录' : undefined"
           >
             <td class="px-4 py-3">
               <p class="font-mono text-xs text-gray-700 truncate" :title="user.studentId">{{ user.studentId || '--' }}</p>
-              <p class="text-[10px] text-gray-400 truncate">{{ user.realName || '--' }}</p>
+              <p class="text-xs text-gray-400 truncate">{{ user.realName || '--' }}</p>
             </td>
             <td class="px-4 py-3">
               <p class="text-xs text-gray-700 truncate" :title="user.schoolName">{{ user.schoolName || '--' }}</p>
-              <p class="text-[10px] font-mono text-gray-400 flex items-center gap-1 min-w-0">
+              <p class="text-xs font-mono text-gray-400 flex items-center gap-1 min-w-0">
                 <span v-if="user.mobileCode" class="truncate" :title="user.mobileCode">{{ maskDeviceCode(user.mobileCode) }}</span>
                 <span v-else>未绑定</span>
                 <button
                   v-if="user.mobileCode"
-                  class="flex-shrink-0 text-gray-400 hover:text-blue-500 transition-colors"
+                  class="flex-shrink-0 text-gray-400 hover:text-brand-600 transition-colors"
                   :title="'复制完整设备码'"
                   @click="copyDeviceCode(user.mobileCode)"
                 >
@@ -498,40 +509,40 @@ function todayStatusLabel(s: string) {
               </p>
             </td>
             <td class="px-4 py-3">
-              <span class="font-medium text-gray-900">{{ user.signCount }}</span>
-              <span class="text-gray-300 mx-0.5">/</span>
+              <span class="font-medium text-gray-900">{{ fmtCount(user.signCount) }}</span>
+              <span class="adm-muted mx-0.5">/</span>
               <span class="text-gray-500">{{ user.executedCount }}</span>
             </td>
             <td class="px-4 py-3">
               <span
                 v-if="user.vipStatus === 'active'"
-                class="text-[10px] px-1.5 py-0.5 rounded-full font-medium bg-amber-100 text-amber-700"
+                class="adm-badge no-dot adm-badge-amber"
                 :title="`VIP 到期时间：${user.vipExpireAt}`"
               >
                 VIP · {{ user.vipExpireAt.slice(5, 10) }}
               </span>
               <span
                 v-else-if="user.vipStatus === 'expired'"
-                class="text-[10px] px-1.5 py-0.5 rounded-full font-medium bg-gray-100 text-gray-400"
+                class="adm-badge no-dot adm-badge-gray"
                 :title="`VIP 已于 ${user.vipExpireAt} 过期`"
               >
                 VIP · 已过期
               </span>
-              <span v-else class="text-xs text-gray-300">非VIP</span>
+              <span v-else class="text-xs adm-muted">非 VIP</span>
             </td>
             <td class="px-4 py-3">
               <span class="font-medium text-gray-900">{{ user.inviteReward }}</span>
-              <span class="text-gray-300 mx-0.5">/</span>
+              <span class="adm-muted mx-0.5">/</span>
               <span class="text-gray-500">{{ user.invitedCount }}</span>
             </td>
             <td class="px-4 py-3 truncate">
               <span v-if="user.inviterName" class="text-gray-700" :title="user.inviterName">{{ user.inviterName }}</span>
-              <span v-else class="text-gray-300">--</span>
+              <span v-else class="adm-muted">--</span>
             </td>
             <td class="px-4 py-3">
               <span
-                class="text-[10px] px-1.5 py-0.5 rounded-full font-medium"
-                :class="user.todayStatus === 'success' ? 'bg-green-100 text-green-700' : user.todayStatus === 'fail' ? 'bg-red-100 text-red-700' : 'bg-gray-100 text-gray-400'"
+                class="adm-badge"
+                :class="user.todayStatus === 'success' ? 'adm-badge-green' : user.todayStatus === 'fail' ? 'adm-badge-red' : 'adm-badge-gray'"
               >
                 {{ todayStatusLabel(user.todayStatus) }}
               </span>
@@ -539,12 +550,12 @@ function todayStatusLabel(s: string) {
             <td class="px-4 py-3 text-xs text-gray-500">{{ user.createdAt }}</td>
             <td class="px-4 py-3">
               <p class="font-mono text-xs text-gray-700" :title="user.lastLoginIp || undefined">{{ user.lastLoginIp || '--' }}</p>
-              <p class="text-[10px] text-gray-400">{{ user.lastLoginAt || '未登录' }}</p>
+              <p class="text-xs text-gray-400">{{ user.lastLoginAt || '未登录' }}</p>
             </td>
             <td class="px-4 py-3 text-center whitespace-nowrap">
               <div class="flex items-center justify-center gap-1">
                 <button
-                  class="inline-flex items-center gap-1 px-2 py-1 rounded-lg text-xs text-blue-500 hover:bg-blue-50 transition-colors"
+                  class="adm-link adm-link-brand"
                   @click="openDetail(user)"
                 >
                   <Eye class="w-3.5 h-3.5" />
@@ -552,7 +563,7 @@ function todayStatusLabel(s: string) {
                 </button>
                 <button
                   v-if="user.status === 'active'"
-                  class="inline-flex items-center gap-1 px-2 py-1 rounded-lg text-xs text-red-500 hover:bg-red-50 transition-colors"
+                  class="adm-link adm-link-red"
                   @click="openDisableModal(user)"
                 >
                   <Ban class="w-3.5 h-3.5" />
@@ -560,7 +571,7 @@ function todayStatusLabel(s: string) {
                 </button>
                 <button
                   v-else
-                  class="inline-flex items-center gap-1 px-2 py-1 rounded-lg text-xs text-green-500 hover:bg-green-50 transition-colors"
+                  class="adm-link adm-link-green"
                   @click="handleEnable(user)"
                 >
                   <CheckCircle class="w-3.5 h-3.5" />
@@ -576,13 +587,13 @@ function todayStatusLabel(s: string) {
       <!-- 分页 -->
       <div
         v-if="total > 0"
-        class="flex items-center justify-between px-4 py-3 border-t border-gray-100"
+        class="adm-pager"
       >
         <div class="flex items-center gap-3">
-          <span class="text-xs text-gray-400">共 {{ total }} 条</span>
+          <span>共 <b class="font-semibold text-gray-700 tabular-nums">{{ total }}</b> 条</span>
           <select
             :value="pageSize"
-            class="h-8 px-2 rounded-lg border border-gray-200 bg-white text-xs text-gray-500 focus:outline-none"
+            class="adm-select"
             @change="handlePageSize(Number(($event.target as HTMLSelectElement).value))"
           >
             <option v-for="n in pageSizeOptions" :key="n" :value="n">{{ n }} 条/页</option>
@@ -590,15 +601,15 @@ function todayStatusLabel(s: string) {
         </div>
         <div class="flex items-center gap-2">
           <button
-            class="w-8 h-8 rounded-lg flex items-center justify-center hover:bg-gray-100 disabled:opacity-30"
+            class="adm-pager-btn"
             :disabled="page <= 1"
             @click="handlePage(page - 1)"
           >
             <ChevronLeft class="w-4 h-4" />
           </button>
-          <span class="text-sm text-gray-600">{{ page }}/{{ totalPages }}</span>
+          <span class="text-sm text-gray-700 tabular-nums px-1">{{ page }} / {{ totalPages }}</span>
           <button
-            class="w-8 h-8 rounded-lg flex items-center justify-center hover:bg-gray-100 disabled:opacity-30"
+            class="adm-pager-btn"
             :disabled="page >= totalPages"
             @click="handlePage(page + 1)"
           >
@@ -609,332 +620,333 @@ function todayStatusLabel(s: string) {
     </div>
 
     <!-- 详情弹窗 -->
-    <Teleport to="body">
-      <Transition name="fade">
-        <div v-if="showDetail" class="fixed inset-0 z-50 flex items-center justify-center px-4">
-          <div class="absolute inset-0 bg-black/40" @click="showDetail = false" />
-          <div class="relative w-[90%] sm:max-w-lg bg-white rounded-2xl shadow-xl overflow-hidden max-h-[90vh] flex flex-col">
-            <div class="h-1.5 bg-gradient-to-r from-green-500 to-green-400" />
-            <div class="flex items-center justify-between px-5 pt-5 pb-3">
-              <div class="flex items-center gap-2.5">
-                <div class="w-9 h-9 rounded-xl bg-green-100 flex items-center justify-center">
-                  <Users class="w-5 h-5 text-green-500" />
-                </div>
-                <div>
-                  <h3 class="text-base font-semibold text-gray-900">用户详情</h3>
-                  <p class="text-xs text-gray-400">{{ detailUser?.username }}</p>
-                </div>
-              </div>
-              <button class="w-7 h-7 rounded-full bg-gray-100 flex items-center justify-center text-gray-400 hover:text-gray-600" @click="showDetail = false">
-                <X class="w-4 h-4" />
-              </button>
-            </div>
-
-            <div v-if="detailLoading" class="flex items-center justify-center py-16">
-              <LoaderCircle class="w-6 h-6 animate-spin text-green-500" />
-            </div>
-
-            <div v-else-if="detailUser" class="px-5 pb-5 overflow-y-auto space-y-3">
-              <!-- 状态 -->
-              <div class="flex items-center gap-2 px-3 py-2 rounded-lg"
-                :class="detailUser.status === 'disabled' ? 'bg-red-50' : 'bg-green-50'">
-                <AlertTriangle v-if="detailUser.status === 'disabled'" class="w-4 h-4 text-red-500" />
-                <CheckCircle v-else class="w-4 h-4 text-green-500" />
-                <span class="text-sm font-medium" :class="detailUser.status === 'disabled' ? 'text-red-700' : 'text-green-700'">
-                  {{ detailUser.status === 'disabled' ? '已禁用' : '正常' }}
-                </span>
-                <span v-if="detailUser.disabledReason" class="text-xs text-red-500 ml-2">原因：{{ detailUser.disabledReason }}</span>
-              </div>
-
-              <div class="grid grid-cols-2 gap-3">
-                <div class="bg-gray-50 rounded-xl p-3.5">
-                  <div class="flex items-center gap-2 text-xs text-gray-400 mb-1">
-                    <School class="w-3.5 h-3.5" /> 学校
-                  </div>
-                  <p class="text-sm font-medium text-gray-900">{{ detailUser.schoolName || '--' }}</p>
-                </div>
-                <div class="bg-gray-50 rounded-xl p-3.5">
-                  <div class="flex items-center gap-2 text-xs text-gray-400 mb-1">
-                    <IdCard class="w-3.5 h-3.5" /> 学工号
-                  </div>
-                  <p class="text-sm font-medium text-gray-900 font-mono">{{ detailUser.studentId || '--' }}</p>
-                </div>
-                <div class="bg-gray-50 rounded-xl p-3.5">
-                  <div class="flex items-center gap-2 text-xs text-gray-400 mb-1">
-                    <Lock class="w-3.5 h-3.5" /> 密码
-                  </div>
-                  <div class="flex items-center gap-1">
-                    <p class="text-sm font-medium text-gray-900 font-mono truncate">
-                      {{ showPasswordMap[detailUser.id] ? detailUser.password : '••••••••' }}
-                    </p>
-                    <button class="flex-shrink-0 text-gray-400 hover:text-gray-600" @click="togglePassword(detailUser.id)">
-                      <EyeOff v-if="!showPasswordMap[detailUser.id]" class="w-3.5 h-3.5" />
-                      <Eye v-else class="w-3.5 h-3.5" />
-                    </button>
-                  </div>
-                </div>
-                <div class="bg-gray-50 rounded-xl p-3.5">
-                  <div class="flex items-center gap-2 text-xs text-gray-400 mb-1">
-                    <ClipboardCheck class="w-3.5 h-3.5" /> 签到次数
-                  </div>
-                  <p class="text-sm font-medium text-gray-900">{{ detailUser.signCount }} 次</p>
-                </div>
-                <div class="bg-gray-50 rounded-xl p-3.5">
-                  <div class="flex items-center gap-2 text-xs text-gray-400 mb-1">
-                    <Gift class="w-3.5 h-3.5" /> 邀请积分
-                  </div>
-                  <p class="text-sm font-medium text-gray-900">{{ detailUser.inviteReward }}</p>
-                </div>
-                <div class="bg-gray-50 rounded-xl p-3.5">
-                  <div class="flex items-center gap-2 text-xs text-gray-400 mb-1">
-                    <UserPlus class="w-3.5 h-3.5" /> 邀请人数
-                  </div>
-                  <p class="text-sm font-medium text-gray-900">{{ detailUser.invitedCount }} 人</p>
-                </div>
-                <div class="bg-gray-50 rounded-xl p-3.5">
-                  <div class="flex items-center gap-2 text-xs text-gray-400 mb-1">
-                    <UserPlus class="w-3.5 h-3.5" /> 邀请人
-                  </div>
-                  <p class="text-sm font-medium text-gray-900 truncate">{{ detailUser.inviterName || '--' }}</p>
-                </div>
-                <div class="bg-gray-50 rounded-xl p-3.5">
-                  <div class="flex items-center gap-2 text-xs text-gray-400 mb-1">
-                    <ClipboardCheck class="w-3.5 h-3.5" /> 任务数
-                  </div>
-                  <p class="text-sm font-medium text-gray-900">{{ detailUser.taskCount }} 个</p>
-                </div>
-                <div class="bg-gray-50 rounded-xl p-3.5">
-                  <div class="flex items-center gap-2 text-xs text-gray-400 mb-1">
-                    <Smartphone class="w-3.5 h-3.5" /> 设备码
-                  </div>
-                  <p class="text-sm font-medium text-gray-900 font-mono text-xs truncate">{{ detailUser.mobileCode || '未绑定' }}</p>
-                </div>
-                <div class="bg-gray-50 rounded-xl p-3.5">
-                  <div class="flex items-center gap-2 text-xs text-gray-400 mb-1">
-                    <Calendar class="w-3.5 h-3.5" /> 注册时间
-                  </div>
-                  <p class="text-sm font-medium text-gray-900">{{ detailUser.createdAt }}</p>
-                </div>
-                <div class="bg-gray-50 rounded-xl p-3.5">
-                  <div class="flex items-center gap-2 text-xs text-gray-400 mb-1">
-                    <Clock class="w-3.5 h-3.5" /> 最后登录
-                  </div>
-                  <p class="text-sm font-medium text-gray-900">{{ detailUser.lastLoginAt || '--' }}</p>
-                </div>
-                <div class="bg-gray-50 rounded-xl p-3.5">
-                  <div class="flex items-center gap-2 text-xs text-gray-400 mb-1">
-                    <Globe class="w-3.5 h-3.5" /> 最后登录IP
-                  </div>
-                  <p class="text-sm font-medium text-gray-900 font-mono">{{ detailUser.lastLoginIp || '--' }}</p>
-                </div>
-              </div>
-            </div>
+    <AppDialog
+      :open="showDetail"
+      variant="center"
+      wrapper-class="px-4"
+      panel-class="w-[90%] sm:max-w-lg max-h-[90vh]"
+      :fade="true"
+      title="用户详情"
+      @update:open="(v: boolean) => { showDetail = v }"
+    >
+      <div class="h-1.5 bg-gradient-to-r from-green-500 to-green-400" />
+      <div class="flex items-center justify-between px-5 pt-5 pb-3">
+        <div class="flex items-center gap-2.5">
+          <div class="w-9 h-9 rounded-xl bg-green-100 flex items-center justify-center">
+            <Users class="w-5 h-5 text-green-500" />
+          </div>
+          <div>
+            <h3 class="text-base font-semibold text-gray-900">用户详情</h3>
+            <p class="text-xs text-gray-400">{{ detailUser?.username }}</p>
           </div>
         </div>
-      </Transition>
-    </Teleport>
+        <button class="w-7 h-7 rounded-full bg-gray-100 flex items-center justify-center text-gray-400 hover:text-gray-600" @click="showDetail = false">
+          <X class="w-4 h-4" />
+        </button>
+      </div>
+
+      <div v-if="detailLoading" class="flex items-center justify-center py-16">
+        <LoaderCircle class="w-6 h-6 animate-spin text-green-500" />
+      </div>
+
+      <div v-else-if="detailUser" class="px-5 pb-5 overflow-y-auto space-y-3">
+        <!-- 状态 -->
+        <div class="flex items-center gap-2 px-3 py-2 rounded-lg"
+          :class="detailUser.status === 'disabled' ? 'bg-red-50' : 'bg-green-50'">
+          <AlertTriangle v-if="detailUser.status === 'disabled'" class="w-4 h-4 text-red-500" />
+          <CheckCircle v-else class="w-4 h-4 text-green-500" />
+          <span class="text-sm font-medium" :class="detailUser.status === 'disabled' ? 'text-red-700' : 'text-green-700'">
+            {{ detailUser.status === 'disabled' ? '已禁用' : '正常' }}
+          </span>
+          <span v-if="detailUser.disabledReason" class="text-xs text-red-500 ml-2">原因：{{ detailUser.disabledReason }}</span>
+        </div>
+
+        <div class="grid grid-cols-2 gap-3">
+          <div class="bg-gray-50 rounded-xl p-3.5">
+            <div class="flex items-center gap-2 text-xs text-gray-400 mb-1">
+              <School class="w-3.5 h-3.5" /> 学校
+            </div>
+            <p class="text-sm font-medium text-gray-900">{{ detailUser.schoolName || '--' }}</p>
+          </div>
+          <div class="bg-gray-50 rounded-xl p-3.5">
+            <div class="flex items-center gap-2 text-xs text-gray-400 mb-1">
+              <IdCard class="w-3.5 h-3.5" /> 学工号
+            </div>
+            <p class="text-sm font-medium text-gray-900 font-mono">{{ detailUser.studentId || '--' }}</p>
+          </div>
+          <div class="bg-gray-50 rounded-xl p-3.5">
+            <div class="flex items-center gap-2 text-xs text-gray-400 mb-1">
+              <Lock class="w-3.5 h-3.5" /> 密码
+            </div>
+            <div class="flex items-center gap-1">
+              <p class="text-sm font-medium text-gray-900 font-mono truncate">
+                {{ showPasswordMap[detailUser.id] ? detailUser.password : '••••••••' }}
+              </p>
+              <button class="flex-shrink-0 text-gray-400 hover:text-gray-600" @click="togglePassword(detailUser.id)">
+                <EyeOff v-if="!showPasswordMap[detailUser.id]" class="w-3.5 h-3.5" />
+                <Eye v-else class="w-3.5 h-3.5" />
+              </button>
+            </div>
+          </div>
+          <div class="bg-gray-50 rounded-xl p-3.5">
+            <div class="flex items-center gap-2 text-xs text-gray-400 mb-1">
+              <ClipboardCheck class="w-3.5 h-3.5" /> 签到次数
+            </div>
+            <p class="text-sm font-medium text-gray-900">{{ fmtCount(detailUser.signCount) }} 次</p>
+          </div>
+          <div class="bg-gray-50 rounded-xl p-3.5">
+            <div class="flex items-center gap-2 text-xs text-gray-400 mb-1">
+              <Gift class="w-3.5 h-3.5" /> 邀请积分
+            </div>
+            <p class="text-sm font-medium text-gray-900">{{ detailUser.inviteReward }}</p>
+          </div>
+          <div class="bg-gray-50 rounded-xl p-3.5">
+            <div class="flex items-center gap-2 text-xs text-gray-400 mb-1">
+              <UserPlus class="w-3.5 h-3.5" /> 邀请人数
+            </div>
+            <p class="text-sm font-medium text-gray-900">{{ detailUser.invitedCount }} 人</p>
+          </div>
+          <div class="bg-gray-50 rounded-xl p-3.5">
+            <div class="flex items-center gap-2 text-xs text-gray-400 mb-1">
+              <UserPlus class="w-3.5 h-3.5" /> 邀请人
+            </div>
+            <p class="text-sm font-medium text-gray-900 truncate">{{ detailUser.inviterName || '--' }}</p>
+          </div>
+          <div class="bg-gray-50 rounded-xl p-3.5">
+            <div class="flex items-center gap-2 text-xs text-gray-400 mb-1">
+              <ClipboardCheck class="w-3.5 h-3.5" /> 任务数
+            </div>
+            <p class="text-sm font-medium text-gray-900">{{ detailUser.taskCount }} 个</p>
+          </div>
+          <div class="bg-gray-50 rounded-xl p-3.5">
+            <div class="flex items-center gap-2 text-xs text-gray-400 mb-1">
+              <Smartphone class="w-3.5 h-3.5" /> 设备码
+            </div>
+            <p class="text-sm font-medium text-gray-900 font-mono text-xs truncate">{{ detailUser.mobileCode || '未绑定' }}</p>
+          </div>
+          <div class="bg-gray-50 rounded-xl p-3.5">
+            <div class="flex items-center gap-2 text-xs text-gray-400 mb-1">
+              <Calendar class="w-3.5 h-3.5" /> 注册时间
+            </div>
+            <p class="text-sm font-medium text-gray-900">{{ detailUser.createdAt }}</p>
+          </div>
+          <div class="bg-gray-50 rounded-xl p-3.5">
+            <div class="flex items-center gap-2 text-xs text-gray-400 mb-1">
+              <Clock class="w-3.5 h-3.5" /> 最后登录
+            </div>
+            <p class="text-sm font-medium text-gray-900">{{ detailUser.lastLoginAt || '--' }}</p>
+          </div>
+          <div class="bg-gray-50 rounded-xl p-3.5">
+            <div class="flex items-center gap-2 text-xs text-gray-400 mb-1">
+              <Globe class="w-3.5 h-3.5" /> 最后登录IP
+            </div>
+            <p class="text-sm font-medium text-gray-900 font-mono">{{ detailUser.lastLoginIp || '--' }}</p>
+          </div>
+        </div>
+      </div>
+    </AppDialog>
 
     <!-- 禁用弹窗 -->
-    <Teleport to="body">
-      <Transition name="fade">
-        <div v-if="showDisableModal" class="fixed inset-0 z-50 flex items-center justify-center px-4">
-          <div class="absolute inset-0 bg-black/40" @click="showDisableModal = false" />
-          <div class="relative w-[85%] sm:max-w-sm bg-white rounded-2xl shadow-xl overflow-hidden">
-            <div class="h-1.5 bg-gradient-to-r from-red-500 to-orange-400" />
-            <div class="p-6 space-y-4">
-              <div class="flex items-center gap-2.5">
-                <div class="w-9 h-9 rounded-xl bg-red-100 flex items-center justify-center">
-                  <Ban class="w-5 h-5 text-red-500" />
-                </div>
-                <div>
-                  <h3 class="text-base font-semibold text-gray-900">禁用用户</h3>
-                  <p class="text-xs text-gray-400">{{ disableTarget?.username }}</p>
-                </div>
-              </div>
-
-              <div>
-                <Label class="mb-1.5 block text-xs font-medium text-gray-500">禁用原因</Label>
-                <textarea
-                  v-model="disableReason"
-                  placeholder="请输入禁用原因，用户登录时将看到此信息"
-                  class="w-full h-20 px-3 py-2 text-sm border border-gray-200 rounded-lg resize-none focus:outline-none focus:ring-2 focus:ring-red-500/20 focus:border-red-400"
-                />
-              </div>
-
-              <div class="flex gap-2">
-                <Button
-                  variant="outline"
-                  class="flex-1 h-10 text-sm"
-                  @click="showDisableModal = false"
-                >取消</Button>
-                <Button
-                  class="flex-1 h-10 text-sm font-medium bg-red-500 hover:bg-red-600"
-                  :disabled="disabling || !disableReason.trim()"
-                  @click="handleDisable"
-                >
-                  {{ disabling ? '处理中...' : '确认禁用' }}
-                </Button>
-              </div>
-            </div>
+    <AppDialog
+      :open="showDisableModal"
+      variant="center"
+      wrapper-class="px-4"
+      panel-class="w-[85%] sm:max-w-sm"
+      :fade="true"
+      title="禁用用户"
+      @update:open="(v: boolean) => { showDisableModal = v }"
+    >
+      <div class="h-1.5 bg-gradient-to-r from-red-500 to-orange-400" />
+      <div class="p-6 space-y-4">
+        <div class="flex items-center gap-2.5">
+          <div class="w-9 h-9 rounded-xl bg-red-100 flex items-center justify-center">
+            <Ban class="w-5 h-5 text-red-500" />
+          </div>
+          <div>
+            <h3 class="text-base font-semibold text-gray-900">禁用用户</h3>
+            <p class="text-xs text-gray-400">{{ disableTarget?.username }}</p>
           </div>
         </div>
-      </Transition>
-    </Teleport>
+
+        <div>
+          <Label class="mb-1.5 block text-xs font-medium text-gray-500">禁用原因</Label>
+          <textarea
+            v-model="disableReason"
+            placeholder="请输入禁用原因，用户登录时将看到此信息"
+            class="w-full h-20 px-3 py-2 text-sm border border-gray-200 rounded-lg resize-none focus:outline-none focus:ring-2 focus:ring-red-500/20 focus:border-red-400"
+          />
+        </div>
+
+        <div class="flex gap-2">
+          <Button
+            variant="outline"
+            class="flex-1 h-10 text-sm"
+            @click="showDisableModal = false"
+          >取消</Button>
+          <Button
+            class="flex-1 h-10 text-sm font-medium bg-red-500 hover:bg-red-600"
+            :disabled="disabling || !disableReason.trim()"
+            @click="handleDisable"
+          >
+            {{ disabling ? '处理中...' : '确认禁用' }}
+          </Button>
+        </div>
+      </div>
+    </AppDialog>
 
     <!-- 当天执行日志弹窗 -->
-    <Teleport to="body">
-      <Transition name="fade">
-        <div v-if="showLogsModal" class="fixed inset-0 z-50 flex items-center justify-center px-4">
-          <div class="absolute inset-0 bg-black/40" @click="showLogsModal = false" />
-          <div class="relative w-full sm:max-w-3xl bg-white rounded-2xl shadow-xl overflow-hidden flex flex-col max-h-[85vh]">
-            <div class="h-1.5 bg-gradient-to-r from-blue-500 to-cyan-400 flex-shrink-0" />
+    <AppDialog
+      :open="showLogsModal"
+      variant="center"
+      wrapper-class="px-4"
+      panel-class="sm:max-w-3xl"
+      :fade="true"
+      title="执行日志明细"
+      @update:open="(v: boolean) => { showLogsModal = v }"
+    >
+      <div class="h-1.5 bg-gradient-to-r from-brand-400 to-sky-400 flex-shrink-0" />
 
-            <!-- 头部 -->
-            <div class="px-5 pt-4 pb-3 flex items-start justify-between flex-shrink-0">
-              <div>
-                <h3 class="text-base font-semibold text-gray-900">执行日志明细</h3>
-                <p class="text-xs text-gray-400 mt-0.5">{{ logsDate }} · 共 {{ logsTotal }} 条记录</p>
-              </div>
-              <button
-                class="p-1.5 rounded-lg text-gray-400 hover:text-gray-600 hover:bg-gray-100 transition-colors"
-                @click="showLogsModal = false"
-              >
-                <X class="w-4 h-4" />
-              </button>
-            </div>
-
-            <!-- 筛选栏 -->
-            <div class="px-5 pb-3 flex flex-wrap items-center gap-2 flex-shrink-0">
-              <input
-                type="date"
-                :value="logsDate"
-                class="h-9 px-2.5 rounded-lg border border-gray-200 text-sm text-gray-600 focus:outline-none focus:ring-2 focus:ring-blue-500/20 focus:border-blue-400"
-                @change="handleLogsDateChange"
-              />
-              <div class="flex rounded-lg border border-gray-200 overflow-hidden">
-                <button
-                  v-for="opt in logsStatusOptions"
-                  :key="opt.key"
-                  class="h-9 px-3 text-xs font-medium transition-colors"
-                  :class="logsStatus === opt.key ? 'bg-blue-500 text-white' : 'bg-white text-gray-500 hover:bg-gray-50'"
-                  @click="handleLogsStatusChange(opt.key)"
-                >
-                  {{ opt.label }}
-                </button>
-              </div>
-              <div class="relative flex-1 min-w-[180px]">
-                <Search class="absolute left-3 top-1/2 -translate-y-1/2 h-3.5 w-3.5 text-gray-400" />
-                <input
-                  v-model="logsKeyword"
-                  placeholder="搜索用户名/姓名/任务标题"
-                  class="w-full h-9 pl-8 pr-3 text-sm border border-gray-200 rounded-lg focus:outline-none focus:ring-2 focus:ring-blue-500/20 focus:border-blue-400"
-                  @keyup.enter="handleLogsSearch"
-                />
-              </div>
-              <Button variant="outline" class="h-9 text-sm" @click="handleLogsSearch">
-                <Search class="w-3.5 h-3.5 mr-1" />
-                搜索
-              </Button>
-            </div>
-
-            <!-- 列表 -->
-            <div class="flex-1 overflow-y-auto border-t border-gray-100">
-              <!-- 加载骨架 -->
-              <div v-if="logsLoading" class="p-5 space-y-3">
-                <div v-for="i in 6" :key="i" class="h-10 bg-gray-50 rounded animate-pulse" />
-              </div>
-
-              <!-- 空状态 -->
-              <div v-else-if="logItems.length === 0" class="text-center py-16 text-gray-400">
-                <ClipboardCheck class="w-10 h-10 mx-auto mb-3 opacity-30" />
-                <p class="text-sm">该日期暂无执行记录</p>
-              </div>
-
-              <!-- 日志表格 -->
-              <table v-else class="w-full text-sm table-fixed min-w-[640px]">
-                <thead>
-                  <tr class="bg-gray-50 text-left text-xs text-gray-500 sticky top-0">
-                    <th class="px-4 py-2.5 font-medium w-[80px]">时间</th>
-                    <th class="px-4 py-2.5 font-medium w-[130px]">用户</th>
-                    <th class="px-4 py-2.5 font-medium w-[64px]">类型</th>
-                    <th class="px-4 py-2.5 font-medium">任务标题</th>
-                    <th class="px-4 py-2.5 font-medium w-[60px]">状态</th>
-                    <th class="px-4 py-2.5 font-medium">说明</th>
-                  </tr>
-                </thead>
-                <tbody>
-                  <tr
-                    v-for="log in logItems"
-                    :key="log.id"
-                    class="border-t border-gray-50 hover:bg-gray-50/50 transition-colors align-top"
-                  >
-                    <td class="px-4 py-2.5 text-xs text-gray-500 whitespace-nowrap tabular-nums">{{ formatLogTime(log.createdAt) }}</td>
-                    <td class="px-4 py-2.5 truncate" :title="`${log.realName || ''}（${log.username}）`">
-                      <p class="text-gray-900 truncate leading-tight">{{ log.realName || log.username || '--' }}</p>
-                      <p class="text-[11px] text-gray-400 truncate leading-tight">{{ log.schoolName || '--' }}</p>
-                    </td>
-                    <td class="px-4 py-2.5">
-                      <span class="text-[10px] px-1.5 py-0.5 rounded-full font-medium bg-gray-100 text-gray-600">
-                        {{ taskTypeLabel(log.taskType) }}
-                      </span>
-                    </td>
-                    <td class="px-4 py-2.5 truncate text-gray-700" :title="log.realTitle || log.title">
-                      {{ log.realTitle || log.title || '--' }}
-                    </td>
-                    <td class="px-4 py-2.5 whitespace-nowrap">
-                      <span
-                        class="text-[10px] px-1.5 py-0.5 rounded-full font-medium inline-block"
-                        :class="log.isSuccess ? 'bg-green-100 text-green-700' : 'bg-red-100 text-red-700'"
-                      >
-                        {{ log.isSuccess ? '成功' : '失败' }}
-                      </span>
-                    </td>
-                    <td class="px-4 py-2.5">
-                      <span v-if="log.errorMessage" class="text-xs text-red-500 break-words">{{ log.errorMessage }}</span>
-                      <span v-else class="text-xs text-gray-300">--</span>
-                    </td>
-                  </tr>
-                </tbody>
-              </table>
-            </div>
-
-            <!-- 分页 -->
-            <div
-              v-if="logsTotal > 0"
-              class="flex items-center justify-between px-5 py-3 border-t border-gray-100 flex-shrink-0"
-            >
-              <span class="text-xs text-gray-400">第 {{ logsPage }} / {{ logsTotalPages }} 页</span>
-              <div class="flex items-center gap-2">
-                <button
-                  class="w-8 h-8 rounded-lg flex items-center justify-center hover:bg-gray-100 disabled:opacity-30"
-                  :disabled="logsPage <= 1"
-                  @click="handleLogsPage(logsPage - 1)"
-                >
-                  <ChevronLeft class="w-4 h-4" />
-                </button>
-                <button
-                  class="w-8 h-8 rounded-lg flex items-center justify-center hover:bg-gray-100 disabled:opacity-30"
-                  :disabled="logsPage >= logsTotalPages"
-                  @click="handleLogsPage(logsPage + 1)"
-                >
-                  <ChevronRight class="w-4 h-4" />
-                </button>
-              </div>
-            </div>
-          </div>
+      <!-- 头部 -->
+      <div class="px-5 pt-4 pb-3 flex items-start justify-between flex-shrink-0">
+        <div>
+          <h3 class="text-base font-semibold text-gray-900">执行日志明细</h3>
+          <p class="text-xs text-gray-400 mt-0.5">{{ logsDate }} · 共 {{ logsTotal }} 条记录</p>
         </div>
-      </Transition>
-    </Teleport>
+        <button
+          class="p-1.5 rounded-lg text-gray-400 hover:text-gray-600 hover:bg-gray-100 transition-colors"
+          @click="showLogsModal = false"
+        >
+          <X class="w-4 h-4" />
+        </button>
+      </div>
+
+      <!-- 筛选栏 -->
+      <div class="px-5 pb-3 flex flex-wrap items-center gap-2 flex-shrink-0">
+        <input
+          type="date"
+          :value="logsDate"
+          class="h-9 px-2.5 rounded-lg border border-gray-200 text-sm text-gray-600 focus:outline-none focus:ring-2 focus:ring-brand-400/20 focus:border-brand-400"
+          @change="handleLogsDateChange"
+        />
+        <div class="flex rounded-lg border border-gray-200 overflow-hidden">
+          <button
+            v-for="opt in logsStatusOptions"
+            :key="opt.key"
+            class="h-9 px-3 text-xs font-medium transition-colors"
+            :class="logsStatus === opt.key ? 'adm-btn-brand' : 'bg-white text-gray-500 hover:bg-gray-50'"
+            @click="handleLogsStatusChange(opt.key)"
+          >
+            {{ opt.label }}
+          </button>
+        </div>
+        <div class="relative flex-1 min-w-[180px]">
+          <Search class="absolute left-3 top-1/2 -translate-y-1/2 h-3.5 w-3.5 text-gray-400" />
+          <input
+            v-model="logsKeyword"
+            placeholder="搜索用户名/姓名/任务标题"
+            class="w-full h-9 pl-8 pr-3 text-sm border border-gray-200 rounded-lg focus:outline-none focus:ring-2 focus:ring-brand-400/20 focus:border-brand-400"
+            @keyup.enter="handleLogsSearch"
+          />
+        </div>
+        <Button variant="outline" class="h-9 text-sm" @click="handleLogsSearch">
+          <Search class="w-3.5 h-3.5 mr-1" />
+          搜索
+        </Button>
+      </div>
+
+      <!-- 列表 -->
+      <div class="flex-1 overflow-y-auto border-t border-gray-100">
+        <!-- 加载骨架 -->
+        <div v-if="logsLoading" class="p-5 space-y-3">
+          <div v-for="i in 6" :key="i" class="h-10 bg-gray-50 rounded animate-pulse" />
+        </div>
+
+        <!-- 空状态 -->
+        <div v-else-if="logItems.length === 0" class="text-center py-16 text-gray-400">
+          <ClipboardCheck class="w-10 h-10 mx-auto mb-3 opacity-30" />
+          <p class="text-sm">该日期暂无执行记录</p>
+        </div>
+
+        <!-- 日志表格 -->
+        <table v-else class="w-full text-sm table-fixed min-w-[640px]">
+          <thead>
+            <tr class="bg-gray-50 text-left text-xs text-gray-500 sticky top-0">
+              <th class="px-4 py-2.5 font-medium w-[80px]">时间</th>
+              <th class="px-4 py-2.5 font-medium w-[130px]">用户</th>
+              <th class="px-4 py-2.5 font-medium w-[64px]">类型</th>
+              <th class="px-4 py-2.5 font-medium">任务标题</th>
+              <th class="px-4 py-2.5 font-medium w-[72px]">状态</th>
+              <th class="px-4 py-2.5 font-medium">说明</th>
+            </tr>
+          </thead>
+          <tbody>
+            <tr
+              v-for="log in logItems"
+              :key="`${log.source}-${log.id}`"
+              class="border-t border-gray-50 hover:bg-gray-50/50 transition-colors align-top"
+            >
+              <td class="px-4 py-2.5 text-xs text-gray-500 whitespace-nowrap tabular-nums">{{ formatLogTime(log.createdAt) }}</td>
+              <td class="px-4 py-2.5 truncate" :title="`${log.realName || ''}（${log.username}）`">
+                <p class="text-gray-900 truncate leading-tight">{{ log.realName || log.username || '--' }}</p>
+                <p class="text-xs text-gray-400 truncate leading-tight">{{ log.schoolName || '--' }}</p>
+              </td>
+              <td class="px-4 py-2.5">
+                <span class="text-xs px-1.5 py-0.5 rounded-full font-medium bg-gray-100 text-gray-600">
+                  {{ taskTypeLabel(log.taskType) }}
+                </span>
+              </td>
+              <td class="px-4 py-2.5 truncate text-gray-700" :title="log.realTitle || log.title">
+                {{ log.realTitle || log.title || '--' }}
+              </td>
+              <td class="px-4 py-2.5">
+                <div class="flex flex-col items-start gap-1">
+                  <span
+                    class="text-xs px-1.5 py-0.5 rounded-full font-medium inline-block whitespace-nowrap"
+                    :class="log.isSuccess ? 'bg-green-100 text-green-700' : 'bg-red-100 text-red-700'"
+                  >
+                    {{ log.isSuccess ? '成功' : '失败' }}
+                  </span>
+                  <span
+                    v-if="log.deleted"
+                    class="text-xs px-1.5 py-0.5 rounded-full font-medium inline-block whitespace-nowrap bg-gray-100 text-gray-400 border border-gray-200"
+                    title="用户已在客户端删除该日志，后台统计仍计入"
+                  >
+                    已删除
+                  </span>
+                </div>
+              </td>
+              <td class="px-4 py-2.5">
+                <span v-if="log.errorMessage" class="text-xs text-red-500 break-words">{{ log.errorMessage }}</span>
+                <span v-else class="text-xs adm-muted">--</span>
+              </td>
+            </tr>
+          </tbody>
+        </table>
+      </div>
+
+      <!-- 分页 -->
+      <div
+        v-if="logsTotal > 0"
+        class="flex items-center justify-between px-5 py-3 border-t border-gray-100 flex-shrink-0"
+      >
+        <span class="text-xs text-gray-400">第 {{ logsPage }} / {{ logsTotalPages }} 页</span>
+        <div class="flex items-center gap-2">
+          <button
+            class="adm-pager-btn"
+            :disabled="logsPage <= 1"
+            @click="handleLogsPage(logsPage - 1)"
+          >
+            <ChevronLeft class="w-4 h-4" />
+          </button>
+          <button
+            class="adm-pager-btn"
+            :disabled="logsPage >= logsTotalPages"
+            @click="handleLogsPage(logsPage + 1)"
+          >
+            <ChevronRight class="w-4 h-4" />
+          </button>
+        </div>
+      </div>
+    </AppDialog>
   </div>
 </template>
-
-<style scoped>
-.fade-enter-active,
-.fade-leave-active {
-  transition: opacity 0.2s ease;
-}
-.fade-enter-from,
-.fade-leave-to {
-  opacity: 0;
-}
-</style>

frondend/src/views/bind/BindDeviceView.vue

@@ -1,7 +1,7 @@
 <script setup lang="ts">
 import { ref, onMounted, onUnmounted } from 'vue'
 import { useRouter } from 'vue-router'
-import { Smartphone, RefreshCw, CheckCircle, AlertCircle, Download, LogOut } from 'lucide-vue-next'
+import { Smartphone, RefreshCw, CheckCircle, AlertCircle, Download, ArrowLeft } from 'lucide-vue-next'
 import { Button } from '@/components/ui/button'
 import { useMessage } from '@/composables/useMessage'
 import * as authApi from '@/api/auth'
@@ -47,7 +47,7 @@ async function generateQrImage(url: string): Promise<string> {
   ctx.restore()
 
   // 3. 绘制蓝色手机图标（SVG → Image）
-  const svg = `<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="#3b82f6" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><rect x="5" y="2" width="14" height="20" rx="2"/><line x1="12" y1="18" x2="12.01" y2="18"/></svg>`
+  const svg = `<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="#0b8672" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><rect x="5" y="2" width="14" height="20" rx="2"/><line x1="12" y1="18" x2="12.01" y2="18"/></svg>`
   const svgBlob = new Blob([svg], { type: 'image/svg+xml' })
   const svgUrl = URL.createObjectURL(svgBlob)
 
@@ -144,13 +144,9 @@ function stopPolling() {
   }
 }
 
-/** 退出登录：清除登录态并返回登录页（未扫码时可随时退出，避免一直卡在绑定页） */
-function handleLogout() {
-  stopPolling()
-  if (countdownTimer) clearInterval(countdownTimer)
-  localStorage.removeItem('access_token')
-  localStorage.removeItem('refresh_token')
-  router.push('/login')
+/** 返回上一页（本页仅由个人中心「重新绑定」进入，即回到个人中心） */
+function handleBack() {
+  router.back()
 }
 
 onMounted(() => {
@@ -164,14 +160,14 @@ onUnmounted(() => {
 </script>
 
 <template>
-  <div class="min-h-full flex flex-col bg-gradient-to-b from-blue-50 to-white">
+  <div class="min-h-full flex flex-col">
     <!-- 顶部说明 -->
-    <div class="px-6 pt-6 pb-4 text-center">
-      <div class="w-14 h-14 rounded-2xl bg-blue-500 flex items-center justify-center mx-auto mb-3 shadow-lg shadow-blue-200">
+    <div class="px-6 pb-4 text-center rise-in" style="padding-top: calc(var(--safe-top) + 32px)">
+      <div class="w-16 h-16 rounded-[20px] bg-brand-gradient flex items-center justify-center mx-auto mb-3 shadow-xl shadow-brand-500/30">
         <Smartphone class="w-7 h-7 text-white" />
       </div>
-      <h1 class="text-xl font-bold text-gray-900">绑定设备</h1>
-      <p class="text-sm text-gray-400 mt-1">请用今日校园 App 扫描下方二维码完成绑定</p>
+      <h1 class="text-[22px] font-bold tracking-tight text-gray-900">绑定设备</h1>
+      <p class="text-sm text-gray-500 mt-1">请扫描二维码，绑定设备信息</p>
     </div>
 
     <div class="flex-1 flex flex-col items-center px-6">
@@ -183,7 +179,7 @@ onUnmounted(() => {
 
       <!-- 二维码 + 自动轮询 -->
       <div v-else-if="status === 'show-qr' || status === 'polling'" class="w-full max-w-xs">
-        <div class="bg-white rounded-2xl border border-gray-100 shadow-lg p-6 text-center">
+        <div class="bg-white rounded-3xl border border-gray-100/80 shadow-xl p-6 text-center rise-in">
           <!-- QR Code（单一合成图片，含 logo） -->
           <div class="w-48 h-48 mx-auto bg-white border-2 border-gray-100 rounded-xl flex items-center justify-center mb-4">
             <img
@@ -215,28 +211,21 @@ onUnmounted(() => {
         </div>
 
         <!-- 使用说明 -->
-        <div class="mt-4 bg-white rounded-xl border border-gray-100 p-4 shadow-sm">
+        <div class="mt-4 bg-white rounded-2xl border border-gray-100/80 p-4 shadow-sm">
           <h3 class="text-sm font-semibold text-gray-900 mb-3">操作步骤</h3>
           <div class="space-y-3">
             <div class="flex items-start gap-3">
               <div class="w-6 h-6 rounded-full bg-blue-500 text-white text-xs font-bold flex items-center justify-center flex-shrink-0 mt-0.5">1</div>
               <div>
-                <p class="text-sm text-gray-800">打开今日校园 App</p>
-                <p class="text-xs text-gray-400">在手机上启动今日校园并登录</p>
+                <p class="text-sm text-gray-800">保存二维码</p>
+                <p class="text-xs text-gray-400">点击上方按钮保存二维码图片</p>
               </div>
             </div>
             <div class="flex items-start gap-3">
               <div class="w-6 h-6 rounded-full bg-blue-500 text-white text-xs font-bold flex items-center justify-center flex-shrink-0 mt-0.5">2</div>
               <div>
-                <p class="text-sm text-gray-800">点击右上角扫一扫</p>
-                <p class="text-xs text-gray-400">扫描电脑屏幕上的二维码</p>
-              </div>
-            </div>
-            <div class="flex items-start gap-3">
-              <div class="w-6 h-6 rounded-full bg-blue-500 text-white text-xs font-bold flex items-center justify-center flex-shrink-0 mt-0.5">3</div>
-              <div>
-                <p class="text-sm text-gray-800">等待自动完成</p>
-                <p class="text-xs text-gray-400">扫码后自动获取设备码，绑定成功后自动跳转</p>
+                <p class="text-sm text-gray-800">打开今日校园右上角扫一扫</p>
+                <p class="text-xs text-gray-400">扫描二维码，绑定成功后自动跳转</p>
               </div>
             </div>
           </div>
@@ -266,14 +255,14 @@ onUnmounted(() => {
       </div>
     </div>
 
-    <!-- 底部：退出登录（未扫码时可随时退出当前账号） -->
+    <!-- 底部：返回个人中心 -->
     <div class="px-6 pb-8 flex justify-center">
       <button
-        class="inline-flex items-center gap-1.5 px-5 py-2 rounded-lg text-sm text-gray-500 hover:text-red-500 hover:bg-red-50 transition-colors"
-        @click="handleLogout"
+        class="inline-flex items-center gap-1.5 px-5 py-2 rounded-lg text-sm text-gray-500 hover:text-blue-600 hover:bg-blue-50 transition-colors"
+        @click="handleBack"
       >
-        <LogOut class="w-4 h-4" />
-        退出登录
+        <ArrowLeft class="w-4 h-4" />
+        返回
       </button>
     </div>
   </div>