diff --git a/README.md b/README.md
index f3c8598..9b45d40 100644
--- a/README.md
+++ b/README.md
@@ -30,6 +30,8 @@ iotLCM 物联网卡全生命周期管理平台的**小程序端 + 用户端服
 ## 快速开始
 
 ### 后端
+将 `server/config/config.example.yaml` 复制为 `server/config/config.yaml` 并填写自己的凭据；使用代码生成前同样将 `server/hack/config.example.yaml` 复制为 `server/hack/config.yaml`。
+
 
 ```bash
 cd server
@@ -51,7 +53,7 @@ pnpm dev:mp-weixin     # 微信小程序，产物用微信开发者工具打开
 
 | 位置 | 说明 |
 | --- | --- |
-| `server/config/config.yaml` | 后端配置（**公开版凭据为占位符**） |
+| `server/config/config.example.yaml` | 后端配置（**公开版凭据为占位符**） |
 | `app/env/.env*` | 前端环境变量（**公开版 AppID 为占位符**） |
 
 后端配置占位：
diff --git a/app/Dockerfile b/app/Dockerfile
index ada19b1..d69440e 100644
--- a/app/Dockerfile
+++ b/app/Dockerfile
@@ -11,6 +11,7 @@ FROM ${BASE_REGISTRY}/node:24-alpine AS builder
 WORKDIR /build/app
 
 COPY package.json pnpm-lock.yaml .npmrc ./
+COPY patches ./patches
 
 RUN npm config set registry https://registry.npmmirror.com/ && \
     npm install -g pnpm@10.10.0 --registry=https://registry.npmmirror.com/ && \
diff --git a/app/manifest.config.ts b/app/manifest.config.ts
index 607a04b..b4c4a31 100644
--- a/app/manifest.config.ts
+++ b/app/manifest.config.ts
@@ -25,8 +25,8 @@ export default defineManifestConfig({
   'name': VITE_APP_TITLE,
   'appid': VITE_UNI_APPID,
   'description': '',
-  'versionName': '1.0.0',
-  'versionCode': '100',
+  'versionName': '1.0.2',
+  'versionCode': '102',
   'transformPx': false,
   'locale': VITE_FALLBACK_LOCALE, // 'zh-Hans'
   'h5': {
diff --git a/app/package.json b/app/package.json
index 9067152..3351d1b 100644
--- a/app/package.json
+++ b/app/package.json
@@ -1,7 +1,7 @@
 {
   "name": "iotlcm-app-ui",
   "type": "module",
-  "version": "1.0.0",
+  "version": "1.0.2",
   "unibest": {
     "platforms": [
       "h5",
@@ -25,7 +25,7 @@
   "author": {
     "name": "feige996",
     "zhName": "菲鸽",
-    "email": "1020103647@example.com",
+    "email": "xxx@example.com",
     "github": "https://github.com/feige996",
     "gitee": "https://gitee.com/feige996"
   },
@@ -112,6 +112,7 @@
     "upload:changeset": "pnpm changeset && pnpm changeset version",
     "upload:mp": "node ./scripts/upload-weixin.js",
     "type-check": "vue-tsc --noEmit",
+    "test:run": "vitest run",
     "lint": "eslint",
     "lint:fix": "eslint --fix",
     "format": "prettier . --write",
@@ -202,11 +203,15 @@
     "vite": "5.2.8",
     "vite-plugin-restart": "^1.0.0",
     "vite-plugin-vue-devtools": "^8.0.5",
+    "vitest": "3.2.4",
     "vue-tsc": "^3.0.6"
   },
   "pnpm": {
     "overrides": {
       "unconfig": "7.3.2"
+    },
+    "patchedDependencies": {
+      "@wot-ui/ui@2.1.0": "patches/@wot-ui__ui@2.1.0.patch"
     }
   },
   "overrides": {
diff --git a/app/patches/@wot-ui__ui@2.1.0.patch b/app/patches/@wot-ui__ui@2.1.0.patch
new file mode 100644
index 0000000..a64506c
--- /dev/null
+++ b/app/patches/@wot-ui__ui@2.1.0.patch
@@ -0,0 +1,87 @@
+diff --git a/components/wd-button/wd-button.vue b/components/wd-button/wd-button.vue
+index 8b2610d90c8ebe78e2726179bb83f2b688ec0d96..c25b26965ccfb9470cc3c2ab9e3b2a1576c3220d 100644
+--- a/components/wd-button/wd-button.vue
++++ b/components/wd-button/wd-button.vue
+@@ -18,7 +18,7 @@
+     ]"
+     :hover-start-time="hoverStartTime"
+     :hover-stay-time="hoverStayTime"
+-    :open-type="openTypeValue"
++    :open-type="openTypeValue as UniHelper.ButtonOpenType"
+     :send-message-title="sendMessageTitle"
+     :send-message-path="sendMessagePath"
+     :send-message-img="sendMessageImg"
+diff --git a/components/wd-fab/types.ts b/components/wd-fab/types.ts
+index 50ca94f1a95a54c95fe68d9ed3535b45f1e36bcc..57b5ceb1143a0e9385cc280fe8054ed87f255807 100644
+--- a/components/wd-fab/types.ts
++++ b/components/wd-fab/types.ts
+@@ -87,7 +87,7 @@ export const fabProps = {
+    */
+   gap: {
+     type: Object as PropType<FabGap>,
+-    default: () => ({})
++    default: (): FabGap => ({})
+   },
+   /**
+    * 点击时是否展开菜单
+diff --git a/components/wd-swiper/wd-swiper.vue b/components/wd-swiper/wd-swiper.vue
+index c662e565171dad9c350b7215dddd3e8fc11320ab..54a5260a40ed1d6554a7e1b2158f94d8598b1c10 100644
+--- a/components/wd-swiper/wd-swiper.vue
++++ b/components/wd-swiper/wd-swiper.vue
+@@ -158,9 +158,9 @@ const swiperIndicator = computed(() => {
+     indicatorPosition: indicatorPosition || 'bottom'
+   }
+   if (isObj(indicator)) {
+-    swiperIndicator.type = indicator.type || 'dots'
+-    swiperIndicator.minShowNum = indicator.minShowNum || 2
+-    swiperIndicator.showControls = indicator.showControls || false
++    swiperIndicator.type = (indicator as Partial<SwiperNavProps>).type || 'dots'
++    swiperIndicator.minShowNum = (indicator as Partial<SwiperNavProps>).minShowNum || 2
++    swiperIndicator.showControls = (indicator as Partial<SwiperNavProps>).showControls || false
+   }
+   return swiperIndicator
+ })
+diff --git a/components/wd-tour/wd-tour.vue b/components/wd-tour/wd-tour.vue
+index d1c6e895a819a4e15178930c3869a7034d741887..2eacba3bb4b20621d94465d17a94d88ccea6195e 100644
+--- a/components/wd-tour/wd-tour.vue
++++ b/components/wd-tour/wd-tour.vue
+@@ -69,7 +69,7 @@ export default {
+ <script lang="ts" setup>
+ import { ref, computed, watch, nextTick, type CSSProperties } from 'vue'
+ import { addUnit, getRect, getSystemInfo, isDef, objToStyle } from '../../common/util'
+-import { tourProps, type TourEmits, type TourExpose } from './types'
++import { tourProps, type TourEmits, type TourExpose, type TourStep } from './types'
+ import { useRaf } from '../../composables/useRaf'
+ import { useTranslate } from '../../composables/useTranslate'
+ import wdButton from '../wd-button/wd-button.vue'
+@@ -122,7 +122,7 @@ const highlightClass = computed(() => {
+ })
+ 
+ // 计算属性
+-const currentStep = computed(() => {
++const currentStep = computed<Partial<TourStep>>(() => {
+   return props.steps[currentIndex.value] || {}
+ })
+ // 提取公共的默认样式函数
+diff --git a/composables/useUpload.ts b/composables/useUpload.ts
+index acad05a461562cb197299623100371280d559918..83b02be95ebb380b8d1cd9f03a742a8727ece502 100644
+--- a/composables/useUpload.ts
++++ b/composables/useUpload.ts
+@@ -174,7 +174,7 @@ export function useUpload(): UseUploadReturn {
+         path: item.path || '',
+         name: item.name || '',
+         size: item.size,
+-        type: 'image',
++        type: 'image' as const,
+         thumb: item.path || ''
+       }))
+     }
+@@ -183,7 +183,7 @@ export function useUpload(): UseUploadReturn {
+         path: (res.tempFiles as any).path || '',
+         name: (res.tempFiles as any).name || '',
+         size: (res.tempFiles as any).size,
+-        type: 'image',
++        type: 'image' as const,
+         thumb: (res.tempFiles as any).path || ''
+       }
+     ]
diff --git a/app/pnpm-lock.yaml b/app/pnpm-lock.yaml
index a2175b7..4a1ad49 100644
--- a/app/pnpm-lock.yaml
+++ b/app/pnpm-lock.yaml
@@ -8,6 +8,11 @@ overrides:
   bin-wrapper: npm:bin-wrapper-china
   unconfig: 7.3.2
 
+patchedDependencies:
+  '@wot-ui/ui@2.1.0':
+    hash: 706185b1a0b469b3fa2e58924fab9db34fc17f6694e0c92792e6105474427700
+    path: patches/@wot-ui__ui@2.1.0.patch
+
 importers:
 
   .:
@@ -74,7 +79,7 @@ importers:
         version: 2.5.0-20230101
       '@wot-ui/ui':
         specifier: latest
-        version: 2.1.0(vue@3.4.21(typescript@5.8.3))
+        version: 2.1.0(patch_hash=706185b1a0b469b3fa2e58924fab9db34fc17f6694e0c92792e6105474427700)(vue@3.4.21(typescript@5.8.3))
       abortcontroller-polyfill:
         specifier: ^1.7.8
         version: 1.7.8
@@ -259,6 +264,9 @@ importers:
       vite-plugin-vue-devtools:
         specifier: ^8.0.5
         version: 8.0.5(vite@5.2.8(@types/node@20.19.20)(less@4.5.1)(sass@1.77.8)(terser@5.43.1))(vue@3.4.21(typescript@5.8.3))
+      vitest:
+        specifier: 3.2.4
+        version: 3.2.4(@types/debug@4.1.12)(@types/node@20.19.20)(jsdom@29.1.1)(less@4.5.1)(sass@1.77.8)(terser@5.43.1)
       vue-tsc:
         specifier: ^3.0.6
         version: 3.0.6(typescript@5.8.3)
@@ -15044,7 +15052,7 @@ snapshots:
     optionalDependencies:
       '@types/node': 20.19.20
 
-  '@wot-ui/ui@2.1.0(vue@3.4.21(typescript@5.8.3))':
+  '@wot-ui/ui@2.1.0(patch_hash=706185b1a0b469b3fa2e58924fab9db34fc17f6694e0c92792e6105474427700)(vue@3.4.21(typescript@5.8.3))':
     dependencies:
       vue: 3.4.21(typescript@5.8.3)
 
diff --git a/app/src/App.ku.vue b/app/src/App.ku.vue
index 2c7be49..81a0d03 100644
--- a/app/src/App.ku.vue
+++ b/app/src/App.ku.vue
@@ -11,7 +11,8 @@ onShow(() => {
   // 所以这里需要判断一下，如果是 '/' 就当做首页，也要显示 tabbar
   if (path === '/') {
     isCurrentPageTabbar.value = true
-  } else {
+  }
+  else {
     isCurrentPageTabbar.value = isPageTabbar(path)
   }
 })
@@ -28,7 +29,9 @@ defineExpose({
 <template>
   <view class="app-root">
     <!-- 这个先隐藏了，知道这样用就行 -->
-    <view class="hidden text-center"> {{ helloKuRoot }}，这里可以配置全局的东西 </view>
+    <view class="hidden text-center">
+      {{ helloKuRoot }}，这里可以配置全局的东西
+    </view>
 
     <KuRootView />
 
diff --git a/app/src/App.vue b/app/src/App.vue
index 5586e39..b3b59ee 100644
--- a/app/src/App.vue
+++ b/app/src/App.vue
@@ -4,6 +4,7 @@ import { getCurrentInstance, onMounted, onUnmounted } from 'vue'
 import { navigateToInterceptor } from '@/router/interceptor'
 import { tabbarStore } from '@/tabbar/store'
 import { permission } from '@/router/permission'
+import { useMessageStore } from '@/store/message'
 
 const { proxy } = (getCurrentInstance() || {}) as any
 const router = proxy?.$router
@@ -14,12 +15,14 @@ onLaunch((options: any) => {
   // console.log('App.vue onLaunch', options)
 })
 onShow((options: any) => {
+  void useMessageStore().refreshUnreadCount()
   // console.log('App.vue onShow', options)
   // 处理直接进入页面路由的情况：如h5直接输入路由、微信小程序分享后进入等
   // https://github.com/unibest-tech/unibest/issues/192
   if (options?.path) {
     navigateToInterceptor.invoke({ url: `/${options.path}`, query: options.query })
-  } else {
+  }
+  else {
     navigateToInterceptor.invoke({ url: '/' })
   }
 })
diff --git a/app/src/api/card.ts b/app/src/api/card.ts
index 3965e2b..8fdf89e 100644
--- a/app/src/api/card.ts
+++ b/app/src/api/card.ts
@@ -10,8 +10,8 @@ import type {
   CardLifecycleStatusParams,
   CardListParams,
   CardListRes,
-  CardRecognitionRes,
   CardQueryRes,
+  CardRecognitionRes,
   ChangePrepareParams,
   ChangePrepareRes,
   ChangeSubmitParams,
@@ -57,6 +57,20 @@ export function publicQueryCard(data: PublicQueryCardParams) {
   return http.post<CardQueryRes>('/card/public-query', data, undefined, undefined, CARD_REQUEST_OPTIONS)
 }
 
+interface CardRecognitionPayload {
+  code?: number
+  message?: string
+  data?: CardRecognitionRes
+}
+
+function parseCardRecognitionPayload(data: unknown): CardRecognitionPayload {
+  if (data && typeof data === 'object')
+    return data as CardRecognitionPayload
+
+  const text = String(data ?? '').replace(/^\uFEFF/, '').trim()
+  return text ? JSON.parse(text) as CardRecognitionPayload : {}
+}
+
 export function recognizeCardImage(filePath: string) {
   return new Promise<CardRecognitionRes>((resolve, reject) => {
     uni.uploadFile({
@@ -65,17 +79,20 @@ export function recognizeCardImage(filePath: string) {
       name: 'file',
       timeout: 30000,
       success: (response) => {
-        let payload: { code?: number, message?: string, data?: CardRecognitionRes }
+        let payload: CardRecognitionPayload
         try {
-          payload = JSON.parse(String(response.data || '{}'))
+          payload = parseCardRecognitionPayload(response.data)
         }
         catch {
-          reject({ message: '图片识别响应格式错误' })
+          const headers = (response as typeof response & { header?: Record<string, string> }).header
+          const contentType = headers?.['content-type'] || headers?.['Content-Type']
+          const responseType = contentType ? `，${contentType}` : ''
+          reject(new Error(`图片识别响应格式错误（HTTP ${response.statusCode}${responseType}）`))
           return
         }
 
         if (response.statusCode < 200 || response.statusCode >= 300 || Number(payload.code) !== 0) {
-          reject({ message: payload.message || '图片识别失败' })
+          reject(new Error(payload.message || '图片识别失败'))
           return
         }
         resolve(payload.data || {
@@ -88,7 +105,7 @@ export function recognizeCardImage(filePath: string) {
         })
       },
       fail: (error) => {
-        reject({ message: error.errMsg || '图片上传失败，请检查网络后重试' })
+        reject(new Error(error.errMsg || '图片上传失败，请检查网络后重试'))
       },
     })
   })
diff --git a/app/src/api/diagnosis.ts b/app/src/api/diagnosis.ts
index 0247c06..a9a1362 100644
--- a/app/src/api/diagnosis.ts
+++ b/app/src/api/diagnosis.ts
@@ -32,7 +32,7 @@ export function getOpenDiagnosisInfo(data: DiagnosisInfoParams & { tenantId?: st
 }
 
 export function getDiagnosisFlow(data: DiagnosisFlowParams) {
-  return http.post<DiagnosisFlowRes>('/open/diagnosis/flow', data, undefined, undefined, {
+  return http.post<DiagnosisFlowRes>('/diagnosis/flow', data, undefined, undefined, {
     hideErrorToast: true,
   })
 }
diff --git a/app/src/api/executionLog.ts b/app/src/api/executionLog.ts
new file mode 100644
index 0000000..c48ec38
--- /dev/null
+++ b/app/src/api/executionLog.ts
@@ -0,0 +1,57 @@
+import { http } from '@/http/http'
+
+export interface AllocationUnits {
+  sourceDeptId?: number
+  sourceDeptName?: string
+  targetDeptId?: number
+  targetDeptName?: string
+  targetDeptMode?: 'single' | 'per_row'
+}
+export function allocationUnitName(name?: string, id?: number) {
+  return name || (id ? '单位已删除或信息未记录' : '单位信息未记录')
+}
+export function receivingUnitName(item: AllocationUnits) {
+  return item.targetDeptMode === 'per_row' ? '按卡片明细接收' : allocationUnitName(item.targetDeptName, item.targetDeptId)
+}
+export interface ExecutionLog extends AllocationUnits {
+  batchNo: string
+  batchType: number
+  sourceChannel: string
+  executionMode: number
+  sourceType: number | null
+  batchAsyncStatus: number
+  totalCount: number
+  runResult: number
+  failReason?: string
+  createdAt?: string
+  startTime?: string
+  endTime?: string
+}
+export interface ExecutionDetail extends AllocationUnits {
+  itemId: string
+  rowNo: number
+  detailStatus: number
+  errorCode?: string
+  errorReason?: string
+}
+export const channelLabels: Record<string, string> = { console: '控制台', mini_program: '小程序', api: '开放API', system: '系统任务', legacy: '历史未知' }
+export const modeLabels = ['未知', '单卡', '批量']
+export const inputLabels = ['选择', '连号', '输入', '文件', '定时任务']
+export const statusLabels = ['已创建', '待处理', '处理中', '成功', '失败', '部分成功']
+export const detailLabels = ['待处理', '处理中', '成功', '失败']
+export function listExecutionLogs(params: Record<string, unknown>) {
+  return http.get<{ items: ExecutionLog[], total: number }>('/execution-log/list', params, undefined, { hideErrorToast: true })
+}
+export function executionSummary(batchNo: string) {
+  return http.get<ExecutionLog>('/execution-log/summary', { batchNo }, undefined, { hideErrorToast: true })
+}
+export function executionDetails(params: Record<string, unknown>) {
+  return http.get<{ items: ExecutionDetail[], total: number }>('/execution-log/details', params, undefined, { hideErrorToast: true })
+}
+
+export function allocateSummary(params: { batchNo?: string, requestId?: string }) {
+  return http.get<ExecutionLog>('/card/allocate-result', params, undefined, { hideErrorToast: true })
+}
+export function allocateDetails(params: Record<string, unknown>) {
+  return http.get<{ items: ExecutionDetail[], total: number }>('/card/allocate-details', params, undefined, { hideErrorToast: true })
+}
diff --git a/app/src/api/login.ts b/app/src/api/login.ts
index b9615a8..dbf4f33 100644
--- a/app/src/api/login.ts
+++ b/app/src/api/login.ts
@@ -3,6 +3,7 @@ import type {
   ICheckSideCaptchaForm,
   IForgotPasswordForm,
   ILoginForm,
+  IPhoneSmsLoginForm,
   IRegisterForm,
   ISendSmsForm,
   ISendSmsRes,
@@ -59,6 +60,16 @@ export function login(loginForm: ILoginForm) {
   )
 }
 
+export function phoneSmsLogin(data: IPhoneSmsLoginForm) {
+  return http.post<IAuthLoginRes>(
+    '/auth/phone-login',
+    data,
+    undefined,
+    undefined,
+    AUTH_REQUEST_OPTIONS,
+  )
+}
+
 export function wechatLogin(data: IWechatLoginForm) {
   return http.post<IWechatLoginRes>(
     '/auth/wechat-login',
@@ -150,3 +161,20 @@ export function getWxCode() {
     })
   })
 }
+
+export interface WarningPreference {
+  enabled: boolean
+  wechatBound: boolean
+}
+
+export function getWarningPreference() {
+  return http.get<WarningPreference>('/user/wechat/warning-preference', undefined, undefined, AUTH_REQUEST_OPTIONS)
+}
+
+export function saveWarningPreference(enabled: boolean) {
+  return http.post<WarningPreference>('/user/wechat/warning-preference', { enabled }, undefined, undefined, AUTH_REQUEST_OPTIONS)
+}
+
+export function unbindWechat() {
+  return http.post<IWechatBindRes>('/user/wechat/unbind', {}, undefined, undefined, AUTH_REQUEST_OPTIONS)
+}
diff --git a/app/src/api/types/card.ts b/app/src/api/types/card.ts
index 52f4141..210f376 100644
--- a/app/src/api/types/card.ts
+++ b/app/src/api/types/card.ts
@@ -64,12 +64,12 @@ export interface PublicQueryCardParams {
 
 export type CardRecognitionCode
   = | 'CARD_RECOGNIZED'
-  | 'CARD_AMBIGUOUS'
-  | 'CARD_UNREADABLE'
-  | 'RECOGNITION_TIMEOUT'
-  | 'RECOGNITION_FAILED'
-  | 'RECOGNITION_DISABLED'
-  | 'RECOGNITION_RATE_LIMITED'
+    | 'CARD_AMBIGUOUS'
+    | 'CARD_UNREADABLE'
+    | 'RECOGNITION_TIMEOUT'
+    | 'RECOGNITION_FAILED'
+    | 'RECOGNITION_DISABLED'
+    | 'RECOGNITION_RATE_LIMITED'
 
 export interface CardRecognitionRes {
   code: CardRecognitionCode | string
@@ -86,6 +86,7 @@ export interface CardListParams {
   cardValue?: string
   status?: string
   categoryCode?: string
+  allocateOnly?: boolean
   includeTotal?: boolean
 }
 
@@ -207,13 +208,16 @@ export interface AllocateTarget {
 }
 
 export interface AllocateBatchPrepareParams {
+  executionMode?: number
   cardValues: string[]
   targetDeptId: number
 }
 
 export interface AllocateBatchSubmitParams {
+  requestId?: string
+  executionMode?: number
   cardValues?: string[]
-  batchNo: string
+  batchNo?: string
   targetDeptId?: number
   remark?: string
 }
@@ -277,6 +281,7 @@ export interface AllocateTargetListRes {
 }
 
 export interface AllocateBatchRes {
+  requestId?: string
   batchNo: string
   sourceBatchNo?: string
   batchType: number
diff --git a/app/src/api/types/customer.ts b/app/src/api/types/customer.ts
index bcf9576..2f62134 100644
--- a/app/src/api/types/customer.ts
+++ b/app/src/api/types/customer.ts
@@ -28,6 +28,8 @@ export interface AppCustomer {
   balance?: number
   cardCount: number
   normalCardCount: number
+  cardStatusCounts?: { status: number, count: number }[]
+  packageStatusCounts?: { status: number, count: number }[]
   address?: string
   fullName?: string
   createdAt?: string
@@ -41,6 +43,11 @@ export interface AppCustomerDetail extends AppCustomer {
 export interface CustomerListRes {
   items: AppCustomer[]
   total: number
+  summary: {
+    total: number
+    normalCount: number
+    pendingProfileCount: number
+  }
 }
 
 export interface CustomerDetailParams {
diff --git a/app/src/api/types/diagnosis.ts b/app/src/api/types/diagnosis.ts
index 30dcca4..8e19f78 100644
--- a/app/src/api/types/diagnosis.ts
+++ b/app/src/api/types/diagnosis.ts
@@ -13,8 +13,12 @@ export interface DiagnosisInfoItem {
   iccid?: string
   imsi?: string
   msisdn?: string
+  imei?: string
   status?: string
   dataStatus?: string
+  dataServiceSource?: 'apn' | 'network_block'
+  netBlockStatus?: string
+  netBlockReason?: string
   onlineStatus?: string
   operatingStatus?: string
   deviceStatus?: string
@@ -88,6 +92,7 @@ export interface DiagnosisInfoRes {
 
 export interface DiagnosisModuleItem {
   status: 'success' | 'error' | 'cached' | 'skipped' | string
+  reason?: 'not_subscribed' | 'unsupported' | 'no_data' | 'query_error' | string
   message?: string
   cached?: boolean
   updatedAt?: string
@@ -96,6 +101,7 @@ export interface DiagnosisModuleItem {
 export interface DiagnosisFlowRes {
   times: string[]
   flow: number[]
+  flowAvailable?: boolean[]
   unit: string
   granularity?: 'day' | 'month' | string
   hasData?: boolean
diff --git a/app/src/api/types/login.ts b/app/src/api/types/login.ts
index 55981fe..1c38eac 100644
--- a/app/src/api/types/login.ts
+++ b/app/src/api/types/login.ts
@@ -97,6 +97,13 @@ export interface ILoginForm {
   wxCode?: string
 }
 
+export interface IPhoneSmsLoginForm {
+  tenantId: string
+  phone: string
+  smsCode: string
+  selectedUserId?: number
+}
+
 export interface IWechatLoginForm {
   tenantId: string
   wxCode: string
@@ -106,8 +113,7 @@ export interface IWechatBindPhoneForm {
   tenantId: string
   bindTicket: string
   phone: string
-  captchaKey?: string
-  captchaPoint?: string
+  smsCode: string
   selectedUserId?: number
 }
 
@@ -116,8 +122,7 @@ export interface IRegisterForm {
   phone: string
   password: string
   nickName: string
-  /** 短信验证码：当前注册未接入短信，图形验证通过后可为空 */
-  smsCode?: string
+  smsCode: string
 }
 
 export interface IForgotPasswordForm {
@@ -128,6 +133,7 @@ export interface IForgotPasswordForm {
 }
 
 export interface IUserInfoRes {
+  isTopLevelEnterprise?: boolean
   userId?: number
   tenantId?: string
   deptId?: number
@@ -179,7 +185,9 @@ export interface ICheckSideCaptchaForm {
 export interface ISendSmsForm {
   tenantId: string
   phone: string
-  scene: 'register' | 'forgotPassword'
+  scene: 'register' | 'login' | 'forgotPassword' | 'wechatBindPhone'
+  captchaKey: string
+  captchaPoint: string
 }
 
 export interface ISendSmsRes {
diff --git a/app/src/api/types/warning.ts b/app/src/api/types/warning.ts
index 151f944..c87c90e 100644
--- a/app/src/api/types/warning.ts
+++ b/app/src/api/types/warning.ts
@@ -40,7 +40,7 @@ export interface WarningConfigSaveParams {
   secondWarn?: number
   thirdWarn?: number
   isEnabled: number
-  appNotifyEnabled: number
+  appNotifyEnabled?: number
   remark?: string
 }
 
@@ -74,6 +74,8 @@ export interface WarningConfigMetaRes {
   wechatBound: boolean
   wechatBindText: string
   appNotifyEnabled: number
+  activeConfigCount?: number
+  notifyConfigCount?: number
 }
 
 export interface WarningConfigBatchSaveParams {
@@ -87,7 +89,7 @@ export interface WarningConfigBatchItemParams {
   secondWarn?: number
   thirdWarn?: number
   isEnabled: number
-  appNotifyEnabled: number
+  appNotifyEnabled?: number
   remark?: string
 }
 
diff --git a/app/src/api/types/workOrder.ts b/app/src/api/types/workOrder.ts
index bbb586b..7e5afd0 100644
--- a/app/src/api/types/workOrder.ts
+++ b/app/src/api/types/workOrder.ts
@@ -1,4 +1,5 @@
 export interface WorkOrderListParams {
+  scope?: 'all' | 'submitted' | 'received'
   page: number
   pageSize: number
   keyword?: string
@@ -7,10 +8,12 @@ export interface WorkOrderListParams {
 }
 
 export interface WorkOrderDetailParams {
+  beforeId?: number
   woNo: string
 }
 
 export interface WorkOrderCreateParams {
+  creatorPhone: string
   woType: number
   relatedId?: number
   title: string
@@ -29,7 +32,37 @@ export interface AppWorkOrderCommunication {
   createdAt?: string
 }
 
+export type WorkOrderAction = 'reply' | 'reopen' | 'confirm' | 'cancel' | 'evaluate' | 'transfer' | 'resolve' | 'close'
+
+export interface WorkOrderActionParams {
+  woNo: string
+  action: WorkOrderAction
+  content?: string
+  attachmentUrls?: string[]
+  satisfactionLevel?: number
+}
+
+export interface WorkOrderProgress {
+  id: number
+  operationType: number
+  operationText: string
+  beforeStatus: number
+  afterStatus: number
+  createdAt?: string
+}
+
 export interface AppWorkOrder {
+  attachmentNames?: Record<string, string>
+  isCreator?: boolean
+  hasMoreCommunications?: boolean
+  attachmentUrls?: string[]
+  actions: WorkOrderAction[]
+  records?: WorkOrderProgress[]
+  resolveTime?: string
+  closeTime?: string
+  satisfactionLevel: number
+  evalContent?: string
+  evalTime?: string
   id: number
   woNo: string
   woType: number
diff --git a/app/src/api/workOrder.ts b/app/src/api/workOrder.ts
index a064500..6b29393 100644
--- a/app/src/api/workOrder.ts
+++ b/app/src/api/workOrder.ts
@@ -1,4 +1,5 @@
 import type {
+  WorkOrderActionParams,
   WorkOrderCreateParams,
   WorkOrderCreateRes,
   WorkOrderDetailParams,
@@ -11,6 +12,7 @@ import { http } from '@/http/http'
 export type {
   AppWorkOrder,
   AppWorkOrderCommunication,
+  WorkOrderActionParams,
   WorkOrderCreateParams,
   WorkOrderDetailParams,
   WorkOrderListParams,
@@ -33,3 +35,7 @@ export function createWorkOrder(data: WorkOrderCreateParams) {
     hideErrorToast: true,
   })
 }
+
+export function actOnWorkOrder(data: WorkOrderActionParams) {
+  return http.post('/work-order/action', data, undefined, undefined, { hideErrorToast: true })
+}
diff --git a/app/src/components/Navbar/index.vue b/app/src/components/Navbar/index.vue
index e186b86..d6cf890 100644
--- a/app/src/components/Navbar/index.vue
+++ b/app/src/components/Navbar/index.vue
@@ -1,5 +1,6 @@
 <script setup lang="ts">
 import { getCurrentPageI18nKey, isCurrentPageTabbar } from '@/utils'
+
 defineProps<{
   desc?: string
 }>()
@@ -37,10 +38,11 @@ onMounted(() => {
 
     <template #title>
       <view class="nav-title-row">
-        <view class="nav-title">{{ title }}</view>
+        <view class="nav-title">
+          {{ title }}
+        </view>
       </view>
     </template>
-
   </wd-navbar>
 </template>
 
@@ -109,5 +111,4 @@ onMounted(() => {
   text-overflow: ellipsis;
   white-space: nowrap;
 }
-
 </style>
diff --git a/app/src/components/WorkOrderAttachmentPreview.vue b/app/src/components/WorkOrderAttachmentPreview.vue
new file mode 100644
index 0000000..7ff5a22
--- /dev/null
+++ b/app/src/components/WorkOrderAttachmentPreview.vue
@@ -0,0 +1,38 @@
+<script setup lang="ts">
+import { isWorkOrderImage } from '@/utils/workOrderAttachment'
+
+const props = defineProps<{ url: string, name: string }>()
+const emit = defineEmits<{ open: [] }>()
+const failed = ref(false)
+const loaded = ref(false)
+const isImage = computed(() => isWorkOrderImage(props.url, props.name))
+watch(() => props.url, () => {
+  failed.value = false
+  loaded.value = false
+})
+</script>
+
+<template>
+  <view v-if="isImage" class="w-full overflow-hidden rounded-12rpx bg-#f1f5f9" @click="emit('open')">
+    <view class="relative h-176rpx w-full">
+      <view v-if="!loaded || failed" class="absolute inset-0 flex flex-col items-center justify-center gap-8rpx text-#64748b">
+        <wd-icon name="image" size="28" />
+        <text class="text-22rpx">{{ failed ? '点击查看原图' : '图片加载中' }}</text>
+      </view>
+      <image
+        v-if="!failed"
+        :src="url"
+        mode="aspectFill"
+        class="relative h-176rpx w-full"
+        @load="loaded = true"
+        @error="failed = true"
+      />
+    </view>
+    <view class="truncate px-12rpx py-10rpx text-22rpx text-#475569">
+      {{ name }}
+    </view>
+  </view>
+  <view v-else class="w-full overflow-hidden rounded-12rpx bg-#f1f5f9">
+    <wd-cell :title="name" icon="file" is-link custom-class="!bg-transparent" custom-title-class="!truncate !text-24rpx" @click="emit('open')" />
+  </view>
+</template>
diff --git a/app/src/components/WorkOrderAttachments.test.ts b/app/src/components/WorkOrderAttachments.test.ts
new file mode 100644
index 0000000..afffaf9
--- /dev/null
+++ b/app/src/components/WorkOrderAttachments.test.ts
@@ -0,0 +1,33 @@
+import { readFileSync } from 'node:fs'
+import { createContext, runInContext } from 'node:vm'
+import { ModuleKind, ScriptTarget, transpileModule } from 'typescript'
+import { describe, expect, it, vi } from 'vitest'
+import { workOrderAttachmentName } from '@/utils/workOrderAttachment'
+
+const source = readFileSync(new URL('./WorkOrderAttachments.vue', import.meta.url), 'utf8')
+
+describe('工单上传原始文件名', () => {
+  it('微信上传携带原名，并保留URL字符串协议', async () => {
+    const emit = vi.fn()
+    const upload = vi.fn((options) => {
+      options.success({ statusCode: 200, data: JSON.stringify({ code: 0, data: { url: 'https://files/random.pdf', originalName: '说明.pdf' } }) })
+    })
+    const context = createContext({
+      exports: {},
+      require: (name: string) => name === '@/utils/workOrderAttachment' ? { workOrderAttachmentName } : name === '@/utils' ? { getEnvBaseUrl: () => 'https://api/api/v1' } : {},
+      defineProps: () => ({ modelValue: [], disabled: false }),
+      defineEmits: () => emit,
+      ref: (value: unknown) => ({ value }),
+      uni: { uploadFile: upload, showToast: vi.fn() },
+    })
+    const script = source.match(/<script[^>]*>([\s\S]*?)<\/script>/)?.[1]
+    if (!script)
+      throw new Error('未找到附件上传脚本')
+    runInContext(transpileModule(script, { compilerOptions: { module: ModuleKind.CommonJS, target: ScriptTarget.ES2020 } }).outputText, context)
+    await runInContext('upload("wxfile://random.pdf", "说明.pdf", 20)', context)
+    expect(upload).toHaveBeenCalledWith(expect.objectContaining({ url: '/work-order/upload', formData: { fileType: 'file', originalName: '说明.pdf' } }))
+    expect(emit).toHaveBeenCalledWith('update:modelValue', ['https://files/random.pdf'])
+    expect(runInContext('nameOf("https://files/random.pdf")', context)).toBe('说明.pdf')
+    expect(source).toContain('form.append(\'originalName\', name)')
+  })
+})
diff --git a/app/src/components/WorkOrderAttachments.vue b/app/src/components/WorkOrderAttachments.vue
new file mode 100644
index 0000000..5ea52bf
--- /dev/null
+++ b/app/src/components/WorkOrderAttachments.vue
@@ -0,0 +1,162 @@
+<script setup lang="ts">
+import { useTokenStore } from '@/store/token'
+import { getEnvBaseUrl } from '@/utils'
+import { workOrderAttachmentName } from '@/utils/workOrderAttachment'
+
+const props = defineProps<{ modelValue: string[], disabled?: boolean }>()
+const emit = defineEmits<{
+  'update:modelValue': [value: string[]]
+  'uploading': [value: boolean]
+}>()
+const uploading = ref(false)
+
+const attachmentNames = ref<Record<string, string>>({})
+
+function nameOf(url: string) {
+  return workOrderAttachmentName(url, attachmentNames.value[url])
+}
+
+async function upload(file: string | File, name: string, size?: number) {
+  if (uploading.value || props.disabled)
+    return
+  if ((size || 0) > 10 * 1024 * 1024) {
+    uni.showToast({ title: '单个附件不能超过10MB', icon: 'none' })
+    return
+  }
+  uploading.value = true
+  emit('uploading', true)
+  try {
+    let body: { code: number, msg?: string, message?: string, data?: { url?: string, path?: string, originalName?: string } }
+    // #ifdef H5
+    if (typeof file !== 'string') {
+      const form = new FormData()
+      form.append('file', file, name)
+      form.append('fileType', 'file')
+      form.append('originalName', name)
+      const token = useTokenStore().updateNowTime().validToken
+      const response = await fetch(`${getEnvBaseUrl()}/work-order/upload`, {
+        method: 'POST',
+        headers: token ? { Authorization: `Bearer ${token}` } : undefined,
+        body: form,
+      })
+      if (!response.ok)
+        throw new Error('附件上传失败')
+      body = await response.json()
+    }
+    else {
+    // #endif
+      body = await new Promise((resolve, reject) => {
+        uni.uploadFile({
+          url: '/work-order/upload',
+          filePath: file as string,
+          name: 'file',
+          formData: { fileType: 'file', originalName: name },
+          success: (res) => {
+            try {
+              if (res.statusCode < 200 || res.statusCode >= 300)
+                throw new Error('附件上传失败')
+              resolve(JSON.parse(res.data))
+            }
+            catch (error) { reject(error) }
+          },
+          fail: reject,
+        })
+      })
+    // #ifdef H5
+    }
+    // #endif
+    if (Number(body.code) !== 0)
+      throw new Error(body.message || body.msg || '附件上传失败')
+    const url = body.data?.url || body.data?.path
+    if (!url)
+      throw new Error('上传接口未返回文件地址')
+    attachmentNames.value[url] = body.data?.originalName || name
+    emit('update:modelValue', [...props.modelValue, url])
+  }
+  catch (error) {
+    uni.showToast({ title: error instanceof Error ? error.message : '附件上传失败', icon: 'none' })
+  }
+  finally {
+    uploading.value = false
+    emit('uploading', false)
+  }
+}
+
+function chooseFile() {
+  // #ifdef H5
+  const input = document.createElement('input')
+  input.type = 'file'
+  input.onchange = () => {
+    const file = input.files?.[0]
+    if (file)
+      void upload(file, file.name, file.size)
+  }
+  input.click()
+  return
+  // #endif
+  // #ifdef MP-WEIXIN
+  uni.chooseMessageFile({
+    count: 1,
+    type: 'all',
+    success: (res) => {
+      const file = res.tempFiles[0]
+      if (file)
+        void upload(file.path, file.name, file.size)
+    },
+  })
+  return
+  // #endif
+  // #ifndef H5
+  // #ifndef MP-WEIXIN
+  uni.showToast({ title: '当前平台请使用图片附件', icon: 'none' })
+  // #endif
+  // #endif
+}
+
+function choose() {
+  if (uploading.value || props.disabled)
+    return
+  if (props.modelValue.length >= 6) {
+    uni.showToast({ title: '最多上传6个附件', icon: 'none' })
+    return
+  }
+  uni.showActionSheet({
+    itemList: ['拍照或选择图片', '选择文件'],
+    success: ({ tapIndex }) => {
+      if (tapIndex === 1) {
+        chooseFile()
+        return
+      }
+      uni.chooseImage({
+        count: 1,
+        sizeType: ['compressed'],
+        sourceType: ['album', 'camera'],
+        success: (res) => {
+          const files = res.tempFiles as UniApp.ChooseImageSuccessCallbackResult['tempFiles']
+          const file = Array.isArray(files) ? files[0] : undefined
+          const path = res.tempFilePaths[0]
+          if (path)
+            void upload(path, workOrderAttachmentName(path), file?.size)
+        },
+      })
+    },
+  })
+}
+</script>
+
+<template>
+  <view class="flex flex-col gap-12rpx">
+    <view class="flex items-center justify-between gap-16rpx">
+      <text class="text-24rpx text-#64748b">附件 {{ modelValue.length }}/6，单个不超过10MB</text>
+      <wd-button size="small" type="primary" variant="text" icon="add" :disabled="disabled || modelValue.length >= 6" :loading="uploading" @click="choose">
+        添加附件
+      </wd-button>
+    </view>
+    <view v-for="(url, index) in modelValue" :key="`${url}-${index}`" class="flex items-center justify-between gap-16rpx">
+      <text class="min-w-0 flex-1 truncate text-24rpx text-#334155">{{ nameOf(url) }}</text>
+      <wd-button size="small" type="danger" variant="text" :disabled="disabled || uploading" @click="emit('update:modelValue', modelValue.filter((_, i) => i !== index))">
+        移除
+      </wd-button>
+    </view>
+  </view>
+</template>
diff --git a/app/src/constant/RouterPath.ts b/app/src/constant/RouterPath.ts
index d632ec8..ca795e3 100644
--- a/app/src/constant/RouterPath.ts
+++ b/app/src/constant/RouterPath.ts
@@ -6,76 +6,82 @@
  * 页面路径常量
  */
 const RouterPath = {
-  /** 山东平台物联卡 */
-  Home: '/pages/home/index',
+  /** 示例企业物联卡 */
+  'Home': '/pages/home/index',
   /** 办理 */
-  Business: '/pages/business/index',
+  'Business': '/pages/business/index',
   /** 卡片 */
-  Card: '/pages/card/index',
-  /** 山东平台物联卡 */
-  Login: '/pages/login/index',
+  'Card': '/pages/card/index',
+  /** 示例企业物联卡 */
+  'Login': '/pages/login/index',
   /** 消息 */
-  Message: '/pages/message/index',
+  'Message': '/pages/message/index',
   /** 我的 */
-  User: '/pages/user/index',
+  'User': '/pages/user/index',
   /** 找回密码 */
   'LoginForgot-password': '/pages/login/forgot-password/index',
   /** 注册账号 */
-  LoginRegister: '/pages/login/register/index',
+  'LoginRegister': '/pages/login/register/index',
   /** 加油包 */
-  BusinessViewsAddon: '/pages/business/views/addon/index',
+  'BusinessViewsAddon': '/pages/business/views/addon/index',
   /** 批量卡片划拨 */
-  BusinessViewsAllocate: '/pages/business/views/allocate/index',
+  'BusinessViewsAllocate': '/pages/business/views/allocate/index',
   /** 余额充值 */
-  BusinessViewsBalanceRecharge: '/pages/business/views/balanceRecharge/index',
+  'BusinessViewsBalanceRecharge': '/pages/business/views/balanceRecharge/index',
   /** 单卡套餐续费 */
-  BusinessViewsCardRenew: '/pages/business/views/cardRenew/index',
+  'BusinessViewsCardRenew': '/pages/business/views/cardRenew/index',
   /** 套餐变更 */
-  BusinessViewsChange: '/pages/business/views/change/index',
+  'BusinessViewsChange': '/pages/business/views/change/index',
   /** 客户管理 */
-  BusinessViewsCustomer: '/pages/business/views/customer/index',
+  'BusinessViewsCustomer': '/pages/business/views/customer/index',
   /** 客户详情 */
-  BusinessViewsCustomerDetail: '/pages/business/views/customerDetail/index',
+  'BusinessViewsCustomerDetail': '/pages/business/views/customerDetail/index',
   /** 卡片排查 */
-  BusinessViewsDiagnosis: '/pages/business/views/diagnosis/index',
+  'BusinessViewsDiagnosis': '/pages/business/views/diagnosis/index',
   /** 我的订单 */
-  BusinessViewsOrder: '/pages/business/views/order/index',
+  'BusinessViewsOrder': '/pages/business/views/order/index',
   /** 批量套餐续费 */
-  BusinessViewsRenew: '/pages/business/views/renew/index',
+  'BusinessViewsRenew': '/pages/business/views/renew/index',
   /** 预警配置 */
-  BusinessViewsWarning: '/pages/business/views/warning/index',
+  'BusinessViewsWarning': '/pages/business/views/warning/index',
   /** 工单列表 */
-  BusinessViewsWorkOrder: '/pages/business/views/workOrder/index',
+  'BusinessViewsWorkOrder': '/pages/business/views/workOrder/index',
   /** 提交工单 */
-  BusinessViewsWorkOrderCreate: '/pages/business/views/workOrderCreate/index',
+  'BusinessViewsWorkOrderCreate': '/pages/business/views/workOrderCreate/index',
   /** 工单详情 */
-  BusinessViewsWorkOrderDetail: '/pages/business/views/workOrderDetail/index',
+  'BusinessViewsWorkOrderDetail': '/pages/business/views/workOrderDetail/index',
   /** 卡片详情 */
-  CardViewsDetail: '/pages/card/views/detail/index',
+  'CardViewsDetail': '/pages/card/views/detail/index',
   /** 全部设备 */
-  CardViewsManagement: '/pages/card/views/management/index',
+  'CardViewsManagement': '/pages/card/views/management/index',
   /** 卡片详情 */
-  CardViewsPackageDetail: '/pages/card/views/packageDetail/index',
+  'CardViewsPackageDetail': '/pages/card/views/packageDetail/index',
   /** 预警配置 */
-  CardViewsWarning: '/pages/card/views/warning/index',
+  'CardViewsWarning': '/pages/card/views/warning/index',
   /** 消息详情 */
-  MessageViewsCardDetail: '/pages/message/views/cardDetail/index',
+  'MessageViewsCardDetail': '/pages/message/views/cardDetail/index',
   /** 消息详情 */
-  MessageViewsSystemDetail: '/pages/message/views/systemDetail/index',
+  'MessageViewsSystemDetail': '/pages/message/views/systemDetail/index',
   /** 关于我们 */
-  UserViewsAbout: '/pages/user/views/about/index',
+  'UserViewsAbout': '/pages/user/views/about/index',
   /** 协议与隐私 */
-  UserViewsAgreement: '/pages/user/views/agreement/index',
+  'UserViewsAgreement': '/pages/user/views/agreement/index',
   /** 联系客服 */
-  UserViewsContact: '/pages/user/views/contact/index',
+  'UserViewsContact': '/pages/user/views/contact/index',
+  /** 批次执行日志 */
+  'UserViewsExecutionLog': '/pages/user/views/executionLog/index',
+  /** 执行日志详情 */
+  'UserViewsExecutionLogDetail': '/pages/user/views/executionLogDetail/index',
   /** 帮助与反馈 */
-  UserViewsFeedback: '/pages/user/views/feedback/index',
-  /** 微信提醒 */
-  UserViewsNotification: '/pages/user/views/notification/index',
-  /** 账号资料 */
-  UserViewsProfile: '/pages/user/views/profile/index',
+  'UserViewsFeedback': '/pages/user/views/feedback/index',
+  /** 使用手册 */
+  'UserViewsManual': '/pages/user/views/manual/index',
+  /** 消息提醒 */
+  'UserViewsNotification': '/pages/user/views/notification/index',
+  /** 个人资料 */
+  'UserViewsProfile': '/pages/user/views/profile/index',
   /** 实名信息 */
-  UserViewsRealName: '/pages/user/views/realName/index',
+  'UserViewsRealName': '/pages/user/views/realName/index',
 }
 
 export default RouterPath
diff --git a/app/src/constant/release.ts b/app/src/constant/release.ts
new file mode 100644
index 0000000..c6fc6b3
--- /dev/null
+++ b/app/src/constant/release.ts
@@ -0,0 +1,33 @@
+/**
+ * v1.0.2 front-end release scope (legacy export names retained).
+ *
+ * Business, customer management and authorized allocation are now available.
+ * Other unreleased lifecycle actions remain hidden. The API layer is unchanged;
+ * these switches keep every front-end entry point consistent.
+ */
+export const V101_RELEASE = {
+  showWechatLogin: false,
+  showRegister: false,
+  showBindCard: false,
+  showCardMoreActions: false,
+  showBusinessTab: true,
+  showUserBusinessEntries: false,
+  showDiagnosisFlowForNonAdmin: false,
+} as const
+
+/** Routes that must remain unreachable from direct front-end navigation. */
+export const V101_HIDDEN_ROUTE_PATHS = new Set([
+  '/pages/business/views/addon/index',
+  '/pages/business/views/balanceRecharge/index',
+  '/pages/business/views/cardRenew/index',
+  '/pages/business/views/change/index',
+  '/pages/business/views/order/index',
+  '/pages/business/views/renew/index',
+  '/pages/business/views/warning/index',
+  '/pages/card/views/packageDetail/index',
+  '/pages/card/views/warning/index',
+])
+
+export function isV101HiddenRoute(path: string) {
+  return V101_HIDDEN_ROUTE_PATHS.has(path)
+}
diff --git a/app/src/http/interceptor.test.ts b/app/src/http/interceptor.test.ts
new file mode 100644
index 0000000..0b19569
--- /dev/null
+++ b/app/src/http/interceptor.test.ts
@@ -0,0 +1,39 @@
+import { readFileSync } from 'node:fs'
+import { afterEach, describe, expect, it, vi } from 'vitest'
+
+const config = vi.hoisted(() => ({ baseUrl: '/app/api/v1' }))
+
+vi.mock('@/utils', () => ({ getEnvBaseUrl: () => config.baseUrl }))
+vi.mock('@/store', () => ({
+  useTokenStore: () => ({ updateNowTime: () => ({ validToken: 'test-token' }) }),
+}))
+
+afterEach(() => {
+  vi.unstubAllGlobals()
+  vi.resetModules()
+})
+
+describe('工单附件上传地址', () => {
+  it.each([
+    '/app/api/v1',
+    'http://localhost:8010/api/v1',
+    'https://example.com/app/api/v1',
+  ])('基础地址 %s 只拼接一次，并保留鉴权', async (baseUrl) => {
+    config.baseUrl = baseUrl
+    const addInterceptor = vi.fn()
+    vi.stubGlobal('uni', { addInterceptor })
+    const { requestInterceptor } = await import('./interceptor')
+    requestInterceptor.install()
+    const uploadInterceptor = addInterceptor.mock.calls.find(([name]) => name === 'uploadFile')?.[1]
+    expect(uploadInterceptor).toBeDefined()
+    const options = uploadInterceptor.invoke({ url: '/work-order/upload' })
+    expect(options.url).toBe(`${baseUrl}/work-order/upload`)
+    expect(options.header.Authorization).toBe('Bearer test-token')
+  })
+
+  it('原生上传交由拦截器拼接，H5 fetch 保留基础地址', () => {
+    const source = readFileSync(new URL('../components/WorkOrderAttachments.vue', import.meta.url), 'utf8')
+    expect(source).toMatch(/uni\.uploadFile\(\{\s*url: '\/work-order\/upload'/)
+    expect(source).toMatch(/fetch\(`\$\{getEnvBaseUrl\(\)\}\/work-order\/upload`/)
+  })
+})
diff --git a/app/src/http/tools/enum.ts b/app/src/http/tools/enum.ts
index 8ea91ff..72cfce0 100644
--- a/app/src/http/tools/enum.ts
+++ b/app/src/http/tools/enum.ts
@@ -28,7 +28,7 @@ const networkErrorPattern
   = /request:fail|timeout|failed to fetch|networkerror|err_connection|econnrefused|econnreset|econnaborted|enotfound|net::|socket|connect|refused|abort|not in domain list|url not in domain list|ssl|tls|certificate|网络|超时/i
 
 const technicalDetailPattern
-  = /https?:\/\/|\/api\/|接口[:：]|errMsg|statusCode|StatusCode|request:|XMLHttpRequest|TypeError:|Error:/i
+  = /https?:\/\/|\/api\/|接口[:：]|errMsg|statusCode|request:|XMLHttpRequest|TypeError:|Error:/i
 
 /**
  * 根据状态码，生成对应的错误信息
diff --git a/app/src/manifest.json b/app/src/manifest.json
index 05eeedf..365cb58 100644
--- a/app/src/manifest.json
+++ b/app/src/manifest.json
@@ -2,8 +2,8 @@
   "name": "山东平台物联卡",
   "appid": "__UNI__YOURAPPID",
   "description": "",
-  "versionName": "1.0.0",
-  "versionCode": "100",
+  "versionName": "1.0.2",
+  "versionCode": "102",
   "transformPx": false,
   "app-plus": {
     "usingComponents": true,
diff --git a/app/src/pages.json b/app/src/pages.json
index 34fd6e3..386f33b 100644
--- a/app/src/pages.json
+++ b/app/src/pages.json
@@ -21,7 +21,7 @@
       "type": "home",
       "style": {
         "navigationStyle": "default",
-        "navigationBarTitleText": "山东平台物联卡",
+        "navigationBarTitleText": "示例企业物联卡",
         "navigationBarBackgroundColor": "#ffffff",
         "navigationBarTextStyle": "black"
       },
@@ -49,7 +49,7 @@
       "type": "page",
       "name": "Login",
       "style": {
-        "navigationBarTitleText": "山东平台物联卡",
+        "navigationBarTitleText": "示例企业物联卡",
         "navigationBarBackgroundColor": "#ffffff",
         "navigationBarTextStyle": "black",
         "disableScroll": true
@@ -180,7 +180,8 @@
           "path": "workOrder/index",
           "type": "page",
           "style": {
-            "navigationBarTitleText": "工单列表"
+            "navigationBarTitleText": "工单列表",
+            "enablePullDownRefresh": true
           }
         },
         {
@@ -290,7 +291,7 @@
           "path": "notification/index",
           "type": "page",
           "style": {
-            "navigationBarTitleText": "微信提醒"
+            "navigationBarTitleText": "消息提醒"
           }
         },
         {
@@ -298,7 +299,7 @@
           "type": "page",
           "excludeLoginPath": true,
           "style": {
-            "navigationBarTitleText": "账号资料"
+            "navigationBarTitleText": "个人资料"
           }
         },
         {
@@ -307,6 +308,27 @@
           "style": {
             "navigationBarTitleText": "实名信息"
           }
+        },
+        {
+          "path": "manual/index",
+          "type": "page",
+          "style": {
+            "navigationBarTitleText": "使用手册"
+          }
+        },
+        {
+          "path": "executionLog/index",
+          "type": "page",
+          "style": {
+            "navigationBarTitleText": "批次执行日志"
+          }
+        },
+        {
+          "path": "executionLogDetail/index",
+          "type": "page",
+          "style": {
+            "navigationBarTitleText": "执行日志详情"
+          }
         }
       ]
     }
diff --git a/app/src/pages/business/components/BusinessSection.vue b/app/src/pages/business/components/BusinessSection.vue
index c74d6a0..0c70d84 100644
--- a/app/src/pages/business/components/BusinessSection.vue
+++ b/app/src/pages/business/components/BusinessSection.vue
@@ -3,6 +3,7 @@ import type { BusinessServiceItem, BusinessServiceSection, BusinessTone } from '
 
 const props = defineProps<{
   section: BusinessServiceSection
+  busy?: boolean
 }>()
 
 const emit = defineEmits<{
@@ -19,12 +20,13 @@ const toneClass: Record<BusinessTone, string> = {
 }
 
 function handleClick(item: BusinessServiceItem) {
-  emit('action', item)
+  if (!props.busy)
+    emit('action', item)
 }
 
 function visibleRoleTag(item: BusinessServiceItem) {
   if (item.agentOnly)
-    return '代理商'
+    return '企业 / 代理'
   if (item.terminalOnly)
     return '用户'
   if (item.terminalHidden)
diff --git a/app/src/pages/business/data.test.ts b/app/src/pages/business/data.test.ts
index 0cce706..ad4c030 100644
--- a/app/src/pages/business/data.test.ts
+++ b/app/src/pages/business/data.test.ts
@@ -21,6 +21,15 @@ const expectedSubViews = [
 ]
 
 describe('getUserBusinessSections', () => {
+  it('按服务、资源管理和执行记录划分入口且不重复', () => {
+    const sectionItems = (title: string) => businessSections.find(section => section.title === title)?.items.map(item => item.action)
+    expect(sectionItems('服务记录')).toEqual(['order', 'workOrder'])
+    expect(sectionItems('卡片与客户')).toEqual(['cardList', 'customer'])
+    expect(sectionItems('执行记录')).toEqual(['executionLog'])
+    const titles = businessSections.flatMap(section => section.items.map(item => item.title))
+    expect(new Set(titles).size).toBe(titles.length)
+  })
+
   it('只保留用户侧一级业务入口', () => {
     const sections = getUserBusinessSections(businessSections)
     const titles = sections.flatMap(section => section.items.map(item => item.title))
diff --git a/app/src/pages/business/data.ts b/app/src/pages/business/data.ts
index 482f7b1..c05a290 100644
--- a/app/src/pages/business/data.ts
+++ b/app/src/pages/business/data.ts
@@ -1,6 +1,6 @@
 import type { IUserInfoRes } from '@/api/types/login'
 import type { AppPermissionAction } from '@/utils/permission'
-import { hasUserPermission } from '@/utils/permission'
+import { hasAccessCode, hasUserPermission } from '@/utils/permission'
 import { getAccountWorkspace, isTerminalUserInfo } from '@/utils/userIdentity'
 
 export type BusinessTone = 'blue' | 'green' | 'orange' | 'primary' | 'purple' | 'red'
@@ -18,11 +18,13 @@ export interface BusinessServiceItem {
     | 'cardList'
     | 'change'
     | 'customer'
+    | 'executionLog'
     | 'diagnosis'
     | 'order'
     | 'renew'
     | 'warning'
     | 'workOrder'
+  accessCode?: string
   agentOnly?: boolean
   terminalOnly?: boolean
   terminalHidden?: boolean
@@ -113,7 +115,7 @@ export const businessSections: BusinessServiceSection[] = [
       },
       {
         title: '预警配置',
-        desc: '流量阈值与微信订阅',
+        desc: '流量阈值与站内消息提醒',
         tag: '预警',
         icon: 'i-carbon-warning-alt',
         tone: 'orange',
@@ -134,7 +136,7 @@ export const businessSections: BusinessServiceSection[] = [
   },
   {
     title: '服务记录',
-    desc: '订单与工单',
+    desc: '订单查询与问题反馈',
     type: 'grid',
     items: [
       {
@@ -154,6 +156,13 @@ export const businessSections: BusinessServiceSection[] = [
         action: 'workOrder',
         permissionAction: ['workOrder', 'workOrderCreate'],
       },
+    ],
+  },
+  {
+    title: '卡片与客户',
+    desc: '卡片信息与客户管理',
+    type: 'list',
+    items: [
       {
         title: '我的卡片',
         desc: '查看卡信息、套餐和流量',
@@ -164,7 +173,7 @@ export const businessSections: BusinessServiceSection[] = [
       },
       {
         title: '客户管理',
-        desc: '直属客户与客户详情',
+        desc: '授权范围内的客户与详情',
         tag: '客户',
         icon: 'i-carbon-user-multiple',
         tone: 'green',
@@ -174,6 +183,22 @@ export const businessSections: BusinessServiceSection[] = [
       },
     ],
   },
+  {
+    title: '执行记录',
+    desc: '批次进度与执行结果',
+    type: 'list',
+    items: [
+      {
+        title: '批次执行日志',
+        desc: '查看批次进度与执行结果',
+        tag: '日志',
+        icon: 'i-carbon-document',
+        tone: 'blue',
+        action: 'executionLog',
+        accessCode: 'cpm:common:batchExecutionLog:list',
+      },
+    ],
+  },
 ]
 
 /** ====================  方法  ==================== */
@@ -191,6 +216,8 @@ export function getUserBusinessSections(
     .map(section => ({
       ...section,
       items: section.items.filter((item) => {
+        if (item.accessCode && !hasAccessCode(userInfo?.accessCodes, item.accessCode))
+          return false
         if (item.agentOnly && !isAgentUser)
           return false
         if (item.terminalOnly && !isTerminalUser)
diff --git a/app/src/pages/business/index.test.ts b/app/src/pages/business/index.test.ts
new file mode 100644
index 0000000..ca424a5
--- /dev/null
+++ b/app/src/pages/business/index.test.ts
@@ -0,0 +1,125 @@
+import type { IUserInfoRes } from '@/api/types/login'
+import { readFileSync } from 'node:fs'
+import { createContext, runInContext } from 'node:vm'
+import { ModuleKind, transpileModule } from 'typescript'
+import { describe, expect, it, vi } from 'vitest'
+import RouterPath from '@/constant/RouterPath'
+import * as release from '@/constant/release'
+import { customTabbarList } from '@/tabbar/config'
+import * as permission from '@/utils/permission'
+import * as data from './data'
+
+function createHarness(userInfo: Partial<IUserInfoRes>) {
+  const navigateTo = vi.fn((options: { complete?: () => void }) => options.complete?.())
+  const switchTab = vi.fn((options: { complete?: () => void }) => options.complete?.())
+  const fetchUserInfo = vi.fn(async () => userInfo)
+  const tokenStore = { hasLogin: true, updateNowTime: () => tokenStore }
+  const context = createContext({
+    exports: {},
+    require: (name: string) => {
+      if (name === '@/constant/RouterPath')
+        return { default: RouterPath }
+      if (name === '@/constant/release')
+        return release
+      if (name === '@/utils/permission')
+        return permission
+      if (name === '@/store/user')
+        return { useUserStore: () => ({ userInfo, fetchUserInfo }) }
+      if (name === '@/store/token')
+        return { useTokenStore: () => tokenStore }
+      if (name === './data')
+        return data
+      if (name === './components/BusinessSection.vue')
+        return {}
+      throw new Error(`Unexpected import: ${name}`)
+    },
+    ref: (value: unknown) => ({ value }),
+    computed: (getter: () => unknown) => ({ get value() { return getter() } }),
+    definePage: () => undefined,
+    onShow: () => undefined,
+    uni: { navigateTo, switchTab, showToast: vi.fn() },
+    Promise,
+  })
+  const source = readFileSync(new URL('./index.vue', import.meta.url), 'utf8')
+  const script = source.match(/<script[^>]*>([\s\S]*?)<\/script>/)?.[1]
+  if (!script)
+    throw new Error('Business page script not found')
+  runInContext(transpileModule(script, { compilerOptions: { module: ModuleKind.CommonJS } }).outputText, context)
+  return {
+    titles: () => Array.from(runInContext('sections.value.flatMap(section => section.items.map(item => item.title))', context)) as string[],
+    action: (title: string) => runInContext(`handleBusinessAction(sections.value.flatMap(section => section.items).find(item => item.title === ${JSON.stringify(title)}))`, context) as Promise<void>,
+    fetchUserInfo,
+    navigateTo,
+    switchTab,
+  }
+}
+
+function visibleTitles(userInfo: Partial<IUserInfoRes>) {
+  return createHarness(userInfo).titles()
+}
+
+describe('办理入口发布范围', () => {
+  it('沿用紧凑办理布局，不展示大块消息提醒入口', () => {
+    const source = readFileSync(new URL('./index.vue', import.meta.url), 'utf8')
+    const template = source.split('<template>')[1].split('</template>')[0]
+    expect(template).toContain('assist-card')
+    expect(template).toContain(':busy="actionPending"')
+    expect(template).not.toContain('查看业务消息')
+    expect(template).not.toContain('微信提醒设置')
+    expect(template).not.toContain('业务办理')
+  })
+
+  it('身份标签放在业务标题旁，保持单行且不挤占右侧区域', () => {
+    const source = readFileSync(new URL('./components/BusinessSection.vue', import.meta.url), 'utf8')
+    expect(source).toContain('biz-title-row')
+    expect(source).toContain('app-tag app-tag--info biz-role-tag')
+    expect(source).toContain('white-space: nowrap')
+    expect(source).not.toContain('title-width="75%"')
+  })
+
+  it('同一办理入口连续点击只跳转一次', async () => {
+    const harness = createHarness({ userId: 1, username: 'admin' })
+    await Promise.all([harness.action('我的卡片'), harness.action('我的卡片')])
+    expect(harness.fetchUserInfo).toHaveBeenCalledTimes(1)
+    expect(harness.switchTab).toHaveBeenCalledTimes(1)
+    expect(harness.switchTab.mock.calls[0][0]).toMatchObject({ url: RouterPath.Card })
+  })
+
+  it('权限更新后不再跳转已失效的客户入口', async () => {
+    const user = { userId: 12, userType: 'sys_user', appAccess: { configured: true, features: ['customer:list'] } }
+    const harness = createHarness(user)
+    harness.fetchUserInfo.mockImplementationOnce(async () => {
+      user.appAccess.features = []
+      return user
+    })
+    await harness.action('客户管理')
+    expect(harness.navigateTo).not.toHaveBeenCalled()
+  })
+
+  it('工单入口按列表或提交权限开放，路由可达', () => {
+    for (const feature of ['workorder:list', 'workorder:create'])
+      expect(visibleTitles({ userId: 12, appAccess: { configured: true, features: [feature] } })).toContain('工单服务')
+    expect(visibleTitles({ userId: 12, appAccess: { configured: true, features: [] } })).not.toContain('工单服务')
+    for (const route of [RouterPath.BusinessViewsWorkOrder, RouterPath.BusinessViewsWorkOrderCreate, RouterPath.BusinessViewsWorkOrderDetail])
+      expect(release.isV101HiddenRoute(route)).toBe(false)
+    expect(release.isV101HiddenRoute(RouterPath.BusinessViewsRenew)).toBe(true)
+  })
+  it('批次日志入口只对拥有原有日志权限的账号开放', () => {
+    expect(visibleTitles({ userId: 12, userType: 'sys_user', accessCodes: ['cpm:common:batchExecutionLog:list'] })).toContain('批次执行日志')
+    expect(visibleTitles({ userId: 13, userType: 'sys_user', accessCodes: [] })).not.toContain('批次执行日志')
+  })
+  it('恢复首页、设备、办理、我的顺序', () => {
+    expect(customTabbarList.map(item => item.text)).toEqual(['首页', '设备', '办理', '我的'])
+    expect(release.isV101HiddenRoute('/pages/business/index')).toBe(false)
+  })
+
+  it('管理员只能看到已开放业务，不展示仍受发布限制的操作', () => {
+    expect(visibleTitles({ userId: 1, username: 'admin' })).toEqual(['卡片排查', '卡片划拨', '工单服务', '我的卡片', '客户管理'])
+  })
+
+  it('客户入口继续受账号身份和权限限制', () => {
+    expect(visibleTitles({ userId: 12, userType: 'sys_user', appAccess: { configured: true, features: ['customer:list'] } })).toContain('客户管理')
+    expect(visibleTitles({ userId: 13, userType: 'sys_user', appAccess: { configured: true, features: [] } })).not.toContain('客户管理')
+    expect(visibleTitles({ userId: 14, userType: 'app_user' })).not.toContain('客户管理')
+  })
+})
diff --git a/app/src/pages/business/index.vue b/app/src/pages/business/index.vue
index 1a0f480..259cdf5 100644
--- a/app/src/pages/business/index.vue
+++ b/app/src/pages/business/index.vue
@@ -1,10 +1,11 @@
 <script setup lang="ts">
 import RouterPath from '@/constant/RouterPath'
+import { isV101HiddenRoute } from '@/constant/release'
 import type { IUserInfoRes } from '@/api/types/login'
 import { useTokenStore } from '@/store/token'
 import { useUserStore } from '@/store/user'
 import type { AppPermissionAction } from '@/utils/permission'
-import { hasUserPermission } from '@/utils/permission'
+import { hasAccessCode, hasAnyFeature, hasUserPermission } from '@/utils/permission'
 import BusinessSection from './components/BusinessSection.vue'
 import { getUserBusinessSections } from './data'
 import type { BusinessServiceItem } from './data'
@@ -23,6 +24,7 @@ const actionRouteMap: Partial<Record<NonNullable<BusinessServiceItem['action']>,
   balanceRecharge: RouterPath.BusinessViewsBalanceRecharge,
   change: RouterPath.BusinessViewsChange,
   customer: RouterPath.BusinessViewsCustomer,
+  executionLog: RouterPath.UserViewsExecutionLog,
   addon: RouterPath.BusinessViewsAddon,
   diagnosis: RouterPath.BusinessViewsDiagnosis,
   order: RouterPath.BusinessViewsOrder,
@@ -31,10 +33,21 @@ const actionRouteMap: Partial<Record<NonNullable<BusinessServiceItem['action']>,
 }
 
 /** ====================  数据  ==================== */
+const actionPending = ref(false)
 const tokenStore = useTokenStore()
 const userStore = useUserStore()
 let refreshUserPromise: Promise<void | IUserInfoRes> | undefined
-const sections = computed(() => getUserBusinessSections(userStore.userInfo))
+const sections = computed(() => getUserBusinessSections(userStore.userInfo)
+  .map(section => ({
+    ...section,
+    items: section.items.filter((item) => {
+      if (item.action === 'cardList')
+        return !item.permissionAction
+      const route = item.action ? actionRouteMap[item.action] : undefined
+      return Boolean(route && !isV101HiddenRoute(route))
+    }),
+  }))
+  .filter(section => section.items.length > 0))
 
 /** ====================  方法  ==================== */
 async function refreshUserInfoIfNeeded() {
@@ -54,31 +67,54 @@ async function refreshUserInfoIfNeeded() {
 }
 
 async function handleBusinessAction(item: BusinessServiceItem) {
-  await refreshUserInfoIfNeeded()
-  if (item.permissionAction && !hasBusinessItemPermission(item.permissionAction)) {
-    uni.showToast({ title: '暂无操作权限', icon: 'none' })
+  if (actionPending.value)
     return
+  actionPending.value = true
+  try {
+    await refreshUserInfoIfNeeded()
+    if (!tokenStore.updateNowTime().hasLogin) {
+      uni.navigateTo({ url: RouterPath.Login })
+      return
+    }
+    if (!sections.value.some(section => section.items.some(current => current.action === item.action && current.title === item.title))) {
+      uni.showToast({ title: '当前入口暂不可用，请刷新后重试', icon: 'none' })
+      return
+    }
+    if ((item.accessCode && !hasAccessCode(userStore.userInfo.accessCodes, item.accessCode))
+      || (item.permissionAction && !hasBusinessItemPermission(item.permissionAction))) {
+      uni.showToast({ title: '暂无操作权限', icon: 'none' })
+      return
+    }
+    const url = item.action === 'cardList'
+      ? RouterPath.Card
+      : item.action === 'workOrder' && !hasAnyFeature(userStore.userInfo, 'workorder:list')
+        ? RouterPath.BusinessViewsWorkOrderCreate
+        : item.action ? actionRouteMap[item.action] : ''
+    if (!url || isV101HiddenRoute(url)) {
+      uni.showToast({ title: '当前版本暂未开放该入口', icon: 'none' })
+      return
+    }
+    await new Promise<void>((resolve) => {
+      const options = { url, complete: () => resolve() }
+      if (item.action === 'cardList')
+        uni.switchTab(options)
+      else
+        uni.navigateTo(options)
+    })
   }
-
-  if (item.action === 'cardList') {
-    uni.switchTab({ url: RouterPath.Card })
-    return
+  finally {
+    actionPending.value = false
   }
-
-  const url = item.action ? actionRouteMap[item.action] : ''
-  if (url) {
-    uni.navigateTo({ url })
-    return
-  }
-
-  uni.showToast({
-    title: item.title,
-    icon: 'none',
-  })
 }
 
 function goDiagnosis() {
-  uni.navigateTo({ url: RouterPath.BusinessViewsDiagnosis })
+  if (actionPending.value)
+    return
+  const item = sections.value.flatMap(section => section.items).find(current => current.action === 'diagnosis')
+  if (item)
+    void handleBusinessAction(item)
+  else
+    uni.showToast({ title: '当前账号暂无排查权限', icon: 'none' })
 }
 
 function hasBusinessItemPermission(action: AppPermissionAction | AppPermissionAction[]) {
@@ -114,6 +150,7 @@ onShow(() => {
         v-for="section in sections"
         :key="section.title"
         :section="section"
+        :busy="actionPending"
         @action="handleBusinessAction"
       />
     </view>
diff --git a/app/src/pages/business/views/addon/index.vue b/app/src/pages/business/views/addon/index.vue
index b32ae8a..0da752c 100644
--- a/app/src/pages/business/views/addon/index.vue
+++ b/app/src/pages/business/views/addon/index.vue
@@ -9,7 +9,7 @@ definePage({
   },
 })
 
-type AddonOption = {
+interface AddonOption {
   name: string
   price: string
   desc: string
@@ -93,117 +93,117 @@ onMounted(async () => {
 </script>
 
 <template>
-    <view class="biz-page">
-      <view class="biz-stack">
-        <view v-if="noPermission" class="biz-card">
-          <view class="biz-card__body text-26rpx text-#64748b leading-38rpx">
-            当前账号不能订购加油包。
+  <view class="biz-page">
+    <view class="biz-stack">
+      <view v-if="noPermission" class="biz-card">
+        <view class="biz-card__body text-26rpx text-#64748b leading-38rpx">
+          当前账号不能订购加油包。
+        </view>
+      </view>
+
+      <template v-else>
+        <view class="biz-hero">
+          <view class="biz-hero__top">
+            <view class="min-w-0 flex items-center gap-16rpx">
+              <view class="biz-hero__icon">
+                <view class="i-carbon-flash" />
+              </view>
+              <view class="min-w-0">
+                <text class="biz-hero__title">加油包</text>
+                <text class="biz-hero__sub">按需补充流量，选定后直接进入支付确认</text>
+              </view>
+            </view>
+            <wd-tag type="primary" variant="plain">
+              订购
+            </wd-tag>
+          </view>
+
+          <view class="biz-stat-grid">
+            <view class="biz-stat">
+              <text class="biz-stat__label">当前卡片</text>
+              <text class="biz-stat__value">{{ cardValueText }}</text>
+            </view>
+            <view class="biz-stat">
+              <text class="biz-stat__label">当前套餐</text>
+              <text class="biz-stat__value">{{ packageText }}</text>
+            </view>
+            <view class="biz-stat">
+              <text class="biz-stat__label">剩余流量</text>
+              <text class="biz-stat__value">{{ flowText }}</text>
+            </view>
+            <view class="biz-stat">
+              <text class="biz-stat__label">卡片状态</text>
+              <text class="biz-stat__value">{{ statusText }}</text>
+            </view>
           </view>
         </view>
 
-        <template v-else>
-          <view class="biz-hero">
-            <view class="biz-hero__top">
-              <view class="min-w-0 flex items-center gap-16rpx">
-                <view class="biz-hero__icon">
-                  <view class="i-carbon-flash" />
-                </view>
-                <view class="min-w-0">
-                  <text class="biz-hero__title">加油包</text>
-                  <text class="biz-hero__sub">按需补充流量，选定后直接进入支付确认</text>
-                </view>
+        <view class="biz-card">
+          <view class="biz-card__body">
+            <view class="biz-section-head">
+              <view>
+                <text class="biz-section-title">选择加油包</text>
+                <text class="biz-section-sub">按流量档位单选，价格与生效时间由后端统一控制</text>
               </view>
-              <wd-tag type="primary" variant="plain">
-                订购
+              <wd-tag type="success" variant="plain">
+                {{ selectedOption.name }}
               </wd-tag>
             </view>
 
-            <view class="biz-stat-grid">
-              <view class="biz-stat">
-                <text class="biz-stat__label">当前卡片</text>
-                <text class="biz-stat__value">{{ cardValueText }}</text>
-              </view>
-              <view class="biz-stat">
-                <text class="biz-stat__label">当前套餐</text>
-                <text class="biz-stat__value">{{ packageText }}</text>
-              </view>
-              <view class="biz-stat">
-                <text class="biz-stat__label">剩余流量</text>
-                <text class="biz-stat__value">{{ flowText }}</text>
-              </view>
-              <view class="biz-stat">
-                <text class="biz-stat__label">卡片状态</text>
-                <text class="biz-stat__value">{{ statusText }}</text>
-              </view>
-            </view>
-          </view>
-
-          <view class="biz-card">
-            <view class="biz-card__body">
-              <view class="biz-section-head">
-                <view>
-                  <text class="biz-section-title">选择加油包</text>
-                  <text class="biz-section-sub">按流量档位单选，价格与生效时间由后端统一控制</text>
-                </view>
-                <wd-tag type="success" variant="plain">
-                  {{ selectedOption.name }}
-                </wd-tag>
-              </view>
-
-              <view class="grid gap-12rpx">
-                <view
-                  v-for="(item, index) in addonOptions"
-                  :key="item.name"
-                  class="biz-option"
-                  :class="{ 'is-active': index === selectedIndex }"
-                  @click="selectOption(index)"
-                >
-                  <view class="biz-option__main">
-                    <view class="flex items-center gap-10rpx">
-                      <text class="biz-option__title">{{ item.name }}</text>
-                      <wd-tag
-                        v-if="item.badge"
-                        type="warning"
-                        size="small"
-                        variant="plain"
-                      >
-                        {{ item.badge }}
-                      </wd-tag>
-                    </view>
-                    <text class="biz-option__meta">
-                      {{ item.flowText }} · {{ item.desc }}
-                    </text>
+            <view class="grid gap-12rpx">
+              <view
+                v-for="(item, index) in addonOptions"
+                :key="item.name"
+                class="biz-option"
+                :class="{ 'is-active': index === selectedIndex }"
+                @click="selectOption(index)"
+              >
+                <view class="biz-option__main">
+                  <view class="flex items-center gap-10rpx">
+                    <text class="biz-option__title">{{ item.name }}</text>
+                    <wd-tag
+                      v-if="item.badge"
+                      type="warning"
+                      size="small"
+                      variant="plain"
+                    >
+                      {{ item.badge }}
+                    </wd-tag>
                   </view>
-                  <text class="biz-option__price">{{ item.price }}</text>
-                  <view class="biz-radio" />
+                  <text class="biz-option__meta">
+                    {{ item.flowText }} · {{ item.desc }}
+                  </text>
                 </view>
+                <text class="biz-option__price">{{ item.price }}</text>
+                <view class="biz-radio" />
               </view>
             </view>
           </view>
+        </view>
 
-          <view class="biz-card">
-            <view class="biz-card__body">
-              <view class="biz-row">
-                <text class="biz-row__label">已选加油包</text>
-                <text class="biz-row__value">{{ selectedOption.name }}</text>
-              </view>
-              <view class="biz-row">
-                <text class="biz-row__label">付款方式</text>
-                <text class="biz-row__value">微信支付</text>
-              </view>
-              <view class="biz-row">
-                <text class="biz-row__label">生效时间</text>
-                <text class="biz-row__value">订购成功后立即生效</text>
-              </view>
-              <view class="biz-row">
-                <text class="biz-row__label">到期时间</text>
-                <text class="biz-row__value">{{ expireText }}</text>
-              </view>
+        <view class="biz-card">
+          <view class="biz-card__body">
+            <view class="biz-row">
+              <text class="biz-row__label">已选加油包</text>
+              <text class="biz-row__value">{{ selectedOption.name }}</text>
+            </view>
+            <view class="biz-row">
+              <text class="biz-row__label">付款方式</text>
+              <text class="biz-row__value">微信支付</text>
+            </view>
+            <view class="biz-row">
+              <text class="biz-row__label">生效时间</text>
+              <text class="biz-row__value">订购成功后立即生效</text>
+            </view>
+            <view class="biz-row">
+              <text class="biz-row__label">到期时间</text>
+              <text class="biz-row__value">{{ expireText }}</text>
             </view>
           </view>
-        </template>
-      </view>
+        </view>
+      </template>
     </view>
+  </view>
 
   <view v-if="!noPermission" class="biz-paybar">
     <view class="biz-paybar__inner">
diff --git a/app/src/pages/business/views/allocate/index.vue b/app/src/pages/business/views/allocate/index.vue
index 0312bf8..aec2844 100644
--- a/app/src/pages/business/views/allocate/index.vue
+++ b/app/src/pages/business/views/allocate/index.vue
@@ -1,7 +1,7 @@
 <script lang="ts" setup>
 import type { AllocateBatchRes, AllocateTarget, AppCard } from '@/api/card'
+import type { AllocateBatchSubmitParams } from '@/api/types/card'
 import {
-  allocateBatchPrepare,
   allocateBatchSubmit,
   getAllocateTargets,
   getCardList,
@@ -12,6 +12,8 @@ import {
   formatDateTime,
   formatFlowPair,
 } from '@/pages/card/data'
+import { allocateSummary } from '@/api/executionLog'
+import { allocateResultStatus, allocateStatusPresentation, allocateTaskSnapshot, mergeAllocateSelection } from './selection'
 import { useUserStore } from '@/store/user'
 import { hasUserPermission } from '@/utils/permission'
 import { getAccountWorkspace } from '@/utils/userIdentity'
@@ -26,17 +28,30 @@ const userStore = useUserStore()
 const keyword = ref('')
 const targetKeyword = ref('')
 const cards = ref<AppCard[]>([])
+const cardCache = ref<Record<string, AppCard>>({})
 const targets = ref<AllocateTarget[]>([])
+const targetPage = ref(1)
+const targetTotal = ref(0)
+let loadedTargetKeyword = ''
 const selectedCardValues = ref<string[]>([])
 const selectedTargetId = ref<number>()
+const chosenTarget = ref<AllocateTarget>()
+const cardPage = ref(1)
+const cardTotal = ref(0)
+const refreshingResult = ref(false)
+let cardLoadSeq = 0
+let pageActive = true
+let loadedCardKeyword = ''
+let resultRevision = 0
 const loadingCards = ref(false)
 const loadingTargets = ref(false)
-const preparing = ref(false)
 const submitting = ref(false)
 const noPermission = ref(false)
 const errorMessage = ref('')
+const targetError = ref('')
 const targetPopupVisible = ref(false)
-const prepare = ref<AllocateBatchRes>()
+const pendingRequest = ref<AllocateBatchSubmitParams>()
+const selectionPopupVisible = ref(false)
 const result = ref<AllocateBatchRes>()
 const initialCardValue = ref('')
 let targetLoadSeq = 0
@@ -44,40 +59,41 @@ let targetLoadSeq = 0
 const workspace = computed(() => getAccountWorkspace(userStore.userInfo))
 const isAgentUser = computed(() => workspace.value === 'enterprise' || workspace.value === 'agent' || workspace.value === 'admin')
 const canUseAllocate = computed(() => isAgentUser.value && hasUserPermission(userStore.userInfo, 'allocate'))
-const selectedTarget = computed(() =>
-  targets.value.find(item => Number(item.deptId) === Number(selectedTargetId.value)),
-)
+const selectedTarget = computed(() => chosenTarget.value)
 const allocatableCards = computed(() => cards.value.filter(item => item.canAllocate !== false))
-const visibleCards = computed(() => {
-  const value = keyword.value.trim()
-  if (!value)
-    return allocatableCards.value
-  return allocatableCards.value.filter((item) => {
-    return (
-      allocateCardValue(item).includes(value)
-      || (item.msisdn || '').includes(value)
-      || (item.imsi || '').includes(value)
-      || displayPackageName(item).includes(value)
-      || (item.remark || '').includes(value)
-      || (item.terminalName || '').includes(value)
-      || ownerDeptText(item).includes(value)
-    )
-  })
-})
+const visibleCards = computed(() => cards.value)
 const canPrepare = computed(
   () => canUseAllocate.value && !!selectedTarget.value && !!selectedCardValues.value.length,
 )
-const canSubmit = computed(() => {
-  return !!prepare.value?.batchNo
-    && !submitting.value
-    && !result.value
-    && (prepare.value.failCount || 0) === 0
-    && prepare.value.status !== 'failed'
-})
 const isFixedCardMode = computed(() => !!initialCardValue.value)
+const taskPending = computed(() => ['unknown', 'prepared', 'pending', 'processing'].includes(result.value?.status || ''))
+const resultPresentation = computed(() => allocateStatusPresentation(result.value?.status, !!result.value?.batchNo))
+const selectionLocked = computed(() => submitting.value)
+const allVisibleSelected = computed(() => !!visibleCards.value.length && visibleCards.value.every(isSelected))
+const selectionStep = computed(() => !selectedTarget.value ? 0 : !selectedCardValues.value.length ? 1 : 2)
+const submitHint = computed(() => result.value?.status === 'unknown' ? '原提交结果未确认，请先核查再提交' : result.value?.status === 'prepared' ? '批次已准备，请提交原批次' : taskPending.value ? '任务处理中，请先等待结果' : !selectedTarget.value ? '请先选择目标客户' : !selectedCardValues.value.length ? '请选择需要划拨的卡片' : '确认目标客户后提交，后台整批执行')
+const canSubmit = computed(() => canPrepare.value && !submitting.value && !taskPending.value)
+const visibleSelection = computed({
+  get: () => selectedCardValues.value.filter(value => visibleCards.value.some(item => allocateCardValue(item) === value)),
+  set: (values: string[]) => {
+    if (selectionLocked.value)
+      return
+    const merged = mergeAllocateSelection(selectedCardValues.value, visibleCards.value.map(allocateCardValue), values)
+    if (isFixedCardMode.value && merged.length > 1) {
+      uni.showToast({ title: '单卡入口只能划拨当前卡', icon: 'none' })
+      return
+    }
+    if (merged.length > 100) {
+      uni.showToast({ title: '单次最多选择100张卡', icon: 'none' })
+      return
+    }
+    selectedCardValues.value = merged
+  },
+})
+const canLoadMore = computed(() => cards.value.length < cardTotal.value)
 
 async function openTargetPopup() {
-  if (noPermission.value)
+  if (noPermission.value || selectionLocked.value)
     return
   targetPopupVisible.value = true
   await refreshTargetPopup()
@@ -94,7 +110,14 @@ async function searchTargetPopup() {
 }
 
 async function bootstrap() {
-  await userStore.fetchUserInfo().catch(() => undefined)
+  try {
+    await userStore.fetchUserInfo()
+  }
+  catch {
+    noPermission.value = true
+    return
+  }
+  noPermission.value = !canUseAllocate.value
   if (!canUseAllocate.value) {
     noPermission.value = true
     uni.showToast({ title: '当前账号不能使用卡片划拨', icon: 'none' })
@@ -104,37 +127,45 @@ async function bootstrap() {
     return
   }
   await Promise.all([loadTargets(), loadCards()])
+  await restoreLastBatch()
 }
 
-async function loadTargets(keyword?: string) {
+async function loadTargets(keyword?: string, append = false) {
+  if (append && loadingTargets.value)
+    return
+  const actualKeyword = (typeof keyword === 'string' ? keyword : targetKeyword.value).trim()
+  if (append && actualKeyword !== loadedTargetKeyword)
+    append = false
+  const nextPage = append ? targetPage.value + 1 : 1
   const seq = ++targetLoadSeq
   loadingTargets.value = true
+  targetError.value = ''
   try {
-    const actualKeyword = typeof keyword === 'string' ? keyword : targetKeyword.value
     const res = await getAllocateTargets({
-      page: 1,
-      pageSize: 1000,
+      page: nextPage,
+      pageSize: 50,
       keyword: actualKeyword.trim() || undefined,
     })
     if (seq !== targetLoadSeq)
       return
-    targets.value = (res.items || []).map(item => ({
+    const loaded = (res.items || []).map(item => ({
       ...item,
       deptId: Number(item.deptId),
       parentId: item.parentId == null ? undefined : Number(item.parentId),
     })).filter(isSelectableTarget)
-    if (
-      selectedTargetId.value
-      && !targets.value.some(item => Number(item.deptId) === Number(selectedTargetId.value))
-    ) {
-      selectedTargetId.value = undefined
-    }
+    targets.value = append ? [...targets.value, ...loaded] : loaded
+    targetPage.value = nextPage
+    targetTotal.value = res.total || 0
+    loadedTargetKeyword = actualKeyword
   }
   catch (error) {
     if (seq !== targetLoadSeq)
       return
-    targets.value = []
-    uni.showToast({ title: getErrorMessage(error, '目标客户加载失败'), icon: 'none' })
+    if (!append) {
+      targets.value = []
+      targetTotal.value = 0
+    }
+    targetError.value = getErrorMessage(error, '目标客户加载失败')
   }
   finally {
     if (seq === targetLoadSeq)
@@ -142,30 +173,52 @@ async function loadTargets(keyword?: string) {
   }
 }
 
-async function loadCards() {
+async function loadCards(append = false) {
+  if (append && loadingCards.value)
+    return
+  const searchKeyword = keyword.value.trim()
+  if (append && searchKeyword !== loadedCardKeyword)
+    append = false
+  const seq = ++cardLoadSeq
+  const nextPage = append ? cardPage.value + 1 : 1
   loadingCards.value = true
   errorMessage.value = ''
   try {
     const res = await getCardList({
-      page: 1,
+      page: nextPage,
       pageSize: 100,
-      cardValue: keyword.value.trim() || undefined,
+      allocateOnly: true,
+      cardValue: searchKeyword || undefined,
     })
-    cards.value = res.items || []
-    applyInitialCardSelection()
-    const nextKeys = new Set(allocatableCards.value.map(allocateCardValue))
-    selectedCardValues.value = selectedCardValues.value.filter(value => nextKeys.has(value))
+    if (seq !== cardLoadSeq)
+      return
+    cards.value = append ? [...cards.value, ...(res.items || [])] : (res.items || [])
+    cardCache.value = Object.fromEntries([
+      ...Object.entries(cardCache.value).filter(([value]) => selectedCardValues.value.includes(value)),
+      ...cards.value.map(item => [allocateCardValue(item), item] as const),
+    ])
+    loadedCardKeyword = searchKeyword
+    cardPage.value = nextPage
+    cardTotal.value = res.total || 0
+    if (!append && !selectedCardValues.value.length)
+      applyInitialCardSelection()
   }
   catch (error) {
-    cards.value = []
-    selectedCardValues.value = []
+    if (seq !== cardLoadSeq)
+      return
     errorMessage.value = getErrorMessage(error, '卡片列表加载失败')
   }
   finally {
-    loadingCards.value = false
+    if (seq === cardLoadSeq)
+      loadingCards.value = false
   }
 }
 
+function loadMoreCards() {
+  if (canLoadMore.value && !loadingCards.value && !errorMessage.value)
+    void loadCards(true)
+}
+
 function allocateCardValue(item: AppCard) {
   return item.iccid || item.msisdn || item.imsi || item.imei || ''
 }
@@ -196,15 +249,38 @@ function isSelected(item: AppCard) {
 }
 
 function selectVisibleCards() {
-  const values = visibleCards.value.map(allocateCardValue).filter(Boolean)
-  selectedCardValues.value = Array.from(new Set([...selectedCardValues.value, ...values]))
+  if (selectionLocked.value || isFixedCardMode.value)
+    return
+  visibleSelection.value = allVisibleSelected.value ? [] : visibleCards.value.map(allocateCardValue).filter(Boolean)
+}
+
+function removeSelectedCard(value: string) {
+  if (!selectionLocked.value)
+    selectedCardValues.value = selectedCardValues.value.filter(item => item !== value)
+}
+
+function selectedCardDescription(value: string) {
+  const card = cardCache.value[value]
+  return card ? `${displayPackageName(card)} · ${ownerDeptText(card)}` : '已保留的卡片标识'
 }
 
 function clearSelection() {
-  selectedCardValues.value = []
+  if (selectionLocked.value || !selectedCardValues.value.length)
+    return
+  uni.showModal({
+    title: '清空已选卡片',
+    content: `将移除已选的 ${selectedCardValues.value.length} 张卡（含其他搜索结果中的选择），目标客户保持不变。`,
+    success: (response) => {
+      if (response.confirm && !selectionLocked.value)
+        selectedCardValues.value = []
+    },
+  })
 }
 
 function selectTarget(item: AllocateTarget) {
+  if (selectionLocked.value)
+    return
+  chosenTarget.value = item
   selectedTargetId.value = Number(item.deptId)
   targetPopupVisible.value = false
 }
@@ -242,115 +318,196 @@ function isSelectableTarget(item: AllocateTarget) {
   return String(item.targetScopeName || '').includes('下级')
 }
 
-function prepareStatusText(item?: AllocateBatchRes) {
-  if (!item)
-    return '-'
-  if (result.value)
-    return '已划拨'
-  if (item.status === 'failed' || (item.failCount || 0) > 0)
-    return '校验失败'
-  return '已校验'
-}
-
-function failedAllocateDetails(item?: AllocateBatchRes) {
-  return item?.details?.filter(detail => detail.status === 'failed') || []
-}
-
-function showPrepareFailedModal(item: AllocateBatchRes) {
-  const failedDetails = failedAllocateDetails(item)
-  const failCount = item.failCount || failedDetails.length
-  const lines = failedDetails.slice(0, 6).map((detail) => {
-    const cardNo = detail.itemId || `第${detail.rowNo}行`
-    return `${cardNo}：${detail.errorReason || '校验失败'}`
-  })
-  if (failCount > lines.length)
-    lines.push(`还有 ${failCount - lines.length} 条失败明细，请在页面下方查看。`)
-  uni.showModal({
-    title: `校验失败 ${failCount} 张`,
-    content: lines.join('\n') || item.failReason || '存在校验失败卡，请调整后重新校验。',
-    confirmText: '知道了',
-    showCancel: false,
-  })
-}
-
-async function handlePrepare() {
-  if (!canPrepare.value || preparing.value) {
-    uni.showToast({ title: '请先选择目标客户和需要划拨的卡', icon: 'none' })
-    return
-  }
-
-  preparing.value = true
-  try {
-    const res = await allocateBatchPrepare({
-      cardValues: selectedCardValues.value,
-      targetDeptId: selectedTargetId.value as number,
-    })
-    prepare.value = res
-    result.value = undefined
-    if ((res.failCount || 0) > 0 || res.status === 'failed') {
-      showPrepareFailedModal(res)
-    }
-    else {
-      uni.showToast({ title: '校验通过', icon: 'success' })
-    }
-  }
-  catch (error) {
-    prepare.value = undefined
-    uni.showToast({ title: getErrorMessage(error, '划拨校验失败'), icon: 'none' })
-  }
-  finally {
-    preparing.value = false
-  }
-}
-
 async function handleSubmit() {
-  if (!prepare.value?.batchNo || !selectedTarget.value) {
-    uni.showToast({ title: '请先校验划拨批次', icon: 'none' })
+  if (!canSubmit.value || submitting.value)
     return
-  }
-  if (submitting.value)
-    return
-  const confirmed = await confirmAllocateSubmit()
-  if (!confirmed)
-    return
-
+  const ownerKey = lastBatchKey()
   submitting.value = true
   try {
+    const confirmed = await new Promise<boolean>((resolve) => {
+      uni.showModal({
+        title: '确认提交划拨',
+        content: `目标客户：${targetLabel(selectedTarget.value)}\n划拨卡数：${selectedCardValues.value.length} 张\n后台校验通过后整批更新归属，划拨权交由目标客户。存在失败卡时整批不执行。`,
+        confirmText: '确认提交',
+        success: response => resolve(!!response.confirm),
+        fail: () => resolve(false),
+      })
+    })
+    if (!confirmed || ownerKey !== lastBatchKey())
+      return
+    await userStore.fetchUserInfo()
+    noPermission.value = !canUseAllocate.value
+    if (!canUseAllocate.value || ownerKey !== lastBatchKey())
+      return
+    resultRevision++
+    result.value = {
+      batchNo: '',
+      batchType: 3,
+      status: 'unknown',
+      quantity: selectedCardValues.value.length,
+      totalCount: selectedCardValues.value.length,
+      validCount: 0,
+      failCount: 0,
+      cards: [],
+      details: [],
+      target: selectedTarget.value!,
+    }
+    pendingRequest.value = undefined
+    saveLastBatch()
     const res = await allocateBatchSubmit({
-      batchNo: prepare.value.batchNo,
-      cardValues: selectedCardValues.value,
-      targetDeptId: selectedTarget.value.deptId,
+      cardValues: [...selectedCardValues.value],
+      targetDeptId: selectedTarget.value!.deptId,
+      executionMode: isFixedCardMode.value ? 1 : 2,
     })
+    if (ownerKey !== lastBatchKey())
+      return
+    resultRevision++
     result.value = res
-    prepare.value = res
-    uni.showModal({
-      title: '划拨成功',
-      content: `划拨批次：${res.batchNo || '-'}\n目标客户：${targetLabel(res.target)}\n划拨卡数：${res.quantity || selectedCardValues.value.length} 张\n当前企业保留查看和其他办理权限，划拨权交由目标客户。`,
-      showCancel: false,
-    })
-    initialCardValue.value = ''
-    clearSelection()
-    await loadCards()
+    if (!res.failReason) {
+      completeSubmission(ownerKey)
+    }
+    else {
+      saveLastBatch()
+      uni.showToast({ title: res.failReason, icon: 'none' })
+    }
   }
   catch (error) {
-    uni.showToast({ title: getErrorMessage(error, '划拨提交失败'), icon: 'none' })
+    if (ownerKey !== lastBatchKey())
+      return
+    markRejectedRequest(error)
+    uni.showToast({ title: getErrorMessage(error, result.value?.batchNo ? '提交未确认，请按原批次重试' : '提交结果未确认，请先核查执行记录和卡片归属，勿重复提交'), icon: 'none' })
   }
   finally {
     submitting.value = false
   }
 }
 
-function confirmAllocateSubmit() {
-  return new Promise<boolean>((resolve) => {
+function lastBatchKey() {
+  return `allocate-last-batch:${userStore.userInfo?.tenantId || ''}:${userStore.userInfo?.userId || ''}`
+}
+
+function completeSubmission(ownerKey: string) {
+  resultRevision++
+  result.value = undefined
+  pendingRequest.value = undefined
+  selectedCardValues.value = []
+  initialCardValue.value = ''
+  uni.removeStorageSync(ownerKey)
+  uni.showToast({ title: '已提交，请到批次日志查看', icon: 'none', duration: 3000 })
+}
+
+function saveLastBatch() {
+  if (!result.value)
+    return
+  uni.setStorageSync(lastBatchKey(), allocateTaskSnapshot(result.value, pendingRequest.value))
+}
+
+function markRejectedRequest(error: unknown) {
+  if (error && typeof error === 'object' && 'code' in error && Number(error.code) === 46001 && result.value && !result.value.batchNo) {
+    result.value.status = 'failed'
+    result.value.failReason = getErrorMessage(error, '校验未通过，任务未受理')
+    pendingRequest.value = undefined
+    saveLastBatch()
+  }
+}
+
+async function restoreLastBatch() {
+  const saved = uni.getStorageSync(lastBatchKey()) as (AllocateBatchRes & { pendingRequest?: AllocateBatchSubmitParams }) | undefined
+  if (saved?.batchNo && !['unknown', 'prepared'].includes(saved.status)) {
+    uni.removeStorageSync(lastBatchKey())
+    return
+  }
+  if ((!saved?.batchNo && !saved?.requestId && saved?.status !== 'unknown') || !saved.target || !Array.isArray(saved.cards) || result.value)
+    return
+  pendingRequest.value = saved.pendingRequest
+  result.value = saved
+  await refreshResult(true)
+}
+
+async function acknowledgeUnknownTask() {
+  const ownerKey = lastBatchKey()
+  const confirmed = await new Promise<boolean>((resolve) => {
     uni.showModal({
-      title: '确认划拨',
-      content: `目标客户：${targetLabel(selectedTarget.value)}\n划拨卡数：${prepare.value?.quantity || selectedCardValues.value.length} 张\n确认后更新卡片归属，当前企业保留查看和其他办理权限，划拨权交由目标客户。`,
-      confirmText: '确认划拨',
-      cancelText: '再看一下',
-      success: res => resolve(!!res.confirm),
+      title: '确认已核查原任务',
+      content: '请先核查执行记录和卡片归属，确认原任务未受理且没有待执行任务。仍在等待或无法确认时请勿重新办理，避免重复划拨。',
+      confirmText: '已核查',
+      success: response => resolve(!!response.confirm),
       fail: () => resolve(false),
     })
   })
+  if (!confirmed || ownerKey !== lastBatchKey())
+    return
+  resultRevision++
+  pendingRequest.value = undefined
+  result.value = undefined
+  uni.removeStorageSync(ownerKey)
+}
+
+async function retryDispatch() {
+  if (!result.value || (!result.value.batchNo && !pendingRequest.value) || submitting.value)
+    return
+  const ownerKey = lastBatchKey()
+  submitting.value = true
+  try {
+    const requestId = result.value.requestId
+    const response = await allocateBatchSubmit(result.value.batchNo ? { batchNo: result.value.batchNo } : pendingRequest.value!)
+    if (ownerKey !== lastBatchKey())
+      return
+    pendingRequest.value = undefined
+    resultRevision++
+    result.value = { ...response, requestId, target: result.value.target }
+    saveLastBatch()
+    if (!response.failReason)
+      completeSubmission(ownerKey)
+    else
+      uni.showToast({ title: response.failReason, icon: 'none' })
+  }
+  catch (error) {
+    if (ownerKey !== lastBatchKey())
+      return
+    markRejectedRequest(error)
+    uni.showToast({ title: getErrorMessage(error, '重试未确认，请保留原请求'), icon: 'none' })
+  }
+  finally {
+    submitting.value = false
+  }
+}
+
+async function refreshResult(silent = false) {
+  if (!result.value || (!result.value.batchNo && (!result.value.requestId || result.value.status === 'failed')) || refreshingResult.value || !pageActive)
+    return
+  const batchNo = result.value.batchNo
+  const revision = resultRevision
+  const storageKey = lastBatchKey()
+  refreshingResult.value = true
+  try {
+    const info = await allocateSummary({ batchNo: batchNo || undefined, requestId: result.value.requestId })
+    if (!pageActive || revision !== resultRevision || storageKey !== lastBatchKey() || result.value?.batchNo !== batchNo)
+      return
+    result.value = {
+      ...result.value,
+      batchNo: info.batchNo,
+      status: info.batchType === 4 ? (info.failReason || info.batchAsyncStatus === 4 ? 'failed' : 'prepared') : allocateResultStatus(info.batchAsyncStatus),
+      totalCount: info.totalCount,
+      failCount: info.batchAsyncStatus === 4 ? info.totalCount : 0,
+      failReason: info.failReason,
+    }
+    pendingRequest.value = undefined
+    if (info.batchType !== 4) {
+      completeSubmission(storageKey)
+      return
+    }
+    saveLastBatch()
+  }
+  catch {
+    if (!pageActive || revision !== resultRevision || storageKey !== lastBatchKey())
+      return
+    if (!silent)
+      uni.showToast({ title: '结果暂未确认，请稍后刷新或重试原任务', icon: 'none' })
+  }
+  finally {
+    refreshingResult.value = false
+  }
 }
 
 function getErrorMessage(error: unknown, fallback: string) {
@@ -378,9 +535,54 @@ function getErrorMessage(error: unknown, fallback: string) {
   return fallback
 }
 
-watch([selectedCardValues, selectedTargetId], () => {
-  prepare.value = undefined
+watch(() => lastBatchKey(), () => {
+  resultRevision++
+  cardLoadSeq++
+  targetLoadSeq++
   result.value = undefined
+  pendingRequest.value = undefined
+  noPermission.value = !canUseAllocate.value
+  errorMessage.value = ''
+  selectedCardValues.value = []
+  chosenTarget.value = undefined
+  selectedTargetId.value = undefined
+  cards.value = []
+  cardCache.value = {}
+  targetError.value = ''
+  targetPopupVisible.value = false
+  selectionPopupVisible.value = false
+  targets.value = []
+  cardTotal.value = 0
+  targetTotal.value = 0
+  loadingCards.value = false
+  loadingTargets.value = false
+  if (pageActive && userStore.userInfo?.userId)
+    void bootstrap()
+})
+
+onShow(() => {
+  void userStore.fetchUserInfo().then(() => {
+    noPermission.value = !canUseAllocate.value
+    if (noPermission.value) {
+      targetPopupVisible.value = false
+      selectionPopupVisible.value = false
+    }
+  }).catch(() => {
+    noPermission.value = true
+  })
+  pageActive = true
+  if (result.value)
+    void refreshResult(true)
+})
+onHide(() => {
+  pageActive = false
+  resultRevision++
+})
+onUnload(() => {
+  pageActive = false
+  resultRevision++
+  targetLoadSeq++
+  cardLoadSeq++
 })
 
 onMounted(() => {
@@ -391,6 +593,7 @@ onLoad((query) => {
   const value = normalizeQueryValue(query?.cardValue || query?.cardNo || query?.iccid)
   if (!value)
     return
+  uni.setNavigationBarTitle({ title: '单卡划拨' })
   initialCardValue.value = value
   keyword.value = value
 })
@@ -401,12 +604,12 @@ function normalizeQueryValue(value: string | string[] | undefined) {
 </script>
 
 <template>
-  <scroll-view scroll-y class="h-screen">
+  <scroll-view scroll-y class="h-screen" @scrolltolower="loadMoreCards">
     <view class="biz-page">
       <view class="biz-stack">
         <view v-if="noPermission" class="biz-card">
           <view class="biz-card__body text-26rpx text-#64748b leading-38rpx">
-            当前账号不能使用卡片划拨。
+            <wd-empty tip="当前账号暂无卡片划拨权限" />
           </view>
         </view>
 
@@ -418,122 +621,95 @@ function normalizeQueryValue(value: string | string[] | undefined) {
                   <view class="i-carbon-user-multiple" />
                 </view>
                 <view class="min-w-0">
-                  <text class="biz-hero__title">卡片划拨</text>
-                  <text class="biz-hero__sub">选择可划拨卡片，校验后转给目标下级客户</text>
+                  <text class="biz-hero__title">{{ isFixedCardMode ? '单卡划拨' : '批量卡片划拨' }}</text>
+                  <text class="biz-hero__sub">本企业卡片 → 启用的直属下级客户</text>
                 </view>
               </view>
-              <view class="app-tag app-tag--info shrink-0 whitespace-nowrap">
-                代理商
-              </view>
-            </view>
-            <view class="biz-stat-grid">
-              <view class="biz-stat">
-                <text class="biz-stat__label">目标客户</text>
-                <text class="biz-stat__value">{{ targetLabel(selectedTarget) }}</text>
-              </view>
-              <view class="biz-stat">
-                <text class="biz-stat__label">已选卡片</text>
-                <text class="biz-stat__value">{{ selectedCardValues.length }} 张</text>
-              </view>
-              <view class="biz-stat">
-                <text class="biz-stat__label">校验状态</text>
-                <text class="biz-stat__value">{{ prepareStatusText(prepare) }}</text>
-              </view>
-              <view class="biz-stat">
-                <text class="biz-stat__label">失败卡数</text>
-                <text class="biz-stat__value">{{ prepare?.failCount || 0 }} 张</text>
-              </view>
+              <wd-tag type="primary" variant="plain">
+                {{ isFixedCardMode ? '1 张卡' : '最多 100 张' }}
+              </wd-tag>
             </view>
           </view>
+          <view class="biz-card biz-card__body">
+            <wd-steps :active="selectionStep" align-center>
+              <wd-step title="选客户" />
+              <wd-step title="选卡片" />
+              <wd-step title="确认划拨" />
+            </wd-steps>
+          </view>
 
           <view class="biz-card">
+            <view class="biz-card__body pb-0">
+              <text class="biz-section-title">1. 选择目标客户</text>
+              <text class="biz-section-sub">划拨完成后，卡片归属转至目标客户</text>
+            </view>
             <wd-cell
               title="目标客户"
-              :value="targetLabel(selectedTarget)"
-              clickable
-              is-link
+              :value="selectedTarget?.deptName || targetLabel(selectedTarget)"
+              :label="selectedTarget ? targetDescription(selectedTarget) : '仅支持启用的直属下级客户'"
+              :clickable="!selectionLocked"
+              :is-link="!selectionLocked"
               center
               @click="openTargetPopup"
             />
           </view>
 
           <view class="biz-card">
-            <view class="biz-card__body">
-              <wd-input
-                v-model="keyword"
-                placeholder="搜索卡号、套餐、备注或客户"
-                :clearable="!isFixedCardMode"
-                @confirm="loadCards"
-              />
-              <view class="biz-mini-action-grid mt-16rpx">
-                <wd-button size="small" type="primary" plain block custom-class="biz-mini-action-btn" :loading="loadingCards" @click="loadCards">
-                  <view class="biz-mini-action-btn__inner">
-                    <view class="i-carbon-renew biz-mini-action-btn__icon biz-mini-action-btn__icon--blue" />
-                    <text class="biz-mini-action-btn__text">刷新</text>
-                  </view>
-                </wd-button>
-                <wd-button
-                  size="small"
-                  type="primary"
-                  plain
-                  block
-                  custom-class="biz-mini-action-btn"
-                  :disabled="!visibleCards.length"
-                  @click="selectVisibleCards"
-                >
-                  <view class="biz-mini-action-btn__inner">
-                    <view class="i-carbon-checkmark-outline biz-mini-action-btn__icon biz-mini-action-btn__icon--green" />
-                    <text class="biz-mini-action-btn__text">全选</text>
-                  </view>
-                </wd-button>
-                <wd-button
-                  size="small"
-                  type="primary"
-                  plain
-                  block
-                  custom-class="biz-mini-action-btn"
-                  :disabled="!selectedCardValues.length"
-                  @click="clearSelection"
-                >
-                  <view class="biz-mini-action-btn__inner">
-                    <view class="i-carbon-close biz-mini-action-btn__icon biz-mini-action-btn__icon--gray" />
-                    <text class="biz-mini-action-btn__text">清空</text>
-                  </view>
+            <view class="biz-card__body grid gap-20rpx">
+              <view class="flex items-center justify-between gap-16rpx">
+                <view class="min-w-0">
+                  <text class="biz-section-title">2. 选择卡片</text>
+                  <text class="biz-section-sub">{{ isFixedCardMode ? '已锁定单卡入口，仅办理当前卡片' : '跨搜索保留选择，单次最多 100 张' }}</text>
+                </view>
+                <wd-tag type="primary" variant="plain">
+                  {{ selectedCardValues.length }}/{{ isFixedCardMode ? 1 : 100 }}
+                </wd-tag>
+              </view>
+              <view v-if="isFixedCardMode" class="rounded-12rpx bg-#f8fafc p-16rpx text-24rpx text-#64748b">
+                <text class="block">当前入口卡片（不可切换）</text>
+                <text class="mt-8rpx block break-all">{{ initialCardValue }}</text>
+              </view>
+              <wd-search v-else-if="!selectionLocked" v-model="keyword" hide-cancel placeholder="搜索 ICCID / MSISDN / IMSI / IMEI" custom-class="!p-0" @search="loadCards(false)" @clear="loadCards(false)" />
+              <view class="flex flex-wrap items-center justify-between gap-12rpx">
+                <text class="text-23rpx text-#64748b">已加载 {{ cards.length }}/{{ cardTotal }} 张</text>
+                <view class="flex shrink-0 items-center gap-8rpx">
+                  <wd-button size="small" variant="text" custom-class="!shrink-0 !px-8rpx !text-24rpx !font-normal" :loading="loadingCards" @click="loadCards(false)">
+                    刷新
+                  </wd-button>
+                  <wd-button v-if="!isFixedCardMode" size="small" variant="text" custom-class="!shrink-0 !px-8rpx !text-24rpx !font-normal" :disabled="selectionLocked || !visibleCards.length" @click="selectVisibleCards">
+                    {{ allVisibleSelected ? '取消全选' : '全选已加载' }}
+                  </wd-button>
+                </view>
+              </view>
+              <view v-if="selectedCardValues.length" class="flex items-center justify-between gap-12rpx border-t border-#f1f5f9 pt-12rpx">
+                <text class="text-24rpx text-#2563eb">已选 {{ selectedCardValues.length }} 张</text>
+                <wd-button size="small" variant="text" custom-class="!shrink-0 !px-8rpx !text-24rpx !font-normal" @click="selectionPopupVisible = true">
+                  查看已选
                 </wd-button>
               </view>
             </view>
           </view>
 
-          <view class="biz-section-head">
-            <view>
-              <text class="biz-section-title">当前可划拨卡</text>
-              <text class="biz-section-sub">划拨前会生成 ALC 批次进行归属和状态校验</text>
-            </view>
-            <view class="app-tag app-tag--info shrink-0 whitespace-nowrap">
-              已选 {{ selectedCardValues.length }}
-            </view>
-          </view>
-
-          <view v-if="loadingCards" class="biz-card">
+          <view v-if="loadingCards && !cards.length" class="biz-card">
             <view class="biz-card__body">
               <wd-skeleton theme="paragraph" />
             </view>
           </view>
 
-          <view v-else-if="errorMessage" class="biz-card">
+          <view v-if="errorMessage" class="biz-card">
             <view class="biz-card__body grid gap-16rpx">
               <view class="text-26rpx text-#b91c1c leading-38rpx">
                 {{ errorMessage }}
               </view>
-              <wd-button size="small" type="primary" @click="loadCards">
+              <wd-button size="small" type="primary" @click="loadCards(false)">
                 重试
               </wd-button>
             </view>
           </view>
 
-          <view v-else class="biz-card">
+          <view v-if="visibleCards.length || (!loadingCards && !errorMessage)" class="biz-card">
             <view v-if="visibleCards.length" class="biz-card__body">
-              <wd-checkbox-group v-model="selectedCardValues" type="square" checked-color="#2563eb">
+              <wd-checkbox-group v-model="visibleSelection" type="square" checked-color="#2563eb">
                 <view class="grid gap-12rpx">
                   <view
                     v-for="item in visibleCards"
@@ -542,11 +718,12 @@ function normalizeQueryValue(value: string | string[] | undefined) {
                     :class="{ 'is-active': isSelected(item) }"
                   >
                     <wd-checkbox
+                      :disabled="selectionLocked"
                       :name="allocateCardValue(item)"
                       custom-label-class="!block !w-full"
                     >
                       <view class="min-w-0 pr-16rpx">
-                        <view class="truncate text-30rpx text-#111827 font-900">
+                        <view class="break-all text-27rpx text-#111827 font-bold">
                           {{ displayCardValue(item) }}
                         </view>
                         <view class="mt-8rpx truncate text-24rpx text-#64748b">
@@ -567,134 +744,79 @@ function normalizeQueryValue(value: string | string[] | undefined) {
                 </view>
               </wd-checkbox-group>
             </view>
-            <view v-else class="biz-card__body text-center text-26rpx text-#64748b">
-              暂无可划拨卡片
+            <view v-else class="biz-card__body">
+              <wd-empty :tip="keyword ? '当前企业范围内未找到匹配卡片' : '当前企业暂无卡片'" />
+              <text v-if="selectedCardValues.length" class="mt-16rpx block text-center text-24rpx text-#64748b">其他搜索结果中的 {{ selectedCardValues.length }} 张已选卡仍保留</text>
             </view>
           </view>
 
-          <view v-if="prepare" class="biz-card">
-            <view class="biz-card__body">
-              <view class="biz-section-head mb-8rpx">
-                <text class="biz-section-title">校验结果</text>
-                <wd-tag :type="prepare.failCount ? 'warning' : 'success'" variant="plain">
-                  {{ prepareStatusText(prepare) }}
-                </wd-tag>
-              </view>
-              <view class="biz-row">
-                <text class="biz-row__label">划拨批次</text>
-                <text class="biz-row__value mono">{{ prepare.batchNo || '-' }}</text>
-              </view>
-              <view class="biz-row">
-                <text class="biz-row__label">目标客户</text>
-                <text class="biz-row__value">{{ targetLabel(prepare.target) }}</text>
-              </view>
-              <view class="biz-row">
-                <text class="biz-row__label">校验卡数</text>
-                <text class="biz-row__value">
-                  {{ prepare.validCount ?? prepare.quantity ?? 0 }}/{{ prepare.totalCount ?? selectedCardValues.length }} 张
-                </text>
-              </view>
-              <view class="biz-row">
-                <text class="biz-row__label">失败卡数</text>
-                <text class="biz-row__value">{{ prepare.failCount || 0 }} 张</text>
-              </view>
-            </view>
-            <view
-              v-if="prepare.failCount"
-              class="border-t border-#eef2f7 border-solid px-24rpx py-20rpx"
-            >
-              <view class="mb-14rpx text-26rpx text-#991b1b font-800">
-                失败明细
-              </view>
-              <view class="grid gap-12rpx">
-                <view
-                  v-for="item in failedAllocateDetails(prepare)"
-                  :key="`${item.rowNo}-${item.itemId}`"
-                  class="rounded-8rpx bg-#fef2f2 px-18rpx py-16rpx"
-                >
-                  <view class="text-24rpx text-#7f1d1d font-700">
-                    第 {{ item.rowNo }} 行：{{ item.itemId || '-' }}
-                  </view>
-                  <view class="mt-6rpx text-23rpx text-#991b1b leading-32rpx">
-                    {{ item.errorReason || '校验失败' }}
-                  </view>
-                </view>
-              </view>
-            </view>
+          <view v-if="canLoadMore" class="biz-card biz-card__body">
+            <wd-button variant="text" block size="small" :loading="loadingCards" @click="loadCards(true)">
+              加载更多卡片
+            </wd-button>
+          </view>
+          <view class="flex flex-col items-start gap-8rpx px-8rpx py-12rpx">
+            <text class="text-23rpx text-#94a3b8 leading-34rpx">停机、销户或套餐过期卡不可划拨。</text>
           </view>
         </template>
 
-        <wd-popup v-model="targetPopupVisible" position="bottom" round safe-area-inset-bottom>
-          <view class="max-h-84vh flex flex-col p-24rpx">
-            <view class="text-32rpx text-#111827 font-900">
-              选择目标客户
+        <wd-popup v-model="selectionPopupVisible" position="bottom" round safe-area-inset-bottom>
+          <view class="flex flex-col gap-20rpx p-24rpx">
+            <view class="flex items-center justify-between gap-16rpx">
+              <view><text class="block text-30rpx font-bold">已选 {{ selectedCardValues.length }} 张卡</text><text class="mt-8rpx block text-23rpx text-#64748b">跨搜索保留，移除不会改变卡片归属</text></view>
+              <wd-button size="small" variant="text" custom-class="!shrink-0 !px-8rpx !text-24rpx !font-normal" :disabled="selectionLocked || !selectedCardValues.length" @click="clearSelection">
+                清空
+              </wd-button>
             </view>
-            <view class="mt-20rpx">
-              <wd-input
-                v-model="targetKeyword"
-                label="搜索"
-                label-width="72px"
-                placeholder="客户名称或编码"
-                clearable
-                @confirm="searchTargetPopup"
-              />
-              <view class="mt-16rpx">
-                <wd-button
-                  size="small"
-                  type="primary"
-                  plain
-                  block
-                  custom-class="biz-mini-action-btn"
-                  :loading="loadingTargets"
-                  @click="refreshTargetPopup"
-                >
-                  <view class="biz-mini-action-btn__inner">
-                    <view class="i-carbon-renew biz-mini-action-btn__icon biz-mini-action-btn__icon--blue" />
-                    <text class="biz-mini-action-btn__text">刷新目标客户</text>
-                  </view>
+            <scroll-view scroll-y class="h-50vh">
+              <wd-cell-group v-if="selectedCardValues.length" border>
+                <wd-cell v-for="value in selectedCardValues" :key="value" :title="value" :label="selectedCardDescription(value)" center custom-title-class="!break-all !whitespace-normal">
+                  <wd-button size="small" variant="text" custom-class="!shrink-0 !px-8rpx !text-24rpx !font-normal" :disabled="selectionLocked" @click="removeSelectedCard(value)">
+                    移除
+                  </wd-button>
+                </wd-cell>
+              </wd-cell-group>
+              <wd-empty v-else tip="暂无已选卡片，可返回列表继续选择" />
+            </scroll-view>
+            <wd-button block @click="selectionPopupVisible = false">
+              完成
+            </wd-button>
+          </view>
+        </wd-popup>
+        <wd-popup v-model="targetPopupVisible" position="bottom" round safe-area-inset-bottom>
+          <view class="flex flex-col gap-20rpx p-24rpx">
+            <view class="flex items-center justify-between gap-16rpx">
+              <text class="text-30rpx font-bold">选择目标客户</text><wd-button size="small" variant="text" custom-class="!shrink-0 !px-8rpx !text-24rpx !font-normal" @click="targetPopupVisible = false">
+                关闭
+              </wd-button>
+            </view>
+            <wd-search v-model="targetKeyword" hide-cancel placeholder="搜索客户名称 / 客户编码" custom-class="!p-0" @search="searchTargetPopup" @clear="searchTargetPopup" />
+            <view class="flex items-center justify-between gap-12rpx">
+              <text class="text-24rpx text-#64748b">启用直属下级 · {{ targets.length }}/{{ targetTotal }} 个</text><wd-button size="small" variant="text" custom-class="!shrink-0 !px-8rpx !text-24rpx !font-normal" :loading="loadingTargets" @click="refreshTargetPopup">
+                刷新
+              </wd-button>
+            </view>
+            <scroll-view scroll-y class="h-50vh">
+              <wd-skeleton v-if="loadingTargets && !targets.length" theme="paragraph" />
+              <view v-if="targetError" class="grid gap-16rpx p-20rpx">
+                <text class="text-24rpx text-red-600">{{ targetError }}</text><wd-button size="small" variant="text" custom-class="!shrink-0 !px-8rpx !text-24rpx !font-normal" @click="loadTargets(targetKeyword, !!targets.length)">
+                  重试加载
                 </wd-button>
               </view>
-            </view>
-            <view class="mt-16rpx text-24rpx text-#64748b">
-              {{ loadingTargets ? '正在加载下级代理...' : `已加载 ${targets.length} 个下级代理` }}
-            </view>
-
-            <scroll-view scroll-y class="mt-20rpx h-620rpx min-h-260rpx">
-              <view v-if="targets.length" class="grid gap-12rpx">
-                <view
-                  v-for="item in targets"
-                  :key="item.deptId"
-                  class="border rounded-8rpx border-solid p-20rpx"
-                  :class="
-                    Number(item.deptId) === Number(selectedTargetId)
-                      ? 'border-#2563eb bg-#eff6ff'
-                      : 'border-#e5e7eb bg-#f8fafc'
-                  "
-                  @click="selectTarget(item)"
-                >
-                  <view class="flex items-center justify-between gap-16rpx">
-                    <view class="min-w-0">
-                      <view class="truncate text-28rpx text-#111827 font-900">
-                        {{ item.deptName }}
-                      </view>
-                      <view class="mt-8rpx text-23rpx text-#64748b">
-                        {{ targetDescription(item) }}
-                      </view>
-                    </view>
-                    <view class="flex shrink-0 items-center gap-8rpx">
-                      <wd-tag :type="targetScopeTagType(item)" variant="plain">
-                        {{ targetScopeName(item) }}
-                      </wd-tag>
-                      <wd-tag v-if="Number(item.deptId) === Number(selectedTargetId)" type="primary" variant="plain">
-                        已选择
-                      </wd-tag>
-                    </view>
-                  </view>
-                </view>
-              </view>
-              <view v-else class="p-32rpx text-center text-26rpx text-#64748b">
-                暂无可划拨下级代理
-              </view>
+              <wd-cell-group v-if="targets.length" border>
+                <wd-cell v-for="item in targets" :key="item.deptId" :title="item.deptName" :label="targetDescription(item)" clickable center @click="selectTarget(item)">
+                  <wd-tag v-if="Number(item.deptId) === Number(selectedTargetId)" type="primary" variant="plain">
+                    已选择
+                  </wd-tag>
+                  <wd-tag v-else :type="targetScopeTagType(item)" variant="plain">
+                    {{ targetScopeName(item) }}
+                  </wd-tag>
+                </wd-cell>
+              </wd-cell-group>
+              <wd-empty v-else-if="!loadingTargets && !targetError" :tip="targetKeyword ? '未找到匹配的目标客户' : '暂无启用的直属下级客户'" />
+              <wd-button v-if="targets.length < targetTotal" variant="text" size="small" block :loading="loadingTargets" @click="loadTargets(targetKeyword, true)">
+                加载更多目标客户
+              </wd-button>
             </scroll-view>
           </view>
         </wd-popup>
@@ -702,37 +824,23 @@ function normalizeQueryValue(value: string | string[] | undefined) {
     </view>
   </scroll-view>
   <view
-    v-if="!noPermission && !targetPopupVisible"
+    v-if="!noPermission && !targetPopupVisible && !selectionPopupVisible"
     class="biz-paybar z-1100"
   >
     <view class="biz-paybar__inner">
       <view class="biz-paybar__summary">
-        <text class="biz-paybar__label">已选 {{ selectedCardValues.length }} 张</text>
-        <text class="biz-paybar__value">
-          {{ selectedTarget ? `${targetScopeName(selectedTarget)} · ${targetLabel(selectedTarget)}` : '请选择目标客户' }}
-        </text>
+        <text class="biz-paybar__label">{{ submitting ? '正在提交划拨任务' : submitHint }}</text>
+        <text class="biz-paybar__value truncate">{{ taskPending && !submitting ? resultPresentation.title : `已选 ${selectedCardValues.length} 张 · ${targetLabel(selectedTarget)}` }}</text>
       </view>
-      <view class="biz-paybar-actions">
-        <wd-button
-          type="primary"
-          plain
-          block
-          custom-class="biz-paybar-btn"
-          :loading="preparing"
-          :disabled="!canPrepare || preparing"
-          @click="handlePrepare"
-        >
-          校验划拨
+      <view class="biz-paybar-actions !grid-cols-1">
+        <wd-button v-if="!submitting && result?.status === 'unknown'" plain block custom-class="biz-paybar-btn" @click="acknowledgeUnknownTask">
+          核查后重新办理
         </wd-button>
-        <wd-button
-          type="primary"
-          block
-          custom-class="biz-paybar-btn"
-          :loading="submitting"
-          :disabled="!canSubmit"
-          @click="handleSubmit"
-        >
-          确认划拨
+        <wd-button v-if="!submitting && taskPending && result?.status !== 'unknown'" type="primary" block custom-class="biz-paybar-btn" :loading="refreshingResult || submitting" @click="result?.status === 'prepared' ? retryDispatch() : refreshResult()">
+          {{ result?.status === 'prepared' ? '提交原批次' : '刷新任务结果' }}
+        </wd-button>
+        <wd-button v-else-if="submitting || result?.status !== 'unknown'" type="primary" block custom-class="biz-paybar-btn" :loading="submitting" :disabled="!canSubmit" @click="handleSubmit">
+          确认划拨{{ selectedCardValues.length ? ` ${selectedCardValues.length} 张` : '' }}
         </wd-button>
       </view>
     </view>
diff --git a/app/src/pages/business/views/allocate/selection.test.ts b/app/src/pages/business/views/allocate/selection.test.ts
new file mode 100644
index 0000000..51921c8
--- /dev/null
+++ b/app/src/pages/business/views/allocate/selection.test.ts
@@ -0,0 +1,74 @@
+import { describe, expect, it } from 'vitest'
+import { allocateDetailStatus, allocateResultStatus, allocateSelectionFingerprint, allocateStatusPresentation, allocateTaskSnapshot, mergeAllocateSelection } from './selection'
+
+describe('划拨选卡', () => {
+  it('搜索和分页不会清除其他页已选卡', () => {
+    expect(mergeAllocateSelection(['A', 'B'], ['B', 'C'], ['C'])).toEqual(['A', 'C'])
+  })
+  it('重复选择只保留一份', () => {
+    expect(mergeAllocateSelection(['A'], ['B'], ['B', 'B'])).toEqual(['A', 'B'])
+  })
+  it('相同卡集合保持相同快照，目标变更使校验失效', () => {
+    expect(allocateSelectionFingerprint(['A', 'B'], 1)).toBe(allocateSelectionFingerprint(['B', 'A'], 1))
+    expect(allocateSelectionFingerprint(['A'], 1)).not.toBe(allocateSelectionFingerprint(['A'], 2))
+  })
+})
+
+describe('划拨执行结果', () => {
+  it('等待和处理中不会被误报为成功或失败', () => {
+    expect(allocateResultStatus(0)).toBe('pending')
+    expect(allocateResultStatus(1)).toBe('pending')
+    expect(allocateResultStatus(2)).toBe('processing')
+    expect(allocateResultStatus(999)).toBe('pending')
+  })
+  it('保留异常部分成功状态，不误报为整批失败', () => {
+    expect(allocateResultStatus(3)).toBe('success')
+    expect(allocateResultStatus(4)).toBe('failed')
+    expect(allocateResultStatus(5)).toBe('partial_success')
+  })
+})
+
+describe('划拨恢复快照', () => {
+  const item = { requestId: 'request', batchNo: '', batchType: 3, status: 'pending', quantity: 1, target: { deptId: 2, deptName: '客户' }, cards: [], details: [] }
+  const request = { requestId: 'request', cardValues: ['A'], targetDeptId: 2, executionMode: 2 }
+  it('受理前保留原请求以便恢复重试', () => {
+    const saved = allocateTaskSnapshot(item, request)
+    expect(saved.pendingRequest).toEqual(request)
+    expect(saved.cards).toEqual([])
+    expect(saved.details).toEqual([])
+  })
+  it('受理后和明确拒绝后清理原卡号参数', () => {
+    expect(allocateTaskSnapshot({ ...item, batchNo: 'ALC' }, request).pendingRequest).toBeUndefined()
+    expect(allocateTaskSnapshot({ ...item, status: 'failed' }, request).pendingRequest).toBeUndefined()
+  })
+})
+
+describe('划拨页面状态展示', () => {
+  it('区分受理不确定和后台待处理', () => {
+    expect(allocateStatusPresentation('pending', false).title).toBe('提交结果待确认')
+    expect(allocateStatusPresentation('pending', true).title).toBe('等待后台处理')
+  })
+  it('区分校验拒绝和执行失败，异常部分成功提示核查', () => {
+    expect(allocateStatusPresentation('failed', false).title).toBe('校验未通过')
+    expect(allocateStatusPresentation('failed', true).title).toBe('划拨失败')
+    expect(allocateStatusPresentation('partial_success').title).toBe('结果待核查')
+    expect(allocateStatusPresentation('success').type).toBe('success')
+    expect(allocateStatusPresentation().title).toBe('待提交')
+  })
+  it('子任务校验通过不能误报为划拨完成', () => {
+    expect(allocateDetailStatus(2, 1)).toBe('校验通过 · 待整批完成')
+    expect(allocateDetailStatus(2, 2)).toBe('校验通过 · 待整批完成')
+    expect(allocateDetailStatus(2, 4)).toBe('校验通过 · 整批未完成')
+    expect(allocateDetailStatus(2, 3)).toBe('已划拨')
+    expect(allocateDetailStatus(3, 4)).toBe('校验失败')
+    expect(allocateDetailStatus(999, 2)).toBe('状态待确认')
+  })
+})
+
+describe('直接异步提交不确定状态', () => {
+  it('响应丢失不保存可重建请求，不声称未受理', () => {
+    const item = { batchNo: '', batchType: 3, status: 'unknown', quantity: 1, target: { deptId: 2, deptName: '客户' }, cards: [], details: [] }
+    expect(allocateTaskSnapshot(item, { cardValues: ['A'], targetDeptId: 2 }).pendingRequest).toBeUndefined()
+    expect(allocateStatusPresentation('unknown', false).description).toContain('后台可能已创建任务')
+  })
+})
diff --git a/app/src/pages/business/views/allocate/selection.ts b/app/src/pages/business/views/allocate/selection.ts
new file mode 100644
index 0000000..33d402c
--- /dev/null
+++ b/app/src/pages/business/views/allocate/selection.ts
@@ -0,0 +1,22 @@
+import type { AllocateBatchRes, AllocateBatchSubmitParams } from '@/api/types/card'
+
+export function mergeAllocateSelection(selected: string[], visible: string[], checked: string[]) {
+  const visibleSet = new Set(visible)
+  return Array.from(new Set([...selected.filter(value => !visibleSet.has(value)), ...checked]))
+}
+
+export function allocateSelectionFingerprint(values: string[], targetId?: number) {
+  return JSON.stringify([targetId || 0, Array.from(new Set(values)).sort()])
+}
+
+export function allocateTaskSnapshot(item: AllocateBatchRes, request?: AllocateBatchSubmitParams) {
+  return {
+    ...item,
+    cards: [],
+    details: [],
+    target: { deptId: item.target.deptId, deptName: item.target.deptName },
+    pendingRequest: item.batchNo || !['pending', 'processing'].includes(item.status) ? undefined : request,
+  }
+}
+
+export { allocateDetailStatus, allocateResultStatus, allocateStatusPresentation } from '@/utils/allocateStatus'
diff --git a/app/src/pages/business/views/allocate/submit.test.ts b/app/src/pages/business/views/allocate/submit.test.ts
new file mode 100644
index 0000000..93b9ec8
--- /dev/null
+++ b/app/src/pages/business/views/allocate/submit.test.ts
@@ -0,0 +1,81 @@
+import { readFileSync } from 'node:fs'
+import { createContext, runInContext } from 'node:vm'
+import { ModuleKind, transpileModule } from 'typescript'
+import { describe, expect, it, vi } from 'vitest'
+import * as selection from './selection'
+
+function harness() {
+  const submit = vi.fn()
+  const summary = vi.fn()
+  const toast = vi.fn()
+  const removeStorage = vi.fn()
+  const userInfo = { userId: 12, tenantId: 'A', deptId: 10 }
+  const context = createContext({
+    exports: {},
+    require: (name: string) => {
+      if (name === '@/api/card')
+        return { allocateBatchSubmit: submit, getAllocateTargets: vi.fn(), getCardList: vi.fn() }
+      if (name === '@/api/executionLog')
+        return { allocateSummary: summary }
+      if (name === './selection')
+        return selection
+      if (name === '@/pages/card/data')
+        return {}
+      if (name === '@/store/user')
+        return { useUserStore: () => ({ userInfo, fetchUserInfo: vi.fn(async () => userInfo) }) }
+      if (name === '@/utils/permission')
+        return { hasUserPermission: () => true }
+      if (name === '@/utils/userIdentity')
+        return { getAccountWorkspace: () => 'agent' }
+      throw new Error(name)
+    },
+    ref: (value: unknown) => ({ value }),
+    computed: (getter: (() => unknown) | { get: () => unknown }) => ({ get value() { return typeof getter === 'function' ? getter() : getter.get() } }),
+    definePage: () => undefined,
+    watch: () => undefined,
+    onShow: () => undefined,
+    onHide: () => undefined,
+    onUnload: () => undefined,
+    onMounted: () => undefined,
+    onLoad: () => undefined,
+    setTimeout: vi.fn(),
+    uni: {
+      showModal: (options: { success: (value: { confirm: boolean }) => void }) => options.success({ confirm: true }),
+      showToast: toast,
+      setStorageSync: vi.fn(),
+      removeStorageSync: removeStorage,
+      getStorageSync: vi.fn(),
+    },
+  })
+  const source = readFileSync(new URL('./index.vue', import.meta.url), 'utf8')
+  const script = source.match(/<script[^>]*>([\s\S]*?)<\/script>/)?.[1]
+  if (!script)
+    throw new Error('missing script')
+  runInContext(transpileModule(script, { compilerOptions: { module: ModuleKind.CommonJS } }).outputText, context)
+  runInContext('chosenTarget.value = { deptId: 20, deptName: \'目标客户\' }; selectedCardValues.value = [\'CARD\']', context)
+  return { submit, summary, toast, removeStorage, evaluate: (code: string) => runInContext(code, context) }
+}
+
+describe('异步划拨提交', () => {
+  it('受理后清空选择和任务状态，不自动查询或轮询结果', async () => {
+    const page = harness()
+    page.submit.mockResolvedValue({ batchNo: 'ALC202610130001', status: 'pending' })
+    await page.evaluate('handleSubmit()')
+    expect(page.submit).toHaveBeenCalledWith({ cardValues: ['CARD'], targetDeptId: 20, executionMode: 2 })
+    expect(page.summary).not.toHaveBeenCalled()
+    expect(page.evaluate('result.value')).toBeUndefined()
+    expect(page.evaluate('selectedCardValues.value.length')).toBe(0)
+    expect(page.removeStorage).toHaveBeenCalledWith('allocate-last-batch:A:12')
+    expect(page.toast).toHaveBeenCalledWith({ title: '已提交，请到批次日志查看', icon: 'none', duration: 3000 })
+  })
+  it('请求结果未知时保留防重复提交保护，不清空选择', async () => {
+    const page = harness()
+    page.submit.mockRejectedValue(new Error('timeout'))
+    await page.evaluate('handleSubmit()')
+    expect(page.evaluate('result.value.status')).toBe('unknown')
+    expect(page.evaluate('canSubmit.value')).toBe(false)
+    expect(page.evaluate('selectedCardValues.value.length')).toBe(1)
+    expect(page.removeStorage).not.toHaveBeenCalled()
+    expect(page.summary).not.toHaveBeenCalled()
+  })
+})
diff --git a/app/src/pages/business/views/api/diagnosis.ts b/app/src/pages/business/views/api/diagnosis.ts
deleted file mode 100644
index 29c005a..0000000
--- a/app/src/pages/business/views/api/diagnosis.ts
+++ /dev/null
@@ -1,44 +0,0 @@
-import type {
-  DiagnosisFlowParams,
-  DiagnosisFlowRes,
-  DiagnosisInfoParams,
-  DiagnosisInfoRes,
-} from '@/api/types/diagnosis'
-import { http } from '@/http/http'
-
-export type {
-  DiagnosisFlowParams,
-  DiagnosisFlowRes,
-  DiagnosisInfoItem,
-  DiagnosisInfoParams,
-  DiagnosisInfoRes,
-  DiagnosisModuleItem,
-  DiagnosisPackageItem,
-  DiagnosisRateLimitApnItem,
-  DiagnosisRateLimitPccItem,
-  DiagnosisSessionItem,
-} from '@/api/types/diagnosis'
-
-export function getDiagnosisInfo(data: DiagnosisInfoParams) {
-  return http.post<DiagnosisInfoRes>('/diagnosis/info', data, undefined, undefined, {
-    hideErrorToast: true,
-  })
-}
-
-export function getOpenDiagnosisInfo(data: DiagnosisInfoParams & { tenantId?: string }) {
-  return http.post<DiagnosisInfoRes>('/open/diagnosis/info', data, undefined, undefined, {
-    hideErrorToast: true,
-  })
-}
-
-export function getDiagnosisFlow(data: DiagnosisFlowParams) {
-  return http.post<DiagnosisFlowRes>('/open/diagnosis/flow', data, undefined, undefined, {
-    hideErrorToast: true,
-  })
-}
-
-export function getOpenDiagnosisFlow(data: DiagnosisFlowParams & { tenantId?: string }) {
-  return http.post<DiagnosisFlowRes>('/open/diagnosis/flow', data, undefined, undefined, {
-    hideErrorToast: true,
-  })
-}
diff --git a/app/src/pages/business/views/api/workOrder.ts b/app/src/pages/business/views/api/workOrder.ts
index 3d95629..2510913 100644
--- a/app/src/pages/business/views/api/workOrder.ts
+++ b/app/src/pages/business/views/api/workOrder.ts
@@ -1,35 +1 @@
-import type {
-  WorkOrderCreateParams,
-  WorkOrderCreateRes,
-  WorkOrderDetailParams,
-  WorkOrderDetailRes,
-  WorkOrderListParams,
-  WorkOrderListRes,
-} from '@/api/types/workOrder'
-import { http } from '@/http/http'
-
-export type {
-  AppWorkOrder,
-  AppWorkOrderCommunication,
-  WorkOrderCreateParams,
-  WorkOrderDetailParams,
-  WorkOrderListParams,
-} from '@/api/types/workOrder'
-
-export function getWorkOrderList(params: WorkOrderListParams) {
-  return http.get<WorkOrderListRes>('/work-order/list', params, undefined, {
-    hideErrorToast: true,
-  })
-}
-
-export function getWorkOrderDetail(params: WorkOrderDetailParams) {
-  return http.get<WorkOrderDetailRes>('/work-order/detail', params, undefined, {
-    hideErrorToast: true,
-  })
-}
-
-export function createWorkOrder(data: WorkOrderCreateParams) {
-  return http.post<WorkOrderCreateRes>('/work-order/create', data, undefined, undefined, {
-    hideErrorToast: true,
-  })
-}
+export * from '@/api/workOrder'
diff --git a/app/src/pages/business/views/balanceRecharge/index.vue b/app/src/pages/business/views/balanceRecharge/index.vue
index cea465a..ce715b1 100644
--- a/app/src/pages/business/views/balanceRecharge/index.vue
+++ b/app/src/pages/business/views/balanceRecharge/index.vue
@@ -29,53 +29,53 @@ onMounted(() => {
 </script>
 
 <template>
-    <view class="min-h-screen p-14rpx pb-24rpx">
-      <view class="mx-auto max-w-920rpx flex flex-col gap-14rpx">
-        <view class="balance-hero">
-          <view class="balance-hero__top">
-            <view>
-              <text class="balance-hero__eyebrow">账户资金</text>
-              <text class="balance-hero__title">当前余额</text>
-            </view>
-            <view class="balance-hero__icon i-carbon-wallet" />
-          </view>
-          <text class="balance-hero__value">{{ balanceText }}</text>
-          <view class="balance-hero__foot">
-            <text>{{ userStore.userInfo.phone || userStore.userInfo.username || '当前账户' }}</text>
-            <text class="balance-hero__status">余额可用于业务扣款</text>
+  <view class="min-h-screen p-14rpx pb-24rpx">
+    <view class="mx-auto max-w-920rpx flex flex-col gap-14rpx">
+      <view class="balance-hero">
+        <view class="balance-hero__top">
+          <view>
+            <text class="balance-hero__eyebrow">账户资金</text>
+            <text class="balance-hero__title">当前余额</text>
           </view>
+          <view class="balance-hero__icon i-carbon-wallet" />
         </view>
-
-        <view class="status-card">
-          <view class="status-card__icon i-carbon-information" />
-          <view class="min-w-0 flex-1">
-            <text class="status-card__title">充值入口暂未开放</text>
-            <text class="status-card__sub">历史充值订单仍可在我的订单中查看，套餐续费等业务继续使用余额扣款。</text>
-          </view>
+        <text class="balance-hero__value">{{ balanceText }}</text>
+        <view class="balance-hero__foot">
+          <text>{{ userStore.userInfo.phone || userStore.userInfo.username || '当前账户' }}</text>
+          <text class="balance-hero__status">余额可用于业务扣款</text>
         </view>
-
-        <wd-card custom-class="!mx-0 !mb-0">
-          <view class="text-28rpx text-#111827 font-800">
-            可继续办理
-          </view>
-          <view class="mt-10rpx text-24rpx text-#64748b leading-36rpx">
-            套餐续费、套餐变更等业务仍会使用账户余额扣款；余额不足时请联系平台处理。
-          </view>
-          <view class="grid grid-cols-2 mt-22rpx gap-16rpx">
-            <wd-button type="primary" plain block @click="goOrder">
-              我的订单
-            </wd-button>
-            <wd-button type="primary" block @click="goRenew">
-              套餐续费
-            </wd-button>
-          </view>
-        </wd-card>
-
-        <wd-button type="primary" plain block @click="goBusiness">
-          返回业务
-        </wd-button>
       </view>
+
+      <view class="status-card">
+        <view class="status-card__icon i-carbon-information" />
+        <view class="min-w-0 flex-1">
+          <text class="status-card__title">充值入口暂未开放</text>
+          <text class="status-card__sub">历史充值订单仍可在我的订单中查看，套餐续费等业务继续使用余额扣款。</text>
+        </view>
+      </view>
+
+      <wd-card custom-class="!mx-0 !mb-0">
+        <view class="text-28rpx text-#111827 font-800">
+          可继续办理
+        </view>
+        <view class="mt-10rpx text-24rpx text-#64748b leading-36rpx">
+          套餐续费、套餐变更等业务仍会使用账户余额扣款；余额不足时请联系平台处理。
+        </view>
+        <view class="grid grid-cols-2 mt-22rpx gap-16rpx">
+          <wd-button type="primary" plain block @click="goOrder">
+            我的订单
+          </wd-button>
+          <wd-button type="primary" block @click="goRenew">
+            套餐续费
+          </wd-button>
+        </view>
+      </wd-card>
+
+      <wd-button type="primary" plain block @click="goBusiness">
+        返回业务
+      </wd-button>
     </view>
+  </view>
 </template>
 
 <style lang="scss" scoped>
diff --git a/app/src/pages/business/views/cardRenew/index.vue b/app/src/pages/business/views/cardRenew/index.vue
index 19cee20..05b7576 100644
--- a/app/src/pages/business/views/cardRenew/index.vue
+++ b/app/src/pages/business/views/cardRenew/index.vue
@@ -257,215 +257,217 @@ onLoad((query) => {
 </script>
 
 <template>
-    <view class="biz-page">
-      <view class="biz-stack">
-        <view class="biz-hero">
-          <view class="biz-hero__top">
-            <view class="min-w-0 flex items-center gap-16rpx">
-              <view class="biz-hero__icon">
-                <view class="i-carbon-renew" />
-              </view>
-              <view class="min-w-0">
-                <text class="biz-hero__title">套餐续费</text>
-                <text class="biz-hero__sub">
-                  {{ prepare ? `${displayCard()} · ${packageName()}` : '选择可续费套餐，到期时间按后端规则顺延' }}
-                </text>
-              </view>
+  <view class="biz-page">
+    <view class="biz-stack">
+      <view class="biz-hero">
+        <view class="biz-hero__top">
+          <view class="min-w-0 flex items-center gap-16rpx">
+            <view class="biz-hero__icon">
+              <view class="i-carbon-renew" />
             </view>
-            <wd-tag type="success" variant="plain">
-              单卡办理
-            </wd-tag>
-          </view>
-
-          <view v-if="prepare" class="biz-stat-grid">
-            <view class="biz-stat">
-              <text class="biz-stat__label">当前到期</text>
-              <text class="biz-stat__value">{{ formatDateTime(prepare.card.flowPkgEndAt) }}</text>
-            </view>
-            <view class="biz-stat">
-              <text class="biz-stat__label">剩余流量</text>
-              <text class="biz-stat__value">{{ formatFlowPair(prepare.card) }}</text>
-            </view>
-            <view class="biz-stat">
-              <text class="biz-stat__label">当前套餐</text>
-              <text class="biz-stat__value">{{ currentPackageName() }}</text>
-            </view>
-            <view class="biz-stat">
-              <text class="biz-stat__label">续费单年价</text>
-              <text class="biz-stat__value">{{ formatMoney(prepare.unitPrice) }}</text>
+            <view class="min-w-0">
+              <text class="biz-hero__title">套餐续费</text>
+              <text class="biz-hero__sub">
+                {{ prepare ? `${displayCard()} · ${packageName()}` : '选择可续费套餐，到期时间按后端规则顺延' }}
+              </text>
             </view>
           </view>
+          <wd-tag type="success" variant="plain">
+            单卡办理
+          </wd-tag>
         </view>
 
-        <view v-if="!fixedCardMode" class="biz-card">
-          <view class="biz-card__body">
-            <wd-input
-              v-model="cardValue"
-              placeholder="请输入 ICCID、MSISDN、IMSI 或 IMEI"
-              clearable
-            />
-            <view class="mt-20rpx">
-              <wd-button block type="primary" custom-class="biz-paybar-btn" :loading="loading" @click="loadPrepare">
-                查询续费档位
-              </wd-button>
-            </view>
+        <view v-if="prepare" class="biz-stat-grid">
+          <view class="biz-stat">
+            <text class="biz-stat__label">当前到期</text>
+            <text class="biz-stat__value">{{ formatDateTime(prepare.card.flowPkgEndAt) }}</text>
+          </view>
+          <view class="biz-stat">
+            <text class="biz-stat__label">剩余流量</text>
+            <text class="biz-stat__value">{{ formatFlowPair(prepare.card) }}</text>
+          </view>
+          <view class="biz-stat">
+            <text class="biz-stat__label">当前套餐</text>
+            <text class="biz-stat__value">{{ currentPackageName() }}</text>
+          </view>
+          <view class="biz-stat">
+            <text class="biz-stat__label">续费单年价</text>
+            <text class="biz-stat__value">{{ formatMoney(prepare.unitPrice) }}</text>
           </view>
         </view>
+      </view>
 
-        <view v-if="loading" class="biz-card">
-          <view class="biz-card__body">
-            <wd-skeleton theme="paragraph" />
-          </view>
-        </view>
-
-        <view v-else-if="errorMessage" class="biz-card">
-          <view class="biz-card__body grid gap-16rpx">
-            <view class="text-26rpx text-#b91c1c leading-38rpx">
-              {{ errorMessage }}
-            </view>
-            <wd-button size="small" type="primary" @click="loadPrepare">
-              重试
+      <view v-if="!fixedCardMode" class="biz-card">
+        <view class="biz-card__body">
+          <wd-input
+            v-model="cardValue"
+            placeholder="请输入 ICCID、MSISDN、IMSI 或 IMEI"
+            clearable
+          />
+          <view class="mt-20rpx">
+            <wd-button block type="primary" custom-class="biz-paybar-btn" :loading="loading" @click="loadPrepare">
+              查询续费档位
             </wd-button>
           </view>
         </view>
-
-        <template v-else-if="prepare">
-          <view v-if="renewablePackages.length" class="app-section">
-            <view class="app-section__head">
-              <text class="biz-step">1</text>
-              <view class="app-title-bar" />
-              <text class="app-section__title">选择续费套餐</text>
-            </view>
-            <view class="biz-option-list">
-              <view
-                v-for="(item, index) in renewablePackages"
-                :key="renewPackageCode(item) || index"
-                class="biz-option"
-                :class="{ 'is-active': index === selectedPackageIndex }"
-                @click="selectPackage(index)"
-              >
-                <view class="biz-option__main">
-                  <view class="flex items-center gap-10rpx">
-                    <text class="biz-option__title">{{ item.packageName || item.package?.packageName || renewPackageCode(item) || '-' }}</text>
-                    <wd-tag
-                      v-if="index === selectedPackageIndex"
-                      type="primary"
-                      size="small"
-                      variant="plain"
-                    >
-                      已选
-                    </wd-tag>
-                  </view>
-                  <text class="biz-option__meta">
-                    {{ item.priceText || formatMoney(item.renewUnitPrice || item.unitPrice) }} · {{ item.options?.length || item.renewableDurationOptions?.length || 0 }} 个可续费年限
-                  </text>
-                </view>
-                <text class="biz-option__price">{{ item.priceText || formatMoney(item.renewUnitPrice || item.unitPrice) }}</text>
-                <view class="biz-radio" />
-              </view>
-            </view>
-          </view>
-          <view v-else class="biz-card">
-            <view class="biz-card__body text-center text-26rpx text-#64748b">
-              当前套餐暂无可续费套餐
-            </view>
-          </view>
-
-          <view v-if="selectedOptions.length" class="app-section">
-            <view class="app-section__head">
-              <text class="biz-step">2</text>
-              <view class="app-title-bar" />
-              <text class="app-section__title">选择续费年限</text>
-            </view>
-            <view class="biz-option-list">
-              <view
-                v-for="(item, index) in selectedOptions"
-                :key="`${selectedTargetPackageCode()}_${item.durationMonths}`"
-                class="biz-option"
-                :class="{ 'is-active': index === selectedIndex }"
-                @click="selectOption(index)"
-              >
-                <view class="biz-option__main">
-                  <view class="flex items-center gap-10rpx">
-                    <text class="biz-option__title">{{ item.label }}</text>
-                    <wd-tag
-                      v-if="item.recommended || index === prepare.recommendIndex"
-                      type="primary"
-                      size="small"
-                      variant="plain"
-                    >
-                      推荐
-                    </wd-tag>
-                  </view>
-                  <text class="biz-option__meta">
-                    {{ optionTag(item, index) }} · 到期 {{ formatDateTime(item.expireAfter) }}
-                  </text>
-                </view>
-                <text class="biz-option__price">{{ item.priceText || formatMoney(item.totalAmount) }}</text>
-                <view class="biz-radio" />
-              </view>
-            </view>
-          </view>
-          <view v-else class="biz-card">
-            <view class="biz-card__body text-center text-26rpx text-#64748b">
-              当前续费套餐暂无可续费年限
-            </view>
-          </view>
-
-          <view class="biz-card">
-            <view class="biz-card__body">
-              <view class="biz-row">
-                <text class="biz-row__label">确认 ICCID</text>
-                <text class="biz-row__value mono">{{ prepare.card.iccid || '-' }}</text>
-              </view>
-              <view class="biz-row">
-                <text class="biz-row__label">当前套餐</text>
-                <text class="biz-row__value">{{ currentPackageName() }}</text>
-              </view>
-              <view class="biz-row">
-                <text class="biz-row__label">续费套餐</text>
-                <text class="biz-row__value">{{ packageName() }}</text>
-              </view>
-              <view class="biz-row">
-                <text class="biz-row__label">续费年限</text>
-                <text class="biz-row__value">{{ selectedOption?.label || '-' }}</text>
-              </view>
-              <view
-                class="biz-row"
-              >
-                <text class="biz-row__label">续费后到期</text>
-                <text class="biz-row__value">{{ formatDateTime(selectedOption?.expireAfter) }}</text>
-              </view>
-              <view class="biz-row">
-                <text class="biz-row__label">应付金额</text>
-                <text class="biz-row__value text-#2563eb">{{ amountText }}</text>
-              </view>
-            </view>
-          </view>
-
-          <view v-if="order" class="biz-card">
-            <view class="biz-card__body">
-              <view class="biz-section-head mb-8rpx">
-                <text class="biz-section-title">办理结果</text>
-                <wd-tag type="success" variant="plain">已支付</wd-tag>
-              </view>
-              <view class="biz-row">
-                <text class="biz-row__label">订单号</text>
-                <text class="biz-row__value mono">{{ order.orderSn || '-' }}</text>
-              </view>
-              <view class="biz-row">
-                <text class="biz-row__label">续费批次</text>
-                <text class="biz-row__value mono">{{ order.batchNo || '-' }}</text>
-              </view>
-              <view class="biz-row">
-                <text class="biz-row__label">订单金额</text>
-                <text class="biz-row__value">{{ order.priceText || formatMoney(order.totalAmount) }}</text>
-              </view>
-            </view>
-          </view>
-        </template>
       </view>
+
+      <view v-if="loading" class="biz-card">
+        <view class="biz-card__body">
+          <wd-skeleton theme="paragraph" />
+        </view>
+      </view>
+
+      <view v-else-if="errorMessage" class="biz-card">
+        <view class="biz-card__body grid gap-16rpx">
+          <view class="text-26rpx text-#b91c1c leading-38rpx">
+            {{ errorMessage }}
+          </view>
+          <wd-button size="small" type="primary" @click="loadPrepare">
+            重试
+          </wd-button>
+        </view>
+      </view>
+
+      <template v-else-if="prepare">
+        <view v-if="renewablePackages.length" class="app-section">
+          <view class="app-section__head">
+            <text class="biz-step">1</text>
+            <view class="app-title-bar" />
+            <text class="app-section__title">选择续费套餐</text>
+          </view>
+          <view class="biz-option-list">
+            <view
+              v-for="(item, index) in renewablePackages"
+              :key="renewPackageCode(item) || index"
+              class="biz-option"
+              :class="{ 'is-active': index === selectedPackageIndex }"
+              @click="selectPackage(index)"
+            >
+              <view class="biz-option__main">
+                <view class="flex items-center gap-10rpx">
+                  <text class="biz-option__title">{{ item.packageName || item.package?.packageName || renewPackageCode(item) || '-' }}</text>
+                  <wd-tag
+                    v-if="index === selectedPackageIndex"
+                    type="primary"
+                    size="small"
+                    variant="plain"
+                  >
+                    已选
+                  </wd-tag>
+                </view>
+                <text class="biz-option__meta">
+                  {{ item.priceText || formatMoney(item.renewUnitPrice || item.unitPrice) }} · {{ item.options?.length || item.renewableDurationOptions?.length || 0 }} 个可续费年限
+                </text>
+              </view>
+              <text class="biz-option__price">{{ item.priceText || formatMoney(item.renewUnitPrice || item.unitPrice) }}</text>
+              <view class="biz-radio" />
+            </view>
+          </view>
+        </view>
+        <view v-else class="biz-card">
+          <view class="biz-card__body text-center text-26rpx text-#64748b">
+            当前套餐暂无可续费套餐
+          </view>
+        </view>
+
+        <view v-if="selectedOptions.length" class="app-section">
+          <view class="app-section__head">
+            <text class="biz-step">2</text>
+            <view class="app-title-bar" />
+            <text class="app-section__title">选择续费年限</text>
+          </view>
+          <view class="biz-option-list">
+            <view
+              v-for="(item, index) in selectedOptions"
+              :key="`${selectedTargetPackageCode()}_${item.durationMonths}`"
+              class="biz-option"
+              :class="{ 'is-active': index === selectedIndex }"
+              @click="selectOption(index)"
+            >
+              <view class="biz-option__main">
+                <view class="flex items-center gap-10rpx">
+                  <text class="biz-option__title">{{ item.label }}</text>
+                  <wd-tag
+                    v-if="item.recommended || index === prepare.recommendIndex"
+                    type="primary"
+                    size="small"
+                    variant="plain"
+                  >
+                    推荐
+                  </wd-tag>
+                </view>
+                <text class="biz-option__meta">
+                  {{ optionTag(item, index) }} · 到期 {{ formatDateTime(item.expireAfter) }}
+                </text>
+              </view>
+              <text class="biz-option__price">{{ item.priceText || formatMoney(item.totalAmount) }}</text>
+              <view class="biz-radio" />
+            </view>
+          </view>
+        </view>
+        <view v-else class="biz-card">
+          <view class="biz-card__body text-center text-26rpx text-#64748b">
+            当前续费套餐暂无可续费年限
+          </view>
+        </view>
+
+        <view class="biz-card">
+          <view class="biz-card__body">
+            <view class="biz-row">
+              <text class="biz-row__label">确认 ICCID</text>
+              <text class="biz-row__value mono">{{ prepare.card.iccid || '-' }}</text>
+            </view>
+            <view class="biz-row">
+              <text class="biz-row__label">当前套餐</text>
+              <text class="biz-row__value">{{ currentPackageName() }}</text>
+            </view>
+            <view class="biz-row">
+              <text class="biz-row__label">续费套餐</text>
+              <text class="biz-row__value">{{ packageName() }}</text>
+            </view>
+            <view class="biz-row">
+              <text class="biz-row__label">续费年限</text>
+              <text class="biz-row__value">{{ selectedOption?.label || '-' }}</text>
+            </view>
+            <view
+              class="biz-row"
+            >
+              <text class="biz-row__label">续费后到期</text>
+              <text class="biz-row__value">{{ formatDateTime(selectedOption?.expireAfter) }}</text>
+            </view>
+            <view class="biz-row">
+              <text class="biz-row__label">应付金额</text>
+              <text class="biz-row__value text-#2563eb">{{ amountText }}</text>
+            </view>
+          </view>
+        </view>
+
+        <view v-if="order" class="biz-card">
+          <view class="biz-card__body">
+            <view class="biz-section-head mb-8rpx">
+              <text class="biz-section-title">办理结果</text>
+              <wd-tag type="success" variant="plain">
+                已支付
+              </wd-tag>
+            </view>
+            <view class="biz-row">
+              <text class="biz-row__label">订单号</text>
+              <text class="biz-row__value mono">{{ order.orderSn || '-' }}</text>
+            </view>
+            <view class="biz-row">
+              <text class="biz-row__label">续费批次</text>
+              <text class="biz-row__value mono">{{ order.batchNo || '-' }}</text>
+            </view>
+            <view class="biz-row">
+              <text class="biz-row__label">订单金额</text>
+              <text class="biz-row__value">{{ order.priceText || formatMoney(order.totalAmount) }}</text>
+            </view>
+          </view>
+        </view>
+      </template>
     </view>
+  </view>
   <view v-if="prepare" class="biz-paybar">
     <view class="biz-paybar__inner">
       <view class="biz-paybar__summary">
diff --git a/app/src/pages/business/views/customer/index.test.ts b/app/src/pages/business/views/customer/index.test.ts
new file mode 100644
index 0000000..7d077cf
--- /dev/null
+++ b/app/src/pages/business/views/customer/index.test.ts
@@ -0,0 +1,117 @@
+import type { CustomerListRes } from '@/api/types/customer'
+import { readFileSync } from 'node:fs'
+import { createContext, runInContext } from 'node:vm'
+import { ModuleKind, transpileModule } from 'typescript'
+import { describe, expect, it, vi } from 'vitest'
+
+function createHarness() {
+  const requests = vi.fn<(params: Record<string, unknown>) => Promise<CustomerListRes>>()
+  const unmountCallbacks: Array<() => void> = []
+  const features = { allowed: true }
+  const context = createContext({
+    exports: {},
+    require: (name: string) => {
+      if (name === '../api/customer')
+        return { getCustomerList: requests }
+      if (name === '@/store/user')
+        return { useUserStore: () => ({ userInfo: {}, fetchUserInfo: async () => undefined }) }
+      if (name === '@/utils/permission')
+        return { hasAnyFeature: () => features.allowed }
+      if (name === '@/utils/userIdentity')
+        return { getAccountWorkspace: () => 'enterprise', getAccountWorkspaceLabel: () => '企业' }
+      if (name === '@/constant/RouterPath')
+        return { default: { BusinessViewsCustomerDetail: '/customer/detail' } }
+      throw new Error(`Unexpected import: ${name}`)
+    },
+    ref: (value: unknown) => ({ value }),
+    computed: (getter: () => unknown) => ({ get value() { return getter() } }),
+    definePage: () => undefined,
+    onMounted: () => undefined,
+    onUnmounted: (callback: () => void) => unmountCallbacks.push(callback),
+    uni: { showToast: vi.fn(), navigateTo: vi.fn() },
+  })
+  const source = readFileSync(new URL('./index.vue', import.meta.url), 'utf8')
+  const script = source.match(/<script[^>]*>([\s\S]*?)<\/script>/)?.[1]
+  if (!script)
+    throw new Error('Customer script not found')
+  const compiled = transpileModule(script, { compilerOptions: { module: ModuleKind.CommonJS } })
+  runInContext(compiled.outputText, context)
+  return {
+    requests,
+    features,
+    evaluate: <Result>(expression: string) => runInContext(expression, context) as Result,
+    unmount: () => unmountCallbacks.forEach(callback => callback()),
+  }
+}
+
+function result(customerId: number, total = 2): CustomerListRes {
+  return {
+    items: [{ customerId, customerName: `客户${customerId}`, customerType: 'enterprise', customerTypeName: '企业客户', status: '0', statusText: '正常', realNameStatus: '已录入实名资料', cardCount: 0, normalCardCount: 0 }],
+    total,
+    summary: { total, normalCount: total, pendingProfileCount: 0 },
+  }
+}
+
+describe('客户列表请求状态', () => {
+  it('列表不展示机构编号或内部ID替代编号', () => {
+    const source = readFileSync(new URL('./index.vue', import.meta.url), 'utf8')
+    expect(source).not.toContain('customerLabel')
+    expect(source).not.toContain('customerCode')
+    expect(source).not.toContain('ID ${')
+    expect(source).not.toContain('搜索企业名称 / 编码')
+  })
+  it('加载更多沿用已提交的搜索条件', async () => {
+    const harness = createHarness()
+    harness.requests.mockResolvedValueOnce(result(1)).mockResolvedValueOnce(result(2))
+    harness.evaluate('keyword.value = \'企业甲\'')
+    await harness.evaluate<Promise<void>>('loadCustomers(true)')
+    harness.evaluate('keyword.value = \'企业乙\'')
+    await harness.evaluate<Promise<void>>('loadCustomers(false)')
+    expect(harness.requests.mock.calls[1][0]).toMatchObject({ page: 2, keyword: '企业甲' })
+    expect(harness.requests.mock.calls[1][0]).not.toHaveProperty('status')
+    expect(harness.evaluate<number[]>('customers.value.map(item => item.customerId)')).toEqual([1, 2])
+  })
+
+  it('旧搜索晚返回时不覆盖新结果或总数', async () => {
+    const harness = createHarness()
+    let resolveOld!: (value: CustomerListRes) => void
+    harness.requests.mockImplementationOnce(() => new Promise((resolve) => {
+      resolveOld = resolve
+    }))
+    harness.requests.mockResolvedValueOnce(result(2, 3))
+    const oldRequest = harness.evaluate<Promise<void>>('loadCustomers(true)')
+    await harness.evaluate<Promise<void>>('loadCustomers(true)')
+    resolveOld(result(1, 10))
+    await oldRequest
+    expect(harness.evaluate<number[]>('customers.value.map(item => item.customerId)')).toEqual([2])
+    expect(harness.evaluate<number>('total.value')).toBe(3)
+    expect(harness.evaluate<boolean>('loading.value')).toBe(false)
+  })
+
+  it('页面卸载后不再处理返回结果或发起请求', async () => {
+    const harness = createHarness()
+    let resolveRequest!: (value: CustomerListRes) => void
+    harness.requests.mockImplementationOnce(() => new Promise((resolve) => {
+      resolveRequest = resolve
+    }))
+    const request = harness.evaluate<Promise<void>>('loadCustomers(true)')
+    harness.unmount()
+    resolveRequest(result(1))
+    await request
+    await harness.evaluate<Promise<void>>('loadCustomers(true)')
+    expect(harness.evaluate<number>('customers.value.length')).toBe(0)
+    expect(harness.requests).toHaveBeenCalledTimes(1)
+  })
+
+  it('失去权限后清空旧数据并拒绝加载', async () => {
+    const harness = createHarness()
+    harness.requests.mockResolvedValueOnce(result(1))
+    await harness.evaluate<Promise<void>>('loadCustomers(true)')
+    harness.features.allowed = false
+    await harness.evaluate<Promise<void>>('loadCustomers(true)')
+    expect(harness.evaluate<number>('customers.value.length')).toBe(0)
+    expect(harness.evaluate<number>('total.value')).toBe(0)
+    expect(harness.evaluate<boolean>('noPermission.value')).toBe(true)
+    expect(harness.requests).toHaveBeenCalledTimes(1)
+  })
+})
diff --git a/app/src/pages/business/views/customer/index.vue b/app/src/pages/business/views/customer/index.vue
index 969ecca..8132c4c 100644
--- a/app/src/pages/business/views/customer/index.vue
+++ b/app/src/pages/business/views/customer/index.vue
@@ -14,7 +14,7 @@ definePage({
 
 const userStore = useUserStore()
 const keyword = ref('')
-const customerType = ref<AppCustomerType>('enterprise')
+const customerType: AppCustomerType = 'enterprise'
 const page = ref(1)
 const pageSize = 20
 const total = ref(0)
@@ -22,6 +22,11 @@ const customers = ref<AppCustomer[]>([])
 const loading = ref(false)
 const loadingMore = ref(false)
 const noPermission = ref(false)
+const submittedKeyword = ref('')
+const errorMessage = ref('')
+let requestVersion = 0
+let disposed = false
+const canUseCustomerDetail = computed(() => hasAnyFeature(userStore.userInfo, 'customer:detail'))
 
 const hasMore = computed(() => customers.value.length < total.value)
 const workspace = computed(() => getAccountWorkspace(userStore.userInfo))
@@ -32,32 +37,18 @@ const summaryText = computed(() => {
   return `共 ${total.value} 个企业客户`
 })
 const workspaceLabel = computed(() => getAccountWorkspaceLabel(workspace.value))
-const activeCustomerCount = computed(() => customers.value.filter(item => item.status === '0').length)
-const pendingRealNameCount = computed(() => customers.value.filter(item => item.realNameStatus !== '已录入实名资料').length)
-
-function statusTagType(item: AppCustomer) {
-  if (item.status === '0')
-    return 'success'
-  if (item.status === '1')
-    return 'warning'
-  return 'primary'
-}
 
 function realNameTagType(item: AppCustomer) {
   return item.realNameStatus === '已录入实名资料' ? 'success' : 'warning'
 }
 
-function customerLabel(item: AppCustomer) {
-  const code = item.customerCode || (item.terminalId ? `ID ${item.terminalId}` : `ID ${item.customerId}`)
-  return `${item.customerTypeName || '客户'} · ${code}`
-}
-
 function buildQuery(nextPage: number) {
   return {
     page: nextPage,
     pageSize,
-    keyword: keyword.value.trim() || undefined,
-    customerType: customerType.value,
+    keyword: submittedKeyword.value || undefined,
+    customerType,
+
   }
 }
 
@@ -87,29 +78,51 @@ function getErrorMessage(error: unknown, fallback: string) {
 }
 
 async function loadCustomers(reset = true) {
+  if (disposed)
+    return
   if (!canUseCustomerList.value) {
+    requestVersion++
+    customers.value = []
+    total.value = 0
+
+    loading.value = false
+    loadingMore.value = false
     noPermission.value = true
     return
   }
+  noPermission.value = false
   if (reset) {
+    submittedKeyword.value = keyword.value.trim()
+    customers.value = []
+    total.value = 0
+
+    loadingMore.value = false
     page.value = 1
     loading.value = true
   }
   else {
-    if (!hasMore.value || loadingMore.value)
+    if (loading.value || !hasMore.value || loadingMore.value)
       return
     loadingMore.value = true
   }
 
+  const currentRequest = ++requestVersion
+  errorMessage.value = ''
   try {
     const nextPage = reset ? 1 : page.value + 1
     const res = await getCustomerList(buildQuery(nextPage))
+    if (currentRequest !== requestVersion)
+      return
     const list = res.items || []
     customers.value = reset ? list : [...customers.value, ...list]
     total.value = res.total || 0
+
     page.value = nextPage
   }
   catch (error) {
+    if (currentRequest !== requestVersion)
+      return
+    errorMessage.value = getErrorMessage(error, '客户列表加载失败')
     if (reset) {
       customers.value = []
       total.value = 0
@@ -117,8 +130,10 @@ async function loadCustomers(reset = true) {
     uni.showToast({ title: getErrorMessage(error, '客户列表加载失败'), icon: 'none' })
   }
   finally {
-    loading.value = false
-    loadingMore.value = false
+    if (currentRequest === requestVersion) {
+      loading.value = false
+      loadingMore.value = false
+    }
   }
 }
 
@@ -127,6 +142,8 @@ function handleSearchChange() {
 }
 
 function handleDetail(item: AppCustomer) {
+  if (!canUseCustomerDetail.value)
+    return
   if (item.customerType !== 'enterprise') {
     uni.showToast({ title: '暂不支持查看终端客户', icon: 'none' })
     return
@@ -138,6 +155,8 @@ function handleDetail(item: AppCustomer) {
 
 async function bootstrap() {
   await userStore.fetchUserInfo().catch(() => undefined)
+  if (disposed)
+    return
   if (!canUseCustomerList.value) {
     noPermission.value = true
     uni.showToast({ title: '当前账号不能查看客户管理', icon: 'none' })
@@ -146,184 +165,108 @@ async function bootstrap() {
   await loadCustomers(true)
 }
 
+onUnmounted(() => {
+  disposed = true
+  requestVersion++
+})
+
 onMounted(() => {
   void bootstrap()
 })
 </script>
 
 <template>
-    <view class="min-h-screen p-14rpx pb-24rpx">
-      <view class="mx-auto max-w-920rpx flex flex-col gap-14rpx">
-        <wd-card custom-class="!mx-0 !mb-0">
-          <view class="flex items-center justify-between gap-20rpx">
-            <view class="min-w-0">
-              <view class="customer-kicker">{{ workspaceLabel }}工作台</view>
-              <view class="customer-title">客户管理</view>
-              <view class="customer-subtitle">
-                {{ noPermission ? '当前账号暂无客户管理权限' : summaryText }}
-              </view>
+  <view class="min-h-screen p-14rpx pb-24rpx">
+    <view class="mx-auto max-w-920rpx flex flex-col gap-14rpx">
+      <wd-card custom-class="!mx-0 !mb-0">
+        <view class="flex items-center justify-between gap-20rpx">
+          <view class="min-w-0">
+            <view class="block text-20rpx text-#2563eb font-700">
+              {{ workspaceLabel }}工作台
             </view>
-            <wd-button
-              size="small"
-              type="primary"
-              plain
-              :loading="loading"
-              :disabled="noPermission"
-              @click="loadCustomers(true)"
-            >
-              刷新
-            </wd-button>
+            <view class="mt-4rpx text-34rpx text-#111827 font-900">
+              客户管理
+            </view>
+            <view class="mt-6rpx block text-23rpx text-#64748b">
+              {{ noPermission ? '当前账号暂无客户管理权限' : summaryText }}
+            </view>
+          </view>
+          <wd-button
+            size="small"
+            type="primary"
+            variant="text"
+            icon="refresh"
+            custom-class="!h-64rpx !px-16rpx !text-24rpx !font-500"
+            :loading="loading"
+            :disabled="noPermission"
+            @click="loadCustomers(true)"
+          >
+            刷新
+          </wd-button>
+        </view>
+      </wd-card>
+
+      <template v-if="!noPermission">
+        <wd-card custom-class="!mx-0 !mb-0" custom-content-class="!p-0">
+          <view class="grid gap-20rpx p-24rpx">
+            <wd-search
+              v-model="keyword"
+              hide-cancel
+              placeholder-left
+              variant="filled"
+              placeholder="搜索企业名称 / 手机号"
+              custom-class="!p-0"
+              @search="handleSearchChange"
+              @clear="handleSearchChange"
+            />
           </view>
         </wd-card>
 
-        <template v-if="!noPermission">
-          <wd-card custom-class="!mx-0 !mb-0" custom-content-class="!p-0">
-            <view class="grid gap-20rpx p-24rpx">
-              <wd-search
-                v-model="keyword"
-                hide-cancel
-                placeholder-left
-                variant="filled"
-                placeholder="搜索企业名称 / 编码 / 手机号"
-                custom-class="!p-0"
-                @search="handleSearchChange"
-                @clear="handleSearchChange"
-              />
-              <view class="rounded-8rpx bg-#f8fafc px-18rpx py-14rpx text-24rpx text-#64748b">
-                当前展示本企业直属下级企业客户，终端客户暂不展示。
-              </view>
-            </view>
-          </wd-card>
-
-          <view class="customer-metrics">
-            <view class="customer-metric">
-              <text class="customer-metric__value">{{ total }}</text>
-              <text class="customer-metric__label">客户总数</text>
-            </view>
-            <view class="customer-metric customer-metric--blue">
-              <text class="customer-metric__value">{{ activeCustomerCount }}</text>
-              <text class="customer-metric__label">正常客户</text>
-            </view>
-            <view class="customer-metric customer-metric--amber">
-              <text class="customer-metric__value">{{ pendingRealNameCount }}</text>
-              <text class="customer-metric__label">待实名</text>
-            </view>
-          </view>
-
-          <wd-card custom-class="!mx-0 !mb-0" custom-content-class="!p-0">
-            <wd-cell-group v-if="customers.length" :border="false">
-              <wd-cell
-                v-for="item in customers"
-                :key="`${item.customerType}-${item.customerId}`"
-                :title="item.customerName"
-                :label="customerLabel(item)"
-                is-link
-                clickable
-                center
-                custom-class="!min-h-164rpx"
-                custom-title-class="!text-28rpx !text-#111827 !font-800"
-                custom-label-class="!text-24rpx !text-#64748b"
-                @click="handleDetail(item)"
-              >
-                <view class="flex flex-col items-end gap-8rpx">
-                  <view class="text-28rpx text-#111827 font-900">
-                    {{ item.cardCount || 0 }} 张卡
-                  </view>
-                  <view class="flex items-center gap-8rpx">
-                    <wd-tag :type="statusTagType(item)" variant="plain">
-                      {{ item.statusText || '未设置' }}
-                    </wd-tag>
-                    <wd-tag :type="realNameTagType(item)" variant="plain">
-                      {{ item.realNameStatus }}
-                    </wd-tag>
-                  </view>
+        <wd-card custom-class="!mx-0 !mb-0" custom-content-class="!p-0">
+          <wd-cell-group v-if="customers.length" :border="false">
+            <wd-cell
+              v-for="item in customers"
+              :key="`${item.customerType}-${item.customerId}`"
+              :title="item.customerName"
+              title-width="42%"
+              :label="item.customerTypeName || '企业客户'"
+              :is-link="canUseCustomerDetail"
+              :clickable="canUseCustomerDetail"
+              center
+              custom-class="!min-h-164rpx"
+              custom-title-class="!text-28rpx !text-#111827 !font-800"
+              custom-label-class="!text-24rpx !text-#64748b"
+              @click="handleDetail(item)"
+            >
+              <view class="flex flex-col items-end gap-8rpx">
+                <view class="text-28rpx text-#111827 font-900">
+                  {{ item.cardCount || 0 }} 张卡
                 </view>
-              </wd-cell>
-            </wd-cell-group>
+                <view class="flex flex-wrap items-center justify-end gap-8rpx">
+                  <wd-tag :type="realNameTagType(item)" variant="light" round custom-class="!shrink-0 !whitespace-nowrap">
+                    {{ item.realNameStatus }}
+                  </wd-tag>
+                </view>
+              </view>
+            </wd-cell>
+          </wd-cell-group>
 
-            <view v-else class="p-48rpx">
-              <wd-empty :tip="loading ? '客户加载中' : '暂无客户'" />
-            </view>
-          </wd-card>
+          <view v-else class="p-48rpx">
+            <wd-empty :tip="loading ? '客户加载中' : (errorMessage || '暂无符合条件的客户')" />
+          </view>
+        </wd-card>
 
-          <wd-button
-            v-if="hasMore"
+        <wd-button
+          v-if="hasMore"
 
-            plain block
-            type="primary"
-            :loading="loadingMore"
-            @click="loadCustomers(false)"
-          >
-            加载更多
-          </wd-button>
-        </template>
-      </view>
+          variant="text" block
+          type="primary"
+          :loading="loadingMore"
+          @click="loadCustomers(false)"
+        >
+          加载更多
+        </wd-button>
+      </template>
     </view>
+  </view>
 </template>
-
-<style lang="scss" scoped>
-.customer-kicker,
-.customer-subtitle {
-  display: block;
-}
-
-.customer-kicker {
-  color: #2563eb;
-  font-size: 20rpx;
-  font-weight: 700;
-}
-
-.customer-title {
-  margin-top: 4rpx;
-  color: #111827;
-  font-size: 34rpx;
-  font-weight: 900;
-}
-
-.customer-subtitle {
-  margin-top: 6rpx;
-  color: #64748b;
-  font-size: 23rpx;
-}
-
-.customer-metrics {
-  display: grid;
-  grid-template-columns: repeat(3, minmax(0, 1fr));
-  gap: 12rpx;
-}
-
-.customer-metric {
-  box-sizing: border-box;
-  padding: 16rpx;
-  border: 1px solid #e2e8f0;
-  border-radius: 10rpx;
-  background: #fff;
-}
-
-.customer-metric--blue {
-  border-color: #bfdbfe;
-  background: #eff6ff;
-}
-
-.customer-metric--amber {
-  border-color: #fde68a;
-  background: #fffbeb;
-}
-
-.customer-metric__value,
-.customer-metric__label {
-  display: block;
-}
-
-.customer-metric__value {
-  color: #111827;
-  font-size: 30rpx;
-  font-weight: 900;
-}
-
-.customer-metric__label {
-  margin-top: 4rpx;
-  color: #64748b;
-  font-size: 20rpx;
-}
-</style>
diff --git a/app/src/pages/business/views/customerDetail/data.test.ts b/app/src/pages/business/views/customerDetail/data.test.ts
new file mode 100644
index 0000000..3942a83
--- /dev/null
+++ b/app/src/pages/business/views/customerDetail/data.test.ts
@@ -0,0 +1,41 @@
+import { describe, expect, it } from 'vitest'
+import { readFileSync } from 'node:fs'
+import { getCustomerCardStatusItems } from './data'
+
+describe('客户全部卡片状态', () => {
+  it('客户详情不展示编号、套餐或正常使用数量', () => {
+    const source = readFileSync(new URL('./index.vue', import.meta.url), 'utf8')
+    expect(source).not.toContain('客户编码')
+    expect(source).not.toContain('customerCode')
+    expect(source).not.toContain('profile.deptKey')
+    expect(source).not.toContain('normalCardCount')
+    expect(source).not.toContain('套餐')
+    expect(source).not.toContain('packageStatus')
+    expect(source).not.toContain('正常使用')
+  })
+
+  it('全部八张已激活卡均展示，不按套餐过滤', () => {
+    const items = getCustomerCardStatusItems([{ status: 2, count: 8 }])
+    expect(items.find(item => item.status === 2)?.count).toBe(8)
+    expect(items.find(item => item.status === 4)?.count).toBe(0)
+    expect(items.reduce((total, item) => total + item.count, 0)).toBe(8)
+  })
+
+  it('展示全部标准状态，不把非正常卡遗漏', () => {
+    const items = getCustomerCardStatusItems([{ status: 2, count: 3 }, { status: 4, count: 5 }, { status: 9, count: 2 }])
+    expect(items.map(item => item.label)).toEqual(['未知', '待激活', '已激活', '停机', '可测试', '库存', '预销户', '已销户'])
+    expect(items.reduce((total, item) => total + item.count, 0)).toBe(10)
+    expect(items.find(item => item.status === 4)?.count).toBe(5)
+  })
+
+  it('保留非标准状态，合并同状态数据', () => {
+    const items = getCustomerCardStatusItems([{ status: 88, count: 2 }, { status: 88, count: 3 }])
+    expect(items.find(item => item.status === 88)).toEqual({ status: 88, label: '未知状态 88', count: 5 })
+  })
+
+  it('区分未返回统计和零持卡', () => {
+    expect(getCustomerCardStatusItems()).toEqual([])
+    expect(getCustomerCardStatusItems([])).toHaveLength(8)
+    expect(getCustomerCardStatusItems([]).every(item => item.count === 0)).toBe(true)
+  })
+})
diff --git a/app/src/pages/business/views/customerDetail/data.ts b/app/src/pages/business/views/customerDetail/data.ts
new file mode 100644
index 0000000..0703d72
--- /dev/null
+++ b/app/src/pages/business/views/customerDetail/data.ts
@@ -0,0 +1,16 @@
+import type { AppCustomer } from '@/api/types/customer'
+import { bossCardStatusTextMap } from '@/pages/card/data'
+
+export function getCustomerCardStatusItems(counts?: AppCustomer['cardStatusCounts']) {
+  if (!counts)
+    return []
+  const totals = new Map<number, number>()
+  for (const item of counts)
+    totals.set(item.status, (totals.get(item.status) || 0) + item.count)
+  const statuses = new Set([...Object.keys(bossCardStatusTextMap).map(Number), ...totals.keys()])
+  return [...statuses].sort((first, second) => first - second).map(status => ({
+    status,
+    label: bossCardStatusTextMap[status] || `未知状态 ${status}`,
+    count: totals.get(status) || 0,
+  }))
+}
diff --git a/app/src/pages/business/views/customerDetail/index.vue b/app/src/pages/business/views/customerDetail/index.vue
index 522a9a0..bf3324e 100644
--- a/app/src/pages/business/views/customerDetail/index.vue
+++ b/app/src/pages/business/views/customerDetail/index.vue
@@ -3,6 +3,7 @@ import type { AppCustomerDetail } from '../api/customer'
 import { getCustomerDetail } from '../api/customer'
 import { useUserStore } from '@/store/user'
 import { hasAnyFeature } from '@/utils/permission'
+import { getCustomerCardStatusItems } from './data'
 
 definePage({
   style: {
@@ -17,7 +18,10 @@ const queryType = ref('')
 const queryId = ref(0)
 const noPermission = ref(false)
 const userStore = useUserStore()
+let requestVersion = 0
+let disposed = false
 
+const cardStatusItems = computed(() => getCustomerCardStatusItems(customer.value?.cardStatusCounts || (customer.value?.cardCount === 0 ? [] : undefined)))
 const titleText = computed(() => customer.value?.customerName || '客户详情')
 const canUseCustomerDetail = computed(() => hasAnyFeature(userStore.userInfo, 'customer:detail'))
 
@@ -27,13 +31,10 @@ const baseRows = computed(() => {
     return []
   return [
     ['客户类型', item.customerTypeName || '-'],
-    ['客户编码', item.customerCode || (item.terminalId ? `ID ${item.terminalId}` : `ID ${item.customerId}`)],
     ['联系电话', item.phone || '-'],
     ['邮箱', item.email || '-'],
-    ['客户状态', item.statusText || '-'],
-    ['实名状态', item.realNameStatus || '-'],
-    ['卡片数量', `${item.cardCount || 0} 张`],
-    ['正常卡数', `${item.normalCardCount || 0} 张`],
+    ['实名资料状态', item.realNameStatus || '-'],
+    ['直接持卡数量', `${item.cardCount || 0} 张`],
     ['地址', item.address || '-'],
   ]
 })
@@ -44,9 +45,7 @@ const enterpriseRows = computed(() => {
     return []
   return [
     ['企业名称', profile.deptName || '-'],
-    ['客户编码', profile.deptKey || '-'],
     ['联系电话', profile.phone || '-'],
-    ['企业状态', profile.statusText || '-'],
     ['统一信用代码', profile.creditCode || '-'],
     ['单位全称', profile.fullName || '-'],
     ['行业', profile.industry || '-'],
@@ -57,14 +56,6 @@ const enterpriseRows = computed(() => {
   ]
 })
 
-function statusTagType(item?: AppCustomerDetail) {
-  if (item?.status === '0')
-    return 'success'
-  if (item?.status === '1')
-    return 'warning'
-  return 'primary'
-}
-
 function normalizeQueryValue(value: string | string[] | undefined) {
   return Array.isArray(value) ? value[0] : String(value || '')
 }
@@ -95,12 +86,14 @@ function getErrorMessage(error: unknown, fallback: string) {
 }
 
 async function loadCustomerDetail() {
+  if (disposed || loading.value)
+    return
   if (!canUseCustomerDetail.value) {
     noPermission.value = true
     errorMessage.value = '当前账号不能查看客户详情'
     return
   }
-  if (!queryType.value || !queryId.value) {
+  if (!queryType.value || !Number.isSafeInteger(queryId.value) || queryId.value <= 0) {
     errorMessage.value = '客户参数不完整'
     return
   }
@@ -108,6 +101,8 @@ async function loadCustomerDetail() {
     errorMessage.value = '暂不支持查看终端客户'
     return
   }
+  noPermission.value = false
+  const currentRequest = ++requestVersion
   loading.value = true
   errorMessage.value = ''
   try {
@@ -115,14 +110,19 @@ async function loadCustomerDetail() {
       customerType: queryType.value,
       customerId: queryId.value,
     })
+    if (currentRequest !== requestVersion)
+      return
     customer.value = res.customer
   }
   catch (error) {
+    if (currentRequest !== requestVersion)
+      return
     customer.value = undefined
     errorMessage.value = getErrorMessage(error, '客户详情加载失败')
   }
   finally {
-    loading.value = false
+    if (currentRequest === requestVersion)
+      loading.value = false
   }
 }
 
@@ -133,6 +133,8 @@ onLoad((query) => {
 
 async function bootstrap() {
   await userStore.fetchUserInfo().catch(() => undefined)
+  if (disposed)
+    return
   if (!canUseCustomerDetail.value) {
     noPermission.value = true
     uni.showToast({ title: '当前账号不能查看客户详情', icon: 'none' })
@@ -141,111 +143,117 @@ async function bootstrap() {
   await loadCustomerDetail()
 }
 
+onUnmounted(() => {
+  disposed = true
+  requestVersion++
+})
+
 onMounted(() => {
   void bootstrap()
 })
 </script>
 
 <template>
-    <view class="min-h-screen p-14rpx pb-24rpx">
-      <view class="mx-auto max-w-920rpx flex flex-col gap-14rpx">
+  <view class="min-h-screen p-14rpx pb-24rpx">
+    <view class="mx-auto max-w-920rpx flex flex-col gap-14rpx">
+      <wd-card custom-class="!mx-0 !mb-0">
+        <view class="flex items-center justify-between gap-20rpx">
+          <view class="min-w-0">
+            <view class="truncate text-34rpx text-#111827 font-900">
+              {{ titleText }}
+            </view>
+            <view class="mt-8rpx text-24rpx text-#64748b">
+              {{ customer?.customerTypeName || '客户资料' }}
+            </view>
+          </view>
+        </view>
+      </wd-card>
+
+      <wd-card v-if="noPermission" custom-class="!mx-0 !mb-0">
+        <view class="text-26rpx text-#64748b leading-38rpx">
+          当前账号不能查看客户详情。
+        </view>
+      </wd-card>
+
+      <wd-card v-else-if="loading" custom-class="!mx-0 !mb-0">
+        <wd-skeleton theme="paragraph" />
+      </wd-card>
+
+      <wd-card v-else-if="errorMessage" custom-class="!mx-0 !mb-0">
+        <view class="grid gap-16rpx">
+          <view class="text-26rpx text-#b91c1c leading-38rpx">
+            {{ errorMessage }}
+          </view>
+          <wd-button size="small" type="primary" @click="loadCustomerDetail">
+            重试
+          </wd-button>
+        </view>
+      </wd-card>
+
+      <template v-else-if="customer">
         <wd-card custom-class="!mx-0 !mb-0">
-          <view class="flex items-center justify-between gap-20rpx">
-            <view class="min-w-0">
-              <view class="truncate text-34rpx text-#111827 font-900">
-                {{ titleText }}
-              </view>
-              <view class="mt-8rpx text-24rpx text-#64748b">
-                {{ customer?.customerTypeName || '客户资料' }}
+          <view class="flex items-center justify-between rounded-12rpx bg-#f8fafc px-24rpx py-20rpx">
+            <view class="flex items-baseline gap-8rpx">
+              <text class="text-38rpx text-#0f172a font-800">{{ customer.cardCount || 0 }}</text>
+              <text class="text-23rpx text-#64748b">张卡</text>
+            </view>
+            <text class="text-24rpx text-#64748b">持卡总数</text>
+          </view>
+          <view class="mt-24rpx border-x-0 border-b-0 border-t-1 border-#e2e8f0 border-solid pt-24rpx">
+            <view class="mb-18rpx flex items-center gap-12rpx">
+              <view class="h-26rpx w-6rpx rounded-full bg-#2563eb" />
+              <text class="text-26rpx text-#0f172a font-800">运营商卡状态</text>
+            </view>
+            <view v-if="cardStatusItems.length" class="grid grid-cols-3 gap-12rpx">
+              <view v-for="item in cardStatusItems" :key="item.status" class="rounded-12rpx bg-#f8fafc px-12rpx py-18rpx text-center">
+                <text class="block text-28rpx text-#0f172a font-800">{{ item.count }}</text>
+                <text class="mt-6rpx block text-22rpx text-#64748b">{{ item.label }}</text>
               </view>
             </view>
-            <wd-tag :type="statusTagType(customer)" variant="plain">
-              {{ customer?.statusText || '加载中' }}
-            </wd-tag>
+            <text v-else class="text-24rpx text-#64748b">暂无状态统计，请刷新后重试</text>
+            <text class="mt-16rpx block text-21rpx text-#94a3b8 leading-32rpx">仅统计该客户直接持有的卡片，不含下级客户。</text>
           </view>
         </wd-card>
 
-        <wd-card v-if="noPermission" custom-class="!mx-0 !mb-0">
-          <view class="text-26rpx text-#64748b leading-38rpx">
-            当前账号不能查看客户详情。
-          </view>
-        </wd-card>
-
-        <wd-card v-else-if="loading" custom-class="!mx-0 !mb-0">
-          <wd-skeleton theme="paragraph" />
-        </wd-card>
-
-        <wd-card v-else-if="errorMessage" custom-class="!mx-0 !mb-0">
-          <view class="grid gap-16rpx">
-            <view class="text-26rpx text-#b91c1c leading-38rpx">
-              {{ errorMessage }}
+        <wd-card custom-class="!mx-0 !mb-0" custom-title-class="!p-0" custom-content-class="!p-0">
+          <template #title>
+            <view class="h-80rpx flex items-center px-24rpx">
+              <text class="text-28rpx text-#111827 font-900">基础信息</text>
             </view>
-            <wd-button size="small" type="primary" @click="loadCustomerDetail">
-              重试
-            </wd-button>
-          </view>
+          </template>
+          <wd-cell-group :border="false">
+            <wd-cell
+              v-for="row in baseRows"
+              :key="row[0]"
+              :title="row[0]"
+              :value="row[1]"
+              center
+            />
+          </wd-cell-group>
         </wd-card>
 
-        <template v-else-if="customer">
-          <wd-card custom-class="!mx-0 !mb-0">
-            <view class="grid grid-cols-2 gap-12rpx text-center">
-              <view class="rounded-8rpx bg-#f8fafc px-12rpx py-18rpx">
-                <view class="text-30rpx text-#111827 font-900">
-                  {{ customer.cardCount || 0 }}
-                </view>
-                <view class="mt-6rpx text-22rpx text-#64748b">
-                  卡片
-                </view>
-              </view>
-              <view class="rounded-8rpx bg-#f8fafc px-12rpx py-18rpx">
-                <view class="text-30rpx text-#2563eb font-900">
-                  {{ customer.normalCardCount || 0 }}
-                </view>
-                <view class="mt-6rpx text-22rpx text-#64748b">
-                  正常
-                </view>
-              </view>
+        <wd-card
+          v-if="enterpriseRows.length"
+          custom-class="!mx-0 !mb-0"
+          custom-title-class="!p-0"
+          custom-content-class="!p-0"
+        >
+          <template #title>
+            <view class="h-80rpx flex items-center px-24rpx">
+              <text class="text-28rpx text-#111827 font-900">企业实名资料</text>
             </view>
-          </wd-card>
-
-          <wd-card custom-class="!mx-0 !mb-0" custom-content-class="!p-0">
-            <template #title>
-              <view class="h-80rpx flex items-center px-24rpx">
-                <text class="text-28rpx text-#111827 font-900">基础信息</text>
-              </view>
-            </template>
-            <wd-cell-group :border="false">
-              <wd-cell
-                v-for="row in baseRows"
-                :key="row[0]"
-                :title="row[0]"
-                :value="row[1]"
-                center
-              />
-            </wd-cell-group>
-          </wd-card>
-
-          <wd-card
-            v-if="enterpriseRows.length"
-            custom-class="!mx-0 !mb-0"
-            custom-content-class="!p-0"
-          >
-            <template #title>
-              <view class="h-80rpx flex items-center px-24rpx">
-                <text class="text-28rpx text-#111827 font-900">企业实名资料</text>
-              </view>
-            </template>
-            <wd-cell-group :border="false">
-              <wd-cell
-                v-for="row in enterpriseRows"
-                :key="row[0]"
-                :title="row[0]"
-                :value="row[1]"
-                center
-              />
-            </wd-cell-group>
-          </wd-card>
-        </template>
-      </view>
+          </template>
+          <wd-cell-group :border="false">
+            <wd-cell
+              v-for="row in enterpriseRows"
+              :key="row[0]"
+              :title="row[0]"
+              :value="row[1]"
+              center
+            />
+          </wd-cell-group>
+        </wd-card>
+      </template>
     </view>
+  </view>
 </template>
diff --git a/app/src/pages/business/views/diagnosis/DiagnosisFlowChart.test.ts b/app/src/pages/business/views/diagnosis/DiagnosisFlowChart.test.ts
new file mode 100644
index 0000000..23b54c0
--- /dev/null
+++ b/app/src/pages/business/views/diagnosis/DiagnosisFlowChart.test.ts
@@ -0,0 +1,52 @@
+import { readFileSync } from 'node:fs'
+import { createContext, runInContext } from 'node:vm'
+import { transpileModule } from 'typescript'
+import { describe, expect, it, vi } from 'vitest'
+
+async function drawPoints(points: Array<{ x: number, y: number, available: boolean }>) {
+  const methods = ['clearRect', 'setStrokeStyle', 'setLineWidth', 'beginPath', 'moveTo', 'lineTo', 'stroke', 'setLineCap', 'setLineJoin', 'setFillStyle', 'arc', 'fill', 'draw']
+  const canvas = Object.fromEntries(methods.map(method => [method, vi.fn()]))
+  const query = {
+    in: () => query,
+    select: () => query,
+    boundingClientRect: (callback: (rect: { width: number, height: number }) => void) => {
+      callback({ width: 600, height: 190 })
+      return query
+    },
+    exec: vi.fn(),
+  }
+  const context = createContext({
+    defineProps: () => ({ points }),
+    getCurrentInstance: () => ({ proxy: {} }),
+    nextTick: async () => undefined,
+    onMounted: vi.fn(),
+    onUnmounted: vi.fn(),
+    watch: vi.fn(),
+    uni: { createSelectorQuery: () => query, createCanvasContext: () => canvas },
+  })
+  const source = readFileSync(new URL('./DiagnosisFlowChart.vue', import.meta.url), 'utf8')
+  const script = source.split('<script setup lang="ts">')[1]?.split('</script>')[0]
+  if (!script)
+    throw new Error('missing chart script')
+  runInContext(transpileModule(script, {}).outputText, context)
+  await runInContext('draw()', context)
+  return canvas
+}
+
+describe('小程序流量图绘制', () => {
+  it('只有一个采集点也绘制圆点并提交画布', async () => {
+    const ctx = await drawPoints([{ x: 300, y: 80, available: true }])
+    expect(ctx.arc).toHaveBeenCalledWith(300, 80, 3, 0, Math.PI * 2)
+    expect(ctx.draw).toHaveBeenCalledOnce()
+  })
+  it('未采集周期不画点且断开折线', async () => {
+    const ctx = await drawPoints([
+      { x: 20, y: 80, available: true },
+      { x: 300, y: 156, available: false },
+      { x: 580, y: 40, available: true },
+    ])
+    expect(ctx.arc).toHaveBeenCalledTimes(2)
+    expect(ctx.moveTo).toHaveBeenCalledWith(580, 40)
+    expect(ctx.lineTo).not.toHaveBeenCalledWith(580, 40)
+  })
+})
diff --git a/app/src/pages/business/views/diagnosis/DiagnosisFlowChart.vue b/app/src/pages/business/views/diagnosis/DiagnosisFlowChart.vue
new file mode 100644
index 0000000..77b604e
--- /dev/null
+++ b/app/src/pages/business/views/diagnosis/DiagnosisFlowChart.vue
@@ -0,0 +1,70 @@
+<script setup lang="ts">
+interface FlowPoint {
+  x: number
+  y: number
+  available: boolean
+}
+
+const props = defineProps<{ points: FlowPoint[] }>()
+const instance = getCurrentInstance()
+const canvasId = 'diagnosis-flow-chart'
+let revision = 0
+
+async function draw() {
+  const current = ++revision
+  await nextTick()
+  if (!instance?.proxy)
+    return
+  const proxy = instance.proxy
+  uni.createSelectorQuery().in(proxy).select('.diagnosis-flow-canvas').boundingClientRect((rect) => {
+    if (current !== revision || !rect || Array.isArray(rect) || !rect.width || !rect.height)
+      return
+    const ctx = uni.createCanvasContext(canvasId, proxy)
+    const scaleX = rect.width / 600
+    const scaleY = rect.height / 190
+    ctx.clearRect(0, 0, rect.width, rect.height)
+    ctx.setStrokeStyle('#e2eaf4')
+    ctx.setLineWidth(1)
+    for (const y of [18, 87, 178]) {
+      ctx.beginPath()
+      ctx.moveTo(20 * scaleX, y * scaleY)
+      ctx.lineTo(580 * scaleX, y * scaleY)
+      ctx.stroke()
+    }
+    ctx.setStrokeStyle('#2563eb')
+    ctx.setLineWidth(2)
+    ctx.setLineCap('round')
+    ctx.setLineJoin('round')
+    ctx.beginPath()
+    let connected = false
+    for (const point of props.points) {
+      if (!point.available) {
+        connected = false
+        continue
+      }
+      if (connected)
+        ctx.lineTo(point.x * scaleX, point.y * scaleY)
+      else
+        ctx.moveTo(point.x * scaleX, point.y * scaleY)
+      connected = true
+    }
+    ctx.stroke()
+    ctx.setFillStyle('#ffffff')
+    for (const point of props.points.filter(point => point.available)) {
+      ctx.beginPath()
+      ctx.arc(point.x * scaleX, point.y * scaleY, 3, 0, Math.PI * 2)
+      ctx.fill()
+      ctx.stroke()
+    }
+    ctx.draw()
+  }).exec()
+}
+
+onMounted(draw)
+watch(() => props.points, draw, { deep: true, flush: 'post' })
+onUnmounted(() => { revision++ })
+</script>
+
+<template>
+  <canvas :canvas-id="canvasId" :id="canvasId" class="diagnosis-flow-canvas block h-190rpx w-full" />
+</template>
diff --git a/app/src/pages/business/views/diagnosis/display.test.ts b/app/src/pages/business/views/diagnosis/display.test.ts
new file mode 100644
index 0000000..c3ab73e
--- /dev/null
+++ b/app/src/pages/business/views/diagnosis/display.test.ts
@@ -0,0 +1,113 @@
+import { describe, expect, it } from 'vitest'
+import {
+  diagnosisDataServiceDisplay,
+  diagnosisFlowRetryHint,
+  diagnosisOnlineStatusDisplay,
+  diagnosisSessionStatusDisplay,
+  isDiagnosisNoDataText,
+  isDiagnosisUnsupportedModule,
+  pickDiagnosisFlowValue,
+  pickDiagnosisRemainingFlowValue,
+  resolveDiagnosisOnlineStatus,
+  shouldHideDiagnosisModule,
+  shouldHideDiagnosisText,
+} from './display'
+
+describe('在线状态展示', () => {
+  it('未知、缺失或非法状态统一显示横线', () => {
+    for (const status of ['2', 'UNKNOWN', '', 'unexpected', 'constructor', 'toString', '__proto__']) {
+      expect(diagnosisOnlineStatusDisplay(status)).toBe('-')
+    }
+    for (const status of ['-2', '02', '2', 'UNKNOWN', '', 'unexpected', 'constructor', 'toString', '__proto__']) {
+      expect(diagnosisSessionStatusDisplay(status)).toBe('-')
+    }
+    expect(diagnosisOnlineStatusDisplay()).toBe('-')
+    expect(diagnosisSessionStatusDisplay()).toBe('-')
+  })
+  it('保留明确的在线、离线和不支持状态', () => {
+    expect(diagnosisOnlineStatusDisplay('1')).toBe('在线')
+    expect(diagnosisOnlineStatusDisplay('0')).toBe('离线')
+    expect(diagnosisSessionStatusDisplay('0')).toBe('在线')
+    expect(diagnosisSessionStatusDisplay('-1')).toBe('离线')
+    expect(diagnosisSessionStatusDisplay('UNSUPPORTED')).toBe('不支持')
+  })
+})
+
+describe('实时会话状态优先', () => {
+  it('明确会话状态覆盖汇总状态，异常状态不回退旧在线值', () => {
+    expect(resolveDiagnosisOnlineStatus('0', '0')).toBe('1')
+    expect(resolveDiagnosisOnlineStatus('1', '-1')).toBe('0')
+    for (const status of ['-2', '02', '2', 'UNKNOWN', 'unexpected', 'UNSUPPORTED']) {
+      expect(resolveDiagnosisOnlineStatus('1', status)).toBe('2')
+    }
+    expect(resolveDiagnosisOnlineStatus('1', undefined)).toBe('1')
+  })
+})
+
+describe('数据服务来源隔离', () => {
+  it('电信展示断网状态，不使用 APN 开关值代替', () => {
+    expect(diagnosisDataServiceDisplay({ dataServiceSource: 'network_block', netBlockStatus: '1', dataStatus: '1' })).toBe('已断网')
+    expect(diagnosisDataServiceDisplay({ dataServiceSource: 'network_block', netBlockStatus: '0', dataStatus: '0' })).toBe('未断网')
+  })
+  it('电信缺少断网状态时显示横线，不回退 APN 开关', () => {
+    expect(diagnosisDataServiceDisplay({ dataServiceSource: 'network_block', dataStatus: '1' })).toBe('-')
+    expect(diagnosisDataServiceDisplay({ dataServiceSource: 'network_block', netBlockStatus: '2' })).toBe('-')
+  })
+  it('移动仍使用 APN 开停状态', () => {
+    expect(diagnosisDataServiceDisplay({ dataServiceSource: 'apn', dataStatus: '1' })).toBe('开启')
+    expect(diagnosisDataServiceDisplay({ dataServiceSource: 'apn', dataStatus: '0' })).toBe('关闭')
+    expect(diagnosisDataServiceDisplay({})).toBe('-')
+  })
+})
+
+describe('diagnosis display rules', () => {
+  it('hides unsubscribed and unsupported modules', () => {
+    expect(shouldHideDiagnosisModule({ status: 'skipped', reason: 'not_subscribed' })).toBe(true)
+    expect(shouldHideDiagnosisModule({ status: 'skipped', message: '该卡未订购机卡绑定服务' })).toBe(true)
+  })
+
+  it('keeps no-data and query-error modules visible', () => {
+    expect(shouldHideDiagnosisModule({ status: 'skipped', reason: 'no_data' })).toBe(false)
+    expect(shouldHideDiagnosisModule({ status: 'error', reason: 'query_error' })).toBe(false)
+    expect(shouldHideDiagnosisModule({ status: 'skipped', message: '查询暂时未完成，请稍后重试' })).toBe(false)
+  })
+
+  it('shows unsupported modules as unsupported', () => {
+    expect(isDiagnosisUnsupportedModule({ status: 'skipped', reason: 'unsupported' })).toBe(true)
+    expect(isDiagnosisUnsupportedModule({ status: 'skipped', message: '运营商暂不支持' })).toBe(true)
+    expect(isDiagnosisUnsupportedModule({ status: 'skipped' })).toBe(true)
+    expect(shouldHideDiagnosisModule({ status: 'skipped', reason: 'unsupported' })).toBe(false)
+  })
+
+  it('normalizes empty data to a dash without hiding it', () => {
+    expect(isDiagnosisNoDataText('')).toBe(true)
+    expect(isDiagnosisNoDataText('暂无数据')).toBe(true)
+    expect(shouldHideDiagnosisText('暂无数据')).toBe(false)
+    expect(shouldHideDiagnosisText('运营商暂不支持')).toBe(false)
+  })
+
+  it('does not treat a failed flow query default zero as real usage', () => {
+    expect(pickDiagnosisFlowValue(
+      { status: 'error', reason: 'query_error' },
+      [null, undefined],
+      [0],
+    )).toBeNull()
+  })
+
+  it('keeps successful decimal flow usage and real zero values', () => {
+    expect(pickDiagnosisFlowValue({ status: 'success' }, [0.03], [0])).toBe(0.03)
+    expect(pickDiagnosisFlowValue({ status: 'cached' }, [null], [0])).toBe(0)
+  })
+
+  it('does not show default remaining flow as upstream data', () => {
+    expect(pickDiagnosisRemainingFlowValue({ status: 'error' }, [0])).toBeNull()
+    expect(pickDiagnosisRemainingFlowValue({ status: 'success' }, [null, undefined])).toBeNull()
+    expect(pickDiagnosisRemainingFlowValue({ status: 'success' }, [0])).toBe(0)
+  })
+
+  it('only shows a retry hint for reachable business failures', () => {
+    expect(diagnosisFlowRetryHint({ status: 'error', message: '服务繁忙，请重试' })).toBe('服务繁忙，请重试')
+    expect(diagnosisFlowRetryHint({ status: 'error' })).toBe('')
+    expect(diagnosisFlowRetryHint({ status: 'success', message: '服务繁忙，请重试' })).toBe('')
+  })
+})
diff --git a/app/src/pages/business/views/diagnosis/display.ts b/app/src/pages/business/views/diagnosis/display.ts
new file mode 100644
index 0000000..ca7738d
--- /dev/null
+++ b/app/src/pages/business/views/diagnosis/display.ts
@@ -0,0 +1,133 @@
+import type { DiagnosisInfoItem, DiagnosisModuleItem } from '@/api/diagnosis'
+
+export function diagnosisOnlineStatusDisplay(status?: string): string {
+  const labels: Record<string, string> = { 0: '离线', 1: '在线' }
+  const value = String(status ?? '').trim()
+  return Object.prototype.hasOwnProperty.call(labels, value) ? labels[value] : '-'
+}
+
+export function diagnosisSessionStatusDisplay(status?: string): string {
+  const labels: Record<string, string> = {
+    '0': '在线',
+    '01': '在线',
+    'ONLINE': '在线',
+    '-1': '离线',
+    '00': '离线',
+    'OFFLINE': '离线',
+    'UNSUPPORTED': '不支持',
+  }
+  const value = String(status ?? '').trim()
+  return Object.prototype.hasOwnProperty.call(labels, value) ? labels[value] : '-'
+}
+
+export function resolveDiagnosisOnlineStatus(
+  infoStatus?: string | number,
+  sessionStatus?: string | number,
+): string {
+  const status = String(sessionStatus ?? '').trim()
+  switch (status) {
+    case '0':
+    case '01':
+    case 'ONLINE':
+      return '1'
+    case '-1':
+    case '00':
+    case 'OFFLINE':
+      return '0'
+    default:
+      return status ? '2' : String(infoStatus ?? '').trim()
+  }
+}
+
+export function diagnosisDataServiceDisplay(info?: DiagnosisInfoItem): string {
+  const networkBlock = info?.dataServiceSource === 'network_block'
+  const labels: Record<string, string> = networkBlock
+    ? { 0: '未断网', 1: '已断网' }
+    : { '0': '关闭', '1': '开启', '-1': '未知' }
+  const status = networkBlock ? info?.netBlockStatus : info?.dataStatus
+  const value = String(status ?? '').trim()
+  return Object.prototype.hasOwnProperty.call(labels, value) ? labels[value] : '-'
+}
+
+const NOT_SUBSCRIBED_MESSAGE_RE = /未订购|未开通|未申请|通道未申请/
+const UNSUPPORTED_MESSAGE_RE = /不支持|暂不支持|暂不提供|暂未提供|未提供独立|无独立.*接口|当前无.*接口/
+const NO_DATA_MESSAGE_RE = /未返回|未查询到|无数据|暂无数据|暂时未完成/
+
+export function shouldHideDiagnosisModule(module?: DiagnosisModuleItem) {
+  const reason = String(module?.reason || '').trim()
+  if (reason === 'not_subscribed')
+    return true
+  if (reason === 'unsupported' || reason === 'no_data' || reason === 'query_error')
+    return false
+
+  const status = String(module?.status || '').trim()
+  const message = String(module?.message || '').trim()
+  return NOT_SUBSCRIBED_MESSAGE_RE.test(message)
+}
+
+export function isDiagnosisUnsupportedModule(module?: DiagnosisModuleItem) {
+  const reason = String(module?.reason || '').trim()
+  if (reason === 'unsupported')
+    return true
+  if (reason === 'not_subscribed' || reason === 'no_data' || reason === 'query_error')
+    return false
+  const status = String(module?.status || '').trim()
+  const message = String(module?.message || '').trim()
+  return UNSUPPORTED_MESSAGE_RE.test(message) || (status === 'skipped' && !message)
+}
+
+export function isDiagnosisNoDataText(value: unknown) {
+  const text = String(value ?? '').trim()
+  return !text
+    || text === '-'
+    || text === '<nil>'
+    || text === 'undefined'
+    || text === 'null'
+    || NO_DATA_MESSAGE_RE.test(text)
+}
+
+export function shouldHideDiagnosisText(value: unknown) {
+  return NOT_SUBSCRIBED_MESSAGE_RE.test(String(value ?? '').trim())
+}
+
+export function pickDiagnosisFlowValue(
+  module: DiagnosisModuleItem | undefined,
+  primaryValues: unknown[],
+  fallbackValues: unknown[],
+) {
+  const primary = firstFiniteNumber(primaryValues)
+  if (primary !== null)
+    return primary
+
+  const status = String(module?.status || '').trim()
+  if (module && status !== 'success' && status !== 'cached')
+    return null
+
+  return firstFiniteNumber(fallbackValues)
+}
+
+export function diagnosisFlowRetryHint(module?: DiagnosisModuleItem) {
+  if (String(module?.status || '').trim() !== 'error')
+    return ''
+  return String(module?.message || '').trim() === '服务繁忙，请重试'
+    ? '服务繁忙，请重试'
+    : ''
+}
+
+export function pickDiagnosisRemainingFlowValue(module: DiagnosisModuleItem | undefined, values: unknown[]) {
+  const status = String(module?.status || '').trim()
+  if (status !== 'success' && status !== 'cached')
+    return null
+  return firstFiniteNumber(values)
+}
+
+function firstFiniteNumber(values: unknown[]) {
+  for (const value of values) {
+    if (value === undefined || value === null || value === '')
+      continue
+    const number = Number(value)
+    if (Number.isFinite(number))
+      return number
+  }
+  return null
+}
diff --git a/app/src/pages/business/views/diagnosis/index.vue b/app/src/pages/business/views/diagnosis/index.vue
index d86f88a..e1abc76 100644
--- a/app/src/pages/business/views/diagnosis/index.vue
+++ b/app/src/pages/business/views/diagnosis/index.vue
@@ -1,6 +1,4 @@
 <script lang="ts" setup>
-import UCharts from '@qiun/ucharts'
-import { getCurrentInstance, nextTick, onBeforeUnmount } from 'vue'
 import type {
   DiagnosisFlowParams,
   DiagnosisFlowRes,
@@ -9,12 +7,29 @@ import type {
   DiagnosisModuleItem,
   DiagnosisPackageItem,
   DiagnosisSessionItem,
-} from '../api/diagnosis'
-import { getDiagnosisInfo, getOpenDiagnosisFlow, getOpenDiagnosisInfo } from '../api/diagnosis'
+} from '@/api/diagnosis'
+import { getDiagnosisFlow, getDiagnosisInfo, getOpenDiagnosisFlow, getOpenDiagnosisInfo } from '@/api/diagnosis'
 import { restartCard, startDataService, stopDataService } from '@/api/card'
 import { useTokenStore, useUserStore } from '@/store'
+import { V101_RELEASE } from '@/constant/release'
+import { copyText } from '@/utils/clipboard'
 import { hasUserPermission } from '@/utils/permission'
+import { isTopLevelEnterpriseUserInfo } from '@/utils/userIdentity'
+import DiagnosisFlowChart from './DiagnosisFlowChart.vue'
 import { showLifecycleBatchProgress } from '@/utils/lifecycleBatch'
+import {
+  diagnosisDataServiceDisplay,
+  diagnosisFlowRetryHint,
+  diagnosisOnlineStatusDisplay,
+  diagnosisSessionStatusDisplay,
+  isDiagnosisNoDataText,
+  isDiagnosisUnsupportedModule,
+  pickDiagnosisFlowValue,
+  pickDiagnosisRemainingFlowValue,
+  resolveDiagnosisOnlineStatus,
+  shouldHideDiagnosisModule,
+  shouldHideDiagnosisText,
+} from './display'
 
 definePage({
   style: {
@@ -30,11 +45,10 @@ interface DiagnosisRow {
   value: string
   type: TagType
   desc?: string
-}
-
-interface DiagnosisNotice {
-  type: TagType
-  text: string
+  plain?: boolean
+  copyable?: boolean
+  refreshable?: boolean
+  hint?: string
 }
 
 interface DiagnosisDetailRow {
@@ -47,6 +61,14 @@ interface DiagnosisDetailGroup {
   rows: DiagnosisDetailRow[]
 }
 
+interface DiagnosisFlowPoint {
+  label: string
+  value: number
+  available: boolean
+  x: number
+  y: number
+}
+
 const flowPeriodOptions: Array<{ label: string, value: DiagnosisFlowPeriod }> = [
   { label: '近1个月', value: '30d' },
   { label: '近3个月', value: '3M' },
@@ -65,15 +87,12 @@ const visibleDetailGroupCount = ref(2)
 const actionSubmitting = ref(false)
 const activeFlowPeriod = ref<DiagnosisFlowPeriod>('30d')
 const flowLoading = ref(false)
+const flowSyncing = ref(false)
 const flowErrorMessage = ref('')
 const flowData = ref<DiagnosisFlowRes | null>(null)
 const flowCache = new Map<string, DiagnosisFlowRes>()
 let flowLoadSeq = 0
 let diagnosisLoadSeq = 0
-const pageProxy = getCurrentInstance()?.proxy
-const flowChartWidth = ref(320)
-const flowChartHeight = 220
-let flowChartInstance: UCharts | null = null
 
 const cardInfo = computed<DiagnosisInfoItem>(() => diagnosis.value?.info || {})
 const sessionInfo = computed<DiagnosisSessionItem>(() => diagnosis.value?.session || {})
@@ -82,25 +101,103 @@ const cardFallback = computed<Partial<NonNullable<DiagnosisInfoRes['card']>>>(
   () => diagnosis.value?.card || {},
 )
 const modules = computed<Record<string, DiagnosisModuleItem>>(() => diagnosis.value?.modules || {})
+const usedFlowMb = computed(() => pickDiagnosisFlowValue(
+  modules.value.flowUsage,
+  [cardInfo.value.usedFlowMb, packageInfo.value.usedFlowMb],
+  [cardFallback.value.usedFlowMb],
+))
+const remainingFlowMb = computed(() => pickDiagnosisRemainingFlowValue(
+  modules.value.flowUsage,
+  [cardInfo.value.remainFlowMb, packageInfo.value.remainFlowMb],
+))
+const sessionModuleHidden = computed(() => shouldHideDiagnosisModule(modules.value.session))
+const sessionModuleUnsupported = computed(() => isDiagnosisUnsupportedModule(modules.value.session))
+const cardBindModuleHidden = computed(() => shouldHideDiagnosisModule(modules.value.cardBind))
+const stopReasonModuleHidden = computed(() => shouldHideDiagnosisModule(modules.value.stopReason))
+const frozenModuleHidden = computed(() => shouldHideDiagnosisModule(modules.value.frozen))
+const isTopLevelUser = computed(() => isTopLevelEnterpriseUserInfo(userStore.userInfo)
+  && hasUserPermission(userStore.userInfo, 'diagnosis'))
 const diagnosisCardValue = computed(() => firstRaw(cardInfo.value.iccid, cardFallback.value.iccid, queryCode.value))
-const dataServiceStatus = computed(() => firstRaw(cardInfo.value.dataStatus, cardFallback.value.dataServiceStatus))
-const canRestart = computed(() => tokenStore.hasLogin && hasUserPermission(userStore.userInfo, 'restart'))
+const dataServiceStatus = computed(() => firstRaw(cardInfo.value.dataStatus))
+const canOperateDiagnosisCard = computed(() => {
+  const item = diagnosis.value?.card
+  return !!item && item.ownerType !== 'public' && item.canBusiness !== false
+})
+const canRestart = computed(() => tokenStore.hasLogin
+  && canOperateDiagnosisCard.value
+  && hasUserPermission(userStore.userInfo, 'restart'))
 const canStartDataService = computed(() => tokenStore.hasLogin
+  && canOperateDiagnosisCard.value
+  && cardInfo.value.dataServiceSource !== 'network_block'
   && dataServiceStatus.value === '0'
   && hasUserPermission(userStore.userInfo, 'dataStart'))
 const canStopDataService = computed(() => tokenStore.hasLogin
+  && canOperateDiagnosisCard.value
+  && cardInfo.value.dataServiceSource !== 'network_block'
   && dataServiceStatus.value === '1'
   && hasUserPermission(userStore.userInfo, 'dataStop'))
-const showDiagnosisActions = computed(() => canRestart.value || canStartDataService.value || canStopDataService.value)
+const canViewDiagnosisFlow = computed(() => isTopLevelUser.value || V101_RELEASE.showDiagnosisFlowForNonAdmin)
+const showDiagnosisActions = computed(() => canRestart.value
+  || canStartDataService.value
+  || canStopDataService.value)
 const flowValues = computed(() => (flowData.value?.flow || []).map(value => Math.max(0, Number(value) || 0)))
-const flowHasData = computed(() => Boolean(flowData.value?.hasData ?? flowValues.value.some(value => value > 0)))
-const flowTotal = computed(() => flowValues.value.reduce((sum, value) => sum + value, 0))
-const flowCompleteValues = computed(() => flowValues.value.slice(0, -1))
+const flowAvailability = computed(() => flowValues.value.map((_, index) => flowData.value?.flowAvailable?.[index] !== false))
+const flowHasData = computed(() => Boolean(flowData.value?.hasData ?? flowValues.value.some((value, index) => flowAvailability.value[index] && value > 0)))
+const flowKnownValues = computed(() => flowValues.value.filter((_, index) => flowAvailability.value[index]))
+const flowTotal = computed(() => flowKnownValues.value.reduce((sum, value) => sum + value, 0))
+const flowCompleteValues = computed(() => flowValues.value.slice(0, -1).filter((_, index) => flowAvailability.value[index]))
 const flowAverage = computed(() => {
   const values = flowCompleteValues.value
-  return values.length ? averageFlow(values) : averageFlow(flowValues.value)
+  return values.length ? averageFlow(values) : averageFlow(flowKnownValues.value)
 })
-const flowPeak = computed(() => flowValues.value.length ? Math.max(...flowValues.value) : 0)
+const flowPeak = computed(() => flowKnownValues.value.length ? Math.max(...flowKnownValues.value) : 0)
+const flowMissingCount = computed(() => flowAvailability.value.filter(available => !available).length)
+const flowChartPoints = computed<DiagnosisFlowPoint[]>(() => {
+  const values = flowValues.value
+  const times = flowData.value?.times || []
+  const maxValue = Math.max(...values.filter((_, index) => flowAvailability.value[index]), 1)
+  const chartWidth = 560
+  const chartLeft = 20
+  const chartTop = 18
+  const chartHeight = 138
+  return values.map((value, index) => ({
+    label: times[index] || '-',
+    value,
+    available: flowAvailability.value[index],
+    x: values.length <= 1 ? 300 : chartLeft + (index / (values.length - 1)) * chartWidth,
+    y: chartTop + chartHeight - (value / maxValue) * chartHeight,
+  }))
+})
+
+const flowAxisLabels = computed(() => {
+  const times = flowData.value?.times || []
+  const count = Math.min(times.length, flowValues.value.length)
+  if (!count)
+    return []
+
+  const labelCount = Math.min(activeFlowPeriod.value === '30d' ? 5 : 6, count)
+  if (labelCount === 1)
+    return [formatFlowAxisTime(times[0])]
+
+  const indexes = Array.from(
+    { length: labelCount },
+    (_, index) => Math.round((index * (count - 1)) / (labelCount - 1)),
+  )
+  return Array.from(new Set(indexes)).map(index => formatFlowAxisTime(times[index]))
+})
+
+function formatFlowAxisTime(value: string) {
+  const text = String(value || '').trim()
+  const match = text.match(/^(\d{4})[-/.](\d{1,2})(?:[-/.](\d{1,2}))?/)
+  if (!match)
+    return text.length > 8 ? text.slice(0, 8) : text
+
+  const month = Number(match[2])
+  const day = match[3] ? Number(match[3]) : 0
+  if (activeFlowPeriod.value === '30d' && day)
+    return [month, day].join('/')
+  return `${String(month)}月`
+}
 
 const cardSubtitle = computed(() => {
   return firstText(cardInfo.value.msisdn, cardFallback.value.msisdn, queryCode.value)
@@ -110,39 +207,53 @@ const usageRatio = computed(() => {
   const total = firstNumber(
     cardInfo.value.packageTotalFlowMb,
     packageInfo.value.packageTotalFlowMb,
-    cardFallback.value.packageTotalFlowMb,
-  )
-  const used = firstNumber(
-    cardInfo.value.usedFlowMb,
-    packageInfo.value.usedFlowMb,
-    cardFallback.value.usedFlowMb,
   )
+  const used = usedFlowMb.value
   if (!total || total <= 0 || used === null)
     return null
   return Math.max(0, Math.min(100, (used / total) * 100))
 })
 
-const resultRows = computed<DiagnosisRow[]>(() =>
-  compactRows([
-    buildCardStatusRow(),
-    buildOnlineRow(),
-    buildFlowRow(),
-    buildBindRow(),
-    buildRegionRow(),
-    buildStopFrozenRow(),
-  ]),
-)
+const resultRows = computed<DiagnosisRow[]>(() => {
+  const rows = isTopLevelUser.value
+    ? [
+        buildCardStatusRow(),
+        buildDataServiceRow(),
+        buildOnlineRow(),
+        buildBindRow(),
+        buildImeiRow(),
+        buildRegionRow(),
+        buildStopFrozenRow(),
+        buildUsedFlowRow(true),
+      ]
+    : [
+        buildCardStatusRow(),
+        buildOnlineRow(),
+        buildUsedFlowRow(true),
+        buildBindRow(),
+        buildImeiRow(),
+        buildRegionRow(),
+      ]
+  return compactRows(rows)
+})
 
 const diagnosisDetailGroups = computed<DiagnosisDetailGroup[]>(() =>
   [
     {
       title: '卡片信息',
       rows: compactRows([
-        optionalDetailRow('ICCID', firstRaw(cardInfo.value.iccid, cardFallback.value.iccid)),
         optionalDetailRow('MSISDN', firstRaw(cardInfo.value.msisdn, cardFallback.value.msisdn)),
         optionalDetailRow('IMSI', firstRaw(cardInfo.value.imsi, cardFallback.value.imsi)),
-        statusDetailRow('卡状态', firstRaw(cardInfo.value.status, cardFallback.value.bossCardStatus), cardStatusText),
-        statusDetailRow('在线状态', diagnosisOnlineStatusValue(cardInfo.value.onlineStatus, cardFallback.value.onlineStatus), onlineStatusText),
+        statusDetailRow('卡状态', firstRaw(cardInfo.value.status), cardStatusText),
+        ...(isTopLevelUser.value
+          ? [
+              { label: '数据服务', value: diagnosisDataServiceDisplay(cardInfo.value) },
+              ...(cardInfo.value.dataServiceSource === 'network_block'
+                ? [optionalDetailRow('断网原因', firstRaw(cardInfo.value.netBlockReason))]
+                : []),
+            ]
+          : []),
+        statusDetailRow('在线状态', resolveDiagnosisOnlineStatus(cardInfo.value.onlineStatus, sessionInfo.value.status), onlineStatusText),
         statusDetailRow('设备状态', firstRaw(cardInfo.value.deviceStatus, cardFallback.value.deviceStatus), deviceStatusText),
         statusDetailRow('终端状态', cardInfo.value.operatingStatus, operatingStatusText),
       ]),
@@ -155,114 +266,93 @@ const diagnosisDetailGroups = computed<DiagnosisDetailGroup[]>(() =>
           formatFlowMb(firstNumber(
             cardInfo.value.packageTotalFlowMb,
             packageInfo.value.packageTotalFlowMb,
-            cardFallback.value.packageTotalFlowMb,
           )),
         ),
         optionalDetailRow(
           '已用流量',
-          formatFlowMb(firstNumber(
-            cardInfo.value.usedFlowMb,
-            packageInfo.value.usedFlowMb,
-            cardFallback.value.usedFlowMb,
-          )),
+          formatFlowMb(usedFlowMb.value),
         ),
         optionalDetailRow(
           '剩余流量',
-          formatFlowMb(firstNumber(
-            cardInfo.value.remainFlowMb,
-            packageInfo.value.remainFlowMb,
-            cardFallback.value.remainFlowMb,
-          )),
+          formatFlowMb(remainingFlowMb.value),
         ),
         optionalDetailRow('使用占比', usageRatio.value === null ? '' : `${trimNumber(usageRatio.value)}%`),
         optionalDetailRow('流量同步时间', firstRaw(cardInfo.value.flowSyncTime, cardFallback.value.flowSyncTime)),
       ]),
     },
-    {
-      title: '实时会话',
-      rows: compactRows([
-        statusDetailRow('会话状态', sessionInfo.value.status, sessionStatusText),
-        optionalDetailRow('APN', firstRaw(sessionInfo.value.apnId, cardFallback.value.apnName, cardFallback.value.apnId)),
-        statusDetailRow('接入方式', firstRaw(sessionInfo.value.rat, cardFallback.value.rat), ratText),
-        fixedDetailRow('近30天IMEI', firstRaw(sessionInfo.value.imei, cardFallback.value.imei)),
-        fixedDetailRow('IPv4', firstRaw(sessionInfo.value.ipv4, cardFallback.value.ipv4)),
-        fixedDetailRow('IPv6', firstRaw(sessionInfo.value.ipv6, cardFallback.value.ipv6)),
-        optionalDetailRow('IPv6前缀', sessionInfo.value.ipv6Prefix),
-        optionalDetailRow('建链时间', firstRaw(sessionInfo.value.createTime, cardFallback.value.sessionCreateTime)),
-      ]),
-    },
+    ...(!sessionModuleHidden.value
+      ? [{
+          title: '实时会话',
+          rows: compactRows([
+            statusDetailRow('会话状态', sessionModuleUnsupported.value ? 'UNSUPPORTED' : sessionInfo.value.status, sessionStatusText),
+            optionalDetailRow('APN', firstRaw(sessionInfo.value.apnId)),
+            statusDetailRow('接入方式', firstRaw(sessionInfo.value.rat), ratText),
+            fixedDetailRow('IPv4', firstRaw(sessionInfo.value.ipv4)),
+            fixedDetailRow('IPv6', firstRaw(sessionInfo.value.ipv6)),
+            fixedDetailRow('IPv6前缀', firstRaw(sessionInfo.value.ipv6Prefix)),
+            optionalDetailRow('建链时间', firstRaw(sessionInfo.value.createTime)),
+            fixedDetailRow('近30天最新终端使用IMEI', sessionInfo.value.imei),
+          ]),
+        }]
+      : []),
     {
       title: '限制策略',
       rows: compactRows([
-        statusDetailRow('机卡状态', firstRaw(cardInfo.value.imeiStatus, cardFallback.value.imeiStatus), imeiStatusText),
-        statusDetailRow('区域限制', firstRaw(cardInfo.value.regionLimitStatus, cardFallback.value.regionLimitStatus), regionStatusText),
-        statusDetailRow('区域订购', cardInfo.value.regionLimitOrderStatus, regionOrderStatusText),
-        statusDetailRow('区域触发', cardInfo.value.regionLimitTriggerStatus, regionTriggerStatusText),
-        optionalDetailRow('限制类型', regionLimitTypeText(cardInfo.value.regionLimitType)),
-        optionalDetailRow('限制区域', cardInfo.value.regionLimitArea),
+        ...(!cardBindModuleHidden.value
+          ? [statusDetailRow('机卡状态', firstRaw(cardInfo.value.imeiStatus), imeiStatusText)]
+          : []),
+        ...(firstRaw(cardInfo.value.regionLimitOrderStatus) === '0'
+          ? [
+              optionalDetailRow('区域限制', regionLimitDisplayText()),
+              optionalDetailRow('区域订购', regionLimitOrderDisplayText()),
+              statusDetailRow('区域触发', cardInfo.value.regionLimitTriggerStatus, regionTriggerStatusText),
+              optionalDetailRow('限制类型', regionLimitTypeText(cardInfo.value.regionLimitType)),
+              optionalDetailRow('限制区域', cardInfo.value.regionLimitArea),
+            ]
+          : []),
         statusDetailRow('人联网限制', cardInfo.value.humanLimitStatus, humanLimitStatusText),
       ]),
     },
-    {
-      title: '停机冻结',
-      rows: compactRows([
-        optionalDetailRow('停机原因', firstRaw(cardInfo.value.stopReason, cardFallback.value.stopReason)),
-        statusDetailRow('冻结状态', cardInfo.value.frozenStatus, frozenStatusText),
-        optionalDetailRow('冻结原因', cardInfo.value.frozenReason),
-        optionalDetailRow('冻结时间', formatCompactDateTime(cardInfo.value.frozenOperTime)),
-      ]),
-    },
+    ...(!stopReasonModuleHidden.value || !frozenModuleHidden.value
+      ? [{
+          title: '停机冻结',
+          rows: compactRows([
+            ...(!stopReasonModuleHidden.value
+              ? [optionalDetailRow('停机原因', firstRaw(cardInfo.value.stopReason, cardFallback.value.stopReason))]
+              : []),
+            ...(!frozenModuleHidden.value
+              ? [
+                  statusDetailRow('冻结状态', cardInfo.value.frozenStatus, frozenStatusText),
+                  optionalDetailRow('冻结原因', cardInfo.value.frozenReason),
+                  optionalDetailRow('冻结时间', formatCompactDateTime(cardInfo.value.frozenOperTime)),
+                ]
+              : []),
+          ]),
+        }]
+      : []),
   ].filter(group => group.rows.length > 0),
 )
 
-const visibleDiagnosisDetailGroups = computed(() =>
-  diagnosisDetailGroups.value.slice(0, visibleDetailGroupCount.value),
-)
+const visibleDiagnosisDetailGroups = computed(() => {
+  if (!isTopLevelUser.value)
+    return []
+  return diagnosisDetailGroups.value.slice(0, visibleDetailGroupCount.value)
+})
 const hasMoreDiagnosisDetails = computed(
-  () => visibleDiagnosisDetailGroups.value.length < diagnosisDetailGroups.value.length,
+  () => isTopLevelUser.value
+    && visibleDiagnosisDetailGroups.value.length < diagnosisDetailGroups.value.length,
 )
 
 const diagnosisSummary = computed(() => {
   if (!diagnosis.value)
     return null
-  const issueCount = resultRows.value.filter(row => row.type === 'danger' || row.type === 'warning').length
-  if (issueCount === 0) {
-    return { type: 'success' as TagType, text: '排查正常' }
-  }
-  return { type: 'warning' as TagType, text: `${issueCount} 项需关注` }
-})
-
-const diagnosisNotice = computed<DiagnosisNotice>(() => {
-  if (!diagnosis.value) {
-    return {
-      type: 'primary',
-      text: '输入卡号后开始排查，系统会检查当前卡片的关键状态。',
-    }
-  }
   return {
-    type: 'success',
+    type: 'success' as TagType,
     text: '排查完成',
   }
 })
-
-const noticeClass = computed(() =>
-  diagnosisNotice.value.type === 'success'
-    ? 'border-#bbf7d0 bg-#f0fdf4 text-#15803d'
-    : diagnosisNotice.value.type === 'warning'
-      ? 'border-#fde68a bg-#fffbeb text-#b45309'
-      : 'border-#dbeafe bg-#eff6ff text-#1d4ed8',
-)
-
-const noticeIcon = computed(() =>
-  diagnosisNotice.value.type === 'success'
-    ? 'i-carbon-checkmark-outline'
-    : diagnosisNotice.value.type === 'primary'
-      ? 'i-carbon-information'
-      : 'i-carbon-warning-alt',
-)
-
 function buildCardStatusRow(): DiagnosisRow {
-  const status = firstRaw(cardInfo.value.status, cardFallback.value.bossCardStatus)
+  const status = firstRaw(cardInfo.value.status)
   const module = pickModule('cardStatus', 'basicInfo', 'card')
 
   if (!status)
@@ -277,41 +367,56 @@ function buildCardStatusRow(): DiagnosisRow {
   }
 }
 
-function buildOnlineRow(): DiagnosisRow {
-  const onlineStatus = diagnosisOnlineStatusValue(cardInfo.value.onlineStatus, cardFallback.value.onlineStatus)
-  const deviceStatus = firstRaw(cardInfo.value.deviceStatus, cardFallback.value.deviceStatus)
-  const operatingStatus = firstRaw(cardInfo.value.operatingStatus)
-  const sessionStatus = firstRaw(sessionInfo.value.status)
-  const module = pickModule('session', 'device', 'basicInfo', 'cardStatus')
+function buildDataServiceRow(): DiagnosisRow {
+  if (cardInfo.value.dataServiceSource === 'network_block') {
+    const status = firstRaw(cardInfo.value.netBlockStatus)
+    return { label: '数据服务', value: diagnosisDataServiceDisplay(cardInfo.value), type: status === '1' ? 'danger' : status === '0' ? 'success' : 'primary', desc: status === '1' ? firstRaw(cardInfo.value.netBlockReason) : undefined }
+  }
+  const dataStatus = firstRaw(cardInfo.value.dataStatus)
+  const module = pickModule('dataService', 'basicInfo', 'cardStatus')
 
-  if (deviceStatus === '0') {
-    return { label: '在线状态', value: '异常/不可用', type: 'danger', desc: '设备状态异常' }
-  }
-  if (operatingStatus === '0') {
-    return { label: '在线状态', value: '离线', type: 'warning', desc: '终端关机' }
-  }
-  if (onlineStatus === '0' || ['-1', '00', 'OFFLINE'].includes(sessionStatus)) {
+  if (dataStatus === '0')
+    return { label: '数据服务', value: '关闭', type: 'danger' }
+  if (dataStatus === '1')
+    return { label: '数据服务', value: '开启', type: 'success' }
+  if (dataStatus === '-1')
+    return { label: '数据服务', value: '未知', type: 'primary' }
+  return fallbackRow('数据服务', module)
+}
+
+function buildOnlineRow(): DiagnosisRow {
+  const onlineStatus = resolveDiagnosisOnlineStatus(cardInfo.value.onlineStatus, sessionInfo.value.status)
+  const sessionStatus = firstRaw(sessionInfo.value.status)
+  const module = pickModule('session')
+
+  if (shouldHideDiagnosisModule(module))
+    return fallbackRow('在线状态', module)
+  if (isDiagnosisUnsupportedModule(module))
+    return { label: '在线状态', value: '不支持', type: 'primary' }
+
+  if (['-1', '00', 'OFFLINE'].includes(sessionStatus)) {
     return { label: '在线状态', value: '离线', type: 'warning' }
   }
-  if (onlineStatus === '1' || ['0', '01', 'ONLINE'].includes(sessionStatus)) {
+  if (['0', '01', 'ONLINE'].includes(sessionStatus)) {
     return { label: '在线状态', value: '在线', type: 'success' }
   }
-  if (onlineStatus === '2' || ['-2', '02', '2', 'UNKNOWN'].includes(sessionStatus)) {
-    return { label: '在线状态', value: '未知', type: 'primary' }
+  if (['-2', '02', '2', 'UNKNOWN'].includes(sessionStatus)) {
+    return { label: '在线状态', value: '-', type: 'primary' }
   }
+  if (onlineStatus === '0')
+    return { label: '在线状态', value: '离线', type: 'warning' }
+  if (onlineStatus === '1')
+    return { label: '在线状态', value: '在线', type: 'success' }
+  if (onlineStatus === '2')
+    return { label: '在线状态', value: '-', type: 'primary' }
   return fallbackRow('在线状态', module)
 }
 
 function buildFlowRow(): DiagnosisRow {
-  const remainFlow = firstNumber(
-    cardInfo.value.remainFlowMb,
-    packageInfo.value.remainFlowMb,
-    cardFallback.value.remainFlowMb,
-  )
+  const remainFlow = remainingFlowMb.value
   const totalFlow = firstNumber(
     cardInfo.value.packageTotalFlowMb,
     packageInfo.value.packageTotalFlowMb,
-    cardFallback.value.packageTotalFlowMb,
   )
   const module = pickModule('flowUsage')
   if (totalFlow !== null && totalFlow > 0 && remainFlow !== null && remainFlow <= 0) {
@@ -326,8 +431,64 @@ function buildFlowRow(): DiagnosisRow {
   return fallbackRow('流量异常', module)
 }
 
+function buildUsedFlowRow(plain = false): DiagnosisRow | null {
+  const usedFlow = usedFlowMb.value
+  if (usedFlow === null && plain) {
+    return {
+      label: '已用流量',
+      value: '-',
+      type: 'primary',
+      plain: true,
+      refreshable: true,
+      hint: diagnosisFlowRetryHint(modules.value.flowUsage),
+    }
+  }
+  if (usedFlow === null)
+    return fallbackRow('已用流量', pickModule('flowUsage'))
+  return {
+    label: '已用流量',
+    value: formatFlowMb(usedFlow),
+    type: usageRatio.value !== null && usageRatio.value >= 80 ? 'warning' : 'success',
+    plain,
+    refreshable: true,
+  }
+}
+
+async function refreshUsedFlow() {
+  const value = diagnosisQueryCode.value.trim() || queryCode.value.trim()
+  if (!value || flowSyncing.value)
+    return
+
+  flowSyncing.value = true
+  try {
+    const result = tokenStore.hasLogin
+      ? await getDiagnosisInfo({ queryCode: value })
+      : await getOpenDiagnosisInfo({ queryCode: value })
+    diagnosis.value = result
+    if (result.modules?.flowUsage?.status === 'success' || result.modules?.flowUsage?.status === 'cached')
+      uni.showToast({ title: '流量已同步', icon: 'success' })
+  }
+  catch {
+    const current = diagnosis.value
+    if (!current)
+      return
+    diagnosis.value = {
+      ...current,
+      info: current.info ? { ...current.info, usedFlowMb: undefined, remainFlowMb: undefined } : current.info,
+      package: current.package ? { ...current.package, usedFlowMb: undefined, remainFlowMb: undefined } : current.package,
+      modules: {
+        ...current.modules,
+        flowUsage: { status: 'error', reason: 'query_error' },
+      },
+    }
+  }
+  finally {
+    flowSyncing.value = false
+  }
+}
+
 function buildBindRow(): DiagnosisRow {
-  const imeiStatus = firstRaw(cardInfo.value.imeiStatus, cardFallback.value.imeiStatus)
+  const imeiStatus = firstRaw(cardInfo.value.imeiStatus)
   const module = pickModule('cardBind')
 
   if (imeiStatus === '1') {
@@ -342,44 +503,39 @@ function buildBindRow(): DiagnosisRow {
   return fallbackRow('机卡绑定', module)
 }
 
-function buildRegionRow(): DiagnosisRow {
-  const regionStatus = firstRaw(cardInfo.value.regionLimitStatus, cardFallback.value.regionLimitStatus)
-  const orderStatus = firstRaw(cardInfo.value.regionLimitOrderStatus)
-  const triggerStatus = firstRaw(cardInfo.value.regionLimitTriggerStatus)
-  const area = compactText(cardInfo.value.regionLimitArea)
-  const module = pickModule('region')
+function buildImeiRow(): DiagnosisRow {
+  const imei = firstRaw(sessionInfo.value.imei)
+  return {
+    label: '近30天最新终端使用IMEI',
+    value: imei || '-',
+    type: 'primary',
+    plain: true,
+    copyable: Boolean(imei),
+  }
+}
 
-  if (triggerStatus === '0') {
-    return { label: '区域限制', value: '已断网', type: 'danger', desc: area }
-  }
-  if (regionStatus === '1') {
+function buildRegionRow(): DiagnosisRow | null {
+  const orderStatus = firstRaw(cardInfo.value.regionLimitOrderStatus)
+  const module = pickModule('region')
+  if (orderStatus === '1' || shouldHideDiagnosisModule(module))
+    return null
+  const regionStatus = firstRaw(cardInfo.value.regionLimitStatus, cardFallback.value.regionLimitStatus)
+  const area = compactText(cardInfo.value.regionLimitArea)
+  if (regionStatus === '1')
     return { label: '区域限制', value: '受限制', type: 'danger', desc: area }
-  }
-  if (regionStatus === '0') {
-    return { label: '区域限制', value: '无限制', type: 'success', desc: area }
-  }
-  if (orderStatus === '1') {
-    return { label: '区域限制', value: '未订购', type: 'primary' }
-  }
-  if (orderStatus === '0' && triggerStatus === '1') {
-    return { label: '区域限制', value: '未触发', type: 'success', desc: area }
-  }
-  if (triggerStatus === '-') {
-    return { label: '区域限制', value: '网络侧无法判断', type: 'primary', desc: area }
-  }
-  if (regionStatus === '2' || orderStatus === '2' || triggerStatus === '2') {
-    return { label: '区域限制', value: '未知', type: 'primary', desc: area }
-  }
+  if (regionStatus === '0')
+    return { label: '区域限制', value: '未限制', type: 'success', desc: area }
   return fallbackRow('区域限制', module)
 }
 
-function buildStopFrozenRow(): DiagnosisRow {
+function buildStopFrozenRow(): DiagnosisRow | null {
   const stopReason = firstRaw(cardInfo.value.stopReason, cardFallback.value.stopReason)
   const frozenStatus = firstRaw(cardInfo.value.frozenStatus)
+  const normalizedFrozenStatus = normalizeFrozenStatus(frozenStatus)
   const frozenReason = firstRaw(cardInfo.value.frozenReason)
   const module = pickModule('stopReason', 'frozen')
 
-  if (isFrozen(frozenStatus)) {
+  if (normalizedFrozenStatus === '已冻结') {
     return {
       label: '停机冻结',
       value: '冻结',
@@ -389,26 +545,21 @@ function buildStopFrozenRow(): DiagnosisRow {
   }
   if (isActualStopReason(stopReason))
     return { label: '停机冻结', value: '有停机原因', type: 'warning', desc: stopReason }
-  if (frozenStatus === '0')
+  if (normalizedFrozenStatus === '未冻结')
     return { label: '停机冻结', value: '正常', type: 'success' }
+  if (normalizedFrozenStatus === '不支持查询')
+    return null
   return fallbackRow('停机冻结', module)
 }
 
 function fallbackRow(label: string, module?: DiagnosisModuleItem): DiagnosisRow | null {
-  const status = String(module?.status || '').trim()
-  const message = moduleMessage(module)
-  if (status === 'skipped') {
+  if (module?.reason === 'rate_limited')
+    return { label, value: '-', type: 'primary', plain: true, desc: '查询受运营商频率限制，请在上次查询60分钟后再试' }
+  if (shouldHideDiagnosisModule(module))
     return null
-  }
-  if (status === 'error') {
-    if (!message || isUnsupportedModuleMessage(message))
-      return null
-    return { label, value: '查询异常', type: 'warning', desc: message || '稍后重试' }
-  }
-  if (status === 'cached') {
-    return { label, value: '缓存', type: 'primary', desc: message }
-  }
-  return null
+  if (isDiagnosisUnsupportedModule(module))
+    return { label, value: '不支持', type: 'primary' }
+  return { label, value: '-', type: 'primary', plain: true }
 }
 
 function pickModule(...keys: string[]) {
@@ -419,6 +570,8 @@ function moduleMessage(module?: DiagnosisModuleItem) {
   const text = compactText(module?.message)
   if (!text)
     return ''
+  if (isUncollectedCardMessage(text))
+    return '此卡暂未收录'
   if (/context deadline exceeded|client\.timeout|dial tcp|connection refused|timeout|token|https?:\/\//i.test(text)) {
     return '查询暂时未完成'
   }
@@ -427,26 +580,22 @@ function moduleMessage(module?: DiagnosisModuleItem) {
   return text
 }
 
-function isUnsupportedModuleMessage(message: string) {
-  return /不支持|暂不支持|未返回|未查询到|不是所查询的集团下的用户|无独立.*接口|当前无.*接口|无数据|暂无数据|未开通|未配置|未实例化|集团下的用户/.test(message)
-}
-
 function compactRows<T>(rows: Array<T | null | undefined>): T[] {
   return rows.filter((item): item is T => Boolean(item))
 }
 
 function optionalDetailRow(label: string, value: unknown): DiagnosisDetailRow | null {
   const text = compactText(value)
-  if (!hasMeaningfulValue(text) || shouldHideDetailText(text))
+  if (shouldHideDiagnosisText(text))
     return null
-  return { label, value: text }
+  return { label, value: isDiagnosisNoDataText(text) ? '-' : text }
 }
 
 function fixedDetailRow(label: string, value: unknown): DiagnosisDetailRow {
   const text = compactText(value)
   return {
     label,
-    value: hasMeaningfulValue(text) && !shouldHideDetailText(text) ? text : '-',
+    value: isDiagnosisNoDataText(text) || shouldHideDiagnosisText(text) ? '-' : text,
   }
 }
 
@@ -457,18 +606,11 @@ function statusDetailRow(
 ): DiagnosisDetailRow | null {
   const rawText = firstRaw(rawValue)
   if (!rawText)
+    return { label, value: '-' }
+  const formatted = formatter(rawText)
+  if (!formatted || shouldHideDiagnosisText(formatted))
     return null
-  return optionalDetailRow(label, formatter(rawText))
-}
-
-function hasMeaningfulValue(value: unknown) {
-  const text = compactText(value)
-  return !!text && text !== '-' && text !== '<nil>' && text !== 'undefined' && text !== 'null'
-}
-
-function shouldHideDetailText(text: string) {
-  return /^(?:不支持|暂不支持|运营商暂不支持|未返回|未查询到|暂无数据|无数据|未开通|未配置|未实例化)$/.test(text)
-    || text.includes('不是所查询的集团下的用户')
+  return { label, value: isDiagnosisNoDataText(formatted) ? '-' : formatted }
 }
 
 function formatCompactDateTime(value: unknown) {
@@ -504,12 +646,7 @@ function cardStatusType(status: string): TagType {
 }
 
 function onlineStatusText(status: string) {
-  const map: Record<string, string> = {
-    0: '离线',
-    1: '在线',
-    2: '未知',
-  }
-  return map[status] || status
+  return diagnosisOnlineStatusDisplay(status)
 }
 
 function deviceStatusText(status: string) {
@@ -582,30 +719,31 @@ function regionLimitTypeText(status?: string | number | null) {
     3: '客户自定义省级限制',
     4: '客户自定义园区级限制',
   }
-  return map[value] || value
+  return map[value] || (value === '0' ? '未知' : value)
+}
+
+function regionLimitDisplayText() {
+  const regionStatus = firstRaw(cardInfo.value.regionLimitStatus, cardFallback.value.regionLimitStatus)
+  if (regionStatus === '1')
+    return '受限制'
+  if (regionStatus === '0')
+    return '未限制'
+  return regionStatusText(regionStatus)
+}
+
+function regionLimitOrderDisplayText() {
+  const orderStatus = firstRaw(cardInfo.value.regionLimitOrderStatus)
+  if (!isTopLevelUser.value && orderStatus !== '0')
+    return ''
+  return regionOrderStatusText(orderStatus)
 }
 
 function frozenStatusText(status: string) {
-  if (status === '0')
-    return '未冻结'
-  if (status === '1')
-    return '已冻结'
-  return ''
+  return normalizeFrozenStatus(status)
 }
 
 function sessionStatusText(status: string) {
-  const map: Record<string, string> = {
-    '0': '在线',
-    '-1': '离线',
-    '-2': '未查询到会话',
-    '00': '离线',
-    '01': '在线',
-    '02': '未查询到会话',
-    'ONLINE': '在线',
-    'OFFLINE': '离线',
-    'UNKNOWN': '未查询到会话',
-  }
-  return map[status] || status
+  return diagnosisSessionStatusDisplay(status)
 }
 
 function ratText(status: string) {
@@ -642,8 +780,15 @@ function trimNumber(value: number) {
   return value.toFixed(value >= 10 ? 1 : 2).replace(/\.?0+$/, '')
 }
 
-function isFrozen(status: string) {
-  return ['1', '已冻结', '冻结'].includes(status)
+function normalizeFrozenStatus(status: string) {
+  const value = status.trim()
+  if (['1', 'true', '冻结', '已冻结', '是'].includes(value))
+    return '已冻结'
+  if (['0', 'false', '否', '未冻结'].includes(value))
+    return '未冻结'
+  if (['2', '不支持查询'].includes(value))
+    return '不支持查询'
+  return value
 }
 
 function isActualStopReason(reason: string) {
@@ -660,6 +805,8 @@ function showMoreDiagnosisDetails() {
 }
 
 async function changeFlowPeriod(period: DiagnosisFlowPeriod) {
+  if (!canViewDiagnosisFlow.value)
+    return
   if (activeFlowPeriod.value === period && flowData.value)
     return
   activeFlowPeriod.value = period
@@ -667,6 +814,8 @@ async function changeFlowPeriod(period: DiagnosisFlowPeriod) {
 }
 
 async function loadDiagnosisFlow(period: DiagnosisFlowPeriod, force = false) {
+  if (!canViewDiagnosisFlow.value)
+    return
   const value = diagnosisQueryCode.value.trim()
   if (!value)
     return
@@ -676,7 +825,6 @@ async function loadDiagnosisFlow(period: DiagnosisFlowPeriod, force = false) {
     flowLoading.value = false
     flowData.value = flowCache.get(cacheKey) || null
     flowErrorMessage.value = ''
-    await renderFlowChart()
     return
   }
 
@@ -685,7 +833,9 @@ async function loadDiagnosisFlow(period: DiagnosisFlowPeriod, force = false) {
   flowErrorMessage.value = ''
   try {
     const requestPeriod = period === '3M' ? '6M' : period
-    const response = await getOpenDiagnosisFlow({ queryCode: value, queryType: requestPeriod })
+    const response = tokenStore.hasLogin
+      ? await getDiagnosisFlow({ queryCode: value, queryType: requestPeriod })
+      : await getOpenDiagnosisFlow({ queryCode: value, queryType: requestPeriod })
     if (seq !== flowLoadSeq)
       return
     const result = period === '3M'
@@ -693,6 +843,7 @@ async function loadDiagnosisFlow(period: DiagnosisFlowPeriod, force = false) {
           ...response,
           times: (response.times || []).slice(-3),
           flow: (response.flow || []).slice(-3),
+          flowAvailable: response.flowAvailable?.slice(-3),
         }
       : response
     flowCache.set(cacheKey, result)
@@ -702,76 +853,14 @@ async function loadDiagnosisFlow(period: DiagnosisFlowPeriod, force = false) {
     if (seq !== flowLoadSeq)
       return
     flowData.value = null
-    flowErrorMessage.value = getErrorMessage(error, '流量趋势加载失败')
+    flowErrorMessage.value = '当前繁忙，请稍后重试'
   }
   finally {
-    if (seq === flowLoadSeq) {
+    if (seq === flowLoadSeq)
       flowLoading.value = false
-      await renderFlowChart()
-    }
   }
 }
 
-async function renderFlowChart() {
-  if (flowLoading.value || !flowData.value || !flowHasData.value)
-    return
-
-  await nextTick()
-  const systemInfo = uni.getSystemInfoSync()
-  const containerWidth = Math.max(280, Math.min(640, systemInfo.windowWidth - 48))
-  const categories = flowData.value.times || []
-  const chartWidth = activeFlowPeriod.value === '30d'
-    ? Math.max(containerWidth, categories.length * 34)
-    : containerWidth
-  flowChartWidth.value = chartWidth
-  await nextTick()
-
-  const context = uni.createCanvasContext('diagnosis-flow-chart', pageProxy)
-  flowChartInstance = new UCharts({
-    type: 'line',
-    context,
-    width: chartWidth,
-    height: flowChartHeight,
-    categories,
-    series: [{
-      name: '流量',
-      data: flowValues.value,
-    }],
-    animation: true,
-    background: '#ffffff',
-    color: ['#2563eb'],
-    padding: [16, 14, 2, 8],
-    dataLabel: false,
-    dataPointShape: true,
-    legend: {
-      show: false,
-    },
-    xAxis: {
-      disableGrid: true,
-      fontColor: '#64748b',
-      fontSize: 10,
-      boundaryGap: 'justify',
-    },
-    yAxis: {
-      gridType: 'dash',
-      dashLength: 3,
-      fontColor: '#64748b',
-      fontSize: 10,
-      data: [{
-        min: 0,
-        formatter: (value: number) => formatFlowValue(value),
-      }],
-    },
-    extra: {
-      line: {
-        type: 'curve',
-        width: 3,
-        activeType: 'hollow',
-      },
-    },
-  })
-}
-
 function averageFlow(values: number[]) {
   if (!values.length)
     return 0
@@ -785,6 +874,15 @@ function formatFlowValue(value: number) {
 }
 
 function confirmDiagnosisAction(operation: 'restart' | 'dataStart' | 'dataStop') {
+  const allowed = operation === 'restart'
+    ? canRestart.value
+    : operation === 'dataStart'
+      ? canStartDataService.value
+      : canStopDataService.value
+  if (!allowed) {
+    uni.showToast({ title: '当前账号没有该操作权限', icon: 'none' })
+    return
+  }
   const cardValue = diagnosisCardValue.value
   if (!cardValue)
     return
@@ -851,14 +949,21 @@ async function handleDiagnose() {
       : await getOpenDiagnosisInfo({ queryCode: value })
     if (seq !== diagnosisLoadSeq)
       return
+    const basicInfo = result.modules?.basicInfo
+    if (basicInfo?.status === 'error' && isUncollectedCardMessage(basicInfo.message || '')) {
+      errorMessage.value = '此卡暂未收录'
+      return
+    }
     diagnosis.value = result
     uni.showToast({ title: '排查完成', icon: 'success' })
-    void loadDiagnosisFlow('30d', true)
+    if (canViewDiagnosisFlow.value)
+      void loadDiagnosisFlow('30d', true)
   }
   catch (error) {
     if (seq !== diagnosisLoadSeq)
       return
-    errorMessage.value = getErrorMessage(error, '卡片排查失败')
+    const message = getErrorMessage(error, '卡片排查失败')
+    errorMessage.value = isUncollectedCardMessage(message) ? '此卡暂未收录' : '业务繁忙，请重试'
     uni.showToast({ title: errorMessage.value, icon: 'none' })
   }
   finally {
@@ -867,10 +972,6 @@ async function handleDiagnose() {
   }
 }
 
-onBeforeUnmount(() => {
-  flowChartInstance = null
-})
-
 function getErrorMessage(error: unknown, fallback: string) {
   if (error && typeof error === 'object') {
     const data = error as {
@@ -895,6 +996,25 @@ function getErrorMessage(error: unknown, fallback: string) {
   return fallback
 }
 
+function isUncollectedCardMessage(message: string) {
+  return /(?:通道|渠道).*(?:不存在|未配置|未对接|未接入|未实例化|未找到|未启用|未匹配)|未找到.*(?:通道|渠道)(?:配置)?|卡信息不存在|卡片不存在|该卡暂未纳入服务/.test(message)
+}
+
+function getDiagnosisFlowErrorMessage(error: unknown) {
+  const message = getErrorMessage(error, '流量趋势加载失败')
+  const lower = message.toLowerCase()
+  const internalMarkers = [
+    'tdengine',
+    'database not exist',
+    'query traffic usage',
+    'sqlstate',
+    '[0x',
+  ]
+  if (internalMarkers.some(marker => lower.includes(marker)))
+    return '流量趋势服务暂时不可用，请稍后重试'
+  return message
+}
+
 function firstRaw(...values: Array<number | string | undefined | null>) {
   for (const value of values) {
     const text = compactText(value)
@@ -923,37 +1043,9 @@ function compactText(value: unknown) {
   return String(value ?? '').trim()
 }
 
-function diagnosisOnlineStatusValue(
-  diagnosisStatus?: string | number,
-  rawSessionStatus?: string | number,
-) {
-  const diagnosisValue = firstRaw(diagnosisStatus)
-  if (diagnosisValue)
-    return diagnosisValue
-
-  switch (firstRaw(rawSessionStatus)) {
-    case '0':
-      return '1'
-    case '-1':
-    case '00':
-    case 'OFFLINE':
-      return '0'
-    case '-2':
-    case '02':
-    case '2':
-    case 'UNKNOWN':
-      return '2'
-    case '01':
-    case 'ONLINE':
-      return '1'
-    default:
-      return ''
-  }
-}
-
-onLoad((query) => {
+onLoad(async (query) => {
   if (tokenStore.hasLogin)
-    void userStore.fetchUserInfo().catch(() => undefined)
+    await userStore.fetchUserInfo().catch(() => undefined)
   queryCode.value = normalizeQueryValue(
     query?.queryCode || query?.cardValue || query?.iccid || query?.msisdn,
   )
@@ -1006,18 +1098,10 @@ onLoad((query) => {
         </view>
       </view>
 
-      <view
-        class="flex items-start gap-12rpx border rounded-12rpx border-solid px-20rpx py-18rpx text-23rpx leading-34rpx"
-        :class="noticeClass"
-      >
-        <view class="mt-3rpx shrink-0 text-28rpx" :class="noticeIcon" />
-        <text class="min-w-0 flex-1">{{ diagnosisNotice.text }}</text>
-      </view>
-
       <view class="flex items-start gap-12rpx border border-#bfdbfe rounded-12rpx border-solid bg-#eff6ff px-20rpx py-18rpx text-23rpx text-#1e40af leading-34rpx">
         <view class="i-carbon-information mt-3rpx shrink-0 text-28rpx" />
         <text class="min-w-0 flex-1">
-          本页基于卡片状态、套餐、流量和会话信息进行状态排查，结果仅供参考，最终以运营商和业务系统状态为准。请勿输入身份证号、银行卡号、密码等敏感信息。
+          本页基于卡片状态、在线状态、流量和设备信息进行状态排查，结果仅供参考，最终以运营商和业务系统状态为准。请勿输入身份证号、银行卡号、密码等敏感信息。
         </text>
       </view>
 
@@ -1044,12 +1128,54 @@ onLoad((query) => {
             :class="index === resultRows.length - 1 ? '' : 'border-b border-#edf2f7 border-solid'"
           >
             <view class="min-w-0 flex-1">
-              <text class="block text-26rpx text-body">{{ row.label }}</text>
+              <view class="min-h-40rpx flex items-center gap-4rpx">
+                <text class="block text-26rpx text-body leading-40rpx">{{ row.label }}</text>
+                <view
+                  v-if="row.refreshable"
+                  class="h-40rpx w-40rpx flex shrink-0 items-center justify-center"
+                  role="button"
+                  aria-label="重新同步流量"
+                  @click.stop="refreshUsedFlow"
+                >
+                  <wd-icon
+                    name="refresh"
+                    size="15px"
+                    color="#64748b"
+                    :custom-class="flowSyncing ? '!flex !items-center !justify-center !leading-none animate-spin' : '!flex !items-center !justify-center !leading-none'"
+                  />
+                </view>
+              </view>
               <text v-if="row.desc" class="mt-4rpx block truncate text-21rpx text-muted">
                 {{ row.desc }}
               </text>
             </view>
-            <wd-tag :type="row.type" size="small" round variant="plain">
+            <view
+              v-if="row.refreshable"
+              class="max-w-68% min-w-0 text-right"
+            >
+              <text class="block break-all text-25rpx text-ink font-700 leading-34rpx">
+                {{ row.value }}
+              </text>
+              <text v-if="row.hint" class="mt-2rpx block text-20rpx text-#dc2626 leading-28rpx">
+                {{ row.hint }}
+              </text>
+            </view>
+            <view
+              v-else-if="row.copyable"
+              class="max-w-62% min-w-0 flex items-center justify-end gap-8rpx"
+              role="button"
+              :aria-label="`复制${row.label} ${row.value}`"
+              @click="copyText(row.value, 'IMEI')"
+            >
+              <text class="min-w-0 break-all text-right text-25rpx text-ink font-700 leading-34rpx">
+                {{ row.value }}
+              </text>
+              <view class="i-carbon-copy shrink-0 text-24rpx text-muted" />
+            </view>
+            <text v-else-if="row.plain || row.value === '-'" class="max-w-62% break-all text-right text-25rpx text-ink font-700 leading-34rpx">
+              {{ row.value }}
+            </text>
+            <wd-tag v-else :type="row.type" size="small" round variant="plain">
               {{ row.value }}
             </wd-tag>
           </view>
@@ -1093,7 +1219,7 @@ onLoad((query) => {
           </view>
         </view>
 
-        <view class="card-base overflow-hidden">
+        <view v-if="canViewDiagnosisFlow" class="card-base overflow-hidden">
           <view class="flex items-center justify-between gap-16rpx border-0 border-b border-#edf2f7 border-solid px-24rpx py-22rpx">
             <view class="min-w-0 flex items-center gap-12rpx">
               <view class="h-28rpx w-6rpx shrink-0 rounded-full bg-primary" />
@@ -1102,7 +1228,7 @@ onLoad((query) => {
                 <text class="mt-4rpx block text-21rpx text-muted">近期用量趋势仅作为诊断参考</text>
               </view>
             </view>
-            <view class="i-carbon-chart-line shrink-0 text-32rpx text-primary" />
+            <view class="i-carbon-chart-column shrink-0 text-32rpx text-primary" />
           </view>
 
           <view class="p-24rpx">
@@ -1149,20 +1275,23 @@ onLoad((query) => {
                 </view>
               </view>
 
-              <scroll-view scroll-x class="mt-24rpx w-full" :show-scrollbar="false">
-                <canvas
-                  id="diagnosis-flow-chart"
-                  canvas-id="diagnosis-flow-chart"
-                  class="diagnosis-flow-canvas"
-                  :width="flowChartWidth"
-                  :height="flowChartHeight"
-                  :style="{ width: `${flowChartWidth}px`, height: `${flowChartHeight}px` }"
-                />
-              </scroll-view>
+              <view class="flow-chart-wrap mt-20rpx">
+                <DiagnosisFlowChart :points="flowChartPoints" />
+                <text v-if="flowMissingCount" class="mt-10rpx block text-21rpx text-muted">含 {{ flowMissingCount }} 个未采集周期，未按 0MB 计入统计</text>
+                <view class="flow-axis-labels">
+                  <text
+                    v-for="(label, index) in flowAxisLabels"
+                    :key="`flow-axis-${index}-${label}`"
+                    class="flow-axis-label"
+                  >
+                    {{ label }}
+                  </text>
+                </view>
+              </view>
             </template>
 
             <view v-else class="grid justify-items-center gap-10rpx py-38rpx text-center">
-              <view class="i-carbon-chart-line text-48rpx text-#cbd5e1" />
+              <view class="i-carbon-chart-column text-48rpx text-#cbd5e1" />
               <text class="text-24rpx text-body font-700">暂无历史流量数据</text>
               <text class="text-21rpx text-muted">该周期内没有可用于趋势分析的记录</text>
             </view>
@@ -1216,13 +1345,49 @@ onLoad((query) => {
 .diagnosis-quick-actions {
   display: flex;
   flex-wrap: wrap;
-  justify-content: center;
-  gap: 20rpx;
+  justify-content: flex-end;
+  gap: 12rpx;
   margin-top: 18rpx;
   padding-top: 18rpx;
   border-top: 1px solid #edf2f7;
 }
 
+.flow-chart-wrap {
+  min-height: 220rpx;
+  padding: 10rpx 0 0;
+  border: 1px solid #e2e8f0;
+  border-radius: 14rpx;
+  background: linear-gradient(180deg, #f8fbff 0%, #fff 100%);
+  overflow: hidden;
+}
+
+
+.flow-axis-labels {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 8rpx;
+  padding: 0 18rpx 12rpx;
+}
+
+.flow-axis-label {
+  min-width: 0;
+  color: #64748b;
+  font-size: 19rpx;
+  line-height: 28rpx;
+  text-align: center;
+  white-space: nowrap;
+}
+
+:deep(.diagnosis-quick-btn :deep(.wd-button__content)) {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  gap: 6rpx;
+  width: 100%;
+  height: 100%;
+}
+
 :deep(.diagnosis-quick-btn) {
   width: auto !important;
   min-width: 176rpx !important;
@@ -1253,9 +1418,4 @@ onLoad((query) => {
   border-color: #ef4444 !important;
   color: #ef4444 !important;
 }
-
-.diagnosis-flow-canvas {
-  display: block;
-  min-width: 100%;
-}
 </style>
diff --git a/app/src/pages/business/views/order/index.vue b/app/src/pages/business/views/order/index.vue
index 552b978..81bc6f7 100644
--- a/app/src/pages/business/views/order/index.vue
+++ b/app/src/pages/business/views/order/index.vue
@@ -2,6 +2,9 @@
 import { balanceRechargeRefund } from '../api/balance'
 import type { AppOrder, AppOrderItem } from '../api/order'
 import { getOrderDetail, getOrderList } from '../api/order'
+import RouterPath from '@/constant/RouterPath'
+import { useUserStore } from '@/store/user'
+import { hasAnyFeature } from '@/utils/permission'
 
 definePage({
   style: {
@@ -13,6 +16,7 @@ type OrderTypeFilter = 'all' | 'renew' | 'recharge'
 type OrderStatusFilter = 'all' | 'pending' | 'paid'
 
 const keyword = ref('')
+const userStore = useUserStore()
 const orderType = ref<OrderTypeFilter>('all')
 const orderStatus = ref<OrderStatusFilter>('all')
 const page = ref(1)
@@ -328,6 +332,13 @@ async function handleDetail(item: AppOrder) {
 onMounted(() => {
   void loadOrders(true)
 })
+function handleCreateWorkOrder() {
+  if (!selectedOrder.value?.orderId || !hasAnyFeature(userStore.userInfo, 'workorder:create')) {
+    uni.showToast({ title: '当前订单无法提交工单', icon: 'none' })
+    return
+  }
+  uni.navigateTo({ url: `${RouterPath.BusinessViewsWorkOrderCreate}?woType=3&relatedId=${selectedOrder.value?.orderId}&context=${encodeURIComponent(`订单：${selectedOrder.value?.orderSn || ''}`)}` })
+}
 </script>
 
 <template>
@@ -505,6 +516,13 @@ onMounted(() => {
                 </wd-cell-group>
               </wd-card>
 
+              <wd-button
+                v-if="selectedOrder?.orderId && hasAnyFeature(userStore.userInfo, 'workorder:create')"
+                plain
+                @click="handleCreateWorkOrder"
+              >
+                反馈订单问题
+              </wd-button>
               <wd-card custom-class="!mx-0 !mb-0" custom-content-class="!p-0">
                 <template #title>
                   <view class="h-80rpx flex items-center px-24rpx">
@@ -542,8 +560,8 @@ onMounted(() => {
 
               <wd-button
                 v-if="canRequestRefund(selectedOrder)"
-                block
-                plain
+
+                plain block
                 type="primary"
                 :loading="refunding"
                 @click="handleRefund"
@@ -553,10 +571,9 @@ onMounted(() => {
 
               <wd-button
                 v-else-if="isRefundPending(selectedOrder)"
-                block
-                plain
+
                 type="primary"
-                disabled
+                plain disabled block
               >
                 {{ refundStatusText(selectedOrder) }}
               </wd-button>
diff --git a/app/src/pages/business/views/warning/index.vue b/app/src/pages/business/views/warning/index.vue
index 62f423c..b775fa1 100644
--- a/app/src/pages/business/views/warning/index.vue
+++ b/app/src/pages/business/views/warning/index.vue
@@ -2,19 +2,15 @@
 import type { AppCard } from '@/api/card'
 import type { WarningConfigBatchItemParams } from '../api/warning'
 import { getCardList } from '@/api/card'
-import { bindWechat, getWxCode } from '@/api/login'
+import RouterPath from '@/constant/RouterPath'
 import {
-  getWarningConfigMeta,
   saveWarningConfigBatch,
-  updateWarningConfigNotifyBatch,
 } from '../api/warning'
 import {
   displayCardValue,
   displayPackageName,
   formatFlowPair,
 } from '@/pages/card/data'
-import { useUserStore } from '@/store/user'
-import { guideWechatSubscribeSettings, requestWechatSubscribeMessage, shouldGuideWechatSubscribeSettings, wechatSubscribeSaveMessage } from '@/utils'
 
 definePage({
   style: {
@@ -40,20 +36,12 @@ interface WarningForm {
 
 const MAX_BATCH_CARD_COUNT = 100
 
-const userStore = useUserStore()
 const keyword = ref('')
 const cards = ref<AppCard[]>([])
 const selectedCardValues = ref<string[]>([])
 const loadingCards = ref(false)
 const submitting = ref(false)
-const notificationSubmitting = ref(false)
-const binding = ref(false)
 const errorMessage = ref('')
-const templateId = ref('')
-const templateReady = ref(false)
-const wechatBound = ref(false)
-const wechatBindText = ref('未绑定')
-const appNotifyEnabled = ref(false)
 const showAllCards = ref(false)
 const cardPreviewLimit = 6
 
@@ -96,22 +84,6 @@ const hiddenCardCount = computed(() => Math.max(0, visibleCards.value.length - d
 const canSubmit = computed(() =>
   selectedCardValues.value.length > 0 && filledConfigCount.value > 0 && !submitting.value,
 )
-const subscribeText = computed(() => {
-  if (!appNotifyEnabled.value)
-    return '提醒已关闭'
-  if (!templateReady.value)
-    return '模板未配置'
-  return wechatBound.value ? '已绑定微信' : '待绑定微信'
-})
-const notificationDescription = computed(() =>
-  appNotifyEnabled.value
-    ? '本次保存会为选中卡片开启小程序预警提醒。'
-    : '本次保存会关闭小程序预警提醒，不影响其他通知渠道。',
-)
-const notificationSummary = computed(() =>
-  appNotifyEnabled.value ? (wechatBound.value ? wechatBindText.value : '未绑定微信') : '小程序提醒已关闭',
-)
-const submitButtonText = computed(() => (appNotifyEnabled.value ? '保存并订阅提醒' : '保存预警配置'))
 const selectedText = computed(() => `${selectedCardValues.value.length}/${MAX_BATCH_CARD_COUNT}`)
 
 async function loadCards() {
@@ -137,20 +109,6 @@ async function loadCards() {
   }
 }
 
-async function loadMeta() {
-  try {
-    const res = await getWarningConfigMeta()
-    templateId.value = res.templateId || ''
-    templateReady.value = Boolean(res.templateReady)
-    wechatBound.value = Boolean(res.wechatBound)
-    wechatBindText.value = res.wechatBindText || (res.wechatBound ? '已绑定' : '未绑定')
-    appNotifyEnabled.value = res.appNotifyEnabled === 1
-  }
-  catch {
-    templateReady.value = false
-  }
-}
-
 function cardKey(item: AppCard) {
   return displayCardValue(item)
 }
@@ -217,7 +175,6 @@ function buildConfigPayload(validate: boolean): WarningConfigBatchItemParams[] {
       secondWarn,
       thirdWarn,
       isEnabled: form.enabled ? 1 : 0,
-      appNotifyEnabled: appNotifyEnabled.value ? 1 : 0,
     })
   }
   if (validate && !configs.length)
@@ -237,84 +194,6 @@ function validateThreshold(form: WarningForm, firstWarn: number, secondWarn: num
   return ''
 }
 
-async function syncBatchNotify() {
-  if (!selectedCardValues.value.length) {
-    uni.showToast({ title: '请先选择要同步的卡片', icon: 'none' })
-    return
-  }
-  if (notificationSubmitting.value)
-    return
-
-  notificationSubmitting.value = true
-  try {
-    const subscribeResult = appNotifyEnabled.value
-      ? await requestWechatSubscribeMessage(templateId.value, templateReady.value)
-      : undefined
-    const res = await updateWarningConfigNotifyBatch({
-      cardValues: selectedCardValues.value,
-      warnUnit: 1,
-      appNotifyEnabled: appNotifyEnabled.value ? 1 : 0,
-    })
-    const lines = [
-      `成功卡数：${res.successCount || 0} 张`,
-      `失败卡数：${res.failCount || 0} 张`,
-    ]
-    if (res.failItems?.length) {
-      lines.push('')
-      lines.push(...res.failItems.slice(0, 3).map(item => `${item.cardValue}：${item.reason}`))
-    }
-    const shouldGuideSettings = Boolean(subscribeResult && shouldGuideWechatSubscribeSettings(subscribeResult))
-    const subscribeMessage = !shouldGuideSettings && subscribeResult
-      ? wechatSubscribeSaveMessage(subscribeResult)
-      : ''
-    if (subscribeMessage) {
-      lines.push('')
-      lines.push(subscribeMessage)
-    }
-    uni.showModal({
-      title: res.failCount > 0 ? '部分开关已更新' : '通知开关已更新',
-      content: lines.join('\n'),
-      showCancel: false,
-    })
-  }
-  catch (error) {
-    uni.showToast({ title: getErrorMessage(error, '更新通知开关失败'), icon: 'none' })
-  }
-  finally {
-    notificationSubmitting.value = false
-  }
-}
-
-async function handleBindWechat() {
-  // #ifndef MP-WEIXIN
-  uni.showToast({ title: '请在微信小程序中绑定', icon: 'none' })
-  return
-  // #endif
-
-  // #ifdef MP-WEIXIN
-  if (binding.value)
-    return
-  binding.value = true
-  try {
-    const wxRes = await getWxCode()
-    if (!wxRes.code)
-      throw new Error('获取微信登录凭证失败')
-    const res = await bindWechat({ wxCode: wxRes.code })
-    if (res.userInfo)
-      userStore.setUserInfo(res.userInfo)
-    wechatBound.value = true
-    wechatBindText.value = '已绑定'
-    uni.showToast({ title: '微信绑定成功', icon: 'success' })
-  }
-  catch (error) {
-    uni.showToast({ title: getErrorMessage(error, '微信绑定失败'), icon: 'none' })
-  }
-  finally {
-    binding.value = false
-  }
-  // #endif
-}
-
 async function handleSubmit() {
   if (!selectedCardValues.value.length) {
     uni.showToast({ title: '请先选择卡片', icon: 'none' })
@@ -326,24 +205,14 @@ async function handleSubmit() {
 
   submitting.value = true
   try {
-    const subscribeResult = appNotifyEnabled.value
-      ? await requestWechatSubscribeMessage(templateId.value, templateReady.value)
-      : undefined
     const res = await saveWarningConfigBatch({
       cardValues: selectedCardValues.value,
       configs,
     })
-    wechatBound.value = Boolean(res.wechatBound)
-    wechatBindText.value = res.wechatBindText || (res.wechatBound ? '已绑定' : '未绑定')
-    const shouldGuideSettings = Boolean(subscribeResult && shouldGuideWechatSubscribeSettings(subscribeResult))
     uni.showModal({
       title: res.failCount > 0 ? '部分配置成功' : '配置成功',
-      content: buildResultText(res, subscribeResult),
+      content: buildResultText(res),
       showCancel: false,
-      success: () => {
-        if (shouldGuideSettings)
-          guideWechatSubscribeSettings(subscribeResult!)
-      },
     })
   }
   catch (error) {
@@ -359,7 +228,7 @@ function buildResultText(res: {
   successCount?: number
   failCount?: number
   failItems?: Array<{ cardValue: string, reason: string }>
-}, subscribeResult?: Awaited<ReturnType<typeof requestWechatSubscribeMessage>>) {
+}) {
   const lines = [
     `批次号：${res.batchNo || '-'}`,
     `成功卡数：${res.successCount || 0} 张`,
@@ -370,16 +239,13 @@ function buildResultText(res: {
     lines.push('')
     lines.push(...failItems.slice(0, 3).map(item => `${item.cardValue}：${item.reason}`))
   }
-  const subscribeMessage = subscribeResult && !shouldGuideWechatSubscribeSettings(subscribeResult)
-    ? wechatSubscribeSaveMessage(subscribeResult)
-    : ''
-  if (subscribeMessage) {
-    lines.push('')
-    lines.push(subscribeMessage)
-  }
   return lines.join('\n')
 }
 
+function goMessageCenter() {
+  uni.navigateTo({ url: RouterPath.Message })
+}
+
 function getErrorMessage(error: unknown, fallback: string) {
   if (error && typeof error === 'object') {
     const data = error as { msg?: unknown, message?: unknown, errMsg?: unknown }
@@ -404,7 +270,6 @@ watch(selectedCardValues, (values) => {
 
 onMounted(() => {
   void loadCards()
-  void loadMeta()
 })
 </script>
 
@@ -419,11 +284,11 @@ onMounted(() => {
             </view>
             <view class="min-w-0">
               <text class="biz-hero__title">流量预警</text>
-              <text class="biz-hero__sub">选择卡片后统一配置微信订阅提醒与流量阈值</text>
+              <text class="biz-hero__sub">选择卡片后统一配置流量预警阈值，预警通知在消息中心查看</text>
             </view>
           </view>
-          <wd-tag :type="templateReady ? 'primary' : 'warning'" variant="plain">
-            {{ subscribeText }}
+          <wd-tag type="primary" variant="plain">
+            账号级提醒设置
           </wd-tag>
         </view>
 
@@ -432,70 +297,12 @@ onMounted(() => {
             <text class="biz-stat__label">已选卡片</text>
             <text class="biz-stat__value">{{ selectedText }} 张</text>
           </view>
-          <view class="biz-stat">
-            <text class="biz-stat__label">提醒方式</text>
-            <text class="biz-stat__value">{{ appNotifyEnabled ? '微信订阅消息' : '暂不提醒' }}</text>
-          </view>
-          <view class="biz-stat">
-            <text class="biz-stat__label">微信绑定</text>
-            <text class="biz-stat__value">{{ wechatBindText }}</text>
-          </view>
-          <view class="biz-stat">
-            <text class="biz-stat__label">订阅状态</text>
-            <text class="biz-stat__value">{{ appNotifyEnabled ? '开启' : '关闭' }}</text>
-          </view>
         </view>
       </view>
 
-      <wd-card custom-class="!mx-0 !mb-0" custom-content-class="!p-24rpx">
-        <view class="flex items-start justify-between gap-20rpx">
-          <view class="min-w-0 flex items-start gap-16rpx">
-            <view class="h-56rpx w-56rpx center shrink-0 rounded-18rpx bg-#eff6ff text-#2563eb">
-              <view class="i-carbon-notification text-32rpx" />
-            </view>
-            <view class="min-w-0">
-              <text class="block text-29rpx text-ink font-800">小程序消息订阅</text>
-              <text class="mt-6rpx block text-23rpx text-muted leading-34rpx">
-                {{ notificationDescription }}
-              </text>
-            </view>
-          </view>
-          <wd-switch v-model="appNotifyEnabled" :disabled="notificationSubmitting" />
-        </view>
-
-        <view class="grid grid-cols-2 mt-20rpx gap-12rpx">
-          <view class="rounded-16rpx bg-#f8fafc p-16rpx">
-            <text class="block text-22rpx text-muted">通知范围</text>
-            <text class="mt-6rpx block text-24rpx text-ink font-700">消息中心 + 微信提醒</text>
-          </view>
-          <view class="rounded-16rpx bg-#f8fafc p-16rpx">
-            <text class="block text-22rpx text-muted">其他通知</text>
-            <text class="mt-6rpx block text-24rpx text-ink font-700">不受影响</text>
-          </view>
-        </view>
-
-        <view v-if="appNotifyEnabled && !wechatBound" class="mt-18rpx">
-          <wd-button type="primary" plain block :loading="binding" @click="handleBindWechat">
-            绑定当前微信
-          </wd-button>
-        </view>
-        <wd-button
-          class="mt-16rpx"
-          size="small"
-          type="primary"
-          plain
-          block
-          custom-class="biz-mini-action-btn"
-          :loading="notificationSubmitting"
-          :disabled="!selectedCardValues.length"
-          @click="syncBatchNotify"
-        >
-          <view class="biz-mini-action-btn__inner">
-            <view class="i-carbon-checkmark-outline biz-mini-action-btn__icon biz-mini-action-btn__icon--blue" />
-            <text class="biz-mini-action-btn__text">应用到已选卡片</text>
-          </view>
-        </wd-button>
-      </wd-card>
+      <wd-cell-group border>
+        <wd-cell title="消息中心" label="预警触发后可查看站内通知" value="查看消息" is-link @click="goMessageCenter" />
+      </wd-cell-group>
 
       <wd-card custom-class="!mx-0 !mb-0" custom-content-class="!p-0">
         <template #title>
@@ -689,10 +496,10 @@ onMounted(() => {
     <view class="biz-paybar__inner">
       <view class="biz-paybar__summary">
         <text class="biz-paybar__label">已选 {{ selectedCardValues.length }} 张</text>
-        <text class="biz-paybar__value">{{ notificationSummary }}</text>
+        <text class="biz-paybar__value">预警通知在消息中心查看</text>
       </view>
       <wd-button type="primary" block custom-class="biz-paybar-btn" :loading="submitting" :disabled="!canSubmit" @click="handleSubmit">
-        {{ submitButtonText }}
+        保存预警配置
       </wd-button>
     </view>
   </view>
diff --git a/app/src/pages/business/views/workOrder/index.test.ts b/app/src/pages/business/views/workOrder/index.test.ts
new file mode 100644
index 0000000..7b7a0d6
--- /dev/null
+++ b/app/src/pages/business/views/workOrder/index.test.ts
@@ -0,0 +1,22 @@
+import { readFileSync } from 'node:fs'
+import { describe, expect, it } from 'vitest'
+
+describe('工单列表筛选布局', () => {
+  const source = readFileSync(new URL('./index.vue', import.meta.url), 'utf8')
+
+  it('六个状态使用一行标签而非换行按钮', () => {
+    expect(source).toContain('<wd-tabs v-model="status" :slidable-num="6"')
+    expect(source).toContain('<wd-tab v-for="option in statusOptions"')
+    expect(source).not.toContain('<wd-button v-for="option in statusOptions"')
+  })
+
+  it('搜索和筛选在同一区块且切换仍刷新列表', () => {
+    const searchEnd = source.indexOf('@clear="loadWorkOrders()"')
+    const tabsStart = source.indexOf('<wd-tabs v-model="status"')
+    expect(searchEnd).toBeGreaterThan(0)
+    expect(tabsStart).toBeGreaterThan(searchEnd)
+    expect(source.slice(searchEnd, tabsStart)).not.toContain('</wd-card>')
+    expect(source).toContain('watch(status, () => {')
+    expect(source).toContain('currentStatus: status.value || undefined')
+  })
+})
diff --git a/app/src/pages/business/views/workOrder/index.vue b/app/src/pages/business/views/workOrder/index.vue
index 33495a7..44c1fb0 100644
--- a/app/src/pages/business/views/workOrder/index.vue
+++ b/app/src/pages/business/views/workOrder/index.vue
@@ -1,4 +1,5 @@
 <script lang="ts" setup>
+import { onPullDownRefresh, onReachBottom, onShow } from '@dcloudio/uni-app'
 import type { AppWorkOrder } from '../api/workOrder'
 import { getWorkOrderList } from '../api/workOrder'
 import RouterPath from '@/constant/RouterPath'
@@ -8,21 +9,42 @@ import { hasAnyFeature } from '@/utils/permission'
 definePage({
   style: {
     navigationBarTitleText: '工单列表',
+    enablePullDownRefresh: true,
   },
 })
 
 const userStore = useUserStore()
 const loading = ref(false)
 const noPermission = ref(false)
+const loadError = ref('')
 const keyword = ref('')
 const workOrders = ref<AppWorkOrder[]>([])
 const total = ref(0)
+const page = ref(1)
+const status = ref(0)
+const scope = ref<'all' | 'submitted' | 'received'>('all')
+const canReceive = computed(() => ['workorder:reply', 'workorder:resolve', 'workorder:transfer', 'workorder:close'].some(feature => hasAnyFeature(userStore.userInfo, feature)))
+const statusOptions = [
+  { label: '全部', value: 0 },
+  { label: '已分派', value: 1 },
+  { label: '处理中', value: 2 },
+  { label: '待确认', value: 3 },
+  { label: '已完结', value: 4 },
+  { label: '已取消', value: 5 },
+]
+let requestVersion = 0
+let initialized = false
+const hasMore = computed(() => workOrders.value.length < total.value)
 const canViewWorkOrder = computed(() => hasAnyFeature(userStore.userInfo, 'workorder:list'))
 const canCreateWorkOrder = computed(() => hasAnyFeature(userStore.userInfo, 'workorder:create'))
 const canViewWorkOrderDetail = computed(() => hasAnyFeature(userStore.userInfo, 'workorder:detail'))
 const canEnterWorkOrder = computed(() => canViewWorkOrder.value || canCreateWorkOrder.value)
 
-async function loadWorkOrders() {
+async function loadWorkOrders(append = false) {
+  if (append && (loading.value || !hasMore.value))
+    return
+  const version = ++requestVersion
+  const nextPage = append ? page.value + 1 : 1
   if (!canViewWorkOrder.value) {
     noPermission.value = !canCreateWorkOrder.value
     workOrders.value = []
@@ -30,23 +52,31 @@ async function loadWorkOrders() {
     return
   }
   loading.value = true
+  loadError.value = ''
   noPermission.value = false
   try {
     const res = await getWorkOrderList({
-      page: 1,
-      pageSize: 50,
+      scope: scope.value,
+      page: nextPage,
+      pageSize: 20,
+      currentStatus: status.value || undefined,
       keyword: keyword.value.trim() || undefined,
     })
-    workOrders.value = res.items || []
+    if (version !== requestVersion)
+      return
+    workOrders.value = append ? [...workOrders.value, ...(res.items || [])] : (res.items || [])
     total.value = res.total || 0
+    page.value = nextPage
   }
   catch (error) {
-    workOrders.value = []
-    total.value = 0
-    uni.showToast({ title: getErrorMessage(error, '工单加载失败'), icon: 'none' })
+    if (version !== requestVersion)
+      return
+    loadError.value = getErrorMessage(error, '工单加载失败，请重试')
+    uni.showToast({ title: loadError.value, icon: 'none' })
   }
   finally {
-    loading.value = false
+    if (version === requestVersion)
+      loading.value = false
   }
 }
 
@@ -103,7 +133,12 @@ function getErrorMessage(error: unknown, fallback: string) {
   return fallback
 }
 
-onMounted(async () => {
+onShow(async () => {
+  if (initialized) {
+    void loadWorkOrders()
+    return
+  }
+  initialized = true
   await userStore.fetchUserInfo().catch(() => undefined)
   if (!canEnterWorkOrder.value) {
     noPermission.value = true
@@ -112,93 +147,137 @@ onMounted(async () => {
   }
   void loadWorkOrders()
 })
+onPullDownRefresh(async () => {
+  try {
+    await loadWorkOrders()
+  }
+  finally {
+    uni.stopPullDownRefresh()
+  }
+})
+onReachBottom(() => {
+  void loadWorkOrders(true)
+})
+watch(scope, () => {
+  workOrders.value = []
+  total.value = 0
+  void loadWorkOrders()
+})
+watch(status, () => {
+  void loadWorkOrders()
+})
 </script>
 
 <template>
-    <view class="min-h-screen p-24rpx pb-40rpx">
-      <view class="mx-auto max-w-920rpx flex flex-col gap-20rpx">
-        <wd-card v-if="noPermission" custom-class="!mx-0 !mb-0">
-          <view class="text-26rpx text-#64748b leading-38rpx">
-            当前账号不能使用工单。
+  <view class="min-h-screen bg-#f5f7fa p-24rpx pb-48rpx">
+    <view class="mx-auto max-w-920rpx flex flex-col gap-20rpx">
+      <wd-card v-if="noPermission" custom-class="!mx-0 !mb-0">
+        <view class="text-26rpx text-#64748b leading-38rpx">
+          当前账号不能使用工单。
+        </view>
+      </wd-card>
+
+      <template v-else>
+        <wd-card custom-class="!mx-0 !mb-0">
+          <view class="flex items-center justify-between gap-20rpx">
+            <view class="min-w-0 flex-1">
+              <view class="text-34rpx text-#111827 font-700">
+                我的工单
+              </view>
+              <view class="mt-8rpx text-24rpx text-#64748b">
+                {{ canViewWorkOrder ? `共 ${total} 条，按最新提交时间排序` : '当前账号仅可提交新工单' }}
+              </view>
+            </view>
+            <wd-button v-if="canCreateWorkOrder" size="small" type="primary" custom-class="!shrink-0" @click="handleCreate">
+              提交工单
+            </wd-button>
           </view>
         </wd-card>
 
-        <template v-else>
-          <wd-card custom-class="!mx-0 !mb-0">
-            <view class="flex items-center justify-between gap-20rpx">
-              <view class="min-w-0">
-                <view class="text-34rpx text-#111827 font-900">
-                  我的工单
-                </view>
-                <view class="mt-8rpx text-24rpx text-#64748b">
-                  {{ canViewWorkOrder ? `共 ${total} 条，按最新提交时间排序` : '当前账号仅可提交新工单' }}
-                </view>
-              </view>
-              <wd-button size="small" type="primary" :disabled="!canCreateWorkOrder" @click="handleCreate">
-                新增
-              </wd-button>
+        <wd-card v-if="!canViewWorkOrder && canCreateWorkOrder" custom-class="!mx-0 !mb-0">
+          <view class="grid gap-18rpx text-center">
+            <view class="mx-auto h-72rpx w-72rpx center rounded-24rpx bg-#eff6ff text-#2563eb">
+              <view class="i-carbon-chat text-42rpx" />
             </view>
-          </wd-card>
-
-          <wd-card v-if="!canViewWorkOrder && canCreateWorkOrder" custom-class="!mx-0 !mb-0">
-            <view class="grid gap-18rpx text-center">
-              <view class="mx-auto h-72rpx w-72rpx center rounded-24rpx bg-#eff6ff text-#2563eb">
-                <view class="i-carbon-chat text-42rpx" />
-              </view>
-              <view class="text-28rpx text-#111827 font-800">
-                可以提交新工单
-              </view>
-              <view class="text-24rpx text-#64748b leading-36rpx">
-                当前角色未配置工单列表权限，提交后可由平台客服继续处理。
-              </view>
-              <wd-button type="primary" block @click="handleCreate">
-                新增工单
-              </wd-button>
+            <view class="text-28rpx text-#111827 font-800">
+              可以提交新工单
             </view>
-          </wd-card>
-
-          <wd-card v-if="canViewWorkOrder" custom-class="!mx-0 !mb-0" custom-content-class="!p-18rpx">
-            <wd-search
-              v-model="keyword"
-              placeholder="搜索工单编号、标题或内容"
-              hide-cancel
-              @search="loadWorkOrders"
-              @clear="loadWorkOrders"
-            />
-          </wd-card>
-
-          <wd-card v-if="canViewWorkOrder && loading" custom-class="!mx-0 !mb-0">
-            <wd-skeleton theme="paragraph" />
-          </wd-card>
-
-          <wd-card v-else-if="canViewWorkOrder && !workOrders.length" custom-class="!mx-0 !mb-0">
-            <view class="py-40rpx text-center text-26rpx text-#64748b">
-              暂无工单
+            <view class="text-24rpx text-#64748b leading-36rpx">
+              当前角色未配置工单列表权限，提交后可由平台客服继续处理。
             </view>
-          </wd-card>
+            <wd-button type="primary" block @click="handleCreate">
+              提交工单
+            </wd-button>
+          </view>
+        </wd-card>
 
-          <wd-card v-else-if="canViewWorkOrder" custom-class="!mx-0 !mb-0" custom-content-class="!p-0">
-            <wd-cell-group :border="false">
-              <wd-cell
-                v-for="item in workOrders"
-                :key="item.woNo"
-                :title="item.title"
-                :label="`${item.woNo} · ${item.woTypeText || '工单'} · ${workOrderTime(item)}`"
-                :is-link="canViewWorkOrderDetail"
-                :clickable="canViewWorkOrderDetail"
-                center
-                custom-class="!min-h-132rpx"
-                custom-title-class="!text-28rpx !text-#111827 !font-800"
-                custom-label-class="!text-24rpx !text-#64748b"
-                @click="handleDetail(item)"
-              >
-                <wd-tag :type="tagType(item.statusType)" variant="plain">
+        <wd-tabs v-if="canViewWorkOrder && canReceive" v-model="scope">
+          <wd-tab name="all" title="全部相关" />
+          <wd-tab name="submitted" title="我提交的" />
+          <wd-tab name="received" title="我收到的" />
+        </wd-tabs>
+
+        <wd-card v-if="canViewWorkOrder" custom-class="!mx-0 !mb-0 !overflow-hidden" custom-content-class="!p-0">
+          <wd-search
+            v-model="keyword"
+            placeholder="搜索工单编号、标题或内容"
+            hide-cancel
+            custom-class="!px-20rpx !pt-20rpx !pb-8rpx"
+            @search="loadWorkOrders()"
+            @clear="loadWorkOrders()"
+          />
+          <wd-tabs v-model="status" :slidable-num="6" line-theme="normal" :line-width="16" :line-height="2" inactive-color="#64748b" custom-class="!bg-transparent [--wot-tabs-nav-item-padding:24rpx_0] [--wot-tabs-nav-item-font-size:24rpx]">
+            <wd-tab v-for="option in statusOptions" :key="option.value" :name="option.value" :title="option.label" />
+          </wd-tabs>
+        </wd-card>
+
+        <wd-card v-if="canViewWorkOrder && loading && !workOrders.length" custom-class="!mx-0 !mb-0">
+          <wd-skeleton theme="paragraph" />
+        </wd-card>
+
+        <wd-card v-else-if="canViewWorkOrder && loadError && !workOrders.length" custom-class="!mx-0 !mb-0">
+          <view class="py-24rpx text-center text-26rpx text-#64748b">
+            {{ loadError }}
+          </view>
+          <wd-button block type="primary" variant="plain" @click="loadWorkOrders()">
+            重新加载
+          </wd-button>
+        </wd-card>
+
+        <wd-card v-else-if="canViewWorkOrder && !workOrders.length" custom-class="!mx-0 !mb-0">
+          <view class="py-40rpx text-center text-26rpx text-#64748b">
+            暂无工单
+          </view>
+        </wd-card>
+
+        <view v-else-if="canViewWorkOrder" class="flex flex-col gap-20rpx">
+          <wd-card v-for="item in workOrders" :key="item.woNo" custom-class="!mx-0 !mb-0" custom-content-class="!p-24rpx">
+            <view class="flex items-start justify-between gap-20rpx">
+              <text class="min-w-0 flex-1 break-all text-28rpx text-#0f172a font-600 leading-42rpx">{{ item.title }}</text>
+              <view class="shrink-0">
+                <wd-tag :type="tagType(item.statusType)" variant="light">
                   {{ item.currentStatusText || '处理中' }}
                 </wd-tag>
-              </wd-cell>
-            </wd-cell-group>
+              </view>
+            </view>
+            <view class="mt-12rpx text-24rpx text-#64748b">
+              {{ item.woTypeText || '工单' }} · {{ workOrderTime(item) }}
+            </view>
+            <view class="mt-24rpx flex items-center justify-between gap-16rpx border-t border-#f1f5f9 pt-16rpx">
+              <text class="min-w-0 flex-1 break-all text-22rpx text-#94a3b8">{{ item.woNo }}</text>
+              <wd-button v-if="canViewWorkOrderDetail" type="primary" variant="text" size="small" custom-class="!shrink-0" @click="handleDetail(item)">
+                {{ [4, 5].includes(item.currentStatus) ? '查看详情' : '沟通跟进' }}
+              </wd-button>
+            </view>
           </wd-card>
-        </template>
-      </view>
+        </view>
+        <wd-button v-if="canViewWorkOrder && workOrders.length && hasMore" block type="info" :loading="loading" @click="loadWorkOrders(true)">
+          加载更多
+        </wd-button>
+        <view v-else-if="canViewWorkOrder && workOrders.length" class="py-16rpx text-center text-24rpx text-#94a3b8">
+          已显示全部工单
+        </view>
+      </template>
     </view>
+  </view>
 </template>
diff --git a/app/src/pages/business/views/workOrderCreate/index.test.ts b/app/src/pages/business/views/workOrderCreate/index.test.ts
new file mode 100644
index 0000000..6819935
--- /dev/null
+++ b/app/src/pages/business/views/workOrderCreate/index.test.ts
@@ -0,0 +1,117 @@
+import { readFileSync } from 'node:fs'
+import { createContext, runInContext } from 'node:vm'
+import { ModuleKind, ScriptTarget, transpileModule } from 'typescript'
+import { describe, expect, it, vi } from 'vitest'
+
+const source = readFileSync(new URL('./index.vue', import.meta.url), 'utf8')
+
+function harness(create = vi.fn().mockResolvedValue({ workOrder: { woNo: 'WO-1' } })) {
+  const context = createContext({
+    exports: {},
+    require: (name: string) => {
+      if (name === '@/store/user')
+        return { useUserStore: () => ({ userInfo: { phone: '13800008000' } }) }
+      if (name === '../api/workOrder')
+        return { createWorkOrder: create }
+      if (name === '@/utils/permission')
+        return { hasAnyFeature: () => true }
+      return {}
+    },
+    uni: { showToast: vi.fn() },
+    setTimeout: vi.fn(),
+    ref: (value: unknown) => ({ value }),
+    reactive: (value: unknown) => value,
+    computed: (getter: () => unknown) => ({ get value() { return getter() } }),
+    definePage: vi.fn(),
+    onLoad: vi.fn(),
+    onMounted: vi.fn(),
+  })
+  const script = source.match(/<script[^>]*>([\s\S]*?)<\/script>/)?.[1]
+  if (!script)
+    throw new Error('未找到新建工单脚本')
+  runInContext(transpileModule(script, { compilerOptions: { module: ModuleKind.CommonJS, target: ScriptTarget.ES2020 } }).outputText, context)
+  return <Result>(expression: string) => runInContext(expression, context) as Result
+}
+
+describe('工单类型选择入口', () => {
+  it('使用可见单元格打开单列选择器', () => {
+    expect(source).toContain('title="工单类型"')
+    expect(source).toContain('@click="openTypePicker"')
+    expect(source).toContain('v-model:visible="typePickerOpen"')
+    expect(source).toContain(':columns="[problemTypes]"')
+    const evaluate = harness()
+    evaluate('openTypePicker()')
+    expect(evaluate('typePickerOpen.value')).toBe(true)
+    evaluate('formData.woType = [3]')
+    expect(evaluate('typeText.value')).toBe('订单问题')
+  })
+
+  it('关联业务及提交期间不允许更改类型', () => {
+    for (const guard of ['relatedId.value = 1', 'submitting.value = true', 'submitted.value = true']) {
+      const evaluate = harness()
+      evaluate(guard)
+      evaluate('openTypePicker()')
+      expect(evaluate('typePickerOpen.value')).toBe(false)
+    }
+  })
+})
+
+describe('新建工单表单与提交', () => {
+  it('默认填入账号手机号，允许修改后随工单提交', async () => {
+    const create = vi.fn().mockResolvedValue({ workOrder: {} })
+    const evaluate = harness(create)
+    expect(source).toContain('<wd-form-item title="创建人手机号"')
+    expect(evaluate('formData.creatorPhone')).toBe('13800008000')
+    evaluate('formData.title = "标题"; formData.content = "描述"; formData.creatorPhone = " 13900009000 "')
+    await evaluate<Promise<void>>('handleSubmit()')
+    expect(create).toHaveBeenCalledWith(expect.objectContaining({ creatorPhone: '13900009000' }))
+    expect(evaluate('userStore.userInfo.phone')).toBe('13800008000')
+  })
+
+  it.each(['', ' ', '123', '12800138000', '138001380000', '1380013800a'])('阻止无效手机号：%s', async (phone) => {
+    const create = vi.fn()
+    const evaluate = harness(create)
+    evaluate(`formData.title = "标题"; formData.content = "描述"; formData.creatorPhone = ${JSON.stringify(phone)}`)
+    await evaluate<Promise<void>>('handleSubmit()')
+    expect(create).not.toHaveBeenCalled()
+    expect(evaluate('submitting.value')).toBe(false)
+  })
+
+  it('标题通过表单项显示，提交成功后禁止修改附件', () => {
+    expect(source).toContain('<wd-form-item title="工单标题"')
+    expect(source).not.toContain('label-width=')
+    expect(source).toContain('<WorkOrderAttachments v-model="attachmentUrls" :disabled="submitting || submitted"')
+  })
+
+  it.each([0, 1, 2, 3, 4, 5])('正确提交工单类型 %s、文字与附件', async (type) => {
+    const create = vi.fn().mockResolvedValue({ workOrder: { woNo: 'WO-1' } })
+    const evaluate = harness(create)
+    evaluate(`formData.woType = [${type}]; formData.title = ' 标题 '; formData.content = ' 描述 '; attachmentUrls.value = ['file.pdf']`)
+    await evaluate<Promise<void>>('handleSubmit()')
+    expect(create).toHaveBeenCalledWith({ woType: type, title: '标题', content: '描述', creatorPhone: '13800008000', attachmentUrls: ['file.pdf'], relatedId: undefined })
+    await evaluate<Promise<void>>('handleSubmit()')
+    expect(create).toHaveBeenCalledTimes(1)
+  })
+
+  it.each(['formData.woType = []', 'formData.woType = [99]', 'formData.title = " "', 'formData.content = " "', 'uploading.value = true'])('阻止无效提交：%s', async (condition) => {
+    const create = vi.fn()
+    const evaluate = harness(create)
+    evaluate('formData.title = "标题"; formData.content = "描述"')
+    evaluate(condition)
+    await evaluate<Promise<void>>('handleSubmit()')
+    expect(create).not.toHaveBeenCalled()
+  })
+
+  it('提交失败保留表单并可重试', async () => {
+    const create = vi.fn().mockRejectedValueOnce(new Error('network')).mockResolvedValue({ workOrder: {} })
+    const evaluate = harness(create)
+    evaluate('formData.title = "标题"; formData.content = "描述"; attachmentUrls.value = ["file.pdf"]')
+    await evaluate<Promise<void>>('handleSubmit()')
+    expect(evaluate('formData.title')).toBe('标题')
+    expect(evaluate('attachmentUrls.value.length')).toBe(1)
+    expect(evaluate('submitting.value')).toBe(false)
+    expect(evaluate('submitted.value')).toBe(false)
+    await evaluate<Promise<void>>('handleSubmit()')
+    expect(create).toHaveBeenCalledTimes(2)
+  })
+})
diff --git a/app/src/pages/business/views/workOrderCreate/index.vue b/app/src/pages/business/views/workOrderCreate/index.vue
index 2aefbb7..d7a549b 100644
--- a/app/src/pages/business/views/workOrderCreate/index.vue
+++ b/app/src/pages/business/views/workOrderCreate/index.vue
@@ -2,9 +2,8 @@
 import { createWorkOrder } from '../api/workOrder'
 import RouterPath from '@/constant/RouterPath'
 import { useUserStore } from '@/store/user'
-import { useTokenStore } from '@/store/token'
+import WorkOrderAttachments from '@/components/WorkOrderAttachments.vue'
 import { hasAnyFeature } from '@/utils/permission'
-import { getEnvBaseUrl } from '@/utils'
 
 definePage({
   style: {
@@ -24,14 +23,27 @@ const problemTypes = [
 const userStore = useUserStore()
 const noPermission = ref(false)
 const submitting = ref(false)
+const submitted = ref(false)
 const uploading = ref(false)
 const attachmentUrls = ref<string[]>([])
-const attachmentNames = ref<string[]>([])
+const relatedId = ref<number>()
+const typePickerOpen = ref(false)
 const canCreateWorkOrder = computed(() => hasAnyFeature(userStore.userInfo, 'workorder:create'))
 const formData = reactive({
   woType: [0],
   title: '',
   content: '',
+  creatorPhone: userStore.userInfo?.phone || '',
+})
+
+onLoad((query) => {
+  const type = Number(query?.woType)
+  const id = Number(query?.relatedId)
+  if ([0, 3].includes(type) && Number.isSafeInteger(id) && id > 0) {
+    formData.woType = [type]
+    relatedId.value = id
+    formData.content = String(query?.context || '').slice(0, 500)
+  }
 })
 
 const typeText = computed(() => {
@@ -39,107 +51,27 @@ const typeText = computed(() => {
   return problemTypes.find(item => item.value === value)?.label || '卡片问题'
 })
 
-function chooseAttachment() {
-  // #ifdef H5
-  const input = document.createElement('input')
-  input.type = 'file'
-  input.accept = '*/*'
-  input.onchange = (event) => {
-    const file = (event.target as HTMLInputElement).files?.[0]
-    if (file)
-      void uploadAttachment(file, file.name)
-  }
-  input.click()
-  return
-  // #endif
-
-  const choose = (uni as any).chooseFile || (uni as any).chooseMessageFile
-  if (typeof choose !== 'function') {
-    uni.showToast({ title: '当前平台暂不支持选择附件', icon: 'none' })
+function openTypePicker() {
+  if (relatedId.value || submitting.value || submitted.value)
     return
-  }
-  choose({
-    count: 1,
-    type: 'all',
-    success: (res: any) => {
-      const file = res.tempFiles?.[0] || res.tempFilePaths?.[0]
-      const filePath = file?.path || file?.tempFilePath || file
-      const fileName = file?.name || String(filePath || '').split('/').pop() || '附件'
-      if (filePath)
-        void uploadAttachment(filePath, fileName)
-    },
-  })
-}
-
-async function uploadAttachment(filePath: string | File, fileName: string) {
-  uploading.value = true
-  try {
-    if (typeof filePath !== 'string') {
-      const token = useTokenStore().updateNowTime().validToken
-      const form = new FormData()
-      form.append('file', filePath, fileName)
-      form.append('fileType', 'file')
-      const response = await fetch(`${getEnvBaseUrl()}/work-order/upload`, {
-        method: 'POST',
-        headers: token ? { Authorization: `Bearer ${token}` } : undefined,
-        body: form,
-      })
-      const body = await response.json()
-      if (!response.ok || Number(body.code) !== 0)
-        throw new Error(body.message || body.msg || '附件上传失败')
-      const data = body.data || body
-      const url = data.url || data.path
-      if (!url)
-        throw new Error('上传接口未返回文件地址')
-      attachmentUrls.value.push(url)
-      attachmentNames.value.push(fileName)
-      return
-    }
-
-    await new Promise<void>((resolve, reject) => {
-      uni.uploadFile({
-        url: `${getEnvBaseUrl()}/work-order/upload`,
-        filePath,
-        name: 'file',
-        formData: { fileType: 'file' },
-        success: (res) => {
-          try {
-            const body = JSON.parse(res.data)
-            const data = body.data || body
-            const url = data.url || data.path
-            if (!url)
-              throw new Error('上传接口未返回文件地址')
-            attachmentUrls.value.push(url)
-            attachmentNames.value.push(fileName)
-            resolve()
-          }
-          catch (error) {
-            reject(error)
-          }
-        },
-        fail: reject,
-      })
-    })
-  }
-  catch (error) {
-    uni.showToast({ title: getErrorMessage(error, '附件上传失败'), icon: 'none' })
-  }
-  finally {
-    uploading.value = false
-  }
-}
-function removeAttachment(index: number) {
-  attachmentUrls.value.splice(index, 1)
-  attachmentNames.value.splice(index, 1)
+  typePickerOpen.value = true
 }
 
 async function handleSubmit() {
+  if (submitting.value || submitted.value || uploading.value)
+    return
   if (!canCreateWorkOrder.value) {
     uni.showToast({ title: '暂无提交工单权限', icon: 'none' })
     return
   }
   const title = formData.title.trim()
   const content = formData.content.trim()
+  const creatorPhone = formData.creatorPhone.trim()
+  const woType = Number(formData.woType[0])
+  if (!problemTypes.some(item => item.value === woType)) {
+    uni.showToast({ title: '请选择有效的工单类型', icon: 'none' })
+    return
+  }
   if (!title) {
     uni.showToast({ title: '请输入工单标题', icon: 'none' })
     return
@@ -149,24 +81,33 @@ async function handleSubmit() {
     return
   }
 
+  if (!/^1[3-9]\d{9}$/.test(creatorPhone)) {
+    uni.showToast({ title: creatorPhone ? '请输入正确的手机号' : '请输入创建人手机号', icon: 'none' })
+    return
+  }
+
   submitting.value = true
   try {
     const res = await createWorkOrder({
-      woType: Number(formData.woType[0] ?? 0),
+      woType,
       title,
       content,
+      creatorPhone,
       attachmentUrls: attachmentUrls.value,
+      relatedId: relatedId.value,
     })
     const woNo = res.workOrder?.woNo || ''
+    submitted.value = true
     uni.showToast({ title: '工单已提交', icon: 'success' })
     setTimeout(() => {
-      if (woNo) {
+      if (woNo && hasAnyFeature(userStore.userInfo, 'workorder:detail')) {
         uni.redirectTo({
           url: `${RouterPath.BusinessViewsWorkOrderDetail}?woNo=${encodeURIComponent(woNo)}`,
+          fail: () => uni.navigateBack({ fail: () => uni.switchTab({ url: RouterPath.Business }) }),
         })
       }
       else {
-        uni.navigateBack()
+        uni.navigateBack({ fail: () => uni.switchTab({ url: RouterPath.Business }) })
       }
     }, 500)
   }
@@ -195,6 +136,8 @@ function getErrorMessage(error: unknown, fallback: string) {
 
 onMounted(async () => {
   await userStore.fetchUserInfo().catch(() => undefined)
+  if (!formData.creatorPhone)
+    formData.creatorPhone = userStore.userInfo?.phone || ''
   if (!canCreateWorkOrder.value) {
     noPermission.value = true
     uni.showToast({ title: '当前账号不能提交工单', icon: 'none' })
@@ -203,91 +146,107 @@ onMounted(async () => {
 </script>
 
 <template>
-    <view class="min-h-screen p-24rpx pb-40rpx">
-      <view class="mx-auto max-w-920rpx flex flex-col gap-20rpx">
-        <wd-card v-if="noPermission" custom-class="!mx-0 !mb-0">
-          <view class="text-26rpx text-#64748b leading-38rpx">
-            当前账号不能提交工单。
+  <view class="min-h-screen bg-#f5f7fa p-24rpx pb-48rpx">
+    <view class="mx-auto max-w-920rpx flex flex-col gap-20rpx">
+      <wd-card v-if="noPermission" custom-class="!mx-0 !mb-0">
+        <view class="text-26rpx text-#64748b leading-38rpx">
+          当前账号不能提交工单。
+        </view>
+      </wd-card>
+
+      <template v-else>
+        <wd-card custom-class="!mx-0 !mb-0">
+          <view class="flex items-start gap-16rpx">
+            <view class="h-64rpx w-64rpx center shrink-0 rounded-20rpx bg-#eff6ff text-#2563eb">
+              <view class="i-carbon-chat text-36rpx" />
+            </view>
+            <view class="min-w-0 flex-1">
+              <text class="block text-34rpx text-#111827 font-700">提交工单</text>
+              <text class="mt-8rpx block text-24rpx text-#64748b leading-36rpx">
+                提交后由服务部门跟进，可在工单详情查看进度
+              </text>
+            </view>
           </view>
         </wd-card>
 
-        <template v-else>
-          <wd-card custom-class="!mx-0 !mb-0">
-            <view class="flex items-start gap-16rpx">
-              <view class="h-64rpx w-64rpx center shrink-0 rounded-20rpx bg-#eff6ff text-#2563eb">
-                <view class="i-carbon-chat text-36rpx" />
-              </view>
-              <view class="min-w-0 flex-1">
-                <text class="block text-34rpx text-#111827 font-900">提交工单</text>
-                <text class="mt-8rpx block text-24rpx text-#64748b leading-36rpx">
-                  工单会分派到平台服务部门处理
-                </text>
-              </view>
-            </view>
-          </wd-card>
-
-          <wd-form :model="formData" error-type="toast">
+        <wd-form :model="formData" error-type="toast">
+          <view class="flex flex-col gap-20rpx">
             <wd-card custom-class="!mx-0 !mb-0" custom-content-class="!p-0">
               <template #title>
                 <view class="h-88rpx flex items-center justify-between">
-                  <text class="text-30rpx text-#111827 font-900">基础信息</text>
+                  <text class="text-28rpx text-#0f172a font-600">基础信息</text>
                   <wd-tag type="primary" variant="plain">
                     {{ typeText }}
                   </wd-tag>
                 </view>
               </template>
               <wd-cell-group :border="false">
-                <wd-picker
-                  v-model="formData.woType"
-                  label="问题类型"
-                  label-width="96px"
-                  :columns="problemTypes"
-                  value-key="value"
-                  label-key="label"
-                />
-                <wd-input
-                  v-model="formData.title"
-                  label="工单标题"
-                  label-width="96px"
-                  placeholder="请输入简短标题"
-                  clearable
+                <wd-cell
+                  title="工单类型"
+                  :value="typeText"
+                  :label="relatedId ? '已关联业务，类型不可更改' : '请选择本次工单的问题分类'"
+                  :is-link="!relatedId && !submitting && !submitted"
+                  center
+                  custom-title-class="!text-28rpx !text-#334155"
+                  custom-value-class="!text-26rpx !text-#2563eb"
+                  @click="openTypePicker"
                 />
+                <wd-form-item title="工单标题" prop="title" required title-width="96px" custom-title-class="!text-28rpx !text-#334155">
+                  <wd-input
+                    v-model="formData.title"
+                    :disabled="submitting || submitted"
+                    placeholder="请输入简短标题"
+                    :maxlength="100"
+                    compact
+                    clearable
+                  />
+                </wd-form-item>
+                <wd-form-item title="创建人手机号" prop="creatorPhone" required title-width="96px" custom-title-class="!text-28rpx !text-#334155">
+                  <wd-input
+                    v-model="formData.creatorPhone"
+                    :disabled="submitting || submitted"
+                    type="number"
+                    placeholder="请输入创建人手机号"
+                    :maxlength="11"
+                    compact
+                    clearable
+                  />
+                </wd-form-item>
               </wd-cell-group>
             </wd-card>
 
             <wd-card custom-class="!mx-0 !mb-0">
               <template #title>
                 <view class="h-88rpx flex items-center">
-                  <text class="text-30rpx text-#111827 font-900">问题描述</text>
+                  <text class="text-28rpx text-#0f172a font-600">问题描述</text>
                 </view>
               </template>
               <wd-textarea
                 v-model="formData.content"
+                :disabled="submitting || submitted"
                 placeholder="请描述问题现象、发生时间和已尝试的处理方式"
-                :maxlength="500"
+                :maxlength="2000"
                 show-word-limit
               />
-              <view class="mt-20rpx flex items-center justify-between">
-                <text class="text-24rpx text-#64748b">附件（可选）</text>
-                <wd-button size="small" type="info" :loading="uploading" @click="chooseAttachment">选择附件</wd-button>
-              </view>
-              <view v-if="attachmentNames.length" class="mt-16rpx flex flex-col gap-12rpx">
-                <view
-                  v-for="(name, index) in attachmentNames"
-                  :key="name + index"
-                  class="flex items-center justify-between rounded-12rpx bg-#f8fafc px-16rpx py-12rpx"
-                >
-                  <text class="min-w-0 flex-1 truncate text-24rpx text-#334155">{{ name }}</text>
-                  <wd-button size="small" type="info" plain @click="removeAttachment(index)">移除</wd-button>
-                </view>
+              <view class="mt-20rpx">
+                <WorkOrderAttachments v-model="attachmentUrls" :disabled="submitting || submitted" @uploading="uploading = $event" />
               </view>
             </wd-card>
-          </wd-form>
+          </view>
+        </wd-form>
 
-          <wd-button block type="primary" :loading="submitting" :disabled="!canCreateWorkOrder || uploading" @click="handleSubmit">
-            提交工单
-          </wd-button>
-        </template>
-      </view>
+        <wd-button block type="primary" :round="false" :loading="submitting" :disabled="!canCreateWorkOrder || submitting || uploading || submitted" @click="handleSubmit">
+          提交工单
+        </wd-button>
+      </template>
     </view>
+    <wd-picker
+      v-model="formData.woType"
+      v-model:visible="typePickerOpen"
+      title="选择工单类型"
+      :columns="[problemTypes]"
+      value-key="value"
+      label-key="label"
+    />
+  </view>
 </template>
diff --git a/app/src/pages/business/views/workOrderDetail/index.test.ts b/app/src/pages/business/views/workOrderDetail/index.test.ts
new file mode 100644
index 0000000..1222fc4
--- /dev/null
+++ b/app/src/pages/business/views/workOrderDetail/index.test.ts
@@ -0,0 +1,316 @@
+import { readFileSync } from 'node:fs'
+import { createContext, runInContext } from 'node:vm'
+import { ModuleKind, ScriptTarget, transpileModule } from 'typescript'
+import { describe, expect, it, vi } from 'vitest'
+import { isWorkOrderImage, workOrderAttachmentFilename, workOrderAttachmentName } from '@/utils/workOrderAttachment'
+
+function harness() {
+  const fetchUserInfo = vi.fn().mockResolvedValue(undefined)
+  const act = vi.fn().mockResolvedValue({})
+  const detail = vi.fn().mockResolvedValue({ workOrder: { actions: ['reply'], communications: [] } })
+  const lifecycle: Record<string, () => unknown> = {}
+  const setInterval = vi.fn().mockReturnValue(1)
+  const clearInterval = vi.fn()
+  const downloadFile = vi.fn()
+  const openDocument = vi.fn()
+  const fileManager = {
+    mkdir: vi.fn((options: { success: () => void }) => options.success()),
+    copyFile: vi.fn((options: { srcPath: string, destPath: string, success: () => void }) => options.success()),
+    unlink: vi.fn((options: { complete: () => void }) => options.complete()),
+    rmdir: vi.fn(),
+  }
+  const context = createContext({
+    setInterval,
+    clearInterval,
+    exports: {},
+    require: (name: string) => {
+      if (name === '@dcloudio/uni-app') {
+        return {
+          onLoad: (callback: () => unknown) => { lifecycle.load = callback },
+          onShow: (callback: () => unknown) => { lifecycle.show = callback },
+          onHide: (callback: () => unknown) => { lifecycle.hide = callback },
+          onUnload: (callback: () => unknown) => { lifecycle.unload = callback },
+        }
+      }
+      if (name === '../api/workOrder')
+        return { actOnWorkOrder: act, getWorkOrderDetail: detail }
+      if (name === '@/store/user')
+        return { useUserStore: () => ({ userInfo: {}, fetchUserInfo }) }
+      if (name === '@/utils/workOrderAttachment')
+        return { isWorkOrderImage, workOrderAttachmentName, workOrderAttachmentFilename }
+      if (name === '@/utils')
+        return { getEnvBaseUrl: () => 'https://api.example.com/api/v1' }
+      if (name === '@/utils/permission')
+        return { hasAnyFeature: (user: { revoked?: boolean }) => !user.revoked }
+      return {}
+    },
+    ref: (value: unknown) => ({ value }),
+    computed: (getter: () => unknown) => ({ get value() { return getter() } }),
+    nextTick: () => Promise.resolve(),
+    definePage: vi.fn(),
+    uni: { showToast: vi.fn(), previewImage: vi.fn(), downloadFile, openDocument },
+    wx: { env: { USER_DATA_PATH: '/user-data' }, getFileSystemManager: () => fileManager },
+  })
+  const source = readFileSync(new URL('./index.vue', import.meta.url), 'utf8')
+  const script = source.match(/<script[^>]*>([\s\S]*?)<\/script>/)?.[1]?.replace(/\/\/ #ifdef H5[\s\S]*?\/\/ #endif/g, '').replace(/\/\/ #ifndef MP-WEIXIN[\s\S]*?\/\/ #endif/g, '')
+  if (!script)
+    throw new Error('未找到工单详情脚本')
+  runInContext(transpileModule(script, { compilerOptions: { module: ModuleKind.CommonJS, target: ScriptTarget.ES2020 } }).outputText, context)
+  runInContext('woNo.value = \'WO-1\'; workOrder.value = { actions: [\'reply\'], communications: [] }', context)
+  return { act, detail, fetchUserInfo, lifecycle, setInterval, clearInterval, fileManager, downloadFile, openDocument, evaluate: <Result>(expression: string) => runInContext(expression, context) as Result }
+}
+
+describe('工单首次加载状态', () => {
+  it('权限和详情请求完成前持续展示骨架屏', async () => {
+    const page = harness()
+    page.evaluate('workOrder.value = undefined')
+    expect(page.evaluate('loading.value')).toBe(true)
+    let finishUser!: () => void
+    let finishDetail!: (value: unknown) => void
+    page.fetchUserInfo.mockImplementationOnce(() => new Promise<void>((resolve) => {
+      finishUser = resolve
+    }))
+    page.detail.mockImplementationOnce(() => new Promise((resolve) => {
+      finishDetail = resolve
+    }))
+    const showing = page.lifecycle.show()
+    expect(page.evaluate('loading.value')).toBe(true)
+    expect(page.detail).not.toHaveBeenCalled()
+    finishUser()
+    await vi.waitFor(() => expect(page.detail).toHaveBeenCalledOnce())
+    expect(page.evaluate('loading.value')).toBe(true)
+    finishDetail({ workOrder: { actions: ['reply'], communications: [] } })
+    await showing
+    expect(page.evaluate('loading.value')).toBe(false)
+    expect(page.evaluate('workOrder.value')).toBeDefined()
+  })
+
+  it('详情请求真正失败后仍可重试', async () => {
+    const page = harness()
+    page.evaluate('workOrder.value = undefined')
+    page.detail.mockRejectedValueOnce(new Error('network'))
+    await page.lifecycle.show()
+    expect(page.evaluate('loading.value')).toBe(false)
+    expect(page.evaluate('workOrder.value')).toBeUndefined()
+    await page.evaluate<Promise<void>>('loadDetail()')
+    expect(page.evaluate('workOrder.value')).toBeDefined()
+    expect(page.evaluate('loading.value')).toBe(false)
+  })
+
+  it('权限不足时结束加载并显示无权限提示', async () => {
+    const page = harness()
+    page.evaluate('workOrder.value = undefined; userStore.userInfo.revoked = true')
+    await page.lifecycle.show()
+    expect(page.evaluate('noPermission.value')).toBe(true)
+    expect(page.evaluate('loading.value')).toBe(false)
+    expect(page.detail).not.toHaveBeenCalled()
+  })
+
+  it('通知缺少工单编号时结束加载', async () => {
+    const page = harness()
+    page.evaluate('workOrder.value = undefined; woNo.value = ""')
+    await page.lifecycle.show()
+    expect(page.evaluate('loading.value')).toBe(false)
+    expect(page.detail).not.toHaveBeenCalled()
+  })
+
+  it('刷新权限时保留已有工单内容', async () => {
+    const page = harness()
+    await page.lifecycle.show()
+    expect(page.evaluate('loading.value')).toBe(false)
+    expect(page.evaluate('workOrder.value')).toBeDefined()
+  })
+})
+
+describe('工单对话回复', () => {
+  it('发送后保持窗口打开，清空草稿并允许继续发送', async () => {
+    const page = harness()
+    page.evaluate('showConversation.value = true; replyContent.value = \'第一条\'')
+    await page.evaluate<Promise<void>>('performAction(\'reply\')')
+    expect(page.evaluate('showConversation.value')).toBe(true)
+    expect(page.evaluate('replyContent.value')).toBe('')
+    expect(page.evaluate('conversationTarget.value')).toBe('conversation-bottom')
+    page.evaluate('replyContent.value = \'第二条\'')
+    await page.evaluate<Promise<void>>('performAction(\'reply\')')
+    expect(page.act).toHaveBeenCalledTimes(2)
+  })
+
+  it('发送失败保留文字和附件草稿', async () => {
+    const page = harness()
+    page.act.mockRejectedValueOnce(new Error('network'))
+    page.evaluate('replyContent.value = \'待发送\'; replyAttachments.value = [\'file.pdf\']')
+    await page.evaluate<Promise<void>>('performAction(\'reply\')')
+    expect(page.evaluate('replyContent.value')).toBe('待发送')
+    expect(page.evaluate('replyAttachments.value.length')).toBe(1)
+    expect(page.evaluate('sending.value')).toBe(false)
+  })
+
+  it('禁止空消息、上传期间发送和无权限回复', async () => {
+    const page = harness()
+    await page.evaluate<Promise<void>>('performAction(\'reply\')')
+    page.evaluate('replyContent.value = \'消息\'; uploading.value = true')
+    await page.evaluate<Promise<void>>('performAction(\'reply\')')
+    page.evaluate('uploading.value = false; workOrder.value.actions = []')
+    await page.evaluate<Promise<void>>('performAction(\'reply\')')
+    expect(page.act).not.toHaveBeenCalled()
+  })
+})
+
+describe('工单评价与刷新', () => {
+  it('评价使用独立草稿，不把未发送的沟通内容当成评价', async () => {
+    const page = harness()
+    page.evaluate('workOrder.value.actions = ["evaluate"]; replyContent.value = "未发出的沟通"; evaluationContent.value = "服务很好"')
+    await page.evaluate<Promise<void>>('performAction("evaluate")')
+    expect(page.act).toHaveBeenCalledWith(expect.objectContaining({ action: 'evaluate', content: '服务很好', satisfactionLevel: 5 }))
+    expect(page.evaluate('replyContent.value')).toBe('未发出的沟通')
+    expect(page.evaluate('evaluationContent.value')).toBe('')
+  })
+
+  it('评价失败保留评价草稿，无效评分不提交', async () => {
+    const page = harness()
+    page.act.mockRejectedValueOnce(new Error('network'))
+    page.evaluate('workOrder.value.actions = ["evaluate"]; evaluationContent.value = "评价草稿"')
+    await page.evaluate<Promise<void>>('performAction("evaluate")')
+    expect(page.evaluate('evaluationContent.value')).toBe('评价草稿')
+    for (const rating of [0, 6, 4.5]) {
+      page.evaluate(`workOrder.value.actions = ["evaluate"]; rating.value = ${rating}`)
+      await page.evaluate<Promise<void>>('performAction("evaluate")')
+    }
+    expect(page.act).toHaveBeenCalledTimes(1)
+  })
+
+  it('操作成功后等待旧轮询结束，再获取最新详情', async () => {
+    const page = harness()
+    let finish!: (value: unknown) => void
+    page.detail.mockImplementationOnce(() => new Promise((resolve) => {
+      finish = resolve
+    }))
+    page.detail.mockResolvedValueOnce({ workOrder: { actions: ['reply'], currentStatus: 2, communications: [{ id: 2, content: '新回复' }] } })
+    const polling = page.evaluate<Promise<void>>('loadDetail(true)')
+    page.evaluate('replyContent.value = "新回复"')
+    const sending = page.evaluate<Promise<void>>('performAction("reply")')
+    await vi.waitFor(() => expect(page.act).toHaveBeenCalledTimes(1))
+    expect(page.detail).toHaveBeenCalledTimes(1)
+    finish({ workOrder: { actions: ['reply'], currentStatus: 1, communications: [] } })
+    await Promise.all([polling, sending])
+    expect(page.detail).toHaveBeenCalledTimes(2)
+    expect(page.evaluate('workOrder.value.currentStatus')).toBe(2)
+    expect(page.evaluate('workOrder.value.communications[0].content')).toBe('新回复')
+  })
+})
+
+describe('工单附件原名展示', () => {
+  it('正文和消息附件都显示名称，不再使用附件序号', () => {
+    const source = readFileSync(new URL('./index.vue', import.meta.url), 'utf8')
+    expect(source.match(/attachmentName\(url\)/g)?.length).toBe(2)
+    expect(source).not.toContain('附件 {{ index + 1 }}')
+    const page = harness()
+    page.evaluate('workOrder.value.attachmentNames = { "random.pdf": "排查说明.pdf" }')
+    expect(page.evaluate('attachmentName("random.pdf")')).toBe('排查说明.pdf')
+    expect(page.evaluate('attachmentName("old.xlsx")')).toBe('old.xlsx')
+  })
+
+  it('加载历史和轮询刷新后仍保留历史附件原名', async () => {
+    const page = harness()
+    page.evaluate('workOrder.value.communications = [{ id: 20 }]; hasMoreHistory.value = true')
+    page.detail.mockResolvedValueOnce({ workOrder: { communications: [{ id: 10 }], attachmentNames: { 'old.pdf': '历史资料.pdf' } } })
+    await page.evaluate<Promise<void>>('loadHistory()')
+    page.detail.mockResolvedValueOnce({ workOrder: { actions: ['reply'], communications: [{ id: 21 }], attachmentNames: { 'new.xlsx': '新资料.xlsx' } } })
+    await page.evaluate<Promise<void>>('loadDetail(true)')
+    expect(page.evaluate('attachmentName("old.pdf")')).toBe('历史资料.pdf')
+    expect(page.evaluate('attachmentName("new.xlsx")')).toBe('新资料.xlsx')
+    expect(page.evaluate('workOrder.value.communications.length')).toBe(3)
+  })
+})
+
+describe('工单问题描述布局', () => {
+  it('分开展示文字说明与附件，并在内容为空时显示提示', () => {
+    const source = readFileSync(new URL('./index.vue', import.meta.url), 'utf8')
+    const start = source.indexOf('问题描述')
+    const end = source.indexOf('</wd-card>', start)
+    const description = source.slice(start, end)
+    expect(description).toContain('文字说明')
+    expect(description).toContain('相关附件')
+    expect(description).toContain('break-words')
+    expect(description).not.toContain('break-all')
+    expect(description).toContain('暂无问题描述')
+    expect(description).toContain('{{ workOrder.attachmentUrls.length }} 个附件')
+  })
+})
+
+describe('工单附件文件名预览', () => {
+  it('微信打开的文件使用工单展示的原始名称，返回后清理本地副本', async () => {
+    const page = harness()
+    page.evaluate('workOrder.value.attachmentNames = { "https://files/random": "现场照片.pdf" }')
+    page.evaluate('openAttachment("https://files/random")')
+    page.evaluate('uni.downloadFile.mock.calls[0][0].success({ statusCode: 200, tempFilePath: "/tmp/random.pdf" })')
+    expect(page.fileManager.copyFile).toHaveBeenCalledWith(expect.objectContaining({
+      srcPath: '/tmp/random.pdf',
+      destPath: expect.stringMatching(/\/现场照片\.pdf$/),
+    }))
+    expect(page.openDocument).toHaveBeenCalledWith(expect.objectContaining({ filePath: expect.stringMatching(/\/现场照片\.pdf$/) }))
+    page.lifecycle.hide()
+    await page.lifecycle.show()
+    expect(page.fileManager.unlink).toHaveBeenCalledWith(expect.objectContaining({ filePath: expect.stringMatching(/\/现场照片\.pdf$/) }))
+    expect(page.fileManager.rmdir).toHaveBeenCalledWith(expect.objectContaining({ recursive: true }))
+  })
+})
+
+describe('工单照片预览', () => {
+  it('正文和沟通附件复用缩略图，原名为照片的随机地址也使用图片预览', () => {
+    const page = harness()
+    page.evaluate('workOrder.value.attachmentNames = { "/upload/random": "现场照片.JPG" }')
+    page.evaluate('openAttachment("/upload/random")')
+    expect(page.evaluate('uni.previewImage.mock.calls[0][0]')).toEqual({
+      urls: ['https://api.example.com/upload/random'],
+      current: 'https://api.example.com/upload/random',
+    })
+    const source = readFileSync(new URL('./index.vue', import.meta.url), 'utf8')
+    expect(source.match(/<WorkOrderAttachmentPreview\s/g)).toHaveLength(2)
+  })
+})
+
+describe('预览照片后保留工单沟通', () => {
+  it('预览引起隐藏和重新显示时，保留窗口、草稿及阅读位置并恢复轮询', async () => {
+    const page = harness()
+    await page.lifecycle.show()
+    page.evaluate('showConversation.value = true; replyContent.value = "未发送的内容"; replyAttachments.value = ["photo.jpg"]; conversationTarget.value = "history-message"')
+    page.evaluate('openAttachment("photo.jpg")')
+    page.lifecycle.hide()
+    expect(page.clearInterval).toHaveBeenCalledWith(1)
+    expect(page.evaluate('showConversation.value')).toBe(true)
+    await page.lifecycle.show()
+    expect(page.evaluate('showConversation.value')).toBe(true)
+    expect(page.evaluate('replyContent.value')).toBe('未发送的内容')
+    expect(page.evaluate('replyAttachments.value')).toEqual(['photo.jpg'])
+    expect(page.evaluate('conversationTarget.value')).toBe('history-message')
+    expect(page.setInterval).toHaveBeenCalledTimes(2)
+    page.lifecycle.unload()
+    expect(page.evaluate('visible')).toBe(false)
+    expect(page.evaluate('refreshTimer')).toBeUndefined()
+  })
+
+  it('从正文预览返回或手动关闭窗口后，不会自动打开沟通', async () => {
+    const page = harness()
+    page.evaluate('openAttachment("photo.jpg")')
+    page.lifecycle.hide()
+    await page.lifecycle.show()
+    expect(page.evaluate('showConversation.value')).toBe(false)
+    page.evaluate('showConversation.value = true; showConversation.value = false')
+    page.lifecycle.hide()
+    await page.lifecycle.show()
+    expect(page.evaluate('showConversation.value')).toBe(false)
+  })
+
+  it('重新显示时若失去查看权限，关闭沟通窗口并停止轮询', async () => {
+    const page = harness()
+    await page.lifecycle.show()
+    page.evaluate('showConversation.value = true')
+    page.lifecycle.hide()
+    page.evaluate('userStore.userInfo.revoked = true')
+    await page.lifecycle.show()
+    expect(page.evaluate('showConversation.value')).toBe(false)
+    expect(page.evaluate('noPermission.value')).toBe(true)
+    expect(page.evaluate('refreshTimer')).toBeUndefined()
+  })
+})
diff --git a/app/src/pages/business/views/workOrderDetail/index.vue b/app/src/pages/business/views/workOrderDetail/index.vue
index 51e19fd..5434d95 100644
--- a/app/src/pages/business/views/workOrderDetail/index.vue
+++ b/app/src/pages/business/views/workOrderDetail/index.vue
@@ -1,10 +1,17 @@
 <script lang="ts" setup>
-import { onLoad } from '@dcloudio/uni-app'
+import { onHide, onLoad, onShow, onUnload } from '@dcloudio/uni-app'
 import type { AppWorkOrder } from '../api/workOrder'
-import { getWorkOrderDetail } from '../api/workOrder'
+import { actOnWorkOrder, getWorkOrderDetail } from '../api/workOrder'
+import type { WorkOrderAction } from '@/api/types/workOrder'
+import WorkOrderAttachments from '@/components/WorkOrderAttachments.vue'
+import WorkOrderAttachmentPreview from '@/components/WorkOrderAttachmentPreview.vue'
 import { useUserStore } from '@/store/user'
 import { hasAnyFeature } from '@/utils/permission'
 import { getEnvBaseUrl } from '@/utils'
+import { isWorkOrderImage, workOrderAttachmentFilename, workOrderAttachmentName } from '@/utils/workOrderAttachment'
+// #ifdef H5
+import { downloadWorkOrderAttachment } from '@/utils/workOrderAttachmentDownload'
+// #endif
 
 definePage({
   style: {
@@ -14,9 +21,134 @@ definePage({
 
 const userStore = useUserStore()
 const noPermission = ref(false)
-const loading = ref(false)
+const loading = ref(true)
+const refreshing = ref(false)
 const woNo = ref('')
 const workOrder = ref<AppWorkOrder>()
+function attachmentGroups(urls: string[]) {
+  const images: string[] = []
+  const files: string[] = []
+  for (const attachment of urls) {
+    const target = isWorkOrderImage(attachment, attachmentName(attachment)) ? images : files
+    target.push(attachment)
+  }
+  return [
+    { type: 'images', urls: images },
+    { type: 'files', urls: files },
+  ].filter(group => group.urls.length > 0)
+}
+const sending = ref(false)
+const uploading = ref(false)
+const replyContent = ref('')
+const evaluationContent = ref('')
+const replyAttachments = ref<string[]>([])
+const showConversation = ref(false)
+const conversationTarget = ref('')
+const rating = ref(5)
+const loadingHistory = ref(false)
+const hasMoreHistory = ref(false)
+const actions = computed(() => workOrder.value?.actions || [])
+const canReply = computed(() => actions.value.includes('reply') || actions.value.includes('reopen'))
+const canSubmitFeedback = computed(() => {
+  if (actions.value.includes('evaluate'))
+    return Number.isInteger(rating.value) && rating.value >= 1 && rating.value <= 5
+  if (actions.value.includes('reopen'))
+    return !!replyContent.value.trim()
+  return !!replyContent.value.trim() || replyAttachments.value.length > 0
+})
+const autoCloseText = computed(() => {
+  if (workOrder.value?.currentStatus !== 3 || !workOrder.value.resolveTime)
+    return ''
+  const value = workOrder.value.resolveTime.replace('T', ' ').replace(/-/g, '/')
+  const deadline = new Date(new Date(value).getTime() + 72 * 60 * 60 * 1000)
+  if (Number.isNaN(deadline.getTime()))
+    return '解决后72小时内未反馈，工单将自动完结。'
+  return `请确认问题是否解决，预计  ${deadline.getFullYear()}/${deadline.getMonth() + 1}/${deadline.getDate()} ${String(deadline.getHours()).padStart(2, '0')}:${String(deadline.getMinutes()).padStart(2, '0')}  自动完结。`
+})
+let refreshTimer: ReturnType<typeof setInterval> | undefined
+let fetching = false
+let detailRequest: Promise<void> | undefined
+let visible = false
+let activePreviewCopy: { directory: string, filePath: string } | undefined
+
+function stopPolling() {
+  if (refreshTimer)
+    clearInterval(refreshTimer)
+  refreshTimer = undefined
+}
+
+async function scrollToLatest() {
+  conversationTarget.value = ''
+  await nextTick()
+  conversationTarget.value = 'conversation-bottom'
+}
+
+async function openConversation() {
+  showConversation.value = true
+  await nextTick()
+  await scrollToLatest()
+  void loadDetail(true)
+}
+
+async function performAction(action: WorkOrderAction) {
+  if (sending.value || uploading.value || !actions.value.includes(action))
+    return
+  if ((action === 'reply' || action === 'reopen') && !replyContent.value.trim() && !replyAttachments.value.length) {
+    uni.showToast({ title: '请输入内容或添加附件', icon: 'none' })
+    return
+  }
+  if (action === 'reopen' && !replyContent.value.trim()) {
+    uni.showToast({ title: '请说明问题尚未解决的原因', icon: 'none' })
+    return
+  }
+  if (action === 'evaluate' && (!Number.isInteger(rating.value) || rating.value < 1 || rating.value > 5)) {
+    uni.showToast({ title: '请选择1至5星的服务评分', icon: 'none' })
+    return
+  }
+  sending.value = true
+  try {
+    if (['confirm', 'cancel', 'transfer', 'resolve', 'close'].includes(action)) {
+      const prompts: Partial<Record<WorkOrderAction, { title: string, content: string }>> = {
+        confirm: { title: '确认问题已解决？', content: '确认后工单将完结，您可以评价本次服务。' },
+        cancel: { title: '确认取消工单？', content: '取消后将停止处理，沟通记录仍可查看。' },
+        transfer: { title: '确认转单？', content: '工单将转交同租户顶级部门及其负责人，当前部门可能不再具有办理权限。' },
+        resolve: { title: '确认问题已解决？', content: '将通知提交人确认，未反馈的工单将在72小时后自动完结。' },
+        close: { title: '确认关单？', content: '关闭后不能继续回复，沟通记录仍可查看。' },
+      }
+      const result = await uni.showModal(prompts[action]!)
+      if (!result.confirm)
+        return
+    }
+    await actOnWorkOrder({
+      woNo: woNo.value,
+      action,
+      content: action === 'evaluate' ? evaluationContent.value.trim() : ['reply', 'reopen'].includes(action) ? replyContent.value.trim() : undefined,
+      attachmentUrls: ['reply', 'reopen'].includes(action) ? replyAttachments.value : undefined,
+      satisfactionLevel: action === 'evaluate' ? rating.value : undefined,
+    })
+    if (action === 'evaluate') {
+      evaluationContent.value = ''
+    }
+    else if (action === 'reply' || action === 'reopen') {
+      replyContent.value = ''
+      replyAttachments.value = []
+    }
+    uni.showToast({ title: '操作成功', icon: 'success' })
+    if (action === 'transfer') {
+      showConversation.value = false
+      uni.navigateBack({ fail: () => uni.redirectTo({ url: '/pages/business/views/workOrder/index' }) })
+      return
+    }
+    await loadDetail(true, true)
+    if (action === 'reply' || action === 'reopen')
+      await scrollToLatest()
+  }
+  catch (error) {
+    uni.showToast({ title: getErrorMessage(error, '操作失败，请重试'), icon: 'none' })
+    await loadDetail(true, true)
+  }
+  finally { sending.value = false }
+}
 const canViewWorkOrderDetail = computed(() => hasAnyFeature(userStore.userInfo, 'workorder:detail'))
 
 const infoRows = computed(() => {
@@ -33,30 +165,76 @@ const infoRows = computed(() => {
   ]
 })
 
-async function loadDetail() {
+function loadDetail(silent = false, force = false): Promise<void> {
+  if (detailRequest)
+    return force ? detailRequest.then(() => loadDetail(silent)) : detailRequest
+  detailRequest = fetchDetail(silent).finally(() => {
+    detailRequest = undefined
+  })
+  return detailRequest
+}
+
+async function fetchDetail(silent = false) {
   if (!canViewWorkOrderDetail.value) {
     noPermission.value = true
+    loading.value = false
     return
   }
   if (!woNo.value) {
+    loading.value = false
     uni.showToast({ title: '工单编号不能为空', icon: 'none' })
     return
   }
-  loading.value = true
+  fetching = true
+  refreshing.value = true
+  loading.value = !workOrder.value
   noPermission.value = false
   try {
     const res = await getWorkOrderDetail({ woNo: woNo.value })
-    workOrder.value = res.workOrder
+    const previous = workOrder.value?.communications || []
+    const latest = res.workOrder.communications || []
+    const merged = new Map(previous.map(item => [item.id, item]))
+    latest.forEach(item => merged.set(item.id, item))
+    if (!previous.length)
+      hasMoreHistory.value = !!res.workOrder.hasMoreCommunications
+    workOrder.value = { ...res.workOrder, attachmentNames: { ...workOrder.value?.attachmentNames, ...res.workOrder.attachmentNames }, communications: [...merged.values()].sort((left, right) => left.id - right.id) }
   }
   catch (error) {
-    workOrder.value = undefined
-    uni.showToast({ title: getErrorMessage(error, '工单详情加载失败'), icon: 'none' })
+    if (!silent)
+      uni.showToast({ title: getErrorMessage(error, '工单详情加载失败'), icon: 'none' })
   }
   finally {
+    fetching = false
+    refreshing.value = false
     loading.value = false
   }
 }
 
+async function loadHistory() {
+  if (loadingHistory.value || fetching || !canViewWorkOrderDetail.value || !hasMoreHistory.value)
+    return
+  const beforeId = workOrder.value?.communications?.[0]?.id
+  if (!beforeId)
+    return
+  loadingHistory.value = true
+  try {
+    const res = await getWorkOrderDetail({ woNo: woNo.value, beforeId })
+    const merged = new Map((workOrder.value?.communications || []).map(item => [item.id, item]))
+    res.workOrder.communications?.forEach(item => merged.set(item.id, item))
+    if (workOrder.value) {
+      workOrder.value.communications = [...merged.values()].sort((left, right) => left.id - right.id)
+      workOrder.value.attachmentNames = { ...workOrder.value.attachmentNames, ...res.workOrder.attachmentNames }
+    }
+    hasMoreHistory.value = !!res.workOrder.hasMoreCommunications
+  }
+  catch (error) {
+    uni.showToast({ title: getErrorMessage(error, '历史记录加载失败'), icon: 'none' })
+  }
+  finally {
+    loadingHistory.value = false
+  }
+}
+
 function tagType(type?: string) {
   if (type === 'success')
     return 'success'
@@ -67,6 +245,10 @@ function tagType(type?: string) {
   return 'warning'
 }
 
+function attachmentName(url: string) {
+  return workOrderAttachmentName(url, workOrder.value?.attachmentNames?.[url])
+}
+
 function normalizeAttachmentUrl(value: string) {
   const url = String(value || '').trim().replaceAll('\\', '/')
   if (!url)
@@ -77,20 +259,74 @@ function normalizeAttachmentUrl(value: string) {
   return url.startsWith('/') ? `${base}${url}` : `${base}/${url}`
 }
 
+function cleanupAttachmentPreviewCopy() {
+  const previewCopy = activePreviewCopy
+  activePreviewCopy = undefined
+  if (!previewCopy)
+    return
+  // #ifdef MP-WEIXIN
+  const fileManager = wx.getFileSystemManager()
+  fileManager.unlink({
+    filePath: previewCopy.filePath,
+    complete: () => fileManager.rmdir({ dirPath: previewCopy.directory, recursive: true }),
+  })
+  // #endif
+}
+
+function openDownloadedAttachment(filePath: string, name: string) {
+  const openDocument = (path: string) => uni.openDocument({
+    filePath: path,
+    showMenu: true,
+    fail: () => uni.showToast({ title: '当前附件暂不支持预览', icon: 'none' }),
+  })
+  // #ifdef MP-WEIXIN
+  const filename = workOrderAttachmentFilename(name)
+  const previewDirectory = `${wx.env.USER_DATA_PATH}/work-order-preview-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`
+  const previewFilePath = `${previewDirectory}/${filename}`
+  const fileManager = wx.getFileSystemManager()
+  fileManager.mkdir({
+    dirPath: previewDirectory,
+    recursive: true,
+    success: () => fileManager.copyFile({
+      srcPath: filePath,
+      destPath: previewFilePath,
+      success: () => {
+        activePreviewCopy = { directory: previewDirectory, filePath: previewFilePath }
+        openDocument(previewFilePath)
+      },
+      fail: () => openDocument(filePath),
+    }),
+    fail: () => openDocument(filePath),
+  })
+  // #endif
+  // #ifndef MP-WEIXIN
+  openDocument(filePath)
+  // #endif
+}
+
 function openAttachment(value: string) {
   const url = normalizeAttachmentUrl(value)
   if (!url)
     return
+  if (isWorkOrderImage(url, attachmentName(value))) {
+    uni.previewImage({ urls: [url], current: url })
+    return
+  }
   // #ifdef H5
-  window.open(url, '_blank')
+  downloadWorkOrderAttachment(url, attachmentName(value)).catch(() => {
+    uni.showToast({ title: '附件下载失败，请重试', icon: 'none' })
+  })
   // #endif
   // #ifndef H5
   uni.downloadFile({
     url,
     success: (res) => {
       if (res.statusCode === 200)
-        uni.openDocument({ filePath: res.tempFilePath })
+        openDownloadedAttachment(res.tempFilePath, attachmentName(value))
+      else
+        uni.showToast({ title: '附件下载失败', icon: 'none' })
     },
+    fail: () => uni.showToast({ title: '附件下载失败', icon: 'none' }),
   })
   // #endif
 }
@@ -120,103 +356,283 @@ onLoad((query: Record<string, string | undefined>) => {
   woNo.value = query.woNo || query.no || ''
 })
 
-onMounted(async () => {
+onShow(async () => {
+  cleanupAttachmentPreviewCopy()
+  visible = true
+  stopPolling()
+  loading.value = !workOrder.value
   await userStore.fetchUserInfo().catch(() => undefined)
   if (!canViewWorkOrderDetail.value) {
     noPermission.value = true
+    loading.value = false
+    showConversation.value = false
     uni.showToast({ title: '当前账号不能查看工单详情', icon: 'none' })
     return
   }
-  void loadDetail()
+  await loadDetail()
+  if (visible) {
+    refreshTimer = setInterval(() => {
+      if (!sending.value && !uploading.value)
+        void loadDetail(true)
+    }, 15000)
+  }
+})
+onHide(() => {
+  visible = false
+  // 图片预览和选择附件也会隐藏页面，保留沟通窗口及草稿。
+  stopPolling()
+})
+onUnload(() => {
+  cleanupAttachmentPreviewCopy()
+  visible = false
+  stopPolling()
 })
 </script>
 
 <template>
-    <view class="min-h-screen p-24rpx pb-40rpx">
-      <view class="mx-auto max-w-920rpx flex flex-col gap-20rpx">
-        <wd-card v-if="noPermission" custom-class="!mx-0 !mb-0">
-          <view class="text-26rpx text-#64748b leading-38rpx">
-            当前账号不能查看工单详情。
+  <view class="min-h-screen bg-#f5f7fa p-24rpx pb-48rpx font-sans">
+    <view class="mx-auto max-w-920rpx flex flex-col gap-20rpx">
+      <wd-card v-if="noPermission" custom-class="!mx-0 !mb-0">
+        <view class="text-26rpx text-#64748b leading-38rpx">
+          当前账号不能查看工单详情。
+        </view>
+      </wd-card>
+
+      <wd-card v-else-if="loading" custom-class="!mx-0 !mb-0">
+        <wd-skeleton theme="paragraph" />
+      </wd-card>
+
+      <template v-else-if="workOrder">
+        <wd-card custom-class="!mx-0 !mb-0" custom-content-class="!p-0">
+          <template #title>
+            <view class="min-h-88rpx flex items-start justify-between gap-16rpx py-20rpx">
+              <text class="min-w-0 flex-1 break-all text-28rpx text-#0f172a font-600">
+                {{ workOrder.title }}
+              </text>
+              <wd-tag :type="tagType(workOrder.statusType)" variant="plain">
+                {{ workOrder.currentStatus === 3 ? '待确认解决' : (workOrder.currentStatusText || '处理中') }}
+              </wd-tag>
+            </view>
+          </template>
+          <wd-cell-group :border="false">
+            <wd-cell
+              v-for="row in infoRows"
+              :key="row[0]"
+              :title="row[0]"
+              :value="row[1]"
+              center
+            />
+          </wd-cell-group>
+        </wd-card>
+
+        <wd-card custom-class="!mx-0 !mb-0">
+          <template #title>
+            <view class="h-88rpx flex items-center justify-between">
+              <text class="text-28rpx text-#0f172a font-600">问题描述</text>
+              <text v-if="workOrder.attachmentUrls?.length" class="text-22rpx text-#94a3b8">
+                {{ workOrder.attachmentUrls.length }} 个附件
+              </text>
+            </view>
+          </template>
+          <view v-if="workOrder.content?.trim()" class="rounded-16rpx bg-#f8fafc px-20rpx py-18rpx">
+            <view class="mb-8rpx text-22rpx text-#94a3b8">
+              文字说明
+            </view>
+            <view class="whitespace-pre-wrap break-words text-26rpx text-#334155 leading-42rpx">
+              {{ workOrder.content }}
+            </view>
           </view>
-        </wd-card>
-
-        <wd-card v-else-if="loading" custom-class="!mx-0 !mb-0">
-          <wd-skeleton theme="paragraph" />
-        </wd-card>
-
-        <template v-else-if="workOrder">
-          <wd-card custom-class="!mx-0 !mb-0" custom-content-class="!p-0">
-            <template #title>
-              <view class="h-88rpx flex items-center justify-between gap-16rpx">
-                <text class="min-w-0 flex-1 truncate text-30rpx text-#111827 font-900">
-                  {{ workOrder.title }}
-                </text>
-                <wd-tag :type="tagType(workOrder.statusType)" variant="plain">
-                  {{ workOrder.currentStatusText || '处理中' }}
-                </wd-tag>
-              </view>
-            </template>
-            <wd-cell-group :border="false">
-              <wd-cell
-                v-for="row in infoRows"
-                :key="row[0]"
-                :title="row[0]"
-                :value="row[1]"
-                center
+          <view v-if="workOrder.attachmentUrls?.length" class="mt-20rpx border-t border-#f1f5f9 pt-20rpx">
+            <view class="mb-12rpx text-22rpx text-#94a3b8">
+              相关附件
+            </view>
+            <view v-for="group in attachmentGroups(workOrder.attachmentUrls)" :key="group.type" class="mb-12rpx gap-12rpx" :class="group.type === 'images' ? 'grid grid-cols-3' : 'flex flex-col'">
+              <WorkOrderAttachmentPreview
+                v-for="url in group.urls"
+                :key="url"
+                :url="normalizeAttachmentUrl(url)"
+                :name="attachmentName(url)"
+                @open="openAttachment(url)"
               />
-            </wd-cell-group>
-          </wd-card>
-
-          <wd-card custom-class="!mx-0 !mb-0">
-            <template #title>
-              <view class="h-88rpx flex items-center">
-                <text class="text-30rpx text-#111827 font-900">问题描述</text>
-              </view>
-            </template>
-            <view class="text-28rpx text-#334155 leading-44rpx">
-              {{ workOrder.content || '-' }}
             </view>
-          </wd-card>
-
-          <wd-card custom-class="!mx-0 !mb-0">
-            <template #title>
-              <view class="h-88rpx flex items-center justify-between">
-                <text class="text-30rpx text-#111827 font-900">沟通记录</text>
-                <wd-tag type="primary" variant="plain">
-                  {{ workOrder.communications?.length || 0 }} 条
-                </wd-tag>
-              </view>
-            </template>
-            <view v-if="workOrder.communications?.length" class="flex flex-col gap-16rpx">
-              <view
-                v-for="item in workOrder.communications"
-                :key="item.id"
-                class="rounded-12rpx bg-#f8fafc p-20rpx"
-              >
-                <view class="flex items-center justify-between gap-16rpx">
-                  <view class="text-24rpx text-#2563eb font-800">
-                    {{ item.senderName || item.commTypeText || '用户' }}
-                  </view>
-                  <view class="text-22rpx text-#94a3b8">
-                    {{ formatTime(item.createdAt) }}
-                  </view>
-                </view>
-                <view class="mt-8rpx text-28rpx text-#334155 leading-42rpx">
-                  {{ item.content }}
-                </view>
-              </view>
-            </view>
-            <view v-else class="py-24rpx text-center text-26rpx text-#64748b">
-              暂无沟通记录
-            </view>
-          </wd-card>
-        </template>
-
-        <wd-card v-else custom-class="!mx-0 !mb-0">
-          <view class="py-40rpx text-center text-26rpx text-#64748b">
-            未查询到工单
+          </view>
+          <view v-if="!workOrder.content?.trim() && !workOrder.attachmentUrls?.length" class="text-26rpx text-#94a3b8">
+            暂无问题描述
           </view>
         </wd-card>
-      </view>
+
+        <wd-card custom-class="!mx-0 !mb-0" custom-content-class="!p-0">
+          <wd-cell title="工单沟通" label="查看回复，补充问题信息" is-link center custom-title-class="!text-28rpx !font-600 !text-#0f172a" custom-label-class="!text-24rpx !text-#94a3b8" @click="openConversation">
+            <text class="whitespace-nowrap text-24rpx text-#2563eb">{{ canReply ? '继续沟通' : '查看记录' }}</text>
+          </wd-cell>
+        </wd-card>
+        <wd-card v-if="workOrder.records?.length" custom-class="!mx-0 !mb-0">
+          <view class="mb-20rpx text-28rpx text-#0f172a font-600">
+            处理进度
+          </view>
+          <view v-for="record in workOrder.records" :key="record.id" class="mb-16rpx flex items-center justify-between gap-16rpx text-24rpx">
+            <text class="text-#334155">{{ record.operationText }}</text>
+            <text class="text-#94a3b8">{{ formatTime(record.createdAt) }}</text>
+          </view>
+        </wd-card>
+
+        <wd-card v-if="autoCloseText" custom-class="!mx-0 !mb-0">
+          <view class="text-26rpx text-#64748b leading-40rpx">
+            {{ autoCloseText }}
+          </view>
+        </wd-card>
+
+        <wd-card v-if="actions.includes('evaluate')" custom-class="!mx-0 !mb-0">
+          <view class="mb-20rpx text-28rpx text-#0f172a font-600">
+            评价本次服务
+          </view>
+          <wd-rate v-if="actions.includes('evaluate')" v-model="rating" :disabled="sending" />
+          <wd-textarea v-model="evaluationContent" :disabled="sending" :maxlength="2000" show-word-limit placeholder="评价内容（选填）" />
+          <wd-button class="mt-20rpx" type="primary" :round="false" block :loading="sending" :disabled="sending || uploading || !canSubmitFeedback" @click="performAction('evaluate')">
+            提交评价
+          </wd-button>
+        </wd-card>
+
+        <wd-card v-if="workOrder.satisfactionLevel" custom-class="!mx-0 !mb-0">
+          <view class="mb-16rpx text-28rpx text-#0f172a font-600">
+            我的评价
+          </view>
+          <wd-rate :model-value="workOrder.satisfactionLevel" readonly />
+          <view class="mt-12rpx text-26rpx text-#64748b">
+            {{ workOrder.evalContent || '未填写评价内容' }}
+          </view>
+        </wd-card>
+
+        <wd-card v-if="actions.includes('resolve') || actions.includes('transfer') || actions.includes('close')" custom-class="!mx-0 !mb-0">
+          <view class="mb-20rpx text-28rpx text-#0f172a font-600">
+            工单办理
+          </view>
+          <view class="flex items-center gap-12rpx rounded-16rpx bg-#f8fafc p-8rpx">
+            <wd-button v-if="actions.includes('resolve')" size="small" type="primary" variant="text" custom-class="!h-64rpx !min-h-64rpx !rounded-12rpx !font-500 !text-26rpx !px-20rpx" :loading="sending" :disabled="sending || uploading" @click="performAction('resolve')">
+              标记解决
+            </wd-button>
+            <wd-button v-if="actions.includes('transfer')" size="small" type="info" variant="text" custom-class="!h-64rpx !min-h-64rpx !rounded-12rpx !font-500 !text-26rpx !px-20rpx !text-#64748b" :disabled="sending || uploading" @click="performAction('transfer')">
+              转单
+            </wd-button>
+            <wd-button v-if="actions.includes('close')" size="small" type="info" variant="text" custom-class="!h-64rpx !min-h-64rpx !rounded-12rpx !font-500 !text-26rpx !px-20rpx !text-#64748b" :disabled="sending || uploading" @click="performAction('close')">
+              关单
+            </wd-button>
+          </view>
+        </wd-card>
+
+        <wd-button v-if="actions.includes('confirm')" type="primary" :round="false" block :loading="sending" :disabled="sending || uploading" @click="performAction('confirm')">
+          确认解决并完结
+        </wd-button>
+        <wd-card custom-class="!mx-0 !mb-0" custom-content-class="!p-0">
+          <wd-cell-group>
+            <wd-cell title="刷新进度" label="获取最新处理状态与沟通记录" center custom-title-class="!text-27rpx !font-800 !text-#0f172a" custom-label-class="!text-22rpx !text-#475569">
+              <wd-button type="primary" variant="text" size="small" :loading="refreshing" :disabled="sending || uploading || loadingHistory" @click="loadDetail()">
+                刷新
+              </wd-button>
+            </wd-cell>
+            <wd-cell v-if="actions.includes('cancel')" title="取消工单" label="取消后停止处理，沟通记录保留" center custom-title-class="!text-27rpx !font-800 !text-#0f172a" custom-label-class="!text-22rpx !text-#475569">
+              <wd-button type="danger" variant="text" size="small" :loading="sending" :disabled="sending || uploading" @click="performAction('cancel')">
+                取消
+              </wd-button>
+            </wd-cell>
+          </wd-cell-group>
+        </wd-card>
+      </template>
+
+      <wd-card v-else custom-class="!mx-0 !mb-0">
+        <view class="py-40rpx text-center text-26rpx text-#64748b">
+          工单暂时无法加载
+        </view>
+        <wd-button block type="info" @click="loadDetail()">
+          重试
+        </wd-button>
+      </wd-card>
     </view>
+    <wd-popup v-model="showConversation" position="bottom" round safe-area-inset-bottom :close-on-click-modal="false" @after-enter="scrollToLatest">
+      <view v-if="workOrder && !noPermission" class="h-85vh flex flex-col bg-#f5f7fa">
+        <view class="flex shrink-0 items-center justify-between gap-16rpx bg-white px-28rpx py-24rpx">
+          <view class="min-w-0 flex-1">
+            <view class="text-28rpx text-#0f172a font-600">
+              工单沟通
+            </view>
+            <view class="mt-8rpx truncate text-22rpx text-#64748b">
+              {{ workOrder.title }}
+            </view>
+          </view>
+          <wd-button type="info" variant="text" size="small" custom-class="!min-h-56rpx !h-56rpx !px-12rpx !font-400 !text-24rpx !text-#64748b" @click="showConversation = false">
+            收起
+          </wd-button>
+        </view>
+        <view v-if="actions.includes('resolve') || actions.includes('transfer') || actions.includes('close')" class="flex shrink-0 items-center gap-12rpx border-t border-#f1f5f9 border-solid bg-white px-24rpx py-12rpx">
+          <wd-button v-if="actions.includes('resolve')" size="small" type="primary" variant="text" custom-class="!h-64rpx !min-h-64rpx !rounded-12rpx !font-500 !text-26rpx !px-20rpx" :loading="sending" :disabled="sending || uploading" @click="performAction('resolve')">
+            标记解决
+          </wd-button>
+          <wd-button v-if="actions.includes('transfer')" size="small" type="info" variant="text" custom-class="!h-64rpx !min-h-64rpx !rounded-12rpx !font-500 !text-26rpx !px-20rpx !text-#64748b" :disabled="sending || uploading" @click="performAction('transfer')">
+            转单
+          </wd-button>
+          <wd-button v-if="actions.includes('close')" size="small" type="info" variant="text" custom-class="!h-64rpx !min-h-64rpx !rounded-12rpx !font-500 !text-26rpx !px-20rpx !text-#64748b" :disabled="sending || uploading" @click="performAction('close')">
+            关单
+          </wd-button>
+        </view>
+        <scroll-view scroll-y :scroll-into-view="conversationTarget" class="h-0 min-h-0 flex-1">
+          <view class="px-24rpx py-28rpx">
+            <view class="mb-24rpx text-center text-22rpx text-#94a3b8">
+              {{ workOrder.currentStatusText }} · 每15秒更新沟通记录
+            </view>
+            <view v-if="hasMoreHistory" class="mb-24rpx flex justify-center">
+              <wd-button size="small" type="info" variant="text" :loading="loadingHistory" @click="loadHistory">
+                查看更早的消息
+              </wd-button>
+            </view>
+            <view v-for="item in workOrder.communications" :key="item.id" class="mb-28rpx flex flex-col" :class="(workOrder.isCreator !== false ? item.commType === 1 : item.commType !== 1) ? 'items-end' : 'items-start'">
+              <view class="mb-10rpx text-22rpx text-#94a3b8">
+                {{ item.senderName || (item.commType === 1 ? '提交人' : '处理人员') }} · {{ formatTime(item.createdAt) }}
+              </view>
+              <view class="max-w-85% rounded-20rpx px-24rpx py-18rpx" :class="(workOrder.isCreator !== false ? item.commType === 1 : item.commType !== 1) ? 'bg-#e3edff text-#1e3a5f' : 'bg-white text-#334155'">
+                <text v-if="item.content" class="whitespace-pre-wrap break-all text-28rpx leading-44rpx">{{ item.content }}</text>
+                <view v-if="item.attachmentUrls?.length" class="mt-12rpx">
+                  <view v-for="group in attachmentGroups(item.attachmentUrls)" :key="group.type" class="mb-12rpx gap-12rpx" :class="group.type === 'images' ? 'grid grid-cols-2' : 'flex flex-col'">
+                    <WorkOrderAttachmentPreview
+                      v-for="url in group.urls"
+                      :key="url"
+                      :url="normalizeAttachmentUrl(url)"
+                      :name="attachmentName(url)"
+                      @open="openAttachment(url)"
+                    />
+                  </view>
+                </view>
+              </view>
+            </view>
+            <view v-if="!workOrder.communications?.length" class="py-80rpx text-center text-26rpx text-#94a3b8">
+              还没有消息，可以在下方补充问题
+            </view>
+            <view id="conversation-bottom" class="h-1px" />
+          </view>
+        </scroll-view>
+        <view class="flex shrink-0 justify-center py-8rpx">
+          <wd-button size="small" type="info" variant="text" custom-class="!h-48rpx !min-h-48rpx !px-16rpx !font-400 !text-22rpx !text-#94a3b8" @click="scrollToLatest">
+            回到最新消息
+          </wd-button>
+        </view>
+        <view v-if="canReply" class="shrink-0 bg-white px-24rpx py-20rpx">
+          <view v-if="actions.includes('reopen')" class="mb-12rpx text-24rpx text-#64748b">
+            问题仍未解决？发送原因后将重新进入处理。
+          </view>
+          <wd-textarea v-model="replyContent" :disabled="sending" :maxlength="2000" :auto-height="false" custom-class="!rounded-16rpx !bg-#f8fafc !px-20rpx !py-12rpx" custom-textarea-class="!h-96rpx !min-h-96rpx !text-26rpx !leading-40rpx" show-word-limit :placeholder="actions.includes('reopen') ? '请说明尚未解决的原因…' : '输入消息，继续沟通…'" />
+          <view class="mt-12rpx max-h-180rpx overflow-y-auto">
+            <WorkOrderAttachments v-model="replyAttachments" :disabled="sending" @uploading="uploading = $event" />
+          </view>
+          <view class="mt-16rpx flex items-center justify-between gap-16rpx">
+            <text class="text-22rpx text-#94a3b8">支持文字、图片和文件</text>
+            <wd-button type="primary" size="small" custom-class="!h-64rpx !min-h-64rpx !min-w-120rpx !rounded-12rpx !px-24rpx !font-500 !text-26rpx" :loading="sending" :disabled="sending || uploading || !canSubmitFeedback" @click="performAction(actions.includes('reopen') ? 'reopen' : 'reply')">
+              {{ actions.includes('reopen') ? '反馈未解决' : '发送' }}
+            </wd-button>
+          </view>
+        </view>
+        <view v-else class="shrink-0 bg-white px-24rpx py-28rpx text-center text-24rpx text-#94a3b8">
+          当前工单不可回复，历史消息仍可查看
+        </view>
+      </view>
+    </wd-popup>
+  </view>
 </template>
diff --git a/app/src/pages/card/action.test.ts b/app/src/pages/card/action.test.ts
new file mode 100644
index 0000000..15acbef
--- /dev/null
+++ b/app/src/pages/card/action.test.ts
@@ -0,0 +1,23 @@
+import type { AppCard } from '@/api/card'
+import { describe, expect, it } from 'vitest'
+import { isV101HiddenRoute, V101_RELEASE } from '@/constant/release'
+import { buildCardMoreActions } from './action'
+
+const user = { userId: 12, deptId: 100, userType: 'sys_user', appAccess: { configured: true, features: ['card:allocate'] } }
+const card = { ownerType: 'enterprise', canBusiness: true, canAllocate: true } as AppCard
+
+describe('划拨单卡入口发布与权限', () => {
+  it('只开放授权企业卡的划拨，不暴露其他操作', () => {
+    expect(V101_RELEASE.showCardMoreActions).toBe(false)
+    expect(buildCardMoreActions(user, card).map(item => item.key)).toEqual(['allocate'])
+    expect(isV101HiddenRoute('/pages/business/views/allocate/index')).toBe(false)
+    expect(isV101HiddenRoute('/pages/business/views/change/index')).toBe(true)
+  })
+  it('无权限、终端、公共卡、不可办理和不可划拨卡不显示按钮', () => {
+    expect(buildCardMoreActions({ ...user, appAccess: { configured: true, features: [] } }, card)).toEqual([])
+    expect(buildCardMoreActions({ ...user, userType: 'app_user' }, card)).toEqual([])
+    expect(buildCardMoreActions(user, { ...card, ownerType: 'public' })).toEqual([])
+    expect(buildCardMoreActions(user, { ...card, canBusiness: false })).toEqual([])
+    expect(buildCardMoreActions(user, { ...card, canAllocate: false })).toEqual([])
+  })
+})
diff --git a/app/src/pages/card/action.ts b/app/src/pages/card/action.ts
index 650b3a4..a369a7c 100644
--- a/app/src/pages/card/action.ts
+++ b/app/src/pages/card/action.ts
@@ -2,6 +2,7 @@ import type { AppCard } from '@/api/card'
 import type { IUserInfoRes } from '@/api/types/login'
 import { hasUserPermission } from '@/utils/permission'
 import { getAccountWorkspace, isEnterpriseUserInfo } from '@/utils/userIdentity'
+import { V101_RELEASE } from '@/constant/release'
 
 export type CardMoreActionKey = 'restart' | 'stop' | 'start' | 'dataStart' | 'dataStop' | 'change' | 'allocate' | 'warning'
 
@@ -59,11 +60,11 @@ export function canStartCardAction(userInfo: Partial<IUserInfoRes> | null | unde
 }
 
 export function canDataStartCardAction(userInfo: Partial<IUserInfoRes> | null | undefined, card?: AppCard | null) {
-  return canEnterpriseCardAction(userInfo, card) && hasUserPermission(userInfo, 'dataStart')
+  return canBusinessCardAction(userInfo, card) && hasUserPermission(userInfo, 'dataStart')
 }
 
 export function canDataStopCardAction(userInfo: Partial<IUserInfoRes> | null | undefined, card?: AppCard | null) {
-  return canEnterpriseCardAction(userInfo, card) && hasUserPermission(userInfo, 'dataStop')
+  return canBusinessCardAction(userInfo, card) && hasUserPermission(userInfo, 'dataStop')
 }
 
 export function canChangeCardAction(userInfo: Partial<IUserInfoRes> | null | undefined, card?: AppCard | null) {
@@ -78,6 +79,12 @@ export function buildCardMoreActions(
   userInfo: Partial<IUserInfoRes> | null | undefined,
   card?: AppCard | null,
 ) {
+  if (!V101_RELEASE.showCardMoreActions) {
+    return canAllocateCardAction(userInfo, card)
+      ? [{ key: 'allocate', name: '卡片划拨', description: '将这张卡划拨给直属客户' }] satisfies CardMoreAction[]
+      : []
+  }
+
   const actions: CardMoreAction[] = []
 
   if (card?.bossCardStatus === 4) {
diff --git a/app/src/pages/card/components/CardList.vue b/app/src/pages/card/components/CardList.vue
index 82c09b9..2ca3ae4 100644
--- a/app/src/pages/card/components/CardList.vue
+++ b/app/src/pages/card/components/CardList.vue
@@ -1,7 +1,15 @@
 <script setup lang="ts">
 import type { AppCard } from '@/api/card'
-import { getCardList, restartCard, startCard, startDataService, stopCard, stopDataService } from '@/api/card'
+import {
+  getCardList,
+  restartCard,
+  startCard,
+  startDataService,
+  stopCard,
+  stopDataService,
+} from '@/api/card'
 import RouterPath from '@/constant/RouterPath'
+import { V101_RELEASE } from '@/constant/release'
 import { useUserStore } from '@/store/user'
 import { showLifecycleBatchProgress } from '@/utils/lifecycleBatch'
 import {
@@ -9,6 +17,8 @@ import {
   canAllocateCardAction,
   canBusinessCardAction,
   canChangeCardAction,
+  canDataStartCardAction,
+  canDataStopCardAction,
   canRenewCardAction,
   canRestartCardAction,
   canStartCardAction,
@@ -62,9 +72,9 @@ const moreSheetActions = computed(() =>
 )
 const showInitialLoading = computed(() => loading.value && cards.value.length === 0)
 const previewSize = computed(() => Math.max(1, Number(props.previewLimit || 5)))
-const pageSize = computed(() => props.compact ? previewSize.value : 20)
-const hasMore = computed(() =>
-  !props.compact && serverHasMore.value && cards.value.length < MAX_LOADED_CARDS,
+const pageSize = computed(() => (props.compact ? previewSize.value : 20))
+const hasMore = computed(
+  () => !props.compact && serverHasMore.value && cards.value.length < MAX_LOADED_CARDS,
 )
 
 const visibleCards = computed(() => {
@@ -91,15 +101,12 @@ const renderCards = computed(() => {
   return visibleCards.value.slice(0, previewSize.value)
 })
 
-const hiddenPreviewCount = computed(() =>
-  Math.max(0, total.value - renderCards.value.length),
-)
+const hiddenPreviewCount = computed(() => Math.max(0, total.value - renderCards.value.length))
 const showPreviewMore = computed(() => Boolean(props.compact && hiddenPreviewCount.value > 0))
 
 function mergeCards(current: AppCard[], incoming: AppCard[]) {
   const merged = new Map<string, AppCard>()
-  for (const item of [...current, ...incoming])
-    merged.set(displayCardValue(item), item)
+  for (const item of [...current, ...incoming]) merged.set(displayCardValue(item), item)
   return Array.from(merged.values())
 }
 
@@ -111,8 +118,7 @@ async function loadCards(reset = true) {
   const nextPage = reset ? 1 : currentPage.value + 1
   if (reset)
     loading.value = true
-  else
-    loadingMore.value = true
+  else loadingMore.value = true
   emit('loadingChange', true)
   errorMessage.value = ''
   try {
@@ -131,7 +137,7 @@ async function loadCards(reset = true) {
       cards.value = cards.value.slice(0, MAX_LOADED_CARDS)
     if (reset)
       total.value = Math.max(Number(res.total || 0), cards.value.length)
-    serverHasMore.value = Boolean(res.hasMore ?? (cards.value.length < total.value))
+    serverHasMore.value = Boolean(res.hasMore ?? cards.value.length < total.value)
     currentPage.value = nextPage
     emit('cardsChange', cards.value, total.value)
   }
@@ -225,6 +231,14 @@ function canRestart(item: AppCard) {
   return canRestartCardAction(userStore.userInfo, item)
 }
 
+function canStartDataService(item: AppCard) {
+  return Number(item.dataServiceStatus) === 0 && canDataStartCardAction(userStore.userInfo, item)
+}
+
+function canStopDataService(item: AppCard) {
+  return Number(item.dataServiceStatus) === 1 && canDataStopCardAction(userStore.userInfo, item)
+}
+
 function canWarning(item?: AppCard | null) {
   return canWarningCardAction(userStore.userInfo, item)
 }
@@ -251,26 +265,6 @@ function canLifecycle(item: AppCard, operation: 'stop' | 'start') {
     : canStartCardAction(userStore.userInfo, item)
 }
 
-function primaryOperateText(_item: AppCard) {
-  return '重启'
-}
-
-function primaryOperateIcon(_item: AppCard) {
-  return 'i-carbon-reset'
-}
-
-function primaryOperateDisabled(item: AppCard) {
-  return !canRestart(item) || !!restartingCard.value
-}
-
-function primaryOperateLoading(item: AppCard) {
-  return restartingCard.value === displayCardValue(item)
-}
-
-function handlePrimaryOperate(item: AppCard) {
-  void handleRestart(item)
-}
-
 async function handleRestart(item: AppCard) {
   if (!canRestart(item)) {
     uni.showToast({ title: '当前账号不能重启卡片', icon: 'none' })
@@ -343,6 +337,11 @@ async function submitLifecycle(cardValue: string, operation: 'stop' | 'start', a
 }
 
 function handleDataService(item: AppCard, operation: 'dataStart' | 'dataStop') {
+  const allowed = operation === 'dataStart' ? canStartDataService(item) : canStopDataService(item)
+  if (!allowed) {
+    uni.showToast({ title: '当前账号没有该数据服务操作权限', icon: 'none' })
+    return
+  }
   const cardValue = displayCardValue(item)
   if (cardValue === '-')
     return
@@ -358,15 +357,20 @@ function handleDataService(item: AppCard, operation: 'dataStart' | 'dataStop') {
   })
 }
 
-async function submitDataService(cardValue: string, operation: 'dataStart' | 'dataStop', actionText: string) {
+async function submitDataService(
+  cardValue: string,
+  operation: 'dataStart' | 'dataStop',
+  actionText: string,
+) {
   const submittingKey = `${operation}:${cardValue}`
   if (lifecycleSubmittingCard.value)
     return
   lifecycleSubmittingCard.value = submittingKey
   try {
-    const res = operation === 'dataStart'
-      ? await startDataService({ cardValue })
-      : await stopDataService({ cardValue })
+    const res
+      = operation === 'dataStart'
+        ? await startDataService({ cardValue })
+        : await stopDataService({ cardValue })
     await showLifecycleBatchProgress(res, actionText)
     void loadCards()
   }
@@ -463,6 +467,7 @@ onMounted(() => {
 })
 
 onBeforeUnmount(() => {
+  ++cardLoadSeq
   if (searchTimer)
     clearTimeout(searchTimer)
 })
@@ -511,8 +516,13 @@ defineExpose({
         :class="{ 'preview-card-row': props.compact }"
       >
         <template v-if="props.browse">
-          <view class="min-h-112rpx min-w-0 flex items-center gap-16rpx py-18rpx" @click="goDetail(item)">
-            <view class="h-64rpx w-64rpx flex flex-shrink-0 items-center justify-center rounded-14rpx bg-#eff6ff text-32rpx text-#2563eb">
+          <view
+            class="min-h-112rpx min-w-0 flex items-center gap-16rpx py-18rpx"
+            @click="goDetail(item)"
+          >
+            <view
+              class="h-64rpx w-64rpx flex flex-shrink-0 items-center justify-center rounded-14rpx bg-#eff6ff text-32rpx text-#2563eb"
+            >
               <view class="i-carbon-sim-card" />
             </view>
             <view class="min-w-0 flex-1">
@@ -520,13 +530,17 @@ defineExpose({
                 {{ displayCardValue(item) }}
               </text>
               <text class="mt-4rpx block truncate text-22rpx text-#64748b leading-30rpx">
-                {{ item.msisdn || item.terminalName || '物联网卡' }} · {{ item.packageName || '未配置套餐' }}
+                {{ item.msisdn || item.terminalName || '物联网卡' }} ·
+                {{ item.packageName || '未配置套餐' }}
               </text>
               <view class="mt-8rpx flex items-center gap-10rpx">
                 <text class="min-w-0 truncate text-21rpx text-#475569">
                   剩余 {{ formatRemainFlow(item) }}
                 </text>
-                <view class="app-tag flex-shrink-0 !px-10rpx !py-2rpx !text-19rpx !leading-26rpx" :class="getCardStatusClass(item)">
+                <view
+                  class="app-tag flex-shrink-0 !px-10rpx !py-2rpx !text-19rpx !leading-26rpx"
+                  :class="getCardStatusClass(item)"
+                >
                   {{ getBossCardStatusText(item.bossCardStatus) }}
                 </view>
               </view>
@@ -584,7 +598,10 @@ defineExpose({
             <text class="owner-val truncate">{{ ownerDeptText(item) }}</text>
           </view>
 
-          <view v-if="getCardAbnormalReasonText(item)" class="mt-12rpx flex items-center gap-8rpx border border-#fee2e2 rounded-8rpx bg-#fef2f2 px-14rpx py-10rpx">
+          <view
+            v-if="getCardAbnormalReasonText(item)"
+            class="mt-12rpx flex items-center gap-8rpx border border-#fee2e2 rounded-8rpx bg-#fef2f2 px-14rpx py-10rpx"
+          >
             <view class="i-carbon-warning-alt flex-shrink-0 text-24rpx text-#dc2626" />
             <text class="min-w-0 flex-1 truncate text-22rpx text-#b91c1c font-700">
               {{ getCardAbnormalReasonText(item) }}
@@ -619,69 +636,16 @@ defineExpose({
               详情
             </wd-button>
             <wd-button
+              v-if="buildCardMoreActions(userStore.userInfo, item).length"
               size="small"
               plain
               block
               custom-class="card-primary-btn"
               @click="openMoreActions(item)"
             >
-              更多
+              {{ V101_RELEASE.showCardMoreActions ? '更多' : '划拨' }}
             </wd-button>
           </view>
-
-          <view class="card-quick-wrap">
-            <text class="card-quick-label">快捷操作</text>
-            <view class="card-quick-row">
-              <wd-button
-                size="small"
-                plain
-                custom-class="card-quick-btn"
-                :disabled="!canRenew(item)"
-                @click="goRenew(item)"
-              >
-                <view class="card-quick-btn__inner">
-                  <view class="i-carbon-renew card-quick-btn__icon card-quick-btn__icon--green" />
-                  <text class="card-quick-btn__text">续费</text>
-                </view>
-              </wd-button>
-              <wd-button
-                size="small"
-                plain
-                custom-class="card-quick-btn"
-                :disabled="primaryOperateDisabled(item)"
-                :loading="primaryOperateLoading(item)"
-                @click="handlePrimaryOperate(item)"
-              >
-                <view class="card-quick-btn__inner">
-                  <view :class="primaryOperateIcon(item)" class="card-quick-btn__icon card-quick-btn__icon--blue" />
-                  <text class="card-quick-btn__text">{{ primaryOperateText(item) }}</text>
-                </view>
-              </wd-button>
-              <wd-button
-                size="small"
-                plain
-                custom-class="card-quick-btn"
-                :disabled="!canWarning(item)"
-                @click="goWarning(item)"
-              >
-                <view class="card-quick-btn__inner">
-                  <view class="i-carbon-warning-alt card-quick-btn__icon card-quick-btn__icon--orange" />
-                  <text class="card-quick-btn__text">预警</text>
-                </view>
-              </wd-button>
-              <wd-button
-                size="small"
-                plain
-                custom-class="card-quick-btn"
-                @click="openMoreActions(item)"
-              >
-                <view class="card-quick-btn__inner">
-                  <view class="i-carbon-overflow-menu-horizontal card-quick-btn__icon card-quick-btn__icon--gray" />
-                  <text class="card-quick-btn__text">更多</text>
-                </view>
-              </wd-button>
-            </view>
-          </view>
         </template>
       </view>
 
@@ -694,17 +658,15 @@ defineExpose({
           <wd-loading size="18px" />
           <text>正在加载更多...</text>
         </view>
-        <wd-button
-          v-else-if="hasMore"
-          size="small"
-          plain
-          block
-          @click="loadMore"
-        >
+        <wd-button v-else-if="hasMore" size="small" plain block @click="loadMore">
           加载更多（已加载 {{ cards.length }}/{{ total }}）
         </wd-button>
         <text v-else class="text-22rpx text-muted">
-          {{ cards.length >= MAX_LOADED_CARDS && cards.length < total ? `已加载前 ${MAX_LOADED_CARDS} 张，请使用搜索缩小范围` : `已加载全部 ${total} 张卡` }}
+          {{
+            cards.length >= MAX_LOADED_CARDS && cards.length < total
+              ? `已加载前 ${MAX_LOADED_CARDS} 张，请使用搜索缩小范围`
+              : `已加载全部 ${total} 张卡`
+          }}
         </text>
       </view>
     </template>
@@ -716,6 +678,7 @@ defineExpose({
     />
 
     <wd-action-sheet
+      v-if="moreSheetActions.length"
       v-model="moreSheetVisible"
       title="更多操作"
       cancel-text="取消"
@@ -862,86 +825,6 @@ defineExpose({
   gap: 12rpx;
 }
 
-.card-quick-wrap {
-  margin-top: 14rpx;
-  padding-top: 14rpx;
-  border-top: 1px dashed #e2e8f0;
-}
-
-.card-quick-label {
-  display: block;
-  margin-bottom: 10rpx;
-  color: #64748b;
-  font-size: 20rpx;
-}
-
-.card-quick-row {
-  display: grid;
-  grid-template-columns: repeat(4, minmax(0, 1fr));
-  gap: 8rpx;
-}
-
-:deep(.card-quick-btn) {
-  width: 100% !important;
-  min-width: 0 !important;
-  height: 80rpx !important;
-  min-height: 80rpx !important;
-  padding: 0 10rpx !important;
-  border: 1px solid #dbe3ef !important;
-  border-color: #dbe3ef !important;
-  border-radius: 12rpx !important;
-  background: #fff !important;
-  box-shadow: none !important;
-  color: #1f2937 !important;
-  font-size: 24rpx !important;
-  font-weight: 700 !important;
-}
-
-:deep(.card-quick-btn.wd-button--disabled),
-:deep(.card-quick-btn[disabled]) {
-  border-color: #e2e8f0 !important;
-  background: #f8fafc !important;
-  box-shadow: none !important;
-  opacity: 0.45 !important;
-}
-
-.card-quick-btn__inner {
-  display: inline-flex;
-  align-items: center;
-  justify-content: center;
-  gap: 8rpx;
-  min-width: 0;
-  white-space: nowrap;
-}
-
-.card-quick-btn__icon {
-  flex-shrink: 0;
-  color: #2563eb;
-  font-size: 28rpx;
-}
-
-.card-quick-btn__text {
-  min-width: 0;
-  overflow: hidden;
-  text-overflow: ellipsis;
-}
-
-.card-quick-btn__icon--blue {
-  color: #2563eb;
-}
-
-.card-quick-btn__icon--green {
-  color: #2563eb;
-}
-
-.card-quick-btn__icon--orange {
-  color: #2563eb;
-}
-
-.card-quick-btn__icon--gray {
-  color: #2563eb;
-}
-
 .status-stack {
   display: flex;
   flex-direction: column;
@@ -1036,15 +919,13 @@ defineExpose({
   font-weight: 700;
 }
 
-:deep(.card-primary-actions .wd-button),
-:deep(.card-quick-row .wd-button) {
+:deep(.card-primary-actions .wd-button) {
   box-sizing: border-box;
   width: 100%;
   min-width: 0;
 }
 
-:deep(.card-primary-actions .wd-button__text),
-:deep(.card-quick-row .wd-button__text) {
+:deep(.card-primary-actions .wd-button__text) {
   min-width: 0;
   overflow: hidden;
   text-overflow: ellipsis;
diff --git a/app/src/pages/card/components/CardToolbar.vue b/app/src/pages/card/components/CardToolbar.vue
index ac036f1..7376ca1 100644
--- a/app/src/pages/card/components/CardToolbar.vue
+++ b/app/src/pages/card/components/CardToolbar.vue
@@ -17,7 +17,7 @@ function handleRefresh() {
 </script>
 
 <template>
-  <view class="box-border w-full overflow-hidden card-base p-20rpx">
+  <view class="box-border card-base w-full overflow-hidden p-20rpx">
     <view class="flex items-center gap-12rpx">
       <wd-search
         v-model="searchValue"
diff --git a/app/src/pages/card/index.vue b/app/src/pages/card/index.vue
index 1a18464..0230af6 100644
--- a/app/src/pages/card/index.vue
+++ b/app/src/pages/card/index.vue
@@ -13,6 +13,7 @@ import {
   stopDataService,
 } from '@/api/card'
 import RouterPath from '@/constant/RouterPath'
+import { V101_RELEASE } from '@/constant/release'
 import { useLastQueriedCardStore, useTokenStore } from '@/store'
 import { useUserStore } from '@/store/user'
 import { showLifecycleBatchProgress } from '@/utils/lifecycleBatch'
@@ -67,9 +68,12 @@ let cardStatsLoadSeq = 0
 
 function handleListData(_items: AppCard[], total: number) {
   cardCount.value = total
+  void loadCardStats()
 }
 
 async function loadCardStats() {
+  if (!tokenStore.hasLogin)
+    return
   const seq = ++cardStatsLoadSeq
   try {
     const [normal, lowFlow, abnormal] = await Promise.all([
@@ -196,13 +200,8 @@ const masterLifecycleDisabled = computed(() =>
 
 function handleRefresh() {
   refreshKey.value += 1
-  void loadCardStats()
 }
 
-onMounted(() => {
-  void loadCardStats()
-})
-
 function canMasterRenew() {
   return canRenewCardAction(userStore.userInfo, lastQueriedCard.value)
 }
@@ -465,15 +464,15 @@ function goMasterWarning() {
           <view class="summary-statuses">
             <view class="summary-status summary-status--normal">
               <text class="summary-status__num">{{ normalCount }}</text>
-              <text>正常</text>
+              <text class="shrink-0 whitespace-nowrap">正常</text>
             </view>
             <view class="summary-status summary-status--low">
               <text class="summary-status__num">{{ lowFlowCount }}</text>
-              <text>低流量</text>
+              <text class="shrink-0 whitespace-nowrap">低流量</text>
             </view>
             <view class="summary-status summary-status--danger">
               <text class="summary-status__num">{{ abnormalCount }}</text>
-              <text>异常</text>
+              <text class="shrink-0 whitespace-nowrap">异常</text>
             </view>
           </view>
         </view>
@@ -510,6 +509,7 @@ function goMasterWarning() {
               详情
             </wd-button>
             <wd-button
+              v-if="V101_RELEASE.showCardMoreActions"
               size="small"
               plain
               custom-class="master-action-btn"
@@ -518,62 +518,9 @@ function goMasterWarning() {
               更多
             </wd-button>
           </view>
-          <view class="master-card__quick">
-            <text class="master-card__quick-label">快捷操作</text>
-            <view class="master-card__quick-grid">
-              <wd-button
-                size="small"
-                plain
-                custom-class="master-quick-btn"
-                :disabled="!canMasterRenew()"
-                @click="goMasterRenew"
-              >
-                <view class="master-quick-btn__inner">
-                  <view class="i-carbon-renew master-quick-btn__icon master-quick-btn__icon--green" />
-                  <text class="master-quick-btn__text">续费</text>
-                </view>
-              </wd-button>
-              <wd-button
-                size="small"
-                plain
-                custom-class="master-quick-btn"
-                :disabled="!canMasterRestart() || masterRestarting"
-                :loading="masterRestarting"
-                @click="goMasterRestart"
-              >
-                <view class="master-quick-btn__inner">
-                  <view class="i-carbon-reset master-quick-btn__icon master-quick-btn__icon--blue" />
-                  <text class="master-quick-btn__text">重启</text>
-                </view>
-              </wd-button>
-              <wd-button
-                size="small"
-                plain
-                custom-class="master-quick-btn"
-                :disabled="!canMasterWarning()"
-                @click="goMasterWarning"
-              >
-                <view class="master-quick-btn__inner">
-                  <view class="i-carbon-warning-alt master-quick-btn__icon master-quick-btn__icon--orange" />
-                  <text class="master-quick-btn__text">预警</text>
-                </view>
-              </wd-button>
-              <wd-button
-                size="small"
-                plain
-                custom-class="master-quick-btn"
-                @click="openMasterMoreActions"
-              >
-                <view class="master-quick-btn__inner">
-                  <view class="i-carbon-overflow-menu-horizontal master-quick-btn__icon master-quick-btn__icon--gray" />
-                  <text class="master-quick-btn__text">更多</text>
-                </view>
-              </wd-button>
-            </view>
-          </view>
         </view>
 
-        <view class="bind-card" @click="openBindPanel">
+        <view v-if="V101_RELEASE.showBindCard" class="bind-card" @click="openBindPanel">
           <view class="bind-card__icon">
             <view class="i-carbon-add-alt" />
           </view>
@@ -619,6 +566,7 @@ function goMasterWarning() {
   </scroll-view>
 
   <wd-action-sheet
+    v-if="V101_RELEASE.showCardMoreActions"
     v-model="masterMoreVisible"
     title="更多操作"
     cancel-text="取消"
@@ -630,6 +578,7 @@ function goMasterWarning() {
   />
 
   <wd-popup
+    v-if="V101_RELEASE.showBindCard"
     v-model="showBindPanel"
     position="bottom"
     round
@@ -749,6 +698,7 @@ function goMasterWarning() {
 
 .card-summary {
   display: flex;
+  flex-wrap: wrap;
   align-items: center;
   justify-content: space-between;
   gap: 18rpx;
@@ -758,6 +708,7 @@ function goMasterWarning() {
 
 .summary-total {
   display: flex;
+  flex-shrink: 0;
   min-width: 0;
   align-items: baseline;
   flex-wrap: wrap;
@@ -785,14 +736,18 @@ function goMasterWarning() {
 
 .summary-statuses {
   display: flex;
+  flex: 1 0 auto;
   align-items: center;
-  gap: 12rpx;
+  justify-content: flex-end;
+  gap: 8rpx;
 }
 
 .summary-status {
   display: flex;
+  flex: 0 0 auto;
   align-items: center;
-  gap: 6rpx;
+  justify-content: center;
+  gap: 4rpx;
   padding: 0;
   font-size: 22rpx;
   white-space: nowrap;
@@ -801,6 +756,8 @@ function goMasterWarning() {
 
 .summary-status__num {
   display: inline-flex;
+  white-space: nowrap;
+  flex-shrink: 0;
   min-width: 28rpx;
   height: 28rpx;
   padding: 0 8rpx;
@@ -916,25 +873,6 @@ function goMasterWarning() {
   margin-top: 20rpx;
 }
 
-.master-card__quick {
-  margin-top: 20rpx;
-  padding-top: 18rpx;
-  border-top: 1px dashed #e2e8f0;
-}
-
-.master-card__quick-label {
-  display: block;
-  margin-bottom: 12rpx;
-  color: #64748b;
-  font-size: 20rpx;
-}
-
-.master-card__quick-grid {
-  display: grid;
-  grid-template-columns: repeat(4, minmax(0, 1fr));
-  gap: 10rpx;
-}
-
 :deep(.master-action-btn) {
   width: 100% !important;
   height: 80rpx !important;
@@ -955,68 +893,6 @@ function goMasterWarning() {
   color: #fff !important;
 }
 
-:deep(.master-quick-btn) {
-  width: 100% !important;
-  min-width: 0 !important;
-  height: 80rpx !important;
-  min-height: 80rpx !important;
-  padding: 0 10rpx !important;
-  border: 1px solid #dbe3ef !important;
-  border-color: #dbe3ef !important;
-  border-radius: 12rpx !important;
-  background: #fff !important;
-  box-shadow: none !important;
-  color: #1f2937 !important;
-  font-size: 24rpx !important;
-  font-weight: 700 !important;
-}
-
-:deep(.master-quick-btn.is-disabled),
-:deep(.master-quick-btn.wd-button--disabled),
-:deep(.master-quick-btn[disabled]) {
-  border-color: #e2e8f0 !important;
-  background: #f8fafc !important;
-  box-shadow: none !important;
-  opacity: 0.45 !important;
-}
-
-.master-quick-btn__inner {
-  display: inline-flex;
-  min-width: 0;
-  align-items: center;
-  justify-content: center;
-  gap: 8rpx;
-  white-space: nowrap;
-}
-
-.master-quick-btn__icon {
-  flex-shrink: 0;
-  color: #2563eb;
-  font-size: 28rpx;
-}
-
-.master-quick-btn__text {
-  min-width: 0;
-  overflow: hidden;
-  text-overflow: ellipsis;
-}
-
-.master-quick-btn__icon--blue {
-  color: #2563eb;
-}
-
-.master-quick-btn__icon--green {
-  color: #2563eb;
-}
-
-.master-quick-btn__icon--orange {
-  color: #2563eb;
-}
-
-.master-quick-btn__icon--gray {
-  color: #2563eb;
-}
-
 .bind-card {
   display: flex;
   align-items: center;
@@ -1382,16 +1258,13 @@ function goMasterWarning() {
   }
 
   .summary-statuses {
-    gap: 6rpx;
+    gap: 2rpx;
   }
 
   .summary-status {
-    padding-right: 8rpx;
-    padding-left: 8rpx;
     font-size: 19rpx;
   }
 
-  .master-card__quick-grid,
   .bind-card__actions {
     gap: 8rpx;
   }
diff --git a/app/src/pages/card/views/detail/index.vue b/app/src/pages/card/views/detail/index.vue
index fb02e72..2af4c3d 100644
--- a/app/src/pages/card/views/detail/index.vue
+++ b/app/src/pages/card/views/detail/index.vue
@@ -11,6 +11,8 @@ import {
   stopDataService,
 } from '@/api/card'
 import RouterPath from '@/constant/RouterPath'
+import { hasAnyFeature } from '@/utils/permission'
+import { V101_RELEASE } from '@/constant/release'
 import { useTokenStore, useUserStore } from '@/store'
 import { copyText } from '@/utils/clipboard'
 import { showLifecycleBatchProgress } from '@/utils/lifecycleBatch'
@@ -20,6 +22,8 @@ import {
   canAllocateCardAction,
   canBusinessCardAction,
   canChangeCardAction,
+  canDataStartCardAction,
+  canDataStopCardAction,
   canRenewCardAction,
   canRestartCardAction,
   canStartCardAction,
@@ -37,6 +41,7 @@ import {
   getNetModelText,
   getOnlineStatusText,
   getRatText,
+  getServiceStatusText,
 } from '../../data'
 
 definePage({
@@ -75,6 +80,21 @@ const canAllocateCard = computed(
 const canRestartCard = computed(
   () => !isPublicLimited.value && canRestartCardAction(userStore.userInfo, card.value),
 )
+const canStartDataService = computed(
+  () =>
+    !isPublicLimited.value
+    && Number(card.value?.dataServiceStatus) === 0
+    && canDataStartCardAction(userStore.userInfo, card.value),
+)
+const canStopDataService = computed(
+  () =>
+    !isPublicLimited.value
+    && Number(card.value?.dataServiceStatus) === 1
+    && canDataStopCardAction(userStore.userInfo, card.value),
+)
+const showQuickActions = computed(
+  () => canRestartCard.value || canStartDataService.value || canStopDataService.value,
+)
 const canStopCard = computed(
   () => !isPublicLimited.value && canStopCardAction(userStore.userInfo, card.value),
 )
@@ -95,6 +115,8 @@ const flowRows = computed(() => {
   const item = card.value
   if (!item)
     return []
+  if (isPublicLimited.value)
+    return [['已用流量', formatFlow(item.usedFlowMb)]]
   const rows = [
     ['总流量', formatFlow(item.packageTotalFlowMb)],
     ['已用流量', formatFlow(item.usedFlowMb)],
@@ -151,6 +173,19 @@ const sessionRows = computed(() => {
   ]
 })
 
+const serviceRows = computed(() => {
+  const item = card.value
+  if (!item)
+    return []
+  return [
+    ['数据服务', formatServiceStatus(item.dataServiceStatus)],
+    ['短信服务', formatServiceStatus(item.smsServiceStatus)],
+    ['语音服务', formatServiceStatus(item.voiceServiceStatus)],
+    ['漫游服务', formatServiceStatus(item.roamServiceStatus)],
+    ['状态同步时间', formatDateTime(item.statusSyncTime)],
+  ]
+})
+
 const detailSections = computed(() =>
   [
     { title: '基础信息', rows: baseRows.value },
@@ -163,6 +198,8 @@ const extraInfoSections = computed(() => {
     return []
   return [
     { title: '会话信息', rows: sessionRows.value },
+    // v1.0.1 暂不展示服务状态，保留 serviceRows 便于后续恢复。
+    // { title: '服务状态', rows: serviceRows.value },
   ].filter(section => section.rows.some(row => isMeaningfulDetailValue(row[1])))
 })
 
@@ -190,7 +227,12 @@ async function loadCard() {
     visibleExtraSectionCount.value = 1
   }
   catch (error) {
-    errorMessage.value = getErrorMessage(error, '卡片详情加载失败')
+    const message = getErrorMessage(error, '卡片详情加载失败')
+    if (isCardNotFoundMessage(message)) {
+      goDiagnosisForMissingCard(value)
+      return
+    }
+    errorMessage.value = message
     card.value = undefined
   }
   finally {
@@ -331,6 +373,12 @@ function isMeaningfulDetailValue(value: unknown) {
   return !!text && text !== '-' && text !== '未知' && text !== '暂无会话信息'
 }
 
+function formatServiceStatus(status?: number) {
+  if (status === undefined || status === null)
+    return '-'
+  return getServiceStatusText(status)
+}
+
 async function handleRestart() {
   const value = displayCardValue(card.value)
   if (!hasLogin.value) {
@@ -401,6 +449,11 @@ async function submitLifecycle(cardNo: string, operation: 'stop' | 'start', acti
 }
 
 function handleDataService(operation: 'dataStart' | 'dataStop') {
+  const allowed = operation === 'dataStart' ? canStartDataService.value : canStopDataService.value
+  if (!allowed) {
+    uni.showToast({ title: '当前账号没有该数据服务操作权限', icon: 'none' })
+    return
+  }
   const value = displayCardValue(card.value)
   if (value === '-')
     return
@@ -545,6 +598,21 @@ function getErrorMessage(error: unknown, fallback: string) {
   return message || fallback
 }
 
+function isCardNotFoundMessage(message: string) {
+  return /卡信息不存在|卡片不存在|该卡暂未纳入服务|未查询到该卡片|卡号不存在/.test(message)
+}
+
+function goDiagnosisForMissingCard(value: string) {
+  const queryCode = value.trim()
+  if (!queryCode) {
+    errorMessage.value = '未查询到该卡片，请核对卡号后重试'
+    return
+  }
+  uni.redirectTo({
+    url: `${RouterPath.BusinessViewsDiagnosis}?queryCode=${encodeURIComponent(queryCode)}&source=card-detail-fallback`,
+  })
+}
+
 onLoad((query) => {
   const queryValue = query?.cardValue || query?.cardNo || query?.iccid
   cardValue.value = normalizeQueryValue(queryValue)
@@ -562,6 +630,13 @@ onShow(() => {
 function normalizeQueryValue(value: string | string[] | undefined) {
   return Array.isArray(value) ? value[0] : String(value || '')
 }
+function handleCreateWorkOrder() {
+  if (!card.value?.id || !hasAnyFeature(userStore.userInfo, 'workorder:create')) {
+    uni.showToast({ title: '当前卡片无法提交工单', icon: 'none' })
+    return
+  }
+  uni.navigateTo({ url: `${RouterPath.BusinessViewsWorkOrderCreate}?woType=0&relatedId=${card.value?.id}&context=${encodeURIComponent(`卡片：${card.value?.iccid || ''}`)}` })
+}
 </script>
 
 <template>
@@ -626,7 +701,7 @@ function normalizeQueryValue(value: string | string[] | undefined) {
           </wd-card>
 
           <wd-card
-            v-if="!isPublicLimited"
+            v-if="showQuickActions"
             custom-class="!mx-0 !mb-0 overflow-hidden detail-card detail-actions-card"
             custom-content-class="!p-0"
           >
@@ -635,20 +710,13 @@ function normalizeQueryValue(value: string | string[] | undefined) {
                 <view class="section-bar" />
                 <text class="section-title">快捷操作</text>
               </view>
-              <text class="section-hint">常用功能</text>
             </view>
             <view class="action-grid">
-              <wd-button plain block custom-class="detail-action-btn detail-action-btn--renew" @click="handleRenew">
-                <view class="action-button-content">
-                  <view class="i-carbon-renew action-button-icon action-button-icon--green" />
-                  <text>续费</text>
-                </view>
-              </wd-button>
               <wd-button
+                v-if="canRestartCard"
                 plain
                 block
                 custom-class="detail-action-btn detail-action-btn--restart"
-                :disabled="!canRestartCard"
                 :loading="restarting"
                 @click="handleRestart"
               >
@@ -658,26 +726,41 @@ function normalizeQueryValue(value: string | string[] | undefined) {
                 </view>
               </wd-button>
               <wd-button
+                v-if="canStartDataService"
                 plain
                 block
-                custom-class="detail-action-btn detail-action-btn--warning"
-                :disabled="!canWarningCard"
-                @click="handleWarning"
+                custom-class="detail-action-btn"
+                :loading="lifecycleSubmitting"
+                @click="handleDataService('dataStart')"
               >
                 <view class="action-button-content">
-                  <view class="i-carbon-warning-alt action-button-icon action-button-icon--orange" />
-                  <text>预警</text>
+                  <view class="i-carbon-play-filled-alt action-button-icon action-button-icon--blue" />
+                  <text>开通数据</text>
                 </view>
               </wd-button>
-              <wd-button plain block custom-class="detail-action-btn detail-action-btn--more" @click="openMoreActions">
+              <wd-button
+                v-if="canStopDataService"
+                plain
+                block
+                custom-class="detail-action-btn"
+                :loading="lifecycleSubmitting"
+                @click="handleDataService('dataStop')"
+              >
                 <view class="action-button-content">
-                  <view class="i-carbon-overflow-menu-horizontal action-button-icon action-button-icon--gray" />
-                  <text>更多</text>
+                  <view class="i-carbon-pause-filled action-button-icon action-button-icon--blue" />
+                  <text>停用数据</text>
                 </view>
               </wd-button>
             </view>
           </wd-card>
 
+          <wd-button
+            v-if="card?.id && hasAnyFeature(userStore.userInfo, 'workorder:create')"
+            plain
+            @click="handleCreateWorkOrder"
+          >
+            反馈卡片问题
+          </wd-button>
           <wd-card
             v-for="section in detailSections"
             :key="section.title"
@@ -748,6 +831,10 @@ function normalizeQueryValue(value: string | string[] | undefined) {
             </view>
           </wd-card>
 
+          <wd-button v-if="moreSheetActions.length" plain block type="primary" size="small" @click="openMoreActions">
+            {{ V101_RELEASE.showCardMoreActions ? '更多操作' : '划拨这张卡' }}
+          </wd-button>
+
           <wd-button
             v-if="hasMoreInfo"
             plain
@@ -760,7 +847,7 @@ function normalizeQueryValue(value: string | string[] | undefined) {
           </wd-button>
 
           <wd-card
-            v-if="!isPublicLimited && !card.isBound && isTerminal"
+            v-if="V101_RELEASE.showBindCard && !isPublicLimited && !card.isBound && isTerminal"
             custom-class="!mx-0 !mb-0 overflow-hidden detail-card detail-bind-card"
             custom-content-class="!p-0"
           >
@@ -786,6 +873,7 @@ function normalizeQueryValue(value: string | string[] | undefined) {
   </scroll-view>
 
   <wd-action-sheet
+    v-if="moreSheetActions.length"
     v-model="moreSheetVisible"
     title="更多操作"
     cancel-text="取消"
@@ -978,8 +1066,8 @@ function normalizeQueryValue(value: string | string[] | undefined) {
 
 .action-grid {
   display: grid;
-  grid-template-columns: repeat(4, minmax(0, 1fr));
-  gap: 10rpx;
+  grid-template-columns: repeat(2, minmax(0, 1fr));
+  gap: 12rpx;
   padding: 0 24rpx 20rpx;
 }
 
diff --git a/app/src/pages/card/views/warning/index.vue b/app/src/pages/card/views/warning/index.vue
index 6d6e7ea..861cf23 100644
--- a/app/src/pages/card/views/warning/index.vue
+++ b/app/src/pages/card/views/warning/index.vue
@@ -1,17 +1,15 @@
 <script lang="ts" setup>
 import type { WarningConfig, WarningConfigSaveParams } from '../api/warning'
-import { bindWechat, getWxCode } from '@/api/login'
 import {
   getWarningConfigList,
   saveWarningConfig,
-  updateWarningConfigNotify,
 } from '../api/warning'
+import RouterPath from '@/constant/RouterPath'
 import { useUserStore } from '@/store/user'
 import {
   displayCardValue,
   formatFlowPair,
 } from '../../data'
-import { guideWechatSubscribeSettings, requestWechatSubscribeMessage, shouldGuideWechatSubscribeSettings, shouldShowWechatSubscribeNotice } from '@/utils'
 
 definePage({
   style: {
@@ -40,16 +38,8 @@ type WarningPayload = Omit<WarningConfigSaveParams, 'cardValue'>
 const userStore = useUserStore()
 const loading = ref(false)
 const submitting = ref(false)
-const notificationSubmitting = ref(false)
-const binding = ref(false)
 const cardValue = ref('')
 const card = ref<any>()
-const templateId = ref('')
-const templateReady = ref(false)
-const wechatBound = ref(false)
-const wechatBindText = ref('未绑定')
-const appNotifyEnabled = ref(false)
-const savedConfig = ref<WarningConfig | null>(null)
 const errorMessage = ref('')
 
 const forms = reactive<WarningForm[]>([
@@ -75,22 +65,6 @@ const cardSubTitle = computed(() =>
   card.value ? (card.value.msisdn || '卡片预警配置') : '加载卡片信息',
 )
 const flowText = computed(() => (card.value ? formatFlowPair(card.value) : '-'))
-const subscribeText = computed(() => {
-  if (!appNotifyEnabled.value)
-    return '提醒已关闭'
-  if (!templateReady.value)
-    return '模板未配置'
-  return wechatBound.value ? '已绑定微信' : '待绑定微信'
-})
-const notificationDescription = computed(() =>
-  appNotifyEnabled.value
-    ? '开启后会在消息中心保留预警，并尝试发送微信订阅提醒。'
-    : '当前已关闭小程序预警提醒，不影响其他通知渠道。',
-)
-const notificationSummary = computed(() =>
-  appNotifyEnabled.value ? (wechatBound.value ? wechatBindText.value : '未绑定微信') : '小程序提醒已关闭',
-)
-const submitButtonText = computed(() => (appNotifyEnabled.value ? '保存并订阅提醒' : '保存预警配置'))
 const filledConfigCount = computed(() => forms.filter(hasThresholdValue).length)
 const canSubmit = computed(() => filledConfigCount.value > 0 && !submitting.value && !loading.value)
 
@@ -104,10 +78,6 @@ async function loadData() {
   try {
     const res = await getWarningConfigList({ cardValue: cardValue.value })
     card.value = res.card
-    templateId.value = res.templateId || ''
-    templateReady.value = Boolean(res.templateReady)
-    wechatBound.value = Boolean(res.wechatBound)
-    wechatBindText.value = res.wechatBindText || (res.wechatBound ? '已绑定' : '未绑定')
     syncForms(res.items || [])
   }
   catch (error) {
@@ -123,8 +93,6 @@ function syncForms(items: WarningConfig[]) {
   items.forEach((item) => {
     source.set(item.warnUnit, item)
   })
-  savedConfig.value = null
-  appNotifyEnabled.value = false
   forms.forEach((form) => {
     const item = source.get(form.warnUnit)
     if (!item) {
@@ -134,8 +102,6 @@ function syncForms(items: WarningConfig[]) {
       form.thirdWarn = ''
       return
     }
-    savedConfig.value = item
-    appNotifyEnabled.value = item.appNotifyEnabled === 1
     form.enabled = item.isEnabled !== 0
     form.firstWarn = formatThreshold(item.firstWarn)
     form.secondWarn = formatThreshold(item.secondWarn)
@@ -184,7 +150,6 @@ function buildConfigPayload(validate: boolean): WarningPayload[] {
       secondWarn,
       thirdWarn,
       isEnabled: form.enabled ? 1 : 0,
-      appNotifyEnabled: appNotifyEnabled.value ? 1 : 0,
     })
   }
 
@@ -205,97 +170,6 @@ function validateThreshold(form: WarningForm, firstWarn: number, secondWarn: num
   return ''
 }
 
-async function handleNotifyChange() {
-  const enabled = appNotifyEnabled.value
-  const previousValue = savedConfig.value?.appNotifyEnabled === 1
-  if (!savedConfig.value?.id) {
-    showFeedback(
-      enabled ? '保存预警配置后，小程序提醒才会生效' : '关闭设置将在保存配置时生效',
-      '提醒设置',
-    )
-    return
-  }
-  if (notificationSubmitting.value)
-    return
-
-  notificationSubmitting.value = true
-  try {
-    const subscribeResult = enabled
-      ? await requestWechatSubscribeMessage(templateId.value, templateReady.value)
-      : undefined
-    const res = await updateWarningConfigNotify({
-      cardValue: cardValue.value,
-      warnUnit: 1,
-      appNotifyEnabled: enabled ? 1 : 0,
-    })
-    if (res.config)
-      savedConfig.value = res.config
-    appNotifyEnabled.value = res.appNotifyEnabled === 1
-    wechatBound.value = Boolean(res.wechatBound)
-    wechatBindText.value = res.wechatBindText || (res.wechatBound ? '已绑定' : '未绑定')
-
-    if (!enabled) {
-      uni.showToast({ title: '已关闭小程序提醒', icon: 'success' })
-      return
-    }
-
-    if (subscribeResult && shouldShowWechatSubscribeNotice(subscribeResult)) {
-      if (shouldGuideWechatSubscribeSettings(subscribeResult)) {
-        guideWechatSubscribeSettings(subscribeResult)
-        return
-      }
-      uni.showModal({
-        title: '提醒开关已更新',
-        content: subscribeResult.message,
-        showCancel: false,
-      })
-    }
-    else {
-      uni.showToast({
-        title: subscribeResult?.status === 'accepted' ? '已开启并订阅' : '已开启小程序提醒',
-        icon: 'success',
-      })
-    }
-  }
-  catch (error) {
-    appNotifyEnabled.value = previousValue
-    showFeedback(getErrorMessage(error, '更新提醒开关失败'), '提醒设置失败')
-  }
-  finally {
-    notificationSubmitting.value = false
-  }
-}
-
-async function handleBindWechat() {
-  // #ifndef MP-WEIXIN
-  uni.showToast({ title: '请在微信小程序中绑定', icon: 'none' })
-  return
-  // #endif
-
-  // #ifdef MP-WEIXIN
-  if (binding.value)
-    return
-  binding.value = true
-  try {
-    const wxRes = await getWxCode()
-    if (!wxRes.code)
-      throw new Error('获取微信登录凭证失败')
-    const res = await bindWechat({ wxCode: wxRes.code })
-    if (res.userInfo)
-      userStore.setUserInfo(res.userInfo)
-    wechatBound.value = true
-    wechatBindText.value = '已绑定'
-    uni.showToast({ title: '微信绑定成功', icon: 'success' })
-  }
-  catch (error) {
-    showFeedback(getErrorMessage(error, '微信绑定失败'), '微信绑定失败')
-  }
-  finally {
-    binding.value = false
-  }
-  // #endif
-}
-
 async function handleSubmit() {
   const configs = buildConfigPayload(true)
   if (!configs.length || submitting.value)
@@ -303,12 +177,7 @@ async function handleSubmit() {
 
   submitting.value = true
   try {
-    const subscribeResult = appNotifyEnabled.value
-      ? await requestWechatSubscribeMessage(templateId.value, templateReady.value)
-      : undefined
     const savedItems: WarningConfig[] = []
-    let latestBound = wechatBound.value
-    let latestBindText = wechatBindText.value
     for (const config of configs) {
       const res = await saveWarningConfig({
         cardValue: cardValue.value,
@@ -316,29 +185,9 @@ async function handleSubmit() {
       })
       if (res.config)
         savedItems.push(res.config)
-      latestBound = Boolean(res.wechatBound)
-      latestBindText = res.wechatBindText || (res.wechatBound ? '已绑定' : '未绑定')
     }
     syncForms(savedItems)
-    wechatBound.value = latestBound
-    wechatBindText.value = latestBindText
-    if (subscribeResult && shouldShowWechatSubscribeNotice(subscribeResult)) {
-      if (shouldGuideWechatSubscribeSettings(subscribeResult)) {
-        guideWechatSubscribeSettings(subscribeResult)
-        return
-      }
-      uni.showModal({
-        title: '配置已保存',
-        content: subscribeResult.message,
-        showCancel: false,
-      })
-    }
-    else {
-      const message = !appNotifyEnabled.value
-        ? '配置已保存，未开启小程序提醒。你仍可在消息中心查看预警记录。'
-        : subscribeResult?.status === 'accepted' ? '配置已保存并订阅微信提醒。' : '配置已保存。'
-      showFeedback(message, '配置已保存', 'success')
-    }
+    showFeedback('预警配置已保存，触发后的通知可在消息中心查看。', '配置已保存', 'success')
   }
   catch (error) {
     showFeedback(getErrorMessage(error, '保存失败'), '保存失败')
@@ -348,6 +197,10 @@ async function handleSubmit() {
   }
 }
 
+function goMessageCenter() {
+  uni.navigateTo({ url: RouterPath.Message })
+}
+
 function getErrorMessage(error: unknown, fallback: string) {
   if (error && typeof error === 'object') {
     const data = error as { msg?: unknown, message?: unknown, errMsg?: unknown }
@@ -422,8 +275,8 @@ onShow(() => {
                 {{ cardSubTitle }}
               </text>
             </view>
-            <wd-tag :type="templateReady ? 'primary' : 'warning'" round>
-              {{ subscribeText }}
+            <wd-tag type="primary" round>
+              站内消息提醒
             </wd-tag>
           </view>
 
@@ -437,51 +290,15 @@ onShow(() => {
             <view class="rounded-16rpx bg-#f8fafc p-18rpx">
               <text class="block text-22rpx text-muted">提醒方式</text>
               <text class="mt-8rpx block truncate text-26rpx text-ink font-800">
-                {{ appNotifyEnabled ? '微信订阅消息' : '暂不提醒' }}
+                全局统一管理
               </text>
             </view>
           </view>
         </view>
 
-        <wd-card custom-class="!mx-0 !mb-0" custom-content-class="!p-24rpx">
-          <view class="flex items-start justify-between gap-20rpx">
-            <view class="min-w-0 flex items-start gap-16rpx">
-              <view class="h-56rpx w-56rpx center shrink-0 rounded-18rpx bg-#eff6ff text-#2563eb">
-                <view class="i-carbon-notification text-32rpx" />
-              </view>
-              <view class="min-w-0">
-                <text class="block text-29rpx text-ink font-800">小程序消息订阅</text>
-                <text class="mt-6rpx block text-23rpx text-muted leading-34rpx">
-                  {{ notificationDescription }}
-                </text>
-              </view>
-            </view>
-            <wd-switch
-              v-model="appNotifyEnabled"
-              :disabled="notificationSubmitting"
-              @change="handleNotifyChange"
-            />
-          </view>
-
-          <view class="grid grid-cols-2 mt-20rpx gap-12rpx">
-            <view class="rounded-16rpx bg-#f8fafc p-16rpx">
-              <text class="block text-22rpx text-muted">通知范围</text>
-              <text class="mt-6rpx block text-24rpx text-ink font-700">
-                消息中心 + 微信提醒
-              </text>
-            </view>
-            <view class="rounded-16rpx bg-#f8fafc p-16rpx">
-              <text class="block text-22rpx text-muted">其他通知</text>
-              <text class="mt-6rpx block text-24rpx text-ink font-700">不受影响</text>
-            </view>
-          </view>
-
-          <view v-if="appNotifyEnabled && !wechatBound" class="mt-18rpx">
-            <wd-button type="primary" plain block :loading="binding" @click="handleBindWechat">
-              绑定当前微信
-            </wd-button>
-          </view>
-        </wd-card>
+        <wd-cell-group border>
+          <wd-cell title="消息中心" label="预警触发后可查看站内通知" value="查看消息" is-link @click="goMessageCenter" />
+        </wd-cell-group>
 
         <wd-card custom-class="!mx-0 !mb-0" custom-content-class="!p-0">
           <template #title>
@@ -577,10 +394,10 @@ onShow(() => {
     <view class="mx-auto max-w-920rpx pb-18rpx">
       <view class="mb-12rpx flex items-center justify-between text-24rpx text-muted">
         <text>已填 {{ filledConfigCount }} 项配置</text>
-        <text>{{ notificationSummary }}</text>
+        <text>预警通知在消息中心查看</text>
       </view>
       <wd-button type="primary" block :loading="submitting" :disabled="!canSubmit" @click="handleSubmit">
-        {{ submitButtonText }}
+        保存预警配置
       </wd-button>
     </view>
   </view>
diff --git a/app/src/pages/home/components/PublicCardQuery.vue b/app/src/pages/home/components/PublicCardQuery.vue
index 9b7ba63..53cdac4 100644
--- a/app/src/pages/home/components/PublicCardQuery.vue
+++ b/app/src/pages/home/components/PublicCardQuery.vue
@@ -1,34 +1,24 @@
 <script setup lang="ts">
 import type { AppCard } from '@/api/card'
-import { bindCard, publicQueryCard, recognizeCardImage } from '@/api/card'
+import { publicQueryCard, recognizeCardImage } from '@/api/card'
 import RouterPath from '@/constant/RouterPath'
 import {
-  formatFlowPair,
+  formatFlow,
   getBossCardStatusText,
   getCardStatusType,
   getOnlineStatusText,
 } from '@/pages/card/data'
-import { useLastQueriedCardStore, useTokenStore, useUserStore } from '@/store'
+import { useLastQueriedCardStore } from '@/store'
 import { copyText } from '@/utils/clipboard'
 import { cardRecognitionMessage, chooseCardImage } from '@/utils/cardRecognition'
-import { isTerminalUserInfo } from '@/utils/userIdentity'
-
-const emit = defineEmits<{
-  refreshStats: []
-}>()
 
 const searchValue = ref('')
 const queryLoading = ref(false)
 const recognizing = ref(false)
-const binding = ref(false)
 const queryErrorMessage = ref('')
 const result = ref<AppCard>()
 
-const tokenStore = useTokenStore()
-const userStore = useUserStore()
 const lastQueriedCardStore = useLastQueriedCardStore()
-const hasLogin = computed(() => tokenStore.hasLogin)
-const isTerminal = computed(() => isTerminalUserInfo(userStore.userInfo))
 const loadingText = computed(() => recognizing.value ? '图片识别中...' : '卡片查询中...')
 
 const queryRows = computed(() => {
@@ -36,7 +26,7 @@ const queryRows = computed(() => {
     return []
   return [
     { label: '卡号', value: publicCardTitle(result.value), copyable: true },
-    { label: '剩余流量', value: formatFlowPair(result.value), copyable: false },
+    { label: '使用流量', value: formatFlow(result.value.usedFlowMb), copyable: false },
     { label: '在线状态', value: getOnlineStatusText(result.value.onlineStatus), copyable: false },
   ]
 })
@@ -57,7 +47,12 @@ async function handleQuery() {
     lastQueriedCardStore.setCard(res.card)
   }
   catch (error) {
-    queryErrorMessage.value = getErrorMessage(error, '查询失败，请检查输入后重试')
+    const message = getErrorMessage(error, '查询失败，请检查输入后重试')
+    if (isCardNotFoundMessage(message)) {
+      goDiagnosisForMissingCard(cardValue)
+      return
+    }
+    queryErrorMessage.value = message
   }
   finally {
     queryLoading.value = false
@@ -90,7 +85,8 @@ async function handlePhotoRecognize() {
     const recognition = await recognizeCardImage(filePath)
     if (recognition.code === 'CARD_RECOGNIZED' && recognition.cardValue) {
       searchValue.value = recognition.cardValue
-      uni.showToast({ title: 'ICCID 识别成功', icon: 'success' })
+      recognizing.value = false
+      await handleQuery()
       return
     }
     searchValue.value = recognition.cardValue || ''
@@ -116,6 +112,21 @@ function goDiagnosis() {
   })
 }
 
+function isCardNotFoundMessage(message: string) {
+  return /卡信息不存在|卡片不存在|该卡暂未纳入服务|未查询到该卡片|卡号不存在/.test(message)
+}
+
+function goDiagnosisForMissingCard(value: string) {
+  const queryCode = value.trim()
+  if (!queryCode) {
+    queryErrorMessage.value = '未查询到该卡片，请核对卡号后重试'
+    return
+  }
+  uni.navigateTo({
+    url: `${RouterPath.BusinessViewsDiagnosis}?queryCode=${encodeURIComponent(queryCode)}&source=public-query-fallback`,
+  })
+}
+
 function publicCardTitle(card: AppCard) {
   return card.iccid || card.msisdn || card.imsi || '-'
 }
@@ -133,48 +144,6 @@ function goDetail() {
   })
 }
 
-function goLogin() {
-  uni.navigateTo({ url: RouterPath.Login })
-}
-
-async function handleBind() {
-  const cardValue = publicCardCopyValue(result.value) || searchValue.value.trim()
-  if (!hasLogin.value) {
-    goLogin()
-    return
-  }
-  if (!isTerminal.value) {
-    uni.showToast({ title: '企业用户无需绑定卡，请到我的卡片查看', icon: 'none' })
-    return
-  }
-  if (!cardValue)
-    return
-  if (result.value?.isBound) {
-    uni.showToast({ title: '已绑定', icon: 'none' })
-    return
-  }
-
-  binding.value = true
-  try {
-    const res = await bindCard({ cardValue })
-    result.value = res.card
-    lastQueriedCardStore.setCard(res.card)
-    emit('refreshStats')
-    uni.showToast({ title: '绑定成功', icon: 'success' })
-  }
-  catch (error) {
-    const message = getErrorMessage(error, '绑定失败，请稍后重试')
-    uni.showToast({ title: isAlreadyBoundMessage(message) ? '已绑定' : message, icon: 'none' })
-  }
-  finally {
-    binding.value = false
-  }
-}
-
-function isAlreadyBoundMessage(message: string) {
-  return message.includes('已绑定')
-}
-
 function getErrorMessage(error: unknown, fallback: string) {
   let message = ''
   if (error && typeof error === 'object') {
@@ -238,35 +207,28 @@ function copyQueryRow(row: { label: string, value: string, copyable?: boolean })
     </view>
 
     <view class="tool-row">
-      <wd-button class="tool-button tool-button--scan" size="small" plain @click="handleScan">
-        <view class="tool-button__content">
-          <view class="i-carbon-grid tool-button__icon" />
-          <text>扫码</text>
-        </view>
+      <wd-button class="tool-button tool-button--scan" size="small" css-icon="i-carbon-grid" plain @click="handleScan">
+        扫码
       </wd-button>
       <wd-button
         class="tool-button tool-button--photo"
         size="small"
+        css-icon="i-carbon-camera"
         plain
         :loading="recognizing"
         @click="handlePhotoRecognize"
       >
-        <view class="tool-button__content">
-          <view class="i-carbon-camera tool-button__icon" />
-          <text>拍照</text>
-        </view>
+        拍照
       </wd-button>
       <wd-button
         class="tool-button tool-button--diagnosis"
         size="small"
+        css-icon="i-carbon-stethoscope"
         type="primary"
         plain
         @click="goDiagnosis"
       >
-        <view class="tool-button__content">
-          <view class="i-my-icons-sparkle tool-button__icon" />
-          <text>卡片排查</text>
-        </view>
+        卡片排查
       </wd-button>
     </view>
 
@@ -319,25 +281,13 @@ function copyQueryRow(row: { label: string, value: string, copyable?: boolean })
         </view>
       </view>
 
-      <view class="grid grid-cols-2 mt-24rpx gap-20rpx">
+      <view class="grid grid-cols-1 mt-24rpx gap-20rpx">
         <wd-button size="small" type="primary" custom-class="result-action result-action--detail" @click="goDetail">
           <view class="result-action__content">
             <view class="i-carbon-document-view result-action__icon" />
             <text>查看详情</text>
           </view>
         </wd-button>
-        <wd-button
-          size="small"
-          variant="plain"
-          custom-class="result-action result-action--bind"
-          :loading="binding"
-          @click="handleBind"
-        >
-          <view class="result-action__content">
-            <view class="i-carbon-link result-action__icon" />
-            <text>{{ hasLogin ? '绑定到我' : '登录后绑定' }}</text>
-          </view>
-        </wd-button>
       </view>
     </view>
   </view>
@@ -420,21 +370,18 @@ function copyQueryRow(row: { label: string, value: string, copyable?: boolean })
   box-shadow: none !important;
 }
 
-.tool-button__content,
 .result-action__content {
-  display: inline-flex;
+  display: flex;
+  width: 100%;
   align-items: center;
   justify-content: center;
   gap: 10rpx;
+  height: 100%;
   min-width: 0;
+  line-height: 1;
   white-space: nowrap;
 }
 
-.tool-button__icon {
-  flex-shrink: 0;
-  font-size: 26rpx;
-}
-
 .tool-button--scan {
   border-color: #d8e2ef !important;
   background: #f8fbff !important;
diff --git a/app/src/pages/home/components/QuickBusiness.vue b/app/src/pages/home/components/QuickBusiness.vue
index 8fee433..48c557d 100644
--- a/app/src/pages/home/components/QuickBusiness.vue
+++ b/app/src/pages/home/components/QuickBusiness.vue
@@ -11,7 +11,6 @@ import {
 } from '@/utils/cardRecognition'
 import type { AppPermissionAction } from '@/utils/permission'
 import { hasUserPermission } from '@/utils/permission'
-import { isTerminalUserInfo } from '@/utils/userIdentity'
 
 interface ShortcutItem {
   label: string
@@ -41,29 +40,6 @@ const shortcuts: ShortcutItem[] = [
     action: 'photoRecognize',
     sub: '识别卡片 ICCID',
   },
-  {
-    label: '套餐续费',
-    icon: 'i-carbon-renew',
-    tone: 'mint',
-    path: RouterPath.BusinessViewsRenew,
-    sub: '到期前续展套餐',
-    permissionAction: 'renew',
-  },
-  {
-    label: '我的订单',
-    icon: 'i-carbon-receipt',
-    tone: 'primary-light',
-    path: RouterPath.BusinessViewsOrder,
-    sub: '查看续费和业务记录',
-  },
-  {
-    label: '预警配置',
-    icon: 'i-carbon-warning',
-    tone: 'warning',
-    path: RouterPath.BusinessViewsWarning,
-    sub: '设置流量预警通知',
-    permissionAction: 'warning',
-  },
   {
     label: '卡片排查',
     icon: 'i-carbon-stethoscope',
@@ -71,21 +47,6 @@ const shortcuts: ShortcutItem[] = [
     path: RouterPath.BusinessViewsDiagnosis,
     sub: '查看状态、会话与流量异常',
   },
-  {
-    label: '我的卡片',
-    icon: 'i-carbon-sim-card',
-    tone: 'mint',
-    tabPath: RouterPath.Card,
-    sub: '查看当前设备列表',
-  },
-  {
-    label: '工单服务',
-    icon: 'i-carbon-chat',
-    tone: 'warning',
-    path: RouterPath.BusinessViewsWorkOrder,
-    sub: '反馈问题和提交工单',
-    permissionAction: ['workOrder', 'workOrderCreate'],
-  },
 ]
 
 const toneClass: Record<ShortcutItem['tone'], string> = {
@@ -102,18 +63,10 @@ const userStore = useUserStore()
 const photoRecognizing = ref(false)
 let refreshUserPromise: Promise<void | IUserInfoRes> | undefined
 
-const isTerminalUser = computed(() => isTerminalUserInfo(userStore.userInfo))
-
 const visibleShortcuts = computed(() =>
   shortcuts.filter((item) => {
     if (props.hideCardEntry && item.label === '我的卡片')
       return false
-    if (item.agentOnly && isTerminalUser.value)
-      return false
-    if (item.terminalOnly && !isTerminalUser.value)
-      return false
-    if (item.terminalHidden && isTerminalUser.value)
-      return false
     if (item.permissionAction && !hasShortcutPermission(item.permissionAction))
       return false
     return true
diff --git a/app/src/pages/home/index.vue b/app/src/pages/home/index.vue
index 6cede2c..8d06687 100644
--- a/app/src/pages/home/index.vue
+++ b/app/src/pages/home/index.vue
@@ -1,7 +1,6 @@
 <script setup lang="ts">
 import type { AppCard } from '@/api/card'
 import { getCardList } from '@/api/card'
-import RouterPath from '@/constant/RouterPath'
 import { useTokenStore } from '@/store'
 import { useUserStore } from '@/store/user'
 import QuickBusiness from './components/QuickBusiness.vue'
@@ -12,7 +11,7 @@ definePage({
   type: 'home',
   style: {
     navigationStyle: 'default',
-    navigationBarTitleText: '山东平台物联卡',
+    navigationBarTitleText: '示例企业物联卡',
     navigationBarBackgroundColor: '#ffffff',
     navigationBarTextStyle: 'black',
   },
@@ -29,12 +28,6 @@ let cardLoadSeq = 0
 
 const hasLogin = computed(() => tokenStore.hasLogin)
 const showCardsLoading = computed(() => cardsLoading.value && cards.value.length === 0)
-const upgradeItems = [
-  { label: '绑定我的卡', icon: 'i-carbon-sim-card' },
-  { label: '查看排查记录', icon: 'i-carbon-stethoscope' },
-  { label: '设置流量预警', icon: 'i-carbon-warning' },
-  { label: '专属客服工单', icon: 'i-carbon-chat' },
-]
 
 async function loadCards() {
   if (!hasLogin.value) {
@@ -84,12 +77,6 @@ function loadHomeData() {
   void loadCards()
 }
 
-function goLogin() {
-  uni.navigateTo({
-    url: `${RouterPath.Login}?redirect=${encodeURIComponent(RouterPath.Home)}`,
-  })
-}
-
 onShow(() => {
   loadHomeData()
 })
@@ -110,7 +97,7 @@ onShow(() => {
           <view class="min-w-0 flex-1">
             <text class="diagnosis-tip__title">遇到问题？先查卡状态</text>
             <text class="diagnosis-tip__desc">
-              根据卡片状态、套餐、流量和会话信息，整理常见异常与处理方向
+              根据卡片状态、在线状态、流量和设备信息，整理常见异常与处理方向
             </text>
             <text class="mt-8rpx block text-21rpx text-#1d4ed8 leading-31rpx">
               排查结果仅供参考，以运营商和业务系统结果为准
@@ -118,6 +105,8 @@ onShow(() => {
           </view>
         </view>
 
+        <QuickBusiness />
+
         <OverviewCard
           v-if="hasLogin"
           :cards="cards"
@@ -126,27 +115,6 @@ onShow(() => {
           :error-message="cardsErrorMessage"
           @refresh-stats="loadCards"
         />
-
-        <QuickBusiness />
-
-        <view v-if="!hasLogin" class="upgrade-card">
-          <view class="upgrade-head">
-            <view class="min-w-0">
-              <text class="upgrade-title">登录后能力升级</text>
-              <text class="upgrade-sub">绑定卡片后可查看完整状态与办理记录</text>
-            </view>
-          </view>
-          <view class="upgrade-grid">
-            <view v-for="item in upgradeItems" :key="item.label" class="upgrade-item">
-              <view class="upgrade-icon" :class="item.icon" />
-              <text>{{ item.label }}</text>
-            </view>
-          </view>
-          <view class="upgrade-link" @click="goLogin">
-            <text>去登录，解锁全部能力</text>
-            <view class="i-carbon-chevron-right text-24rpx" />
-          </view>
-        </view>
       </view>
     </view>
   </scroll-view>
diff --git a/app/src/pages/login/forgot-password/index.vue b/app/src/pages/login/forgot-password/index.vue
index 9fb125a..2a2d71b 100644
--- a/app/src/pages/login/forgot-password/index.vue
+++ b/app/src/pages/login/forgot-password/index.vue
@@ -30,8 +30,12 @@ function goBack() {
       <text class="forgot-panel__desc">
         当前短信验证码服务还没有接入，为避免提交无效请求，找回密码功能暂时关闭。
       </text>
-      <wd-button type="primary" block disabled>等待短信服务接入</wd-button>
-      <wd-button class="forgot-back-button" plain block @click="goBack">返回登录</wd-button>
+      <wd-button type="primary" disabled block>
+        等待短信服务接入
+      </wd-button>
+      <wd-button class="forgot-back-button" plain block @click="goBack">
+        返回登录
+      </wd-button>
     </view>
   </view>
 </template>
diff --git a/app/src/pages/login/index.test.ts b/app/src/pages/login/index.test.ts
new file mode 100644
index 0000000..86333d1
--- /dev/null
+++ b/app/src/pages/login/index.test.ts
@@ -0,0 +1,125 @@
+import { readFileSync } from 'node:fs'
+import { createContext, runInContext } from 'node:vm'
+import { reactive, ref } from 'vue'
+import { ModuleKind, transpileModule } from 'typescript'
+import { describe, expect, it, vi } from 'vitest'
+import { V101_RELEASE } from '@/constant/release'
+import { navigateAfterLogin, phoneLoginDestination } from '@/utils/loginNavigation'
+
+const home = '/pages/home/index'
+
+function createHarness(redirect = home) {
+  const response = { token: 'test-token', expiresIn: 3600, userInfo: { userId: 1, wechatBound: true } }
+  const login = vi.fn().mockResolvedValue(response)
+  const phoneSmsLogin = vi.fn().mockResolvedValue(response)
+  const setTokenInfo = vi.fn()
+  const setUserInfo = vi.fn()
+  const navigator = { switchTab: vi.fn(), reLaunch: vi.fn(), showToast: vi.fn() }
+  const navigate = vi.fn((...args: Parameters<typeof navigateAfterLogin>) => {
+    expect(args[3]).not.toBe(navigator)
+    return navigateAfterLogin(...args)
+  })
+  const context = createContext({
+    exports: {},
+    require: (name: string) => {
+      if (name === 'vue')
+        return { reactive, ref, watch: vi.fn(), onUnmounted: vi.fn() }
+      if (name === '@/api/login')
+        return { phoneSmsLogin }
+      if (name === '@/components/SideCaptcha.vue')
+        return {}
+      if (name === '@/store/token')
+        return { useTokenStore: () => ({ login, setTokenInfo }) }
+      if (name === '@/store/user')
+        return { useUserStore: () => ({ userInfo: response.userInfo, setUserInfo, fetchAccessCodes: vi.fn().mockResolvedValue([]) }) }
+      if (name === '@/tabbar/store')
+        return { isPageTabbar: (path: string) => path === home }
+      if (name === '@/tabbar/config')
+        return { isNativeTabbar: false }
+      if (name === '@/utils')
+        return { HOME_PAGE: home }
+      if (name === '@/utils/loginNavigation')
+        return { navigateAfterLogin: navigate, phoneLoginDestination }
+      if (name === '@/constant/release')
+        return { V101_RELEASE }
+      throw new Error(`Unexpected import: ${name}`)
+    },
+    definePage: vi.fn(),
+    onLoad: (callback: (query: { redirect: string }) => void) => callback({ redirect }),
+    uni: navigator,
+  })
+  const source = readFileSync(new URL('./index.vue', import.meta.url), 'utf8')
+  const script = source.match(/<script[^>]*>([\s\S]*?)<\/script>/)?.[1]
+  if (!script)
+    throw new Error('Login page script not found')
+  runInContext(transpileModule(script, { compilerOptions: { module: ModuleKind.CommonJS } }).outputText, context)
+  runInContext('agreementChecked.value = true; promptBindWechatIfNeeded = async () => undefined', context)
+  return { context, login, phoneSmsLogin, setTokenInfo, setUserInfo, navigator, navigate }
+}
+
+describe('登录页面成功后的导航', () => {
+  it('手机号密码登录显式绑定导航 API 并回到首页', async () => {
+    const harness = createHarness('/pages/user/index')
+    await runInContext('loginForm.account = "13800008000"; loginForm.password = "password"; submitLogin()', harness.context)
+    expect(harness.login).toHaveBeenCalledOnce()
+    expect(harness.navigator.reLaunch).toHaveBeenCalledWith({ url: home })
+    expect(harness.navigator.switchTab).not.toHaveBeenCalled()
+  })
+
+  it('用户名密码登录保留来源页面', async () => {
+    const harness = createHarness('/pages/user/index')
+    await runInContext('loginForm.account = "agent01"; loginForm.password = "password"; submitLogin()', harness.context)
+    expect(harness.navigator.reLaunch).toHaveBeenCalledWith({ url: '/pages/user/index' })
+  })
+
+  it('短信登录写入认证信息后回到首页', async () => {
+    const harness = createHarness('/pages/user/index')
+    await runInContext('loginSmsForm.phone = "13800008000"; loginSmsForm.smsCode = "123456"; submitPhoneSmsLogin()', harness.context)
+    expect(harness.phoneSmsLogin).toHaveBeenCalledOnce()
+    expect(harness.setTokenInfo).toHaveBeenCalledOnce()
+    expect(harness.setUserInfo).toHaveBeenCalledOnce()
+    expect(harness.navigator.reLaunch).toHaveBeenCalledWith({ url: home })
+  })
+
+
+  it('验证码多账号选择后仅登录选中的身份并回到首页', async () => {
+    const harness = createHarness('/pages/user/index')
+    const candidates = [{ userId: 11, nickName: '账号甲' }, { userId: 22, nickName: '账号乙' }]
+    const selectedResponse = { token: 'selected-token', expiresIn: 3600, userInfo: { userId: 22, nickName: '账号乙', wechatBound: true } }
+    harness.phoneSmsLogin.mockResolvedValueOnce({ needSelect: true, candidates }).mockResolvedValueOnce(selectedResponse)
+    await runInContext('loginMethod.value = "sms"; loginSmsForm.phone = "13800008000"; loginSmsForm.smsCode = "123456"; submitPhoneSmsLogin()', harness.context)
+    expect(runInContext('accountSelectVisible.value', harness.context)).toBe(true)
+    expect(harness.setTokenInfo).not.toHaveBeenCalled()
+    expect(harness.navigate).not.toHaveBeenCalled()
+    runInContext('selectLoginAccount(accountCandidates.value[1])', harness.context)
+    await vi.waitFor(() => expect(harness.navigator.reLaunch).toHaveBeenCalledWith({ url: home }))
+    expect(harness.phoneSmsLogin).toHaveBeenCalledTimes(2)
+    expect(harness.phoneSmsLogin).toHaveBeenNthCalledWith(2, {
+      tenantId: '000000', phone: '13800008000', smsCode: '123456', selectedUserId: 22,
+    })
+    expect(harness.login).not.toHaveBeenCalled()
+    expect(harness.setTokenInfo).toHaveBeenCalledExactlyOnceWith(selectedResponse)
+    expect(harness.setUserInfo).toHaveBeenCalledExactlyOnceWith(selectedResponse.userInfo)
+    expect(harness.navigator.switchTab).not.toHaveBeenCalled()
+    expect(runInContext('accountSelectVisible.value', harness.context)).toBe(false)
+    expect(harness.navigator.showToast).not.toHaveBeenCalledWith(expect.objectContaining({ icon: 'none' }))
+  })
+
+  it('多账号选择请求失败时不设置登录态也不跳转', async () => {
+    const harness = createHarness()
+    harness.phoneSmsLogin.mockResolvedValueOnce({ needSelect: true, candidates: [{ userId: 22 }] }).mockRejectedValueOnce(new Error('选择的账号不属于当前手机号'))
+    await runInContext('loginMethod.value = "sms"; loginSmsForm.phone = "13800008000"; loginSmsForm.smsCode = "123456"; submitPhoneSmsLogin()', harness.context)
+    runInContext('selectLoginAccount(accountCandidates.value[0])', harness.context)
+    await vi.waitFor(() => expect(harness.navigator.showToast).toHaveBeenCalledWith({ title: '选择的账号不属于当前手机号', icon: 'none' }))
+    expect(harness.setTokenInfo).not.toHaveBeenCalled()
+    expect(harness.navigate).not.toHaveBeenCalled()
+  })
+
+  it('需要选择身份时不提前跳转', async () => {
+    const harness = createHarness()
+    harness.login.mockResolvedValue({ needSelect: true, candidates: [{ userId: 1 }] })
+    await runInContext('loginForm.account = "13800008000"; loginForm.password = "password"; submitLogin()', harness.context)
+    expect(harness.navigate).not.toHaveBeenCalled()
+    expect(runInContext('accountSelectVisible.value', harness.context)).toBe(true)
+  })
+})
diff --git a/app/src/pages/login/index.vue b/app/src/pages/login/index.vue
index f4a1551..c8afb42 100644
--- a/app/src/pages/login/index.vue
+++ b/app/src/pages/login/index.vue
@@ -10,9 +10,10 @@ import type {
 import { onUnmounted, reactive, ref, watch } from 'vue'
 import {
   bindWechat,
-  checkSideCaptcha,
   getWxCode,
+  phoneSmsLogin,
   register,
+  sendSms,
   wechatBindPhone,
   wechatLogin,
 } from '@/api/login'
@@ -20,12 +21,15 @@ import SideCaptcha from '@/components/SideCaptcha.vue'
 import { useTokenStore } from '@/store/token'
 import { useUserStore } from '@/store/user'
 import { isPageTabbar } from '@/tabbar/store'
+import { isNativeTabbar } from '@/tabbar/config'
 import { HOME_PAGE } from '@/utils'
+import { navigateAfterLogin, phoneLoginDestination } from '@/utils/loginNavigation'
+import { V101_RELEASE } from '@/constant/release'
 
 definePage({
   name: 'Login',
   style: {
-    navigationBarTitleText: '山东平台物联卡',
+    navigationBarTitleText: '示例企业物联卡',
     navigationBarBackgroundColor: '#ffffff',
     navigationBarTextStyle: 'black',
     disableScroll: true,
@@ -34,13 +38,15 @@ definePage({
 })
 
 type AuthMode = 'login' | 'register'
-type CaptchaScene = 'register' | 'wechatBindPhone'
+type LoginMethod = 'password' | 'sms'
+type CaptchaScene = 'register' | 'login' | 'wechatBindPhone'
 type AccountSelectScene = 'login' | 'wechatBindPhone'
 
 const tokenStore = useTokenStore()
 const userStore = useUserStore()
 
 const authMode = ref<AuthMode>('login')
+const loginMethod = ref<LoginMethod>('password')
 const authPanelVisible = ref(false)
 const loginLoading = ref(false)
 const wechatLoginLoading = ref(false)
@@ -61,6 +67,9 @@ const wechatBindTips = ['流量预警', '业务通知', '卡片消息']
 let wechatBindResolve: ((value: boolean) => void) | null = null
 const wechatBindPhoneVisible = ref(false)
 const wechatBindPhoneLoading = ref(false)
+const smsLoading = ref(false)
+const smsCountdown = reactive<Record<CaptchaScene, number>>({ register: 0, login: 0, wechatBindPhone: 0 })
+const smsTimers: Partial<Record<CaptchaScene, ReturnType<typeof setInterval>>> = {}
 
 const loginForm = reactive({
   tenantId: '000000',
@@ -68,27 +77,31 @@ const loginForm = reactive({
   password: '',
 })
 
+const loginSmsForm = reactive({
+  tenantId: '000000',
+  phone: '',
+  smsCode: '',
+})
+
 const registerForm = reactive({
   tenantId: '000000',
   phone: '',
   nickName: '',
   password: '',
   confirmPassword: '',
+  smsCode: '',
 })
 
 const wechatBindPhoneForm = reactive({
   tenantId: '000000',
   bindTicket: '',
   phone: '',
+  smsCode: '',
 })
 
-const wechatBindPhoneCaptcha = reactive({
-  captchaKey: '',
-  captchaPoint: '',
-})
-
-// 图形验证是否通过（注册前置门槛，暂不接入短信验证码）
+// 短信发送前必须完成滑块验证，验证码由后端统一校验。
 const captchaPassed = ref(false)
+const loginSmsCaptchaPassed = ref(false)
 const wechatBindPhoneCaptchaPassed = ref(false)
 
 function isLoginSelectResponse(value: unknown): value is ILoginSelectRes {
@@ -114,6 +127,8 @@ function getWechatBindTicket(value: unknown) {
 }
 
 function switchMode(mode: AuthMode) {
+  if (mode === 'register' && !V101_RELEASE.showRegister)
+    return
   authMode.value = mode
   authPanelVisible.value = true
   captchaPassed.value = false
@@ -152,12 +167,12 @@ function normalizeRedirect(value?: string | string[]) {
 }
 
 function goAfterLogin() {
-  const url = redirectUrl.value || HOME_PAGE
-  if (isPageTabbar(url)) {
-    uni.switchTab({ url })
-    return
-  }
-  uni.reLaunch({ url })
+  authPanelVisible.value = false
+  resetAccountSelection()
+  navigateAfterLogin(redirectUrl.value || HOME_PAGE, HOME_PAGE, isPageTabbar, {
+    switchTab: options => uni.switchTab(options),
+    reLaunch: options => uni.reLaunch(options),
+  }, isNativeTabbar)
 }
 
 function resetAccountSelection() {
@@ -168,14 +183,86 @@ function resetAccountSelection() {
 
 function resetWechatBindPhoneCaptcha() {
   wechatBindPhoneCaptchaPassed.value = false
-  wechatBindPhoneCaptcha.captchaKey = ''
-  wechatBindPhoneCaptcha.captchaPoint = ''
+  wechatBindPhoneForm.smsCode = ''
+  stopSmsCountdown('wechatBindPhone')
+}
+
+function resetLoginSmsCaptcha() {
+  loginSmsCaptchaPassed.value = false
+  loginSmsForm.smsCode = ''
+  stopSmsCountdown('login')
+}
+
+function resetRegisterSmsCaptcha() {
+  captchaPassed.value = false
+  registerForm.smsCode = ''
+  stopSmsCountdown('register')
+}
+
+function stopSmsCountdown(scene: CaptchaScene) {
+  if (smsTimers[scene]) {
+    clearInterval(smsTimers[scene])
+    delete smsTimers[scene]
+  }
+  smsCountdown[scene] = 0
+}
+
+function startSmsCountdown(scene: CaptchaScene) {
+  if (smsTimers[scene])
+    clearInterval(smsTimers[scene])
+  smsCountdown[scene] = 60
+  smsTimers[scene] = setInterval(() => {
+    smsCountdown[scene] -= 1
+    if (smsCountdown[scene] <= 0) {
+      clearInterval(smsTimers[scene])
+      delete smsTimers[scene]
+    }
+  }, 1000)
+}
+
+async function sendSmsAfterCaptcha(scene: CaptchaScene, captchaKey: string, captchaPoint: string) {
+  if (!ensureAgreementChecked()) {
+    captchaVisible.value = false
+    return
+  }
+  const phone = scene === 'register'
+    ? registerForm.phone
+    : scene === 'login' ? loginSmsForm.phone : wechatBindPhoneForm.phone
+  const tenantId = scene === 'register'
+    ? registerForm.tenantId
+    : scene === 'login' ? loginSmsForm.tenantId : wechatBindPhoneForm.tenantId
+  smsLoading.value = true
+  try {
+    const res = await sendSms({ tenantId, phone, scene, captchaKey, captchaPoint })
+    if (scene === 'register') {
+      captchaPassed.value = true
+      if (res.smsCode)
+        registerForm.smsCode = res.smsCode
+    }
+    else if (scene === 'login') {
+      loginSmsCaptchaPassed.value = true
+      if (res.smsCode)
+        loginSmsForm.smsCode = res.smsCode
+    }
+    else {
+      wechatBindPhoneCaptchaPassed.value = true
+      if (res.smsCode)
+        wechatBindPhoneForm.smsCode = res.smsCode
+    }
+    startSmsCountdown(scene)
+    captchaVisible.value = false
+    uni.showToast({ title: '验证码已发送', icon: 'success' })
+  }
+  finally {
+    smsLoading.value = false
+  }
 }
 
 function openWechatBindPhonePanel(bindTicket: string) {
   wechatBindPhoneForm.tenantId = loginForm.tenantId || '000000'
   wechatBindPhoneForm.bindTicket = bindTicket
   wechatBindPhoneForm.phone = ''
+  wechatBindPhoneForm.smsCode = ''
   resetWechatBindPhoneCaptcha()
   authPanelVisible.value = false
   wechatBindPhoneVisible.value = true
@@ -304,8 +391,12 @@ function validateWechatBindPhoneForm(selectedUserId?: number) {
     uni.showToast({ title: '请输入正确手机号', icon: 'none' })
     return false
   }
-  if (!selectedUserId && !wechatBindPhoneCaptchaPassed.value) {
-    uni.showToast({ title: '请先完成图形验证', icon: 'none' })
+  if (!wechatBindPhoneCaptchaPassed.value) {
+    uni.showToast({ title: '请先获取短信验证码', icon: 'none' })
+    return false
+  }
+  if (!wechatBindPhoneForm.smsCode) {
+    uni.showToast({ title: '请输入短信验证码', icon: 'none' })
     return false
   }
   return true
@@ -324,8 +415,7 @@ async function submitWechatBindPhone(selectedUserId?: number) {
       tenantId: wechatBindPhoneForm.tenantId,
       bindTicket: wechatBindPhoneForm.bindTicket,
       phone: wechatBindPhoneForm.phone,
-      captchaKey: selectedUserId ? undefined : wechatBindPhoneCaptcha.captchaKey,
-      captchaPoint: selectedUserId ? undefined : wechatBindPhoneCaptcha.captchaPoint,
+      smsCode: wechatBindPhoneForm.smsCode,
       selectedUserId,
     })
     if (isLoginSelectResponse(res)) {
@@ -409,6 +499,7 @@ async function submitLogin(selectedUserId?: number) {
     // 登录令牌已经落地，后续绑定提示不能继续占用登录按钮的 loading 状态。
     loginLoading.value = false
     await promptBindWechatIfNeeded()
+    redirectUrl.value = phoneLoginDestination(account, redirectUrl.value, HOME_PAGE)
     goAfterLogin()
   }
   finally {
@@ -416,21 +507,57 @@ async function submitLogin(selectedUserId?: number) {
   }
 }
 
+async function submitPhoneSmsLogin(selectedUserId?: number) {
+  if (loginLoading.value)
+    return
+  if (!ensureAgreementChecked())
+    return
+  if (!/^1[3-9]\d{9}$/.test(loginSmsForm.phone)) {
+    uni.showToast({ title: '请输入正确手机号', icon: 'none' })
+    return
+  }
+  if (!loginSmsForm.smsCode) {
+    uni.showToast({ title: '请输入短信验证码', icon: 'none' })
+    return
+  }
+  loginLoading.value = true
+  try {
+    const res = await phoneSmsLogin({ ...loginSmsForm, selectedUserId })
+    redirectUrl.value = HOME_PAGE
+    if (isLoginSelectResponse(res)) {
+      accountSelectScene.value = 'login'
+      accountCandidates.value = res.candidates || []
+      accountSelectVisible.value = accountCandidates.value.length > 0
+      return
+    }
+    loginLoading.value = false
+    await applyAuthLoginResult(res, '登录成功')
+  }
+  catch (error) {
+    uni.showToast({ title: getLoginErrorMessage(error, '手机号登录失败'), icon: 'none' })
+  }
+  finally {
+    loginLoading.value = false
+  }
+}
+
 function selectLoginAccount(item: ILoginCandidate) {
   accountSelectVisible.value = false
   if (accountSelectScene.value === 'wechatBindPhone') {
     void submitWechatBindPhone(item.userId)
     return
   }
-  void submitLogin(item.userId)
+  void (loginMethod.value === 'sms' ? submitPhoneSmsLogin(item.userId) : submitLogin(item.userId))
 }
 
 function handleGetCaptcha(scene: CaptchaScene = 'register') {
-  if (scene === 'register' && captchaPassed.value)
+  if (smsCountdown[scene] > 0 || smsLoading.value)
     return
-  if (scene === 'wechatBindPhone' && wechatBindPhoneCaptchaPassed.value)
+  if (!ensureAgreementChecked())
     return
-  const phone = scene === 'wechatBindPhone' ? wechatBindPhoneForm.phone : registerForm.phone
+  const phone = scene === 'wechatBindPhone'
+    ? wechatBindPhoneForm.phone
+    : scene === 'login' ? loginSmsForm.phone : registerForm.phone
   if (!/^1[3-9]\d{9}$/.test(phone)) {
     uni.showToast({ title: '请先输入正确手机号', icon: 'none' })
     return
@@ -452,25 +579,15 @@ async function onSideCaptchaConfirm({
     return
   captchaLoading.value = true
   try {
-    if (captchaScene.value === 'wechatBindPhone') {
-      wechatBindPhoneCaptcha.captchaKey = captchaKey
-      wechatBindPhoneCaptcha.captchaPoint = `${posX},${posY}`
-      wechatBindPhoneCaptchaPassed.value = true
-      captchaVisible.value = false
-      uni.showToast({ title: '图形验证已完成，请绑定手机号', icon: 'success' })
-      return
-    }
-    await checkSideCaptcha({
-      captchaKey,
-      point: `${posX},${posY}`,
-    })
-    // 暂不接入短信验证码：图形验证通过即视为可注册
-    captchaPassed.value = true
-    captchaVisible.value = false
-    uni.showToast({ title: '图形验证通过，请完成注册', icon: 'success' })
+    await sendSmsAfterCaptcha(captchaScene.value, captchaKey, `${posX},${posY}`)
   }
   catch (error) {
-    captchaPassed.value = false
+    if (captchaScene.value === 'register')
+      captchaPassed.value = false
+    if (captchaScene.value === 'login')
+      loginSmsCaptchaPassed.value = false
+    if (captchaScene.value === 'wechatBindPhone')
+      wechatBindPhoneCaptchaPassed.value = false
     uni.showToast({
       title: getLoginErrorMessage(error, '验证码校验失败，请重试'),
       icon: 'none',
@@ -500,7 +617,11 @@ function validateRegisterForm() {
     return false
   }
   if (!captchaPassed.value) {
-    uni.showToast({ title: '请先完成图形验证', icon: 'none' })
+    uni.showToast({ title: '请先获取短信验证码', icon: 'none' })
+    return false
+  }
+  if (!registerForm.smsCode) {
+    uni.showToast({ title: '请输入短信验证码', icon: 'none' })
     return false
   }
   return true
@@ -520,6 +641,7 @@ async function submitRegister() {
       phone: registerForm.phone,
       nickName: registerForm.nickName.trim(),
       password: registerForm.password,
+      smsCode: registerForm.smsCode,
     })
     tokenStore.setTokenInfo(res)
     if (isSingleTokenResponse(res) && res.userInfo)
@@ -546,7 +668,14 @@ watch(
 watch(
   () => registerForm.phone,
   () => {
-    captchaPassed.value = false
+    resetRegisterSmsCaptcha()
+  },
+)
+
+watch(
+  () => loginSmsForm.phone,
+  () => {
+    resetLoginSmsCaptcha()
   },
 )
 
@@ -559,7 +688,7 @@ watch(
 
 onLoad((query) => {
   redirectUrl.value = normalizeRedirect(query?.redirect)
-  if (query?.mode === 'register') {
+  if (query?.mode === 'register' && V101_RELEASE.showRegister) {
     authMode.value = 'register'
     authPanelVisible.value = true
   }
@@ -568,6 +697,7 @@ onLoad((query) => {
 onUnmounted(() => {
   sideCaptchaRef.value = null
   wechatBindResolve = null
+  Object.values(smsTimers).forEach(timer => timer && clearInterval(timer))
 })
 </script>
 
@@ -578,14 +708,15 @@ onUnmounted(() => {
         <view class="hero-logo" aria-label="物联网智能服务">
           <view class="i-carbon-user hero-logo__user" />
         </view>
-        <text class="hero-title">山东平台物联卡</text>
-        <text class="hero-sub"> 卡片查询 · 状态排查 · 一键绑定 </text>
+        <text class="hero-title">示例企业物联卡</text>
+        <text class="hero-sub"> 卡片查询 · 状态排查 </text>
         <text class="hero-desc"> 让每一张物联卡自己会说话 </text>
-        <text class="hero-desc"> 快速掌握卡片状态，办理业务更清晰 </text>
+        <text class="hero-desc"> 快速掌握卡片状态，查询结果更清晰 </text>
 
         <view class="hero-actions">
           <!-- #ifdef MP-WEIXIN -->
           <wd-button
+            v-if="V101_RELEASE.showWechatLogin"
             block
             custom-class="hero-wechat-btn"
             :loading="wechatLoginLoading"
@@ -603,31 +734,6 @@ onUnmounted(() => {
         <view class="guest-query" @click="goPublicQuery">
           未登录也可直接查询卡片（输入 ICCID / 扫码）
         </view>
-
-        <view class="upgrade-card">
-          <view class="upgrade-title">
-            <view class="i-carbon-star upgrade-title__icon" />
-            <text>登录后能力升级</text>
-          </view>
-          <view class="upgrade-grid">
-            <view class="upgrade-item">
-              <view class="i-carbon-link upgrade-item__icon" />
-              <text>绑定我的卡</text>
-            </view>
-            <view class="upgrade-item">
-              <view class="i-carbon-time upgrade-item__icon" />
-              <text>查看排查历史</text>
-            </view>
-            <view class="upgrade-item">
-              <view class="i-carbon-notification upgrade-item__icon" />
-              <text>设置流量预警</text>
-            </view>
-            <view class="upgrade-item">
-              <view class="i-carbon-customer-service upgrade-item__icon" />
-              <text>专属客服</text>
-            </view>
-          </view>
-        </view>
       </view>
 
       <wd-popup
@@ -641,12 +747,12 @@ onUnmounted(() => {
           <view class="panel-head">
             <view>
               <text class="panel-title">
-                {{ authMode === 'login' ? '账号密码登录' : '注册账号' }}
+                {{ authMode === 'login' ? '账号登录' : '注册账号' }}
               </text>
               <text class="panel-sub">
                 {{
                   authMode === 'login'
-                    ? '企业、代理商和终端用户均可使用分配账号登录'
+                    ? '支持账号密码或手机号验证码登录'
                     : '终端用户可用手机号注册并绑定卡片'
                 }}
               </text>
@@ -659,26 +765,33 @@ onUnmounted(() => {
             />
           </view>
 
-          <view class="mode-switch">
-            <view
-              class="mode-item"
-              :class="{ active: authMode === 'login' }"
-              @click="switchMode('login')"
-            >
-              登录
-            </view>
-            <view
-              class="mode-item"
-              :class="{ active: authMode === 'register' }"
-              @click="switchMode('register')"
-            >
-              注册
-            </view>
-          </view>
-
           <view v-if="authMode === 'login'" class="panel-body">
+            <view class="mb-26rpx flex items-center gap-40rpx border-b border-#e5e7eb">
+              <view
+                class="relative pb-18rpx text-26rpx text-#64748b font-600"
+                :class="{ '!text-#2563eb !font-700': loginMethod === 'password' }"
+                @click="loginMethod = 'password'"
+              >
+                密码登录
+                <view
+                  v-if="loginMethod === 'password'"
+                  class="absolute bottom--1px left-1/2 h-4rpx w-36rpx rounded-full bg-#2563eb -translate-x-1/2"
+                />
+              </view>
+              <view
+                class="relative pb-18rpx text-26rpx text-#64748b font-600"
+                :class="{ '!text-#2563eb !font-700': loginMethod === 'sms' }"
+                @click="loginMethod = 'sms'"
+              >
+                验证码登录
+                <view
+                  v-if="loginMethod === 'sms'"
+                  class="absolute bottom--1px left-1/2 h-4rpx w-36rpx rounded-full bg-#2563eb -translate-x-1/2"
+                />
+              </view>
+            </view>
             <!-- #ifdef MP-WEIXIN -->
-            <view class="wechat-login" @click="submitWechatLogin">
+            <view v-if="V101_RELEASE.showWechatLogin" class="wechat-login" @click="submitWechatLogin">
               <view class="wechat-login__icon">
                 <view class="i-carbon-logo-wechat wechat-login__icon-glyph" />
               </view>
@@ -690,12 +803,12 @@ onUnmounted(() => {
               <view v-else class="i-carbon-chevron-right wechat-login__arrow" />
             </view>
 
-            <view class="login-divider">
+            <view v-if="V101_RELEASE.showWechatLogin" class="login-divider">
               <text>或使用账号密码</text>
             </view>
             <!-- #endif -->
 
-            <wd-form :model="loginForm" error-type="toast">
+            <wd-form v-if="loginMethod === 'password'" :model="loginForm" error-type="toast">
               <view class="field">
                 <text class="field-label">账号</text>
                 <wd-input
@@ -721,18 +834,39 @@ onUnmounted(() => {
               </view>
             </wd-form>
 
+            <wd-form v-else :model="loginSmsForm" error-type="toast">
+              <view class="field">
+                <text class="field-label">手机号</text>
+                <wd-input v-model="loginSmsForm.phone" type="number" placeholder="请输入手机号" clearable custom-class="field-input" />
+              </view>
+              <view class="field-divider" />
+              <view class="field">
+                <text class="field-label">验证码</text>
+                <view class="flex flex-1 items-center gap-12rpx">
+                  <wd-input v-model="loginSmsForm.smsCode" type="number" placeholder="请输入短信验证码" clearable custom-class="field-input flex-1" />
+                  <text
+                    class="shrink-0 border-l border-#e5e7eb pl-20rpx text-24rpx text-#2563eb font-600"
+                    :class="{ '!text-#94a3b8': smsCountdown.login > 0 || smsLoading }"
+                    @click="handleGetCaptcha('login')"
+                  >
+                    {{ smsLoading ? '发送中' : smsCountdown.login > 0 ? `${smsCountdown.login}s 后重试` : '获取验证码' }}
+                  </text>
+                </view>
+              </view>
+            </wd-form>
+
             <wd-button
               class="mt-32rpx"
               type="primary"
               block
               :loading="loginLoading"
-              @click="submitLogin()"
+              @click="loginMethod === 'sms' ? submitPhoneSmsLogin() : submitLogin()"
             >
               登录
             </wd-button>
 
             <view class="panel-links">
-              <text class="link-primary" @click="switchMode('register')">注册账号</text>
+              <text v-if="V101_RELEASE.showRegister" class="link-primary" @click="switchMode('register')">注册账号</text>
               <text class="link-muted" @click="goForgotPassword">忘记密码</text>
             </view>
 
@@ -746,7 +880,7 @@ onUnmounted(() => {
             </view>
           </view>
 
-          <view v-else class="panel-body">
+          <view v-else-if="authMode === 'register' && V101_RELEASE.showRegister" class="panel-body">
             <wd-form :model="registerForm" error-type="toast">
               <view class="field compact">
                 <text class="field-label">手机号</text>
@@ -759,6 +893,20 @@ onUnmounted(() => {
                 />
               </view>
               <view class="field-divider" />
+              <view class="field compact">
+                <text class="field-label">验证码</text>
+                <view class="flex flex-1 items-center gap-12rpx">
+                  <wd-input v-model="registerForm.smsCode" type="number" placeholder="请输入短信验证码" clearable custom-class="field-input flex-1" />
+                  <text
+                    class="shrink-0 border-l border-#e5e7eb pl-20rpx text-24rpx text-#2563eb font-600"
+                    :class="{ '!text-#94a3b8': smsCountdown.register > 0 || smsLoading }"
+                    @click="handleGetCaptcha('register')"
+                  >
+                    {{ smsLoading ? '发送中' : smsCountdown.register > 0 ? `${smsCountdown.register}s 后重试` : '获取验证码' }}
+                  </text>
+                </view>
+              </view>
+              <view class="field-divider" />
               <view class="field compact">
                 <text class="field-label">昵称</text>
                 <wd-input
@@ -790,25 +938,6 @@ onUnmounted(() => {
                   custom-class="field-input"
                 />
               </view>
-              <view class="field-divider" />
-              <view class="field compact">
-                <text class="field-label">安全验证</text>
-                <view
-                  class="verify-bar"
-                  :class="{ 'verify-bar--done': captchaPassed }"
-                  @click="handleGetCaptcha"
-                >
-                  <view class="i-carbon-security verify-bar__ico" />
-                  <text class="verify-bar__text">
-                    {{ captchaPassed ? '图形验证已通过' : '请完成图形验证（滑块/点选）' }}
-                  </text>
-                  <view
-                    v-if="captchaPassed"
-                    class="i-carbon-checkmark-outline verify-bar__ok"
-                  />
-                  <view v-else class="i-carbon-chevron-right verify-bar__arrow" />
-                </view>
-              </view>
             </wd-form>
 
             <wd-button
@@ -928,21 +1057,16 @@ onUnmounted(() => {
           </view>
           <view class="field-divider" />
           <view class="field compact">
-            <text class="field-label">安全验证</text>
-            <view
-              class="verify-bar"
-              :class="{ 'verify-bar--done': wechatBindPhoneCaptchaPassed }"
-              @click="handleGetCaptcha('wechatBindPhone')"
-            >
-              <view class="i-carbon-security verify-bar__ico" />
-              <text class="verify-bar__text">
-                {{ wechatBindPhoneCaptchaPassed ? '图形验证已完成' : '请完成图形验证' }}
+            <text class="field-label">验证码</text>
+            <view class="flex flex-1 items-center gap-12rpx">
+              <wd-input v-model="wechatBindPhoneForm.smsCode" type="number" placeholder="请输入短信验证码" clearable custom-class="field-input flex-1" />
+              <text
+                class="shrink-0 border-l border-#e5e7eb pl-20rpx text-24rpx text-#2563eb font-600"
+                :class="{ '!text-#94a3b8': smsCountdown.wechatBindPhone > 0 || smsLoading }"
+                @click="handleGetCaptcha('wechatBindPhone')"
+              >
+                {{ smsLoading ? '发送中' : smsCountdown.wechatBindPhone > 0 ? `${smsCountdown.wechatBindPhone}s 后重试` : '获取验证码' }}
               </text>
-              <view
-                v-if="wechatBindPhoneCaptchaPassed"
-                class="i-carbon-checkmark-outline verify-bar__ok"
-              />
-              <view v-else class="i-carbon-chevron-right verify-bar__arrow" />
             </view>
           </view>
         </wd-form>
@@ -1242,34 +1366,8 @@ page {
   color: #94a3b8 !important;
 }
 
-.mode-switch {
-  display: grid;
-  grid-template-columns: 1fr 1fr;
-  gap: 4rpx;
-  padding: 4rpx;
-  border-radius: 10rpx;
-  background: #f1f5f9;
-}
-
-.mode-item {
-  height: 60rpx;
-  border-radius: 8rpx;
-  display: flex;
-  align-items: center;
-  justify-content: center;
-  font-size: 27rpx;
-  font-weight: 700;
-  color: #64748b;
-}
-
-.mode-item.active {
-  color: #fff;
-  background: #2563eb;
-  box-shadow: none;
-}
-
 .panel-body {
-  margin-top: 18rpx;
+  margin-top: 8rpx;
 }
 
 .wechat-login {
diff --git a/app/src/pages/message/components/MessageList.vue b/app/src/pages/message/components/MessageList.vue
index e9ff20b..61efdd7 100644
--- a/app/src/pages/message/components/MessageList.vue
+++ b/app/src/pages/message/components/MessageList.vue
@@ -37,176 +37,26 @@ function iconClass(item: MessageItem) {
 </script>
 
 <template>
-  <view class="msg-list">
-    <view class="mlist">
-      <view
-        v-for="item in list"
-        :key="item.messageId"
-        class="mitem"
-        @click="emit('open', item)"
-      >
-        <view class="micon" :class="`micon--${itemTone(item)}`">
-          <view class="micon-glyph" :class="iconClass(item)" />
+  <view class="flex flex-col gap-16rpx">
+    <view v-for="item in list" :key="item.messageId" class="card-base flex gap-20rpx p-24rpx active:bg-input-bg" @click="emit('open', item)">
+      <view class="h-64rpx w-64rpx flex shrink-0 items-center justify-center rounded-16rpx bg-canvas-soft text-30rpx text-primary">
+        <view :class="iconClass(item)" />
+      </view>
+      <view class="min-w-0 flex flex-1 flex-col gap-12rpx">
+        <view class="flex items-start justify-between gap-16rpx">
+          <text class="min-w-0 flex-1 break-words text-28rpx text-ink font-bold leading-40rpx">{{ item.title }}</text>
+          <wd-tag v-if="item.unread" type="danger" round>
+            未读
+          </wd-tag>
         </view>
-        <view class="mmain">
-          <view class="mt-row">
-            <text class="mt">{{ item.title }}</text>
-            <view v-if="item.unread" class="udot" />
-          </view>
-          <text class="ms">{{ item.summary }}</text>
-        </view>
-        <view class="mside">
-          <text class="mtime">{{ item.time || '暂无时间' }}</text>
+        <text class="line-clamp-2 break-words text-25rpx text-muted leading-38rpx">{{ item.summary }}</text>
+        <view class="flex flex-wrap items-center justify-between gap-12rpx">
+          <wd-tag :type="itemTone(item)" plain>
+            {{ item.typeText || group.label }}
+          </wd-tag>
+          <text class="text-22rpx text-disabled">{{ item.time || '暂无时间' }}</text>
         </view>
       </view>
     </view>
   </view>
 </template>
-
-<style lang="scss" scoped>
-.msg-list {
-  overflow: hidden;
-  border: 1px solid #e2e8f0;
-  border-radius: 16rpx;
-  background: #fff;
-  box-shadow: 0 6rpx 18rpx rgba(11, 43, 172, 0.06);
-}
-
-.mlist {
-  display: flex;
-  flex-direction: column;
-}
-
-.mitem {
-  display: flex;
-  align-items: center;
-  gap: 18rpx;
-  min-height: 122rpx;
-  padding: 22rpx 22rpx;
-  border-bottom: 1px solid #f1f5f9;
-  transition: background 0.16s ease;
-}
-
-.mitem:last-child {
-  border-bottom: 0;
-}
-
-.mitem:active {
-  background: #f8fafc;
-}
-
-.micon {
-  display: flex;
-  width: 72rpx;
-  height: 72rpx;
-  align-items: center;
-  justify-content: center;
-  flex-shrink: 0;
-  border-radius: 18rpx;
-  color: #fff;
-}
-
-.micon--primary {
-  background: #2563eb;
-}
-
-.micon--success {
-  background: #16a34a;
-}
-
-.micon--warning {
-  background: #f59e0b;
-}
-
-.micon--danger {
-  background: #ef4444;
-}
-
-.micon-glyph {
-  font-size: 34rpx;
-}
-
-.mmain {
-  flex: 1;
-  min-width: 0;
-}
-
-.mt-row {
-  display: flex;
-  align-items: center;
-  gap: 10rpx;
-}
-
-.mt {
-  flex: 1;
-  min-width: 0;
-  font-size: 28rpx;
-  font-weight: 800;
-  line-height: 38rpx;
-  color: #111827;
-  overflow: hidden;
-  text-overflow: ellipsis;
-  white-space: nowrap;
-}
-
-.udot {
-  width: 16rpx;
-  height: 16rpx;
-  border-radius: 50%;
-  background: #dc2626;
-  flex-shrink: 0;
-  box-shadow: 0 0 0 4rpx rgba(220, 38, 38, 0.18);
-}
-
-.ms {
-  display: -webkit-box;
-  margin-top: 6rpx;
-  font-size: 24rpx;
-  color: #64748b;
-  line-height: 34rpx;
-  overflow: hidden;
-  text-overflow: ellipsis;
-  -webkit-line-clamp: 2;
-  -webkit-box-orient: vertical;
-}
-
-.mside {
-  display: flex;
-  width: 96rpx;
-  align-items: flex-end;
-  flex-direction: column;
-  flex-shrink: 0;
-  gap: 8rpx;
-}
-
-.mtime {
-  max-width: 96rpx;
-  color: #94a3b8;
-  font-size: 22rpx;
-  line-height: 30rpx;
-  overflow: hidden;
-  text-overflow: ellipsis;
-  white-space: nowrap;
-}
-
-@media screen and (max-width: 360px) {
-  .mitem {
-    gap: 14rpx;
-    padding: 20rpx 18rpx;
-  }
-
-  .micon {
-    width: 64rpx;
-    height: 64rpx;
-    border-radius: 16rpx;
-  }
-
-  .mside {
-    width: 96rpx;
-  }
-
-  .mtime {
-    max-width: 96rpx;
-  }
-}
-</style>
diff --git a/app/src/pages/message/components/MessageToolbar.vue b/app/src/pages/message/components/MessageToolbar.vue
index 29f1f0a..babfc22 100644
--- a/app/src/pages/message/components/MessageToolbar.vue
+++ b/app/src/pages/message/components/MessageToolbar.vue
@@ -6,6 +6,7 @@ const props = defineProps<{
   placeholder: string
   modelValue: string
   filterKey: MessageFilterKey
+  loading?: boolean
 }>()
 
 const emit = defineEmits<{
@@ -23,120 +24,18 @@ const activeFilterKey = computed({
   get: () => props.filterKey,
   set: value => emit('update:filterKey', value),
 })
-
-const dotColorMap: Record<MessageFilterKey, string> = {
-  all: '#2563eb',
-  recent30: '#2563eb',
-  asc: '#64748b',
-}
-
-function dotColor(key: MessageFilterKey) {
-  return dotColorMap[key]
-}
 </script>
 
 <template>
-  <view class="toolbar">
-    <view class="search-row">
-      <wd-search
-        v-model="keyword"
-        hide-cancel
-        placeholder-left
-        variant="filled"
-        :placeholder="props.placeholder"
-        custom-class="min-w-0 flex-1 !p-0"
-      />
-      <wd-button
-        class="refresh-btn"
-        icon="i-carbon-renew"
-        type="primary"
-        plain
-        round
-        size="small"
-        @click="emit('refresh')"
-      />
-    </view>
-
-    <view class="tag-row">
-      <view
-        v-for="option in messageFilterOptions"
-        :key="option.key"
-        class="chip"
-        :class="{ 'is-active': activeFilterKey === option.key }"
-        @click="activeFilterKey = option.key"
-      >
-        <view class="dot" :style="{ background: dotColor(option.key) }" />
-        <text class="chip-txt">{{ option.label }}</text>
-      </view>
+  <view class="card-base flex flex-col gap-20rpx p-20rpx">
+    <view class="flex items-center gap-16rpx">
+      <wd-search v-model="keyword" hide-cancel placeholder-left variant="filled" :placeholder="props.placeholder" custom-class="min-w-0 flex-1 !p-0" />
+      <wd-button type="primary" variant="text" size="small" css-icon="i-carbon-renew" custom-class="!h-56rpx !min-h-56rpx !px-8rpx !text-24rpx" :loading="props.loading" :disabled="props.loading" @click="emit('refresh')">
+        刷新
+      </wd-button>
     </view>
+    <wd-tabs v-model="activeFilterKey" line-theme="text" custom-class="!bg-transparent">
+      <wd-tab v-for="option in messageFilterOptions" :key="option.key" :name="option.key" :title="option.label" />
+    </wd-tabs>
   </view>
 </template>
-
-<style lang="scss" scoped>
-.toolbar {
-  display: flex;
-  flex-direction: column;
-  gap: 14rpx;
-}
-
-.search-row {
-  display: flex;
-  align-items: center;
-  gap: 12rpx;
-}
-
-.refresh-btn {
-  flex-shrink: 0;
-}
-
-.tag-row {
-  display: flex;
-  gap: 12rpx;
-  overflow-x: auto;
-  padding-bottom: 4rpx;
-}
-
-.chip {
-  display: flex;
-  align-items: center;
-  gap: 7rpx;
-  height: 44rpx;
-  padding: 0 18rpx;
-  border-radius: 999rpx;
-  background: #fff;
-  border: 1px solid #e2e8f0;
-  flex-shrink: 0;
-  transition: all 0.18s ease;
-}
-
-.chip:active {
-  transform: scale(0.95);
-}
-
-.chip.is-active {
-  background: #eff6ff;
-  border-color: #bfdbfe;
-}
-
-.chip-txt {
-  font-size: 22rpx;
-  font-weight: 700;
-  color: #334155;
-  white-space: nowrap;
-}
-
-.chip.is-active .chip-txt {
-  color: #2563eb;
-}
-
-.dot {
-  width: 10rpx;
-  height: 10rpx;
-  border-radius: 50%;
-  flex-shrink: 0;
-}
-
-.chip.is-active .dot {
-  box-shadow: 0 0 0 4rpx rgba(37, 99, 235, 0.14);
-}
-</style>
diff --git a/app/src/pages/message/data.ts b/app/src/pages/message/data.ts
index 0671075..85d2d59 100644
--- a/app/src/pages/message/data.ts
+++ b/app/src/pages/message/data.ts
@@ -132,9 +132,9 @@ export const messageFilterOptions: MessageFilterOption[] = [
 
 export function normalizeMessage(source: AppMessage): MessageItem {
   const messageType = Number(source.messageType || 1)
-  const group =
-    baseMessageGroups.find((item) => item.messageTypes.includes(messageType)) ||
-    baseMessageGroups[0]
+  const group
+    = baseMessageGroups.find(item => item.messageTypes.includes(messageType))
+      || baseMessageGroups[0]
   const content = String(source.content || '')
   const summary = stripRichText(content) || '暂无消息详细内容'
 
@@ -157,16 +157,18 @@ export function normalizeMessage(source: AppMessage): MessageItem {
 
 export function messageMatchesKeyword(item: MessageItem, keyword: string) {
   const value = keyword.trim()
-  if (!value) return true
+  if (!value)
+    return true
 
-  return [item.title, item.summary, item.content, item.time].some((text) => text.includes(value))
+  return [item.title, item.summary, item.content, item.time].some(text => text.includes(value))
 }
 
 export function messageMatchesGroup(
   item: MessageItem,
   group: Pick<MessageGroup, 'key' | 'messageTypes'>,
 ) {
-  if (group.key === 'all') return true
+  if (group.key === 'all')
+    return true
   return group.messageTypes.includes(item.messageType)
 }
 
@@ -180,7 +182,8 @@ const messageModulePatterns: Array<[MessageModuleKey, RegExp]> = [
 export function getMessageModuleKey(item: MessageItem): MessageModuleKey {
   const text = `${item.title}${item.summary}${item.content}`
   const matched = messageModulePatterns.find(([, pattern]) => pattern.test(text))
-  if (matched) return matched[0]
+  if (matched)
+    return matched[0]
 
   switch (item.messageType) {
     case 3:
@@ -198,7 +201,7 @@ export function messageMatchesModule(item: MessageItem, module: MessageModule) {
 }
 
 export function latestModuleMessage(items: MessageItem[], module: MessageModule) {
-  return items.filter((item) => messageMatchesModule(item, module)).sort(compareMessageDesc)[0]
+  return items.filter(item => messageMatchesModule(item, module)).sort(compareMessageDesc)[0]
 }
 
 export function messageTimestamp(item: MessageItem) {
@@ -208,42 +211,50 @@ export function messageTimestamp(item: MessageItem) {
 
 export function compareMessageDesc(a: MessageItem, b: MessageItem) {
   const timeDiff = messageTimestamp(b) - messageTimestamp(a)
-  if (timeDiff !== 0) return timeDiff
+  if (timeDiff !== 0)
+    return timeDiff
   return Number(b.messageId || b.id || 0) - Number(a.messageId || a.id || 0)
 }
 
 export function compareMessageAsc(a: MessageItem, b: MessageItem) {
   const timeDiff = messageTimestamp(a) - messageTimestamp(b)
-  if (timeDiff !== 0) return timeDiff
+  if (timeDiff !== 0)
+    return timeDiff
   return Number(a.messageId || a.id || 0) - Number(b.messageId || b.id || 0)
 }
 
 export function parseMessageTimestamp(value?: string | number | Date | null) {
-  if (value === undefined || value === null || value === '') return 0
+  if (value === undefined || value === null || value === '')
+    return 0
   if (value instanceof Date) {
     const time = value.getTime()
     return Number.isFinite(time) ? time : 0
   }
-  if (typeof value === 'number') return Number.isFinite(value) ? value : 0
+  if (typeof value === 'number')
+    return Number.isFinite(value) ? value : 0
 
   const text = String(value).trim()
-  if (!text) return 0
+  if (!text)
+    return 0
 
   const candidates = [text, text.replace(' ', 'T'), text.replace(/-/g, '/').replace('T', ' ')]
 
   for (const candidate of candidates) {
     const parsed = Date.parse(candidate)
-    if (Number.isFinite(parsed)) return parsed
+    if (Number.isFinite(parsed))
+      return parsed
   }
 
   return 0
 }
 
 export function messageWithinDays(item: MessageItem, days: number) {
-  if (days <= 0) return true
+  if (days <= 0)
+    return true
 
   const timestamp = messageTimestamp(item)
-  if (!timestamp) return false
+  if (!timestamp)
+    return false
 
   const cutoff = Date.now() - days * 24 * 60 * 60 * 1000
   return timestamp >= cutoff
@@ -293,7 +304,8 @@ export function stripRichText(content: string) {
 }
 
 function formatMessageTime(value: string) {
-  if (!value) return ''
+  if (!value)
+    return ''
 
   return String(value)
     .replace('T', ' ')
diff --git a/app/src/pages/message/index.test.ts b/app/src/pages/message/index.test.ts
new file mode 100644
index 0000000..ecad319
--- /dev/null
+++ b/app/src/pages/message/index.test.ts
@@ -0,0 +1,82 @@
+import { readFileSync } from 'node:fs'
+import { createContext, runInContext } from 'node:vm'
+import { ModuleKind, transpileModule } from 'typescript'
+import { describe, expect, it, vi } from 'vitest'
+import * as data from './data'
+import * as pagination from './pagination'
+
+function createHarness() {
+  const tokenStore = { validToken: 'account-a' }
+  const setUnreadCount = vi.fn()
+  const getMessageList = vi.fn()
+  const readMessages = vi.fn(async () => undefined)
+  let resetAccount: () => void = () => undefined
+  const context = createContext({
+    exports: {},
+    require: (name: string) => {
+      if (name === '@/api/message')
+        return { getMessageList, readMessages }
+      if (name === '@/store/token')
+        return { useTokenStore: () => tokenStore }
+      if (name === '@/store/message')
+        return { useMessageStore: () => ({ setUnreadCount, adjustUnreadCount: vi.fn(), refreshUnreadCount: vi.fn() }) }
+      if (name === './data')
+        return data
+      if (name === './pagination')
+        return pagination
+      return { default: {} }
+    },
+    ref: (value: unknown) => ({ value }),
+    computed: (getter: () => unknown) => ({ get value() { return getter() } }),
+    watch: (_getter: unknown, callback: () => void) => { resetAccount = callback },
+    definePage: () => undefined,
+    onLoad: () => undefined,
+    onShow: () => undefined,
+    onUnload: () => undefined,
+    uni: { showToast: vi.fn(), navigateTo: vi.fn() },
+  })
+  const source = readFileSync(new URL('./index.vue', import.meta.url), 'utf8')
+  const script = source.slice(source.indexOf('>') + 1, source.indexOf('</script>'))
+  if (!script)
+    throw new Error('Message page script not found')
+  runInContext(transpileModule(script, { compilerOptions: { module: ModuleKind.CommonJS } }).outputText, context)
+  return {
+    getMessageList,
+    readMessages,
+    setUnreadCount,
+    evaluate: (code: string) => runInContext(code, context),
+    switchAccount: () => {
+      tokenStore.validToken = 'account-b'
+      resetAccount()
+    },
+  }
+}
+
+describe('消息页面请求隔离', () => {
+  it('切换账号后丢弃旧账号列表响应与未读数量', async () => {
+    const harness = createHarness()
+    let resolvePage!: (value: unknown) => void
+    harness.getMessageList.mockReturnValueOnce(new Promise((resolve) => {
+      resolvePage = resolve
+    }))
+    const pending = harness.evaluate('loadMessages()')
+    harness.switchAccount()
+    resolvePage({ items: [{ id: 1, messageId: 1 }], total: 1 })
+    await pending
+    expect(harness.evaluate('rawMessages.value.length')).toBe(0)
+    expect(harness.setUnreadCount).not.toHaveBeenCalled()
+    expect(harness.getMessageList).toHaveBeenCalledTimes(1)
+  })
+
+  it('批量已读期间切换账号后停止后续批次', async () => {
+    const harness = createHarness()
+    harness.evaluate('activeModuleKey.value = \'system\'')
+    harness.evaluate('rawMessages.value = Array.from({ length: 101 }, (_, index) => ({ id: index + 1, messageId: index + 1, messageType: 1, isRead: 0 }))')
+    harness.readMessages.mockImplementationOnce(async () => {
+      harness.switchAccount()
+    })
+    await harness.evaluate('handleReadAll()')
+    expect(harness.readMessages).toHaveBeenCalledTimes(1)
+    expect(harness.setUnreadCount).not.toHaveBeenCalled()
+  })
+})
diff --git a/app/src/pages/message/index.vue b/app/src/pages/message/index.vue
index 4f62fea..99915fb 100644
--- a/app/src/pages/message/index.vue
+++ b/app/src/pages/message/index.vue
@@ -2,9 +2,13 @@
 import type { AppMessage } from '@/api/message'
 import { getMessageList, readMessages } from '@/api/message'
 import RouterPath from '@/constant/RouterPath'
+import { useUserStore } from '@/store/user'
+import { hasAnyFeature } from '@/utils/permission'
 import { useMessageStore } from '@/store/message'
+import { useTokenStore } from '@/store/token'
 import MessageList from './components/MessageList.vue'
 import MessageToolbar from './components/MessageToolbar.vue'
+import { collectMessagePages } from './pagination'
 import {
   compareMessageAsc,
   compareMessageDesc,
@@ -24,8 +28,8 @@ definePage({
   layout: 'default',
 })
 
-const pageSize = 100
 const messageStore = useMessageStore()
+const tokenStore = useTokenStore()
 
 const activeModuleKey = ref<MessageModuleKey>()
 const activeFilter = ref<MessageFilterKey>('all')
@@ -37,29 +41,45 @@ const rawMessages = ref<AppMessage[]>([])
 const totalUnread = ref(0)
 let messageLoadSeq = 0
 
-const messageItems = computed(() => rawMessages.value.map((item) => normalizeMessage(item)))
+function isCurrentRequest(seq: number, token: string) {
+  return seq === messageLoadSeq && Boolean(token) && tokenStore.validToken === token
+}
+
+watch(() => tokenStore.validToken, () => {
+  messageLoadSeq++
+  rawMessages.value = []
+  totalUnread.value = 0
+  errorMessage.value = ''
+  loading.value = false
+  readingAll.value = false
+}, { flush: 'sync' })
+
+onUnload(() => {
+  messageLoadSeq++
+})
+const messageItems = computed(() => rawMessages.value.map(item => normalizeMessage(item)))
 
 const moduleRows = computed(() =>
   messageModules.map((module) => {
-    const moduleMessages = messageItems.value.filter((item) => messageMatchesModule(item, module))
+    const moduleMessages = messageItems.value.filter(item => messageMatchesModule(item, module))
     const latest = latestModuleMessage(moduleMessages, module)
     return {
       ...module,
-      unreadCount: moduleMessages.filter((item) => item.unread).length,
+      unreadCount: moduleMessages.filter(item => item.unread).length,
       latest,
     }
   }),
 )
 
 const activeModule = computed(() =>
-  messageModules.find((item) => item.key === activeModuleKey.value),
+  messageModules.find(item => item.key === activeModuleKey.value),
 )
 const currentUnreadIds = computed(() => {
   const ids = messageItems.value
     .filter(
-      (item) => item.unread && activeModule.value && messageMatchesModule(item, activeModule.value),
+      item => item.unread && activeModule.value && messageMatchesModule(item, activeModule.value),
     )
-    .map((item) => Number(item.messageId || item.id || 0))
+    .map(item => Number(item.messageId || item.id || 0))
     .filter(Boolean)
   return Array.from(new Set(ids))
 })
@@ -77,55 +97,67 @@ const activeModuleMessageGroup = computed(() => ({
 const filteredMessages = computed(() => {
   const compareMessage = activeFilter.value === 'asc' ? compareMessageAsc : compareMessageDesc
   const list = messageItems.value
-    .filter((item) => (activeModule.value ? messageMatchesModule(item, activeModule.value) : false))
+    .filter(item => (activeModule.value ? messageMatchesModule(item, activeModule.value) : false))
     .filter((item) => {
-      if (activeFilter.value !== 'recent30') return true
+      if (activeFilter.value !== 'recent30')
+        return true
       return messageWithinDays(item, 30)
     })
-    .filter((item) => messageMatchesKeyword(item, keyword.value))
+    .filter(item => messageMatchesKeyword(item, keyword.value))
     .sort(compareMessage)
 
   return list
 })
 
 const emptyTip = computed(() => {
-  if (keyword.value.trim()) return '暂无匹配消息'
-  if (activeFilter.value === 'recent30') return '最近30天暂无消息'
+  if (keyword.value.trim())
+    return '暂无匹配消息'
+  if (activeFilter.value === 'recent30')
+    return '最近30天暂无消息'
   return activeModule.value?.emptyTip || '请选择一个消息模块'
 })
 const showInitialLoading = computed(() => loading.value && rawMessages.value.length === 0)
-async function loadUnreadTotal() {
+async function loadUnreadTotal(seq = messageLoadSeq, token = tokenStore.validToken) {
+  if (!isCurrentRequest(seq, token))
+    return
   const res = await getMessageList({
     page: 1,
     pageSize: 1,
     isRead: '0',
   })
+  if (!isCurrentRequest(seq, token))
+    return
   totalUnread.value = Number(res.total || 0)
   messageStore.setUnreadCount(totalUnread.value)
 }
 
 async function loadMessages() {
   const seq = ++messageLoadSeq
+  const token = tokenStore.validToken
+  if (!token)
+    return
   loading.value = true
   errorMessage.value = ''
   try {
-    const res = await getMessageList({
-      page: 1,
-      pageSize,
-    })
-    if (seq !== messageLoadSeq) return
-    rawMessages.value = res.items || []
-    await loadUnreadTotal()
-  } catch (error) {
-    if (seq !== messageLoadSeq) return
+    const items = await collectMessagePages(getMessageList, {}, () => isCurrentRequest(seq, token))
+    if (!items || !isCurrentRequest(seq, token))
+      return
+    rawMessages.value = items
+    await loadUnreadTotal(seq, token)
+  }
+  catch (error) {
+    if (!isCurrentRequest(seq, token))
+      return
     if (rawMessages.value.length === 0) {
       rawMessages.value = []
       totalUnread.value = 0
       messageStore.setUnreadCount(0)
     }
     errorMessage.value = getErrorMessage(error, '消息加载失败，请稍后重试')
-  } finally {
-    if (seq === messageLoadSeq) loading.value = false
+  }
+  finally {
+    if (isCurrentRequest(seq, token))
+      loading.value = false
   }
 }
 
@@ -142,15 +174,50 @@ function closeModule() {
 }
 
 async function handleOpen(item: MessageItem) {
+  const link = String(item.raw.link || '')
+  const prefix = `${RouterPath.BusinessViewsWorkOrderDetail}?woNo=`
+  const workOrderLink = link.startsWith(prefix) && !link.slice(prefix.length).includes('&') && !link.includes('#')
+  if (workOrderLink) {
+    if (!hasAnyFeature(useUserStore().userInfo, 'workorder:detail')) {
+      uni.showToast({ title: '暂无工单查看权限', icon: 'none' })
+      return
+    }
+    let woNo = ''
+    try {
+      woNo = decodeURIComponent(link.slice(prefix.length))
+    }
+    catch {
+      uni.showToast({ title: '工单链接无效', icon: 'none' })
+      return
+    }
+    uni.navigateTo({ url: `${RouterPath.BusinessViewsWorkOrderDetail}?woNo=${encodeURIComponent(woNo)}` })
+    if (item.unread) {
+      const seq = messageLoadSeq
+      const token = tokenStore.validToken
+      readMessages({ ids: [item.messageId] }).then(() => {
+        if (isCurrentRequest(seq, token))
+          markLocalRead(item.id)
+      }).catch(() => {
+        if (isCurrentRequest(seq, token))
+          void loadMessages()
+      })
+    }
+    return
+  }
   if (item.unread) {
-    markLocalRead(item.id)
-    readMessages({ ids: [item.messageId] }).catch(() => {
-      void loadMessages()
+    const seq = messageLoadSeq
+    const token = tokenStore.validToken
+    readMessages({ ids: [item.messageId] }).then(() => {
+      if (isCurrentRequest(seq, token))
+        markLocalRead(item.id)
+    }).catch(() => {
+      if (isCurrentRequest(seq, token))
+        void loadMessages()
     })
   }
 
-  const detailPath =
-    Number(item.messageType) === 1
+  const detailPath
+    = Number(item.messageType) === 1
       ? RouterPath.MessageViewsSystemDetail
       : RouterPath.MessageViewsCardDetail
 
@@ -160,37 +227,58 @@ async function handleOpen(item: MessageItem) {
 }
 
 async function handleReadAll() {
-  if (readingAll.value) return
+  if (readingAll.value)
+    return
 
   const ids = currentUnreadIds.value
   if (!ids.length) {
     uni.showToast({ title: '当前没有未读消息', icon: 'none' })
     return
   }
-
+  const seq = messageLoadSeq
+  const token = tokenStore.validToken
+  if (!isCurrentRequest(seq, token))
+    return
   readingAll.value = true
   try {
-    await readMessages({ ids })
+    for (let offset = 0; offset < ids.length; offset += 100) {
+      if (!isCurrentRequest(seq, token))
+        return
+      await readMessages({ ids: ids.slice(offset, offset + 100) })
+    }
+    if (!isCurrentRequest(seq, token))
+      return
     const idSet = new Set(ids.map(Number))
     rawMessages.value = rawMessages.value.map((item) => {
       const id = Number(item.messageId || item.id || 0)
-      if (!idSet.has(id)) return item
-      return { ...item, isRead: 1 }
+      return idSet.has(id) ? { ...item, isRead: 1 } : item
     })
     totalUnread.value = Math.max(0, totalUnread.value - ids.length)
     messageStore.setUnreadCount(totalUnread.value)
-    await loadUnreadTotal()
-    uni.showToast({ title: '已标记为已读', icon: 'success' })
-  } catch (error) {
-    uni.showToast({ title: getErrorMessage(error, '标记已读失败'), icon: 'none' })
-  } finally {
-    readingAll.value = false
+    await loadUnreadTotal(seq, token)
+    if (isCurrentRequest(seq, token))
+      uni.showToast({ title: '已标记为已读', icon: 'success' })
+  }
+  catch (error) {
+    if (!isCurrentRequest(seq, token))
+      return
+    await loadMessages()
+    if (tokenStore.validToken !== token)
+      return
+    await messageStore.refreshUnreadCount()
+    if (tokenStore.validToken === token)
+      uni.showToast({ title: getErrorMessage(error, '标记已读失败'), icon: 'none' })
+  }
+  finally {
+    if (tokenStore.validToken === token)
+      readingAll.value = false
   }
 }
 
 function markLocalRead(id: number) {
   rawMessages.value = rawMessages.value.map((item) => {
-    if (Number(item.id) !== Number(id)) return item
+    if (Number(item.id) !== Number(id))
+      return item
     return { ...item, isRead: 1 }
   })
   totalUnread.value = Math.max(0, totalUnread.value - 1)
@@ -199,390 +287,103 @@ function markLocalRead(id: number) {
 
 function getErrorMessage(error: unknown, fallback: string) {
   if (error && typeof error === 'object') {
-    const data = error as { msg?: unknown; message?: unknown }
-    if (typeof data.msg === 'string' && data.msg) return data.msg
-    if (typeof data.message === 'string' && data.message) return data.message
+    const data = error as { msg?: unknown, message?: unknown }
+    if (typeof data.msg === 'string' && data.msg)
+      return data.msg
+    if (typeof data.message === 'string' && data.message)
+      return data.message
   }
   return fallback
 }
 
 onLoad((query) => {
   const moduleKey = String(query?.module || '').trim() as MessageModuleKey
-  if (messageModules.some((item) => item.key === moduleKey)) activeModuleKey.value = moduleKey
+  if (messageModules.some(item => item.key === moduleKey))
+    activeModuleKey.value = moduleKey
 })
 
 onShow(loadMessages)
 </script>
 
 <template>
-    <view class="message-page">
-      <view class="message-stack">
-        <view class="message-header">
-          <view class="message-header__nav">
-            <view v-if="activeModule" class="back-button" @click="closeModule">
-              <view class="i-carbon-arrow-left" />
-            </view>
-            <view class="message-header__copy">
-              <text class="message-title">{{ activeModule?.label || '消息' }}</text>
-              <text class="message-sub">{{
-                activeModule ? '查看这个模块的全部消息' : '按模块查看消息和业务动态'
-              }}</text>
-            </view>
-            <view class="message-header__unread">
-              <text>未读</text>
-              <text class="unread-count">{{ totalUnread > 99 ? '99+' : totalUnread }}</text>
-            </view>
+  <view class="min-h-screen bg-canvas p-20rpx pb-48rpx">
+    <view class="mx-auto max-w-920rpx flex flex-col gap-20rpx">
+      <view class="card-base flex flex-col gap-24rpx p-28rpx">
+        <view class="flex items-center gap-20rpx">
+          <wd-button v-if="activeModule" type="info" variant="text" size="small" css-icon="i-carbon-chevron-left" custom-class="!h-56rpx !min-h-56rpx !px-0 !text-24rpx" @click="closeModule">
+            返回
+          </wd-button>
+          <view class="min-w-0 flex-1">
+            <text class="block text-36rpx text-ink font-bold">{{ activeModule?.label || '消息中心' }}</text>
+            <text class="mt-8rpx block text-24rpx text-muted leading-36rpx">{{ activeModule ? '业务动态与提醒，集中查看' : '预警、卡片、订单和系统通知' }}</text>
           </view>
-          <view v-if="activeModule" class="message-header__tools">
-            <text class="message-header__scope"
-              >{{ activeModule.label }} · {{ filteredMessages.length }} 条</text
-            >
-            <view
-              class="read-all"
-              :class="{ 'is-disabled': readingAll || !currentUnreadIds.length }"
-              @click="handleReadAll"
-            >
-              <wd-loading v-if="readingAll" custom-class="!mr-8rpx" />
-              <text>全部已读</text>
+          <wd-tag :type="totalUnread ? 'danger' : 'default'" plain>
+            {{ totalUnread > 99 ? '99+' : totalUnread }} 未读
+          </wd-tag>
+        </view>
+        <view class="flex flex-wrap items-center justify-between gap-16rpx border-0 border-t border-line border-solid pt-20rpx">
+          <text class="text-24rpx text-muted">{{ activeModule ? `当前模块 · ${filteredMessages.length} 条` : '预警、卡片、订单和系统通知' }}</text>
+          <wd-button v-if="activeModule" type="primary" variant="text" size="small" custom-class="!h-56rpx !min-h-56rpx !px-8rpx !text-24rpx" :loading="readingAll" :disabled="loading || readingAll || !currentUnreadIds.length" @click="handleReadAll">
+            全部已读
+          </wd-button>
+        </view>
+      </view>
+
+      <MessageToolbar v-if="activeModule" v-model="keyword" v-model:filter-key="activeFilter" :placeholder="`搜索${activeModule.label}`" :loading="loading" @refresh="loadMessages" />
+      <view v-else class="flex items-center justify-between px-4rpx">
+        <text class="text-28rpx text-ink font-bold">消息分类</text>
+        <wd-button type="primary" variant="text" size="small" css-icon="i-carbon-renew" custom-class="!h-56rpx !min-h-56rpx !px-8rpx !text-24rpx" :loading="loading" :disabled="loading" @click="loadMessages">
+          刷新消息
+        </wd-button>
+      </view>
+
+      <view v-if="showInitialLoading" class="card-base flex flex-col items-center gap-20rpx py-72rpx">
+        <wd-loading />
+        <text class="text-24rpx text-muted">正在加载消息…</text>
+      </view>
+      <view v-else-if="errorMessage" class="card-base flex flex-col items-center gap-24rpx p-32rpx">
+        <wd-empty tip="消息暂时加载失败">
+          <template #image>
+            <view class="i-carbon-information text-72rpx text-warning" />
+          </template>
+        </wd-empty>
+        <text class="text-center text-25rpx text-muted leading-38rpx">{{ errorMessage }}</text>
+        <wd-button type="primary" variant="text" size="small" custom-class="!h-56rpx !min-h-56rpx !px-8rpx !text-24rpx" @click="loadMessages">
+          重新加载
+        </wd-button>
+      </view>
+      <template v-else-if="!activeModule">
+        <view class="card-base overflow-hidden">
+          <view v-for="module in moduleRows" :key="module.key" class="flex items-center gap-20rpx border-0 border-b border-line border-solid p-24rpx last:border-b-0 active:bg-input-bg" @click="openModule(module)">
+            <view class="h-76rpx w-76rpx flex shrink-0 items-center justify-center rounded-20rpx text-34rpx" :class="module.key === 'warning' ? 'bg-amber-50 text-warning' : 'bg-canvas-soft text-primary'">
+              <view :class="module.icon" />
             </view>
+            <view class="min-w-0 flex-1">
+              <view class="flex flex-wrap items-center gap-12rpx">
+                <text class="text-29rpx text-ink font-bold">{{ module.label }}</text>
+                <wd-tag v-if="module.unreadCount" type="danger" round>
+                  {{ module.unreadCount > 99 ? '99+' : module.unreadCount }}
+                </wd-tag>
+              </view>
+              <text class="mt-10rpx block truncate text-24rpx text-muted">{{ module.latest?.summary || module.emptyTip }}</text>
+              <text v-if="module.latest?.time" class="mt-8rpx block text-22rpx text-disabled">{{ module.latest.time }}</text>
+            </view>
+            <view class="i-carbon-chevron-right shrink-0 text-28rpx text-disabled" />
           </view>
         </view>
-
-        <template v-if="!activeModule">
-          <view class="module-list">
-            <view
-              v-for="module in moduleRows"
-              :key="module.key"
-              class="module-row"
-              @click="openModule(module)"
-            >
-              <view class="module-icon" :class="`module-icon--${module.tagType}`">
-                <view :class="module.icon" />
-              </view>
-              <view class="module-main">
-                <view class="module-title-row">
-                  <text class="module-title">{{ module.label }}</text>
-                  <view v-if="module.unreadCount" class="module-unread">
-                    {{ module.unreadCount > 99 ? '99+' : module.unreadCount }}
-                  </view>
-                </view>
-                <text class="module-summary">{{ module.latest?.summary || module.emptyTip }}</text>
-              </view>
-              <view class="module-side">
-                <text class="module-time">{{ module.latest?.time || '' }}</text>
-                <view class="i-carbon-chevron-right module-arrow" />
-              </view>
-            </view>
-          </view>
-          <view class="message-note">
-            <view class="i-carbon-information message-note__icon" />
-            <text>点进模块后，可查看该模块下的全部消息；进入消息详情会自动标记为已读。</text>
-          </view>
-        </template>
-
-        <template v-else>
-          <MessageToolbar
-            v-model="keyword"
-            v-model:filter-key="activeFilter"
-            :placeholder="activeModule.label + '消息'"
-            @refresh="loadMessages"
-          />
-
-          <view v-if="showInitialLoading" class="message-card message-loading">
-            <wd-loading />
-          </view>
-
-          <view v-else-if="errorMessage" class="message-card message-error">
-            <text class="text-26rpx text-muted">{{ errorMessage }}</text>
-            <wd-button size="small" type="primary" plain @click="loadMessages">重试</wd-button>
-          </view>
-
-          <MessageList
-            v-else-if="filteredMessages.length"
-            :group="activeModuleMessageGroup"
-            :list="filteredMessages"
-            @open="handleOpen"
-          />
-          <wd-empty v-else icon="content" :tip="emptyTip" />
-        </template>
+        <view class="flex items-start gap-12rpx px-8rpx text-23rpx text-muted leading-36rpx">
+          <view class="i-carbon-information mt-4rpx shrink-0 text-26rpx" />
+          <text>进入详情查看消息和预警通知。</text>
+        </view>
+      </template>
+      <MessageList v-else-if="filteredMessages.length" :group="activeModuleMessageGroup" :list="filteredMessages" @open="handleOpen" />
+      <view v-else class="card-base py-32rpx">
+        <wd-empty :tip="emptyTip">
+          <template #image>
+            <view class="i-carbon-notification text-72rpx text-disabled" />
+          </template>
+        </wd-empty>
       </view>
     </view>
+  </view>
 </template>
-
-<style lang="scss" scoped>
-.message-page {
-  min-height: 100%;
-  box-sizing: border-box;
-  padding: 0 20rpx 48rpx;
-  background: #f6f8fb;
-}
-
-.message-stack {
-  display: flex;
-  max-width: 960rpx;
-  margin: 0 auto;
-  flex-direction: column;
-  gap: 16rpx;
-}
-
-.message-header {
-  padding: 24rpx 4rpx 8rpx;
-}
-
-.message-header__nav,
-.message-header__tools {
-  display: flex;
-  align-items: center;
-  gap: 14rpx;
-}
-
-.message-header__nav {
-  min-height: 64rpx;
-}
-
-.back-button {
-  display: flex;
-  width: 56rpx;
-  height: 56rpx;
-  align-items: center;
-  justify-content: center;
-  flex-shrink: 0;
-  border-radius: 999rpx;
-  color: #334155;
-  background: #fff;
-  font-size: 30rpx;
-}
-
-.message-header__copy {
-  min-width: 0;
-  flex: 1;
-}
-
-.message-title,
-.message-sub {
-  display: block;
-}
-
-.message-title {
-  color: #111827;
-  font-size: 36rpx;
-  font-weight: 900;
-  line-height: 46rpx;
-}
-
-.message-sub {
-  margin-top: 4rpx;
-  color: #64748b;
-  font-size: 22rpx;
-  line-height: 32rpx;
-}
-
-.message-header__unread {
-  display: flex;
-  align-items: center;
-  gap: 6rpx;
-  color: #64748b;
-  font-size: 22rpx;
-  flex-shrink: 0;
-}
-
-.unread-count {
-  color: #dc2626;
-  font-size: 24rpx;
-  font-weight: 900;
-}
-
-.message-header__tools {
-  justify-content: space-between;
-  margin-top: 18rpx;
-  padding-top: 16rpx;
-  border-top: 1px solid #e2e8f0;
-}
-
-.message-header__scope {
-  color: #64748b;
-  font-size: 22rpx;
-}
-
-.read-all {
-  display: flex;
-  align-items: center;
-  color: #2563eb;
-  font-size: 23rpx;
-  font-weight: 800;
-}
-
-.read-all.is-disabled {
-  color: #94a3b8;
-}
-
-.module-list,
-.message-card {
-  overflow: hidden;
-  border: 1px solid #e2e8f0;
-  border-radius: 16rpx;
-  background: #fff;
-  box-shadow: 0 6rpx 18rpx rgba(11, 43, 172, 0.06);
-}
-
-.module-row {
-  display: flex;
-  min-width: 0;
-  min-height: 122rpx;
-  align-items: center;
-  gap: 18rpx;
-  padding: 22rpx 20rpx;
-  border-bottom: 1px solid #f1f5f9;
-}
-
-.module-row:last-child {
-  border-bottom: 0;
-}
-
-.module-row:active {
-  background: #f8fafc;
-}
-
-.module-icon {
-  display: flex;
-  width: 72rpx;
-  height: 72rpx;
-  align-items: center;
-  justify-content: center;
-  flex-shrink: 0;
-  border-radius: 18rpx;
-  color: #fff;
-  font-size: 34rpx;
-}
-
-.module-icon--warning {
-  background: #f59e0b;
-}
-
-.module-icon--primary {
-  background: #2563eb;
-}
-
-.module-icon--success {
-  background: #16a34a;
-}
-
-.module-main {
-  min-width: 0;
-  flex: 1;
-}
-
-.module-title-row {
-  display: flex;
-  min-width: 0;
-  align-items: center;
-  gap: 10rpx;
-}
-
-.module-title {
-  min-width: 0;
-  overflow: hidden;
-  color: #111827;
-  font-size: 28rpx;
-  font-weight: 800;
-  line-height: 38rpx;
-  text-overflow: ellipsis;
-  white-space: nowrap;
-}
-
-.module-unread {
-  min-width: 26rpx;
-  height: 26rpx;
-  padding: 0 7rpx;
-  border-radius: 999rpx;
-  color: #fff;
-  background: #dc2626;
-  font-size: 18rpx;
-  font-weight: 800;
-  line-height: 26rpx;
-  text-align: center;
-}
-
-.module-summary {
-  display: -webkit-box;
-  margin-top: 6rpx;
-  overflow: hidden;
-  color: #64748b;
-  font-size: 23rpx;
-  line-height: 34rpx;
-  text-overflow: ellipsis;
-  -webkit-box-orient: vertical;
-  -webkit-line-clamp: 1;
-}
-
-.module-side {
-  display: flex;
-  width: 96rpx;
-  align-items: flex-end;
-  flex-direction: column;
-  flex-shrink: 0;
-  gap: 10rpx;
-}
-
-.module-time {
-  max-width: 96rpx;
-  overflow: hidden;
-  color: #94a3b8;
-  font-size: 21rpx;
-  line-height: 30rpx;
-  text-overflow: ellipsis;
-  white-space: nowrap;
-}
-
-.module-arrow {
-  color: #cbd5e1;
-  font-size: 28rpx;
-}
-
-.message-note {
-  display: flex;
-  align-items: flex-start;
-  gap: 10rpx;
-  padding: 18rpx 14rpx;
-  color: #64748b;
-  background: #f1f5f9;
-  font-size: 21rpx;
-  line-height: 32rpx;
-}
-
-.message-note__icon {
-  flex-shrink: 0;
-  color: #0ea5e9;
-  font-size: 24rpx;
-  line-height: 32rpx;
-}
-
-.message-loading,
-.message-error {
-  display: flex;
-  min-height: 220rpx;
-  align-items: center;
-  justify-content: center;
-  flex-direction: column;
-  gap: 18rpx;
-}
-
-@media screen and (max-width: 360px) {
-  .message-page {
-    padding-right: 16rpx;
-    padding-left: 16rpx;
-  }
-
-  .module-row {
-    gap: 14rpx;
-    padding-right: 16rpx;
-    padding-left: 16rpx;
-  }
-
-  .module-icon {
-    width: 64rpx;
-    height: 64rpx;
-    border-radius: 16rpx;
-  }
-}
-</style>
diff --git a/app/src/pages/message/pagination.test.ts b/app/src/pages/message/pagination.test.ts
new file mode 100644
index 0000000..74e99ca
--- /dev/null
+++ b/app/src/pages/message/pagination.test.ts
@@ -0,0 +1,25 @@
+import type { AppMessage } from '@/api/message'
+import { describe, expect, it, vi } from 'vitest'
+import { collectMessagePages } from './pagination'
+
+function item(id: number): AppMessage {
+  return { id, messageId: id, messageLogId: id, messageType: 1, title: '通知', content: '', isRead: 0 }
+}
+
+describe('消息分页完整性', () => {
+  it('超过 100 条仍能加载完整列表', async () => {
+    const fetch = vi.fn().mockResolvedValueOnce({ items: Array.from({ length: 100 }, (_, i) => item(i + 1)), total: 101 }).mockResolvedValueOnce({ items: [item(101)], total: 101 })
+    expect((await collectMessagePages(fetch))?.length).toBe(101)
+    expect(fetch).toHaveBeenCalledTimes(2)
+  })
+  it('过期请求不返回旧数据', async () => {
+    expect(await collectMessagePages(vi.fn().mockResolvedValue({ items: [item(1)], total: 1 }), {}, () => false)).toBeNull()
+  })
+  it('重复分页不造成无限加载', async () => {
+    const fetch = vi.fn().mockResolvedValue({ items: Array.from({ length: 100 }, (_, i) => item(i + 1)), total: 300 })
+    await expect(collectMessagePages(fetch)).rejects.toThrow('分页未前进')
+  })
+  it('分页失败向调用者传播，不假装加载完整', async () => {
+    await expect(collectMessagePages(vi.fn().mockRejectedValue(new Error('网络失败')))).rejects.toThrow('网络失败')
+  })
+})
diff --git a/app/src/pages/message/pagination.ts b/app/src/pages/message/pagination.ts
new file mode 100644
index 0000000..c44d362
--- /dev/null
+++ b/app/src/pages/message/pagination.ts
@@ -0,0 +1,22 @@
+import type { AppMessage, AppMessageListParams, AppMessageListRes } from '@/api/message'
+
+export async function collectMessagePages(
+  fetchPage: (params: AppMessageListParams) => Promise<AppMessageListRes>,
+  params: Omit<AppMessageListParams, 'page' | 'pageSize'> = {},
+  isCurrent: () => boolean = () => true,
+): Promise<AppMessage[] | null> {
+  const messages = new Map<number, AppMessage>()
+  for (let page = 1; ; page++) {
+    const result = await fetchPage({ ...params, page, pageSize: 100 })
+    if (!isCurrent())
+      return null
+    const items = result.items || []
+    const previousSize = messages.size
+    for (const item of items)
+      messages.set(Number(item.messageId || item.id), item)
+    if (items.length < 100 || page * 100 >= Number(result.total || 0))
+      return Array.from(messages.values())
+    if (messages.size === previousSize)
+      throw new Error('消息分页未前进，请稍后重试')
+  }
+}
diff --git a/app/src/pages/message/views/cardDetail/index.vue b/app/src/pages/message/views/cardDetail/index.vue
index d24f8f7..2be4dd3 100644
--- a/app/src/pages/message/views/cardDetail/index.vue
+++ b/app/src/pages/message/views/cardDetail/index.vue
@@ -2,6 +2,8 @@
 import type { AppMessage } from '@/api/message'
 import { getMessageDetail, readMessages } from '@/api/message'
 import { stripRichText } from '../../data'
+import { useMessageStore } from '@/store/message'
+import { useTokenStore } from '@/store/token'
 
 definePage({
   style: {
@@ -9,11 +11,31 @@ definePage({
   },
 })
 
+const tokenStore = useTokenStore()
+let detailRequestSeq = 0
+
+function isCurrentRequest(seq: number, token: string) {
+  return seq === detailRequestSeq && Boolean(token) && tokenStore.validToken === token
+}
+
+const messageId = ref(0)
 const loading = ref(false)
 const marking = ref(false)
 const errorMessage = ref('')
 const detail = ref<AppMessage | null>(null)
 
+watch(() => tokenStore.validToken, () => {
+  detailRequestSeq++
+  detail.value = null
+  errorMessage.value = ''
+  loading.value = false
+  marking.value = false
+}, { flush: 'sync' })
+
+onUnload(() => {
+  detailRequestSeq++
+})
+
 const content = computed(() => detail.value?.content || '')
 const contentText = computed(() => stripRichText(content.value) || '暂无消息详细内容')
 const canRenderRichText = computed(() => /<[^>]+>/.test(content.value))
@@ -29,44 +51,75 @@ async function loadDetail(id: number) {
     return
   }
 
+  const seq = ++detailRequestSeq
+  const token = tokenStore.validToken
+  if (!token)
+    return
   loading.value = true
   errorMessage.value = ''
   try {
     const res = await getMessageDetail({ messageId: id })
+    if (!isCurrentRequest(seq, token))
+      return
+    if (!res.message)
+      throw new Error('消息不存在或已撤回')
     detail.value = res.message
-    if (Number(res.message?.isRead) === 0) {
-      detail.value = { ...res.message, isRead: 1 }
-      readMessages({ ids: [id] }).catch(() => undefined)
+    if (Number(res.message.isRead) === 0) {
+      try {
+        await readMessages({ ids: [id] })
+        if (!isCurrentRequest(seq, token))
+          return
+        detail.value = { ...res.message, isRead: 1 }
+      }
+      catch {
+        if (!isCurrentRequest(seq, token))
+          return
+        uni.showToast({ title: '自动标记失败，可手动标记已读', icon: 'none' })
+      }
     }
+    void useMessageStore().refreshUnreadCount()
   }
   catch (error) {
+    if (!isCurrentRequest(seq, token))
+      return
     errorMessage.value = getErrorMessage(error, '消息详情加载失败，请稍后重试')
   }
   finally {
-    loading.value = false
+    if (isCurrentRequest(seq, token))
+      loading.value = false
   }
 }
 
 async function handleMarkRead() {
   const id = Number(detail.value?.messageId || detail.value?.id || 0)
-  if (!id)
+  if (!id || marking.value)
     return
   if (Number(detail.value?.isRead) === 1) {
     uni.showToast({ title: '当前消息已读', icon: 'none' })
     return
   }
 
+  const seq = detailRequestSeq
+  const token = tokenStore.validToken
+  if (!isCurrentRequest(seq, token))
+    return
   marking.value = true
   try {
     await readMessages({ ids: [id] })
+    if (!isCurrentRequest(seq, token))
+      return
     detail.value = { ...detail.value!, isRead: 1 }
+    void useMessageStore().refreshUnreadCount()
     uni.showToast({ title: '已标记已读', icon: 'success' })
   }
   catch (error) {
+    if (!isCurrentRequest(seq, token))
+      return
     uni.showToast({ title: getErrorMessage(error, '标记已读失败'), icon: 'none' })
   }
   finally {
-    marking.value = false
+    if (isCurrentRequest(seq, token))
+      marking.value = false
   }
 }
 
@@ -106,7 +159,7 @@ function formatTime(value: string) {
 
   return String(value)
     .replace('T', ' ')
-    .replace(/\.\d+.*$/, '')
+    .replace(/\.\d.*$/, '')
     .slice(0, 16)
 }
 
@@ -127,128 +180,71 @@ function getErrorMessage(error: unknown, fallback: string) {
 }
 
 onLoad((options: Record<string, string | undefined>) => {
-  void loadDetail(Number(options?.messageId || 0))
+  messageId.value = Number(options?.messageId || 0)
+  void loadDetail(messageId.value)
 })
 </script>
 
 <template>
-    <view class="min-h-screen bg-canvas p-20rpx pb-56rpx">
-      <view class="mx-auto max-w-920rpx flex flex-col gap-16rpx">
-        <view v-if="loading" class="card-base flex items-center justify-center py-72rpx">
-          <wd-loading />
-        </view>
-
-        <view v-else-if="errorMessage" class="card-base flex flex-col items-center gap-20rpx py-48rpx">
-          <text class="text-26rpx text-muted">{{ errorMessage }}</text>
-        </view>
-
-        <template v-else-if="detail">
-          <view class="card-base overflow-hidden">
-            <view class="detail-row">
-              <text class="detail-label">标题</text>
-              <text class="detail-value detail-title">{{ detail.title || '未命名消息' }}</text>
-            </view>
-            <view class="detail-row">
-              <text class="detail-label">来源</text>
-              <text class="detail-value">{{ sourceText }}</text>
-            </view>
-            <view class="detail-row">
-              <text class="detail-label">时间</text>
-              <text class="detail-value">{{ displayTime }}</text>
-            </view>
-            <view class="detail-row">
-              <text class="detail-label">状态</text>
-              <wd-tag :type="readText === '已读' ? 'primary' : 'danger'" round>
-                {{ readText }}
-              </wd-tag>
-            </view>
-          </view>
-
-          <view class="card-base p-24rpx">
-            <view class="mb-18rpx flex items-center gap-12rpx">
-              <view class="title-bar" />
-              <text class="text-30rpx text-ink font-900">内容</text>
-            </view>
-            <view class="content-body">
-              <rich-text v-if="canRenderRichText" :nodes="content" />
-              <text v-else>{{ contentText }}</text>
-            </view>
-            <view v-if="relatedCard" class="related-row" @click="copyCard">
-              <text class="detail-label">关联卡</text>
-              <text class="mono detail-value">{{ relatedCard }}</text>
-            </view>
-          </view>
-
-          <view class="grid grid-cols-2 gap-14rpx">
-            <wd-button type="primary" block :loading="marking" @click="handleMarkRead">
-              {{ readButtonText }}
-            </wd-button>
-            <wd-button type="primary" plain block @click="handleBack">
-              返回列表
-            </wd-button>
-          </view>
-        </template>
+  <view class="min-h-screen bg-canvas p-20rpx pb-56rpx">
+    <view class="mx-auto max-w-920rpx flex flex-col gap-20rpx">
+      <view v-if="loading" class="card-base flex flex-col items-center gap-20rpx py-72rpx">
+        <wd-loading />
+        <text class="text-24rpx text-muted">正在加载消息详情…</text>
       </view>
+      <view v-else-if="errorMessage" class="card-base flex flex-col items-center gap-24rpx p-32rpx">
+        <wd-empty tip="暂时无法查看这条消息">
+          <template #image>
+            <view class="i-carbon-information text-72rpx text-warning" />
+          </template>
+        </wd-empty>
+        <text class="text-center text-25rpx text-muted leading-38rpx">{{ errorMessage }}</text>
+        <view class="flex flex-wrap justify-center gap-16rpx">
+          <wd-button v-if="messageId" type="primary" size="small" @click="loadDetail(messageId)">
+            重新加载
+          </wd-button>
+          <wd-button type="primary" plain size="small" @click="handleBack">
+            返回列表
+          </wd-button>
+        </view>
+      </view>
+      <template v-else-if="detail">
+        <view class="card-base flex flex-col gap-20rpx p-28rpx">
+          <view class="flex flex-wrap items-center gap-12rpx">
+            <wd-tag type="primary" plain>
+              {{ sourceText }}
+            </wd-tag>
+            <wd-tag :type="readText === '已读' ? 'success' : 'warning'" round>
+              {{ readText }}
+            </wd-tag>
+          </view>
+          <text class="break-words text-34rpx text-ink font-bold leading-48rpx">{{ detail.title || '未命名消息' }}</text>
+          <view class="flex items-center gap-10rpx text-24rpx text-muted">
+            <view class="i-carbon-time" />
+            <text>{{ displayTime }}</text>
+          </view>
+        </view>
+        <view class="card-base p-28rpx">
+          <text class="mb-24rpx block text-28rpx text-ink font-bold">消息内容</text>
+          <view class="overflow-hidden break-words text-28rpx text-body leading-46rpx">
+            <rich-text v-if="canRenderRichText" :nodes="content" />
+            <text v-else selectable class="whitespace-pre-wrap">{{ contentText }}</text>
+          </view>
+        </view>
+        <wd-cell-group v-if="relatedCard" border>
+          <wd-cell title="关联卡号" label="点击复制卡号，方便查询或联系服务人员。" is-link @click="copyCard">
+            <text class="break-all text-24rpx font-mono">{{ relatedCard }}</text>
+          </wd-cell>
+        </wd-cell-group>
+        <view class="flex flex-col gap-16rpx">
+          <wd-button v-if="readText !== '已读'" type="primary" block :loading="marking" :disabled="marking" @click="handleMarkRead">
+            {{ readButtonText }}
+          </wd-button>
+          <wd-button type="primary" plain block @click="handleBack">
+            返回消息列表
+          </wd-button>
+        </view>
+      </template>
     </view>
+  </view>
 </template>
-
-<style lang="scss" scoped>
-.detail-row {
-  display: flex;
-  align-items: center;
-  gap: 18rpx;
-  min-height: 84rpx;
-  padding: 0 24rpx;
-  border-bottom: 1px solid #f1f5f9;
-}
-
-.detail-row:last-child {
-  border-bottom: 0;
-}
-
-.detail-label {
-  width: 96rpx;
-  flex-shrink: 0;
-  color: #64748b;
-  font-size: 24rpx;
-}
-
-.detail-value {
-  min-width: 0;
-  flex: 1;
-  color: #334155;
-  font-size: 26rpx;
-  line-height: 38rpx;
-  text-align: right;
-  word-break: break-all;
-}
-
-.detail-title {
-  color: #111827;
-  font-weight: 900;
-}
-
-.title-bar {
-  width: 6rpx;
-  height: 28rpx;
-  flex-shrink: 0;
-  border-radius: 999rpx;
-  background: #2563eb;
-}
-
-.content-body {
-  color: #334155;
-  font-size: 26rpx;
-  line-height: 46rpx;
-  word-break: break-all;
-}
-
-.related-row {
-  display: flex;
-  align-items: center;
-  gap: 16rpx;
-  margin-top: 20rpx;
-  padding-top: 18rpx;
-  border-top: 1px solid #f1f5f9;
-}
-</style>
diff --git a/app/src/pages/message/views/systemDetail/index.vue b/app/src/pages/message/views/systemDetail/index.vue
index d24f8f7..2be4dd3 100644
--- a/app/src/pages/message/views/systemDetail/index.vue
+++ b/app/src/pages/message/views/systemDetail/index.vue
@@ -2,6 +2,8 @@
 import type { AppMessage } from '@/api/message'
 import { getMessageDetail, readMessages } from '@/api/message'
 import { stripRichText } from '../../data'
+import { useMessageStore } from '@/store/message'
+import { useTokenStore } from '@/store/token'
 
 definePage({
   style: {
@@ -9,11 +11,31 @@ definePage({
   },
 })
 
+const tokenStore = useTokenStore()
+let detailRequestSeq = 0
+
+function isCurrentRequest(seq: number, token: string) {
+  return seq === detailRequestSeq && Boolean(token) && tokenStore.validToken === token
+}
+
+const messageId = ref(0)
 const loading = ref(false)
 const marking = ref(false)
 const errorMessage = ref('')
 const detail = ref<AppMessage | null>(null)
 
+watch(() => tokenStore.validToken, () => {
+  detailRequestSeq++
+  detail.value = null
+  errorMessage.value = ''
+  loading.value = false
+  marking.value = false
+}, { flush: 'sync' })
+
+onUnload(() => {
+  detailRequestSeq++
+})
+
 const content = computed(() => detail.value?.content || '')
 const contentText = computed(() => stripRichText(content.value) || '暂无消息详细内容')
 const canRenderRichText = computed(() => /<[^>]+>/.test(content.value))
@@ -29,44 +51,75 @@ async function loadDetail(id: number) {
     return
   }
 
+  const seq = ++detailRequestSeq
+  const token = tokenStore.validToken
+  if (!token)
+    return
   loading.value = true
   errorMessage.value = ''
   try {
     const res = await getMessageDetail({ messageId: id })
+    if (!isCurrentRequest(seq, token))
+      return
+    if (!res.message)
+      throw new Error('消息不存在或已撤回')
     detail.value = res.message
-    if (Number(res.message?.isRead) === 0) {
-      detail.value = { ...res.message, isRead: 1 }
-      readMessages({ ids: [id] }).catch(() => undefined)
+    if (Number(res.message.isRead) === 0) {
+      try {
+        await readMessages({ ids: [id] })
+        if (!isCurrentRequest(seq, token))
+          return
+        detail.value = { ...res.message, isRead: 1 }
+      }
+      catch {
+        if (!isCurrentRequest(seq, token))
+          return
+        uni.showToast({ title: '自动标记失败，可手动标记已读', icon: 'none' })
+      }
     }
+    void useMessageStore().refreshUnreadCount()
   }
   catch (error) {
+    if (!isCurrentRequest(seq, token))
+      return
     errorMessage.value = getErrorMessage(error, '消息详情加载失败，请稍后重试')
   }
   finally {
-    loading.value = false
+    if (isCurrentRequest(seq, token))
+      loading.value = false
   }
 }
 
 async function handleMarkRead() {
   const id = Number(detail.value?.messageId || detail.value?.id || 0)
-  if (!id)
+  if (!id || marking.value)
     return
   if (Number(detail.value?.isRead) === 1) {
     uni.showToast({ title: '当前消息已读', icon: 'none' })
     return
   }
 
+  const seq = detailRequestSeq
+  const token = tokenStore.validToken
+  if (!isCurrentRequest(seq, token))
+    return
   marking.value = true
   try {
     await readMessages({ ids: [id] })
+    if (!isCurrentRequest(seq, token))
+      return
     detail.value = { ...detail.value!, isRead: 1 }
+    void useMessageStore().refreshUnreadCount()
     uni.showToast({ title: '已标记已读', icon: 'success' })
   }
   catch (error) {
+    if (!isCurrentRequest(seq, token))
+      return
     uni.showToast({ title: getErrorMessage(error, '标记已读失败'), icon: 'none' })
   }
   finally {
-    marking.value = false
+    if (isCurrentRequest(seq, token))
+      marking.value = false
   }
 }
 
@@ -106,7 +159,7 @@ function formatTime(value: string) {
 
   return String(value)
     .replace('T', ' ')
-    .replace(/\.\d+.*$/, '')
+    .replace(/\.\d.*$/, '')
     .slice(0, 16)
 }
 
@@ -127,128 +180,71 @@ function getErrorMessage(error: unknown, fallback: string) {
 }
 
 onLoad((options: Record<string, string | undefined>) => {
-  void loadDetail(Number(options?.messageId || 0))
+  messageId.value = Number(options?.messageId || 0)
+  void loadDetail(messageId.value)
 })
 </script>
 
 <template>
-    <view class="min-h-screen bg-canvas p-20rpx pb-56rpx">
-      <view class="mx-auto max-w-920rpx flex flex-col gap-16rpx">
-        <view v-if="loading" class="card-base flex items-center justify-center py-72rpx">
-          <wd-loading />
-        </view>
-
-        <view v-else-if="errorMessage" class="card-base flex flex-col items-center gap-20rpx py-48rpx">
-          <text class="text-26rpx text-muted">{{ errorMessage }}</text>
-        </view>
-
-        <template v-else-if="detail">
-          <view class="card-base overflow-hidden">
-            <view class="detail-row">
-              <text class="detail-label">标题</text>
-              <text class="detail-value detail-title">{{ detail.title || '未命名消息' }}</text>
-            </view>
-            <view class="detail-row">
-              <text class="detail-label">来源</text>
-              <text class="detail-value">{{ sourceText }}</text>
-            </view>
-            <view class="detail-row">
-              <text class="detail-label">时间</text>
-              <text class="detail-value">{{ displayTime }}</text>
-            </view>
-            <view class="detail-row">
-              <text class="detail-label">状态</text>
-              <wd-tag :type="readText === '已读' ? 'primary' : 'danger'" round>
-                {{ readText }}
-              </wd-tag>
-            </view>
-          </view>
-
-          <view class="card-base p-24rpx">
-            <view class="mb-18rpx flex items-center gap-12rpx">
-              <view class="title-bar" />
-              <text class="text-30rpx text-ink font-900">内容</text>
-            </view>
-            <view class="content-body">
-              <rich-text v-if="canRenderRichText" :nodes="content" />
-              <text v-else>{{ contentText }}</text>
-            </view>
-            <view v-if="relatedCard" class="related-row" @click="copyCard">
-              <text class="detail-label">关联卡</text>
-              <text class="mono detail-value">{{ relatedCard }}</text>
-            </view>
-          </view>
-
-          <view class="grid grid-cols-2 gap-14rpx">
-            <wd-button type="primary" block :loading="marking" @click="handleMarkRead">
-              {{ readButtonText }}
-            </wd-button>
-            <wd-button type="primary" plain block @click="handleBack">
-              返回列表
-            </wd-button>
-          </view>
-        </template>
+  <view class="min-h-screen bg-canvas p-20rpx pb-56rpx">
+    <view class="mx-auto max-w-920rpx flex flex-col gap-20rpx">
+      <view v-if="loading" class="card-base flex flex-col items-center gap-20rpx py-72rpx">
+        <wd-loading />
+        <text class="text-24rpx text-muted">正在加载消息详情…</text>
       </view>
+      <view v-else-if="errorMessage" class="card-base flex flex-col items-center gap-24rpx p-32rpx">
+        <wd-empty tip="暂时无法查看这条消息">
+          <template #image>
+            <view class="i-carbon-information text-72rpx text-warning" />
+          </template>
+        </wd-empty>
+        <text class="text-center text-25rpx text-muted leading-38rpx">{{ errorMessage }}</text>
+        <view class="flex flex-wrap justify-center gap-16rpx">
+          <wd-button v-if="messageId" type="primary" size="small" @click="loadDetail(messageId)">
+            重新加载
+          </wd-button>
+          <wd-button type="primary" plain size="small" @click="handleBack">
+            返回列表
+          </wd-button>
+        </view>
+      </view>
+      <template v-else-if="detail">
+        <view class="card-base flex flex-col gap-20rpx p-28rpx">
+          <view class="flex flex-wrap items-center gap-12rpx">
+            <wd-tag type="primary" plain>
+              {{ sourceText }}
+            </wd-tag>
+            <wd-tag :type="readText === '已读' ? 'success' : 'warning'" round>
+              {{ readText }}
+            </wd-tag>
+          </view>
+          <text class="break-words text-34rpx text-ink font-bold leading-48rpx">{{ detail.title || '未命名消息' }}</text>
+          <view class="flex items-center gap-10rpx text-24rpx text-muted">
+            <view class="i-carbon-time" />
+            <text>{{ displayTime }}</text>
+          </view>
+        </view>
+        <view class="card-base p-28rpx">
+          <text class="mb-24rpx block text-28rpx text-ink font-bold">消息内容</text>
+          <view class="overflow-hidden break-words text-28rpx text-body leading-46rpx">
+            <rich-text v-if="canRenderRichText" :nodes="content" />
+            <text v-else selectable class="whitespace-pre-wrap">{{ contentText }}</text>
+          </view>
+        </view>
+        <wd-cell-group v-if="relatedCard" border>
+          <wd-cell title="关联卡号" label="点击复制卡号，方便查询或联系服务人员。" is-link @click="copyCard">
+            <text class="break-all text-24rpx font-mono">{{ relatedCard }}</text>
+          </wd-cell>
+        </wd-cell-group>
+        <view class="flex flex-col gap-16rpx">
+          <wd-button v-if="readText !== '已读'" type="primary" block :loading="marking" :disabled="marking" @click="handleMarkRead">
+            {{ readButtonText }}
+          </wd-button>
+          <wd-button type="primary" plain block @click="handleBack">
+            返回消息列表
+          </wd-button>
+        </view>
+      </template>
     </view>
+  </view>
 </template>
-
-<style lang="scss" scoped>
-.detail-row {
-  display: flex;
-  align-items: center;
-  gap: 18rpx;
-  min-height: 84rpx;
-  padding: 0 24rpx;
-  border-bottom: 1px solid #f1f5f9;
-}
-
-.detail-row:last-child {
-  border-bottom: 0;
-}
-
-.detail-label {
-  width: 96rpx;
-  flex-shrink: 0;
-  color: #64748b;
-  font-size: 24rpx;
-}
-
-.detail-value {
-  min-width: 0;
-  flex: 1;
-  color: #334155;
-  font-size: 26rpx;
-  line-height: 38rpx;
-  text-align: right;
-  word-break: break-all;
-}
-
-.detail-title {
-  color: #111827;
-  font-weight: 900;
-}
-
-.title-bar {
-  width: 6rpx;
-  height: 28rpx;
-  flex-shrink: 0;
-  border-radius: 999rpx;
-  background: #2563eb;
-}
-
-.content-body {
-  color: #334155;
-  font-size: 26rpx;
-  line-height: 46rpx;
-  word-break: break-all;
-}
-
-.related-row {
-  display: flex;
-  align-items: center;
-  gap: 16rpx;
-  margin-top: 20rpx;
-  padding-top: 18rpx;
-  border-top: 1px solid #f1f5f9;
-}
-</style>
diff --git a/app/src/pages/user/components/UserEntryGroup.vue b/app/src/pages/user/components/UserEntryGroup.vue
new file mode 100644
index 0000000..10537ee
--- /dev/null
+++ b/app/src/pages/user/components/UserEntryGroup.vue
@@ -0,0 +1,41 @@
+<script setup lang="ts">
+defineProps<{
+  title: string
+  cells: { title: string, desc: string, icon: string }[]
+}>()
+
+const emit = defineEmits<{
+  action: [index: number]
+}>()
+</script>
+
+<template>
+  <wd-card custom-class="!mx-0 !mb-0" custom-title-class="!p-0" custom-content-class="!p-0">
+    <template #title>
+      <view class="h-88rpx flex items-center gap-14rpx px-28rpx">
+        <view class="h-30rpx w-6rpx rounded-full bg-#2563eb" />
+        <text class="text-30rpx text-#0f172a font-800">{{ title }}</text>
+      </view>
+    </template>
+    <wd-cell-group>
+      <wd-cell
+        v-for="(cell, index) in cells"
+        :key="cell.title"
+        :title="cell.title"
+        :label="cell.desc"
+        title-width="90%"
+        is-link center
+        custom-class="!min-h-124rpx"
+        custom-title-class="!text-27rpx !font-800 !text-#0f172a"
+        custom-label-class="!text-22rpx !text-#475569"
+        @click="emit('action', index)"
+      >
+        <template #prefix>
+          <view class="mr-18rpx h-68rpx w-68rpx flex shrink-0 items-center justify-center rounded-16rpx bg-#eff6ff text-#2563eb">
+            <view class="text-34rpx" :class="cell.icon" />
+          </view>
+        </template>
+      </wd-cell>
+    </wd-cell-group>
+  </wd-card>
+</template>
diff --git a/app/src/pages/user/components/UserProfileCard.vue b/app/src/pages/user/components/UserProfileCard.vue
index d271fb9..7feb465 100644
--- a/app/src/pages/user/components/UserProfileCard.vue
+++ b/app/src/pages/user/components/UserProfileCard.vue
@@ -1,7 +1,5 @@
 <script setup lang="ts">
 import { computed } from 'vue'
-import RouterPath from '@/constant/RouterPath'
-import { useMessageStore } from '@/store/message'
 import { useUserStore } from '@/store/user'
 import {
   getAccountRoleLabel,
@@ -10,7 +8,6 @@ import {
 } from '@/utils/userIdentity'
 
 const userStore = useUserStore()
-const messageStore = useMessageStore()
 
 const userInfo = computed(() => userStore.userInfo)
 const workspace = computed(() => getAccountWorkspace(userInfo.value))
@@ -59,33 +56,22 @@ const avatarUrl = computed(() => {
   const avatar = String(userInfo.value.avatar || '').trim()
   return avatar && !avatar.includes('default-avatar') ? avatar : ''
 })
-const unreadCount = computed(() => Number(messageStore.unreadCount || 0))
-const showUnreadBadge = computed(() => unreadCount.value > 0)
-const unreadBadgeText = computed(() => (unreadCount.value > 99 ? '99+' : String(unreadCount.value)))
-
 const displayName = computed(() => {
   if (workspace.value === 'terminal') {
     return (
-      userInfo.value.terminalProfile?.terminalName
-      || userInfo.value.nickName
+      userInfo.value.nickName
       || userInfo.value.nickname
       || userInfo.value.username
       || '未登录用户'
     )
   }
   return (
-    userInfo.value.enterpriseProfile?.deptName
-    || userInfo.value.enterpriseProfile?.fullName
-    || userInfo.value.nickName
+    userInfo.value.nickName
     || userInfo.value.nickname
     || userInfo.value.username
     || '未登录用户'
   )
 })
-
-function goMessage() {
-  uni.navigateTo({ url: RouterPath.Message })
-}
 </script>
 
 <template>
@@ -110,13 +96,6 @@ function goMessage() {
         </view>
         <text class="account-sub">{{ workspaceMeta.sub }}</text>
       </view>
-
-      <view class="message-btn" @click="goMessage">
-        <view class="i-carbon-notification message-ico" />
-        <view v-if="showUnreadBadge" class="message-badge">
-          {{ unreadBadgeText }}
-        </view>
-      </view>
     </view>
   </view>
 </template>
@@ -222,39 +201,4 @@ function goMessage() {
   text-overflow: ellipsis;
   white-space: nowrap;
 }
-
-.message-btn {
-  position: relative;
-  display: flex;
-  width: 56rpx;
-  height: 56rpx;
-  flex-shrink: 0;
-  align-items: center;
-  justify-content: center;
-  border: 1px solid #dbe3ef;
-  border-radius: 999rpx;
-  background: #fff;
-}
-
-.message-ico {
-  color: #334155;
-  font-size: 30rpx;
-}
-
-.message-badge {
-  position: absolute;
-  top: -8rpx;
-  right: -8rpx;
-  min-width: 28rpx;
-  height: 28rpx;
-  padding: 0 6rpx;
-  border: 2rpx solid #fff;
-  border-radius: 999rpx;
-  color: #fff;
-  background: #e11d48;
-  font-size: 18rpx;
-  font-weight: 800;
-  line-height: 26rpx;
-  text-align: center;
-}
 </style>
diff --git a/app/src/pages/user/components/UserServiceCells.vue b/app/src/pages/user/components/UserServiceCells.vue
index 0d27cf5..f11af1a 100644
--- a/app/src/pages/user/components/UserServiceCells.vue
+++ b/app/src/pages/user/components/UserServiceCells.vue
@@ -1,6 +1,8 @@
 <script setup lang="ts">
 import { computed } from 'vue'
+import UserEntryGroup from './UserEntryGroup.vue'
 import RouterPath from '@/constant/RouterPath'
+import { isV101HiddenRoute, V101_RELEASE } from '@/constant/release'
 import { useMessageStore } from '@/store/message'
 import { useUserStore } from '@/store/user'
 import { getAccountWorkspace } from '@/utils/userIdentity'
@@ -36,7 +38,14 @@ const commonGroups = computed<ServiceGroup[]>(() => [
     layout: 'list',
     cells: [
       {
-        title: '账号资料',
+        title: '消息中心',
+        desc: unreadCount.value > 0 ? `${String(unreadCount.value)} 条未读消息` : '查看系统通知与预警消息',
+        icon: 'i-carbon-notification',
+        tone: 'blue',
+        path: RouterPath.Message,
+      },
+      {
+        title: '个人资料',
         desc: '完善个人与企业信息',
         icon: 'i-carbon-user-profile',
         tone: 'blue',
@@ -49,13 +58,6 @@ const commonGroups = computed<ServiceGroup[]>(() => [
         tone: 'green',
         path: RouterPath.UserViewsRealName,
       },
-      {
-        title: '通知设置',
-        desc: unreadCount.value > 0 ? `${unreadCount.value} 条未读消息` : '流量与到期提醒',
-        icon: 'i-carbon-notification',
-        tone: 'orange',
-        path: RouterPath.UserViewsNotification,
-      },
     ],
   },
 ])
@@ -162,19 +164,25 @@ const workspaceGroups = computed<ServiceGroup[]>(() => {
   ]
 })
 
-const groups = computed(() => [...workspaceGroups.value, ...commonGroups.value])
+const groups = computed(() => [...(V101_RELEASE.showUserBusinessEntries ? workspaceGroups.value : []), ...commonGroups.value])
 const visibleGroups = computed<ServiceGroup[]>(() =>
   groups.value
     .map(group => ({
       ...group,
       cells: group.cells.filter(cell =>
-        !cell.permissionAction || hasUserPermission(userInfo.value, cell.permissionAction),
+        (!cell.path || !isV101HiddenRoute(cell.path))
+        && (!cell.permissionAction || hasUserPermission(userInfo.value, cell.permissionAction)),
       ),
     }))
     .filter(group => group.cells.length > 0),
 )
 
 function handleCellClick(item: ServiceCell) {
+  if ((item.path && isV101HiddenRoute(item.path))
+    || (item.permissionAction && !hasUserPermission(userInfo.value, item.permissionAction))) {
+    uni.showToast({ title: '当前入口暂不可用', icon: 'none' })
+    return
+  }
   if (item.path) {
     uni.navigateTo({ url: item.path })
     return
@@ -186,236 +194,13 @@ function handleCellClick(item: ServiceCell) {
 </script>
 
 <template>
-  <view class="service-stack">
-    <view v-for="group in visibleGroups" :key="group.title" class="service-section">
-      <view class="section-head">
-        <view class="title-bar" />
-        <view class="min-w-0 flex-1">
-          <text class="section-title">{{ group.title }}</text>
-          <text v-if="group.desc" class="section-desc">{{ group.desc }}</text>
-        </view>
-      </view>
-
-      <view class="service-list" :class="{ 'service-list--grid': group.layout === 'grid' }">
-        <view
-          v-for="cell in group.cells"
-          :key="cell.title"
-          class="service-cell"
-          @click="handleCellClick(cell)"
-        >
-          <view class="service-icon" :class="`service-icon--${cell.tone}`">
-            <view class="service-icon__glyph" :class="cell.icon" />
-          </view>
-          <view class="service-main">
-            <text class="service-title">{{ cell.title }}</text>
-            <text class="service-desc">{{ cell.desc }}</text>
-          </view>
-          <view class="i-carbon-chevron-right service-arrow" />
-        </view>
-      </view>
-    </view>
+  <view class="flex flex-col gap-12rpx">
+    <UserEntryGroup
+      v-for="group in visibleGroups"
+      :key="group.title"
+      :title="group.title"
+      :cells="group.cells"
+      @action="handleCellClick(group.cells[$event])"
+    />
   </view>
 </template>
-
-<style lang="scss" scoped>
-.service-stack {
-  display: flex;
-  flex-direction: column;
-  gap: 14rpx;
-}
-
-.service-section {
-  box-sizing: border-box;
-  overflow: hidden;
-  padding: 24rpx 26rpx 0;
-  border: 1px solid var(--app-line);
-  border-radius: 16rpx;
-  background: #fff;
-  box-shadow: 0 6rpx 18rpx rgba(11, 43, 172, 0.06);
-}
-
-.section-head {
-  display: flex;
-  align-items: center;
-  gap: 12rpx;
-  padding-bottom: 18rpx;
-  border-bottom: 1px solid var(--app-line);
-}
-
-.title-bar {
-  width: 6rpx;
-  height: 30rpx;
-  flex-shrink: 0;
-  border-radius: 999rpx;
-  background: linear-gradient(180deg, #2563eb, #0b2bac);
-}
-
-.section-title {
-  color: #0f172a;
-  font-size: 30rpx;
-  font-weight: 800;
-  line-height: 40rpx;
-}
-
-.section-desc {
-  display: block;
-  margin-top: 2rpx;
-  color: #94a3b8;
-  font-size: 21rpx;
-  line-height: 30rpx;
-}
-
-.service-list {
-  display: flex;
-  flex-direction: column;
-}
-
-.service-list--grid {
-  display: grid;
-  grid-template-columns: repeat(4, minmax(0, 1fr));
-  gap: 8rpx;
-  padding: 18rpx 0 20rpx;
-}
-
-.service-cell {
-  display: flex;
-  align-items: center;
-  gap: 16rpx;
-  min-width: 0;
-  min-height: 98rpx;
-  border-top: 1px solid #edf2f7;
-}
-
-.service-list--grid .service-cell {
-  min-height: 116rpx;
-  padding: 0;
-  border: 0;
-  border-radius: 0;
-  background: transparent;
-}
-
-.service-list:not(.service-list--grid) .service-cell:first-child {
-  border-top: 0;
-}
-
-.service-icon {
-  display: flex;
-  width: 68rpx;
-  height: 68rpx;
-  flex-shrink: 0;
-  align-items: center;
-  justify-content: center;
-  border-radius: 18rpx;
-}
-
-.service-icon__glyph {
-  font-size: 32rpx;
-}
-
-.service-icon--blue {
-  color: #2563eb;
-  background: #eff6ff;
-}
-
-.service-icon--green {
-  color: #0f766e;
-  background: #f0fdfa;
-}
-
-.service-icon--orange {
-  color: #b45309;
-  background: #fffbeb;
-}
-
-.service-icon--purple {
-  color: #7c3aed;
-  background: #f5f3ff;
-}
-
-.service-icon--cyan {
-  color: #0ea5e9;
-  background: #e0f2fe;
-}
-
-.service-icon--gray {
-  color: #64748b;
-  background: #f1f5f9;
-}
-
-.service-list:not(.service-list--grid) .service-icon {
-  color: #2563eb;
-  background: #eff6ff;
-}
-
-.service-main {
-  min-width: 0;
-  flex: 1;
-}
-
-.service-title,
-.service-desc {
-  display: block;
-}
-
-.service-title {
-  overflow: hidden;
-  color: #111827;
-  font-size: 27rpx;
-  font-weight: 800;
-  line-height: 36rpx;
-  text-overflow: ellipsis;
-  white-space: nowrap;
-}
-
-.service-desc {
-  overflow: hidden;
-  margin-top: 4rpx;
-  color: #64748b;
-  font-size: 22rpx;
-  line-height: 30rpx;
-  text-overflow: ellipsis;
-  white-space: nowrap;
-}
-
-.service-arrow {
-  flex-shrink: 0;
-  color: #cbd5e1;
-  font-size: 24rpx;
-}
-
-.service-list--grid .service-cell {
-  flex-direction: column;
-  justify-content: center;
-  gap: 10rpx;
-}
-
-.service-list--grid .service-icon {
-  width: 80rpx;
-  height: 80rpx;
-  border-radius: 24rpx;
-}
-
-.service-list--grid .service-icon__glyph {
-  font-size: 36rpx;
-}
-
-.service-list--grid .service-main {
-  width: 100%;
-  flex: initial;
-  text-align: center;
-}
-
-.service-list--grid .service-title {
-  font-size: 22rpx;
-  font-weight: 700;
-  line-height: 30rpx;
-}
-
-.service-list--grid .service-desc {
-  display: none;
-}
-
-.service-list--grid .service-arrow {
-  display: none;
-}
-</style>
diff --git a/app/src/pages/user/components/UserStatsCard.vue b/app/src/pages/user/components/UserStatsCard.vue
index db54c05..2777aef 100644
--- a/app/src/pages/user/components/UserStatsCard.vue
+++ b/app/src/pages/user/components/UserStatsCard.vue
@@ -109,8 +109,8 @@ function toneClass(tone: StatItem['tone']) {
 .stats-card {
   display: flex;
   box-sizing: border-box;
-  align-items: center;
-  justify-content: space-between;
+  align-items: stretch;
+  flex-direction: column;
   gap: 24rpx;
   padding: 28rpx;
   border: 1px solid var(--app-line);
@@ -121,6 +121,7 @@ function toneClass(tone: StatItem['tone']) {
 
 .stats-main {
   display: flex;
+  flex: 1 1 auto;
   min-width: 0;
   flex-direction: column;
   gap: 6rpx;
@@ -141,15 +142,16 @@ function toneClass(tone: StatItem['tone']) {
 
 .stats-items {
   display: flex;
-  flex-shrink: 0;
   flex-wrap: nowrap;
-  justify-content: flex-end;
+  justify-content: space-between;
   gap: 14rpx;
-  max-width: 62%;
+  width: 100%;
+  overflow-x: auto;
 }
 
 .stat-pill {
   display: inline-flex;
+  flex: 0 0 auto;
   align-items: center;
   gap: 6rpx;
   min-width: 0;
@@ -158,10 +160,13 @@ function toneClass(tone: StatItem['tone']) {
   font-size: 22rpx;
   line-height: 30rpx;
   white-space: nowrap;
+  word-break: keep-all;
 }
 
 .stat-pill__value {
   display: inline-flex;
+  flex-shrink: 0;
+  white-space: nowrap;
   min-width: 30rpx;
   height: 30rpx;
   align-items: center;
@@ -173,6 +178,8 @@ function toneClass(tone: StatItem['tone']) {
 }
 
 .stat-pill__label {
+  flex-shrink: 0;
+  white-space: nowrap;
   font-size: 20rpx;
   opacity: 0.9;
 }
diff --git a/app/src/pages/user/components/UserSupportCells.vue b/app/src/pages/user/components/UserSupportCells.vue
index f116c3f..ad6d477 100644
--- a/app/src/pages/user/components/UserSupportCells.vue
+++ b/app/src/pages/user/components/UserSupportCells.vue
@@ -1,5 +1,6 @@
 <script setup lang="ts">
 import RouterPath from '@/constant/RouterPath'
+import UserEntryGroup from './UserEntryGroup.vue'
 
 interface CellGroup {
   title: string
@@ -20,7 +21,8 @@ const cellGroups: CellGroup[] = [
       { title: '帮助与反馈', desc: '问题建议与使用反馈', icon: 'i-carbon-chat', path: RouterPath.UserViewsFeedback },
       { title: '联系客服', desc: '在线客服', icon: 'i-carbon-customer-service', path: RouterPath.UserViewsContact },
       { title: '协议与隐私', desc: '服务协议与隐私政策', icon: 'i-carbon-document', path: RouterPath.UserViewsAgreement },
-      { title: '关于我们', desc: 'v1.0.0', icon: 'i-carbon-information', path: RouterPath.UserViewsAbout },
+      { title: '关于我们', desc: 'v1.0.2', icon: 'i-carbon-information', path: RouterPath.UserViewsAbout },
+      { title: '使用手册', desc: '查看小程序操作指南', icon: 'i-carbon-book', path: RouterPath.UserViewsManual },
     ],
   },
 ]
@@ -31,141 +33,13 @@ function handleCellClick(item: CellItem) {
 </script>
 
 <template>
-  <view class="support-stack">
-    <view v-for="group in cellGroups" :key="group.title" class="support-section">
-      <view class="section-head">
-        <view class="title-bar" />
-        <text class="section-title">{{ group.title }}</text>
-      </view>
-
-      <view class="menu-list">
-        <view
-          v-for="item in group.cells"
-          :key="item.title"
-          class="menu-row"
-          @click="handleCellClick(item)"
-        >
-          <view class="menu-icon">
-            <view class="menu-glyph" :class="item.icon" />
-          </view>
-          <view class="menu-main">
-            <text class="menu-title">{{ item.title }}</text>
-            <text class="menu-desc">{{ item.desc }}</text>
-          </view>
-          <view class="i-carbon-chevron-right menu-chev" />
-        </view>
-      </view>
-    </view>
+  <view class="flex flex-col gap-12rpx">
+    <UserEntryGroup
+      v-for="group in cellGroups"
+      :key="group.title"
+      :title="group.title"
+      :cells="group.cells"
+      @action="handleCellClick(group.cells[$event])"
+    />
   </view>
 </template>
-
-<style lang="scss" scoped>
-.support-stack {
-  display: flex;
-  flex-direction: column;
-  gap: 14rpx;
-}
-
-.support-section {
-  box-sizing: border-box;
-  overflow: hidden;
-  padding: 28rpx 30rpx 0;
-  border: 1px solid var(--app-line);
-  border-radius: 16rpx;
-  background: #fff;
-  box-shadow: 0 6rpx 18rpx rgba(11, 43, 172, 0.06);
-}
-
-.section-head {
-  display: flex;
-  align-items: center;
-  gap: 12rpx;
-  padding-bottom: 20rpx;
-  border-bottom: 1px solid var(--app-line);
-}
-
-.title-bar {
-  width: 6rpx;
-  height: 30rpx;
-  flex-shrink: 0;
-  border-radius: 999rpx;
-  background: linear-gradient(180deg, #2563eb, #0b2bac);
-}
-
-.section-title {
-  color: #0f172a;
-  font-size: 30rpx;
-  font-weight: 800;
-  line-height: 40rpx;
-}
-
-.menu-list {
-  display: flex;
-  flex-direction: column;
-}
-
-.menu-row {
-  display: flex;
-  min-width: 0;
-  align-items: center;
-  gap: 18rpx;
-  min-height: 104rpx;
-  border-top: 1px solid #dbe3ef;
-}
-
-.menu-row:first-child {
-  border-top: 0;
-}
-
-.menu-icon {
-  display: flex;
-  width: 68rpx;
-  height: 68rpx;
-  flex-shrink: 0;
-  align-items: center;
-  justify-content: center;
-  border-radius: 16rpx;
-  color: #2563eb;
-  background: #eff6ff;
-}
-
-.menu-glyph {
-  font-size: 34rpx;
-}
-
-.menu-main {
-  min-width: 0;
-  flex: 1;
-}
-
-.menu-title,
-.menu-desc {
-  display: block;
-}
-
-.menu-title {
-  overflow: hidden;
-  color: #0f172a;
-  font-size: 27rpx;
-  font-weight: 800;
-  line-height: 36rpx;
-  text-overflow: ellipsis;
-  white-space: nowrap;
-}
-
-.menu-desc {
-  overflow: hidden;
-  margin-top: 4rpx;
-  color: #475569;
-  font-size: 22rpx;
-  line-height: 30rpx;
-  text-overflow: ellipsis;
-  white-space: nowrap;
-}
-
-.menu-chev {
-  flex-shrink: 0;
-  color: #94a3b8;
-  font-size: 24rpx;
-}
-</style>
diff --git a/app/src/pages/user/index.test.ts b/app/src/pages/user/index.test.ts
new file mode 100644
index 0000000..dce1690
--- /dev/null
+++ b/app/src/pages/user/index.test.ts
@@ -0,0 +1,92 @@
+import type { IUserInfoRes } from '@/api/types/login'
+import { readFileSync } from 'node:fs'
+import { createContext, runInContext } from 'node:vm'
+import { ModuleKind, transpileModule } from 'typescript'
+import { describe, expect, it, vi } from 'vitest'
+import RouterPath from '@/constant/RouterPath'
+import { isV101HiddenRoute, V101_RELEASE } from '@/constant/release'
+import * as permission from '@/utils/permission'
+import * as identity from '@/utils/userIdentity'
+
+function createHarness(userInfo: Partial<IUserInfoRes>) {
+  const navigateTo = vi.fn()
+  const context = createContext({
+    exports: {},
+    require: (name: string) => {
+      if (name === '@/constant/RouterPath')
+        return { default: RouterPath }
+      if (name === '@/constant/release')
+        return { V101_RELEASE }
+      if (name === '@/utils/permission')
+        return permission
+      if (name === '@/utils/userIdentity')
+        return identity
+      if (name === '@/store/user')
+        return { useUserStore: () => ({ userInfo }) }
+      if (name === '@/store/message')
+        return { useMessageStore: () => ({ refreshUnreadCount: vi.fn() }) }
+      if (name === '@/store/token')
+        return { useTokenStore: () => ({}) }
+      if (name.startsWith('./components/'))
+        return {}
+      throw new Error(`Unexpected import: ${name}`)
+    },
+    computed: (getter: () => unknown) => ({ get value() { return getter() } }),
+    definePage: () => undefined,
+    onShow: () => undefined,
+    uni: { navigateTo, showToast: vi.fn() },
+  })
+  const source = readFileSync(new URL('./index.vue', import.meta.url), 'utf8')
+  const script = source.match(/<script[^>]*>([\s\S]*?)<\/script>/)?.[1]
+  if (!script)
+    throw new Error('User page script not found')
+  runInContext(transpileModule(script, { compilerOptions: { module: ModuleKind.CommonJS } }).outputText, context)
+  return {
+    visible: () => runInContext('canUseCustomerManagement.value', context),
+    workOrderVisible: () => runInContext('canUseWorkOrder.value', context),
+    openWorkOrder: () => runInContext('openWorkOrder()', context),
+    open: () => runInContext('openCustomerManagement()', context),
+    navigateTo,
+    source,
+  }
+}
+
+describe('客户管理验证入口', () => {
+  it('工单入口按权限选择列表或直接提交', () => {
+    for (const [feature, url] of [['workorder:list', RouterPath.BusinessViewsWorkOrder], ['workorder:create', RouterPath.BusinessViewsWorkOrderCreate]]) {
+      const harness = createHarness({ userId: 12, appAccess: { configured: true, features: [feature] } })
+      expect(harness.workOrderVisible()).toBe(true)
+      harness.openWorkOrder()
+      expect(harness.navigateTo).toHaveBeenCalledWith({ url })
+    }
+    const denied = createHarness({ userId: 12, appAccess: { configured: true, features: [] } })
+    expect(denied.workOrderVisible()).toBe(false)
+    denied.openWorkOrder()
+    expect(denied.navigateTo).not.toHaveBeenCalled()
+  })
+  it('有客户权限的企业账号可从我的进入客户管理', () => {
+    const harness = createHarness({ userId: 12, userType: 'sys_user', appAccess: { configured: true, features: ['customer:list'] } })
+    expect(harness.visible()).toBe(true)
+    expect(harness.source).toContain('v-if="canUseCustomerManagement"')
+    expect(harness.source).toContain('title="客户管理"')
+    harness.open()
+    expect(harness.navigateTo).toHaveBeenCalledWith({ url: RouterPath.BusinessViewsCustomer })
+  })
+
+  it('无权限企业和终端账号不显示入口', () => {
+    expect(createHarness({ userId: 12, userType: 'sys_user', appAccess: { configured: true, features: [] } }).visible()).toBe(false)
+    expect(createHarness({ userId: 13, userType: 'app_user', appAccess: { features: ['customer:list'] } }).visible()).toBe(false)
+  })
+
+  it('客户与划拨已开放，其他未发布业务继续隐藏', () => {
+    expect(isV101HiddenRoute(RouterPath.BusinessViewsCustomer)).toBe(false)
+    expect(isV101HiddenRoute(RouterPath.BusinessViewsCustomerDetail)).toBe(false)
+    expect(isV101HiddenRoute(RouterPath.BusinessViewsAllocate)).toBe(false)
+    expect(isV101HiddenRoute('/pages/business/index')).toBe(false)
+    expect(V101_RELEASE.showBusinessTab).toBe(true)
+    expect(V101_RELEASE.showUserBusinessEntries).toBe(false)
+    const source = readFileSync(new URL('./index.vue', import.meta.url), 'utf8')
+    expect(source).toContain('<UserServiceCells />')
+    expect(source).not.toContain('v-if="V101_RELEASE.showUserBusinessEntries"')
+  })
+})
diff --git a/app/src/pages/user/index.vue b/app/src/pages/user/index.vue
index 00acdf2..dd6caa2 100644
--- a/app/src/pages/user/index.vue
+++ b/app/src/pages/user/index.vue
@@ -4,9 +4,11 @@ import UserServiceCells from './components/UserServiceCells.vue'
 import UserStatsCard from './components/UserStatsCard.vue'
 import UserSupportCells from './components/UserSupportCells.vue'
 import RouterPath from '@/constant/RouterPath'
-import { useMessageStore } from '@/store/message'
 import { useTokenStore } from '@/store/token'
 import { useUserStore } from '@/store/user'
+import { useMessageStore } from '@/store/message'
+import { hasAnyFeature, hasBatchExecutionLogPermission } from '@/utils/permission'
+import { getAccountWorkspace } from '@/utils/userIdentity'
 
 definePage({
   excludeLoginPath: true,
@@ -20,11 +22,31 @@ definePage({
 
 const tokenStore = useTokenStore()
 const userStore = useUserStore()
-const messageStore = useMessageStore()
+const canUseWorkOrder = computed(() => hasAnyFeature(userStore.userInfo, ['workorder:list', 'workorder:create']))
+function openWorkOrder() {
+  if (!canUseWorkOrder.value) {
+    uni.showToast({ title: '暂无工单服务权限', icon: 'none' })
+    return
+  }
+  uni.navigateTo({ url: hasAnyFeature(userStore.userInfo, 'workorder:list')
+    ? RouterPath.BusinessViewsWorkOrder
+    : RouterPath.BusinessViewsWorkOrderCreate })
+}
+const canUseCustomerManagement = computed(() => getAccountWorkspace(userStore.userInfo) !== 'terminal' && hasAnyFeature(userStore.userInfo, 'customer:list'))
+function openCustomerManagement() {
+  uni.navigateTo({ url: RouterPath.BusinessViewsCustomer })
+}
+const canUseExecutionLog = computed(() => hasBatchExecutionLogPermission(userStore.userInfo, 'list'))
+function openExecutionLog() {
+  if (!canUseExecutionLog.value)
+    return
+  uni.navigateTo({ url: RouterPath.UserViewsExecutionLog })
+}
 let loginRedirecting = false
 
 function goLogin() {
-  if (loginRedirecting) return
+  if (loginRedirecting)
+    return
   loginRedirecting = true
   uni.navigateTo({
     url: `${RouterPath.Login}?redirect=${encodeURIComponent(RouterPath.User)}`,
@@ -42,7 +64,7 @@ onShow(() => {
     return
   }
   void userStore.fetchUserInfo().catch(() => undefined)
-  void messageStore.refreshUnreadCount().catch(() => undefined)
+  void useMessageStore().refreshUnreadCount()
 })
 
 async function handleLogout() {
@@ -57,6 +79,67 @@ async function handleLogout() {
       <UserProfileCard />
       <view class="user-content">
         <UserStatsCard />
+        <wd-card v-if="canUseCustomerManagement || canUseExecutionLog || canUseWorkOrder" custom-class="!mx-0 !mb-0" custom-title-class="!p-0" custom-content-class="!p-0">
+          <template #title>
+            <view class="h-88rpx flex items-center gap-14rpx px-28rpx">
+              <view class="h-30rpx w-6rpx rounded-full bg-#2563eb" />
+              <text class="text-30rpx text-#0f172a font-800">业务工作台</text>
+            </view>
+          </template>
+          <wd-cell-group>
+            <wd-cell
+              v-if="canUseWorkOrder"
+              title="工单服务"
+              title-width="90%"
+              label="反馈问题、查看进度与确认处理结果"
+              is-link center
+              custom-class="!min-h-124rpx"
+              custom-title-class="!text-27rpx !font-800 !text-#0f172a"
+              custom-label-class="!text-22rpx !text-#475569"
+              @click="openWorkOrder"
+            >
+              <template #prefix>
+                <view class="mr-18rpx h-68rpx w-68rpx flex shrink-0 items-center justify-center rounded-16rpx bg-#fff7ed text-#ea580c">
+                  <view class="i-carbon-chat text-34rpx" />
+                </view>
+              </template>
+            </wd-cell>
+            <wd-cell
+              v-if="canUseCustomerManagement"
+              title="客户管理"
+              title-width="90%"
+              label="查看授权客户与卡片概览"
+              is-link center
+              custom-class="!min-h-124rpx"
+              custom-title-class="!text-27rpx !font-800 !text-#0f172a"
+              custom-label-class="!text-22rpx !text-#475569"
+              @click="openCustomerManagement"
+            >
+              <template #prefix>
+                <view class="mr-18rpx h-68rpx w-68rpx flex shrink-0 items-center justify-center rounded-16rpx bg-#eff6ff text-#2563eb">
+                  <view class="i-carbon-user-multiple text-34rpx" />
+                </view>
+              </template>
+            </wd-cell>
+            <wd-cell
+              v-if="canUseExecutionLog"
+              title="批次执行日志"
+              title-width="90%"
+              label="查看批次进度与执行结果"
+              is-link center
+              custom-class="!min-h-124rpx"
+              custom-title-class="!text-27rpx !font-800 !text-#0f172a"
+              custom-label-class="!text-22rpx !text-#475569"
+              @click="openExecutionLog"
+            >
+              <template #prefix>
+                <view class="mr-18rpx h-68rpx w-68rpx flex shrink-0 items-center justify-center rounded-16rpx bg-#eff6ff text-#2563eb">
+                  <view class="i-carbon-document text-34rpx" />
+                </view>
+              </template>
+            </wd-cell>
+          </wd-cell-group>
+        </wd-card>
         <UserServiceCells />
         <UserSupportCells />
         <view class="logout-wrap">
diff --git a/app/src/pages/user/views/about/index.vue b/app/src/pages/user/views/about/index.vue
index 1c60727..edf1bb4 100644
--- a/app/src/pages/user/views/about/index.vue
+++ b/app/src/pages/user/views/about/index.vue
@@ -11,7 +11,7 @@ definePage({
     <wd-card custom-class="!m-0">
       <wd-cell-group :border="false">
         <wd-cell title="应用名称" value="IOTLCM" />
-        <wd-cell title="当前版本" value="v1.0.0" />
+        <wd-cell title="当前版本" value="v1.0.2" />
         <wd-cell title="服务定位" label="物联卡用户服务小程序" />
       </wd-cell-group>
     </wd-card>
diff --git a/app/src/pages/user/views/agreement/index.vue b/app/src/pages/user/views/agreement/index.vue
index 6380acb..dde9f80 100644
--- a/app/src/pages/user/views/agreement/index.vue
+++ b/app/src/pages/user/views/agreement/index.vue
@@ -41,7 +41,7 @@ const privacySections: TextSection[] = [
     title: '我们如何收集和使用信息',
     content: [
       '为向你提供物联网卡查询、拍照识别卡号、绑定、套餐办理、预警提醒、卡片排查、工单服务等功能，我们会在必要范围内收集并使用你主动填写、主动上传或业务系统返回的信息。',
-      '未登录查卡、注册登录、绑定微信、订阅提醒、查看实名资料、提交业务办理或工单时，会分别使用对应场景所需的信息。',
+      '未登录查卡、注册登录、绑定微信、查看实名资料、提交业务办理或工单时，会分别使用对应场景所需的信息。',
     ],
   },
   {
@@ -62,7 +62,7 @@ const privacySections: TextSection[] = [
   {
     title: '第三方和系统能力',
     content: [
-      '当你主动绑定微信或申请订阅提醒时，小程序会调用微信提供的登录凭证和订阅消息能力，用于完成微信身份绑定和提醒授权。',
+      '当你主动绑定微信时，小程序会调用微信提供的登录凭证，用于完成微信身份绑定。',
       '当你主动上传头像、凭证或反馈材料时，小程序会使用相册或拍摄能力读取你选择的图片或文件。',
       '当你使用拍照识别卡号时，小程序会将你主动选择的物联网卡图片提交到本系统服务端临时识别 ICCID；图片仅用于本次识别和查卡，本系统不保存原图。',
     ],
@@ -70,8 +70,8 @@ const privacySections: TextSection[] = [
   {
     title: '你的权利',
     content: [
-      '你可以在个人中心查看账号资料、实名状态、微信提醒绑定状态和消息提醒状态。',
-      '你可以通过关闭微信订阅权限、取消相关业务授权、退出登录等方式撤回相应授权；撤回后可能无法继续使用对应功能，但不影响撤回前基于授权进行处理的合法性。',
+      '你可以在个人中心查看账号资料、实名状态和微信绑定状态，在消息中心查看站内提醒。',
+      '你可以通过解除微信绑定、取消相关业务授权、退出登录等方式撤回相应授权；撤回后可能无法继续使用对应功能，但不影响撤回前基于授权进行处理的合法性。',
       '如需更正资料、删除信息、注销账号或咨询信息保护问题，可通过“我的-联系客服”与服务人员联系处理。',
     ],
   },
@@ -86,7 +86,7 @@ const privacySections: TextSection[] = [
   {
     title: '第三方服务与未成年人',
     content: [
-      '微信登录、微信订阅消息、微信支付、相册和拍摄能力由微信相关服务提供；使用这些功能时，相关信息还需遵守微信平台规则和隐私政策。',
+      '微信登录、微信支付、相册和拍摄能力由微信相关服务提供；使用这些功能时，相关信息还需遵守微信平台规则和隐私政策。',
       '图片识别请求可能由本系统委托的模型服务商进行临时处理，仅用于识别卡号；实际委托服务商名称、处理范围和联系方式以微信后台隐私保护指引及本页面最新公示为准。',
       '未满十四周岁的未成年人应在监护人同意和指导下使用本小程序；监护人如发现未成年人未经同意使用并提交信息，请联系客服处理。',
     ],
@@ -104,9 +104,9 @@ const collectionItems: CollectionItem[] = [
   {
     title: '微信用户标识',
     icon: 'i-carbon-link',
-    fields: '微信登录临时凭证、微信绑定状态、订阅授权结果',
-    purpose: '用于绑定当前微信，并在你授权后接收流量预警、订单状态、工单回复等提醒。',
-    scene: '绑定当前微信、申请订阅授权、微信提醒设置。',
+    fields: '微信登录临时凭证、微信绑定状态',
+    purpose: '用于绑定当前微信，以便通过微信登录。',
+    scene: '绑定当前微信、通过微信登录。',
   },
   {
     title: '物联网卡与设备信息',
@@ -321,7 +321,7 @@ function openWechatPrivacyContract() {
         <view class="flex items-start gap-14rpx text-24rpx text-muted leading-36rpx">
           <view class="i-carbon-information mt-4rpx shrink-0 text-28rpx text-#2563eb" />
           <text class="min-w-0 flex-1">
-            若你不同意相关协议或隐私政策，请停止使用需要登录、绑定、订阅或业务办理的功能。
+            若你不同意相关协议或隐私政策，请停止使用需要登录、绑定或业务办理的功能。
           </text>
         </view>
       </wd-card>
diff --git a/app/src/pages/user/views/executionLog/data.ts b/app/src/pages/user/views/executionLog/data.ts
new file mode 100644
index 0000000..588aae7
--- /dev/null
+++ b/app/src/pages/user/views/executionLog/data.ts
@@ -0,0 +1,32 @@
+export function executionBatchTypeLabel(type: number) {
+  const labels: Record<number, string> = {
+    3: '卡片划拨',
+    4: '批次准备',
+    101: '卡片续费',
+    102: '套餐变更',
+    103: '开机',
+    104: '停机',
+    105: '重启',
+    109: '开通数据服务',
+    110: '停用数据服务',
+  }
+  return labels[type] || '其他批次'
+}
+
+export function executionStatusType(status: number) {
+  if (status === 3)
+    return 'success'
+  if (status === 4)
+    return 'danger'
+  if (status === 5)
+    return 'warning'
+  return 'primary'
+}
+
+export function executionDetailStatusType(status: number) {
+  if (status === 2)
+    return 'success'
+  if (status === 3)
+    return 'danger'
+  return 'primary'
+}
diff --git a/app/src/pages/user/views/executionLog/index.test.ts b/app/src/pages/user/views/executionLog/index.test.ts
new file mode 100644
index 0000000..94ca2d1
--- /dev/null
+++ b/app/src/pages/user/views/executionLog/index.test.ts
@@ -0,0 +1,235 @@
+import { readFileSync } from 'node:fs'
+import { createContext, runInContext } from 'node:vm'
+import { ModuleKind, transpileModule } from 'typescript'
+import { describe, expect, it, vi } from 'vitest'
+import * as helpers from './data'
+import * as permission from '@/utils/permission'
+import * as allocateHelpers from '@/pages/business/views/allocate/selection'
+
+function harness(detail = false) {
+  const userInfo = { userId: 12, accessCodes: ['cpm:common:batchExecutionLog:list', 'cpm:common:batchExecutionLog:summary', 'cpm:common:batchExecutionLog:detailList', 'cpm:iot:tSimCardAllocate:targets', 'cpm:iot:tSimCardAllocate:input:prepare', 'cpm:iot:tSimCardAllocate:batch:submit'], appAccess: { configured: true } }
+  const list = vi.fn()
+  const summary = vi.fn()
+  const details = vi.fn()
+  const allocateSummary = vi.fn()
+  const allocateDetails = vi.fn()
+  const hideCallbacks: (() => void)[] = []
+  const unloadCallbacks: (() => void)[] = []
+  const context = createContext({
+    exports: {},
+    require: (name: string) => {
+      if (name === '@/utils/permission')
+        return permission
+      if (name === '@/store/user')
+        return { useUserStore: () => ({ userInfo, fetchUserInfo: vi.fn(async () => userInfo) }) }
+      if (name === '@/utils/allocateStatus')
+        return allocateHelpers
+      if (name === '@/api/executionLog')
+        return { listExecutionLogs: list, executionSummary: summary, executionDetails: details, allocateSummary, allocateDetails, channelLabels: { console: '控制台', api: '开放API' }, modeLabels: ['未知', '单卡', '批量'], inputLabels: ['选择', '连号', '输入', '文件'], statusLabels: ['已创建', '待处理', '处理中', '成功', '失败', '部分成功'] }
+      if (name === '@/constant/RouterPath')
+        return { default: { UserViewsExecutionLogDetail: '/log/detail' } }
+      if (name.endsWith('/data'))
+        return helpers
+      throw new Error(`Unexpected import: ${name}`)
+    },
+    ref: (value: unknown) => ({ value }),
+    computed: (getter: () => unknown) => ({ get value() { return getter() } }),
+    definePage: () => undefined,
+    onShow: () => undefined,
+    onLoad: () => undefined,
+    onHide: (callback: () => void) => hideCallbacks.push(callback),
+    onUnload: (callback: () => void) => unloadCallbacks.push(callback),
+    uni: { navigateTo: vi.fn() },
+  })
+  const source = readFileSync(new URL(detail ? '../executionLogDetail/index.vue' : './index.vue', import.meta.url), 'utf8')
+  const script = source.match(/<script[^>]*>([\s\S]*?)<\/script>/)?.[1]
+  if (!script)
+    throw new Error('Log page script not found')
+  runInContext(transpileModule(script, { compilerOptions: { module: ModuleKind.CommonJS } }).outputText, context)
+  return {
+    userInfo,
+    list,
+    summary,
+    details,
+    allocateSummary,
+    allocateDetails,
+    evaluate: <Result>(expression: string) => runInContext(expression, context) as Result,
+    hide: () => hideCallbacks.forEach(callback => callback()),
+    unload: () => unloadCallbacks.forEach(callback => callback()),
+  }
+}
+
+describe('批次日志查询', () => {
+  it('用户分包不直接导入业务分包，避免小程序详情脚本加载失败', () => {
+    const source = readFileSync(new URL('../executionLogDetail/index.vue', import.meta.url), 'utf8')
+    expect(source).not.toContain('@/pages/business/')
+    expect(source).toContain('from \'@/utils/allocateStatus\'')
+  })
+
+  it('概览失败时仍显示已取得的卡片明细', async () => {
+    const page = harness(true)
+    page.evaluate('batchNo.value = \'A\'')
+    page.summary.mockRejectedValue(new Error('summary unavailable'))
+    page.details.mockResolvedValue({ items: [{ itemId: 'CARD' }], total: 1 })
+    await page.evaluate<Promise<void>>('load(true)')
+    expect(page.evaluate('items.value[0].itemId')).toBe('CARD')
+    expect(page.evaluate('error.value')).toBe('批次概览加载失败，请刷新重试')
+  })
+
+  it('批次类型与后端编码一致并兼容历史类型', () => {
+    expect(helpers.executionBatchTypeLabel(3)).toBe('卡片划拨')
+    expect(helpers.executionBatchTypeLabel(101)).toBe('卡片续费')
+    expect(helpers.executionBatchTypeLabel(105)).toBe('重启')
+    expect(helpers.executionBatchTypeLabel(109)).toBe('开通数据服务')
+    expect(helpers.executionBatchTypeLabel(110)).toBe('停用数据服务')
+    expect(helpers.executionBatchTypeLabel(999)).toBe('其他批次')
+  })
+
+  it('筛选使用紧凑双列，重置移至顶部操作区', () => {
+    const source = readFileSync(new URL('./index.vue', import.meta.url), 'utf8')
+    expect(source).toContain('grid grid-cols-2 mt-20rpx gap-12rpx')
+    expect(source.indexOf('@click="resetFilters"')).toBeLessThan(source.indexOf('v-if="filtersOpen"'))
+    expect(source).toContain('executionBatchTypeLabel(item.batchType)')
+  })
+
+  it('无列表权限不发请求并清空旧记录', async () => {
+    const page = harness()
+    page.userInfo.accessCodes = []
+    await page.evaluate<Promise<void>>('load(true)')
+    expect(page.list).not.toHaveBeenCalled()
+    expect(page.evaluate('items.value.length')).toBe(0)
+  })
+  it('概览和明细分别遵守控制台权限', async () => {
+    const page = harness(true)
+    page.evaluate('batchNo.value = \'A\'')
+    page.userInfo.accessCodes = ['cpm:common:batchExecutionLog:summary']
+    page.summary.mockResolvedValue({ batchNo: 'A' })
+    await page.evaluate<Promise<void>>('load(true)')
+    expect(page.summary).toHaveBeenCalledTimes(1)
+    expect(page.details).not.toHaveBeenCalled()
+    page.userInfo.accessCodes = ['cpm:common:batchExecutionLog:detailList']
+    page.details.mockResolvedValue({ items: [{ itemId: '1' }], total: 1 })
+    await page.evaluate<Promise<void>>('load(true)')
+    expect(page.summary).toHaveBeenCalledTimes(1)
+    expect(page.details).toHaveBeenCalledTimes(1)
+    expect(page.evaluate('summary.value')).toBeUndefined()
+  })
+
+  it('明细入口绑定在原生 view 上，不依赖卡片组件事件', () => {
+    const source = readFileSync(new URL('./index.vue', import.meta.url), 'utf8')
+    expect(source).toContain('<view class="p-28rpx" @click="details(item)">')
+    expect(source).not.toContain('custom-content-class="!p-28rpx" @click="details(item)"')
+  })
+
+  it('默认收起筛选，分页使用已提交条件', async () => {
+    const page = harness()
+    expect(page.evaluate('filtersOpen.value')).toBe(false)
+    page.list.mockResolvedValueOnce({ items: [{ batchNo: 'A' }], total: 3 }).mockResolvedValueOnce({ items: [{ batchNo: 'B' }], total: 3 })
+    page.evaluate('keyword.value = \'原始\'; channel.value = [\'console\']')
+    await page.evaluate<Promise<void>>('load(true)')
+    page.evaluate('keyword.value = \'未提交\'; channel.value = [\'api\']')
+    await page.evaluate<Promise<void>>('load()')
+    expect(page.list.mock.calls[1][0]).toMatchObject({ page: 2, batchNo: '原始', sourceChannel: 'console' })
+  })
+
+  it('分页失败后重试同一页，保留已加载记录', async () => {
+    const page = harness()
+    page.list.mockResolvedValueOnce({ items: [{ batchNo: 'A' }], total: 3 }).mockRejectedValueOnce(new Error('network')).mockResolvedValueOnce({ items: [{ batchNo: 'B' }], total: 3 })
+    await page.evaluate<Promise<void>>('load(true)')
+    await page.evaluate<Promise<void>>('load()')
+    expect(page.evaluate('page.value')).toBe(1)
+    expect(page.evaluate('items.value.length')).toBe(1)
+    await page.evaluate<Promise<void>>('load()')
+    expect(page.list.mock.calls[2][0].page).toBe(2)
+  })
+
+  it('旧请求不能覆盖新搜索结果', async () => {
+    const page = harness()
+    let finishOld!: (value: unknown) => void
+    page.list.mockImplementationOnce(() => new Promise((resolve) => {
+      finishOld = resolve
+    })).mockResolvedValueOnce({ items: [{ batchNo: 'NEW' }], total: 1 })
+    const oldRequest = page.evaluate<Promise<void>>('load(true)')
+    await page.evaluate<Promise<void>>('load(true)')
+    finishOld({ items: [{ batchNo: 'OLD' }], total: 1 })
+    await oldRequest
+    expect(page.evaluate('items.value[0].batchNo')).toBe('NEW')
+  })
+
+  it('隐藏和卸载后忽略未完成请求', async () => {
+    const page = harness()
+    let finish!: (value: unknown) => void
+    page.list.mockImplementationOnce(() => new Promise((resolve) => {
+      finish = resolve
+    }))
+    const request = page.evaluate<Promise<void>>('load(true)')
+    page.hide()
+    expect(page.evaluate('loading.value')).toBe(false)
+    page.unload()
+    finish({ items: [{ batchNo: 'A' }], total: 1 })
+    await request
+    await page.evaluate<Promise<void>>('load(true)')
+    expect(page.evaluate('items.value.length')).toBe(0)
+    expect(page.list).toHaveBeenCalledTimes(1)
+  })
+
+  it('详情分页保留已提交的失败筛选', async () => {
+    const page = harness(true)
+    page.evaluate('batchNo.value = \'A\'; failures.value = true')
+    page.summary.mockResolvedValue({ batchNo: 'A' })
+    page.details.mockResolvedValueOnce({ items: [{ itemId: '1' }], total: 3 }).mockResolvedValueOnce({ items: [{ itemId: '2' }], total: 3 })
+    await page.evaluate<Promise<void>>('load(true)')
+    page.evaluate('failures.value = false')
+    await page.evaluate<Promise<void>>('load()')
+    expect(page.details.mock.calls[1][0]).toMatchObject({ page: 2, detailStatus: 3 })
+    expect(page.summary).toHaveBeenCalledTimes(1)
+    expect(page.evaluate('infoOpen.value')).toBe(false)
+  })
+
+  it('明细请求不等待概览接口完成', async () => {
+    const page = harness(true)
+    page.evaluate('batchNo.value = \'A\'')
+    let resolveSummary!: (value: { batchNo: string }) => void
+    page.summary.mockReturnValue(new Promise((resolve) => {
+      resolveSummary = resolve
+    }))
+    page.details.mockResolvedValue({ items: [{ itemId: '1' }], total: 1 })
+    const loading = page.evaluate<Promise<void>>('load(true)')
+    expect(page.details).toHaveBeenCalledTimes(1)
+    resolveSummary({ batchNo: 'A' })
+    await loading
+    expect(page.evaluate('items.value.length')).toBe(1)
+  })
+
+  it('日志入口识别划拨语义，但不切换日志权限接口', async () => {
+    const page = harness(true)
+    page.evaluate('batchNo.value = \'A\'')
+    page.summary.mockResolvedValue({ batchNo: 'A', batchType: 3, batchAsyncStatus: 2 })
+    page.details.mockResolvedValue({ items: [{ itemId: '1', detailStatus: 2 }], total: 1 })
+    await page.evaluate<Promise<void>>('load(true)')
+    expect(page.evaluate('isAllocateTask.value')).toBe(true)
+    expect(allocateHelpers.allocateDetailStatus(page.evaluate<number>('items.value[0].detailStatus'), page.evaluate<number>('summary.value.batchAsyncStatus'))).toBe('校验通过 · 待整批完成')
+    expect(page.allocateSummary).not.toHaveBeenCalled()
+    expect(page.allocateDetails).not.toHaveBeenCalled()
+  })
+
+  it('划拨任务入口继续使用专用结果接口', async () => {
+    const page = harness(true)
+    page.evaluate('batchNo.value = \'A\'; allocateScene.value = true')
+    page.allocateSummary.mockResolvedValue({ batchNo: 'A', batchType: 3, batchAsyncStatus: 3 })
+    page.allocateDetails.mockResolvedValue({ items: [{ itemId: '1', detailStatus: 2 }], total: 1 })
+    await page.evaluate<Promise<void>>('load(true)')
+    expect(page.allocateSummary).toHaveBeenCalledWith({ batchNo: 'A' })
+    expect(page.summary).not.toHaveBeenCalled()
+    expect(page.details).not.toHaveBeenCalled()
+    expect(allocateHelpers.allocateDetailStatus(page.evaluate<number>('items.value[0].detailStatus'), page.evaluate<number>('summary.value.batchAsyncStatus'))).toBe('已划拨')
+  })
+
+  it('批次和明细状态使用各自的编码', () => {
+    expect(helpers.executionStatusType(3)).toBe('success')
+    expect(helpers.executionStatusType(4)).toBe('danger')
+    expect(helpers.executionStatusType(5)).toBe('warning')
+    expect(helpers.executionDetailStatusType(2)).toBe('success')
+    expect(helpers.executionDetailStatusType(3)).toBe('danger')
+  })
+})
diff --git a/app/src/pages/user/views/executionLog/index.vue b/app/src/pages/user/views/executionLog/index.vue
new file mode 100644
index 0000000..8e0c023
--- /dev/null
+++ b/app/src/pages/user/views/executionLog/index.vue
@@ -0,0 +1,223 @@
+<script setup lang="ts">
+import type { ExecutionLog } from '@/api/executionLog'
+import { allocationUnitName, channelLabels, inputLabels, listExecutionLogs, modeLabels, receivingUnitName, statusLabels } from '@/api/executionLog'
+import RouterPath from '@/constant/RouterPath'
+import { useUserStore } from '@/store/user'
+import { hasBatchExecutionLogPermission } from '@/utils/permission'
+import { executionBatchTypeLabel, executionStatusType } from './data'
+
+definePage({ style: { navigationBarTitleText: '批次执行日志' } })
+const userStore = useUserStore()
+const canViewDetails = computed(() => hasBatchExecutionLogPermission(userStore.userInfo, 'summary') || hasBatchExecutionLogPermission(userStore.userInfo, 'detailList'))
+const items = ref<ExecutionLog[]>([])
+const keyword = ref('')
+const channel = ref<string[]>([''])
+const mode = ref<number[]>([-1])
+const input = ref<number[]>([-1])
+const status = ref<number[]>([-1])
+const filtersOpen = ref(false)
+const channelOpen = ref(false)
+const modeOpen = ref(false)
+const inputOpen = ref(false)
+const statusOpen = ref(false)
+const page = ref(1)
+const total = ref(0)
+const loading = ref(false)
+const error = ref('')
+let revision = 0
+let disposed = false
+const channels = [{ label: '全部渠道', value: '' }, ...Object.entries(channelLabels).map(([value, label]) => ({ value, label }))]
+const modes = [{ label: '全部操作', value: -1 }, ...modeLabels.map((label, value) => ({ label, value }))]
+const inputs = [{ label: '全部方式', value: -1 }, ...inputLabels.map((label, value) => ({ label, value }))]
+const statuses = [{ label: '全部状态', value: -1 }, ...statusLabels.map((label, value) => ({ label, value }))]
+function buildQuery() {
+  return {
+    batchNo: keyword.value.trim() || undefined,
+    sourceChannel: channel.value[0] || undefined,
+    executionMode: mode.value[0] < 0 ? undefined : mode.value[0],
+    sourceType: input.value[0] < 0 ? undefined : input.value[0],
+    batchAsyncStatus: status.value[0] < 0 ? undefined : status.value[0],
+  }
+}
+let submittedQuery = buildQuery()
+const filterCount = computed(() => [channel.value[0] !== '', mode.value[0] >= 0, input.value[0] >= 0, status.value[0] >= 0].filter(Boolean).length)
+const appliedFilterText = ref('')
+function filterText() {
+  return [channel.value[0] ? channelLabels[channel.value[0]] : '', mode.value[0] >= 0 ? modeLabels[mode.value[0]] : '', input.value[0] >= 0 ? inputLabels[input.value[0]] : '', status.value[0] >= 0 ? statusLabels[status.value[0]] : ''].filter(Boolean).join(' · ')
+}
+async function load(reset = false) {
+  if (disposed || (!reset && (loading.value || items.value.length >= total.value)))
+    return
+  if (!hasBatchExecutionLogPermission(userStore.userInfo, 'list')) {
+    items.value = []
+    total.value = 0
+    error.value = '暂无批次日志查看权限'
+    return
+  }
+  const request = ++revision
+  const nextPage = reset ? 1 : page.value + 1
+  if (reset) {
+    submittedQuery = buildQuery()
+    appliedFilterText.value = filterText()
+    page.value = 1
+    items.value = []
+    total.value = 0
+  }
+  loading.value = true
+  error.value = ''
+  try {
+    const res = await listExecutionLogs({ ...submittedQuery, page: nextPage, pageSize: 20 })
+    if (request !== revision)
+      return
+    items.value = reset ? res.items : [...items.value, ...res.items]
+    total.value = res.total
+    page.value = nextPage
+  }
+  catch {
+    if (request === revision)
+      error.value = '日志加载失败，请重试'
+  }
+  finally {
+    if (request === revision)
+      loading.value = false
+  }
+}
+function resetFilters() {
+  channel.value = ['']
+  mode.value = [-1]
+  input.value = [-1]
+  status.value = [-1]
+  void load(true)
+}
+function details(item: ExecutionLog) {
+  if (!canViewDetails.value)
+    return
+  uni.navigateTo({ url: `${RouterPath.UserViewsExecutionLogDetail}?batchNo=${encodeURIComponent(item.batchNo)}` })
+}
+onShow(async () => {
+  try {
+    await userStore.fetchUserInfo()
+  }
+  catch {
+    items.value = []
+    total.value = 0
+    error.value = '权限获取失败，请重试'
+    return
+  }
+  if (!disposed)
+    await load(true)
+})
+onHide(() => {
+  revision++
+  loading.value = false
+})
+onUnload(() => {
+  disposed = true
+  revision++
+})
+</script>
+
+<template>
+  <view class="min-h-screen bg-#f6f8fb p-24rpx pb-40rpx">
+    <view class="mx-auto max-w-920rpx flex flex-col gap-20rpx">
+      <wd-card custom-class="!mx-0 !mb-0" custom-content-class="!p-24rpx">
+        <wd-search v-model="keyword" placeholder="搜索批次编号" variant="filled" placeholder-left hide-cancel custom-class="!p-0" @search="load(true)" @clear="load(true)" />
+        <view class="mt-16rpx flex items-center justify-between gap-12rpx">
+          <text class="text-23rpx text-#64748b">共 {{ total }} 条执行记录</text>
+          <view class="flex items-center gap-8rpx">
+            <wd-button v-if="filterCount" variant="text" size="small" custom-class="!px-8rpx !text-24rpx !font-500" @click="resetFilters">
+              重置
+            </wd-button>
+            <wd-button variant="text" size="small" icon="filter" custom-class="!px-12rpx !text-24rpx !font-500" @click="filtersOpen = !filtersOpen">
+              {{ filtersOpen ? '收起筛选' : '筛选' }}{{ filterCount ? ` (${filterCount})` : '' }}
+            </wd-button>
+            <wd-button variant="text" size="small" icon="refresh" custom-class="!px-12rpx !text-24rpx !font-500" :loading="loading" @click="load(true)">
+              刷新
+            </wd-button>
+          </view>
+        </view>
+        <text v-if="appliedFilterText" class="mt-8rpx block text-22rpx text-#2563eb">{{ appliedFilterText }}</text>
+        <view v-if="filtersOpen" class="grid grid-cols-2 mt-20rpx gap-12rpx">
+          <view class="min-w-0 rounded-12rpx bg-#f6f8fb p-18rpx" @click="channelOpen = true">
+            <text class="block text-22rpx text-#64748b">发起渠道</text>
+            <view class="mt-10rpx flex items-center justify-between gap-8rpx text-25rpx text-#334155">
+              <text class="min-w-0 truncate">{{ channelLabels[channel[0]] || '全部渠道' }}</text>
+              <wd-icon name="arrow-down" size="14" />
+            </view>
+          </view>
+          <view class="min-w-0 rounded-12rpx bg-#f6f8fb p-18rpx" @click="modeOpen = true">
+            <text class="block text-22rpx text-#64748b">操作规模</text>
+            <view class="mt-10rpx flex items-center justify-between gap-8rpx text-25rpx text-#334155">
+              <text class="min-w-0 truncate">{{ modeLabels[mode[0]] || '全部操作' }}</text>
+              <wd-icon name="arrow-down" size="14" />
+            </view>
+          </view>
+          <view class="min-w-0 rounded-12rpx bg-#f6f8fb p-18rpx" @click="inputOpen = true">
+            <text class="block text-22rpx text-#64748b">输入方式</text>
+            <view class="mt-10rpx flex items-center justify-between gap-8rpx text-25rpx text-#334155">
+              <text class="min-w-0 truncate">{{ inputLabels[input[0]] || '全部方式' }}</text>
+              <wd-icon name="arrow-down" size="14" />
+            </view>
+          </view>
+          <view class="min-w-0 rounded-12rpx bg-#f6f8fb p-18rpx" @click="statusOpen = true">
+            <text class="block text-22rpx text-#64748b">执行状态</text>
+            <view class="mt-10rpx flex items-center justify-between gap-8rpx text-25rpx text-#334155">
+              <text class="min-w-0 truncate">{{ statusLabels[status[0]] || '全部状态' }}</text>
+              <wd-icon name="arrow-down" size="14" />
+            </view>
+          </view>
+        </view>
+      </wd-card>
+      <view v-if="error" class="flex items-center justify-between gap-12rpx rounded-16rpx bg-#fff1f2 p-24rpx">
+        <text class="text-24rpx text-#b91c1c">{{ error }}</text>
+        <wd-button size="small" variant="text" @click="load(items.length === 0)">
+          重试
+        </wd-button>
+      </view>
+      <wd-card v-if="loading && !items.length" custom-class="!mx-0 !mb-0">
+        <wd-skeleton theme="paragraph" />
+      </wd-card>
+      <wd-empty v-else-if="!error && !items.length" tip="暂无执行记录" />
+      <wd-card v-for="item in items" :key="item.batchNo" custom-class="!mx-0 !mb-0" custom-content-class="!p-0">
+        <view class="p-28rpx" @click="details(item)">
+          <view class="flex items-center justify-between gap-16rpx">
+            <text class="min-w-0 truncate text-27rpx text-#0f172a font-800">{{ item.batchNo }}</text>
+            <wd-tag :type="executionStatusType(item.batchAsyncStatus)" variant="light" round custom-class="!shrink-0 !whitespace-nowrap">
+              {{ statusLabels[item.batchAsyncStatus] || '未知状态' }}
+            </wd-tag>
+          </view>
+          <view class="mt-18rpx flex items-center justify-between gap-12rpx">
+            <text class="text-25rpx text-#334155 font-700">{{ executionBatchTypeLabel(item.batchType) }}</text>
+          </view>
+          <view class="mt-12rpx flex items-center justify-between gap-12rpx">
+            <text class="text-24rpx text-#64748b">{{ channelLabels[item.sourceChannel] || '历史未知' }} · {{ modeLabels[item.executionMode] || '未知操作' }}</text>
+            <text class="shrink-0 text-25rpx text-#0f172a font-700">{{ item.totalCount }} 张卡</text>
+          </view>
+          <view v-if="item.batchType === 3" class="mt-14rpx flex flex-wrap items-center gap-8rpx text-23rpx text-#64748b">
+            <text>{{ allocationUnitName(item.sourceDeptName, item.sourceDeptId) }}</text>
+            <text>→</text>
+            <text>{{ receivingUnitName(item) }}</text>
+          </view>
+          <text v-if="item.failReason" class="line-clamp-2 mt-16rpx block break-all rounded-10rpx bg-#fff1f2 px-16rpx py-12rpx text-22rpx text-#b91c1c leading-34rpx">{{ item.failReason }}</text>
+          <view class="mt-22rpx flex items-center justify-between gap-12rpx">
+            <text class="text-22rpx text-#94a3b8">{{ item.createdAt || '时间未记录' }}</text>
+            <view v-if="canViewDetails" class="flex items-center gap-6rpx text-23rpx text-#2563eb">
+              <text>查看详情</text><view class="i-carbon-chevron-right text-22rpx" />
+            </view>
+          </view>
+        </view>
+      </wd-card>
+      <view v-if="items.length" class="flex justify-center py-8rpx">
+        <wd-loading v-if="loading" />
+        <wd-button v-else-if="items.length < total" variant="text" size="small" @click="load()">
+          加载更多
+        </wd-button>
+        <text v-else class="text-22rpx text-#94a3b8">已展示全部记录</text>
+      </view>
+    </view>
+    <wd-picker v-model="channel" v-model:visible="channelOpen" title="发起渠道" :columns="[channels]" @confirm="load(true)" />
+    <wd-picker v-model="mode" v-model:visible="modeOpen" title="操作规模" :columns="[modes]" @confirm="load(true)" />
+    <wd-picker v-model="input" v-model:visible="inputOpen" title="输入方式" :columns="[inputs]" @confirm="load(true)" />
+    <wd-picker v-model="status" v-model:visible="statusOpen" title="执行状态" :columns="[statuses]" @confirm="load(true)" />
+  </view>
+</template>
diff --git a/app/src/pages/user/views/executionLogDetail/index.vue b/app/src/pages/user/views/executionLogDetail/index.vue
new file mode 100644
index 0000000..555c16d
--- /dev/null
+++ b/app/src/pages/user/views/executionLogDetail/index.vue
@@ -0,0 +1,203 @@
+<script setup lang="ts">
+import type { ExecutionDetail, ExecutionLog } from '@/api/executionLog'
+import { allocateDetailStatus, allocateResultStatus, allocateStatusPresentation } from '@/utils/allocateStatus'
+import { allocateDetails, allocateSummary, allocationUnitName, channelLabels, detailLabels, executionDetails, executionSummary, inputLabels, modeLabels, receivingUnitName, statusLabels } from '@/api/executionLog'
+
+import { useUserStore } from '@/store/user'
+import { hasBatchExecutionLogPermission, hasUserPermission } from '@/utils/permission'
+import { executionBatchTypeLabel, executionDetailStatusType, executionStatusType } from '../executionLog/data'
+
+definePage({ style: { navigationBarTitleText: '执行日志详情' } })
+const allocateScene = ref(false)
+const userStore = useUserStore()
+const canViewSummary = computed(() => allocateScene.value ? hasUserPermission(userStore.userInfo, 'allocate') : hasBatchExecutionLogPermission(userStore.userInfo, 'summary'))
+const canViewDetails = computed(() => allocateScene.value ? hasUserPermission(userStore.userInfo, 'allocate') : hasBatchExecutionLogPermission(userStore.userInfo, 'detailList'))
+const batchNo = ref('')
+function copyBatchNo() {
+  uni.setClipboardData({ data: batchNo.value })
+}
+const summary = ref<ExecutionLog>()
+const items = ref<ExecutionDetail[]>([])
+const isAllocateTask = computed(() => allocateScene.value || summary.value?.batchType === 3)
+const allocatePresentation = computed(() => allocateStatusPresentation(summary.value ? allocateResultStatus(summary.value.batchAsyncStatus) : undefined))
+const page = ref(1)
+const total = ref(0)
+const failures = ref(false)
+const infoOpen = ref(false)
+let submittedFailures = false
+let disposed = false
+const loading = ref(false)
+const error = ref('')
+let revision = 0
+async function load(reset = false) {
+  if (disposed || (!reset && (loading.value || items.value.length >= total.value)))
+    return
+  if (!batchNo.value) {
+    error.value = '批次号不能为空'
+    return
+  }
+  if (!canViewSummary.value && !canViewDetails.value) {
+    summary.value = undefined
+    items.value = []
+    total.value = 0
+    error.value = '暂无批次详情查看权限'
+    return
+  }
+  const request = ++revision
+  const nextPage = reset ? 1 : page.value + 1
+  if (reset) {
+    submittedFailures = failures.value
+    page.value = 1
+    items.value = []
+    total.value = 0
+    summary.value = undefined
+  }
+  loading.value = true
+  error.value = ''
+  try {
+    const summaryRequest = canViewSummary.value && (reset || !summary.value)
+      ? (allocateScene.value ? allocateSummary({ batchNo: batchNo.value }) : executionSummary(batchNo.value)).then((info) => {
+          if (request === revision)
+            summary.value = info
+        }).catch(() => {
+          if (request === revision)
+            error.value = '批次概览加载失败，请刷新重试'
+        })
+      : Promise.resolve()
+    const detailsRequest = canViewDetails.value ? (allocateScene.value ? allocateDetails : executionDetails)({ batchNo: batchNo.value, page: nextPage, pageSize: 20, detailStatus: submittedFailures ? 3 : undefined }) : Promise.resolve({ items: [], total: 0 })
+    const [, result] = await Promise.all([summaryRequest, detailsRequest])
+    if (request !== revision)
+      return
+    items.value = reset ? result.items : [...items.value, ...result.items]
+    page.value = nextPage
+    total.value = result.total
+  }
+  catch {
+    if (request === revision) {
+      error.value = '查询失败或无查看权限，请重试'
+    }
+  }
+  finally {
+    if (request === revision)
+      loading.value = false
+  }
+}
+onLoad((options) => {
+  batchNo.value = String(options?.batchNo || '')
+  allocateScene.value = options?.scene === 'allocate'
+  if (allocateScene.value)
+    uni.setNavigationBarTitle({ title: '划拨任务详情' })
+})
+onShow(async () => {
+  try {
+    await userStore.fetchUserInfo()
+  }
+  catch {
+    summary.value = undefined
+    items.value = []
+    total.value = 0
+    error.value = '权限获取失败，请重试'
+    return
+  }
+  if (!disposed)
+    await load(true)
+})
+onHide(() => {
+  loading.value = false
+  revision++
+})
+onUnload(() => {
+  disposed = true
+  revision++
+})
+</script>
+
+<template>
+  <view class="min-h-screen bg-#f6f8fb p-24rpx pb-40rpx">
+    <view class="mx-auto max-w-920rpx flex flex-col gap-20rpx">
+      <wd-card v-if="canViewSummary" custom-class="!mx-0 !mb-0" custom-content-class="!p-28rpx">
+        <view class="flex items-center justify-between gap-16rpx">
+          <text class="text-28rpx text-#0f172a font-800">{{ isAllocateTask ? '划拨任务概览' : '批次概览' }}</text>
+          <wd-tag v-if="summary" :type="isAllocateTask ? allocatePresentation.type : executionStatusType(summary.batchAsyncStatus)" variant="light" round>
+            {{ isAllocateTask ? allocatePresentation.title : statusLabels[summary.batchAsyncStatus] || '未知状态' }}
+          </wd-tag>
+        </view>
+        <view v-if="isAllocateTask && summary" class="grid mt-16rpx gap-10rpx text-24rpx text-#64748b">
+          <text>划拨单位：{{ allocationUnitName(summary.sourceDeptName, summary.sourceDeptId) }}</text>
+          <text>接收单位：{{ receivingUnitName(summary) }}</text>
+        </view>
+        <view class="mt-16rpx flex items-center justify-between gap-12rpx">
+          <text class="shrink-0 text-23rpx text-#94a3b8">任务编号</text>
+          <text class="min-w-0 flex-1 truncate text-24rpx text-#64748b">{{ batchNo }}</text>
+          <wd-button icon="copy" size="small" variant="text" custom-class="!shrink-0 !px-8rpx !text-23rpx" @click="copyBatchNo">
+            复制
+          </wd-button>
+        </view>
+        <template v-if="summary">
+          <text v-if="isAllocateTask" class="mt-16rpx block text-24rpx text-#64748b leading-36rpx">{{ summary.batchAsyncStatus === 3 ? '卡片已划拨至目标客户。' : allocatePresentation.description }}</text>
+          <view class="mt-20rpx rounded-12rpx bg-#f8fafc p-20rpx">
+            <text class="mb-12rpx block text-26rpx text-#0f172a font-700">{{ executionBatchTypeLabel(summary.batchType) }}</text>
+            <text class="text-36rpx text-#0f172a font-800">{{ summary.totalCount }}</text>
+            <text class="ml-8rpx text-23rpx text-#64748b">张卡 · {{ channelLabels[summary.sourceChannel] || '历史未知' }} · {{ modeLabels[summary.executionMode] || '未知操作' }}</text>
+          </view>
+          <text v-if="summary.failReason" class="mt-16rpx block break-all rounded-10rpx bg-#fff1f2 p-18rpx text-23rpx text-#b91c1c leading-36rpx">{{ summary.failReason }}</text>
+          <view class="mt-12rpx flex items-center justify-between gap-12rpx">
+            <text class="text-22rpx text-#94a3b8">{{ summary.createdAt || '时间未记录' }}</text>
+            <wd-button variant="text" size="small" custom-class="!px-8rpx !text-23rpx" @click="infoOpen = !infoOpen">
+              {{ infoOpen ? '收起信息' : '批次信息' }}
+            </wd-button>
+          </view>
+          <wd-cell-group v-if="infoOpen">
+            <wd-cell title="输入方式" :value="summary.sourceType == null ? '未知方式' : inputLabels[summary.sourceType] || '未知方式'" />
+            <wd-cell title="创建时间" :value="summary.createdAt || '--'" />
+            <wd-cell title="开始时间" :value="summary.startTime || '--'" />
+            <wd-cell title="结束时间" :value="summary.endTime || '--'" />
+          </wd-cell-group>
+        </template>
+        <wd-skeleton v-else-if="loading" theme="paragraph" />
+      </wd-card>
+      <view v-if="canViewDetails" class="flex items-center justify-between gap-16rpx px-4rpx">
+        <view class="flex items-center gap-12rpx">
+          <text class="text-27rpx text-#0f172a font-800">{{ isAllocateTask ? '卡片明细' : '执行明细' }}</text>
+          <text class="text-22rpx text-#94a3b8">{{ total }} 条</text>
+        </view>
+        <view class="flex items-center gap-16rpx">
+          <wd-checkbox v-model="failures" @change="load(true)">
+            仅失败
+          </wd-checkbox>
+          <wd-button icon="refresh" size="small" variant="text" custom-class="!px-8rpx !text-24rpx !font-500" :loading="loading" @click="load(true)">
+            刷新
+          </wd-button>
+        </view>
+      </view>
+      <view v-if="error" class="flex items-center justify-between gap-12rpx rounded-16rpx bg-#fff1f2 p-24rpx">
+        <text class="text-24rpx text-#b91c1c">{{ error }}</text>
+        <wd-button variant="text" size="small" @click="load(items.length === 0)">
+          重试
+        </wd-button>
+      </view>
+      <wd-empty v-if="canViewDetails && !loading && !error && !items.length" :tip="failures ? '暂无失败明细' : '暂无执行明细'" />
+      <wd-card v-for="(item, index) in items" :key="`${item.itemId}:${index}`" custom-class="!mx-0 !mb-0" custom-content-class="!p-24rpx">
+        <view class="flex items-center justify-between gap-16rpx">
+          <text class="text-22rpx text-#94a3b8">第 {{ item.rowNo || index + 1 }} 行</text>
+          <wd-tag :type="isAllocateTask && item.detailStatus === 2 && summary?.batchAsyncStatus !== 3 ? 'warning' : executionDetailStatusType(item.detailStatus)" variant="light" round>
+            {{ isAllocateTask ? allocateDetailStatus(item.detailStatus, summary?.batchAsyncStatus) : detailLabels[item.detailStatus] || '未知状态' }}
+          </wd-tag>
+        </view>
+        <text class="mt-12rpx block break-all text-26rpx text-#0f172a font-700">{{ item.itemId }}</text>
+        <view v-if="isAllocateTask || item.sourceDeptId" class="grid mt-12rpx gap-8rpx text-23rpx text-#64748b">
+          <text>划拨单位：{{ allocationUnitName(item.sourceDeptName, item.sourceDeptId) }}</text>
+          <text>接收单位：{{ receivingUnitName(item) }}</text>
+        </view>
+        <text v-if="item.errorReason" class="mt-14rpx block break-all rounded-10rpx bg-#fff1f2 px-16rpx py-12rpx text-22rpx text-#b91c1c leading-34rpx">{{ item.errorReason }}</text>
+      </wd-card>
+      <view class="flex justify-center py-8rpx">
+        <wd-loading v-if="loading" />
+        <wd-button v-else-if="items.length < total" variant="text" size="small" @click="load()">
+          加载更多
+        </wd-button>
+        <text v-else-if="items.length" class="text-22rpx text-#94a3b8">已展示全部明细</text>
+      </view>
+    </view>
+  </view>
+</template>
diff --git a/app/src/pages/user/views/manual/index.vue b/app/src/pages/user/views/manual/index.vue
new file mode 100644
index 0000000..e092a89
--- /dev/null
+++ b/app/src/pages/user/views/manual/index.vue
@@ -0,0 +1,53 @@
+<script setup lang="ts">
+definePage({
+  style: {
+    navigationBarTitleText: '使用手册',
+  },
+})
+
+const manualUrl = 'https://example.com/docs/manual/mini-program/'
+const failed = ref(false)
+const reloadKey = ref(0)
+
+function reloadManual() {
+  failed.value = false
+  reloadKey.value += 1
+}
+</script>
+
+<template>
+  <!-- #ifdef H5 -->
+  <view v-if="!failed" class="manual-page">
+    <iframe :key="reloadKey" class="manual-frame" :src="manualUrl" title="使用手册" />
+  </view>
+  <!-- #endif -->
+
+  <!-- #ifndef H5 -->
+  <web-view v-if="!failed" :key="reloadKey" :src="manualUrl" @error="failed = true" />
+  <!-- #endif -->
+
+  <view v-if="failed" class="fixed inset-0 z-10 flex flex-col items-center justify-center gap-16px bg-white px-24px">
+    <text class="text-16px text-gray-700">手册暂时无法打开</text>
+    <wd-button size="small" icon="refresh" @click="reloadManual">
+      重新加载
+    </wd-button>
+  </view>
+</template>
+
+<style lang="scss" scoped>
+.manual-page {
+  position: fixed;
+  top: var(--window-top, 44px);
+  right: 0;
+  bottom: var(--window-bottom, 0px);
+  left: 0;
+  background: #fff;
+}
+
+.manual-frame {
+  display: block;
+  width: 100%;
+  height: 100%;
+  border: 0;
+}
+</style>
diff --git a/app/src/pages/user/views/notification/data.test.ts b/app/src/pages/user/views/notification/data.test.ts
new file mode 100644
index 0000000..f439ee1
--- /dev/null
+++ b/app/src/pages/user/views/notification/data.test.ts
@@ -0,0 +1,25 @@
+import { readFileSync } from 'node:fs'
+import { describe, expect, it } from 'vitest'
+
+describe('站内预警通知入口', () => {
+  it('提醒页仅展示站内消息，不请求微信一次性订阅或保存旧偏好', () => {
+    const source = readFileSync(new URL('./index.vue', import.meta.url), 'utf8')
+    expect(source).toContain('站内消息提醒')
+    expect(source).toContain('RouterPath.Message')
+    expect(source).not.toContain('requestWechatSubscribeMessage')
+    expect(source).not.toContain('saveWarningPreference')
+    expect(source).not.toContain('wd-switch')
+  })
+
+  it('卡片和批量预警页面均保留配置入口，消息跳到站内中心', () => {
+    const card = readFileSync(new URL('../../../card/views/warning/index.vue', import.meta.url), 'utf8')
+    const business = readFileSync(new URL('../../../business/views/warning/index.vue', import.meta.url), 'utf8')
+    for (const source of [card, business]) {
+      expect(source).toContain('v-model="form.enabled"')
+      expect(source).toContain('RouterPath.Message')
+      expect(source).toContain('title="消息中心"')
+      expect(source).not.toContain('requestWechatSubscribeMessage')
+      expect(source).not.toContain('微信提醒设置')
+    }
+  })
+})
diff --git a/app/src/pages/user/views/notification/index.test.ts b/app/src/pages/user/views/notification/index.test.ts
new file mode 100644
index 0000000..e22777d
--- /dev/null
+++ b/app/src/pages/user/views/notification/index.test.ts
@@ -0,0 +1,22 @@
+import { readFileSync } from 'node:fs'
+import { describe, expect, it } from 'vitest'
+
+const notification = readFileSync(new URL('./index.vue', import.meta.url), 'utf8')
+const profile = readFileSync(new URL('../profile/index.vue', import.meta.url), 'utf8')
+
+describe('站内提醒与微信账号绑定职责', () => {
+  it('旧提醒路由保留站内消息入口，不再显示微信订阅开关', () => {
+    expect(notification).toContain('navigationBarTitleText: \'消息提醒\'')
+    expect(notification).toContain('站内消息提醒')
+    expect(notification).toContain('uni.navigateTo({ url: RouterPath.Message })')
+    expect(notification).not.toContain('requestWechatSubscribeMessage')
+    expect(notification).not.toContain('wd-switch')
+  })
+  it('个人资料仍可绑定、更换、解绑微信用于登录', () => {
+    expect(profile).toContain('账号与安全')
+    expect(profile).toContain('更换微信绑定')
+    expect(profile).toContain('解除微信绑定')
+    expect(profile).toContain('await unbindWechat()')
+    expect(profile).toContain('userStore.setUserInfo(res.userInfo)')
+  })
+})
diff --git a/app/src/pages/user/views/notification/index.vue b/app/src/pages/user/views/notification/index.vue
index 7488ac1..0f27cf8 100644
--- a/app/src/pages/user/views/notification/index.vue
+++ b/app/src/pages/user/views/notification/index.vue
@@ -1,403 +1,17 @@
 <script lang="ts" setup>
-import { isMpWeixin } from '@uni-helper/uni-env'
-import { bindWechat, getWxCode } from '@/api/login'
 import RouterPath from '@/constant/RouterPath'
-import { useUserStore } from '@/store/user'
-import { getWarningConfigMeta } from '../api/warning'
-import { guideWechatSubscribeSettings, requestWechatSubscribeMessage, shouldGuideWechatSubscribeSettings, wechatSubscribeSaveMessage } from '@/utils'
 
-definePage({
-  style: {
-    navigationBarTitleText: '微信提醒',
-  },
-})
+definePage({ style: { navigationBarTitleText: '消息提醒' } })
 
-interface NotifyRow {
-  title: string
-  desc: string
-  enabled: boolean
-  status: string
-  editable: boolean
+function goMessageCenter() {
+  uni.navigateTo({ url: RouterPath.Message })
 }
-
-const userStore = useUserStore()
-const loading = ref(false)
-const binding = ref(false)
-const requesting = ref(false)
-const templateId = ref('')
-const templateReady = ref(false)
-const appNotifyEnabled = ref(false)
-const wechatBound = ref(false)
-const wechatBindText = ref('未绑定')
-
-const bindButtonText = computed(() => (wechatBound.value ? '更换绑定微信' : '绑定当前微信'))
-const statusText = computed(() => {
-  if (!templateReady.value)
-    return '模板未配置'
-  if (!appNotifyEnabled.value)
-    return '预警关闭'
-  return wechatBound.value ? '已绑定微信' : '待绑定微信'
-})
-const statusTagType = computed(() => {
-  if (!templateReady.value)
-    return 'warning'
-  if (!appNotifyEnabled.value)
-    return 'default'
-  return wechatBound.value ? 'primary' : 'danger'
-})
-const rows = computed<NotifyRow[]>(() => [
-  {
-    title: '流量预警订阅',
-    desc: '按卡片预警配置触发，开启后会写入消息中心并尝试发送微信订阅消息。',
-    enabled: appNotifyEnabled.value,
-    status: appNotifyEnabled.value ? '已开启' : '已关闭',
-    editable: true,
-  },
-  {
-    title: '订单支付通知',
-    desc: '续费、变更、加油包等订单状态变化后生成站内通知。',
-    enabled: true,
-    status: '默认接收',
-    editable: false,
-  },
-  {
-    title: '工单回复提醒',
-    desc: '工单有回复或状态变化时，在消息中心保留通知。',
-    enabled: true,
-    status: '默认接收',
-    editable: false,
-  },
-  {
-    title: '系统公告',
-    desc: '平台维护、功能调整等公告消息。',
-    enabled: true,
-    status: '默认接收',
-    editable: false,
-  },
-])
-
-async function loadMeta() {
-  loading.value = true
-  try {
-    const [meta] = await Promise.all([
-      getWarningConfigMeta(),
-      userStore.fetchUserInfo().catch(() => undefined),
-    ])
-    templateId.value = meta.templateId || ''
-    templateReady.value = Boolean(meta.templateReady)
-    appNotifyEnabled.value = meta.appNotifyEnabled === 1
-    wechatBound.value = Boolean(meta.wechatBound || userStore.userInfo.wechatBound)
-    wechatBindText.value
-      = meta.wechatBindText
-        || userStore.userInfo.wechatBindText
-        || (wechatBound.value ? '已绑定' : '未绑定')
-  }
-  catch (error) {
-    uni.showToast({ title: getErrorMessage(error, '微信提醒状态加载失败'), icon: 'none' })
-  }
-  finally {
-    loading.value = false
-  }
-}
-
-async function handleBindWechat() {
-  if (!isMpWeixin) {
-    uni.showToast({ title: '请在微信小程序中绑定', icon: 'none' })
-    return
-  }
-  if (binding.value)
-    return
-  const confirmed = await confirmBindWechat()
-  if (!confirmed)
-    return
-  binding.value = true
-  try {
-    const wxRes = await getWxCode()
-    if (!wxRes.code)
-      throw new Error('获取微信登录凭证失败')
-    const res = await bindWechat({ wxCode: wxRes.code })
-    if (res.userInfo)
-      userStore.setUserInfo(res.userInfo)
-    wechatBound.value = true
-    wechatBindText.value = '已绑定'
-    uni.showToast({ title: '微信绑定成功', icon: 'success' })
-  }
-  catch (error) {
-    uni.showToast({ title: getErrorMessage(error, '微信绑定失败'), icon: 'none' })
-  }
-  finally {
-    binding.value = false
-  }
-}
-
-async function handleRequestSubscribe() {
-  if (requesting.value)
-    return
-  requesting.value = true
-  try {
-    const result = await requestWechatSubscribeMessage(templateId.value, templateReady.value)
-    if (shouldGuideWechatSubscribeSettings(result)) {
-      guideWechatSubscribeSettings(result)
-      return
-    }
-    uni.showToast({
-      title: wechatSubscribeSaveMessage(result) || result.message,
-      icon: result.status === 'accepted' ? 'success' : 'none',
-    })
-  }
-  finally {
-    requesting.value = false
-  }
-}
-
-function handleNotifyRow(row: NotifyRow) {
-  if (!row.editable)
-    return
-  uni.showModal({
-    title: '配置流量预警',
-    content: '小程序提醒需要按卡片保存预警配置。是否前往预警配置页面开启或关闭？',
-    confirmText: '去配置',
-    cancelText: '取消',
-    success: (res) => {
-      if (res.confirm)
-        uni.navigateTo({ url: RouterPath.BusinessViewsWarning })
-    },
-  })
-}
-
-function goWarningConfig() {
-  uni.navigateTo({ url: RouterPath.BusinessViewsWarning })
-}
-
-function confirmBindWechat() {
-  return new Promise<boolean>((resolve) => {
-    uni.showModal({
-      title: wechatBound.value ? '更换微信绑定' : '绑定微信提醒',
-      content: wechatBound.value
-        ? '确认将预警订阅提醒切换到当前微信用户？'
-        : '绑定当前微信后，可接收流量预警和卡片消息等订阅提醒。',
-      confirmText: wechatBound.value ? '确认更换' : '立即绑定',
-      cancelText: '取消',
-      success: res => resolve(Boolean(res.confirm)),
-      fail: () => resolve(false),
-    })
-  })
-}
-
-function getErrorMessage(error: unknown, fallback: string) {
-  if (error && typeof error === 'object') {
-    const data = error as { msg?: unknown, message?: unknown, errMsg?: unknown }
-    if (typeof data.msg === 'string' && data.msg)
-      return data.msg
-    if (typeof data.message === 'string' && data.message)
-      return data.message
-    if (typeof data.errMsg === 'string' && data.errMsg)
-      return data.errMsg
-  }
-  if (error instanceof Error && error.message)
-    return error.message
-  return fallback
-}
-
-onShow(() => {
-  void loadMeta()
-})
 </script>
 
 <template>
-  <view class="min-h-screen bg-canvas p-20rpx pb-56rpx">
-    <view class="mx-auto max-w-920rpx flex flex-col gap-16rpx">
-      <view v-if="loading" class="card-base flex items-center justify-center py-72rpx">
-        <wd-loading />
-      </view>
-
-      <template v-else>
-        <view class="notify-summary card-base">
-          <view class="notify-summary__icon">
-            <view class="i-carbon-notification text-38rpx" />
-          </view>
-          <view class="min-w-0 flex-1">
-            <view class="flex items-center gap-12rpx">
-              <text class="notify-summary__title">微信提醒</text>
-              <wd-tag :type="statusTagType" size="small" round>
-                {{ statusText }}
-              </wd-tag>
-            </view>
-            <text class="notify-summary__sub">{{ wechatBindText }}，授权后接收重要提醒</text>
-          </view>
-        </view>
-
-        <view class="notify-card">
-          <view class="notify-card__title">
-            提醒项目
-          </view>
-          <view
-            v-for="row in rows"
-            :key="row.title"
-            class="notify-row"
-            @click="handleNotifyRow(row)"
-          >
-            <view class="notify-row__icon">
-              <view
-                :class="
-                  row.title === '流量预警订阅'
-                    ? 'i-carbon-warning-alt'
-                    : row.title === '订单支付通知'
-                      ? 'i-carbon-receipt'
-                      : row.title === '工单回复提醒'
-                        ? 'i-carbon-chat'
-                        : 'i-carbon-notification'
-                "
-              />
-            </view>
-            <view class="min-w-0 flex-1">
-              <view class="flex items-center gap-10rpx">
-                <text class="notify-title">{{ row.title }}</text>
-                <text class="notify-status">{{ row.status }}</text>
-              </view>
-              <text class="notify-desc">{{ row.desc }}</text>
-            </view>
-            <wd-switch
-              :model-value="row.enabled"
-              :disabled="!row.editable"
-              @change="handleNotifyRow(row)"
-            />
-          </view>
-        </view>
-
-        <view class="notice-banner">
-          <view class="i-carbon-information mt-4rpx shrink-0 text-28rpx" />
-          <text class="min-w-0 flex-1">微信订阅需要主动授权，预警配置仍以卡片设置为准。</text>
-        </view>
-
-        <view class="grid gap-12rpx">
-          <wd-button type="primary" block :loading="binding" @click="handleBindWechat">
-            {{ bindButtonText }}
-          </wd-button>
-          <wd-button
-            type="primary"
-            plain
-            block
-            :loading="requesting"
-            @click="handleRequestSubscribe"
-          >
-            申请订阅授权
-          </wd-button>
-          <wd-button type="primary" plain block @click="goWarningConfig">
-            管理预警配置
-          </wd-button>
-        </view>
-      </template>
+  <view class="min-h-screen bg-canvas p-24rpx">
+    <view class="overflow-hidden rounded-16rpx bg-white">
+      <wd-cell title="站内消息提醒" label="流量预警等通知将在消息中心展示" value="查看消息" is-link @click="goMessageCenter" />
     </view>
   </view>
 </template>
-
-<style lang="scss" scoped>
-.notify-summary {
-  display: flex;
-  align-items: center;
-  gap: 18rpx;
-  padding: 24rpx;
-}
-
-.notify-summary__icon,
-.notify-row__icon {
-  display: flex;
-  align-items: center;
-  justify-content: center;
-  flex-shrink: 0;
-  color: #2563eb;
-  background: #eff6ff;
-}
-
-.notify-summary__icon {
-  width: 72rpx;
-  height: 72rpx;
-  border-radius: 18rpx;
-}
-
-.notify-summary__title {
-  color: #111827;
-  font-size: 32rpx;
-  font-weight: 900;
-}
-
-.notify-summary__sub {
-  display: block;
-  margin-top: 8rpx;
-  overflow: hidden;
-  color: #64748b;
-  font-size: 23rpx;
-  line-height: 32rpx;
-  text-overflow: ellipsis;
-  white-space: nowrap;
-}
-
-.notify-card {
-  overflow: hidden;
-  border: 1px solid #e2e8f0;
-  border-radius: 8px;
-  background: #fff;
-}
-
-.notify-card__title {
-  padding: 20rpx 24rpx 12rpx;
-  color: #111827;
-  font-size: 27rpx;
-  font-weight: 900;
-}
-
-.notify-row {
-  display: flex;
-  align-items: center;
-  gap: 16rpx;
-  min-height: 116rpx;
-  padding: 18rpx 24rpx;
-  border-top: 1px solid #f1f5f9;
-}
-
-.notify-row__icon {
-  width: 52rpx;
-  height: 52rpx;
-  border-radius: 14rpx;
-  font-size: 28rpx;
-}
-
-.notify-title {
-  color: #111827;
-  font-size: 26rpx;
-  font-weight: 800;
-  line-height: 36rpx;
-}
-
-.notify-status {
-  flex-shrink: 0;
-  border-radius: 999rpx;
-  background: #f8fafc;
-  color: #64748b;
-  font-size: 20rpx;
-  font-weight: 700;
-  line-height: 28rpx;
-  padding: 3rpx 12rpx;
-}
-
-.notify-desc {
-  display: block;
-  margin-top: 5rpx;
-  color: #64748b;
-  font-size: 21rpx;
-  line-height: 30rpx;
-}
-
-.notice-banner {
-  display: flex;
-  gap: 12rpx;
-  border: 1px solid #bfdbfe;
-  border-radius: 8px;
-  background: #eff6ff;
-  color: #2563eb;
-  font-size: 22rpx;
-  line-height: 32rpx;
-  padding: 16rpx 18rpx;
-}
-</style>
diff --git a/app/src/pages/user/views/profile/index.vue b/app/src/pages/user/views/profile/index.vue
index d7e3451..720ff89 100644
--- a/app/src/pages/user/views/profile/index.vue
+++ b/app/src/pages/user/views/profile/index.vue
@@ -1,19 +1,20 @@
 <script lang="ts" setup>
 import { onLoad, onShow } from '@dcloudio/uni-app'
 import { computed, reactive, ref } from 'vue'
-import { updateInfo } from '@/api/login'
+import { isMpWeixin } from '@uni-helper/uni-env'
+import { bindWechat, getWxCode, unbindWechat, updateInfo } from '@/api/login'
 import { useTokenStore } from '@/store/token'
 import { useUserStore } from '@/store/user'
 import {
   getAccountRoleLabel,
-  getAccountWorkspaceLabel,
   getAccountWorkspace,
+  getAccountWorkspaceLabel,
 } from '@/utils/userIdentity'
 
 definePage({
   excludeLoginPath: true,
   style: {
-    navigationBarTitleText: '账号资料',
+    navigationBarTitleText: '个人资料',
   },
 })
 
@@ -27,34 +28,66 @@ interface InfoRow {
 const userStore = useUserStore()
 const tokenStore = useTokenStore()
 const loading = ref(false)
+const binding = ref(false)
 const pageMode = ref<PageMode>('view')
 
 const isTerminal = computed(() => Boolean(userStore.userInfo.isTerminal))
 const canEditProfile = computed(() => isTerminal.value && pageMode.value === 'edit')
 const isViewMode = computed(() => !canEditProfile.value)
-const modeLabel = computed(() => (canEditProfile.value ? '编辑' : '仅查看'))
+const showDetails = ref(false)
+const loggingOut = ref(false)
 const displayName = computed(() => {
   if (isTerminal.value) {
     return (
-      userStore.userInfo.terminalProfile?.terminalName ||
-      userStore.userInfo.nickName ||
-      userStore.userInfo.nickname ||
-      userStore.userInfo.username ||
-      '未登录用户'
+      userStore.userInfo.terminalProfile?.terminalName
+      || userStore.userInfo.nickName
+      || userStore.userInfo.nickname
+      || userStore.userInfo.username
+      || '未登录用户'
     )
   }
   return (
-    userStore.userInfo.enterpriseProfile?.deptName ||
-    userStore.userInfo.enterpriseProfile?.fullName ||
-    userStore.userInfo.nickName ||
-    userStore.userInfo.nickname ||
-    userStore.userInfo.username ||
-    getAccountWorkspaceLabel(getAccountWorkspace(userStore.userInfo))
+    userStore.userInfo.enterpriseProfile?.deptName
+    || userStore.userInfo.enterpriseProfile?.fullName
+    || userStore.userInfo.nickName
+    || userStore.userInfo.nickname
+    || userStore.userInfo.username
+    || getAccountWorkspaceLabel(getAccountWorkspace(userStore.userInfo))
   )
 })
 const avatarText = computed(() => displayName.value.slice(0, 1))
 const roleText = computed(() => getAccountRoleLabel(userStore.userInfo))
-const balanceText = computed(() => `¥${Number(userStore.userInfo.balance || 0).toFixed(2)}`)
+const accountText = computed(() => maskPhone(userStore.userInfo.username || '未设置'))
+const emailText = computed(() => userStore.userInfo.terminalProfile?.email || userStore.userInfo.enterpriseProfile?.email || '未填写')
+const organizationText = computed(() => {
+  const profile = isTerminal.value ? userStore.userInfo.terminalProfile : userStore.userInfo.enterpriseProfile
+  return profile?.fullName || (isTerminal.value ? userStore.userInfo.terminalProfile?.terminalName : userStore.userInfo.enterpriseProfile?.deptName) || '未填写'
+})
+const businessRoleText = computed(() => userStore.userInfo.roleName || roleText.value)
+
+function maskPhone(value: string) {
+  return /^1\d{10}$/.test(value) ? value.replace(/^(\d{3})\d{4}(\d{4})$/, '$1****$2') : value
+}
+
+async function handleLogout() {
+  if (loggingOut.value || binding.value || loading.value)
+    return
+  const result = await uni.showModal({ title: '退出登录', content: '确定退出当前账号吗？' })
+  if (!result.confirm)
+    return
+  loggingOut.value = true
+  try {
+    await tokenStore.logout()
+    uni.reLaunch({ url: '/pages/login/index' })
+  }
+  finally {
+    loggingOut.value = false
+  }
+}
+
+function openPassword() {
+  uni.navigateTo({ url: '/pages/login/forgot-password/index' })
+}
 const phoneText = computed(() => userStore.userInfo.phone || userStore.userInfo.username || '-')
 const identityTitle = computed(
   () =>
@@ -66,7 +99,8 @@ const identityTitle = computed(
     })[getAccountWorkspace(userStore.userInfo)],
 )
 const realNameText = computed(() => {
-  if (isTerminal.value) return userStore.userInfo.terminalProfile?.realNameStatus || '资料待完善'
+  if (isTerminal.value)
+    return userStore.userInfo.terminalProfile?.realNameStatus || '资料待完善'
   return userStore.userInfo.enterpriseProfile?.realNameStatus || '资料待完善'
 })
 const wechatText = computed(
@@ -149,7 +183,8 @@ const identityRows = computed<InfoRow[]>(() => {
 })
 
 function displayValue(value?: string | number) {
-  if (value === undefined || value === null || String(value).trim() === '') return '-'
+  if (value === undefined || value === null || String(value).trim() === '')
+    return '-'
   return String(value)
 }
 
@@ -175,6 +210,48 @@ function syncForm() {
   formData.bankAccount = profile?.bankAccount || ''
 }
 
+async function manageWechat() {
+  if (binding.value || loading.value)
+    return
+  const bound = Boolean(userStore.userInfo.wechatBound)
+  let action = 'bind'
+  if (bound) {
+    const result = await uni.showActionSheet({ itemList: ['更换微信绑定', '解除微信绑定'] }).catch(() => null)
+    if (!result)
+      return
+    action = result.tapIndex === 1 ? 'unbind' : 'bind'
+  }
+  if (action === 'bind' && !isMpWeixin) {
+    uni.showToast({ title: '请在微信小程序中绑定', icon: 'none' })
+    return
+  }
+  binding.value = true
+  try {
+    const confirmed = await uni.showModal({
+      title: action === 'unbind' ? '解除微信绑定？' : bound ? '更换微信绑定？' : '绑定当前微信？',
+      content: action === 'unbind'
+        ? '解绑后将不能通过原绑定微信登录，站内消息不受影响。请确认记得账号密码。'
+        : '将当前微信绑定到账号，用于后续通过微信登录。',
+      confirmText: action === 'unbind' ? '确认解绑' : '确认绑定',
+    })
+    if (!confirmed.confirm)
+      return
+    const res = action === 'unbind'
+      ? await unbindWechat()
+      : await bindWechat({ wxCode: (await getWxCode()).code })
+    if (res.userInfo)
+      userStore.setUserInfo(res.userInfo)
+    uni.showToast({ title: action === 'unbind' ? '已解除绑定' : '微信绑定成功', icon: 'success' })
+  }
+  catch (error) {
+    const detail = error as { msg?: string, message?: string }
+    uni.showToast({ title: detail?.msg || detail?.message || '微信绑定操作失败', icon: 'none' })
+  }
+  finally {
+    binding.value = false
+  }
+}
+
 async function submit() {
   if (!canEditProfile.value) {
     uni.showToast({ title: '当前页面仅支持查看资料', icon: 'none' })
@@ -217,7 +294,8 @@ async function submit() {
     userStore.setUserInfo(res)
     pageMode.value = 'view'
     uni.showToast({ title: '保存成功', icon: 'success' })
-  } finally {
+  }
+  finally {
     loading.value = false
   }
 }
@@ -235,316 +313,243 @@ onShow(async () => {
 </script>
 
 <template>
-    <view class="min-h-screen bg-#f5f7fb p-24rpx pb-48rpx">
-      <view class="profile-hero">
-        <view class="flex items-center gap-20rpx">
-          <view class="avatar">
-            <image
-              v-if="userStore.userInfo.avatar"
-              class="h-full w-full"
-              :src="userStore.userInfo.avatar"
-              mode="aspectFill"
-            />
-            <text v-else>{{ avatarText }}</text>
-          </view>
-          <view class="min-w-0 flex-1">
-            <view class="flex items-center gap-12rpx">
-              <text class="truncate text-34rpx text-#111827 font-800">{{ displayName }}</text>
-              <view class="role-pill">
-                {{ roleText }}
-              </view>
-            </view>
-            <text class="mt-8rpx block truncate text-24rpx text-#64748b">{{ phoneText }}</text>
-          </view>
-          <wd-tag :type="canEditProfile ? 'primary' : 'warning'" plain size="small">
-            {{ modeLabel }}
-          </wd-tag>
+  <view class="min-h-screen bg-#f5f7fb p-24rpx pb-48rpx">
+    <view class="flex items-center gap-24rpx rounded-24rpx bg-white p-28rpx">
+      <view class="h-96rpx w-92rpx flex shrink-0 items-center justify-center overflow-hidden rounded-24rpx bg-blue-50 text-36rpx text-blue-600 font-semibold">
+        <image v-if="userStore.userInfo.avatar" class="h-full w-full" :src="userStore.userInfo.avatar" mode="aspectFill" />
+        <text v-else>{{ avatarText }}</text>
+      </view>
+      <view class="min-w-0 flex-1">
+        <view class="truncate text-30rpx text-gray-900 font-semibold">
+          {{ displayName }}
         </view>
-
-        <view class="summary-grid">
-          <view class="summary-item">
-            <text class="summary-label">登录账号</text>
-            <text class="summary-value">{{ userStore.userInfo.username || '-' }}</text>
-          </view>
-          <view class="summary-item">
-            <text class="summary-label">账户余额</text>
-            <text class="summary-value">{{ balanceText }}</text>
-          </view>
-          <view class="summary-item">
-            <text class="summary-label">资料状态</text>
-            <text class="summary-value">{{ realNameText }}</text>
-          </view>
-          <view class="summary-item">
-            <text class="summary-label">微信提醒</text>
-            <text class="summary-value">{{ wechatText }}</text>
-          </view>
+        <view class="mt-10rpx text-22rpx text-gray-500">
+          账号 {{ accountText }} · {{ roleText }}
         </view>
       </view>
+      <wd-button v-if="isTerminal" type="primary" plain size="small" :disabled="loading" @click="pageMode = canEditProfile ? 'view' : 'edit'">
+        {{ canEditProfile ? '取消' : '编辑' }}
+      </wd-button>
+    </view>
 
-      <wd-card
-        v-if="isViewMode"
-        custom-class="!m-0 !mt-24rpx profile-card"
-        custom-content-class="!p-0"
-      >
-        <template #title>
-          <view class="flex items-center justify-between gap-16rpx">
-            <text class="text-30rpx text-#111827 font-900">{{ identityTitle }}</text>
-            <wd-tag v-if="isViewMode" type="primary" plain> 资料查看 </wd-tag>
-          </view>
-        </template>
-        <wd-cell-group :border="false">
-          <wd-cell
-            v-for="item in identityRows"
-            :key="item.title"
-            :title="item.title"
-            :value="displayValue(item.value)"
-            center
-            custom-class="!min-h-88rpx"
-            custom-title-class="!text-26rpx !text-#334155"
-            custom-value-class="!text-26rpx !text-#475569"
-          />
-        </wd-cell-group>
-      </wd-card>
+    <view v-if="isViewMode" class="mt-24rpx overflow-hidden rounded-24rpx bg-white">
+      <wd-cell-group border>
+        <wd-cell title="实名认证" :value="realNameText" center />
+        <wd-cell :title="isTerminal ? '客户名称' : '企业名称'" :value="organizationText" center />
+        <wd-cell title="角色" :value="businessRoleText" center />
+        <wd-cell title="详细资料" :value="showDetails ? '收起' : '查看'" is-link center @click="showDetails = !showDetails" />
+      </wd-cell-group>
+    </view>
 
-      <template v-if="canEditProfile">
-        <wd-form :model="formData" error-type="toast" class="mt-24rpx flex flex-col gap-16rpx">
-          <wd-card custom-class="!m-0 profile-card" custom-content-class="!p-0">
-            <template #title>
-              <view class="flex items-center justify-between gap-16rpx">
-                <text class="text-30rpx text-#111827 font-900">基础资料</text>
-                <wd-tag type="primary" plain> 终端用户 </wd-tag>
-              </view>
-            </template>
-            <wd-cell-group :border="false">
-              <wd-input
-                v-model="formData.nickName"
-                label="昵称"
-                label-width="96px"
-                placeholder="请输入昵称"
-                clearable
-              />
-              <wd-input
-                v-model="formData.terminalName"
-                label="客户名称"
-                label-width="96px"
-                placeholder="请输入客户名称"
-                clearable
-              />
-              <wd-input
-                v-model="formData.phone"
-                label="联系电话"
-                label-width="96px"
-                placeholder="请输入联系电话"
-                clearable
-              />
-              <wd-input
-                v-model="formData.email"
-                label="邮箱"
-                label-width="96px"
-                placeholder="请输入邮箱"
-                clearable
-              />
-              <wd-picker
-                v-model="formData.sex"
-                label="性别"
-                label-width="96px"
-                :columns="sexOptions"
-                value-key="value"
-                label-key="label"
-              />
-              <wd-input
-                v-model="formData.areaCode"
-                label="所在地区"
-                label-width="96px"
-                placeholder="请输入所在地区"
-                clearable
-              />
-              <wd-input
-                v-model="formData.address"
-                label="联系地址"
-                label-width="96px"
-                placeholder="请输入联系地址"
-                clearable
-              />
-            </wd-cell-group>
-          </wd-card>
-
-          <wd-card custom-class="!m-0 profile-card" custom-content-class="!p-0">
-            <template #title>
-              <view class="flex items-center justify-between gap-16rpx">
-                <text class="text-30rpx text-#111827 font-900">单位资料</text>
-                <wd-tag type="primary" plain> 可完善 </wd-tag>
-              </view>
-            </template>
-            <wd-cell-group :border="false">
-              <wd-input
-                v-model="formData.fullName"
-                label="单位全称"
-                label-width="96px"
-                placeholder="请输入单位或个人主体全称"
-                clearable
-              />
-              <wd-input
-                v-model="formData.creditCode"
-                label="信用代码"
-                label-width="96px"
-                placeholder="请输入统一信用代码"
-                clearable
-              />
-              <wd-input
-                v-model="formData.companyType"
-                label="单位类型"
-                label-width="96px"
-                placeholder="如个体工商户、企业、个人"
-                clearable
-              />
-              <wd-input
-                v-model="formData.industry"
-                label="所属行业"
-                label-width="96px"
-                placeholder="请输入所属行业"
-                clearable
-              />
-              <wd-input
-                v-model="formData.establishTime"
-                label="成立时间"
-                label-width="96px"
-                placeholder="YYYY-MM-DD"
-                clearable
-              />
-            </wd-cell-group>
-          </wd-card>
-
-          <wd-card custom-class="!m-0 profile-card" custom-content-class="!p-0">
-            <template #title>
-              <view class="flex items-center justify-between gap-16rpx">
-                <text class="text-30rpx text-#111827 font-900">实名与账户</text>
-                <wd-tag type="primary" plain> 自主维护 </wd-tag>
-              </view>
-            </template>
-            <wd-cell-group :border="false">
-              <wd-input
-                v-model="formData.legalPersonName"
-                label="法人姓名"
-                label-width="96px"
-                placeholder="请输入法人或联系人姓名"
-                clearable
-              />
-              <wd-input
-                v-model="formData.legalPersonIdCard"
-                label="法人证件"
-                label-width="96px"
-                placeholder="请输入法人证件号码"
-                clearable
-              />
-              <wd-input
-                v-model="formData.bankName"
-                label="开户银行"
-                label-width="96px"
-                placeholder="请输入开户银行"
-                clearable
-              />
-              <wd-input
-                v-model="formData.bankAccount"
-                label="银行账号"
-                label-width="96px"
-                placeholder="请输入银行账号"
-                clearable
-              />
-            </wd-cell-group>
-          </wd-card>
-        </wd-form>
-
-        <view class="mt-36rpx">
-          <wd-button type="primary" block :loading="loading" @click="submit"> 保存资料 </wd-button>
+    <wd-card
+      v-if="isViewMode && showDetails"
+      custom-class="!m-0 !mt-24rpx !rounded-24rpx !overflow-hidden"
+      custom-content-class="!p-0"
+    >
+      <template #title>
+        <view class="flex items-center justify-between gap-16rpx">
+          <text class="text-30rpx text-#111827 font-900">{{ identityTitle }}</text>
+          <wd-tag v-if="isViewMode" type="primary" plain>
+            资料查看
+          </wd-tag>
         </view>
       </template>
+      <wd-cell-group :border="false">
+        <wd-cell
+          v-for="item in identityRows"
+          :key="item.title"
+          :title="item.title"
+          :value="displayValue(item.value)"
+          center
+          custom-class="!min-h-88rpx"
+          custom-title-class="!text-26rpx !text-#334155"
+          custom-value-class="!text-26rpx !text-#475569"
+        />
+      </wd-cell-group>
+    </wd-card>
 
-      <wd-card v-else custom-class="!m-0 !mt-24rpx profile-card" custom-content-class="!p-24rpx">
-        <view class="flex items-center justify-between gap-16rpx">
-          <text class="text-30rpx text-#111827 font-900">资料状态</text>
-          <wd-tag type="warning" plain> 只读 </wd-tag>
-        </view>
-        <view class="mt-14rpx text-24rpx text-#64748b leading-36rpx">
-          {{
-            isTerminal
-              ? '从服务模块进入时仅展示资料，需要修改请返回“我的”页面点击顶部编辑。'
-              : '企业账号资料由管理平台维护，小程序端仅支持查看。'
-          }}
-        </view>
-      </wd-card>
+    <template v-if="canEditProfile">
+      <wd-form :model="formData" error-type="toast" class="mt-24rpx flex flex-col gap-16rpx">
+        <wd-card custom-class="!m-0 !rounded-24rpx !overflow-hidden" custom-content-class="!p-0">
+          <template #title>
+            <view class="flex items-center justify-between gap-16rpx">
+              <text class="text-30rpx text-#111827 font-900">基础资料</text>
+              <wd-tag type="primary" plain>
+                终端用户
+              </wd-tag>
+            </view>
+          </template>
+          <wd-cell-group :border="false">
+            <wd-input
+              v-model="formData.nickName"
+              label="昵称"
+              label-width="96px"
+              placeholder="请输入昵称"
+              clearable
+            />
+            <wd-input
+              v-model="formData.terminalName"
+              label="客户名称"
+              label-width="96px"
+              placeholder="请输入客户名称"
+              clearable
+            />
+            <wd-input
+              v-model="formData.phone"
+              label="联系电话"
+              label-width="96px"
+              placeholder="请输入联系电话"
+              clearable
+            />
+            <wd-input
+              v-model="formData.email"
+              label="邮箱"
+              label-width="96px"
+              placeholder="请输入邮箱"
+              clearable
+            />
+            <wd-picker
+              v-model="formData.sex"
+              label="性别"
+              label-width="96px"
+              :columns="sexOptions"
+              value-key="value"
+              label-key="label"
+            />
+            <wd-input
+              v-model="formData.areaCode"
+              label="所在地区"
+              label-width="96px"
+              placeholder="请输入所在地区"
+              clearable
+            />
+            <wd-input
+              v-model="formData.address"
+              label="联系地址"
+              label-width="96px"
+              placeholder="请输入联系地址"
+              clearable
+            />
+          </wd-cell-group>
+        </wd-card>
+
+        <wd-card custom-class="!m-0 profile-card" custom-content-class="!p-0">
+          <template #title>
+            <view class="flex items-center justify-between gap-16rpx">
+              <text class="text-30rpx text-#111827 font-900">单位资料</text>
+              <wd-tag type="primary" plain>
+                可完善
+              </wd-tag>
+            </view>
+          </template>
+          <wd-cell-group :border="false">
+            <wd-input
+              v-model="formData.fullName"
+              label="单位全称"
+              label-width="96px"
+              placeholder="请输入单位或个人主体全称"
+              clearable
+            />
+            <wd-input
+              v-model="formData.creditCode"
+              label="信用代码"
+              label-width="96px"
+              placeholder="请输入统一信用代码"
+              clearable
+            />
+            <wd-input
+              v-model="formData.companyType"
+              label="单位类型"
+              label-width="96px"
+              placeholder="如个体工商户、企业、个人"
+              clearable
+            />
+            <wd-input
+              v-model="formData.industry"
+              label="所属行业"
+              label-width="96px"
+              placeholder="请输入所属行业"
+              clearable
+            />
+            <wd-input
+              v-model="formData.establishTime"
+              label="成立时间"
+              label-width="96px"
+              placeholder="YYYY-MM-DD"
+              clearable
+            />
+          </wd-cell-group>
+        </wd-card>
+
+        <wd-card custom-class="!m-0 profile-card" custom-content-class="!p-0">
+          <template #title>
+            <view class="flex items-center justify-between gap-16rpx">
+              <text class="text-30rpx text-#111827 font-900">实名与账户</text>
+              <wd-tag type="primary" plain>
+                自主维护
+              </wd-tag>
+            </view>
+          </template>
+          <wd-cell-group :border="false">
+            <wd-input
+              v-model="formData.legalPersonName"
+              label="法人姓名"
+              label-width="96px"
+              placeholder="请输入法人或联系人姓名"
+              clearable
+            />
+            <wd-input
+              v-model="formData.legalPersonIdCard"
+              label="法人证件"
+              label-width="96px"
+              placeholder="请输入法人证件号码"
+              clearable
+            />
+            <wd-input
+              v-model="formData.bankName"
+              label="开户银行"
+              label-width="96px"
+              placeholder="请输入开户银行"
+              clearable
+            />
+            <wd-input
+              v-model="formData.bankAccount"
+              label="银行账号"
+              label-width="96px"
+              placeholder="请输入银行账号"
+              clearable
+            />
+          </wd-cell-group>
+        </wd-card>
+      </wd-form>
+
+      <view class="mt-36rpx">
+        <wd-button type="primary" block :loading="loading" @click="submit">
+          保存资料
+        </wd-button>
+      </view>
+    </template>
+
+    <view v-if="isViewMode" class="mt-32rpx">
+      <view class="mb-16rpx px-8rpx text-24rpx text-gray-500">
+        账号与安全
+      </view>
+      <view class="overflow-hidden rounded-24rpx bg-white">
+        <wd-cell-group border>
+          <wd-cell title="手机号" :value="maskPhone(phoneText)" center />
+          <wd-cell title="邮箱" :value="emailText" center />
+          <wd-cell title="登录密码" value="重置" is-link center @click="openPassword" />
+          <wd-cell title="微信绑定" :value="binding ? '处理中…' : wechatText" :is-link="!binding" center @click="manageWechat" />
+        </wd-cell-group>
+      </view>
+      <view class="mt-16rpx px-8rpx text-22rpx text-gray-400 leading-34rpx">
+        {{ isTerminal ? '联系方式可通过顶部编辑维护。' : '企业资料与联系方式由管理平台维护。' }}预警通知请在消息中心查看。
+      </view>
+      <view class="mt-32rpx">
+        <wd-button type="danger" plain block :loading="loggingOut" :disabled="binding || loading" @click="handleLogout">
+          退出登录
+        </wd-button>
+      </view>
     </view>
+  </view>
 </template>
-
-<style lang="scss" scoped>
-.profile-hero {
-  padding: 24rpx;
-  border: 1px solid #e2e8f0;
-  border-radius: 8px;
-  background: #fff;
-  color: #111827;
-}
-
-.avatar {
-  width: 88rpx;
-  height: 88rpx;
-  border-radius: 16rpx;
-  background: #eff6ff;
-  border: 1px solid #dbeafe;
-  display: flex;
-  align-items: center;
-  justify-content: center;
-  overflow: hidden;
-  flex-shrink: 0;
-  font-size: 40rpx;
-  font-weight: 700;
-  color: #2563eb;
-}
-
-.role-pill {
-  flex-shrink: 0;
-  padding: 5rpx 14rpx;
-  border-radius: 999rpx;
-  background: #eff6ff;
-  border: 1px solid #bfdbfe;
-  font-size: 20rpx;
-  color: #2563eb;
-}
-
-.summary-grid {
-  display: grid;
-  grid-template-columns: repeat(2, minmax(0, 1fr));
-  gap: 16rpx;
-  margin-top: 28rpx;
-}
-
-.summary-item {
-  min-width: 0;
-  padding: 14rpx 16rpx;
-  border: 1px solid #edf2f7;
-  border-radius: 8px;
-  background: #f8fafc;
-}
-
-.summary-label {
-  display: block;
-  font-size: 21rpx;
-  color: #64748b;
-}
-
-.summary-value {
-  display: block;
-  margin-top: 6rpx;
-  overflow: hidden;
-  text-overflow: ellipsis;
-  white-space: nowrap;
-  font-size: 25rpx;
-  color: #111827;
-  font-weight: 800;
-}
-
-:deep(.profile-card) {
-  border-radius: 8px !important;
-  overflow: hidden;
-}
-</style>
diff --git a/app/src/router/interceptor.ts b/app/src/router/interceptor.ts
index e555f93..77be614 100644
--- a/app/src/router/interceptor.ts
+++ b/app/src/router/interceptor.ts
@@ -11,6 +11,7 @@ import { isPageTabbar, tabbarStore } from '@/tabbar/store'
 import { getAllPages, getLastPage, HOME_PAGE, parseUrlToObj } from '@/utils/index'
 import { EXCLUDE_LOGIN_PATH_LIST, isNeedLoginMode, LOGIN_PAGE, LOGIN_PAGE_ENABLE_IN_MP } from './config'
 import { appRouteFeatureMap } from './appPermission'
+import { isV101HiddenRoute } from '@/constant/release'
 
 export const FG_LOG_ENABLE = false
 
@@ -62,6 +63,13 @@ export const navigateToInterceptor = {
     // 处理直接进入路由非首页时，tabbarIndex 不正确的问题
     tabbarStore.setAutoCurIdx(path)
 
+    if (isV101HiddenRoute(path)) {
+      uni.showToast({ title: '当前版本暂未开放此功能', icon: 'none' })
+      if (path !== HOME_PAGE)
+        uni.switchTab({ url: HOME_PAGE })
+      return false
+    }
+
     // 小程序里面使用平台自带的登录，则不走下面的逻辑
     if (isMp && !LOGIN_PAGE_ENABLE_IN_MP) {
       return true // 明确表示允许路由继续执行
diff --git a/app/src/store/index.ts b/app/src/store/index.ts
index d659a08..e490556 100644
--- a/app/src/store/index.ts
+++ b/app/src/store/index.ts
@@ -15,8 +15,8 @@ setActivePinia(store)
 
 export default store
 
+export * from './lastQueriedCard'
+export * from './message'
 // 模块统一导出
 export * from './token'
 export * from './user'
-export * from './message'
-export * from './lastQueriedCard'
diff --git a/app/src/store/message.test.ts b/app/src/store/message.test.ts
new file mode 100644
index 0000000..6ccb52d
--- /dev/null
+++ b/app/src/store/message.test.ts
@@ -0,0 +1,54 @@
+import { createPinia, setActivePinia } from 'pinia'
+import { nextTick, reactive } from 'vue'
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import { useMessageStore } from './message'
+
+const mocks = vi.hoisted(() => ({ fetch: vi.fn(), token: { validToken: 'account-a', hasLogin: true, updateNowTime: () => mocks.token } }))
+vi.mock('@/api/message', () => ({ getMessageCenter: mocks.fetch }))
+vi.mock('./token', () => ({ useTokenStore: () => mocks.token }))
+vi.mock('@/tabbar/store', () => ({ tabbarList: { value: [] }, tabbarStore: { setTabbarItemBadge: vi.fn() } }))
+
+beforeEach(() => {
+  setActivePinia(createPinia())
+  mocks.fetch.mockReset()
+  mocks.token = reactive({ validToken: 'account-a', hasLogin: true, updateNowTime: () => mocks.token })
+})
+
+describe('未读消息账号隔离', () => {
+  it('同一账号的并发刷新合并为一次请求', async () => {
+    mocks.fetch.mockResolvedValue({ totalUnread: 3 })
+    const store = useMessageStore()
+    await Promise.all([store.refreshUnreadCount(), store.refreshUnreadCount()])
+    expect(mocks.fetch).toHaveBeenCalledTimes(1)
+    expect(store.unreadCount).toBe(3)
+  })
+  it('退出后旧请求不能写回未读数量', async () => {
+    let complete: (value: { totalUnread: number }) => void = () => {}
+    mocks.fetch.mockImplementation(() => new Promise((resolve) => {
+      complete = resolve
+    }))
+    const store = useMessageStore()
+    const pending = store.refreshUnreadCount()
+    mocks.token.validToken = ''
+    mocks.token.hasLogin = false
+    await nextTick()
+    complete({ totalUnread: 9 })
+    await pending
+    expect(store.unreadCount).toBe(0)
+  })
+  it('切换账号不会复用旧请求或覆盖新账号结果', async () => {
+    let complete: (value: { totalUnread: number }) => void = () => {}
+    mocks.fetch.mockImplementationOnce(() => new Promise((resolve) => {
+      complete = resolve
+    })).mockResolvedValueOnce({ totalUnread: 2 })
+    const store = useMessageStore()
+    const oldRequest = store.refreshUnreadCount()
+    mocks.token.validToken = 'account-b'
+    await nextTick()
+    await store.refreshUnreadCount()
+    complete({ totalUnread: 8 })
+    await oldRequest
+    expect(store.unreadCount).toBe(2)
+    expect(mocks.fetch).toHaveBeenCalledTimes(2)
+  })
+})
diff --git a/app/src/store/message.ts b/app/src/store/message.ts
index cf9672b..e88c8fd 100644
--- a/app/src/store/message.ts
+++ b/app/src/store/message.ts
@@ -5,8 +5,6 @@ import { defineStore } from 'pinia'
 import { computed, ref, watch } from 'vue'
 import { useTokenStore } from './token'
 
-let refreshTask: Promise<number> | null = null
-
 function normalizeUnreadCount(value: number) {
   const count = Number(value)
   if (!Number.isFinite(count))
@@ -25,6 +23,9 @@ export const useMessageStore = defineStore(
     const unreadCount = ref(0)
     const lastSyncedAt = ref(0)
     const syncing = ref(false)
+    let refreshTask: Promise<number> | null = null
+    let refreshToken = ''
+    let requestVersion = 0
 
     const hasUnread = computed(() => unreadCount.value > 0)
     const tabbarBadge = computed(() => (unreadCount.value > 99 ? 100 : unreadCount.value))
@@ -53,12 +54,14 @@ export const useMessageStore = defineStore(
     }
 
     watch(
-      () => tokenStore.hasLogin,
-      (loggedIn) => {
-        if (!loggedIn)
-          resetUnreadCount()
+      () => tokenStore.validToken,
+      () => {
+        requestVersion++
+        refreshTask = null
+        syncing.value = false
+        resetUnreadCount()
       },
-      { immediate: true },
+      { immediate: true, flush: 'sync' },
     )
 
     async function refreshUnreadCount() {
@@ -67,9 +70,12 @@ export const useMessageStore = defineStore(
         return 0
       }
 
-      if (refreshTask)
+      const token = tokenStore.validToken
+      if (refreshTask && refreshToken === token)
         return refreshTask
 
+      refreshToken = token
+      const version = ++requestVersion
       syncing.value = true
       refreshTask = (async () => {
         try {
@@ -77,6 +83,8 @@ export const useMessageStore = defineStore(
             page: 1,
             pageSize: 1,
           })
+          if (version !== requestVersion || tokenStore.validToken !== token)
+            return unreadCount.value
           return setUnreadCount(Number(res.totalUnread || 0))
         }
         catch (error) {
@@ -85,8 +93,10 @@ export const useMessageStore = defineStore(
           return unreadCount.value
         }
         finally {
-          syncing.value = false
-          refreshTask = null
+          if (version === requestVersion) {
+            syncing.value = false
+            refreshTask = null
+          }
         }
       })()
 
diff --git a/app/src/store/user.test.ts b/app/src/store/user.test.ts
new file mode 100644
index 0000000..3fea141
--- /dev/null
+++ b/app/src/store/user.test.ts
@@ -0,0 +1,36 @@
+import { createPinia, setActivePinia } from 'pinia'
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import { getUserInfo } from '@/api/login'
+import { getAccessCodes } from '@/api/system'
+import { hasUserPermission } from '@/utils/permission'
+import { useUserStore } from './user'
+
+vi.mock('@/api/login', () => ({ getUserInfo: vi.fn() }))
+vi.mock('@/api/system', () => ({ getAccessCodes: vi.fn() }))
+const allocateCodes = ['cpm:iot:tSimCardAllocate:targets', 'cpm:iot:tSimCardAllocate:input:prepare', 'cpm:iot:tSimCardAllocate:batch:submit']
+beforeEach(() => {
+  setActivePinia(createPinia())
+  vi.resetAllMocks()
+  vi.mocked(getUserInfo).mockResolvedValue({ userId: 12, username: 'agent', deptId: 100, userType: 'sys_user', appAccess: { configured: true, features: ['card:allocate'], permissions: allocateCodes } } as any)
+})
+describe('current console grants', () => {
+  it('revokes stale feature grants and restores newly granted permissions', async () => {
+    const store = useUserStore()
+    vi.mocked(getAccessCodes).mockResolvedValue(allocateCodes)
+    await store.fetchUserInfo()
+    expect(hasUserPermission(store.userInfo, 'allocate')).toBe(true)
+    vi.mocked(getAccessCodes).mockResolvedValue(['cpc:current:user'])
+    await store.fetchUserInfo()
+    expect(hasUserPermission(store.userInfo, 'allocate')).toBe(false)
+    vi.mocked(getAccessCodes).mockResolvedValue(allocateCodes)
+    await store.fetchUserInfo()
+    expect(hasUserPermission(store.userInfo, 'allocate')).toBe(true)
+  })
+  it('fails closed on permission refresh failure', async () => {
+    const store = useUserStore()
+    store.setAccessCodes(allocateCodes)
+    vi.mocked(getAccessCodes).mockRejectedValue(new Error('offline'))
+    await expect(store.fetchUserInfo()).rejects.toThrow('offline')
+    expect(hasUserPermission(store.userInfo, 'allocate')).toBe(false)
+  })
+})
diff --git a/app/src/store/user.ts b/app/src/store/user.ts
index d2e052d..5aa810b 100644
--- a/app/src/store/user.ts
+++ b/app/src/store/user.ts
@@ -79,7 +79,15 @@ export const useUserStore = defineStore(
     }
 
     const setAccessCodes = (codes?: readonly string[] | null) => {
-      userInfo.value.accessCodes = normalizeAccessCodes(codes)
+      const accessCodes = normalizeAccessCodes(codes)
+      userInfo.value.accessCodes = accessCodes
+      userInfo.value.appAccess = {
+        configured: true,
+        permissions: accessCodes,
+        features: [],
+        routes: [],
+        menus: [],
+      }
     }
 
     const setUserAvatar = (avatar: string) => {
@@ -103,18 +111,17 @@ export const useUserStore = defineStore(
 
       fetchUserInfoPromise = (async () => {
         const res = await getUserInfo()
-        const previousUserId = Number(userInfo.value.userId || 0)
-        const nextUserId = Number(res.userId || 0)
-        let accessCodes = previousUserId > 0 && previousUserId === nextUserId
-          ? userInfo.value.accessCodes || []
-          : []
+        // 先获取当前权限，避免旧的功能授权覆盖控制台撤销结果。
+        let accessCodes: string[]
         try {
           accessCodes = await getAccessCodes({ isCache: false })
         }
-        catch {
-          // 权限码接口失败时保留同一用户的旧权限，避免页面入口闪烁。
+        catch (error) {
+          setAccessCodes([])
+          throw error
         }
         setUserInfo({ ...res, accessCodes })
+        setAccessCodes(accessCodes)
         return userInfo.value
       })()
 
diff --git a/app/src/tabbar/config.ts b/app/src/tabbar/config.ts
index cb15151..b45e417 100644
--- a/app/src/tabbar/config.ts
+++ b/app/src/tabbar/config.ts
@@ -1,5 +1,6 @@
 import type { TabBar } from '@uni-helper/vite-plugin-uni-pages'
 import type { CustomTabBarItem, NativeTabBarItem } from './types'
+import { V101_RELEASE } from '../constant/release'
 
 /**
  * tabbar 选择的策略，更详细的介绍见 tabbar.md 文件
@@ -39,7 +40,7 @@ export const nativeTabbarList: NativeTabBarItem[] = [
 
 // TODO: 3/3. 使用 CUSTOM_TABBAR 时，更新下面的 tabbar 配置
 // 如果需要配置鼓包，需要在 'tabbar/store.ts' 里面设置，最后在 `tabbar/index.vue` 里面更改鼓包的图片
-export const customTabbarList: CustomTabBarItem[] = [
+const v101CustomTabbarList: CustomTabBarItem[] = [
   {
     text: '首页',
     pagePath: 'pages/home/index',
@@ -56,12 +57,6 @@ export const customTabbarList: CustomTabBarItem[] = [
     iconType: 'uiLib',
     icon: 'nav',
   },
-  {
-    pagePath: 'pages/business/index',
-    text: '办理',
-    iconType: 'uiLib',
-    icon: 'failpayment',
-  },
   {
     pagePath: 'pages/user/index',
     text: '我的',
@@ -96,6 +91,19 @@ export const customTabbarList: CustomTabBarItem[] = [
   // },
 ]
 
+export const customTabbarList: CustomTabBarItem[] = V101_RELEASE.showBusinessTab
+  ? [
+      ...v101CustomTabbarList.slice(0, 2),
+      {
+        pagePath: 'pages/business/index',
+        text: '办理',
+        iconType: 'uiLib',
+        icon: 'failpayment',
+      },
+      ...v101CustomTabbarList.slice(2),
+    ]
+  : v101CustomTabbarList
+
 /**
  * 是否启用 tabbar 缓存
  * NATIVE_TABBAR(1) 和 CUSTOM_TABBAR(2) 时，需要tabbar缓存
@@ -120,7 +128,7 @@ export const customTabbarEnable = [TABBAR_STRATEGY_MAP.CUSTOM_TABBAR].includes(
 export const needHideNativeTabbar = selectedTabbarStrategy === TABBAR_STRATEGY_MAP.CUSTOM_TABBAR
 
 const _tabbarList = customTabbarEnable
-  ? customTabbarList.map((item) => ({ text: item.text, pagePath: item.pagePath }))
+  ? customTabbarList.map(item => ({ text: item.text, pagePath: item.pagePath }))
   : nativeTabbarList
 export const tabbarList = customTabbarEnable ? customTabbarList : nativeTabbarList
 
diff --git a/app/src/tabbar/index.vue b/app/src/tabbar/index.vue
index 5b1b815..26f9957 100644
--- a/app/src/tabbar/index.vue
+++ b/app/src/tabbar/index.vue
@@ -132,7 +132,7 @@ onShow(() => {
 
 .tabbar-list {
   display: grid;
-  grid-template-columns: repeat(4, minmax(0, 1fr));
+  grid-template-columns: repeat(v-bind('tabbarList.length'), minmax(0, 1fr));
   align-items: end;
   height: 50px;
 }
diff --git a/app/src/types/components.d.ts b/app/src/types/components.d.ts
index 44c7989..2c4fc2b 100644
--- a/app/src/types/components.d.ts
+++ b/app/src/types/components.d.ts
@@ -21,15 +21,20 @@ declare module 'vue' {
     WdIcon: typeof import('@wot-ui/ui/components/wd-icon/wd-icon.vue')['default']
     WdInput: typeof import('@wot-ui/ui/components/wd-input/wd-input.vue')['default']
     WdLoading: typeof import('@wot-ui/ui/components/wd-loading/wd-loading.vue')['default']
-    WdNavbar: typeof import('@wot-ui/ui/components/wd-navbar/wd-navbar.vue')['default']
     WdPicker: typeof import('@wot-ui/ui/components/wd-picker/wd-picker.vue')['default']
     WdPopup: typeof import('@wot-ui/ui/components/wd-popup/wd-popup.vue')['default']
     WdProgress: typeof import('@wot-ui/ui/components/wd-progress/wd-progress.vue')['default']
+    WdRate: typeof import('@wot-ui/ui/components/wd-rate/wd-rate.vue')['default']
     WdSearch: typeof import('@wot-ui/ui/components/wd-search/wd-search.vue')['default']
     WdSegmented: typeof import('@wot-ui/ui/components/wd-segmented/wd-segmented.vue')['default']
     WdSkeleton: typeof import('@wot-ui/ui/components/wd-skeleton/wd-skeleton.vue')['default']
+    WdStep: typeof import('@wot-ui/ui/components/wd-step/wd-step.vue')['default']
+    WdSteps: typeof import('@wot-ui/ui/components/wd-steps/wd-steps.vue')['default']
     WdSwitch: typeof import('@wot-ui/ui/components/wd-switch/wd-switch.vue')['default']
+    WdTab: typeof import('@wot-ui/ui/components/wd-tab/wd-tab.vue')['default']
+    WdTabs: typeof import('@wot-ui/ui/components/wd-tabs/wd-tabs.vue')['default']
     WdTag: typeof import('@wot-ui/ui/components/wd-tag/wd-tag.vue')['default']
     WdTextarea: typeof import('@wot-ui/ui/components/wd-textarea/wd-textarea.vue')['default']
+    WorkOrderAttachments: typeof import('./../components/WorkOrderAttachments.vue')['default']
   }
 }
diff --git a/app/src/types/uni-pages.d.ts b/app/src/types/uni-pages.d.ts
index 66f94c8..c1deacd 100644
--- a/app/src/types/uni-pages.d.ts
+++ b/app/src/types/uni-pages.d.ts
@@ -35,7 +35,10 @@ type _LocationUrl =
   "/pages/user/views/about/index" |
   "/pages/user/views/agreement/index" |
   "/pages/user/views/contact/index" |
+  "/pages/user/views/executionLog/index" |
+  "/pages/user/views/executionLogDetail/index" |
   "/pages/user/views/feedback/index" |
+  "/pages/user/views/manual/index" |
   "/pages/user/views/notification/index" |
   "/pages/user/views/profile/index" |
   "/pages/user/views/realName/index";
diff --git a/app/src/uni.scss b/app/src/uni.scss
index 6179458..7b1e721 100644
--- a/app/src/uni.scss
+++ b/app/src/uni.scss
@@ -13,7 +13,7 @@
  * 如果你的项目同样使用了scss预处理，你也可以直接在你的 scss 代码中使用如下变量，同时无需 import 这个文件
  */
 
-/* 颜色变量（雪羊科技蓝 主题） */
+/* 颜色变量（示例科技蓝 主题） */
 
 /* 行为相关颜色 */
 $uni-color-primary: #2563eb;
diff --git a/app/src/utils/allocateStatus.ts b/app/src/utils/allocateStatus.ts
new file mode 100644
index 0000000..6d73cca
--- /dev/null
+++ b/app/src/utils/allocateStatus.ts
@@ -0,0 +1,33 @@
+export function allocateResultStatus(status: number) {
+  switch (status) {
+    case 2: return 'processing'
+    case 3: return 'success'
+    case 4: return 'failed'
+    case 5: return 'partial_success'
+    default: return 'pending'
+  }
+}
+
+export function allocateStatusPresentation(status?: string, accepted = true) {
+  switch (status) {
+    case 'unknown': return { title: '提交结果待核查', type: 'warning' as const, description: '未收到受理结果，后台可能已创建任务。请核查执行记录和卡片归属，勿直接重复提交。' }
+    case 'prepared': return { title: '待确认提交', type: 'warning' as const, description: '批次已准备，尚未确认执行；请提交原批次，不要重复创建。' }
+    case 'success': return { title: '划拨完成', type: 'success' as const, description: '本批卡片已划拨给目标客户，可继续办理新的划拨。' }
+    case 'failed': return { title: accepted ? '划拨失败' : '校验未通过', type: 'danger' as const, description: accepted ? '本批划拨未完成，请查看失败原因，核对卡片后重新发起。' : '本次任务未受理，请调整卡片或目标客户后重新提交。' }
+    case 'partial_success': return { title: '结果待核查', type: 'warning' as const, description: '整批划拨出现异常结果，请先核查明细和卡片归属，不要重复提交。' }
+    case 'processing': return { title: '正在划拨', type: 'primary' as const, description: '后台正在校验并整批执行，离开页面不影响任务。请勿重复发起。' }
+    case 'pending': return { title: accepted ? '等待后台处理' : '提交结果待确认', type: 'warning' as const, description: accepted ? '任务已受理，后台将自动处理。等待超时不代表失败，可刷新结果。' : '暂未收到受理结果，请刷新查询或重试原请求，不会新建第二个任务。' }
+    default: return { title: '待提交', type: 'default' as const, description: '选择目标客户和卡片，确认后提交整批划拨。' }
+  }
+}
+
+export function allocateDetailStatus(status: number, batchStatus?: number) {
+  if (status === 2) {
+    if (batchStatus === 3)
+      return '已划拨'
+    if (batchStatus === 4)
+      return '校验通过 · 整批未完成'
+    return '校验通过 · 待整批完成'
+  }
+  return ['待校验', '校验中', '', '校验失败'][status] || '状态待确认'
+}
diff --git a/app/src/utils/autoCreateRoutePath.ts b/app/src/utils/autoCreateRoutePath.ts
index 1436508..363815a 100644
--- a/app/src/utils/autoCreateRoutePath.ts
+++ b/app/src/utils/autoCreateRoutePath.ts
@@ -88,13 +88,15 @@ async function writeFile(filepath: string, content: string) {
     const prettierConfig = await prettier.resolveConfig(filepath)
     const formattedContent = await prettier.format(content, {
       ...prettierConfig,
+      quoteProps: 'consistent',
       filepath,
     })
     fs.writeFileSync(filepath, formattedContent, {
       encoding: 'utf-8',
     })
     console.log(`✅ 页面路径常量文件已成功生成：${filepath}`)
-  } catch (error: any) {
+  }
+  catch (error: any) {
     console.error(`❌ 生成页面路径常量文件失败：${error.message}`)
     console.error('错误详情：', error)
   }
diff --git a/app/src/utils/cardRecognition.ts b/app/src/utils/cardRecognition.ts
index fd6a39b..fdbd854 100644
--- a/app/src/utils/cardRecognition.ts
+++ b/app/src/utils/cardRecognition.ts
@@ -2,37 +2,19 @@ import type { CardRecognitionRes } from '@/api/types/card'
 
 export function chooseCardImage() {
   return new Promise<string>((resolve, reject) => {
-    // #ifdef MP-WEIXIN
-    uni.chooseMedia({
-      count: 1,
-      mediaType: ['image'],
-      sourceType: ['camera', 'album'],
-      success: (response) => {
-        const filePath = response.tempFiles?.[0]?.tempFilePath
-        if (filePath)
-          resolve(filePath)
-        else
-          reject({ message: '没有选择图片' })
-      },
-      fail: (error) => reject({ message: error.errMsg || '取消选择图片' }),
-    })
-    // #endif
-
-    // #ifndef MP-WEIXIN
     uni.chooseImage({
       count: 1,
-      sizeType: ['compressed', 'original'],
+      sizeType: ['compressed'],
       sourceType: ['camera', 'album'],
       success: (response) => {
         const filePath = response.tempFilePaths?.[0]
         if (filePath)
           resolve(filePath)
         else
-          reject({ message: '没有选择图片' })
+          reject(new Error('没有选择图片'))
       },
-      fail: (error) => reject({ message: error.errMsg || '取消选择图片' }),
+      fail: error => reject(new Error(error.errMsg || '取消选择图片')),
     })
-    // #endif
   })
 }
 
diff --git a/app/src/utils/index.ts b/app/src/utils/index.ts
index e622263..b953a2a 100644
--- a/app/src/utils/index.ts
+++ b/app/src/utils/index.ts
@@ -206,110 +206,3 @@ export const isDoubleTokenMode = import.meta.env.VITE_AUTH_MODE === 'double'
  * 通常为 /pages/index/index
  */
 export const HOME_PAGE = `/${(pages as PageMetaDatum[]).find(page => page.type === 'home')?.path || (pages as PageMetaDatum[])[0].path}`
-
-export type WechatSubscribeStatus = 'accepted' | 'rejected' | 'blocked' | 'skipped' | 'failed'
-
-export interface WechatSubscribeResult {
-  status: WechatSubscribeStatus
-  message: string
-  errMsg?: string
-}
-
-export function shouldShowWechatSubscribeNotice(result: WechatSubscribeResult) {
-  return result.status !== 'accepted' && result.status !== 'skipped'
-}
-
-export function wechatSubscribeSaveMessage(result: WechatSubscribeResult) {
-  if (result.status === 'accepted')
-    return '已开启微信订阅提醒，后续触发预警时会通过微信通知。'
-  if (result.status === 'skipped')
-    return ''
-  return result.message
-}
-
-export function shouldGuideWechatSubscribeSettings(result: WechatSubscribeResult) {
-  return result.status === 'rejected' || result.status === 'blocked'
-}
-
-export function guideWechatSubscribeSettings(result: WechatSubscribeResult) {
-  if (!shouldGuideWechatSubscribeSettings(result))
-    return
-
-  const openSetting = (uni as any).openSetting
-  uni.showModal({
-    title: '重新开启微信提醒',
-    content: result.status === 'blocked'
-      ? '微信订阅提醒已关闭，请前往小程序设置重新开启通知权限。开启后返回本页面，再点击一次申请。'
-      : '你之前取消了微信订阅授权，请前往小程序设置重新开启通知权限。开启后返回本页面，再点击一次申请。',
-    confirmText: '去设置',
-    cancelText: '稍后',
-    success: (modalResult) => {
-      if (modalResult.confirm && typeof openSetting === 'function')
-        openSetting({ withSubscriptions: true })
-    },
-  })
-}
-
-export async function requestWechatSubscribeMessage(
-  templateId: string,
-  templateReady: boolean,
-): Promise<WechatSubscribeResult> {
-  if (!templateReady || !templateId) {
-    return {
-      status: 'skipped',
-      message: '微信订阅模板未配置，已跳过订阅授权。',
-    }
-  }
-
-  const requestSubscribeMessage = (uni as any).requestSubscribeMessage
-  if (typeof requestSubscribeMessage !== 'function') {
-    return {
-      status: 'skipped',
-      message: '当前环境不支持微信订阅消息，请在微信小程序内开启提醒。',
-    }
-  }
-
-  return new Promise((resolve) => {
-    requestSubscribeMessage({
-      tmplIds: [templateId],
-      success: (res: Record<string, string>) => {
-        const result = res?.[templateId]
-        if (result === 'accept') {
-          resolve({
-            status: 'accepted',
-            message: '已开启微信订阅提醒。',
-          })
-          return
-        }
-        if (result === 'reject') {
-          resolve({
-            status: 'rejected',
-            message: '未开启微信订阅，本次配置会保存，但可能无法收到微信提醒。',
-          })
-          return
-        }
-        if (result === 'ban') {
-          resolve({
-            status: 'blocked',
-            message: '微信订阅消息已被关闭，请在小程序设置中开启通知权限后重试。',
-          })
-          return
-        }
-        resolve({
-          status: 'failed',
-          message: '微信订阅授权状态未知，本次配置会保存，请稍后在小程序内重试订阅。',
-        })
-      },
-      fail: (error: { errMsg?: string }) => {
-        const errMsg = error?.errMsg?.trim()
-        resolve({
-          status: 'failed',
-          message: errMsg
-            ? `微信订阅授权失败：${errMsg}`
-            : '微信订阅授权失败，本次配置会保存，请稍后重试。',
-          errMsg,
-        })
-      },
-    })
-  })
-}
diff --git a/app/src/utils/lifecycleBatch.ts b/app/src/utils/lifecycleBatch.ts
index 18a2e05..288ee18 100644
--- a/app/src/utils/lifecycleBatch.ts
+++ b/app/src/utils/lifecycleBatch.ts
@@ -111,13 +111,36 @@ function buildLifecycleBatchContent(batchNo: string, batch: LifecycleBatchLike,
   ]
   if (typeof batch.quantity === 'number' && batch.quantity > 0)
     lines.push(`处理进度：${batch.successCount || 0} 成功 / ${batch.failCount || 0} 失败 / ${batch.quantity} 总数`)
-  if (batch.failReason)
-    lines.push(`失败原因：${batch.failReason}`)
+  const failReason = lifecycleBatchFailReason(batch.failReason)
+  if (failReason)
+    lines.push(`失败原因：${failReason}`)
   if (!isLifecycleBatchFinished(status))
     lines.push('后台仍在执行，请稍后刷新卡片状态')
   return lines.join('\n')
 }
 
+function lifecycleBatchFailReason(reason?: string) {
+  const text = String(reason || '').trim()
+  if (!text)
+    return ''
+  const lower = text.toLowerCase()
+  const internalMarkers = [
+    'save data service detail',
+    'save lifecycle detail',
+    'update `',
+    'insert into',
+    'delete from',
+    'select ',
+    'error 10',
+    'sqlstate',
+    'column \'',
+    'stack:',
+  ]
+  if (text.length > 160 || internalMarkers.some(marker => lower.includes(marker)))
+    return '后台执行失败，请稍后重试；如持续失败，请联系管理员并提供批次号'
+  return text
+}
+
 function delay(ms: number) {
   return new Promise(resolve => setTimeout(resolve, ms))
 }
diff --git a/app/src/utils/loginNavigation.test.ts b/app/src/utils/loginNavigation.test.ts
new file mode 100644
index 0000000..8fa5483
--- /dev/null
+++ b/app/src/utils/loginNavigation.test.ts
@@ -0,0 +1,40 @@
+import { describe, expect, it, vi } from 'vitest'
+import { navigateAfterLogin, phoneLoginDestination } from './loginNavigation'
+import { V101_RELEASE, isV101HiddenRoute } from '@/constant/release'
+
+const home = '/pages/home/index'
+
+describe('login navigation', () => {
+  it('routes phone accounts to home instead of the source page', () => {
+    expect(phoneLoginDestination('13800008000', '/pages/user/index', home)).toBe(home)
+    expect(phoneLoginDestination('agent01', '/pages/user/index', home)).toBe('/pages/user/index')
+  })
+
+  it('navigates to the home tab and falls back when switchTab fails', () => {
+    const navigator = { switchTab: vi.fn(), reLaunch: vi.fn() }
+    navigateAfterLogin(home, home, () => true, navigator)
+    expect(navigator.switchTab).toHaveBeenCalledWith({ url: home, fail: expect.any(Function) })
+    navigator.switchTab.mock.calls[0][0].fail()
+    expect(navigator.reLaunch).toHaveBeenCalledWith({ url: home })
+  })
+
+  it('preserves a non-tab destination for username login', () => {
+    const navigator = { switchTab: vi.fn(), reLaunch: vi.fn() }
+    navigateAfterLogin('/detail', home, () => false, navigator)
+    expect(navigator.reLaunch).toHaveBeenCalledWith({ url: '/detail' })
+    expect(navigator.switchTab).not.toHaveBeenCalled()
+  })
+
+  it('relaunches the home page after login with a custom tabbar', () => {
+    const navigator = { switchTab: vi.fn(), reLaunch: vi.fn() }
+    navigateAfterLogin(home, home, () => true, navigator, false)
+    expect(navigator.reLaunch).toHaveBeenCalledWith({ url: home })
+    expect(navigator.switchTab).not.toHaveBeenCalled()
+  })
+
+  it('keeps registration and unreleased warning entries closed', () => {
+    expect(V101_RELEASE.showRegister).toBe(false)
+    expect(V101_RELEASE.showUserBusinessEntries).toBe(false)
+    expect(isV101HiddenRoute('/pages/business/views/warning/index')).toBe(true)
+  })
+})
diff --git a/app/src/utils/loginNavigation.ts b/app/src/utils/loginNavigation.ts
new file mode 100644
index 0000000..e4447c4
--- /dev/null
+++ b/app/src/utils/loginNavigation.ts
@@ -0,0 +1,16 @@
+interface LoginNavigator {
+  switchTab: (options: { url: string, fail: () => void }) => unknown
+  reLaunch: (options: { url: string }) => unknown
+}
+
+export function phoneLoginDestination(account: string, redirect: string, home: string) {
+  return /^1[3-9]\d{9}$/.test(account.trim()) ? home : redirect
+}
+
+export function navigateAfterLogin(target: string, home: string, isTab: (path: string) => boolean, navigator: LoginNavigator, nativeTabbar = true) {
+  if (nativeTabbar && isTab(target)) {
+    navigator.switchTab({ url: target, fail: () => navigator.reLaunch({ url: home }) })
+    return
+  }
+  navigator.reLaunch({ url: target })
+}
diff --git a/app/src/utils/permission.ts b/app/src/utils/permission.ts
index dcce954..5cadff5 100644
--- a/app/src/utils/permission.ts
+++ b/app/src/utils/permission.ts
@@ -231,6 +231,10 @@ const FEATURE_RULES: FeatureRule[] = [
     feature: 'message:view',
     permissions: ['cpc:current:user', 'cpm:system:notice:list'],
   },
+  { feature: 'workorder:reply', permissions: ['cpm:gen:tWoCommunication:message'] },
+  { feature: 'workorder:resolve', permissions: ['cpm:gen:tWoMain:resolve'] },
+  { feature: 'workorder:transfer', permissions: ['cpm:gen:tWoMain:transfer'] },
+  { feature: 'workorder:close', permissions: ['cpm:gen:tWoMain:close'] },
   {
     feature: 'workorder:list',
     permissions: ['cpm:gen:tWoMain:list'],
@@ -578,3 +582,8 @@ export function canUseRenewPermission(userInfo?: Partial<IUserInfoRes> | null) {
 export function canSubmitRenewPermission(userInfo?: Partial<IUserInfoRes> | null) {
   return hasUserPermission(userInfo, 'renewSubmit')
 }
+
+// 批次日志直接沿用控制台权限标识，不使用历史功能授权兜底。
+export function hasBatchExecutionLogPermission(userInfo: Partial<IUserInfoRes> | null | undefined, action: 'list' | 'summary' | 'detailList') {
+  return isSuperAdminUser(userInfo) || hasAccessCode(userInfo?.accessCodes, `cpm:common:batchExecutionLog:${action}`)
+}
diff --git a/app/src/utils/userIdentity.test.ts b/app/src/utils/userIdentity.test.ts
new file mode 100644
index 0000000..8794c56
--- /dev/null
+++ b/app/src/utils/userIdentity.test.ts
@@ -0,0 +1,18 @@
+import { describe, expect, it } from 'vitest'
+import { isTopLevelEnterpriseUserInfo } from './userIdentity'
+
+describe('诊断企业层级', () => {
+  it('顶级企业运营人员不依赖管理员角色名称', () => {
+    expect(isTopLevelEnterpriseUserInfo({ roleName: '运营', isTopLevelEnterprise: true })).toBe(true)
+  })
+  it('下级管理员不能按角色名称或旧身份绕过服务端标识', () => {
+    expect(isTopLevelEnterpriseUserInfo({ roleName: '管理员', isTopLevelEnterprise: false })).toBe(false)
+    expect(isTopLevelEnterpriseUserInfo({ roleName: '管理员' })).toBe(false)
+    expect(isTopLevelEnterpriseUserInfo({ username: 'admin', isTopLevelEnterprise: false })).toBe(false)
+  })
+  it('终端、匿名和缺少层级的企业默认不放行', () => {
+    expect(isTopLevelEnterpriseUserInfo({ isTerminal: true, isTopLevelEnterprise: true })).toBe(false)
+    expect(isTopLevelEnterpriseUserInfo()).toBe(false)
+    expect(isTopLevelEnterpriseUserInfo({ roleName: '运营' })).toBe(false)
+  })
+})
diff --git a/app/src/utils/userIdentity.ts b/app/src/utils/userIdentity.ts
index 90c3a01..e206626 100644
--- a/app/src/utils/userIdentity.ts
+++ b/app/src/utils/userIdentity.ts
@@ -67,6 +67,15 @@ export function isAdminUserInfo(userInfo?: Partial<IUserInfoRes> | null) {
     || hasRoleSignal(userInfo, ADMIN_ROLE_PATTERN)
 }
 
+export function isTopLevelEnterpriseUserInfo(userInfo?: Partial<IUserInfoRes> | null) {
+  if (!userInfo || isTerminalUserInfo(userInfo))
+    return false
+  if (typeof userInfo.isTopLevelEnterprise === 'boolean')
+    return userInfo.isTopLevelEnterprise
+  // 旧缓存仅允许明确的超级管理员，不能按角色名称放行下级企业。
+  return Number(userInfo.userId) === 1 || userInfo.username === 'admin'
+}
+
 export function isAgentUserInfo(userInfo?: Partial<IUserInfoRes> | null) {
   if (!userInfo || isTerminalUserInfo(userInfo) || isAdminUserInfo(userInfo))
     return false
diff --git a/app/src/utils/workOrderAttachment.test.ts b/app/src/utils/workOrderAttachment.test.ts
new file mode 100644
index 0000000..eb2f809
--- /dev/null
+++ b/app/src/utils/workOrderAttachment.test.ts
@@ -0,0 +1,41 @@
+import { describe, expect, it } from 'vitest'
+import { isWorkOrderImage, workOrderAttachmentFilename, workOrderAttachmentName } from './workOrderAttachment'
+
+describe('工单附件名称', () => {
+  it('优先显示原始文件名，而不是存储随机名', () => {
+    expect(workOrderAttachmentName('https://files/random.pdf', '排查说明.pdf')).toBe('排查说明.pdf')
+    expect(workOrderAttachmentName('random.xlsx', 'C:\\fakepath\\资费表.xlsx')).toBe('资费表.xlsx')
+  })
+
+  it('历史附件缺少原名时使用解码后的URL文件名', () => {
+    expect(workOrderAttachmentName('/upload/%E8%AF%B4%E6%98%8E.pdf?token=1#preview')).toBe('说明.pdf')
+    expect(workOrderAttachmentName('resource\\upload\\旧文件.xlsx')).toBe('旧文件.xlsx')
+    expect(workOrderAttachmentName('/upload/%invalid.pdf')).toBe('%invalid.pdf')
+    expect(workOrderAttachmentName('')).toBe('附件')
+  })
+})
+
+describe('工单照片类型识别', () => {
+  it('兼容原始文件名、签名参数、锚点、编码扩展名和大小写', () => {
+    expect(isWorkOrderImage('/upload/random', '现场.JPG')).toBe(true)
+    expect(isWorkOrderImage('/upload/photo.webp?token=1#preview')).toBe(true)
+    expect(isWorkOrderImage('/upload/photo.png#preview')).toBe(true)
+    expect(isWorkOrderImage('/upload/photo%2Ejpg')).toBe(true)
+    expect(isWorkOrderImage('/upload/photo.jpg', '现场照片')).toBe(true)
+  })
+
+  it('文件及查询参数中的图片后缀不能误判为照片', () => {
+    expect(isWorkOrderImage('/upload/report.pdf?name=photo.jpg')).toBe(false)
+    expect(isWorkOrderImage('/upload/random', '资料.xlsx')).toBe(false)
+    expect(isWorkOrderImage('/upload/randomjpg')).toBe(false)
+    expect(isWorkOrderImage('')).toBe(false)
+  })
+})
+
+describe('工单附件预览文件名', () => {
+  it('优先使用上传原名并清理本地路径不允许的字符', () => {
+    expect(workOrderAttachmentFilename('C:\\fakepath\\方案说明.xlsx')).toBe('方案说明.xlsx')
+    expect(workOrderAttachmentFilename('照片:现场?.jpg')).toBe('照片_现场_.jpg')
+    expect(workOrderAttachmentFilename('   ')).toBe('附件')
+  })
+})
diff --git a/app/src/utils/workOrderAttachment.ts b/app/src/utils/workOrderAttachment.ts
new file mode 100644
index 0000000..0447ac6
--- /dev/null
+++ b/app/src/utils/workOrderAttachment.ts
@@ -0,0 +1,30 @@
+export function workOrderAttachmentName(url: string, originalName?: string) {
+  const value = originalName?.trim()
+  if (value)
+    return value.replaceAll('\\', '/').split('/').pop() || '附件'
+  const filename = url.replaceAll('\\', '/').split(/[?#]/)[0].split('/').pop() || ''
+  try {
+    return decodeURIComponent(filename) || '附件'
+  }
+  catch {
+    return filename || '附件'
+  }
+}
+
+/** 同时兼容存储地址与原始文件名。 */
+export function isWorkOrderImage(url: string, originalName?: string) {
+  return [workOrderAttachmentName(url), originalName?.trim() || '']
+    .some(name => /\.(?:png|jpe?g|gif|webp|bmp)$/i.test(name))
+}
+
+export function workOrderAttachmentFilename(name: string) {
+  const filename = workOrderAttachmentName('', name)
+    .replace(/[<>:"\\|?*]/g, '_')
+    .replaceAll('/', '_')
+    .split('')
+    .map(char => char.charCodeAt(0) < 32 ? '_' : char)
+    .join('')
+    .replace(/[. ]+$/g, '')
+    .trim()
+  return filename || '附件'
+}
diff --git a/app/src/utils/workOrderAttachmentDownload.test.ts b/app/src/utils/workOrderAttachmentDownload.test.ts
new file mode 100644
index 0000000..e069668
--- /dev/null
+++ b/app/src/utils/workOrderAttachmentDownload.test.ts
@@ -0,0 +1,53 @@
+import { afterEach, describe, expect, it, vi } from 'vitest'
+import { downloadWorkOrderAttachment } from './workOrderAttachmentDownload'
+
+afterEach(() => {
+  vi.unstubAllGlobals()
+  vi.useRealTimers()
+})
+
+function harness() {
+  vi.useFakeTimers()
+  const blob = new Blob(['sheet content'])
+  const fetchFile = vi.fn().mockResolvedValue({ ok: true, blob: () => Promise.resolve(blob) })
+  const link = { href: '', download: '', click: vi.fn(), remove: vi.fn() }
+  const appendChild = vi.fn()
+  const createObjectURL = vi.fn().mockReturnValue('blob:work-order-file')
+  const revokeObjectURL = vi.fn()
+  vi.stubGlobal('fetch', fetchFile)
+  vi.stubGlobal('document', { createElement: vi.fn().mockReturnValue(link), body: { appendChild } })
+  vi.stubGlobal('URL', { createObjectURL, revokeObjectURL })
+  return { fetchFile, link, appendChild, createObjectURL, revokeObjectURL, blob }
+}
+
+describe('浏览器工单附件下载', () => {
+  it('随机存储地址按展示的中文原名及原始后缀下载，保持文件内容不变', async () => {
+    const page = harness()
+    await downloadWorkOrderAttachment('https://files.example.com/dm4bn03wz1h3umxb0y.xls', 'v1v3皆有通道测试汇总.xlsx')
+    expect(page.fetchFile).toHaveBeenCalledWith('https://files.example.com/dm4bn03wz1h3umxb0y.xls')
+    expect(page.createObjectURL).toHaveBeenCalledWith(page.blob)
+    expect(page.link.download).toBe('v1v3皆有通道测试汇总.xlsx')
+    expect(page.link.href).toBe('blob:work-order-file')
+    expect(page.appendChild).toHaveBeenCalledWith(page.link)
+    expect(page.link.click).toHaveBeenCalledOnce()
+    expect(page.link.remove).toHaveBeenCalledOnce()
+    expect(page.revokeObjectURL).not.toHaveBeenCalled()
+    vi.runAllTimers()
+    expect(page.revokeObjectURL).toHaveBeenCalledWith('blob:work-order-file')
+  })
+
+  it('下载失败时不保存错误响应，也不回退为随机名下载', async () => {
+    const page = harness()
+    page.fetchFile.mockResolvedValueOnce({ ok: false })
+    await expect(downloadWorkOrderAttachment('/upload/random.xls', '汇总.xlsx')).rejects.toThrow('附件下载失败')
+    expect(page.createObjectURL).not.toHaveBeenCalled()
+    expect(page.link.click).not.toHaveBeenCalled()
+  })
+
+  it('网络错误向调用方返回失败', async () => {
+    const page = harness()
+    page.fetchFile.mockRejectedValueOnce(new Error('network'))
+    await expect(downloadWorkOrderAttachment('/upload/random.xls', '汇总.xlsx')).rejects.toThrow('network')
+    expect(page.link.click).not.toHaveBeenCalled()
+  })
+})
diff --git a/app/src/utils/workOrderAttachmentDownload.ts b/app/src/utils/workOrderAttachmentDownload.ts
new file mode 100644
index 0000000..0fe4022
--- /dev/null
+++ b/app/src/utils/workOrderAttachmentDownload.ts
@@ -0,0 +1,20 @@
+import { workOrderAttachmentFilename } from './workOrderAttachment'
+
+export async function downloadWorkOrderAttachment(url: string, name: string) {
+  const response = await fetch(url)
+  if (!response.ok)
+    throw new Error('附件下载失败')
+  const blob = await response.blob()
+  const objectUrl = URL.createObjectURL(blob)
+  const link = document.createElement('a')
+  link.href = objectUrl
+  link.download = workOrderAttachmentFilename(name)
+  try {
+    document.body.appendChild(link)
+    link.click()
+  }
+  finally {
+    link.remove()
+    setTimeout(() => URL.revokeObjectURL(objectUrl), 60000)
+  }
+}
diff --git a/app/tsconfig.json b/app/tsconfig.json
index 07d3342..83ce8cb 100644
--- a/app/tsconfig.json
+++ b/app/tsconfig.json
@@ -1,6 +1,7 @@
 {
   "compilerOptions": {
     "composite": true,
+    "target": "ES2020",
     "lib": [
       "esnext",
       "dom"
diff --git a/app/vite.config.ts b/app/vite.config.ts
index d9b0ad3..4ba8664 100644
--- a/app/vite.config.ts
+++ b/app/vite.config.ts
@@ -91,7 +91,10 @@ const appSubPackageRules = [
       'about/index',
       'agreement/index',
       'contact/index',
+      'executionLog/index',
+      'executionLogDetail/index',
       'feedback/index',
+      'manual/index',
       'notification/index',
       'profile/index',
       'realName/index',
diff --git a/app/vitest.config.ts b/app/vitest.config.ts
new file mode 100644
index 0000000..eed89b8
--- /dev/null
+++ b/app/vitest.config.ts
@@ -0,0 +1,14 @@
+import { fileURLToPath, URL } from 'node:url'
+import { defineConfig } from 'vitest/config'
+
+export default defineConfig({
+  resolve: {
+    alias: {
+      '@': fileURLToPath(new URL('./src', import.meta.url)),
+    },
+  },
+  test: {
+    environment: 'node',
+    include: ['src/**/*.test.ts'],
+  },
+})
diff --git a/server/api/app/app.go b/server/api/app/app.go
index 6a464ca..f73d01d 100644
--- a/server/api/app/app.go
+++ b/server/api/app/app.go
@@ -11,6 +11,9 @@ import (
 )
 
 type IAppV1 interface {
+	WarningPreference(ctx context.Context, req *v1.WarningPreferenceReq) (*v1.WarningPreferenceRes, error)
+	SaveWarningPreference(ctx context.Context, req *v1.SaveWarningPreferenceReq) (*v1.SaveWarningPreferenceRes, error)
+	UnbindWechat(ctx context.Context, req *v1.UnbindWechatReq) (*v1.UnbindWechatRes, error)
 	Captcha(ctx context.Context, req *v1.CaptchaReq) (res *v1.CaptchaRes, err error)
 	SideCaptcha(ctx context.Context, req *v1.SideCaptchaReq) (res *v1.SideCaptchaRes, err error)
 	CheckSideCaptcha(ctx context.Context, req *v1.CheckSideCaptchaReq) (res *v1.CheckSideCaptchaRes, err error)
@@ -67,6 +70,7 @@ type IAppV1 interface {
 	WarningConfigMeta(ctx context.Context, req *v1.WarningConfigMetaReq) (res *v1.WarningConfigMetaRes, err error)
 	WarningConfigBatchSave(ctx context.Context, req *v1.WarningConfigBatchSaveReq) (res *v1.WarningConfigBatchSaveRes, err error)
 	WarningConfigBatchNotify(ctx context.Context, req *v1.WarningConfigBatchNotifyReq) (res *v1.WarningConfigBatchNotifyRes, err error)
+	WorkOrderAction(ctx context.Context, req *v1.WorkOrderActionReq) (res *v1.WorkOrderActionRes, err error)
 	WorkOrderList(ctx context.Context, req *v1.WorkOrderListReq) (res *v1.WorkOrderListRes, err error)
 	WorkOrderDetail(ctx context.Context, req *v1.WorkOrderDetailReq) (res *v1.WorkOrderDetailRes, err error)
 	WorkOrderCreate(ctx context.Context, req *v1.WorkOrderCreateReq) (res *v1.WorkOrderCreateRes, err error)
diff --git a/server/api/app/v1/allocate_result.go b/server/api/app/v1/allocate_result.go
new file mode 100644
index 0000000..227b4b8
--- /dev/null
+++ b/server/api/app/v1/allocate_result.go
@@ -0,0 +1,21 @@
+package v1
+
+import (
+	"github.com/gogf/gf/v2/frame/g"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model"
+)
+
+type AllocateResultReq struct {
+	g.Meta    `path:"/card/allocate-result" method:"get" tags:"APP-卡片" summary:"查询本人划拨结果" x-check-permission:"cpm:iot:tSimCardAllocate:batch:submit"`
+	BatchNo   string `json:"batchNo" v:"length:0,64"`
+	RequestId string `json:"requestId" v:"length:0,96"`
+}
+type AllocateResultRes struct{ *model.AppExecutionLogItem }
+type AllocateDetailsReq struct {
+	g.Meta `path:"/card/allocate-details" method:"get" tags:"APP-卡片" summary:"查询本人划拨明细" x-check-permission:"cpm:iot:tSimCardAllocate:batch:submit"`
+	model.AppExecutionLogDetailParam
+}
+type AllocateDetailsRes struct {
+	Items []*model.AppExecutionLogDetail `json:"items"`
+	Total int                            `json:"total"`
+}
diff --git a/server/api/app/v1/auth.go b/server/api/app/v1/auth.go
index ca8c8cd..3e911ee 100644
--- a/server/api/app/v1/auth.go
+++ b/server/api/app/v1/auth.go
@@ -59,6 +59,15 @@ type PhoneLoginRes struct {
 	model.AppAuthTokenModel
 }
 
+type PhoneSmsLoginReq struct {
+	g.Meta `path:"/auth/phone-login" method:"post" tags:"APP-授权" summary:"手机号短信验证码登录"`
+	model.AppPhoneSmsLoginParam
+}
+
+type PhoneSmsLoginRes struct {
+	model.AppAuthTokenModel
+}
+
 type WechatLoginReq struct {
 	g.Meta `path:"/auth/wechat-login" method:"post" tags:"APP-授权" summary:"微信一键登录"`
 	model.AppWechatLoginParam
diff --git a/server/api/app/v1/customer.go b/server/api/app/v1/customer.go
index e551a64..865e576 100644
--- a/server/api/app/v1/customer.go
+++ b/server/api/app/v1/customer.go
@@ -12,8 +12,9 @@ type CustomerListReq struct {
 }
 
 type CustomerListRes struct {
-	Items []*model.AppCustomerModel `json:"items" dc:"客户列表"`
-	Total int                       `json:"total" dc:"总数"`
+	Summary *model.AppCustomerSummary `json:"summary" dc:"当前筛选结果汇总"`
+	Items   []*model.AppCustomerModel `json:"items" dc:"客户列表"`
+	Total   int                       `json:"total" dc:"总数"`
 }
 
 type CustomerDetailReq struct {
diff --git a/server/api/app/v1/execution_log.go b/server/api/app/v1/execution_log.go
new file mode 100644
index 0000000..bc81356
--- /dev/null
+++ b/server/api/app/v1/execution_log.go
@@ -0,0 +1,28 @@
+package v1
+
+import (
+	"github.com/gogf/gf/v2/frame/g"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model"
+)
+
+type ExecutionLogListReq struct {
+	g.Meta `path:"/execution-log/list" method:"get" tags:"APP-执行日志" summary:"查询权限范围内执行日志" x-check-permission:"cpm:common:batchExecutionLog:list"`
+	model.AppExecutionLogListParam
+}
+type ExecutionLogListRes struct {
+	Items []*model.AppExecutionLogItem `json:"items"`
+	Total int                          `json:"total"`
+}
+type ExecutionLogSummaryReq struct {
+	g.Meta  `path:"/execution-log/summary" method:"get" tags:"APP-执行日志" summary:"查询权限范围内执行日志概要" x-check-permission:"cpm:common:batchExecutionLog:summary"`
+	BatchNo string `json:"batchNo" v:"required|length:1,64"`
+}
+type ExecutionLogSummaryRes struct{ *model.AppExecutionLogItem }
+type ExecutionLogDetailsReq struct {
+	g.Meta `path:"/execution-log/details" method:"get" tags:"APP-执行日志" summary:"查询权限范围内执行日志明细" x-check-permission:"cpm:common:batchExecutionLog:detailList"`
+	model.AppExecutionLogDetailParam
+}
+type ExecutionLogDetailsRes struct {
+	Items []*model.AppExecutionLogDetail `json:"items"`
+	Total int                            `json:"total"`
+}
diff --git a/server/api/app/v1/notification.go b/server/api/app/v1/notification.go
new file mode 100644
index 0000000..2aaed98
--- /dev/null
+++ b/server/api/app/v1/notification.go
@@ -0,0 +1,24 @@
+package v1
+
+import (
+	"github.com/gogf/gf/v2/frame/g"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model"
+)
+
+type WarningPreferenceReq struct {
+	g.Meta `path:"/user/wechat/warning-preference" method:"get" tags:"APP-用户" summary:"读取微信预警提醒偏好"`
+}
+type WarningPreferenceRes struct {
+	model.AppWarningPreferenceModel
+}
+type SaveWarningPreferenceReq struct {
+	g.Meta `path:"/user/wechat/warning-preference" method:"post" tags:"APP-用户" summary:"保存微信预警提醒偏好"`
+	model.AppWarningPreferenceParam
+}
+type SaveWarningPreferenceRes struct {
+	model.AppWarningPreferenceModel
+}
+type UnbindWechatReq struct {
+	g.Meta `path:"/user/wechat/unbind" method:"post" tags:"APP-用户" summary:"解除当前账号微信绑定"`
+}
+type UnbindWechatRes struct{ model.AppWechatBindModel }
diff --git a/server/api/app/v1/work_order.go b/server/api/app/v1/work_order.go
index 7a74404..e3055c5 100644
--- a/server/api/app/v1/work_order.go
+++ b/server/api/app/v1/work_order.go
@@ -42,3 +42,9 @@ type WorkOrderUploadReq struct {
 type WorkOrderUploadRes struct {
 	*model.SysOssUploadModel
 }
+
+type WorkOrderActionReq struct {
+	g.Meta `path:"/work-order/action" method:"post" tags:"APP-工单" summary:"按权限跟进或办理工单" x-check-permission:"cpm:gen:tWoMain:view,cpm:gen:tWoMain:list"`
+	model.AppWorkOrderActionParam
+}
+type WorkOrderActionRes struct{}
diff --git a/server/api/common/v1/upload.go b/server/api/common/v1/upload.go
index 84e5002..b095c4b 100644
--- a/server/api/common/v1/upload.go
+++ b/server/api/common/v1/upload.go
@@ -1,7 +1,7 @@
 // Package v1
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025	 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package v1
 
diff --git a/server/api/gen/testdemo/v1/testdemo.go b/server/api/gen/testdemo/v1/testdemo.go
index 594e36d..05ca1e8 100644
--- a/server/api/gen/testdemo/v1/testdemo.go
+++ b/server/api/gen/testdemo/v1/testdemo.go
@@ -1,7 +1,7 @@
 // Package testdemo
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 // @AutoGenerate Version
 package v1 //testdemo
diff --git a/server/api/gen/testtree/v1/testtree.go b/server/api/gen/testtree/v1/testtree.go
index 014f868..c3463dc 100644
--- a/server/api/gen/testtree/v1/testtree.go
+++ b/server/api/gen/testtree/v1/testtree.go
@@ -1,7 +1,7 @@
 // Package testtree
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2026 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 // @AutoGenerate Version
 package v1 //testtree
@@ -64,4 +64,4 @@ type TestTreeTreeOptionReq struct {
 	g.Meta `path:"/testTree/treeOption" method:"get" tags:"测试树表" summary:"获取测试树表关系树选项" x-check-permission:"cpm:gen:testTree:treeOption"`
 }
 
-type TestTreeTreeOptionRes []tree.Node
+type TestTreeTreeOptionRes []tree.Node
\ No newline at end of file
diff --git a/server/api/gen_codes/v1/gen_table.go b/server/api/gen_codes/v1/gen_table.go
index 48a850d..6378fa0 100644
--- a/server/api/gen_codes/v1/gen_table.go
+++ b/server/api/gen_codes/v1/gen_table.go
@@ -1,7 +1,7 @@
 // Package v1
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025	 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package v1
 
diff --git a/server/api/monitor/v1/cache.go b/server/api/monitor/v1/cache.go
index 976fdcd..7876ff8 100644
--- a/server/api/monitor/v1/cache.go
+++ b/server/api/monitor/v1/cache.go
@@ -1,7 +1,7 @@
 // Package v1
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025	 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package v1
 
diff --git a/server/api/system/v1/auth.go b/server/api/system/v1/auth.go
index e0a0365..4c13442 100644
--- a/server/api/system/v1/auth.go
+++ b/server/api/system/v1/auth.go
@@ -1,7 +1,7 @@
 // Package v1
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025	 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package v1
 
diff --git a/server/api/system/v1/captcha.go b/server/api/system/v1/captcha.go
index 979a188..b0a5182 100644
--- a/server/api/system/v1/captcha.go
+++ b/server/api/system/v1/captcha.go
@@ -1,7 +1,7 @@
 // Package v1
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package v1
 
diff --git a/server/api/system/v1/client.go b/server/api/system/v1/client.go
index 273023c..8b1bec8 100644
--- a/server/api/system/v1/client.go
+++ b/server/api/system/v1/client.go
@@ -1,7 +1,7 @@
 // Package v1
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package v1
 
diff --git a/server/api/system/v1/config.go b/server/api/system/v1/config.go
index de44ba6..7dd9b61 100644
--- a/server/api/system/v1/config.go
+++ b/server/api/system/v1/config.go
@@ -1,7 +1,7 @@
 // Package v1
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package v1
 
diff --git a/server/api/system/v1/dept.go b/server/api/system/v1/dept.go
index 16ffc34..1f8cf2b 100644
--- a/server/api/system/v1/dept.go
+++ b/server/api/system/v1/dept.go
@@ -1,7 +1,7 @@
 // Package v1
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025	 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package v1
 
diff --git a/server/api/system/v1/dict.go b/server/api/system/v1/dict.go
index c044394..0050f60 100644
--- a/server/api/system/v1/dict.go
+++ b/server/api/system/v1/dict.go
@@ -1,7 +1,7 @@
 // Package v1
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package v1
 
diff --git a/server/api/system/v1/job.go b/server/api/system/v1/job.go
index 2a80fe6..166ac65 100644
--- a/server/api/system/v1/job.go
+++ b/server/api/system/v1/job.go
@@ -1,7 +1,7 @@
 // Package v1
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package v1
 
diff --git a/server/api/system/v1/logininfor.go b/server/api/system/v1/logininfor.go
index 8c63124..b467e4f 100644
--- a/server/api/system/v1/logininfor.go
+++ b/server/api/system/v1/logininfor.go
@@ -1,7 +1,7 @@
 // Package v1
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package v1
 
diff --git a/server/api/system/v1/menu.go b/server/api/system/v1/menu.go
index 8837128..4f86bdf 100644
--- a/server/api/system/v1/menu.go
+++ b/server/api/system/v1/menu.go
@@ -1,7 +1,7 @@
 // Package v1
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package v1
 
diff --git a/server/api/system/v1/notice.go b/server/api/system/v1/notice.go
index 4de42cf..9f1f341 100644
--- a/server/api/system/v1/notice.go
+++ b/server/api/system/v1/notice.go
@@ -1,7 +1,7 @@
 // Package v1
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package v1
 
diff --git a/server/api/system/v1/online.go b/server/api/system/v1/online.go
index 7e14c2e..a571b7b 100644
--- a/server/api/system/v1/online.go
+++ b/server/api/system/v1/online.go
@@ -1,7 +1,7 @@
 // Package v1
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package v1
 
diff --git a/server/api/system/v1/oper_log.go b/server/api/system/v1/oper_log.go
index f5aae05..17d235f 100644
--- a/server/api/system/v1/oper_log.go
+++ b/server/api/system/v1/oper_log.go
@@ -1,7 +1,7 @@
 // Package v1
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package v1
 
diff --git a/server/api/system/v1/oss.go b/server/api/system/v1/oss.go
index 28e2cb1..817ba6a 100644
--- a/server/api/system/v1/oss.go
+++ b/server/api/system/v1/oss.go
@@ -1,7 +1,7 @@
 // Package v1
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package v1
 
diff --git a/server/api/system/v1/oss_config.go b/server/api/system/v1/oss_config.go
index c2881dd..cf47053 100644
--- a/server/api/system/v1/oss_config.go
+++ b/server/api/system/v1/oss_config.go
@@ -1,7 +1,7 @@
 // Package v1
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package v1
 
diff --git a/server/api/system/v1/post.go b/server/api/system/v1/post.go
index 83af33b..3a25420 100644
--- a/server/api/system/v1/post.go
+++ b/server/api/system/v1/post.go
@@ -1,7 +1,7 @@
 // Package v1
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package v1
 
diff --git a/server/api/system/v1/role.go b/server/api/system/v1/role.go
index d1efc51..cac75ed 100644
--- a/server/api/system/v1/role.go
+++ b/server/api/system/v1/role.go
@@ -1,7 +1,7 @@
 // Package v1
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package v1
 
diff --git a/server/api/system/v1/social.go b/server/api/system/v1/social.go
index 5999a71..2e1d2fb 100644
--- a/server/api/system/v1/social.go
+++ b/server/api/system/v1/social.go
@@ -1,7 +1,7 @@
 // Package v1
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package v1
 
diff --git a/server/api/system/v1/sysnoticeuser.go b/server/api/system/v1/sysnoticeuser.go
index 025dc16..0f3ec8c 100644
--- a/server/api/system/v1/sysnoticeuser.go
+++ b/server/api/system/v1/sysnoticeuser.go
@@ -1,7 +1,7 @@
 // Package sysnoticeuser
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 // @AutoGenerate Version
 package v1 //sysnoticeuser
diff --git a/server/api/system/v1/tenant.go b/server/api/system/v1/tenant.go
index 8fd1912..022f1de 100644
--- a/server/api/system/v1/tenant.go
+++ b/server/api/system/v1/tenant.go
@@ -1,7 +1,7 @@
 // Package v1
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package v1
 
diff --git a/server/api/system/v1/user.go b/server/api/system/v1/user.go
index 783b109..07a2881 100644
--- a/server/api/system/v1/user.go
+++ b/server/api/system/v1/user.go
@@ -1,7 +1,7 @@
 // Package v1
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package v1
 
diff --git a/server/config/config.yaml b/server/config/config.example.yaml
similarity index 89%
rename from server/config/config.yaml
rename to server/config/config.example.yaml
index d6f4b17..4e73968 100644
--- a/server/config/config.yaml
+++ b/server/config/config.example.yaml
@@ -1,7 +1,7 @@
 # config.yaml 配置文件
 # @Link  https://github.com/xiujiecn/xiu-admin
 # @Copyright  Copyright (c) 2025 LiXiujie
-# @Author  Lxj <li@xiujie.cn>
+# @Author  Lxj <li@example.com>
 # @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 # 系统配置
 system:
@@ -14,6 +14,7 @@ system:
 #      path: "/data/app/iotlcmadmin-web-svc/upload"
 #      本地开发环境
       path: "resource/upload"
+      publicUrl: ""
 
 # 服务配置
 server:
@@ -76,7 +77,7 @@ register:
     url: "http://192.0.2.29:11190/api/v1/sms/send"
     method: "POST"
     headers: {}
-    bodyTemplate: '{"config":{"serviceType":"1","regionId":"cn-hangzhou","accessKeyId":"","accessKeySecret":"","signName":"","templateId":""},"params":{"phoneNumber":"{contact}","msgContent":"{\"code\":\"{code}\"}"}}'
+    bodyTemplate: '{"config":{"scene":"{scene}"},"params":{"phoneNumber":"{contact}","msgContent":"{code}"}}'
     successStatus: 200
 
 database:
@@ -147,34 +148,34 @@ payment:
     enabled: true
     envFile: ""
     apiBase: "https://api.mch.weixin.qq.com"
-    mchId: "1723059989"
-    mchSerialNo: "32A3CB6381D743A4ADBF3885BB16882C6CE06D03"
-    apiV3Key: "ce9e5486d2979810f21d09f398d212e0"
+    mchId: "${WECHAT_MCH_ID}"
+    mchSerialNo: "${WECHAT_MCH_SERIAL_NO}"
+    apiV3Key: "${WECHAT_API_V3_KEY}"
     privateKeyPath: "resource/certs/wechatpay_apiclient_key.pem"
-    notifyUrl: "https://app.iotlcm.example.com/api/v1/payment/wechat/notify"
-    notifyBaseUrl: "https://app.iotlcm.example.com"
-    refundNotifyUrl: "https://app.iotlcm.example.com/api/v1/payment/wechat/refund-notify"
+    notifyUrl: "https://example.com/"
+    notifyBaseUrl: "https://example.com/"
+    refundNotifyUrl: "https://example.com/"
     timeoutMinutes: 5 #待支付时间(分钟)
-    platformPublicKeyId: "PUB_KEY_ID_0117230599892026052200111565002404"
+    platformPublicKeyId: "${WECHAT_PLATFORM_KEY_ID}"
     platformPublicKeyPath: "resource/certs/wechatpay_platform_public_key.pem"
     h5:
       enabled: true
-      appId: "wx9e26905702c1a372"
+      appId: "${WECHAT_APP_ID}"
       appName: "物联网卡管理平台"
-      appUrl: "https://app.iotlcm.example.com"
+      appUrl: "https://example.com/"
       payerClientIp: ""
     mini:
       enabled: true
-      appId: "wx9e26905702c1a372"
-      appSecret: "3ee708d13993282fed770ea1cab95d90"
+      appId: "${WECHAT_APP_ID}"
+      appSecret: "${WECHAT_APP_SECRET}"
 
 appCardRecognition:
   enabled: true
   provider: "openai-compatible"
   baseUrl: "https://xueyangai.com/v1"
   endpoint: ""
-  model: "qwen3.7-flash"
-  apiKey: "sk-nAhIIyqOn7JvQp1ti8o24GcBLgWqBUFKBaDTwAmFYZm0Hycy"
+  model: "qwen3.7-plus"
+  apiKey: "${AI_API_KEY}"
   timeout: "25s"
   maxImageBytes: 8388608
   maxTokens: 256
@@ -184,7 +185,7 @@ appCardRecognition:
     period: "1m"
 
 appWarning:
-  wechatSubscribeTemplateId: "DMDP2PKktdtG1ES_3Ic1JcR0LGELQmWE6LunYyerHCY"
+  wechatSubscribeTemplateId: "${WECHAT_SUBSCRIBE_TEMPLATE_ID}"
 
 tsdb:
   database: "TdEngine" #可选择 TdEngine、Influxdb
@@ -193,8 +194,10 @@ tsdb:
     # dsn: "root:taosdata@http(127.0.0.1:6041)/"
     type: "taosWS" #websocket连接方式，端口是6041
     # dsn: "root:taosdata@ws(127.0.0.1:6041)/"
-    dsn: "root:sdyz2026__@ws(192.0.2.29:6041)/"
+    dsn: "${TAOS_USER}:${TAOS_PASSWORD}@ws(${TAOS_HOST}:6041)/"
     dbName: "iotlcm"
+    dailyDbName: "iotlcm_daily"
+    monthlyDbName: "iotlcm_monthly"
     maxOpenConns: 100
     maxIdleConns: 10
 
@@ -213,6 +216,7 @@ router:
     - /api/v1/auth/sms
     - /api/v1/auth/register
     - /api/v1/auth/login
+    - /api/v1/auth/phone-login
     - /api/v1/auth/wechat-login
     - /api/v1/auth/wechat-bind-phone
     - /api/v1/auth/forgot-password
@@ -273,17 +277,20 @@ upstream:
     # clientName: "iotlcm.example.com:8510"
     clientName: "http://iotlcm.example.com:8110"
     timeout: 10s
+  gateway:
+    clientName: "${UPSTREAM_GATEWAY_ADDR}"
+    timeout: 10s
   onelinkMock:
     enabled: false
     baseUrl: "https://iotlcm.example.com/onelink-mock/v5"
-    appid: "100059999270000006"
-    password: "577d2b16546cbac103df9e0ce38393b5014152c8e4d76d5636ea5ccc51319033"
+    appid: "${ONELINK_APP_ID}"
+    password: "${ONELINK_PASSWORD}"
     timeout: "10s"
     tokenTTL: 3600
     accounts:
       - name: "默认测试应用"
-        appid: "100059999270000006"
-        password: "577d2b16546cbac103df9e0ce38393b5014152c8e4d76d5636ea5ccc51319033"
+        appid: "${ONELINK_APP_ID}"
+        password: "${ONELINK_PASSWORD}"
         latestToken: ""
         tokenExpireAt: ""
         isDefault: true
diff --git a/server/config/config_default.yaml b/server/config/config_default.yaml
index d52dcf8..aaf44f8 100644
--- a/server/config/config_default.yaml
+++ b/server/config/config_default.yaml
@@ -1,7 +1,7 @@
 # config_default.yaml 配置文件
 # @Link  https://github.com/xiujiecn/xiu-admin
 # @Copyright  Copyright (c) 2025 LiXiujie
-# @Author  Lxj <li@xiujie.cn>
+# @Author  Lxj <li@example.com>
 # @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 # 系统配置
 system:
@@ -12,6 +12,7 @@ system:
   upload:
     local:
       path: "resource/upload"
+      publicUrl: ""
 # 服务配置
 server:
   # 基本配置
@@ -69,10 +70,15 @@ register:
     url: "http://127.0.0.1:11190/api/v1/sms/send"
     method: "POST"
     headers: {}
-    bodyTemplate: '{"config":{"serviceType":"1","regionId":"cn-hangzhou","accessKeyId":"","accessKeySecret":"","signName":"","templateId":""},"params":{"phoneNumber":"{contact}","msgContent":"{\"code\":\"{code}\"}"}}'
+    bodyTemplate: '{"config":{"scene":"{scene}"},"params":{"phoneNumber":"{contact}","msgContent":"{code}"}}'
     successStatus: 200
 
 database:
+  legacyCard:
+    link: "${LEGACY_CARD_DSN}" # Optional read-only legacy database
+    debug: false
+    maxOpen: 5
+    maxIdle: 2
   logger:
     path:    "resource/log/server/sql"
     level:   "all"
@@ -149,8 +155,8 @@ appCardRecognition:
   provider: "openai-compatible"
   baseUrl: "https://xueyangai.com/v1"
   endpoint: ""
-  model: "qwen3.7-flash"
-  apiKey: "sk-nAhIIyqOn7JvQp1ti8o24GcBLgWqBUFKBaDTwAmFYZm0Hycy"
+  model: "qwen3.7-plus"
+  apiKey: "${AI_API_KEY}"
   timeout: "25s"
   maxImageBytes: 8388608
   maxTokens: 256
@@ -160,7 +166,7 @@ appCardRecognition:
     period: "1m"
 
 appWarning:
-  wechatSubscribeTemplateId: "DMDP2PKktdtG1ES_3Ic1JcR0LGELQmWE6LunYyerHCY"
+  wechatSubscribeTemplateId: "${WECHAT_SUBSCRIBE_TEMPLATE_ID}"
 
 appBusinessAsync:
   enabled: false
@@ -169,11 +175,15 @@ appBusinessAsync:
   failOnPublish: false
 
 upstream:
+  appDiagnosisToken: "${APP_DIAGNOSIS_TOKEN}"
   provider: "onelink_mock"
   default:
     # 正式环境建议配置为上游代理 HTTP 服务名，例如 iotlcmupstreamproxy-http-svc:8510
     clientName: ""
     timeout: 10s
+  gateway:
+    clientName: "${UPSTREAM_GATEWAY_ADDR}"
+    timeout: 10s
   onelinkMock:
     enabled: false
     baseUrl: "https://iotlcm.example.com/onelink-mock/v5"
@@ -215,6 +225,7 @@ router:
     - /api/v1/auth/sms
     - /api/v1/auth/register
     - /api/v1/auth/login
+    - /api/v1/auth/phone-login
     - /api/v1/auth/wechat-login
     - /api/v1/auth/wechat-bind-phone
     - /api/v1/auth/forgot-password
diff --git a/server/go.mod b/server/go.mod
index f3b4db1..a54ccfa 100644
--- a/server/go.mod
+++ b/server/go.mod
@@ -32,6 +32,7 @@ require (
 	go.opentelemetry.io/otel v1.38.0
 	golang.org/x/exp v0.0.0-20250305212735-054e65f0b394
 	golang.org/x/net v0.40.0
+	golang.org/x/sync v0.14.0
 	golang.org/x/tools v0.31.0
 	gorm.io/gorm v1.25.12
 )
@@ -105,7 +106,6 @@ require (
 	golang.org/x/crypto v0.38.0 // indirect
 	golang.org/x/image v0.23.0 // indirect
 	golang.org/x/mod v0.24.0 // indirect
-	golang.org/x/sync v0.14.0 // indirect
 	golang.org/x/sys v0.35.0 // indirect
 	golang.org/x/text v0.25.0 // indirect
 	golang.org/x/time v0.8.0 // indirect
diff --git a/server/hack/config.yaml b/server/hack/config.example.yaml
similarity index 100%
rename from server/hack/config.yaml
rename to server/hack/config.example.yaml
diff --git a/server/internal/cmd/cmd.go b/server/internal/cmd/cmd.go
index 7acaf5a..5b643db 100644
--- a/server/internal/cmd/cmd.go
+++ b/server/internal/cmd/cmd.go
@@ -1,7 +1,7 @@
 // Package cmd
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package cmd
 
diff --git a/server/internal/cmd/global.go b/server/internal/cmd/global.go
index a89dccc..d7f959c 100644
--- a/server/internal/cmd/global.go
+++ b/server/internal/cmd/global.go
@@ -1,7 +1,7 @@
 // Package cmd
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package cmd
 
diff --git a/server/internal/cmd/http.go b/server/internal/cmd/http.go
index 8aeabc9..b8f000a 100644
--- a/server/internal/cmd/http.go
+++ b/server/internal/cmd/http.go
@@ -6,6 +6,7 @@ import (
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/websocket"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/router"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/service"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/service/allocatedispatch"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/tasks"
 
 	"github.com/gogf/gf/v2/frame/g"
@@ -41,7 +42,10 @@ var Http = &gcmd.Command{
 		s.SetDumpRouterMap(dumpRouterMap)
 		router.InitRouter(ctx, s)
 		websocket.StartWebSocket(ctx)
+		stopAllocateRecovery := allocatedispatch.Start(ctx)
+		defer stopAllocateRecovery()
 		s.Run()
+		stopAllocateRecovery()
 		inithttp.CleanupHttp(ctx)
 		return nil
 	},
diff --git a/server/internal/cmd/initfuunc.go b/server/internal/cmd/initfuunc.go
index 862a9b1..e33f363 100644
--- a/server/internal/cmd/initfuunc.go
+++ b/server/internal/cmd/initfuunc.go
@@ -1,7 +1,7 @@
 // Package cmd
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package cmd
 
diff --git a/server/internal/cmd/monitor.go b/server/internal/cmd/monitor.go
index 1928f6c..b8ad136 100644
--- a/server/internal/cmd/monitor.go
+++ b/server/internal/cmd/monitor.go
@@ -1,18 +1,18 @@
 // Package cmd
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package cmd
 
 import (
 	"context"
 	"fmt"
+	"time"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/cmd/inithttp"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/websocket"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/service"
-	"time"
 )
 
 func init() {
diff --git a/server/internal/cmd/shutdown.go b/server/internal/cmd/shutdown.go
index 9ad037f..5b36587 100644
--- a/server/internal/cmd/shutdown.go
+++ b/server/internal/cmd/shutdown.go
@@ -2,10 +2,10 @@ package cmd
 
 import (
 	"context"
-	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
-	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/event"
 	"os"
 	"sync"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/event"
 
 	"github.com/gogf/gf/v2/frame/g"
 	"github.com/gogf/gf/v2/os/gctx"
diff --git a/server/internal/consts/batch.go b/server/internal/consts/batch.go
index 7f63978..8cffc85 100644
--- a/server/internal/consts/batch.go
+++ b/server/internal/consts/batch.go
@@ -27,6 +27,7 @@ const (
 	BatchDetailStatusFailed  = 3
 
 	BatchSourceTypeBatchSelect = 0
+	BatchSourceTypeFile        = 3
 
 	BatchTypePrepare   = 4
 	BatchTypeAllocate  = 3
diff --git a/server/internal/consts/bcache.go b/server/internal/consts/bcache.go
index 3ddaa07..c697cb3 100644
--- a/server/internal/consts/bcache.go
+++ b/server/internal/consts/bcache.go
@@ -1,7 +1,7 @@
 // Package consts
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package consts
 
diff --git a/server/internal/consts/code.go b/server/internal/consts/code.go
index 49fb677..3ac8564 100644
--- a/server/internal/consts/code.go
+++ b/server/internal/consts/code.go
@@ -1,7 +1,7 @@
 // Package consts
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package consts
 
diff --git a/server/internal/consts/config.go b/server/internal/consts/config.go
index b6bf46d..4f202c1 100644
--- a/server/internal/consts/config.go
+++ b/server/internal/consts/config.go
@@ -1,7 +1,7 @@
 // Package consts
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package consts
 
diff --git a/server/internal/consts/consts.go b/server/internal/consts/consts.go
index da0878d..6006882 100644
--- a/server/internal/consts/consts.go
+++ b/server/internal/consts/consts.go
@@ -1,7 +1,7 @@
 // Package consts
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package consts
 
diff --git a/server/internal/consts/event.go b/server/internal/consts/event.go
index d568d9b..bca133c 100644
--- a/server/internal/consts/event.go
+++ b/server/internal/consts/event.go
@@ -1,7 +1,7 @@
 // Package consts
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package consts
 
diff --git a/server/internal/consts/http.go b/server/internal/consts/http.go
index 6db02b7..e028b68 100644
--- a/server/internal/consts/http.go
+++ b/server/internal/consts/http.go
@@ -1,7 +1,7 @@
 // Package consts
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package consts
 
diff --git a/server/internal/consts/mcache.go b/server/internal/consts/mcache.go
index 65f7e54..3b744b6 100644
--- a/server/internal/consts/mcache.go
+++ b/server/internal/consts/mcache.go
@@ -1,7 +1,7 @@
 // Package consts
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package consts
 
diff --git a/server/internal/consts/queue.go b/server/internal/consts/queue.go
index 7b3a9f0..de22bb0 100644
--- a/server/internal/consts/queue.go
+++ b/server/internal/consts/queue.go
@@ -1,12 +1,14 @@
 // Package consts
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package consts
 
 const (
-	QueueSysOptLog = "queue:sys_opt_log"
+	QueueSysOptLog               = "queue:sys_opt_log"
+	QueueWorkOrderAutoClose      = "iotlcm.work_order.auto_close"
+	QueueWorkOrderAutoCloseDelay = "iotlcm.work_order.auto_close.delay"
 )
 
 // 数据库变动类型
diff --git a/server/internal/consts/system.go b/server/internal/consts/system.go
index 62ac2c1..0758854 100644
--- a/server/internal/consts/system.go
+++ b/server/internal/consts/system.go
@@ -1,7 +1,7 @@
 // Package consts
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package consts
 
diff --git a/server/internal/consts/websocket.go b/server/internal/consts/websocket.go
index 9c49716..3708e1e 100644
--- a/server/internal/consts/websocket.go
+++ b/server/internal/consts/websocket.go
@@ -1,7 +1,7 @@
 // Package consts
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package consts
 
diff --git a/server/internal/controller/app/allocate_result.go b/server/internal/controller/app/allocate_result.go
new file mode 100644
index 0000000..539d1a6
--- /dev/null
+++ b/server/internal/controller/app/allocate_result.go
@@ -0,0 +1,39 @@
+package app
+
+import (
+	"context"
+	"github.com/gogf/gf/v2/errors/gerror"
+	"strings"
+	v1 "git.5iot.com/iotlcm-public/iotlcm-app/api/app/v1"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/allocaterequest"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/contexts"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/service/executionlog"
+)
+
+type AllocateResultController struct{}
+
+func (c *AllocateResultController) Result(ctx context.Context, req *v1.AllocateResultReq) (*v1.AllocateResultRes, error) {
+	batchNo := strings.TrimSpace(req.BatchNo)
+	if batchNo == "" {
+		batch, err := allocaterequest.Find(ctx, contexts.GetTenantId(ctx), contexts.GetUserId(ctx), req.RequestId)
+		if err != nil {
+			return nil, err
+		}
+		if batch == nil {
+			return nil, gerror.New("划拨批次不存在或无权查看")
+		}
+		batchNo = batch.BatchNo
+	}
+	item, err := executionlog.AllocateSummary(ctx, batchNo)
+	if err != nil {
+		return nil, err
+	}
+	return &v1.AllocateResultRes{AppExecutionLogItem: item}, nil
+}
+func (c *AllocateResultController) Details(ctx context.Context, req *v1.AllocateDetailsReq) (*v1.AllocateDetailsRes, error) {
+	items, total, err := executionlog.AllocateDetails(ctx, &req.AppExecutionLogDetailParam)
+	if err != nil {
+		return nil, err
+	}
+	return &v1.AllocateDetailsRes{Items: items, Total: total}, nil
+}
diff --git a/server/internal/controller/app/app_v1_auth.go b/server/internal/controller/app/app_v1_auth.go
index 481cd8f..95cd836 100644
--- a/server/internal/controller/app/app_v1_auth.go
+++ b/server/internal/controller/app/app_v1_auth.go
@@ -57,6 +57,14 @@ func (c *ControllerV1) PhoneLogin(ctx context.Context, req *v1.PhoneLoginReq) (r
 	return &v1.PhoneLoginRes{AppAuthTokenModel: *token}, nil
 }
 
+func (c *ControllerV1) PhoneSmsLogin(ctx context.Context, req *v1.PhoneSmsLoginReq) (res *v1.PhoneSmsLoginRes, err error) {
+	token, err := service.AppAuth().PhoneSmsLogin(ctx, &req.AppPhoneSmsLoginParam)
+	if err != nil {
+		return nil, err
+	}
+	return &v1.PhoneSmsLoginRes{AppAuthTokenModel: *token}, nil
+}
+
 func (c *ControllerV1) WechatLogin(ctx context.Context, req *v1.WechatLoginReq) (res *v1.WechatLoginRes, err error) {
 	data, err := service.AppAuth().WechatLogin(ctx, &req.AppWechatLoginParam)
 	if err != nil {
diff --git a/server/internal/controller/app/app_v1_customer.go b/server/internal/controller/app/app_v1_customer.go
index 95aa617..eb548ce 100644
--- a/server/internal/controller/app/app_v1_customer.go
+++ b/server/internal/controller/app/app_v1_customer.go
@@ -8,11 +8,11 @@ import (
 )
 
 func (c *ControllerV1) CustomerList(ctx context.Context, req *v1.CustomerListReq) (res *v1.CustomerListRes, err error) {
-	items, total, err := service.AppUser().CustomerList(ctx, &req.AppCustomerListParam)
+	items, total, summary, err := service.AppUser().CustomerList(ctx, &req.AppCustomerListParam)
 	if err != nil {
 		return nil, err
 	}
-	return &v1.CustomerListRes{Items: items, Total: total}, nil
+	return &v1.CustomerListRes{Items: items, Total: total, Summary: summary}, nil
 }
 
 func (c *ControllerV1) CustomerDetail(ctx context.Context, req *v1.CustomerDetailReq) (res *v1.CustomerDetailRes, err error) {
diff --git a/server/internal/controller/app/app_v1_notification.go b/server/internal/controller/app/app_v1_notification.go
new file mode 100644
index 0000000..1c65d4d
--- /dev/null
+++ b/server/internal/controller/app/app_v1_notification.go
@@ -0,0 +1,29 @@
+package app
+
+import (
+	"context"
+	v1 "git.5iot.com/iotlcm-public/iotlcm-app/api/app/v1"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/service"
+)
+
+func (c *ControllerV1) WarningPreference(ctx context.Context, req *v1.WarningPreferenceReq) (*v1.WarningPreferenceRes, error) {
+	data, err := service.AppUser().WarningPreference(ctx)
+	if err != nil {
+		return nil, err
+	}
+	return &v1.WarningPreferenceRes{AppWarningPreferenceModel: *data}, nil
+}
+func (c *ControllerV1) SaveWarningPreference(ctx context.Context, req *v1.SaveWarningPreferenceReq) (*v1.SaveWarningPreferenceRes, error) {
+	data, err := service.AppUser().SaveWarningPreference(ctx, &req.AppWarningPreferenceParam)
+	if err != nil {
+		return nil, err
+	}
+	return &v1.SaveWarningPreferenceRes{AppWarningPreferenceModel: *data}, nil
+}
+func (c *ControllerV1) UnbindWechat(ctx context.Context, req *v1.UnbindWechatReq) (*v1.UnbindWechatRes, error) {
+	data, err := service.AppUser().UnbindWechat(ctx)
+	if err != nil {
+		return nil, err
+	}
+	return &v1.UnbindWechatRes{AppWechatBindModel: *data}, nil
+}
diff --git a/server/internal/controller/app/app_v1_work_order.go b/server/internal/controller/app/app_v1_work_order.go
index 578efbc..c558ab7 100644
--- a/server/internal/controller/app/app_v1_work_order.go
+++ b/server/internal/controller/app/app_v1_work_order.go
@@ -38,3 +38,10 @@ func (c *ControllerV1) WorkOrderUpload(ctx context.Context, req *v1.WorkOrderUpl
 	}
 	return &v1.WorkOrderUploadRes{SysOssUploadModel: workOrderFile}, nil
 }
+
+func (c *ControllerV1) WorkOrderAction(ctx context.Context, req *v1.WorkOrderActionReq) (*v1.WorkOrderActionRes, error) {
+	if err := service.AppWorkOrder().Action(ctx, &req.AppWorkOrderActionParam); err != nil {
+		return nil, err
+	}
+	return &v1.WorkOrderActionRes{}, nil
+}
diff --git a/server/internal/controller/app/execution_log.go b/server/internal/controller/app/execution_log.go
new file mode 100644
index 0000000..967027f
--- /dev/null
+++ b/server/internal/controller/app/execution_log.go
@@ -0,0 +1,31 @@
+package app
+
+import (
+	"context"
+	v1 "git.5iot.com/iotlcm-public/iotlcm-app/api/app/v1"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/service/executionlog"
+)
+
+type ExecutionLogController struct{}
+
+func (c *ExecutionLogController) List(ctx context.Context, req *v1.ExecutionLogListReq) (*v1.ExecutionLogListRes, error) {
+	items, total, err := executionlog.List(ctx, &req.AppExecutionLogListParam)
+	if err != nil {
+		return nil, err
+	}
+	return &v1.ExecutionLogListRes{Items: items, Total: total}, nil
+}
+func (c *ExecutionLogController) Summary(ctx context.Context, req *v1.ExecutionLogSummaryReq) (*v1.ExecutionLogSummaryRes, error) {
+	item, err := executionlog.Summary(ctx, req.BatchNo)
+	if err != nil {
+		return nil, err
+	}
+	return &v1.ExecutionLogSummaryRes{AppExecutionLogItem: item}, nil
+}
+func (c *ExecutionLogController) Details(ctx context.Context, req *v1.ExecutionLogDetailsReq) (*v1.ExecutionLogDetailsRes, error) {
+	items, total, err := executionlog.Details(ctx, &req.AppExecutionLogDetailParam)
+	if err != nil {
+		return nil, err
+	}
+	return &v1.ExecutionLogDetailsRes{Items: items, Total: total}, nil
+}
diff --git a/server/internal/controller/gen/test_demo.go b/server/internal/controller/gen/test_demo.go
index effd6b6..7adc50a 100644
--- a/server/internal/controller/gen/test_demo.go
+++ b/server/internal/controller/gen/test_demo.go
@@ -1,7 +1,7 @@
 // Package gen
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 // @AutoGenerate Version
 package gen
diff --git a/server/internal/controller/gen/test_tree.go b/server/internal/controller/gen/test_tree.go
index d23cea4..358679d 100644
--- a/server/internal/controller/gen/test_tree.go
+++ b/server/internal/controller/gen/test_tree.go
@@ -1,7 +1,7 @@
 // Package gen
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2026 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 // @AutoGenerate Version
 package gen
diff --git a/server/internal/controller/system/sys_notice_user.go b/server/internal/controller/system/sys_notice_user.go
index 2065b18..11a06a6 100644
--- a/server/internal/controller/system/sys_notice_user.go
+++ b/server/internal/controller/system/sys_notice_user.go
@@ -1,7 +1,7 @@
 // Package gen
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 // @AutoGenerate Version
 package system
diff --git a/server/internal/controller/system/system_v1_dict.go b/server/internal/controller/system/system_v1_dict.go
index aeaa28a..1f4dd67 100644
--- a/server/internal/controller/system/system_v1_dict.go
+++ b/server/internal/controller/system/system_v1_dict.go
@@ -9,6 +9,7 @@ import (
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/service"
 )
 
+
 func (c *ControllerV1) SysDictTypeList(ctx context.Context, req *v1.SysDictTypeListReq) (res *v1.SysDictTypeListRes, err error) {
 	items, total, err := service.SysDictType().List(ctx, &req.SysDictTypeListParam)
 	if err != nil {
diff --git a/server/internal/dao/internal/batch_main.go b/server/internal/dao/internal/batch_main.go
index 6a531bb..3ffc6a3 100644
--- a/server/internal/dao/internal/batch_main.go
+++ b/server/internal/dao/internal/batch_main.go
@@ -26,19 +26,19 @@ type BatchMainColumns struct {
 	OrderSn          string // 订单编号
 	BatchType        string // 批次类型 枚举
 	BatchStatus      string // 批次状态 枚举
-	BatchAsyncStatus string // 异步处理状态 0=已创建 1=待处理 2=处理中 3=成功 4=失败 5=部分成功
+	BatchAsyncStatus string // 异步处理状态
 	SourceType       string // 来源方式 枚举
 	SourceBatchNo    string // 来源批次编号
 	SourceOssId      string // 源文件OSS ID
 	ResultOssId      string // 结果文件OSS ID
-	IsCrossDept      string // 是否跨级操作机构 0-否 1-是
+	IsCrossDept      string // 是否跨级操作机构
 	TargetDeptId     string // 目标机构编号
 	DeptId           string // 机构编号
 	TotalCount       string // 总数量
 	ValidCount       string // 有效数量
 	SuccessCount     string // 成功数量
 	FailCount        string // 失败数量
-	RunResult        string // 运行结果：0-待运行 1-运行中 2-成功 3-失败
+	RunResult        string // 运行结果
 	FailReason       string // 失败原因
 	BatchInfo        string // 批次信息：入库/出库展示字段
 	Remark           string // 备注扩展字段
@@ -50,6 +50,8 @@ type BatchMainColumns struct {
 	CreatedAt        string // 创建时间
 	UpdatedBy        string // 更新者ID
 	UpdatedAt        string // 更新时间
+	SourceChannel    string // 发起渠道:console/mini_program/api/system/legacy
+	ExecutionMode    string // 操作规模:0未知1单卡2批量
 }
 
 // batchMainColumns holds the columns for the table batch_main.
@@ -83,6 +85,8 @@ var batchMainColumns = BatchMainColumns{
 	CreatedAt:        "created_at",
 	UpdatedBy:        "updated_by",
 	UpdatedAt:        "updated_at",
+	SourceChannel:    "source_channel",
+	ExecutionMode:    "execution_mode",
 }
 
 // NewBatchMainDao creates and returns a new DAO object for table data access.
diff --git a/server/internal/library/addons/addons.go b/server/internal/library/addons/addons.go
index ed23ca4..a746151 100644
--- a/server/internal/library/addons/addons.go
+++ b/server/internal/library/addons/addons.go
@@ -1,7 +1,7 @@
 // Package addons
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package addons
 
diff --git a/server/internal/library/allocaterequest/request.go b/server/internal/library/allocaterequest/request.go
new file mode 100644
index 0000000..9c87365
--- /dev/null
+++ b/server/internal/library/allocaterequest/request.go
@@ -0,0 +1,35 @@
+package allocaterequest
+
+import (
+	"crypto/sha256"
+	"encoding/hex"
+	"encoding/json"
+	"regexp"
+	"sort"
+	"strings"
+
+	"github.com/gogf/gf/v2/errors/gerror"
+)
+
+var validID = regexp.MustCompile(`^[A-Za-z0-9_-]{16,96}$`)
+
+func Key(tenant string, user int64, requestID string) (string, error) {
+	requestID = strings.TrimSpace(requestID)
+	if tenant == "" || user <= 0 || !validID.MatchString(requestID) {
+		return "", gerror.New("划拨请求标识无效")
+	}
+	value, err := json.Marshal([]any{tenant, user, "allocate", requestID})
+	if err != nil {
+		return "", gerror.Wrap(err, "生成划拨请求标识失败")
+	}
+	digest := sha256.Sum256(value)
+	return hex.EncodeToString(digest[:]), nil
+}
+
+func Fingerprint(cards []string, source, target int64, mode int, remark string) string {
+	sorted := append([]string(nil), cards...)
+	sort.Strings(sorted)
+	value, _ := json.Marshal([]any{sorted, source, target, mode, strings.TrimSpace(remark)})
+	digest := sha256.Sum256(value)
+	return hex.EncodeToString(digest[:])
+}
diff --git a/server/internal/library/allocaterequest/request_test.go b/server/internal/library/allocaterequest/request_test.go
new file mode 100644
index 0000000..86831c8
--- /dev/null
+++ b/server/internal/library/allocaterequest/request_test.go
@@ -0,0 +1,41 @@
+package allocaterequest
+
+import "testing"
+
+func TestRequestIdentity(t *testing.T) {
+	requestID := "alloc_0123456789abcdef"
+	first, err := Key("A", 7, requestID)
+	if err != nil || len(first) != 64 {
+		t.Fatal(first, err)
+	}
+	same, _ := Key("A", 7, requestID)
+	if first != same {
+		t.Fatal("unstable identity")
+	}
+	for _, entry := range []struct {
+		tenant string
+		user   int64
+		id     string
+	}{{"B", 7, requestID}, {"A", 8, requestID}, {"A", 7, requestID + "2"}} {
+		other, err := Key(entry.tenant, entry.user, entry.id)
+		if err != nil || other == first {
+			t.Fatal("identity scope collision", err)
+		}
+	}
+	for _, id := range []string{"", "short", "0123456789abcdef/"} {
+		if _, err := Key("A", 7, id); err == nil {
+			t.Fatal("invalid identity accepted", id)
+		}
+	}
+}
+func TestFingerprint(t *testing.T) {
+	first := Fingerprint([]string{"B", "A"}, 1, 2, 2, " remark ")
+	if first != Fingerprint([]string{"A", "B"}, 1, 2, 2, "remark") {
+		t.Fatal("card order changed identity")
+	}
+	for _, other := range []string{Fingerprint([]string{"A"}, 1, 2, 2, "remark"), Fingerprint([]string{"A", "B"}, 2, 2, 2, "remark"), Fingerprint([]string{"A", "B"}, 1, 3, 2, "remark"), Fingerprint([]string{"A", "B"}, 1, 2, 1, "remark"), Fingerprint([]string{"A", "B"}, 1, 2, 2, "other")} {
+		if first == other {
+			t.Fatal("changed parameters accepted")
+		}
+	}
+}
diff --git a/server/internal/library/allocaterequest/store.go b/server/internal/library/allocaterequest/store.go
new file mode 100644
index 0000000..c2c8900
--- /dev/null
+++ b/server/internal/library/allocaterequest/store.go
@@ -0,0 +1,25 @@
+package allocaterequest
+
+import (
+	"context"
+	"github.com/gogf/gf/v2/errors/gerror"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/dao"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/entity"
+)
+
+func Find(ctx context.Context, tenant string, user int64, requestID string) (*entity.BatchMain, error) {
+	key, err := Key(tenant, user, requestID)
+	if err != nil {
+		return nil, err
+	}
+	var batch *entity.BatchMain
+	columns := dao.BatchMain.Columns()
+	scope := dao.BatchMain.Ctx(ctx).Where(columns.TenantId, tenant).Where(columns.CreatedBy, user)
+	if err = scope.Clone().Where(columns.BatchNo, "ALC"+key[:60]).Scan(&batch); err != nil {
+		return nil, gerror.Wrap(err, "查询历史划拨请求失败")
+	}
+	if batch != nil {
+		return batch, nil
+	}
+	return nil, nil
+}
diff --git a/server/internal/library/allocationunits/units.go b/server/internal/library/allocationunits/units.go
new file mode 100644
index 0000000..4a7fef3
--- /dev/null
+++ b/server/internal/library/allocationunits/units.go
@@ -0,0 +1,141 @@
+package allocationunits
+
+import (
+	"context"
+	"github.com/gogf/gf/v2/database/gdb"
+	"github.com/gogf/gf/v2/encoding/gjson"
+	"github.com/gogf/gf/v2/errors/gerror"
+	"strings"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/dao"
+)
+
+// Fields 是日志展示契约，不增加数据库字段。
+type Fields struct {
+	SourceDeptId   int64  `json:"sourceDeptId" orm:"-"`
+	SourceDeptName string `json:"sourceDeptName" orm:"-"`
+	TargetDeptId   int64  `json:"targetDeptId" orm:"-"`
+	TargetDeptName string `json:"targetDeptName" orm:"-"`
+	TargetDeptMode string `json:"targetDeptMode" orm:"-"`
+}
+type Unit struct {
+	Id   int64  `orm:"dept_id"`
+	Key  string `orm:"dept_key"`
+	Name string `orm:"dept_name"`
+}
+
+func Load(ctx context.Context, tenant string, ids []int64, tx ...gdb.TX) (map[int64]Unit, error) {
+	unique := map[int64]bool{}
+	for _, id := range ids {
+		if id > 0 {
+			unique[id] = true
+		}
+	}
+	result := map[int64]Unit{}
+	if len(unique) == 0 {
+		return result, nil
+	}
+	ids = nil
+	for id := range unique {
+		ids = append(ids, id)
+	}
+	var rows []Unit
+	if len(tx) > 0 {
+		result, err := tx[0].GetAll("SELECT dept_id,dept_key,dept_name FROM sys_dept WHERE tenant_id=? AND deleted_at IS NULL AND dept_id IN (?)", tenant, ids)
+		if err != nil {
+			return nil, gerror.Wrap(err, "读取划拨单位信息失败")
+		}
+		if err := result.Structs(&rows); err != nil {
+			return nil, err
+		}
+		units := map[int64]Unit{}
+		for _, row := range rows {
+			units[row.Id] = row
+		}
+		return units, nil
+	}
+	mod := dao.SysDept.Ctx(ctx)
+	if err := mod.WhereNull("deleted_at").Where("tenant_id", tenant).WhereIn("dept_id", ids).Fields("dept_id", "dept_key", "dept_name", "deleted_at").Scan(&rows); err != nil {
+		return nil, gerror.Wrap(err, "读取划拨单位信息失败")
+	}
+	for _, row := range rows {
+		result[row.Id] = row
+	}
+	return result, nil
+}
+
+// Snapshot 名称由服务端查询，仅在受理时记录，执行时不覆盖。
+func Snapshot(ctx context.Context, tenant string, source, target int64, tx ...gdb.TX) (*gjson.Json, error) {
+	units, err := Load(ctx, tenant, []int64{source, target}, tx...)
+	if err != nil {
+		return nil, err
+	}
+	mode := "single"
+	if target <= 0 {
+		mode = "per_row"
+	}
+	return gjson.New(map[string]any{"sourceDeptId": source, "sourceDeptKey": units[source].Key, "sourceDeptName": units[source].Name, "targetDeptId": target, "targetDeptKey": units[target].Key, "targetDeptName": units[target].Name, "targetDeptMode": mode}), nil
+}
+
+func Resolve(info *gjson.Json, source, target int64) Fields {
+	f := Fields{SourceDeptId: source, TargetDeptId: target}
+	if info != nil {
+		if id := info.Get("sourceDeptId").Int64(); id > 0 {
+			f.SourceDeptId = id
+		}
+		if id := info.Get("targetDeptId").Int64(); id > 0 {
+			f.TargetDeptId = id
+		}
+		f.SourceDeptName = strings.TrimSpace(info.Get("sourceDeptName").String())
+		f.TargetDeptName = strings.TrimSpace(info.Get("targetDeptName").String())
+		f.TargetDeptMode = info.Get("targetDeptMode").String()
+	}
+	if f.TargetDeptMode == "" {
+		if f.TargetDeptId > 0 {
+			f.TargetDeptMode = "single"
+		} else {
+			f.TargetDeptMode = "per_row"
+		}
+	}
+	return f
+}
+
+// Fill 一页只补查一次旧数据的单位名称，不扫描卡片当前归属，不覆盖历史快照。
+func Fill(ctx context.Context, tenant string, fields []*Fields) error {
+	ids := []int64{}
+	for _, f := range fields {
+		if f.SourceDeptName == "" {
+			ids = append(ids, f.SourceDeptId)
+		}
+		if f.TargetDeptName == "" {
+			ids = append(ids, f.TargetDeptId)
+		}
+	}
+	units, err := Load(ctx, tenant, ids)
+	if err != nil {
+		return err
+	}
+	for _, f := range fields {
+		if f.SourceDeptName == "" {
+			f.SourceDeptName = units[f.SourceDeptId].Name
+		}
+		if f.TargetDeptName == "" {
+			f.TargetDeptName = units[f.TargetDeptId].Name
+		}
+	}
+	return nil
+}
+
+func Merge(info, units *gjson.Json) *gjson.Json {
+	data := map[string]any{}
+	if info != nil {
+		for k, v := range info.Map() {
+			data[k] = v
+		}
+	}
+	if units != nil {
+		for k, v := range units.Map() {
+			data[k] = v
+		}
+	}
+	return gjson.New(data)
+}
diff --git a/server/internal/library/allocationunits/units_test.go b/server/internal/library/allocationunits/units_test.go
new file mode 100644
index 0000000..9b043a8
--- /dev/null
+++ b/server/internal/library/allocationunits/units_test.go
@@ -0,0 +1,55 @@
+package allocationunits
+
+import (
+	"context"
+	"encoding/json"
+	_ "github.com/gogf/gf/contrib/drivers/sqlite/v2"
+	"github.com/gogf/gf/v2/database/gdb"
+	"github.com/gogf/gf/v2/encoding/gjson"
+	"github.com/gogf/gf/v2/frame/g"
+	"strings"
+	"testing"
+)
+
+func TestSnapshotAndLegacyFallback(t *testing.T) {
+	ctx := context.Background()
+	if err := gdb.SetConfig(gdb.Config{"default": gdb.ConfigGroup{{Type: "sqlite", Link: "sqlite::@file(:memory:)", MaxOpenConnCount: 1}}}); err != nil {
+		t.Fatal(err)
+	}
+	t.Cleanup(func() { _ = g.DB().Close(ctx) })
+	for _, sql := range []string{"CREATE TABLE sys_dept(dept_id INTEGER,tenant_id TEXT,dept_key TEXT,dept_name TEXT,deleted_at TEXT)", "INSERT INTO sys_dept VALUES(1,'A','a','划拨单位',NULL),(2,'A','b','接收单位',NULL),(3,'B','other','其他租户',NULL),(4,'A','gone','已删除单位','2026-01-01')"} {
+		if _, err := g.DB().Exec(ctx, sql); err != nil {
+			t.Fatal(err)
+		}
+	}
+	snapshot, err := Snapshot(ctx, "A", 1, 2)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if _, err := g.DB().Exec(ctx, "UPDATE sys_dept SET dept_name='新名称' WHERE dept_id=2"); err != nil {
+		t.Fatal(err)
+	}
+	frozen := Resolve(snapshot, 0, 0)
+	legacy := Resolve(nil, 1, 2)
+	foreign := Resolve(nil, 3, 4)
+	if err := Fill(ctx, "A", []*Fields{&frozen, &legacy, &foreign}); err != nil {
+		t.Fatal(err)
+	}
+	if frozen.TargetDeptName != "接收单位" || legacy.TargetDeptName != "新名称" || foreign.SourceDeptName != "" || foreign.TargetDeptName != "" {
+		t.Fatalf("快照/回退/隔离错误: %+v %+v %+v", frozen, legacy, foreign)
+	}
+	if f := Resolve(gjson.New(map[string]any{"sourceDeptName": "历史名称"}), 1, 0); f.TargetDeptMode != "per_row" {
+		t.Fatal(f)
+	}
+	encoded, err := json.Marshal(frozen)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if !strings.Contains(string(encoded), "sourceDeptName") {
+		t.Fatal("JSON契约缺少单位字段")
+	}
+	merged := Merge(gjson.New(map[string]any{"jobRole": "allocate_parent"}), snapshot)
+	if merged.Get("jobRole").String() != "allocate_parent" || merged.Get("sourceDeptName").String() != "划拨单位" {
+		t.Fatal(merged)
+	}
+}
diff --git a/server/internal/library/batchimport/async.go b/server/internal/library/batchimport/async.go
index 25dc4f5..9f9d859 100644
--- a/server/internal/library/batchimport/async.go
+++ b/server/internal/library/batchimport/async.go
@@ -3,6 +3,7 @@ package batchimport
 import (
 	"context"
 	"strings"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/batchmetadata"
 
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/dao"
@@ -21,6 +22,9 @@ type PendingOptions struct {
 }
 
 func CreatePendingUpload(ctx context.Context, req SubmitRequest, p Processor, options PendingOptions) (*Result, error) {
+	if err := batchmetadata.ValidateCreation(req.SourceChannel, req.ExecutionMode); err != nil {
+		return nil, err
+	}
 	cfg := p.Config()
 	if req.File == nil {
 		return nil, gerror.New("请选择上传文件")
@@ -59,6 +63,9 @@ func CreatePendingUpload(ctx context.Context, req SubmitRequest, p Processor, op
 }
 
 func CreatePendingRows(ctx context.Context, req SubmitRequest, p Processor, rows []Row, options PendingOptions) (*Result, error) {
+	if err := batchmetadata.ValidateCreation(req.SourceChannel, req.ExecutionMode); err != nil {
+		return nil, err
+	}
 	batchNo, err := NextBatchNoContext(ctx, p.Config().BatchNoPrefix)
 	if err != nil {
 		return nil, err
@@ -103,6 +110,8 @@ func createPending(ctx context.Context, req *SubmitRequest, p Processor, rows []
 			BatchStatus:      consts.BatchAsyncStatusPending,
 			BatchAsyncStatus: consts.BatchAsyncStatusPending,
 			SourceType:       req.SourceType,
+			SourceChannel:    batchmetadata.Channel(req.SourceChannel),
+			ExecutionMode:    batchmetadata.NormalizeMode(req.ExecutionMode),
 			SourceBatchNo:    sourceBatchNo,
 			IsCrossDept:      0,
 			TargetDeptId:     req.TargetDeptId,
diff --git a/server/internal/library/batchimport/runner.go b/server/internal/library/batchimport/runner.go
index df4f78c..7f5ee6d 100644
--- a/server/internal/library/batchimport/runner.go
+++ b/server/internal/library/batchimport/runner.go
@@ -3,17 +3,18 @@ package batchimport
 import (
 	"context"
 	"fmt"
+	"io"
+	"os"
+	"strings"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/dao"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/batchmetadata"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/do"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/entity"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/service"
 	"git.5iot.com/iotlcm-public/iotlcm-app/utility/hash"
 	"git.5iot.com/iotlcm-public/iotlcm-app/utility/iot_excelize"
-	"io"
-	"os"
-	"strings"
 
 	"github.com/gogf/gf/v2/crypto/gmd5"
 	"github.com/gogf/gf/v2/database/gdb"
@@ -25,6 +26,9 @@ import (
 )
 
 func SubmitAndRun(ctx context.Context, req SubmitRequest, p Processor) (*Result, error) {
+	if err := batchmetadata.ValidateCreation(req.SourceChannel, req.ExecutionMode); err != nil {
+		return nil, err
+	}
 	cfg := p.Config()
 	if req.File == nil {
 		return nil, gerror.New("请选择上传文件")
@@ -107,6 +111,9 @@ func SubmitAndRun(ctx context.Context, req SubmitRequest, p Processor) (*Result,
 }
 
 func RunRows(ctx context.Context, req SubmitRequest, p Processor, rows []Row, sourceName string) (*Result, error) {
+	if err := batchmetadata.ValidateCreation(req.SourceChannel, req.ExecutionMode); err != nil {
+		return nil, err
+	}
 	cfg := p.Config()
 	batchNo, err := NextBatchNoContext(ctx, cfg.BatchNoPrefix)
 	if err != nil {
@@ -268,6 +275,8 @@ func saveBatchAndExecute(ctx context.Context, req *SubmitRequest, p Processor, r
 			BatchStatus:      batchStatusByImportStatus(result.ImportStatus),
 			BatchAsyncStatus: batchStatusByImportStatus(result.ImportStatus),
 			SourceType:       req.SourceType,
+			SourceChannel:    batchmetadata.Channel(req.SourceChannel),
+			ExecutionMode:    batchmetadata.NormalizeMode(req.ExecutionMode),
 			SourceBatchNo:    sourceBatchNo,
 			IsCrossDept:      0,
 			TargetDeptId:     req.TargetDeptId,
diff --git a/server/internal/library/batchimport/types.go b/server/internal/library/batchimport/types.go
index 5350f30..f155ca5 100644
--- a/server/internal/library/batchimport/types.go
+++ b/server/internal/library/batchimport/types.go
@@ -10,6 +10,9 @@ import (
 )
 
 type SubmitRequest struct {
+	SourceChannel string
+	// ExecutionMode is the semantic size of the operation. Zero means the caller did not specify it.
+	ExecutionMode    int
 	File             *ghttp.UploadFile
 	BizParams        any
 	SourceType       int
diff --git a/server/internal/library/batchmetadata/metadata.go b/server/internal/library/batchmetadata/metadata.go
new file mode 100644
index 0000000..0d4795e
--- /dev/null
+++ b/server/internal/library/batchmetadata/metadata.go
@@ -0,0 +1,52 @@
+package batchmetadata
+
+import "github.com/gogf/gf/v2/errors/gerror"
+
+const (
+	Console     = "console"
+	MiniProgram = "mini_program"
+	API         = "api"
+	System      = "system"
+	Legacy      = "legacy"
+	Unknown     = 0
+	Single      = 1
+	Bulk        = 2
+)
+
+// NormalizeMode validates the explicit execution size supplied by the business entry point.
+// Execution size is request metadata and must not be inferred from context or result counts.
+func NormalizeMode(requested int) int {
+	if requested == Single || requested == Bulk {
+		return requested
+	}
+	return Unknown
+}
+
+func ValidChannel(value string) bool {
+	switch value {
+	case Console, MiniProgram, API, System, Legacy:
+		return true
+	}
+	return false
+}
+
+func Channel(value string) string {
+	if ValidChannel(value) {
+		return value
+	}
+	return Legacy
+}
+
+func ValidMode(value int) bool { return value >= Unknown && value <= Bulk }
+
+// ValidateCreation rejects missing attribution for new work; historical reads
+// and resumed work continue to use Channel/NormalizeMode for compatibility.
+func ValidateCreation(channel string, mode int) error {
+	if !ValidChannel(channel) || channel == Legacy {
+		return gerror.New("新建批次发起渠道无效")
+	}
+	if mode != Single && mode != Bulk {
+		return gerror.New("新建批次必须指定单卡或批量操作规模")
+	}
+	return nil
+}
diff --git a/server/internal/library/batchmetadata/metadata_test.go b/server/internal/library/batchmetadata/metadata_test.go
new file mode 100644
index 0000000..6ee76c5
--- /dev/null
+++ b/server/internal/library/batchmetadata/metadata_test.go
@@ -0,0 +1,52 @@
+package batchmetadata
+
+import "testing"
+
+func TestValidateCreation(t *testing.T) {
+	for _, channel := range []string{Console, MiniProgram, API, System} {
+		for _, mode := range []int{Single, Bulk} {
+			if err := ValidateCreation(channel, mode); err != nil {
+				t.Fatal(channel, mode, err)
+			}
+		}
+	}
+	for _, channel := range []string{"", Legacy} {
+		if err := ValidateCreation(channel, Single); err == nil {
+			t.Fatal("missing new batch attribution accepted", channel)
+		}
+	}
+	if ValidateCreation("worker", Single) == nil {
+		t.Fatal("invalid source accepted")
+	}
+	for _, mode := range []int{-1, Unknown, 3} {
+		if ValidateCreation(Console, mode) == nil {
+			t.Fatal("invalid new execution size accepted", mode)
+		}
+	}
+}
+
+func TestMetadata(t *testing.T) {
+	if NormalizeMode(0) != Unknown {
+		t.Fatal("unspecified entry mode must remain unknown")
+	}
+	if NormalizeMode(Single) != Single {
+		t.Fatal("single entry mode lost")
+	}
+	if NormalizeMode(Bulk) != Bulk {
+		t.Fatal("bulk entry mode lost")
+	}
+	if NormalizeMode(99) != Unknown {
+		t.Fatal("invalid entry mode accepted")
+	}
+	for _, c := range []string{Console, MiniProgram, API, System, Legacy} {
+		if Channel(c) != c {
+			t.Fatal(c)
+		}
+	}
+	if Channel("worker") != Legacy || Channel("") != Legacy {
+		t.Fatal("unknown source was attributed")
+	}
+	if ValidMode(-1) || ValidMode(3) {
+		t.Fatal("invalid mode accepted")
+	}
+}
diff --git a/server/internal/library/bcache/bcache.go b/server/internal/library/bcache/bcache.go
index 083c8a3..20083b2 100644
--- a/server/internal/library/bcache/bcache.go
+++ b/server/internal/library/bcache/bcache.go
@@ -1,6 +1,6 @@
 // Package bcache
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package bcache
diff --git a/server/internal/library/bcache/bcache_system_auth.go b/server/internal/library/bcache/bcache_system_auth.go
index 66f7720..74d83d5 100644
--- a/server/internal/library/bcache/bcache_system_auth.go
+++ b/server/internal/library/bcache/bcache_system_auth.go
@@ -1,16 +1,16 @@
 // Package bcache
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package bcache
 
 import (
 	"context"
 	"fmt"
+	"time"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/cache"
-	"time"
 
 	"github.com/gogf/gf/v2/frame/g"
 )
diff --git a/server/internal/library/cache/cache.go b/server/internal/library/cache/cache.go
index 8310c22..4e61afb 100644
--- a/server/internal/library/cache/cache.go
+++ b/server/internal/library/cache/cache.go
@@ -1,7 +1,7 @@
 // Package cache
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package cache
 
diff --git a/server/internal/library/cache/file/file.go b/server/internal/library/cache/file/file.go
index 3fdb7ba..88dad01 100644
--- a/server/internal/library/cache/file/file.go
+++ b/server/internal/library/cache/file/file.go
@@ -1,7 +1,7 @@
 // Package file
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package file
 
diff --git a/server/internal/library/contexts/contexts.go b/server/internal/library/contexts/contexts.go
index 5cb4dce..9590227 100644
--- a/server/internal/library/contexts/contexts.go
+++ b/server/internal/library/contexts/contexts.go
@@ -1,15 +1,15 @@
 // Package contexts
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package contexts
 
 import (
 	"context"
+	"slices"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model"
-	"slices"
 
 	"github.com/gogf/gf/v2/frame/g"
 	"github.com/gogf/gf/v2/net/ghttp"
diff --git a/server/internal/library/event/event.go b/server/internal/library/event/event.go
index 68fa5a8..cfd2f87 100644
--- a/server/internal/library/event/event.go
+++ b/server/internal/library/event/event.go
@@ -1,7 +1,7 @@
 // Package event
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package event
 
diff --git a/server/internal/library/mcache/mcache.go b/server/internal/library/mcache/mcache.go
index e17955b..b6bb52a 100644
--- a/server/internal/library/mcache/mcache.go
+++ b/server/internal/library/mcache/mcache.go
@@ -1,7 +1,7 @@
 // Package mcache
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 // 内存缓存管理
 package mcache
diff --git a/server/internal/library/mcache/mcache_access_list.go b/server/internal/library/mcache/mcache_access_list.go
index 8f22f80..2d29457 100644
--- a/server/internal/library/mcache/mcache_access_list.go
+++ b/server/internal/library/mcache/mcache_access_list.go
@@ -1,17 +1,17 @@
 // Package mcache
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package mcache
 
 import (
 	"context"
 	"fmt"
+	"time"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/event"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/service"
-	"time"
 
 	"github.com/gogf/gf/v2/frame/g"
 )
@@ -28,7 +28,29 @@ func init() {
 
 }
 
+type requestAccessKey struct{}
+
+type requestAccessSnapshot struct {
+	userId int64
+	codes  []string
+	scopes []string
+}
+
+// WithFreshUserAccess 为小程序请求读取当前权限并保留请求内快照。
+// 控制台清理本地缓存不会清理小程序进程内的权限缓存。
+func WithFreshUserAccess(ctx context.Context, userId int64) (context.Context, error) {
+	codes, scopes, err := service.SysAuth().GetUserAccessCodeList(ctx, userId)
+	if err != nil {
+		return ctx, err
+	}
+	snapshot := requestAccessSnapshot{userId: userId, codes: ensureCurrentUserAccessCode(codes), scopes: scopes}
+	return context.WithValue(ctx, requestAccessKey{}, snapshot), nil
+}
+
 func GetUserAccessCodeList(ctx context.Context, userId int64) ([]string, []string, error) {
+	if snapshot, ok := ctx.Value(requestAccessKey{}).(requestAccessSnapshot); ok && snapshot.userId == userId {
+		return snapshot.codes, snapshot.scopes, nil
+	}
 	accessCodeList, err := Instance().Get(ctx, fmt.Sprintf(consts.MemCacheUserAccessCodeList, userId))
 	menuRoleDataAccessCodeList, err := Instance().Get(ctx, fmt.Sprintf(consts.MemCacheUserRoleDataAccessCodeList, userId))
 	if err != nil || accessCodeList == nil {
diff --git a/server/internal/library/mcache/mcache_access_list_test.go b/server/internal/library/mcache/mcache_access_list_test.go
new file mode 100644
index 0000000..f7244f1
--- /dev/null
+++ b/server/internal/library/mcache/mcache_access_list_test.go
@@ -0,0 +1,19 @@
+package mcache
+
+import (
+	"context"
+	"reflect"
+	"testing"
+)
+
+func TestRequestAccessSnapshotOverridesProcessCache(t *testing.T) {
+	for _, codes := range [][]string{{"cpm:iot:tSimCardAllocate:batch:submit"}, {}} {
+		ctx := context.WithValue(context.Background(), requestAccessKey{}, requestAccessSnapshot{
+			userId: 123, codes: ensureCurrentUserAccessCode(codes), scopes: []string{"scope-current"},
+		})
+		got, scopes, err := GetUserAccessCodeList(ctx, 123)
+		if err != nil || !reflect.DeepEqual(got, ensureCurrentUserAccessCode(codes)) || !reflect.DeepEqual(scopes, []string{"scope-current"}) {
+			t.Fatalf("request snapshot was not respected: codes=%v scopes=%v err=%v", got, scopes, err)
+		}
+	}
+}
diff --git a/server/internal/library/mcache/mcache_system_config.go b/server/internal/library/mcache/mcache_system_config.go
index e122e13..cdd3598 100644
--- a/server/internal/library/mcache/mcache_system_config.go
+++ b/server/internal/library/mcache/mcache_system_config.go
@@ -1,20 +1,20 @@
 // Package mcache
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package mcache
 
 import (
 	"context"
 	"fmt"
+	"time"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/contexts"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/event"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/request"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/service"
-	"time"
 )
 
 func init() {
diff --git a/server/internal/library/mcache/mcache_system_dept.go b/server/internal/library/mcache/mcache_system_dept.go
index 533c97d..0adc69b 100644
--- a/server/internal/library/mcache/mcache_system_dept.go
+++ b/server/internal/library/mcache/mcache_system_dept.go
@@ -1,17 +1,17 @@
 // Package mcache
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package mcache
 
 import (
 	"context"
 	"fmt"
+	"time"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/event"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/service"
-	"time"
 )
 
 func init() {
diff --git a/server/internal/library/mcache/mcache_system_user.go b/server/internal/library/mcache/mcache_system_user.go
index f34264b..db4b223 100644
--- a/server/internal/library/mcache/mcache_system_user.go
+++ b/server/internal/library/mcache/mcache_system_user.go
@@ -1,18 +1,18 @@
 // Package mcache
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package mcache
 
 import (
 	"context"
 	"fmt"
+	"time"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/event"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/service"
-	"time"
 
 	"github.com/gogf/gf/v2/util/gconv"
 )
diff --git a/server/internal/library/rabbitmq/publisher.go b/server/internal/library/rabbitmq/publisher.go
index 94ec2eb..4793631 100644
--- a/server/internal/library/rabbitmq/publisher.go
+++ b/server/internal/library/rabbitmq/publisher.go
@@ -3,6 +3,7 @@ package rabbitmq
 import (
 	"context"
 	"encoding/json"
+	"fmt"
 	"sync"
 	"time"
 
@@ -41,6 +42,25 @@ func Publish(ctx context.Context, queue string, data any) error {
 	return PublishBytes(ctx, queue, body)
 }
 
+func PublishDelayed(ctx context.Context, delayQueue, targetQueue string, delay time.Duration, data any) error {
+	body, err := json.Marshal(data)
+	if err != nil {
+		return gerror.Wrap(err, "序列化延时工单消息失败")
+	}
+	ch, err := channel(ctx)
+	if err != nil {
+		return err
+	}
+	defer ch.Close()
+	if _, err = ch.QueueDeclare(targetQueue, true, false, false, false, nil); err != nil {
+		return gerror.Wrap(err, "声明工单目标队列失败")
+	}
+	if _, err = ch.QueueDeclare(delayQueue, true, false, false, false, amqp.Table{"x-dead-letter-exchange": "", "x-dead-letter-routing-key": targetQueue}); err != nil {
+		return gerror.Wrap(err, "声明工单延时队列失败")
+	}
+	return gerror.Wrap(ch.PublishWithContext(ctx, "", delayQueue, false, false, amqp.Publishing{ContentType: "application/json", DeliveryMode: amqp.Persistent, Expiration: fmt.Sprintf("%d", delay.Milliseconds()), Timestamp: time.Now(), Body: body}), "发送工单延时消息失败")
+}
+
 func PublishBytes(ctx context.Context, queue string, body []byte) error {
 	if queue == "" {
 		return gerror.New("RabbitMQ 队列名不能为空")
diff --git a/server/internal/library/websocket/client.go b/server/internal/library/websocket/client.go
index f9b0bd9..14dabe5 100644
--- a/server/internal/library/websocket/client.go
+++ b/server/internal/library/websocket/client.go
@@ -1,7 +1,7 @@
 // Package websocket
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package websocket
 
diff --git a/server/internal/library/websocket/client_manager.go b/server/internal/library/websocket/client_manager.go
index cd0a6c0..9c55d79 100644
--- a/server/internal/library/websocket/client_manager.go
+++ b/server/internal/library/websocket/client_manager.go
@@ -1,7 +1,7 @@
 // Package websocket
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package websocket
 
diff --git a/server/internal/library/websocket/controller.go b/server/internal/library/websocket/controller.go
index da2ebbc..b12c0a1 100644
--- a/server/internal/library/websocket/controller.go
+++ b/server/internal/library/websocket/controller.go
@@ -1,7 +1,7 @@
 // Package websocket
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package websocket
 
diff --git a/server/internal/library/websocket/init.go b/server/internal/library/websocket/init.go
index fa97274..80ef458 100644
--- a/server/internal/library/websocket/init.go
+++ b/server/internal/library/websocket/init.go
@@ -1,14 +1,14 @@
 // Package websocket
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package websocket
 
 import (
 	"context"
-	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/contexts"
 	"net/http"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/contexts"
 
 	"github.com/gogf/gf/v2/frame/g"
 	"github.com/gogf/gf/v2/net/ghttp"
diff --git a/server/internal/library/websocket/model.go b/server/internal/library/websocket/model.go
index 0660961..4a3fbde 100644
--- a/server/internal/library/websocket/model.go
+++ b/server/internal/library/websocket/model.go
@@ -1,7 +1,7 @@
 // Package websocket
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package websocket
 
diff --git a/server/internal/library/websocket/router.go b/server/internal/library/websocket/router.go
index c1aca1d..37bce60 100644
--- a/server/internal/library/websocket/router.go
+++ b/server/internal/library/websocket/router.go
@@ -1,7 +1,7 @@
 // Package websocket
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package websocket
 
diff --git a/server/internal/library/worker/options.go b/server/internal/library/worker/options.go
index 880dc89..edd5798 100644
--- a/server/internal/library/worker/options.go
+++ b/server/internal/library/worker/options.go
@@ -1,7 +1,7 @@
 // Package worker
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package worker
 
diff --git a/server/internal/library/worker/work_proces.go b/server/internal/library/worker/work_proces.go
index 7b22a06..f9d24cc 100644
--- a/server/internal/library/worker/work_proces.go
+++ b/server/internal/library/worker/work_proces.go
@@ -1,7 +1,7 @@
 // package worker
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package worker
 
diff --git a/server/internal/library/worker/worker.go b/server/internal/library/worker/worker.go
index c58db63..792fe9b 100644
--- a/server/internal/library/worker/worker.go
+++ b/server/internal/library/worker/worker.go
@@ -1,7 +1,7 @@
 // package worker
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package worker
 
diff --git a/server/internal/library/xgen/gen_consts/gen_codes.go b/server/internal/library/xgen/gen_consts/gen_codes.go
index f087eee..5790f2d 100644
--- a/server/internal/library/xgen/gen_consts/gen_codes.go
+++ b/server/internal/library/xgen/gen_consts/gen_codes.go
@@ -1,7 +1,7 @@
 // package genconsts
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package genconsts
 
diff --git a/server/internal/library/xgen/gen_consts/gen_config.go b/server/internal/library/xgen/gen_consts/gen_config.go
index 7726642..4394616 100644
--- a/server/internal/library/xgen/gen_consts/gen_config.go
+++ b/server/internal/library/xgen/gen_consts/gen_config.go
@@ -1,7 +1,7 @@
 // package genconsts
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package genconsts
 
diff --git a/server/internal/library/xgen/gen_dao/gen_dao.go b/server/internal/library/xgen/gen_dao/gen_dao.go
index 48dae85..0b4f400 100644
--- a/server/internal/library/xgen/gen_dao/gen_dao.go
+++ b/server/internal/library/xgen/gen_dao/gen_dao.go
@@ -1,7 +1,7 @@
 // package gendao
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package gendao
 
diff --git a/server/internal/library/xgen/gen_model/gen_codes.go b/server/internal/library/xgen/gen_model/gen_codes.go
index ea600a9..42f3363 100644
--- a/server/internal/library/xgen/gen_model/gen_codes.go
+++ b/server/internal/library/xgen/gen_model/gen_codes.go
@@ -1,7 +1,7 @@
 // package genmodel
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package genmodel
 
diff --git a/server/internal/library/xgen/gen_model/gen_config.go b/server/internal/library/xgen/gen_model/gen_config.go
index 216721f..cea52a9 100644
--- a/server/internal/library/xgen/gen_model/gen_config.go
+++ b/server/internal/library/xgen/gen_model/gen_config.go
@@ -1,7 +1,7 @@
 // package genmodel
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package genmodel
 
diff --git a/server/internal/library/xgen/gen_model/gen_view.go b/server/internal/library/xgen/gen_model/gen_view.go
index d7870bb..6149cca 100644
--- a/server/internal/library/xgen/gen_model/gen_view.go
+++ b/server/internal/library/xgen/gen_model/gen_view.go
@@ -1,7 +1,7 @@
 // package genmodel
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package genmodel
 
diff --git a/server/internal/library/xgen/gen_view/gen_column.go b/server/internal/library/xgen/gen_view/gen_column.go
index e0f2cf5..544b620 100644
--- a/server/internal/library/xgen/gen_view/gen_column.go
+++ b/server/internal/library/xgen/gen_view/gen_column.go
@@ -1,15 +1,15 @@
 // package genview
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package genview
 
 import (
 	"context"
+	"strings"
 	gendao "git.5iot.com/iotlcm-public/iotlcm-app/internal/library/xgen/gen_dao"
 	genmodel "git.5iot.com/iotlcm-public/iotlcm-app/internal/library/xgen/gen_model"
-	"strings"
 
 	"github.com/gogf/gf/v2/database/gdb"
 	"github.com/gogf/gf/v2/frame/g"
diff --git a/server/internal/library/xgen/gen_view/gen_column_default.go b/server/internal/library/xgen/gen_view/gen_column_default.go
index f66efbc..3fe2e8a 100644
--- a/server/internal/library/xgen/gen_view/gen_column_default.go
+++ b/server/internal/library/xgen/gen_view/gen_column_default.go
@@ -1,7 +1,7 @@
 // package genview
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package genview
 
diff --git a/server/internal/library/xgen/gen_view/gen_column_map.go b/server/internal/library/xgen/gen_view/gen_column_map.go
index cf7c977..bfb307e 100644
--- a/server/internal/library/xgen/gen_view/gen_column_map.go
+++ b/server/internal/library/xgen/gen_view/gen_column_map.go
@@ -1,7 +1,7 @@
 // package genview
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package genview
 
diff --git a/server/internal/library/xgen/gen_view/gen_curd.go b/server/internal/library/xgen/gen_view/gen_curd.go
index ce3beaa..ba05fbd 100644
--- a/server/internal/library/xgen/gen_view/gen_curd.go
+++ b/server/internal/library/xgen/gen_view/gen_curd.go
@@ -1,12 +1,14 @@
 // package genview
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package genview
 
 import (
 	"context"
+	"runtime"
+	"strings"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/dao"
 	genconsts "git.5iot.com/iotlcm-public/iotlcm-app/internal/library/xgen/gen_consts"
 	genmodel "git.5iot.com/iotlcm-public/iotlcm-app/internal/library/xgen/gen_model"
@@ -15,8 +17,6 @@ import (
 	"git.5iot.com/iotlcm-public/iotlcm-app/utility"
 	"git.5iot.com/iotlcm-public/iotlcm-app/utility/tree"
 	version "git.5iot.com/iotlcm-public/iotlcm-app/utility/version"
-	"runtime"
-	"strings"
 
 	"github.com/gogf/gf/v2/container/gvar"
 	"github.com/gogf/gf/v2/database/gdb"
diff --git a/server/internal/library/xgen/gen_view/gen_curd_input.go b/server/internal/library/xgen/gen_view/gen_curd_input.go
index 845cb47..900defb 100644
--- a/server/internal/library/xgen/gen_view/gen_curd_input.go
+++ b/server/internal/library/xgen/gen_view/gen_curd_input.go
@@ -1,7 +1,7 @@
 // package genview
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package genview
 
@@ -9,9 +9,9 @@ import (
 	"bytes"
 	"context"
 	"fmt"
+	"strings"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/dao"
 	genmodel "git.5iot.com/iotlcm-public/iotlcm-app/internal/library/xgen/gen_model"
-	"strings"
 
 	"github.com/gogf/gf/v2/database/gdb"
 	"github.com/gogf/gf/v2/errors/gerror"
diff --git a/server/internal/library/xgen/gen_view/gen_curd_logic.go b/server/internal/library/xgen/gen_view/gen_curd_logic.go
index c7c3bf1..8b4f1e4 100644
--- a/server/internal/library/xgen/gen_view/gen_curd_logic.go
+++ b/server/internal/library/xgen/gen_view/gen_curd_logic.go
@@ -1,7 +1,7 @@
 // package genview
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package genview
 
diff --git a/server/internal/library/xgen/gen_view/gen_curd_model.go b/server/internal/library/xgen/gen_view/gen_curd_model.go
index b14124b..2c2e4e8 100644
--- a/server/internal/library/xgen/gen_view/gen_curd_model.go
+++ b/server/internal/library/xgen/gen_view/gen_curd_model.go
@@ -1,7 +1,7 @@
 // package genview
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package genview
 
@@ -9,9 +9,9 @@ import (
 	"bytes"
 	"context"
 	"fmt"
+	"strconv"
 	genmodel "git.5iot.com/iotlcm-public/iotlcm-app/internal/library/xgen/gen_model"
 	"git.5iot.com/iotlcm-public/iotlcm-app/utility"
-	"strconv"
 
 	"github.com/gogf/gf/v2/errors/gerror"
 	"github.com/gogf/gf/v2/frame/g"
diff --git a/server/internal/library/xgen/gen_view/gen_curd_web_edit.go b/server/internal/library/xgen/gen_view/gen_curd_web_edit.go
index b7da339..4ad3d8e 100644
--- a/server/internal/library/xgen/gen_view/gen_curd_web_edit.go
+++ b/server/internal/library/xgen/gen_view/gen_curd_web_edit.go
@@ -1,7 +1,7 @@
 // package genview
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package genview
 
diff --git a/server/internal/library/xgen/gen_view/gen_curd_web_index.go b/server/internal/library/xgen/gen_view/gen_curd_web_index.go
index 9eca7cf..65e8a92 100644
--- a/server/internal/library/xgen/gen_view/gen_curd_web_index.go
+++ b/server/internal/library/xgen/gen_view/gen_curd_web_index.go
@@ -1,7 +1,7 @@
 // package genview
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package genview
 
diff --git a/server/internal/library/xgen/gen_view/gen_curd_web_model.go b/server/internal/library/xgen/gen_view/gen_curd_web_model.go
index 4078804..26f472a 100644
--- a/server/internal/library/xgen/gen_view/gen_curd_web_model.go
+++ b/server/internal/library/xgen/gen_view/gen_curd_web_model.go
@@ -1,7 +1,7 @@
 // package genview
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package genview
 
diff --git a/server/internal/library/xgen/gen_view/gen_curd_web_view.go b/server/internal/library/xgen/gen_view/gen_curd_web_view.go
index d476cad..a5a3efc 100644
--- a/server/internal/library/xgen/gen_view/gen_curd_web_view.go
+++ b/server/internal/library/xgen/gen_view/gen_curd_web_view.go
@@ -1,7 +1,7 @@
 // package genview
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package genview
 
diff --git a/server/internal/library/xgen/gen_view/gen_util.go b/server/internal/library/xgen/gen_view/gen_util.go
index 64d0e86..9b2ca81 100644
--- a/server/internal/library/xgen/gen_view/gen_util.go
+++ b/server/internal/library/xgen/gen_view/gen_util.go
@@ -1,7 +1,7 @@
 // package genview
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package genview
 
diff --git a/server/internal/library/xgen/gen_view/gohtml/consts.go b/server/internal/library/xgen/gen_view/gohtml/consts.go
index 049c060..6f2805c 100644
--- a/server/internal/library/xgen/gen_view/gohtml/consts.go
+++ b/server/internal/library/xgen/gen_view/gohtml/consts.go
@@ -1,7 +1,7 @@
 // package gohtml
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package gohtml
 
diff --git a/server/internal/library/xgen/gen_view/gohtml/doc.go b/server/internal/library/xgen/gen_view/gohtml/doc.go
index 33246e1..fc3fe31 100644
--- a/server/internal/library/xgen/gen_view/gohtml/doc.go
+++ b/server/internal/library/xgen/gen_view/gohtml/doc.go
@@ -1,6 +1,6 @@
 // package genview
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package gohtml
diff --git a/server/internal/library/xgen/gen_view/gohtml/element.go b/server/internal/library/xgen/gen_view/gohtml/element.go
index bbfad3a..4290dbc 100644
--- a/server/internal/library/xgen/gen_view/gohtml/element.go
+++ b/server/internal/library/xgen/gen_view/gohtml/element.go
@@ -1,7 +1,7 @@
 // package gohtml
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package gohtml
 
diff --git a/server/internal/library/xgen/gen_view/gohtml/formatter.go b/server/internal/library/xgen/gen_view/gohtml/formatter.go
index 2da0d63..d2c2cdd 100644
--- a/server/internal/library/xgen/gen_view/gohtml/formatter.go
+++ b/server/internal/library/xgen/gen_view/gohtml/formatter.go
@@ -1,7 +1,7 @@
 // package gohtml
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package gohtml
 
diff --git a/server/internal/library/xgen/gen_view/gohtml/html_document.go b/server/internal/library/xgen/gen_view/gohtml/html_document.go
index a9aa255..17df155 100644
--- a/server/internal/library/xgen/gen_view/gohtml/html_document.go
+++ b/server/internal/library/xgen/gen_view/gohtml/html_document.go
@@ -1,7 +1,7 @@
 // package gohtml
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package gohtml
 
diff --git a/server/internal/library/xgen/gen_view/gohtml/parser.go b/server/internal/library/xgen/gen_view/gohtml/parser.go
index f96f782..2d6b090 100644
--- a/server/internal/library/xgen/gen_view/gohtml/parser.go
+++ b/server/internal/library/xgen/gen_view/gohtml/parser.go
@@ -1,7 +1,7 @@
 // package gohtml
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package gohtml
 
diff --git a/server/internal/library/xgen/gen_view/gohtml/tag_element.go b/server/internal/library/xgen/gen_view/gohtml/tag_element.go
index f853161..9a79332 100644
--- a/server/internal/library/xgen/gen_view/gohtml/tag_element.go
+++ b/server/internal/library/xgen/gen_view/gohtml/tag_element.go
@@ -1,7 +1,7 @@
 // package gohtml
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package gohtml
 
diff --git a/server/internal/library/xgen/gen_view/gohtml/text_element.go b/server/internal/library/xgen/gen_view/gohtml/text_element.go
index 45c2b8c..bd3b3f1 100644
--- a/server/internal/library/xgen/gen_view/gohtml/text_element.go
+++ b/server/internal/library/xgen/gen_view/gohtml/text_element.go
@@ -1,7 +1,7 @@
 // package gohtml
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package gohtml
 
diff --git a/server/internal/library/xgen/gen_view/gohtml/utils.go b/server/internal/library/xgen/gen_view/gohtml/utils.go
index dfd4efc..2d3807a 100644
--- a/server/internal/library/xgen/gen_view/gohtml/utils.go
+++ b/server/internal/library/xgen/gen_view/gohtml/utils.go
@@ -1,7 +1,7 @@
 // package gohtml
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package gohtml
 
diff --git a/server/internal/library/xgen/gen_view/gohtml/writer.go b/server/internal/library/xgen/gen_view/gohtml/writer.go
index 453e50d..8a51cfe 100644
--- a/server/internal/library/xgen/gen_view/gohtml/writer.go
+++ b/server/internal/library/xgen/gen_view/gohtml/writer.go
@@ -1,7 +1,7 @@
 // package gohtml
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package gohtml
 
diff --git a/server/internal/library/xgen/xgen_curd.go b/server/internal/library/xgen/xgen_curd.go
index 86d6f61..c837be9 100644
--- a/server/internal/library/xgen/xgen_curd.go
+++ b/server/internal/library/xgen/xgen_curd.go
@@ -1,13 +1,15 @@
 // package xgen
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package xgen
 
 import (
 	"context"
 	"fmt"
+	"sort"
+	"strings"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/addons"
 	genconsts "git.5iot.com/iotlcm-public/iotlcm-app/internal/library/xgen/gen_consts"
 	gendao "git.5iot.com/iotlcm-public/iotlcm-app/internal/library/xgen/gen_dao"
@@ -16,8 +18,6 @@ import (
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/request"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/service"
-	"sort"
-	"strings"
 
 	"github.com/gogf/gf/v2/errors/gerror"
 	"github.com/gogf/gf/v2/frame/g"
diff --git a/server/internal/library/xgen/xgen_init.go b/server/internal/library/xgen/xgen_init.go
index 8f1f034..3a04653 100644
--- a/server/internal/library/xgen/xgen_init.go
+++ b/server/internal/library/xgen/xgen_init.go
@@ -1,7 +1,7 @@
 // package xgen
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package xgen
 
diff --git a/server/internal/library/xgorm/dao.go b/server/internal/library/xgorm/dao.go
index 96c1120..daf2060 100644
--- a/server/internal/library/xgorm/dao.go
+++ b/server/internal/library/xgorm/dao.go
@@ -1,15 +1,15 @@
 // package xgorm
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package xgorm
 
 import (
 	"context"
 	"fmt"
-	"git.5iot.com/iotlcm-public/iotlcm-app/utility"
 	"slices"
+	"git.5iot.com/iotlcm-public/iotlcm-app/utility"
 
 	"reflect"
 
diff --git a/server/internal/library/xgorm/dao_tree.go b/server/internal/library/xgorm/dao_tree.go
index ba02131..d1d8602 100644
--- a/server/internal/library/xgorm/dao_tree.go
+++ b/server/internal/library/xgorm/dao_tree.go
@@ -1,15 +1,15 @@
 // package xgorm
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package xgorm
 
 import (
 	"context"
+	"slices"
 	gormmodel "git.5iot.com/iotlcm-public/iotlcm-app/internal/library/xgorm/gorm_model"
 	"git.5iot.com/iotlcm-public/iotlcm-app/utility/tree"
-	"slices"
 
 	"github.com/gogf/gf/v2/database/gdb"
 	"github.com/gogf/gf/v2/errors/gerror"
diff --git a/server/internal/library/xgorm/gorm_model/gorm_tree.go b/server/internal/library/xgorm/gorm_model/gorm_tree.go
index ada0e31..81a6472 100644
--- a/server/internal/library/xgorm/gorm_model/gorm_tree.go
+++ b/server/internal/library/xgorm/gorm_model/gorm_tree.go
@@ -1,7 +1,7 @@
 // package gormmodel
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package gormmodel
 
diff --git a/server/internal/library/xgorm/handler/filter_auth.go b/server/internal/library/xgorm/handler/filter_auth.go
index 64efbfb..2e4ae63 100644
--- a/server/internal/library/xgorm/handler/filter_auth.go
+++ b/server/internal/library/xgorm/handler/filter_auth.go
@@ -1,7 +1,7 @@
 // package handler
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package handler
 
diff --git a/server/internal/library/xgorm/handler/force_cache.go b/server/internal/library/xgorm/handler/force_cache.go
index 3fc7e75..7dbaaa8 100644
--- a/server/internal/library/xgorm/handler/force_cache.go
+++ b/server/internal/library/xgorm/handler/force_cache.go
@@ -1,7 +1,7 @@
 // package handler
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package handler
 
diff --git a/server/internal/library/xgorm/handler/handler.go b/server/internal/library/xgorm/handler/handler.go
index e7903bb..18fc5f6 100644
--- a/server/internal/library/xgorm/handler/handler.go
+++ b/server/internal/library/xgorm/handler/handler.go
@@ -1,7 +1,7 @@
 // package handler
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package handler
 
diff --git a/server/internal/library/xgorm/handler/tenant.go b/server/internal/library/xgorm/handler/tenant.go
index 9824b0e..e01d1fb 100644
--- a/server/internal/library/xgorm/handler/tenant.go
+++ b/server/internal/library/xgorm/handler/tenant.go
@@ -1,7 +1,7 @@
 // package handler
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package handler
 
diff --git a/server/internal/library/xgorm/hook/member.go b/server/internal/library/xgorm/hook/member.go
index 5b2f5ce..00e6071 100644
--- a/server/internal/library/xgorm/hook/member.go
+++ b/server/internal/library/xgorm/hook/member.go
@@ -1,7 +1,7 @@
 // package hook
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package hook
 
diff --git a/server/internal/logic/app/app_access.go b/server/internal/logic/app/app_access.go
index 319c954..490acd0 100644
--- a/server/internal/logic/app/app_access.go
+++ b/server/internal/logic/app/app_access.go
@@ -158,6 +158,10 @@ var appFeatureAccessRules = []appFeatureAccessRule{
 		Permissions: []string{consts.SysCheckPermissionCurrentUser, "cpm:system:notice:list"},
 		Routes:      []string{"/pages/message/index", "/pages/message/views/cardDetail/index", "/pages/message/views/systemDetail/index"},
 	},
+	{Feature: "workorder:reply", Permissions: []string{"cpm:gen:tWoCommunication:message"}},
+	{Feature: "workorder:resolve", Permissions: []string{"cpm:gen:tWoMain:resolve"}},
+	{Feature: "workorder:transfer", Permissions: []string{"cpm:gen:tWoMain:transfer"}},
+	{Feature: "workorder:close", Permissions: []string{"cpm:gen:tWoMain:close"}},
 	{
 		Feature:     "workorder:list",
 		Permissions: []string{"cpm:gen:tWoMain:list"},
diff --git a/server/internal/logic/app/app_access_test.go b/server/internal/logic/app/app_access_test.go
index 107c560..6f3f214 100644
--- a/server/internal/logic/app/app_access_test.go
+++ b/server/internal/logic/app/app_access_test.go
@@ -109,3 +109,15 @@ func TestDataServiceFeaturesUseConsolePermissions(t *testing.T) {
 		}
 	}
 }
+
+func TestWorkOrderHandlingRequiresDedicatedPermissions(t *testing.T) {
+	for _, action := range []string{"reply", "resolve", "transfer", "close", "cancel", "confirm", "evaluate", "reopen"} {
+		required := appWorkOrderHandlerPermission(action)
+		if appAccessCodesMatchExpression([]string{"cpm:gen:tWoMain:list", "cpm:gen:tWoMain:view"}, required) {
+			t.Fatalf("list/view granted %s", action)
+		}
+		if !appAccessCodesMatchExpression([]string{required}, required) {
+			t.Fatalf("dedicated permission did not grant %s", action)
+		}
+	}
+}
diff --git a/server/internal/logic/app/app_auth.go b/server/internal/logic/app/app_auth.go
index a1b1984..958ec88 100644
--- a/server/internal/logic/app/app_auth.go
+++ b/server/internal/logic/app/app_auth.go
@@ -7,7 +7,7 @@ import (
 	"encoding/json"
 	"fmt"
 	"io"
-	"math/rand"
+	"math/big"
 	"net/http"
 	"net/url"
 	"strconv"
@@ -39,10 +39,20 @@ import (
 
 const appSideCaptchaCachePrefix = "app:side:captcha:"
 const appSmsCachePrefix = "app:sms:"
+const appSmsCooldownPrefix = "app:sms:cooldown:"
+const appSmsDailyPhonePrefix = "app:sms:daily:phone:"
+const appSmsDailyIPPrefix = "app:sms:daily:ip:"
 const appWechatBindTicketCachePrefix = "app:wechat:bind:"
 const appWechatMiniAppSecretPlaceholder = "CHANGE_ME_WECHAT_MINI_APP_SECRET"
 const appWechatBindTicketExpire = 10 * time.Minute
 
+const (
+	appSmsCodeTTL     = 5 * time.Minute
+	appSmsCooldownTTL = 60 * time.Second
+	appSmsDailyLimit  = 10
+	appSmsDailyExpire = 24 * time.Hour
+)
+
 var appSlideCaptcha slide.Captcha
 
 type appWechatCode2SessionRes struct {
@@ -188,16 +198,32 @@ func (s *sAppAuth) SendSms(ctx context.Context, param *model.AppSendSmsParam) (r
 	param.TenantId = strings.TrimSpace(param.TenantId)
 	param.Phone = strings.TrimSpace(param.Phone)
 	param.Scene = strings.TrimSpace(param.Scene)
+	if err = s.validateAppSmsScene(ctx, param); err != nil {
+		return nil, err
+	}
+	if err = s.reserveAppSmsCooldown(ctx, param.TenantId, param.Phone); err != nil {
+		return nil, err
+	}
+	if err = s.checkAppSmsRateLimit(ctx, param.TenantId, param.Phone); err != nil {
+		_ = releaseAppSmsCooldown(ctx, param.TenantId, param.Phone)
+		return nil, err
+	}
 
-	code := fmt.Sprintf("%04d", rand.Intn(10000))
+	code, err := appRandomDigits(6)
+	if err != nil {
+		_ = releaseAppSmsCooldown(ctx, param.TenantId, param.Phone)
+		return nil, gerror.Wrap(err, "生成短信验证码失败")
+	}
 	cacheKey := appSmsCacheKey(param.TenantId, param.Phone, param.Scene)
-	if err = mcache.Set(ctx, cacheKey, code, 5*time.Minute); err != nil {
+	if err = setAppSmsCode(ctx, cacheKey, code); err != nil {
+		_ = releaseAppSmsCooldown(ctx, param.TenantId, param.Phone)
 		return nil, gerror.New("短信验证码发送失败")
 	}
 
-	sentByHTTP, err := sendAppPhoneCode(ctx, param.Phone, code)
+	sentByHTTP, err := sendAppPhoneCode(ctx, param.Phone, code, appSmsServiceScene(param.Scene))
 	if err != nil {
-		_ = mcache.Remove(ctx, cacheKey)
+		_ = deleteAppSmsCode(ctx, cacheKey)
+		_ = releaseAppSmsCooldown(ctx, param.TenantId, param.Phone)
 		g.Log().Errorf(ctx, "APP短信验证码发送失败 scene=%s phone=%s err=%+v", param.Scene, param.Phone, err)
 		return nil, gerror.New("短信验证码发送失败，请稍后重试")
 	}
@@ -209,19 +235,110 @@ func (s *sAppAuth) SendSms(ctx context.Context, param *model.AppSendSmsParam) (r
 	return res, nil
 }
 
-func sendAppPhoneCode(ctx context.Context, phone string, code string) (sentByHTTP bool, err error) {
+func (s *sAppAuth) validateAppSmsScene(ctx context.Context, param *model.AppSendSmsParam) error {
+	if err := service.AppAuth().CheckSideCaptcha(ctx, &model.AppCheckSideCaptchaParam{
+		CaptchaKey: strings.TrimSpace(param.CaptchaKey),
+		Point:      strings.TrimSpace(param.CaptchaPoint),
+	}); err != nil {
+		return err
+	}
+	users, err := s.findAppLoginUsersByAccount(ctx, param.TenantId, param.Phone)
+	if err != nil {
+		return err
+	}
+	switch param.Scene {
+	case "register":
+		if len(users) > 0 {
+			return gerror.New("手机号已注册")
+		}
+	case "login", "forgotPassword", "wechatBindPhone":
+		if len(users) == 0 {
+			return gerror.New("手机号未注册")
+		}
+	}
+	return nil
+}
+
+func (s *sAppAuth) checkAppSmsRateLimit(ctx context.Context, tenantId string, phone string) error {
+	tenantId = strings.TrimSpace(tenantId)
+	if tenantId == "" {
+		tenantId = consts.DefaultSystemTenantCode
+	}
+	clientIP := strings.TrimSpace(utility.GetClientIp(ctx))
+	for _, item := range []struct {
+		key  string
+		name string
+		skip bool
+	}{
+		{appSmsDailyPhonePrefix + strings.TrimSpace(tenantId) + ":" + phone, "手机号", false},
+		{appSmsDailyIPPrefix + clientIP, "当前网络", clientIP == ""},
+	} {
+		if item.skip {
+			continue
+		}
+		value, err := g.Redis().Do(ctx, "INCR", item.key)
+		if err != nil {
+			return gerror.Wrap(err, "短信服务暂不可用")
+		}
+		if value.Int() == 1 {
+			_, _ = g.Redis().Do(ctx, "EXPIRE", item.key, int(appSmsDailyExpire.Seconds()))
+		}
+		if value.Int() > appSmsDailyLimit {
+			return gerror.Newf("%s今日短信发送次数已达上限", item.name)
+		}
+	}
+	return nil
+}
+
+func (s *sAppAuth) reserveAppSmsCooldown(ctx context.Context, tenantId string, phone string) error {
+	key := appSmsCooldownCacheKey(tenantId, phone)
+	value, err := g.Redis().Do(ctx, "SET", key, "1", "NX", "EX", int(appSmsCooldownTTL.Seconds()))
+	if err != nil {
+		return gerror.Wrap(err, "短信服务暂不可用")
+	}
+	if value.IsNil() || strings.EqualFold(value.String(), "") {
+		return gerror.New("短信验证码发送过于频繁，请稍后再试")
+	}
+	return nil
+}
+
+func releaseAppSmsCooldown(ctx context.Context, tenantId string, phone string) error {
+	_, err := g.Redis().Do(ctx, "DEL", appSmsCooldownCacheKey(tenantId, phone))
+	return err
+}
+
+func appSmsCooldownCacheKey(tenantId string, phone string) string {
+	if tenantId == "" {
+		tenantId = consts.DefaultSystemTenantCode
+	}
+	return fmt.Sprintf("%s%s:%s", appSmsCooldownPrefix, tenantId, phone)
+}
+
+func appSmsServiceScene(scene string) string {
+	switch scene {
+	case "wechatBindPhone":
+		return "bind_phone"
+	default:
+		return scene
+	}
+}
+
+func sendAppPhoneCode(ctx context.Context, phone string, code string, scene string) (sentByHTTP bool, err error) {
 	var cfg appCodeHttpSenderConfig
 	if v, cfgErr := g.Cfg().Get(ctx, "register.sms"); cfgErr == nil && !v.IsNil() {
 		_ = v.Scan(&cfg)
 	}
 	if strings.TrimSpace(cfg.Url) != "" {
-		return true, callAppCodeHTTP(ctx, cfg, phone, code)
+		return true, callAppCodeHTTP(ctx, cfg, phone, code, scene)
+	}
+	if !strings.EqualFold(strings.TrimSpace(g.Cfg().MustGet(ctx, "system.gfmode", "prod").String()), "dev") {
+		return false, gerror.New("短信服务未配置")
 	}
 	g.Log().Infof(ctx, "APP短信验证码已生成 phone=%s code=%s", phone, code)
 	return false, nil
 }
 
-func callAppCodeHTTP(ctx context.Context, cfg appCodeHttpSenderConfig, contact string, code string) error {
+func callAppCodeHTTP(ctx context.Context, cfg appCodeHttpSenderConfig, contact string, code string, scene string) error {
 	method := strings.ToUpper(strings.TrimSpace(cfg.Method))
 	if method == "" {
 		method = http.MethodPost
@@ -231,7 +348,7 @@ func callAppCodeHTTP(ctx context.Context, cfg appCodeHttpSenderConfig, contact s
 		successStatus = http.StatusOK
 	}
 
-	body := renderAppCodeTemplate(cfg.BodyTemplate, contact, code)
+	body := renderAppCodeTemplate(cfg.BodyTemplate, contact, code, scene)
 	if strings.TrimSpace(body) == "" {
 		bodyBytes, _ := json.Marshal(g.Map{
 			"contact": contact,
@@ -280,7 +397,7 @@ func callAppCodeHTTP(ctx context.Context, cfg appCodeHttpSenderConfig, contact s
 	return nil
 }
 
-func renderAppCodeTemplate(template string, contact string, code string) string {
+func renderAppCodeTemplate(template string, contact string, code string, scene string) string {
 	template = strings.TrimSpace(template)
 	if template == "" {
 		return ""
@@ -295,6 +412,9 @@ func renderAppCodeTemplate(template string, contact string, code string) string
 		"{phone}", contact,
 		"{{phone}}", contact,
 		"${phone}", contact,
+		"{scene}", scene,
+		"{{scene}}", scene,
+		"${scene}", scene,
 		"{code}", code,
 		"{{code}}", code,
 		"${code}", code,
@@ -309,23 +429,37 @@ func appSmsCacheKey(tenantId string, phone string, scene string) string {
 	return fmt.Sprintf("%s%s:%s:%s", appSmsCachePrefix, tenantId, scene, phone)
 }
 
+func setAppSmsCode(ctx context.Context, key string, code string) error {
+	_, err := g.Redis().Do(ctx, "SETEX", key, int(appSmsCodeTTL.Seconds()), code)
+	return err
+}
+
+func deleteAppSmsCode(ctx context.Context, key string) error {
+	_, err := g.Redis().Do(ctx, "DEL", key)
+	return err
+}
+
 func verifyAppSmsCode(ctx context.Context, tenantId string, phone string, scene string, code string) error {
-	value, err := mcache.Get(ctx, appSmsCacheKey(tenantId, phone, scene))
+	value, err := g.Redis().Get(ctx, appSmsCacheKey(tenantId, phone, scene))
 	if err != nil || value == nil {
 		return gerror.NewCode(consts.CodeCaptchaError, "短信验证码已失效")
 	}
-	if fmt.Sprintf("%v", value) != code {
+	if strings.TrimSpace(value.String()) != strings.TrimSpace(code) {
 		return gerror.NewCode(consts.CodeCaptchaError, "短信验证码错误")
 	}
 	return nil
 }
 
-func verifyOptionalAppSmsCode(ctx context.Context, tenantId string, phone string, scene string, code string) error {
-	code = strings.TrimSpace(code)
-	if code == "" {
-		return nil
+func appRandomDigits(length int) (string, error) {
+	if length <= 0 {
+		length = 6
 	}
-	return verifyAppSmsCode(ctx, tenantId, phone, scene, code)
+	limit := new(big.Int).Exp(big.NewInt(10), big.NewInt(int64(length)), nil)
+	value, err := cryptorand.Int(cryptorand.Reader, limit)
+	if err != nil {
+		return "", err
+	}
+	return fmt.Sprintf("%0*d", length, value.Int64()), nil
 }
 
 func (s *sAppAuth) PhoneRegister(ctx context.Context, param *model.AppPhoneRegisterParam) (res *model.AppAuthTokenModel, err error) {
@@ -335,7 +469,7 @@ func (s *sAppAuth) PhoneRegister(ctx context.Context, param *model.AppPhoneRegis
 	param.TenantId = strings.TrimSpace(param.TenantId)
 	param.Phone = strings.TrimSpace(param.Phone)
 	param.SmsCode = strings.TrimSpace(param.SmsCode)
-	if err = verifyOptionalAppSmsCode(ctx, param.TenantId, param.Phone, "register", param.SmsCode); err != nil {
+	if err = verifyAppSmsCode(ctx, param.TenantId, param.Phone, "register", param.SmsCode); err != nil {
 		return nil, err
 	}
 	if param.TenantId == "" {
@@ -406,7 +540,7 @@ func (s *sAppAuth) PhoneRegister(ctx context.Context, param *model.AppPhoneRegis
 		}
 		return nil, err
 	}
-	_ = mcache.Remove(ctx, appSmsCacheKey(param.TenantId, param.Phone, "register"))
+	_ = deleteAppSmsCode(ctx, appSmsCacheKey(param.TenantId, param.Phone, "register"))
 
 	return s.PhoneLogin(ctx, &model.AppPhoneLoginParam{
 		TenantId: param.TenantId,
@@ -522,6 +656,43 @@ func (s *sAppAuth) PhoneLogin(ctx context.Context, param *model.AppPhoneLoginPar
 	return s.buildAppAuthToken(ctx, user)
 }
 
+func (s *sAppAuth) PhoneSmsLogin(ctx context.Context, param *model.AppPhoneSmsLoginParam) (res *model.AppAuthTokenModel, err error) {
+	if param == nil {
+		return nil, gerror.New("请求参数不能为空")
+	}
+	param.TenantId = strings.TrimSpace(param.TenantId)
+	param.Phone = strings.TrimSpace(param.Phone)
+	param.SmsCode = strings.TrimSpace(param.SmsCode)
+	if err = verifyAppSmsCode(ctx, param.TenantId, param.Phone, "login", param.SmsCode); err != nil {
+		return nil, err
+	}
+	users, err := s.findAppWechatBindUsersByPhone(ctx, param.TenantId, param.Phone)
+	if err != nil {
+		return nil, err
+	}
+	if len(users) == 0 {
+		return nil, gerror.New("手机号未注册")
+	}
+	if len(users) > 1 && param.SelectedUserId <= 0 {
+		return &model.AppAuthTokenModel{NeedSelect: true, Candidates: appLoginCandidateModels(ctx, users)}, nil
+	}
+	user := users[0]
+	if param.SelectedUserId > 0 {
+		user = nil
+		for _, item := range users {
+			if item != nil && item.UserId == param.SelectedUserId {
+				user = item
+				break
+			}
+		}
+		if user == nil {
+			return nil, gerror.New("选择的账号不属于当前手机号")
+		}
+	}
+	_ = deleteAppSmsCode(ctx, appSmsCacheKey(param.TenantId, param.Phone, "login"))
+	return s.buildAppAuthToken(ctx, user)
+}
+
 func (s *sAppAuth) WechatLogin(ctx context.Context, param *model.AppWechatLoginParam) (res *model.AppWechatLoginModel, err error) {
 	if param == nil {
 		return nil, gerror.New("请求参数不能为空")
@@ -619,6 +790,7 @@ func (s *sAppAuth) WechatBindPhone(ctx context.Context, param *model.AppWechatBi
 	if err = s.saveWechatOpenId(ctx, user, ticketData.OpenId, ticketData.UnionId); err != nil {
 		return nil, err
 	}
+	_ = deleteAppSmsCode(ctx, appSmsCacheKey(tenantId, phone, "wechatBindPhone"))
 	_ = mcache.Remove(ctx, appWechatBindTicketKey(param.BindTicket))
 
 	token, err := s.buildAppAuthToken(ctx, user)
@@ -819,20 +991,12 @@ func appEnsureWechatBindPhoneVerified(ctx context.Context, param *model.AppWecha
 	if ticketData != nil && strings.TrimSpace(ticketData.VerifiedPhone) == strings.TrimSpace(phone) {
 		return nil
 	}
-	captchaKey := strings.TrimSpace(param.CaptchaKey)
-	captchaPoint := strings.TrimSpace(param.CaptchaPoint)
-	if captchaKey == "" || captchaPoint == "" {
-		return gerror.New("请先完成图形验证")
-	}
-	if err := service.AppAuth().CheckSideCaptcha(ctx, &model.AppCheckSideCaptchaParam{
-		CaptchaKey: captchaKey,
-		Point:      captchaPoint,
-	}); err != nil {
-		return err
-	}
 	if ticketData == nil || strings.TrimSpace(ticketData.OpenId) == "" || strings.TrimSpace(phone) == "" {
 		return gerror.New("微信绑定参数不完整")
 	}
+	if err := verifyAppSmsCode(ctx, ticketData.TenantId, phone, "wechatBindPhone", param.SmsCode); err != nil {
+		return err
+	}
 	ticketData.VerifiedPhone = strings.TrimSpace(phone)
 	if err := mcache.Set(ctx, appWechatBindTicketKey(param.BindTicket), ticketData, appWechatBindTicketExpire); err != nil {
 		return gerror.Wrap(err, "保存手机号验证状态失败")
@@ -1075,7 +1239,7 @@ func (s *sAppAuth) ForgotPassword(ctx context.Context, param *model.AppForgotPas
 	if err != nil {
 		return err
 	}
-	_ = mcache.Remove(ctx, appSmsCacheKey(param.TenantId, param.Phone, "forgotPassword"))
+	_ = deleteAppSmsCode(ctx, appSmsCacheKey(param.TenantId, param.Phone, "forgotPassword"))
 
 	salt := utility.RandomString(5)
 	password := appPasswordEncryptForStore(param.Password, salt)
diff --git a/server/internal/logic/app/app_auth_test.go b/server/internal/logic/app/app_auth_test.go
index 1b717c1..e78c3f8 100644
--- a/server/internal/logic/app/app_auth_test.go
+++ b/server/internal/logic/app/app_auth_test.go
@@ -2,7 +2,11 @@ package app
 
 import (
 	"context"
+	"encoding/json"
+	"net/http"
+	"net/http/httptest"
 	"testing"
+	"time"
 
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model"
@@ -12,30 +16,47 @@ import (
 	"github.com/gogf/gf/v2/frame/g"
 )
 
-func TestPhoneRegisterParamAllowsEmptySmsCode(t *testing.T) {
+func TestPhoneRegisterParamRequiresSmsCode(t *testing.T) {
 	err := g.Validator().Data(&model.AppPhoneRegisterParam{
 		TenantId: "000000",
 		Phone:    "13800008000",
 		Password: "123456",
 		NickName: "测试用户",
 	}).Run(context.Background())
-	if err != nil {
-		t.Fatalf("AppPhoneRegisterParam should allow empty smsCode, got: %v", err)
+	if err == nil {
+		t.Fatal("AppPhoneRegisterParam should require smsCode")
 	}
 }
 
-func TestVerifyOptionalAppSmsCodeSkipsEmptyCode(t *testing.T) {
-	if err := verifyOptionalAppSmsCode(context.Background(), "000000", "13800008000", "register", ""); err != nil {
-		t.Fatalf("empty smsCode should skip sms verification, got: %v", err)
+func TestAppSmsCodeHelpersUseRedisKeys(t *testing.T) {
+	key := appSmsCacheKey("", "13800008000", "login")
+	if key != "app:sms:000000:login:13800008000" {
+		t.Fatalf("unexpected sms cache key: %s", key)
 	}
-	if err := verifyOptionalAppSmsCode(context.Background(), "000000", "13800008000", "register", "   "); err != nil {
-		t.Fatalf("blank smsCode should skip sms verification, got: %v", err)
+	if key := appSmsCooldownCacheKey("", "13800008000"); key != "app:sms:cooldown:000000:13800008000" {
+		t.Fatalf("unexpected sms cooldown key: %s", key)
+	}
+}
+
+func TestAppSmsCooldownScopeAndDuration(t *testing.T) {
+	if appSmsCooldownTTL != time.Minute {
+		t.Fatalf("sms cooldown = %v, want one minute", appSmsCooldownTTL)
+	}
+	key := appSmsCooldownCacheKey("000000", "13800008000")
+	if key != appSmsCooldownCacheKey("", "13800008000") {
+		t.Fatal("default tenant should share the same cooldown key")
+	}
+	if key == appSmsCooldownCacheKey("000000", "13800008001") {
+		t.Fatal("different phones should have independent cooldown keys")
+	}
+	if key == appSmsCooldownCacheKey("000001", "13800008000") {
+		t.Fatal("different tenants should have independent cooldown keys")
 	}
 }
 
 func TestDeletedRegisterUserNameFitsSysUserUniqueColumn(t *testing.T) {
 	name := deletedRegisterUserName(88, "18800004698")
-	if name != "del88_004698" {
+	if name != "del88_314698" {
 		t.Fatalf("unexpected deleted register username: %s", name)
 	}
 	if len(name) > 30 {
@@ -120,3 +141,43 @@ func appAuthTestUser(userId int64, username string, password string) *entity.Sys
 		Status:   consts.SysUserStatusNormal,
 	}
 }
+
+func TestCallAppCodeHTTPUsesSceneTemplate(t *testing.T) {
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		var request struct {
+			Config struct {
+				Scene string `json:"scene"`
+			} `json:"config"`
+			Params struct {
+				PhoneNumber string `json:"phoneNumber"`
+				MsgContent  string `json:"msgContent"`
+			} `json:"params"`
+		}
+		if err := json.NewDecoder(r.Body).Decode(&request); err != nil {
+			t.Errorf("decode request: %v", err)
+			w.WriteHeader(http.StatusBadRequest)
+			return
+		}
+		if request.Config.Scene != "bind_phone" {
+			t.Errorf("scene = %q, want bind_phone", request.Config.Scene)
+		}
+		if request.Params.PhoneNumber != "13800008000" {
+			t.Errorf("phoneNumber = %q, want 13800008000", request.Params.PhoneNumber)
+		}
+		if request.Params.MsgContent != "123456" {
+			t.Errorf("msgContent = %q, want raw verification code", request.Params.MsgContent)
+		}
+		w.Header().Set("Content-Type", "application/json")
+		_, _ = w.Write([]byte(`{"code":0,"message":"发送成功"}`))
+	}))
+	defer server.Close()
+
+	err := callAppCodeHTTP(context.Background(), appCodeHttpSenderConfig{
+		Url:          server.URL,
+		Method:       http.MethodPost,
+		BodyTemplate: `{"config":{"scene":"{scene}"},"params":{"phoneNumber":"{contact}","msgContent":"{code}"}}`,
+	}, "13800008000", "123456", appSmsServiceScene("wechatBindPhone"))
+	if err != nil {
+		t.Fatalf("callAppCodeHTTP returned error: %v", err)
+	}
+}
diff --git a/server/internal/logic/app/app_card_allocate.go b/server/internal/logic/app/app_card_allocate.go
index 16be16c..6fe0938 100644
--- a/server/internal/logic/app/app_card_allocate.go
+++ b/server/internal/logic/app/app_card_allocate.go
@@ -4,12 +4,12 @@ import (
 	"context"
 	"fmt"
 	"strings"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/batchmetadata"
 
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/dao"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/batchimport"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model"
-	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/do"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/entity"
 
 	"github.com/gogf/gf/v2/database/gdb"
@@ -87,6 +87,7 @@ func (s *sAppCard) loadAllocateTargetDepts(ctx context.Context, user *entity.Sys
 	err := dao.SysDept.Ctx(ctx).
 		Where(dao.SysDept.Columns().TenantId, user.TenantId).
 		Where(dao.SysDept.Columns().ParentId, user.DeptId).
+		Where(dao.SysDept.Columns().Status, "0").
 		WhereNull(dao.SysDept.Columns().DeletedAt).
 		OrderAsc(dao.SysDept.Columns().OrderNum).
 		OrderAsc(dao.SysDept.Columns().DeptId).
@@ -145,12 +146,17 @@ func (s *sAppCard) AllocateBatchPrepare(ctx context.Context, param *model.AppCar
 		return nil, err
 	}
 
+	if param.ExecutionMode == batchmetadata.Single && len(batch.Cards) != 1 {
+		return nil, gerror.New("单卡划拨只能选择一张卡")
+	}
 	ctx = appContextWithUser(ctx, user)
 	processor := newAppAllocateBatchProcessor(batch)
 	rows := appAllocateBatchRows(batch)
 	req := batchimport.SubmitRequest{
 		BizParams:        param,
 		SourceType:       consts.BatchSourceTypeBatchSelect,
+		SourceChannel:    batchmetadata.MiniProgram,
+		ExecutionMode:    appAllocateExecutionMode(param.ExecutionMode),
 		BatchType:        consts.BatchTypePrepare,
 		FailureBatchType: consts.BatchTypeAllocate,
 		SkipExecute:      true,
@@ -177,8 +183,11 @@ func (s *sAppCard) AllocateBatchPrepare(ctx context.Context, param *model.AppCar
 	return s.buildAllocateBatchModel(ctx, user, batch, batchNo, "", consts.BatchTypePrepare, status), nil
 }
 
-// AllocateBatchSubmit 确认划拨预处理批次，并更新卡片归属；划拨后原企业的可见和办理权限仍保留。
+// AllocateBatchSubmit 确认预处理批次并提交 worker 执行。
 func (s *sAppCard) AllocateBatchSubmit(ctx context.Context, param *model.AppCardAllocateBatchSubmitParam) (res *model.AppCardAllocateBatchModel, err error) {
+	if err := appEnsureFeatureAccess(ctx, "card:allocate"); err != nil {
+		return nil, err
+	}
 	if param == nil {
 		param = &model.AppCardAllocateBatchSubmitParam{}
 	}
@@ -190,7 +199,15 @@ func (s *sAppCard) AllocateBatchSubmit(ctx context.Context, param *model.AppCard
 		return nil, gerror.New("终端用户不能使用卡划拨功能")
 	}
 
-	now := gtime.Now()
+	if strings.TrimSpace(param.BatchNo) == "" {
+		if strings.TrimSpace(param.RequestId) != "" {
+			return s.submitAppAllocateRequest(ctx, user, param)
+		}
+		return s.createAppAllocatePending(ctx, user, param)
+	}
+	if !appWorkerBatchAsyncEnabled(ctx) {
+		return nil, gerror.New("划拨执行服务未启用，请联系管理员")
+	}
 	var batch *appAllocateBatchContext
 	var sourceBatchNo string
 	batchNo := strings.TrimSpace(param.BatchNo)
@@ -199,6 +216,19 @@ func (s *sAppCard) AllocateBatchSubmit(ctx context.Context, param *model.AppCard
 		if err != nil {
 			return err
 		}
+		if prepareBatch.CreatedDept != user.DeptId {
+			return gerror.New("当前机构与划拨批次创建机构不一致")
+		}
+		if prepareBatch.BatchType == consts.BatchTypeAllocate {
+			if prepareBatch.BatchInfo.Get("jobRole").String() != "allocate_parent" {
+				return gerror.New("旧划拨批次不能重新提交，请查看执行日志")
+			}
+			if err := appValidateAllocateRetry(prepareBatch, param); err != nil {
+				return err
+			}
+			res = appAllocateQueuedResponse(prepareBatch)
+			return nil
+		}
 		sourceBatchNo = appAllocateSourceBatchNoFromBatch(prepareBatch)
 		targetDeptId := prepareBatch.TargetDeptId
 		if param.TargetDeptId > 0 && param.TargetDeptId != targetDeptId {
@@ -245,10 +275,7 @@ func (s *sAppCard) AllocateBatchSubmit(ctx context.Context, param *model.AppCard
 			})
 		}
 		batch.refreshCounts()
-		if err = s.updateAllocateCards(ctx, tx, user, batch, prepareBatch.BatchNo, now); err != nil {
-			return err
-		}
-		if err = s.markAppAllocatePrepareBatchConfirmed(ctx, tx, user, prepareBatch, batch, sourceBatchNo, strings.TrimSpace(param.Remark), now); err != nil {
+		if err = s.queueAppAllocateBatch(ctx, tx, user, prepareBatch, batch, strings.TrimSpace(param.Remark)); err != nil {
 			return err
 		}
 		return nil
@@ -256,19 +283,17 @@ func (s *sAppCard) AllocateBatchSubmit(ctx context.Context, param *model.AppCard
 	if err != nil {
 		return nil, err
 	}
-	if batch == nil {
-		return nil, gerror.New("划拨提交结果不完整")
+	if res == nil {
+		if batch == nil {
+			return nil, gerror.New("划拨提交结果不完整")
+		}
+		res = s.buildAllocateBatchModel(ctx, user, batch, batchNo, sourceBatchNo, consts.BatchTypeAllocate, "pending")
+	}
+	if res.Status == "pending" || res.Status == "processing" {
+		if err = s.publishAppAllocateBatch(ctx, user, batchNo); err != nil {
+			res.FailReason = "批次已创建，投递失败，请保留批次号并重试提交"
+		}
 	}
-	res = s.buildAllocateBatchModel(ctx, user, batch, batchNo, sourceBatchNo, consts.BatchTypeAllocate, "success")
-	_ = s.publishAppBusinessAsyncEvent(ctx, appBusinessAsyncEvent{
-		EventType: appAsyncEventAllocateCompleted,
-		BatchNo:   batchNo,
-		BatchType: consts.BatchTypeAllocate,
-		TenantId:  user.TenantId,
-		UserId:    user.UserId,
-		DeptId:    user.DeptId,
-		Trigger:   "allocate_submit",
-	})
 	return res, nil
 }
 
@@ -368,75 +393,6 @@ func (item *appAllocateCardContext) allocateItemId() string {
 	return strings.TrimSpace(item.ItemId)
 }
 
-func (s *sAppCard) insertAppAllocatePrepareBatch(ctx context.Context, tx gdb.TX, user *entity.SysUser, batch *appAllocateBatchContext, batchNo string, now *gtime.Time) error {
-	batch.refreshCounts()
-	batchStatus := consts.BatchAsyncStatusSuccess
-	runResult := consts.BatchRunResultSuccess
-	successCount := batch.ValidCount
-	if batch.FailCount > 0 {
-		batchStatus = consts.BatchAsyncStatusFailed
-		runResult = consts.BatchRunResultFailed
-		successCount = 0
-	}
-	_, err := dao.BatchMain.Ctx(ctx).TX(tx).Data(do.BatchMain{
-		BatchNo:          batchNo,
-		BatchType:        consts.BatchTypePrepare,
-		BatchStatus:      batchStatus,
-		BatchAsyncStatus: batchStatus,
-		SourceType:       consts.BatchSourceTypeBatchSelect,
-		SourceBatchNo:    batchNo,
-		IsCrossDept:      0,
-		TargetDeptId:     batch.Target.DeptId,
-		DeptId:           user.DeptId,
-		TotalCount:       batch.TotalCount,
-		ValidCount:       batch.ValidCount,
-		SuccessCount:     successCount,
-		FailCount:        batch.FailCount,
-		RunResult:        runResult,
-		FailReason:       batch.FailReason,
-		BatchInfo:        appAllocatePrepareBatchInfo(batch, batchNo),
-		StartTime:        now,
-		EndTime:          now,
-		TenantId:         user.TenantId,
-		CreatedDept:      user.DeptId,
-		CreatedBy:        user.UserId,
-		CreatedAt:        now,
-		UpdatedBy:        user.UserId,
-		UpdatedAt:        now,
-	}).Insert()
-	if err != nil {
-		return gerror.Wrap(err, "写入划拨预处理主表失败")
-	}
-
-	details := make([]do.BatchDetail, 0, len(batch.Cards))
-	for _, item := range batch.Cards {
-		detailStatus := consts.BatchDetailStatusSuccess
-		if strings.TrimSpace(item.ErrorReason) != "" {
-			detailStatus = consts.BatchDetailStatusFailed
-		}
-		details = append(details, do.BatchDetail{
-			BatchNo:        batchNo,
-			BatchType:      consts.BatchTypePrepare,
-			DetailStatus:   detailStatus,
-			BlankOutStatus: consts.BlankOutStatusNo,
-			RowNo:          item.RowNo,
-			ItemId:         item.allocateItemId(),
-			ErrorReason:    strings.TrimSpace(item.ErrorReason),
-			Snapshot:       appAllocatePrepareDetailSnapshot(batch, item),
-			TenantId:       user.TenantId,
-			CreatedDept:    user.DeptId,
-			CreatedBy:      user.UserId,
-			CreatedAt:      now,
-			UpdatedBy:      user.UserId,
-			UpdatedAt:      now,
-		})
-	}
-	if _, err = dao.BatchDetail.Ctx(ctx).TX(tx).Data(details).Insert(); err != nil {
-		return gerror.Wrap(err, "写入划拨预处理明细失败")
-	}
-	return nil
-}
-
 func (s *sAppCard) lockAppAllocatePrepareBatch(ctx context.Context, tx gdb.TX, user *entity.SysUser, batchNo string) (*entity.BatchMain, error) {
 	batchNo = strings.TrimSpace(batchNo)
 	if batchNo == "" {
@@ -446,7 +402,7 @@ func (s *sAppCard) lockAppAllocatePrepareBatch(ctx context.Context, tx gdb.TX, u
 	columns := dao.BatchMain.Columns()
 	err := dao.BatchMain.Ctx(ctx).TX(tx).
 		Where(columns.BatchNo, batchNo).
-		Where(columns.BatchType, consts.BatchTypePrepare).
+		WhereIn(columns.BatchType, []int{consts.BatchTypePrepare, consts.BatchTypeAllocate}).
 		Where(columns.TenantId, user.TenantId).
 		Where(columns.CreatedBy, user.UserId).
 		LockUpdate().
@@ -461,6 +417,9 @@ func (s *sAppCard) lockAppAllocatePrepareBatch(ctx context.Context, tx gdb.TX, u
 	if batch.BatchInfo == nil || batch.BatchInfo.Get("targetBatchType").Int() != consts.BatchTypeAllocate {
 		return nil, gerror.New("批次不是卡划拨预处理批次")
 	}
+	if batch.BatchType == consts.BatchTypeAllocate {
+		return batch, nil
+	}
 	if batch.RunResult != consts.BatchRunResultSuccess || batch.FailCount > 0 {
 		return nil, gerror.New("划拨预处理批次存在校验失败数据，请重新校验后再提交")
 	}
@@ -533,6 +492,9 @@ func (s *sAppCard) validateAllocateCardBusinessRules(ctx context.Context, tx gdb
 	if card.BossCardStatus == 4 {
 		return gerror.Newf("卡%s当前为停机状态，不能划拨", cardLabel)
 	}
+	if card.BossCardStatus == 9 {
+		return gerror.Newf("卡%s已销户，不能划拨", cardLabel)
+	}
 	if card.PackageStatus == consts.PackageStatusExpired ||
 		(card.FlowPkgEndAt != nil && !card.FlowPkgEndAt.IsZero() && card.FlowPkgEndAt.Before(gtime.Now())) {
 		return gerror.Newf("卡%s套餐已过期，不能划拨", cardLabel)
@@ -540,104 +502,6 @@ func (s *sAppCard) validateAllocateCardBusinessRules(ctx context.Context, tx gdb
 	return nil
 }
 
-func (s *sAppCard) updateAllocateCards(ctx context.Context, tx gdb.TX, user *entity.SysUser, batch *appAllocateBatchContext, batchNo string, now *gtime.Time) error {
-	for _, item := range batch.Cards {
-		result, err := dao.TSimCardInfo.Ctx(ctx).TX(tx).
-			Where(dao.TSimCardInfo.Columns().Id, item.Card.Id).
-			Where(dao.TSimCardInfo.Columns().DeptId, item.Card.DeptId).
-			Data(do.TSimCardInfo{
-				DeptId:            batch.Target.DeptId,
-				CreatedDept:       user.DeptId,
-				OutboundBatchNo:   batchNo,
-				AllocationBatchNo: batchNo,
-				UpdatedBy:         user.UserId,
-				UpdatedAt:         now,
-			}).
-			Update()
-		if err != nil {
-			return gerror.Wrapf(err, "更新卡%s归属失败", item.Card.Iccid)
-		}
-		if affected, err := result.RowsAffected(); err != nil {
-			return gerror.Wrap(err, "读取划拨更新数量失败")
-		} else if affected != 1 {
-			return gerror.Newf("卡%s归属已变化，请重新校验", item.Card.Iccid)
-		}
-		if item.SourceDeptId <= 0 {
-			item.SourceDeptId = item.Card.DeptId
-		}
-		item.Card.DeptId = batch.Target.DeptId
-		item.Card.CreatedDept = user.DeptId
-		item.Card.OutboundBatchNo = batchNo
-		item.Card.AllocationBatchNo = batchNo
-	}
-	return nil
-}
-
-func (s *sAppCard) markAppAllocatePrepareBatchConfirmed(ctx context.Context, tx gdb.TX, user *entity.SysUser, prepareBatch *entity.BatchMain, batch *appAllocateBatchContext, sourceBatchNo string, remark string, now *gtime.Time) error {
-	batchNo := strings.TrimSpace(prepareBatch.BatchNo)
-	for _, item := range batch.Cards {
-		_, err := dao.BatchDetail.Ctx(ctx).TX(tx).
-			Where(dao.BatchDetail.Columns().BatchNo, batchNo).
-			Where(dao.BatchDetail.Columns().BatchType, consts.BatchTypePrepare).
-			Where(dao.BatchDetail.Columns().DetailStatus, consts.BatchDetailStatusSuccess).
-			Where(dao.BatchDetail.Columns().ItemId, item.Card.Iccid).
-			Data(do.BatchDetail{
-				BatchType: consts.BatchTypeAllocate,
-				Snapshot:  appAllocateSubmitDetailSnapshot(batch, item, batchNo, sourceBatchNo),
-				UpdatedBy: user.UserId,
-				UpdatedAt: now,
-			}).
-			Update()
-		if err != nil {
-			return gerror.Wrap(err, "更新划拨批次明细失败")
-		}
-	}
-	if _, err := dao.BatchDetail.Ctx(ctx).TX(tx).
-		Where(dao.BatchDetail.Columns().BatchNo, batchNo).
-		Where(dao.BatchDetail.Columns().BatchType, consts.BatchTypePrepare).
-		Data(do.BatchDetail{
-			BatchType: consts.BatchTypeAllocate,
-			UpdatedBy: user.UserId,
-			UpdatedAt: now,
-		}).
-		Update(); err != nil {
-		return gerror.Wrap(err, "更新划拨批次明细类型失败")
-	}
-
-	logFiles, err := s.ensureAppAllocateBatchLogFiles(ctx, tx, user, batch, prepareBatch.BatchInfo, batchNo, sourceBatchNo, remark, now)
-	if err != nil {
-		return err
-	}
-	batchInfo := appAllocateBatchInfoWithLogFiles(
-		appAllocateSubmitBatchInfo(batch, batchNo, sourceBatchNo, remark, now),
-		logFiles,
-	)
-
-	_, err = dao.BatchMain.Ctx(ctx).TX(tx).
-		Where(dao.BatchMain.Columns().Id, prepareBatch.Id).
-		Where(dao.BatchMain.Columns().BatchType, consts.BatchTypePrepare).
-		Data(do.BatchMain{
-			BatchType:        consts.BatchTypeAllocate,
-			BatchStatus:      consts.BatchStatusSuccess,
-			BatchAsyncStatus: consts.BatchAsyncStatusSuccess,
-			TargetDeptId:     batch.Target.DeptId,
-			TotalCount:       len(batch.Cards),
-			ValidCount:       len(batch.Cards),
-			SuccessCount:     len(batch.Cards),
-			FailCount:        0,
-			RunResult:        consts.BatchRunResultSuccess,
-			BatchInfo:        batchInfo,
-			EndTime:          now,
-			UpdatedBy:        user.UserId,
-			UpdatedAt:        now,
-		}).
-		Update()
-	if err != nil {
-		return gerror.Wrap(err, "更新划拨批次主表失败")
-	}
-	return nil
-}
-
 func (s *sAppCard) loadAllocateTarget(ctx context.Context, user *entity.SysUser, targetDeptId int64) (*entity.SysDept, error) {
 	if targetDeptId <= 0 {
 		return nil, gerror.New("请选择划拨目标客户")
@@ -649,6 +513,9 @@ func (s *sAppCard) loadAllocateTarget(ctx context.Context, user *entity.SysUser,
 	if target == nil || target.DeptId == 0 {
 		return nil, gerror.New("划拨目标客户不存在")
 	}
+	if target.Status != "0" {
+		return nil, gerror.New("划拨目标客户未启用")
+	}
 	if target.DeptId == user.DeptId {
 		return nil, gerror.New("划拨目标不能选择当前企业")
 	}
diff --git a/server/internal/logic/app/app_card_allocate_async.go b/server/internal/logic/app/app_card_allocate_async.go
new file mode 100644
index 0000000..7d68300
--- /dev/null
+++ b/server/internal/logic/app/app_card_allocate_async.go
@@ -0,0 +1,241 @@
+package app
+
+import (
+	"context"
+	"strings"
+
+	"github.com/gogf/gf/v2/database/gdb"
+	"github.com/gogf/gf/v2/encoding/gjson"
+	"github.com/gogf/gf/v2/errors/gerror"
+	"github.com/gogf/gf/v2/os/gtime"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/dao"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/allocationunits"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/batchimport"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/batchmetadata"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/do"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/entity"
+)
+
+func appAllocateParentInfo(batch *appAllocateBatchContext, remark string) *gjson.Json {
+	return gjson.New(map[string]any{
+		"operation": "sim_card_allocate", "targetBatchType": consts.BatchTypeAllocate,
+		"jobRole": "allocate_parent", "autoSplit": true, "splitCompleted": true,
+		"chunkCount": 1, "chunkSize": 100, "parsedCount": len(batch.Cards),
+		"targetDeptId": batch.Target.DeptId, "targetDeptName": batch.Target.DeptName,
+		"cards": appAllocateCardSnapshotList(batch), "remark": remark, "resultFile": map[string]any{"status": "pending"},
+	})
+}
+
+func (s *sAppCard) queueAppAllocateBatch(ctx context.Context, tx gdb.TX, user *entity.SysUser, prepare *entity.BatchMain, batch *appAllocateBatchContext, remark string) error {
+	units, err := allocationunits.Snapshot(ctx, user.TenantId, user.DeptId, batch.Target.DeptId, tx)
+	if err != nil {
+		return err
+	}
+
+	childNo, err := batchimport.NextBatchNoContext(ctx, consts.BatchNoPrefixAllocate)
+	if err != nil {
+		return err
+	}
+	mode := batchmetadata.Bulk
+	if prepare.ExecutionMode == batchmetadata.Single {
+		mode = batchmetadata.Single
+	}
+	parentInfo := allocationunits.Merge(appAllocateParentInfo(batch, remark), units)
+	if prepare.BatchInfo != nil {
+		for _, key := range []string{"requestId", "requestHash"} {
+			if value := prepare.BatchInfo.Get(key).String(); value != "" {
+				parentInfo.Set(key, value)
+			}
+		}
+	}
+	childInfo := gjson.New(map[string]any{
+		"operation": "sim_card_allocate", "jobRole": "allocate_chunk", "autoSplit": true,
+		"targetBatchType": consts.BatchTypeAllocate, "targetDeptId": batch.Target.DeptId,
+		"parentBatchNo": prepare.BatchNo, "chunkNo": 1, "remark": remark,
+	})
+	if _, err := dao.BatchMain.Ctx(ctx).TX(tx).Data(do.BatchMain{
+		BatchNo: childNo, BatchType: consts.BatchTypeAllocate,
+		BatchStatus: consts.BatchAsyncStatusPending, BatchAsyncStatus: consts.BatchAsyncStatusPending,
+		SourceType: consts.BatchSourceTypeBatchSelect, SourceBatchNo: prepare.BatchNo,
+		SourceChannel: batchmetadata.MiniProgram, ExecutionMode: mode,
+		TargetDeptId: batch.Target.DeptId, DeptId: user.DeptId,
+		TotalCount: len(batch.Cards), ValidCount: 0, SuccessCount: 0, FailCount: 0,
+		RunResult: consts.BatchRunResultPending, BatchInfo: allocationunits.Merge(childInfo, units),
+		TenantId: user.TenantId, CreatedDept: user.DeptId, CreatedBy: user.UserId, UpdatedBy: user.UserId,
+	}).Insert(); err != nil {
+		return gerror.Wrap(err, "创建划拨执行子批次失败")
+	}
+	details := make([]do.BatchDetail, 0, len(batch.Cards))
+	for index, item := range batch.Cards {
+		details = append(details, do.BatchDetail{
+			BatchNo: childNo, BatchType: consts.BatchTypeAllocate,
+			DetailStatus: consts.BatchDetailStatusPending, BlankOutStatus: consts.BlankOutStatusNo,
+			RowNo: index + 1, ItemId: item.Card.Iccid,
+			Snapshot: gjson.New(map[string]any{
+				"iccid": item.Card.Iccid, "msisdn": item.Card.Msisdn, "imsi": item.Card.Imsi,
+				"targetDeptId": batch.Target.DeptId, "targetDeptName": units.Get("targetDeptName").String(), "targetDeptKey": units.Get("targetDeptKey").String(),
+				"sourceDeptId": item.Card.DeptId, "sourceDeptName": units.Get("sourceDeptName").String(), "sourceDeptKey": units.Get("sourceDeptKey").String(), "remark": remark,
+			}),
+			TenantId: user.TenantId, CreatedDept: user.DeptId, CreatedBy: user.UserId, UpdatedBy: user.UserId,
+		})
+	}
+	if _, err := dao.BatchDetail.Ctx(ctx).TX(tx).Data(details).Insert(); err != nil {
+		return gerror.Wrap(err, "创建划拨执行明细失败")
+	}
+	if _, err := dao.BatchDetail.Ctx(ctx).TX(tx).
+		Where(dao.BatchDetail.Columns().BatchNo, prepare.BatchNo).
+		Where(dao.BatchDetail.Columns().BatchType, consts.BatchTypePrepare).
+		Where(dao.BatchDetail.Columns().TenantId, user.TenantId).
+		Where(dao.BatchDetail.Columns().CreatedBy, user.UserId).Delete(); err != nil {
+		return gerror.Wrap(err, "清理划拨预处理明细失败")
+	}
+	_, err = dao.BatchMain.Ctx(ctx).TX(tx).Where(dao.BatchMain.Columns().Id, prepare.Id).Data(do.BatchMain{
+		BatchType: consts.BatchTypeAllocate, SourceBatchNo: "", ResultOssId: 0,
+		BatchStatus: consts.BatchAsyncStatusPending, BatchAsyncStatus: consts.BatchAsyncStatusPending,
+		RunResult: consts.BatchRunResultPending, ValidCount: 0, SuccessCount: 0, FailCount: 0, FailReason: "",
+		SourceChannel: batchmetadata.MiniProgram, ExecutionMode: mode,
+		BatchInfo: parentInfo, UpdatedBy: user.UserId,
+		StartTime: new(gtime.Time), EndTime: new(gtime.Time),
+	}).Update()
+	if err != nil {
+		return gerror.Wrap(err, "创建划拨父批次失败")
+	}
+	return nil
+}
+
+func (s *sAppCard) createAppAllocatePending(ctx context.Context, user *entity.SysUser, param *model.AppCardAllocateBatchSubmitParam) (*model.AppCardAllocateBatchModel, error) {
+	if !appWorkerBatchAsyncEnabled(ctx) {
+		return nil, gerror.New("划拨执行服务未启用，请联系管理员")
+	}
+	if user.DeptId <= 0 || s.isTerminalUser(ctx, user) {
+		return nil, gerror.New("当前账号不能使用卡划拨功能")
+	}
+	values := appNormalizeAllocateCardValues(param.CardValues)
+	mode := appAllocateExecutionMode(param.ExecutionMode)
+	if len(values) == 0 || len(values) > 100 || (mode == batchmetadata.Single && len(values) != 1) {
+		return nil, gerror.New("请选择1至100张卡，单卡划拨只能选择一张卡")
+	}
+	target, err := s.loadAllocateTarget(ctx, user, param.TargetDeptId)
+	if err != nil {
+		return nil, err
+	}
+	batch := &appAllocateBatchContext{Target: target, TotalCount: len(values)}
+	for index, value := range values {
+		card, err := s.findVisibleCard(ctx, user, value)
+		if err != nil {
+			return nil, err
+		}
+		if card == nil || card.DeptId != user.DeptId || strings.TrimSpace(card.Iccid) == "" {
+			return nil, gerror.Newf("第%d张卡不在当前企业可划拨范围内", index+1)
+		}
+		batch.Cards = append(batch.Cards, &appAllocateCardContext{Card: card, ItemId: card.Iccid, RowNo: index + 1, SourceDeptId: card.DeptId})
+	}
+	parentNo, err := batchimport.NextBatchNoContext(ctx, consts.BatchNoPrefixAllocate)
+	if err != nil {
+		return nil, err
+	}
+	parent, err := s.persistAppAllocatePending(ctx, user, parentNo, mode, batch, strings.TrimSpace(param.Remark))
+	if err != nil {
+		return nil, err
+	}
+	response := appAllocateQueuedResponse(parent)
+	if err := s.publishAppAllocateBatch(ctx, user, parentNo); err != nil {
+		response.FailReason = "任务已受理，投递尚未确认，请保留批次号并稍后刷新"
+	}
+	return response, nil
+}
+
+func (s *sAppCard) persistAppAllocatePending(ctx context.Context, user *entity.SysUser, parentNo string, mode int, batch *appAllocateBatchContext, remark string) (*entity.BatchMain, error) {
+	parent := &entity.BatchMain{
+		BatchNo: parentNo, BatchType: consts.BatchTypeAllocate, ExecutionMode: uint(mode),
+		BatchStatus: consts.BatchAsyncStatusPending, BatchAsyncStatus: consts.BatchAsyncStatusPending,
+		TotalCount: len(batch.Cards), TargetDeptId: batch.Target.DeptId, BatchInfo: appAllocateParentInfo(batch, remark),
+	}
+	err := dao.BatchMain.Transaction(ctx, func(ctx context.Context, tx gdb.TX) error {
+		id, err := dao.BatchMain.Ctx(ctx).TX(tx).Data(do.BatchMain{
+			BatchNo: parentNo, BatchType: consts.BatchTypeAllocate, SourceBatchNo: "",
+			BatchStatus: consts.BatchAsyncStatusPending, BatchAsyncStatus: consts.BatchAsyncStatusPending,
+			RunResult: consts.BatchRunResultPending, SourceType: consts.BatchSourceTypeBatchSelect,
+			SourceChannel: batchmetadata.MiniProgram, ExecutionMode: mode,
+			TotalCount: len(batch.Cards), TargetDeptId: batch.Target.DeptId, DeptId: user.DeptId,
+			TenantId: user.TenantId, CreatedDept: user.DeptId, CreatedBy: user.UserId, UpdatedBy: user.UserId,
+		}).InsertAndGetId()
+		if err != nil {
+			return gerror.Wrap(err, "创建划拨待处理批次失败")
+		}
+		parent.Id = id
+		return s.queueAppAllocateBatch(ctx, tx, user, parent, batch, remark)
+	})
+	if err != nil {
+		return nil, err
+	}
+	return parent, nil
+}
+
+func (s *sAppCard) publishAppAllocateBatch(ctx context.Context, user *entity.SysUser, batchNo string) error {
+	var children []*entity.BatchMain
+	columns := dao.BatchMain.Columns()
+	if err := dao.BatchMain.Ctx(ctx).Where(columns.SourceBatchNo, batchNo).
+		Where(columns.BatchType, consts.BatchTypeAllocate).Where(columns.TenantId, user.TenantId).
+		Where(columns.CreatedBy, user.UserId).Scan(&children); err != nil {
+		return err
+	}
+	for _, child := range children {
+		if child.BatchAsyncStatus == consts.BatchAsyncStatusPending || child.BatchAsyncStatus == consts.BatchAsyncStatusProcessing {
+			if err := s.publishWorkerBatchExecute(ctx, child.BatchNo, consts.BatchTypeAllocate, true); err != nil {
+				return err
+			}
+		}
+	}
+	return s.publishWorkerBatchExecute(ctx, batchNo, consts.BatchTypeAllocate, true)
+}
+
+func appAllocateQueuedResponse(batch *entity.BatchMain) *model.AppCardAllocateBatchModel {
+	status := appLifecycleBatchStatus(batch.BatchStatus, batch.BatchAsyncStatus)
+	target := &model.AppCardAllocateTargetModel{DeptId: batch.TargetDeptId}
+	if batch.BatchInfo != nil {
+		target.DeptName = strings.TrimSpace(batch.BatchInfo.Get("targetDeptName").String())
+	}
+	return &model.AppCardAllocateBatchModel{
+		BatchNo: batch.BatchNo, BatchType: consts.BatchTypeAllocate,
+		Quantity: batch.TotalCount, TotalCount: batch.TotalCount,
+		ValidCount: batch.ValidCount, FailCount: batch.FailCount,
+		FailReason: appLifecycleFailReasonForResponse(status, batch.FailReason),
+		Status:     status, Target: target, Cards: []*model.AppCardModel{}, Details: []*model.AppCardAllocateBatchDetailModel{},
+	}
+}
+
+func appAllocateExecutionMode(requested int) int {
+	if requested == batchmetadata.Single {
+		return batchmetadata.Single
+	}
+	return batchmetadata.Bulk
+}
+
+func appValidateAllocateRetry(batch *entity.BatchMain, param *model.AppCardAllocateBatchSubmitParam) error {
+	if param.ExecutionMode > 0 && uint(param.ExecutionMode) != batch.ExecutionMode {
+		return gerror.New("提交规模与原划拨批次不一致")
+	}
+	if strings.TrimSpace(param.Remark) != "" && strings.TrimSpace(param.Remark) != batch.BatchInfo.Get("remark").String() {
+		return gerror.New("提交备注与原划拨批次不一致")
+	}
+	if strings.TrimSpace(param.RequestId) != "" && strings.TrimSpace(param.RequestId) != batch.BatchInfo.Get("requestId").String() {
+		return gerror.New("请求标识与原划拨批次不一致")
+	}
+
+	if param.TargetDeptId > 0 && param.TargetDeptId != batch.TargetDeptId {
+		return gerror.New("提交目标客户与原划拨批次不一致")
+	}
+	if len(param.CardValues) > 0 {
+		var expected []string
+		for _, card := range batch.BatchInfo.Get("cards").Array() {
+			expected = append(expected, gjson.New(card).Get("iccid").String())
+		}
+		if !appSameStringSet(appNormalizeAllocateCardValues(param.CardValues), expected) {
+			return gerror.New("提交卡片与原划拨批次不一致")
+		}
+	}
+	return nil
+}
diff --git a/server/internal/logic/app/app_card_allocate_async_test.go b/server/internal/logic/app/app_card_allocate_async_test.go
new file mode 100644
index 0000000..b047692
--- /dev/null
+++ b/server/internal/logic/app/app_card_allocate_async_test.go
@@ -0,0 +1,77 @@
+package app
+
+import (
+	"context"
+	"github.com/gogf/gf/v2/encoding/gjson"
+	"testing"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/batchmetadata"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/entity"
+)
+
+func TestAppAllocateParentMatchesWorkerContract(t *testing.T) {
+	batch := &appAllocateBatchContext{Target: &entity.SysDept{DeptId: 2}, Cards: []*appAllocateCardContext{{Card: &appCardQueryRow{TSimCardInfo: entity.TSimCardInfo{Iccid: "A", DeptId: 1}}}}}
+	info := appAllocateParentInfo(batch, "test")
+	if info.Get("jobRole").String() != "allocate_parent" || !info.Get("splitCompleted").Bool() || info.Get("chunkCount").Int() != 1 || info.Get("targetBatchType").Int() != consts.BatchTypeAllocate {
+		t.Fatal("worker parent contract mismatch", info)
+	}
+}
+
+func TestAppAllocateRejectsCanceledCard(t *testing.T) {
+	card := &appCardQueryRow{TSimCardInfo: entity.TSimCardInfo{Iccid: "A", BossCardStatus: 9}}
+	if err := NewAppCard().validateAllocateCardBusinessRules(context.Background(), nil, card); err == nil {
+		t.Fatal("canceled card accepted")
+	}
+}
+
+func TestAppAllocateQueuedResponseRetainsFinalStatus(t *testing.T) {
+	batch := &entity.BatchMain{BatchNo: "ALC1", BatchType: 3, BatchStatus: 3, BatchAsyncStatus: 3, TotalCount: 2}
+	if res := appAllocateQueuedResponse(batch); res.Status != "success" || res.BatchNo != batch.BatchNo || res.Quantity != 2 {
+		t.Fatal("retry lost final result", res)
+	}
+}
+
+func TestAppAllocateRetryRejectsChangedSelection(t *testing.T) {
+	batch := &appAllocateBatchContext{Target: &entity.SysDept{DeptId: 2}, Cards: []*appAllocateCardContext{{Card: &appCardQueryRow{TSimCardInfo: entity.TSimCardInfo{Iccid: "A"}}}}}
+	main := &entity.BatchMain{TargetDeptId: 2, BatchInfo: appAllocateParentInfo(batch, "")}
+	for _, param := range []*model.AppCardAllocateBatchSubmitParam{{TargetDeptId: 3}, {CardValues: []string{"B"}}} {
+		if appValidateAllocateRetry(main, param) == nil {
+			t.Fatal("changed request accepted")
+		}
+	}
+	if err := appValidateAllocateRetry(main, &model.AppCardAllocateBatchSubmitParam{CardValues: []string{"A"}, TargetDeptId: 2}); err != nil {
+		t.Fatal(err)
+	}
+	if appAllocateExecutionMode(0) != batchmetadata.Bulk || appAllocateExecutionMode(2) != batchmetadata.Bulk || appAllocateExecutionMode(1) != batchmetadata.Single {
+		t.Fatal("request shape lost")
+	}
+}
+
+func TestAppAllocateQueuedResponsePreservesFailure(t *testing.T) {
+	batch := &entity.BatchMain{BatchNo: "ALC1", BatchAsyncStatus: consts.BatchAsyncStatusFailed, FailReason: "卡已停机，不能划拨", TotalCount: 1, FailCount: 1}
+	res := appAllocateQueuedResponse(batch)
+	if res.Status != "failed" || res.FailReason != batch.FailReason || res.FailCount != 1 {
+		t.Fatal("retry hid failure", res)
+	}
+}
+
+func TestAppAllocateRequestRejectsChangedHashAndScope(t *testing.T) {
+	user := &entity.SysUser{DeptId: 1}
+	batch := &entity.BatchMain{BatchType: 3, CreatedDept: 1, BatchInfo: gjson.New(map[string]any{"jobRole": "allocate_parent", "requestHash": "hash"})}
+	if err := appValidateAllocateRequest(batch, user, "hash"); err != nil {
+		t.Fatal(err)
+	}
+	if appValidateAllocateRequest(batch, user, "changed") == nil {
+		t.Fatal("changed request accepted")
+	}
+	user.DeptId = 2
+	if appValidateAllocateRequest(batch, user, "hash") == nil {
+		t.Fatal("changed department accepted")
+	}
+	user.DeptId = 1
+	batch.SourceBatchNo = "parent"
+	if appValidateAllocateRequest(batch, user, "hash") == nil {
+		t.Fatal("child accepted")
+	}
+}
diff --git a/server/internal/logic/app/app_card_allocate_queue_test.go b/server/internal/logic/app/app_card_allocate_queue_test.go
new file mode 100644
index 0000000..19edade
--- /dev/null
+++ b/server/internal/logic/app/app_card_allocate_queue_test.go
@@ -0,0 +1,261 @@
+package app
+
+import (
+	"context"
+	"errors"
+	_ "github.com/gogf/gf/contrib/drivers/sqlite/v2"
+	_ "github.com/gogf/gf/contrib/nosql/redis/v2"
+	"github.com/gogf/gf/v2/container/gvar"
+	"github.com/gogf/gf/v2/database/gdb"
+	"github.com/gogf/gf/v2/database/gredis"
+	"github.com/gogf/gf/v2/encoding/gjson"
+	"github.com/gogf/gf/v2/frame/g"
+	"github.com/gogf/gf/v2/os/gtime"
+	"reflect"
+	"regexp"
+	"strings"
+	"testing"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/dao"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/allocaterequest"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/batchimport"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/do"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/entity"
+)
+
+type allocateSequenceAdapter struct {
+	gredis.Adapter
+	sequence int
+}
+
+func (adapter *allocateSequenceAdapter) Do(ctx context.Context, command string, args ...any) (*gvar.Var, error) {
+	if command != "EVAL" {
+		return nil, errors.New("unexpected Redis command")
+	}
+	adapter.sequence++
+	return gvar.New(adapter.sequence), nil
+}
+
+func TestAppAllocateQueuePersistsWorkerTaskWithoutChangingOwnership(t *testing.T) {
+	ctx := context.Background()
+	gredis.SetConfig(&gredis.Config{Address: "127.0.0.1:1"})
+	redis := g.Redis()
+	original := redis.GetAdapter()
+	redis.SetAdapter(&allocateSequenceAdapter{})
+	t.Cleanup(func() { redis.SetAdapter(original) })
+	previous := gdb.GetConfig("default")
+	if err := gdb.SetConfigGroup("default", gdb.ConfigGroup{{Type: "sqlite", Link: "sqlite::@file(:memory:)", MaxOpenConnCount: 1}}); err != nil {
+		t.Fatal(err)
+	}
+	database := g.DB()
+	t.Cleanup(func() {
+		if err := database.GetCore().ClearCacheAll(ctx); err != nil {
+			t.Error(err)
+		}
+		if err := database.Close(ctx); err != nil {
+			t.Error(err)
+		}
+		if err := gdb.SetConfigGroup("default", previous); err != nil {
+			t.Error(err)
+		}
+	})
+	if err := database.GetCore().ClearCacheAll(ctx); err != nil {
+		t.Fatal(err)
+	}
+	for name, value := range map[string]any{"batch_main": entity.BatchMain{}, "batch_detail": entity.BatchDetail{}, "t_sim_card_info": entity.TSimCardInfo{}} {
+		typ := reflect.TypeOf(value)
+		columns := make([]string, 0, typ.NumField())
+		for index := 0; index < typ.NumField(); index++ {
+			field := typ.Field(index)
+			column := field.Tag.Get("orm")
+			sqlType := "TEXT"
+			if field.Type.Kind() >= reflect.Int && field.Type.Kind() <= reflect.Uint64 {
+				sqlType = "INTEGER"
+			}
+			if column == "id" {
+				sqlType = "INTEGER PRIMARY KEY"
+			}
+			if column == "batch_no" && name == "batch_main" {
+				sqlType += " UNIQUE"
+			}
+			columns = append(columns, column+" "+sqlType)
+		}
+		if _, err := g.DB().Exec(ctx, "CREATE TABLE "+name+" ("+strings.Join(columns, ",")+")"); err != nil {
+			t.Fatal(err)
+		}
+	}
+	if _, err := g.DB().Exec(ctx, "CREATE TABLE sys_dept(dept_id INTEGER,tenant_id TEXT,dept_key TEXT,dept_name TEXT,deleted_at TEXT)"); err != nil {
+		t.Fatal(err)
+	}
+	if _, err := g.DB().Exec(ctx, "INSERT INTO sys_dept VALUES(1,'A','source','划拨单位',NULL),(2,'A','target','接收单位',NULL)"); err != nil {
+		t.Fatal(err)
+	}
+	user := &entity.SysUser{UserId: 7, DeptId: 1, TenantId: "A"}
+	prepare := &entity.BatchMain{BatchInfo: gjson.New(map[string]any{"requestId": "request", "requestHash": "hash"}), Id: 1, BatchNo: "ALC20261012000001", ExecutionMode: 2}
+	if _, err := dao.BatchMain.Ctx(ctx).Data(do.BatchMain{Id: 1, BatchNo: prepare.BatchNo, BatchType: 4, TenantId: "A", CreatedBy: 7, StartTime: gtime.Now(), EndTime: gtime.Now(), TotalCount: 1, ResultOssId: 99}).Insert(); err != nil {
+		t.Fatal(err)
+	}
+	if _, err := dao.BatchDetail.Ctx(ctx).Data(do.BatchDetail{BatchNo: prepare.BatchNo, BatchType: 4, ItemId: "CARD", TenantId: "A", CreatedBy: 7}).Insert(); err != nil {
+		t.Fatal(err)
+	}
+	if _, err := dao.TSimCardInfo.Ctx(ctx).Data(do.TSimCardInfo{Id: 1, Iccid: "CARD", DeptId: 1, TenantId: "A", CreatedDept: 1}).Insert(); err != nil {
+		t.Fatal(err)
+	}
+	batch := &appAllocateBatchContext{Target: &entity.SysDept{DeptId: 2, DeptName: "目标客户"}, Cards: []*appAllocateCardContext{{Card: &appCardQueryRow{TSimCardInfo: entity.TSimCardInfo{Id: 1, Iccid: "CARD", DeptId: 1}}}}}
+	if err := dao.BatchMain.Transaction(ctx, func(ctx context.Context, tx gdb.TX) error {
+		return NewAppCard().queueAppAllocateBatch(ctx, tx, user, prepare, batch, "")
+	}); err != nil {
+		t.Fatal(err)
+	}
+	var parent *entity.BatchMain
+	if err := dao.BatchMain.Ctx(ctx).Where("batch_no", prepare.BatchNo).Scan(&parent); err != nil {
+		t.Fatal(err)
+	}
+	if parent.BatchType != consts.BatchTypeAllocate || parent.SourceBatchNo != "" || parent.BatchAsyncStatus != consts.BatchAsyncStatusPending || parent.ExecutionMode != 2 || parent.SourceChannel != "mini_program" {
+		t.Fatal("invalid parent", parent)
+	}
+	if parent.BatchInfo.Get("requestHash").String() != "hash" || parent.BatchInfo.Get("requestId").String() != "request" {
+		t.Fatal("request identity lost")
+	}
+	if parent.ResultOssId != 0 {
+		t.Fatal("precheck result file leaked into execution")
+	}
+	if parent.StartTime != nil && !parent.StartTime.IsZero() || parent.EndTime != nil && !parent.EndTime.IsZero() {
+		t.Fatal("prepare times leaked into execution", parent)
+	}
+	var children []*entity.BatchMain
+	if err := dao.BatchMain.Ctx(ctx).Where("source_batch_no", prepare.BatchNo).Scan(&children); err != nil {
+		t.Fatal(err)
+	}
+	if len(children) != 1 || !regexp.MustCompile(`^ALC[0-9]{17}$`).MatchString(children[0].BatchNo) || children[0].BatchInfo.Get("jobRole").String() != "allocate_chunk" {
+		t.Fatal("invalid child", children)
+	}
+	var details []*entity.BatchDetail
+	if err := dao.BatchDetail.Ctx(ctx).Scan(&details); err != nil {
+		t.Fatal(err)
+	}
+	if len(details) != 1 || details[0].BatchNo != children[0].BatchNo || details[0].Snapshot.Get("targetDeptId").Int64() != 2 {
+		t.Fatal("invalid execution details", details)
+	}
+	for _, snapshot := range []*gjson.Json{parent.BatchInfo, children[0].BatchInfo, details[0].Snapshot} {
+		if snapshot.Get("sourceDeptName").String() != "划拨单位" || snapshot.Get("targetDeptName").String() != "接收单位" || snapshot.Get("sourceDeptId").Int64() != 1 || snapshot.Get("targetDeptId").Int64() != 2 {
+			t.Fatal("父子批次和明细单位快照不一致", snapshot)
+		}
+	}
+	var card *entity.TSimCardInfo
+	if err := dao.TSimCardInfo.Ctx(ctx).Where("id", 1).Scan(&card); err != nil {
+		t.Fatal(err)
+	}
+	if card.DeptId != 1 || card.CreatedDept != 1 || card.AllocationBatchNo != "" {
+		t.Fatal("queue changed ownership", card)
+	}
+	for _, test := range []struct {
+		value    string
+		allocate bool
+		count    int
+	}{
+		{" AR ", true, 1}, {"AR", false, 0}, {"CARD", true, 1}, {"missing", true, 0},
+	} {
+		query := NewAppCard().applyCardFilters(dao.TSimCardInfo.Ctx(ctx).Where("tenant_id", "A"), &model.AppCardListParam{CardValue: test.value, AllocateOnly: test.allocate})
+		if count, err := query.Count(); err != nil || count != test.count {
+			t.Fatalf("search %q allocate=%v count=%d error=%v", test.value, test.allocate, count, err)
+		}
+	}
+	parentNo, err := batchimport.NextBatchNoContext(ctx, consts.BatchNoPrefixAllocate)
+	if err != nil {
+		t.Fatal(err)
+	}
+	pending, err := NewAppCard().persistAppAllocatePending(ctx, user, parentNo, 2, batch, "直接异步")
+	if err != nil {
+		t.Fatal(err)
+	}
+	if pending.BatchType != 3 || pending.BatchAsyncStatus != 1 || pending.ValidCount != 0 || !regexp.MustCompile(`^ALC[0-9]{17}$`).MatchString(pending.BatchNo) {
+		t.Fatal("direct submission did not create pending task", pending)
+	}
+	var directParent *entity.BatchMain
+	if err := dao.BatchMain.Ctx(ctx).Where("batch_no", parentNo).Scan(&directParent); err != nil || directParent.SourceBatchNo != "" || directParent.BatchInfo.Get("jobRole").String() != "allocate_parent" || !directParent.BatchInfo.Get("splitCompleted").Bool() {
+		t.Fatal("invalid direct parent protocol", directParent, err)
+	}
+	var directChild *entity.BatchMain
+	if err := dao.BatchMain.Ctx(ctx).Where("source_batch_no", parentNo).Scan(&directChild); err != nil || directChild.BatchInfo.Get("jobRole").String() != "allocate_chunk" || directChild.BatchAsyncStatus != 1 {
+		t.Fatal("invalid direct child protocol", directChild, err)
+	}
+	if err := dao.TSimCardInfo.Ctx(ctx).Where("id", 1).Scan(&card); err != nil || card.DeptId != 1 || card.AllocationBatchNo != "" {
+		t.Fatal("direct submission changed card ownership", card, err)
+	}
+	if _, err := dao.BatchMain.DB().Exec(ctx, `CREATE TRIGGER reject_allocate_child BEFORE INSERT ON batch_main WHEN NEW.source_batch_no = 'ROLLBACK_PARENT' BEGIN SELECT RAISE(ABORT, 'injected child failure'); END`); err != nil {
+		t.Fatal(err)
+	}
+	if _, err := NewAppCard().persistAppAllocatePending(ctx, user, "ROLLBACK_PARENT", 2, batch, ""); err == nil {
+		t.Fatal("child creation failure was ignored")
+	}
+	if count, err := dao.BatchMain.Ctx(ctx).Where("batch_no", "ROLLBACK_PARENT").Count(); err != nil || count != 0 {
+		t.Fatal("direct submission left orphan parent", count, err)
+	}
+	if _, err := dao.BatchMain.DB().Exec(ctx, `DROP TRIGGER reject_allocate_child`); err != nil {
+		t.Fatal(err)
+	}
+	second := &entity.BatchMain{Id: 10, BatchNo: "ALC20261012000002", ExecutionMode: 2}
+	if _, err := dao.BatchMain.Ctx(ctx).Data(do.BatchMain{Id: 10, BatchNo: second.BatchNo, BatchType: 4, TenantId: "A", CreatedBy: 7}).Insert(); err != nil {
+		t.Fatal(err)
+	}
+	if _, err := dao.BatchDetail.Ctx(ctx).Data(do.BatchDetail{BatchNo: second.BatchNo, BatchType: 4, ItemId: "CARD", TenantId: "A", CreatedBy: 7}).Insert(); err != nil {
+		t.Fatal(err)
+	}
+	injected := errors.New("rollback test")
+	err = dao.BatchMain.Transaction(ctx, func(ctx context.Context, tx gdb.TX) error {
+		if err := NewAppCard().queueAppAllocateBatch(ctx, tx, user, second, batch, ""); err != nil {
+			return err
+		}
+		return injected
+	})
+	if !errors.Is(err, injected) {
+		t.Fatal("rollback did not return injected failure", err)
+	}
+
+	request := &model.AppCardAllocateBatchSubmitParam{RequestId: "alloc_test_0123456789", CardValues: []string{"CARD"}, TargetDeptId: 2, ExecutionMode: 2}
+	requestKey, err := allocaterequest.Key(user.TenantId, user.UserId, request.RequestId)
+	requestNo := "ALC" + requestKey[:60]
+	if err != nil {
+		t.Fatal(err)
+	}
+	hash := allocaterequest.Fingerprint(request.CardValues, 1, 2, 2, "")
+	if _, err := dao.BatchMain.Ctx(ctx).Data(do.BatchMain{Id: 20, BatchNo: requestNo, BatchType: 3, SourceBatchNo: "", BatchStatus: 3, BatchAsyncStatus: 3, TenantId: "A", CreatedBy: 7, CreatedDept: 1, TotalCount: 1, TargetDeptId: 2, BatchInfo: gjson.New(map[string]any{"jobRole": "allocate_parent", "requestHash": hash})}).Insert(); err != nil {
+		t.Fatal(err)
+	}
+	if _, err := dao.TSimCardInfo.Ctx(ctx).Where("id", 1).Data(do.TSimCardInfo{DeptId: 2}).Update(); err != nil {
+		t.Fatal(err)
+	}
+	for index := 0; index < 2; index++ {
+		response, err := NewAppCard().submitAppAllocateRequest(ctx, user, request)
+		if err != nil || response.BatchNo != requestNo || response.Status != "success" {
+			t.Fatal("accepted request was revalidated or repeated", response, err)
+		}
+	}
+
+	request.RequestId = "alloc_missing_0123456789"
+	if _, err := NewAppCard().submitAppAllocateRequest(ctx, user, request); err == nil {
+		t.Fatal("missing legacy request created new batch")
+	}
+	request.RequestId = "alloc_test_0123456789"
+	request.TargetDeptId = 3
+	if _, err := NewAppCard().submitAppAllocateRequest(ctx, user, request); err == nil {
+		t.Fatal("changed request accepted")
+	}
+	if count, err := dao.BatchMain.Ctx(ctx).Where("batch_no", requestNo).Count(); err != nil || count != 1 {
+		t.Fatal("duplicate request rows", count, err)
+	}
+	count, err := dao.BatchMain.Ctx(ctx).Where("source_batch_no", second.BatchNo).Count()
+	if err != nil || count != 0 {
+		t.Fatal("rollback left child", count, err)
+	}
+	var retained *entity.BatchMain
+	if err := dao.BatchMain.Ctx(ctx).Where("id", second.Id).Scan(&retained); err != nil || retained.BatchType != 4 {
+		t.Fatal("rollback changed parent", retained, err)
+	}
+	count, err = dao.BatchDetail.Ctx(ctx).Where("batch_no", second.BatchNo).Count()
+	if err != nil || count != 1 {
+		t.Fatal("rollback lost original detail", count, err)
+	}
+}
diff --git a/server/internal/logic/app/app_card_allocate_request.go b/server/internal/logic/app/app_card_allocate_request.go
new file mode 100644
index 0000000..99fe459
--- /dev/null
+++ b/server/internal/logic/app/app_card_allocate_request.go
@@ -0,0 +1,58 @@
+package app
+
+import (
+	"context"
+	"github.com/gogf/gf/v2/errors/gerror"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/allocaterequest"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/batchmetadata"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/entity"
+)
+
+func (s *sAppCard) submitAppAllocateRequest(ctx context.Context, user *entity.SysUser, param *model.AppCardAllocateBatchSubmitParam) (*model.AppCardAllocateBatchModel, error) {
+	_, err := allocaterequest.Key(user.TenantId, user.UserId, param.RequestId)
+	if err != nil {
+		return nil, err
+	}
+	values := appNormalizeAllocateCardValues(param.CardValues)
+	if len(values) == 0 || len(values) > 100 || param.TargetDeptId <= 0 {
+		return nil, gerror.New("请选择1至100张卡及目标客户")
+	}
+	mode := appAllocateExecutionMode(param.ExecutionMode)
+	if mode == batchmetadata.Single && len(values) != 1 {
+		return nil, gerror.New("单卡划拨只能选择一张卡")
+	}
+	hash := allocaterequest.Fingerprint(values, user.DeptId, param.TargetDeptId, mode, param.Remark)
+	existing, err := allocaterequest.Find(ctx, user.TenantId, user.UserId, param.RequestId)
+	if err != nil {
+		return nil, err
+	}
+	if existing != nil {
+		return s.resumeAppAllocateRequest(ctx, user, existing, hash)
+	}
+	return nil, gerror.New("请先创建划拨批次，再按批次号提交；旧请求未受理，不能直接重试创建")
+}
+
+func appValidateAllocateRequest(batch *entity.BatchMain, user *entity.SysUser, hash string) error {
+	if batch.BatchType != consts.BatchTypeAllocate || batch.SourceBatchNo != "" || batch.BatchInfo == nil || batch.BatchInfo.Get("jobRole").String() != "allocate_parent" {
+		return gerror.New("请求标识对应的批次不可重试")
+	}
+	if batch.CreatedDept != user.DeptId || batch.BatchInfo.Get("requestHash").String() != hash {
+		return gerror.New("同一请求标识不能更改卡片、目标客户、规模或备注")
+	}
+	return nil
+}
+
+func (s *sAppCard) resumeAppAllocateRequest(ctx context.Context, user *entity.SysUser, batch *entity.BatchMain, hash string) (*model.AppCardAllocateBatchModel, error) {
+	if err := appValidateAllocateRequest(batch, user, hash); err != nil {
+		return nil, err
+	}
+	response := appAllocateQueuedResponse(batch)
+	if response.Status == "pending" || response.Status == "processing" {
+		if !appWorkerBatchAsyncEnabled(ctx) || s.publishAppAllocateBatch(ctx, user, batch.BatchNo) != nil {
+			response.FailReason = "任务已受理，投递尚未确认，请保留批次号并稍后刷新"
+		}
+	}
+	return response, nil
+}
diff --git a/server/internal/logic/app/app_card_change.go b/server/internal/logic/app/app_card_change.go
index 51fc8b6..e660013 100644
--- a/server/internal/logic/app/app_card_change.go
+++ b/server/internal/logic/app/app_card_change.go
@@ -7,6 +7,7 @@ import (
 	"reflect"
 	"sort"
 	"strings"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/batchmetadata"
 
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/dao"
@@ -420,6 +421,8 @@ func (s *sAppCard) insertAppChangePrepareBatch(ctx context.Context, tx gdb.TX, u
 		BatchStatus:      consts.BatchStatusSuccess,
 		BatchAsyncStatus: consts.BatchAsyncStatusSuccess,
 		SourceType:       consts.BatchSourceTypeBatchSelect,
+		SourceChannel:    batchmetadata.MiniProgram,
+		ExecutionMode:    batchmetadata.Bulk,
 		SourceBatchNo:    batchNo,
 		IsCrossDept:      0,
 		TargetDeptId:     batch.Party.CustomerAgentId,
diff --git a/server/internal/logic/app/app_card_channel.go b/server/internal/logic/app/app_card_channel.go
index db4ced1..de1c40f 100644
--- a/server/internal/logic/app/app_card_channel.go
+++ b/server/internal/logic/app/app_card_channel.go
@@ -2,7 +2,6 @@ package app
 
 import (
 	"context"
-	"strconv"
 	"strings"
 
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/dao"
@@ -10,23 +9,53 @@ import (
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/entity"
 
 	"github.com/gogf/gf/v2/errors/gerror"
+	"github.com/gogf/gf/v2/frame/g"
 )
 
 type appCardChannelInfo struct {
-	ChanKey   string
-	ChanName  string
-	ChanAlias string
-	TempKey   string
+	ChanKey    string
+	ChanName   string
+	ChanAlias  string
+	TempKey    string
+	ChanStatus int
 }
 
-type appCardChannelAssocRecord struct {
-	Id         int64  `orm:"id"`
-	ChannelID  string `orm:"channel_id"`
-	MatchType  int    `orm:"match_type"`
-	Iccid      string `orm:"iccid"`
-	IccidStart string `orm:"iccid_start"`
-	IccidEnd   string `orm:"iccid_end"`
-	Status     int    `orm:"status"`
+func (s *sAppCard) findDiagnosisAssocChannel(ctx context.Context, tenantId string, iccid string) (*appCardChannelInfo, error) {
+	iccid = strings.TrimSpace(iccid)
+	if iccid == "" {
+		return nil, nil
+	}
+	var assoc *struct {
+		ChannelKey string `orm:"channel_id"`
+	}
+	base := g.DB().Model("card_channel_assoc").Ctx(ctx).Fields("channel_id").Where("status", 1)
+	var err error
+	err = base.Clone().Where("match_type", 1).Where("iccid COLLATE utf8mb4_general_ci = ?", iccid).
+		OrderDesc("id").Limit(1).Scan(&assoc)
+	if err != nil {
+		return nil, gerror.Wrap(err, "查询卡通道单卡关联失败")
+	}
+	if assoc == nil || strings.TrimSpace(assoc.ChannelKey) == "" {
+		err = base.Clone().Where("match_type", 2).
+			Where("iccid_start COLLATE utf8mb4_general_ci <= ?", iccid).
+			Where("iccid_end COLLATE utf8mb4_general_ci >= ?", iccid).
+			OrderDesc("id").Limit(1).Scan(&assoc)
+		if err != nil {
+			return nil, gerror.Wrap(err, "查询卡通道号段关联失败")
+		}
+	}
+	if assoc == nil || strings.TrimSpace(assoc.ChannelKey) == "" {
+		return nil, nil
+	}
+	if tenantId = strings.TrimSpace(tenantId); tenantId == "" {
+		tenantId = contexts.GetTenantId(ctx)
+	}
+	channel, err := s.findCardChannelEntityByKey(ctx, tenantId, assoc.ChannelKey)
+	if err != nil || channel != nil || tenantId == "" {
+		return appCardChannelInfoFromEntity(channel), err
+	}
+	channel, err = s.findCardChannelEntityByKey(ctx, "", assoc.ChannelKey)
+	return appCardChannelInfoFromEntity(channel), err
 }
 
 func (s *sAppCard) attachCardChannelInfo(ctx context.Context, row *appCardQueryRow) error {
@@ -109,128 +138,44 @@ func (s *sAppCard) loadCardChannelInfo(ctx context.Context, tenantId string, icc
 }
 
 func (s *sAppCard) loadDiagnosisCardChannelInfo(ctx context.Context, tenantId string, iccid string, legacyChanKey string) (*appCardChannelInfo, error) {
-	iccid = strings.TrimSpace(iccid)
-	tenantId = strings.TrimSpace(tenantId)
-	legacyChanKey = strings.TrimSpace(legacyChanKey)
-	if iccid != "" {
-		info, err := s.findAssocCardChannelInfo(ctx, tenantId, iccid)
+	card, err := queryLegacyDiagnosisCard(ctx, iccid)
+	if err != nil || card == nil {
+		return nil, err
+	}
+	return s.findLegacyCardChannelInfo(ctx, tenantId, card.ChannelKey)
+}
+
+// resolveLifecycleCardChannelInfo resolves a writable card operation channel.
+// Card ownership still comes from the current platform; the legacy database is
+// only a read-only fallback for the channel code.
+func (s *sAppCard) resolveLifecycleCardChannelInfo(ctx context.Context, tenantId string, iccid string, currentChanKey string) (*appCardChannelInfo, error) {
+	currentChanKey = strings.TrimSpace(currentChanKey)
+	if currentChanKey != "" {
+		info, err := s.findLegacyCardChannelInfo(ctx, tenantId, currentChanKey)
 		if err != nil {
 			return nil, err
 		}
-		if info != nil {
+		if appCardChannelAvailable(info) {
 			return info, nil
 		}
 	}
-	if legacyChanKey == "" {
-		return nil, nil
-	}
-	return s.findLegacyCardChannelInfo(ctx, tenantId, legacyChanKey)
-}
 
-func (s *sAppCard) findAssocCardChannelInfo(ctx context.Context, tenantId string, iccid string) (*appCardChannelInfo, error) {
-	if strings.TrimSpace(iccid) == "" {
-		return nil, nil
+	card, err := queryLegacyDiagnosisCard(ctx, strings.TrimSpace(iccid))
+	if err != nil || card == nil || strings.TrimSpace(card.ICCID) != strings.TrimSpace(iccid) {
+		return nil, err
 	}
-	assoc, err := s.resolveCardChannelAssocByIccid(ctx, iccid)
+	info, err := s.findLegacyCardChannelInfo(ctx, tenantId, card.ChannelKey)
 	if err != nil {
 		return nil, err
 	}
-	if assoc == nil || strings.TrimSpace(assoc.ChannelID) == "" {
+	if !appCardChannelAvailable(info) {
 		return nil, nil
 	}
-	info, err := s.findCardChannelInfoByRef(ctx, tenantId, assoc.ChannelID)
-	if err != nil {
-		return nil, err
-	}
-	if info == nil || strings.TrimSpace(info.ChanKey) == "" {
-		return nil, gerror.New("卡通道关联已匹配，但未找到对应通道配置")
-	}
 	return info, nil
 }
 
-func (s *sAppCard) resolveCardChannelAssocByIccid(ctx context.Context, iccid string) (*appCardChannelAssocRecord, error) {
-	iccid = strings.TrimSpace(iccid)
-	if iccid == "" {
-		return nil, nil
-	}
-	columns := dao.CardChannelAssoc.Columns()
-
-	var exact *appCardChannelAssocRecord
-	err := dao.CardChannelAssoc.Ctx(ctx).
-		Fields(columns.Id, columns.ChannelId, columns.MatchType, columns.Iccid, columns.IccidStart, columns.IccidEnd, columns.Status).
-		Where(columns.Status, 1).
-		Where(columns.MatchType, 1).
-		Where(columns.Iccid+" COLLATE utf8mb4_general_ci = ?", iccid).
-		OrderDesc(columns.Id).
-		Limit(1).
-		Scan(&exact)
-	if err != nil {
-		return nil, gerror.Wrap(err, "查询卡通道单卡关联失败")
-	}
-	if exact != nil && strings.TrimSpace(exact.ChannelID) != "" {
-		return exact, nil
-	}
-
-	var ranged *appCardChannelAssocRecord
-	err = dao.CardChannelAssoc.Ctx(ctx).
-		Fields(columns.Id, columns.ChannelId, columns.MatchType, columns.Iccid, columns.IccidStart, columns.IccidEnd, columns.Status).
-		Where(columns.Status, 1).
-		Where(columns.MatchType, 2).
-		Where(columns.IccidStart+" COLLATE utf8mb4_general_ci <= ? AND "+columns.IccidEnd+" COLLATE utf8mb4_general_ci >= ?", iccid, iccid).
-		OrderDesc(columns.Id).
-		Limit(1).
-		Scan(&ranged)
-	if err != nil {
-		return nil, gerror.Wrap(err, "查询卡通道号段关联失败")
-	}
-	if ranged != nil && strings.TrimSpace(ranged.ChannelID) != "" {
-		return ranged, nil
-	}
-	return nil, nil
-}
-
-func (s *sAppCard) findCardChannelInfoByRef(ctx context.Context, tenantId string, channelRef string) (*appCardChannelInfo, error) {
-	channelRef = strings.TrimSpace(channelRef)
-	if channelRef == "" {
-		return nil, nil
-	}
-	if id, err := strconv.ParseInt(channelRef, 10, 64); err == nil && id > 0 {
-		if info, err := s.findCardChannelInfoByID(ctx, tenantId, id); err != nil || info != nil {
-			return info, err
-		}
-	}
-	return s.findLegacyCardChannelInfo(ctx, tenantId, channelRef)
-}
-
-func (s *sAppCard) findCardChannelInfoByID(ctx context.Context, tenantId string, channelID int64) (*appCardChannelInfo, error) {
-	if channelID <= 0 {
-		return nil, nil
-	}
-	if tenantId = strings.TrimSpace(tenantId); tenantId == "" {
-		tenantId = contexts.GetTenantId(ctx)
-	}
-	if tenantId != "" {
-		channel, err := s.findCardChannelEntityByID(ctx, tenantId, channelID)
-		if err != nil || channel != nil {
-			return appCardChannelInfoFromEntity(channel), err
-		}
-	}
-	channel, err := s.findCardChannelEntityByID(ctx, "", channelID)
-	return appCardChannelInfoFromEntity(channel), err
-}
-
-func (s *sAppCard) findCardChannelEntityByID(ctx context.Context, tenantId string, channelID int64) (*entity.TSimChannels, error) {
-	var channel *entity.TSimChannels
-	mod := dao.TSimChannels.Ctx(ctx).
-		Where(dao.TSimChannels.Columns().Id, channelID)
-	if tenantId = strings.TrimSpace(tenantId); tenantId != "" {
-		mod = mod.Where(dao.TSimChannels.Columns().TenantId, tenantId)
-	}
-	err := mod.Limit(1).Scan(&channel)
-	if err != nil {
-		return nil, gerror.Wrap(err, "查询通道信息失败")
-	}
-	return channel, nil
+func appCardChannelAvailable(info *appCardChannelInfo) bool {
+	return info != nil && strings.TrimSpace(info.ChanKey) != "" && info.ChanStatus == 0
 }
 
 func (s *sAppCard) findLegacyCardChannelInfo(ctx context.Context, tenantId string, chanKey string) (*appCardChannelInfo, error) {
@@ -255,7 +200,7 @@ func (s *sAppCard) findCardChannelEntityByKey(ctx context.Context, tenantId stri
 	var channel *entity.TSimChannels
 	mod := dao.TSimChannels.Ctx(ctx).
 		Where(dao.TSimChannels.Columns().ChanKey, chanKey).
-		Fields(dao.TSimChannels.Columns().Id, dao.TSimChannels.Columns().ChanKey, dao.TSimChannels.Columns().ChanName, dao.TSimChannels.Columns().ChanAlias, dao.TSimChannels.Columns().TempKey)
+		Fields(dao.TSimChannels.Columns().Id, dao.TSimChannels.Columns().ChanKey, dao.TSimChannels.Columns().ChanName, dao.TSimChannels.Columns().ChanAlias, dao.TSimChannels.Columns().TempKey, dao.TSimChannels.Columns().ChanStatus)
 	if tenantId = strings.TrimSpace(tenantId); tenantId != "" {
 		mod = mod.Where(dao.TSimChannels.Columns().TenantId, tenantId)
 	}
@@ -274,9 +219,10 @@ func appCardChannelInfoFromEntity(channel *entity.TSimChannels) *appCardChannelI
 		return nil
 	}
 	return &appCardChannelInfo{
-		ChanKey:   strings.TrimSpace(channel.ChanKey),
-		ChanName:  strings.TrimSpace(channel.ChanName),
-		ChanAlias: strings.TrimSpace(channel.ChanAlias),
-		TempKey:   strings.TrimSpace(channel.TempKey),
+		ChanKey:    strings.TrimSpace(channel.ChanKey),
+		ChanName:   strings.TrimSpace(channel.ChanName),
+		ChanAlias:  strings.TrimSpace(channel.ChanAlias),
+		TempKey:    strings.TrimSpace(channel.TempKey),
+		ChanStatus: channel.ChanStatus,
 	}
 }
diff --git a/server/internal/logic/app/app_card_query.go b/server/internal/logic/app/app_card_query.go
index ded7839..6ffee87 100644
--- a/server/internal/logic/app/app_card_query.go
+++ b/server/internal/logic/app/app_card_query.go
@@ -38,6 +38,15 @@ func (s *sAppCard) List(ctx context.Context, param *model.AppCardListParam) (ite
 	}
 
 	mod := s.visibleCardModel(ctx, user)
+	if param.AllocateOnly {
+		if s.isTerminalUser(ctx, user) || user.DeptId <= 0 {
+			return nil, 0, gerror.New("当前账号不能划拨卡片")
+		}
+		if err := appEnsureFeatureAccess(ctx, "card:allocate"); err != nil {
+			return nil, 0, err
+		}
+		mod = mod.Where(dao.TSimCardInfo.Table()+"."+dao.TSimCardInfo.Columns().DeptId, user.DeptId)
+	}
 	mod = s.applyCardFilters(mod, param)
 	if param.Page <= 0 {
 		param.Page = 1
@@ -328,7 +337,15 @@ func (s *sAppCard) cardQueryBase(ctx context.Context, useAuth bool) *gdb.Model {
 
 func (s *sAppCard) applyCardFilters(mod *gdb.Model, param *model.AppCardListParam) *gdb.Model {
 	if strings.TrimSpace(param.CardValue) != "" {
-		mod = mod.Where(appCardValueCondition(), appCardValueArgs(param.CardValue)...)
+		if param.AllocateOnly {
+			// 划拨列表支持号码片段检索，详情与执行提交仍按完整号码定位。
+			value := "%" + strings.TrimSpace(param.CardValue) + "%"
+			columns := dao.TSimCardInfo.Columns()
+			table := dao.TSimCardInfo.Table() + "."
+			mod = mod.Where("("+table+columns.Iccid+" LIKE ? OR "+table+columns.Msisdn+" LIKE ? OR "+table+columns.Imsi+" LIKE ? OR "+table+columns.Imei+" LIKE ?)", value, value, value, value)
+		} else {
+			mod = mod.Where(appCardValueCondition(), appCardValueArgs(param.CardValue)...)
+		}
 	}
 	if strings.TrimSpace(param.CategoryCode) != "" {
 		mod = mod.Where(dao.TSimFlowPackageInfo.Table()+"."+dao.TSimFlowPackageInfo.Columns().CategoryCode, strings.TrimSpace(param.CategoryCode))
diff --git a/server/internal/logic/app/app_card_renew.go b/server/internal/logic/app/app_card_renew.go
index e1e93a8..bd0e6e3 100644
--- a/server/internal/logic/app/app_card_renew.go
+++ b/server/internal/logic/app/app_card_renew.go
@@ -9,6 +9,7 @@ import (
 	"sort"
 	"strings"
 	"time"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/batchmetadata"
 
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/dao"
@@ -227,7 +228,7 @@ func (s *sAppCard) RenewSubmit(ctx context.Context, param *model.AppCardRenewSub
 		if err = s.insertAppRenewBatchOrderItem(ctx, tx, user, batch, orderId, orderSn, batchNo, "", duration.Months, totalAmount, totalAmount, serviceBeginAt, serviceEndAt, exec.CardPeriods, now); err != nil {
 			return err
 		}
-		return s.insertAppRenewSubmitBatch(ctx, tx, user, batch, batchNo, "", orderSn, duration.Months, totalAmount, totalAmount, serviceBeginAt, serviceEndAt, exec.CardPeriods, buyerNote, now)
+		return s.insertAppRenewSubmitBatch(ctx, tx, user, batch, batchNo, "", orderSn, duration.Months, totalAmount, totalAmount, serviceBeginAt, serviceEndAt, exec.CardPeriods, buyerNote, batchmetadata.Single, now)
 	})
 	if err != nil {
 		return nil, err
diff --git a/server/internal/logic/app/app_card_renew_batch.go b/server/internal/logic/app/app_card_renew_batch.go
index 95b5be6..a255ba3 100644
--- a/server/internal/logic/app/app_card_renew_batch.go
+++ b/server/internal/logic/app/app_card_renew_batch.go
@@ -5,6 +5,7 @@ import (
 	"fmt"
 	"sort"
 	"strings"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/batchmetadata"
 
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/dao"
@@ -79,6 +80,8 @@ func (s *sAppCard) RenewBatchPrepare(ctx context.Context, param *model.AppCardRe
 	req := batchimport.SubmitRequest{
 		BizParams:        param,
 		SourceType:       consts.BatchSourceTypeBatchSelect,
+		SourceChannel:    batchmetadata.MiniProgram,
+		ExecutionMode:    batchmetadata.Bulk,
 		BatchType:        consts.BatchTypePrepare,
 		FailureBatchType: consts.BatchTypeRenew,
 		SkipExecute:      true,
@@ -174,7 +177,7 @@ func (s *sAppCard) RenewBatchSubmit(ctx context.Context, param *model.AppCardRen
 		if err = s.insertAppRenewBatchOrderItem(ctx, tx, user, batch, orderId, orderSn, batchNo, "", duration.Months, singleCardAmount, totalAmount, minBeginAt, maxEndAt, cardPeriods, now); err != nil {
 			return err
 		}
-		return s.insertAppRenewSubmitBatch(ctx, tx, user, batch, batchNo, "", orderSn, duration.Months, singleCardAmount, totalAmount, minBeginAt, maxEndAt, cardPeriods, buyerNote, now)
+		return s.insertAppRenewSubmitBatch(ctx, tx, user, batch, batchNo, "", orderSn, duration.Months, singleCardAmount, totalAmount, minBeginAt, maxEndAt, cardPeriods, buyerNote, batchmetadata.Bulk, now)
 	})
 	if err != nil {
 		return nil, err
@@ -462,6 +465,8 @@ func (s *sAppCard) insertAppRenewPrepareBatch(ctx context.Context, tx gdb.TX, us
 		BatchStatus:      consts.BatchStatusSuccess,
 		BatchAsyncStatus: consts.BatchAsyncStatusSuccess,
 		SourceType:       consts.BatchSourceTypeBatchSelect,
+		SourceChannel:    batchmetadata.MiniProgram,
+		ExecutionMode:    batchmetadata.Bulk,
 		SourceBatchNo:    batchNo,
 		IsCrossDept:      0,
 		TargetDeptId:     batch.Party.CustomerAgentId,
@@ -513,7 +518,7 @@ func (s *sAppCard) insertAppRenewPrepareBatch(ctx context.Context, tx gdb.TX, us
 	return nil
 }
 
-func (s *sAppCard) insertAppRenewSubmitBatch(ctx context.Context, tx gdb.TX, user *entity.SysUser, batch *appRenewBatchContext, batchNo string, sourceBatchNo string, orderSn string, durationMonths int, singleCardAmount float64, totalAmount float64, beginAt, endAt *gtime.Time, cardPeriods []map[string]any, buyerNote string, now *gtime.Time) error {
+func (s *sAppCard) insertAppRenewSubmitBatch(ctx context.Context, tx gdb.TX, user *entity.SysUser, batch *appRenewBatchContext, batchNo string, sourceBatchNo string, orderSn string, durationMonths int, singleCardAmount float64, totalAmount float64, beginAt, endAt *gtime.Time, cardPeriods []map[string]any, buyerNote string, executionMode int, now *gtime.Time) error {
 	sourceBatchNo = appRenewEffectiveSourceBatchNo(batchNo, sourceBatchNo)
 	quantity := len(batch.Items)
 	logFiles, err := s.ensureAppRenewBatchLogFiles(ctx, tx, user, batch, nil, batchNo, sourceBatchNo, orderSn, durationMonths, singleCardAmount, totalAmount, beginAt, endAt, cardPeriods, buyerNote, now)
@@ -531,7 +536,9 @@ func (s *sAppCard) insertAppRenewSubmitBatch(ctx context.Context, tx gdb.TX, use
 		BatchStatus:      consts.BatchStatusSuccess,
 		BatchAsyncStatus: consts.BatchAsyncStatusSuccess,
 		SourceType:       consts.BatchSourceTypeBatchSelect,
+		SourceChannel:    batchmetadata.MiniProgram,
 		SourceBatchNo:    strings.TrimSpace(sourceBatchNo),
+		ExecutionMode:    batchmetadata.NormalizeMode(executionMode),
 		IsCrossDept:      0,
 		TargetDeptId:     batch.Party.CustomerAgentId,
 		DeptId:           batch.Party.CreatedDept,
diff --git a/server/internal/logic/app/app_card_restart.go b/server/internal/logic/app/app_card_restart.go
index 9b7dfbe..ca84283 100644
--- a/server/internal/logic/app/app_card_restart.go
+++ b/server/internal/logic/app/app_card_restart.go
@@ -3,6 +3,7 @@ package app
 import (
 	"context"
 	"strings"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/batchmetadata"
 
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/dao"
@@ -126,7 +127,10 @@ func (s *sAppCard) LifecycleBatchSubmit(ctx context.Context, param *model.AppCar
 	if err = appEnsureFeatureAccess(ctx, "card:"+operation.Code); err != nil {
 		return nil, err
 	}
-	cardValues := appNormalizeLifecycleCardValues(param.CardValue, param.CardValues)
+	cardValues, mode, err := appNormalizeLifecycleCardValues(param.CardValue, param.CardValues)
+	if err != nil {
+		return nil, err
+	}
 	if len(cardValues) == 0 {
 		return nil, gerror.New("请选择需要操作的卡")
 	}
@@ -153,7 +157,7 @@ func (s *sAppCard) LifecycleBatchSubmit(ctx context.Context, param *model.AppCar
 			seen[item.Card.Iccid] = struct{}{}
 			items = append(items, item)
 		}
-		return s.insertPendingLifecycleBatch(ctx, tx, user, items, operation, batchNo, strings.TrimSpace(param.Remark), now)
+		return s.insertPendingLifecycleBatch(ctx, tx, user, items, operation, batchNo, strings.TrimSpace(param.Remark), mode, now)
 	})
 	if err != nil {
 		return nil, err
@@ -246,19 +250,52 @@ func (s *sAppCard) LifecycleBatchStatus(ctx context.Context, param *model.AppCar
 	if err = appEnsureFeatureAccess(ctx, "card:"+operation.Code); err != nil {
 		return nil, err
 	}
+	status := appLifecycleBatchStatus(batch.BatchStatus, batch.BatchAsyncStatus)
 	return &model.AppCardLifecycleModel{
 		BatchNo:      batch.BatchNo,
 		BatchType:    batch.BatchType,
 		Operation:    operation.Code,
-		Status:       appLifecycleBatchStatus(batch.BatchStatus, batch.BatchAsyncStatus),
+		Status:       status,
 		Quantity:     batch.TotalCount,
 		SuccessCount: batch.SuccessCount,
 		FailCount:    batch.FailCount,
-		FailReason:   strings.TrimSpace(batch.FailReason),
+		FailReason:   appLifecycleFailReasonForResponse(status, batch.FailReason),
 		Cards:        []*model.AppCardModel{},
 	}, nil
 }
 
+func appLifecycleFailReasonForResponse(status string, reason string) string {
+	reason = strings.TrimSpace(reason)
+	if reason == "" {
+		return ""
+	}
+	lower := strings.ToLower(reason)
+	internalMarkers := []string{
+		"save data service detail",
+		"save lifecycle detail",
+		"update `",
+		"insert into",
+		"delete from",
+		"select ",
+		"error 10",
+		"sqlstate",
+		"column '",
+		"stack:",
+	}
+	for _, marker := range internalMarkers {
+		if strings.Contains(lower, marker) {
+			return "后台执行失败，请稍后重试；如持续失败，请联系管理员并提供批次号"
+		}
+	}
+	if len([]rune(reason)) > 160 {
+		return "后台执行失败，请稍后重试；如持续失败，请联系管理员并提供批次号"
+	}
+	if status == "failed" && (reason == "1 SIM cards failed" || reason == "1 SIM card failed") {
+		return "卡片操作执行失败，请稍后重试"
+	}
+	return reason
+}
+
 func (s *sAppCard) prepareLifecycleCard(ctx context.Context, user *entity.SysUser, cardValue string, rowNo int) (*appCardLifecycleItem, error) {
 	card, err := s.findVisibleCard(ctx, user, cardValue)
 	if err != nil {
@@ -288,6 +325,13 @@ func (s *sAppCard) lockLifecycleCard(ctx context.Context, tx gdb.TX, user *entit
 	if err = s.ensureOperateCard(ctx, user, card, operation.Name); err != nil {
 		return nil, err
 	}
+	channelInfo, err := s.resolveLifecycleCardChannelInfo(ctx, user.TenantId, card.Iccid, card.ChanKey)
+	if err != nil {
+		return nil, gerror.Wrapf(err, "解析卡%s通道失败", appFirstNotEmpty(card.Iccid, cardValue))
+	}
+	if !appCardChannelAvailable(channelInfo) {
+		return nil, gerror.Newf("此卡暂未收录，暂不能%s：%s", operation.Name, appFirstNotEmpty(card.Iccid, cardValue))
+	}
 
 	var locked *entity.TSimCardInfo
 	err = dao.TSimCardInfo.Ctx(ctx).TX(tx).
@@ -306,6 +350,10 @@ func (s *sAppCard) lockLifecycleCard(ctx context.Context, tx gdb.TX, user *entit
 		return nil, gerror.Newf("卡%s归属已变化，请刷新后重试", card.Iccid)
 	}
 	card.TSimCardInfo = *locked
+	card.ChanKey = channelInfo.ChanKey
+	card.ChanName = channelInfo.ChanName
+	card.ChanAlias = channelInfo.ChanAlias
+	card.TempKey = channelInfo.TempKey
 	if err = s.ensureLifecycleCardStatus(card, operation); err != nil {
 		return nil, err
 	}
@@ -382,7 +430,7 @@ func (s *sAppCard) applyMockLifecycleCards(ctx context.Context, tx gdb.TX, user
 	return nil
 }
 
-func (s *sAppCard) insertPendingLifecycleBatch(ctx context.Context, tx gdb.TX, user *entity.SysUser, items []*appCardLifecycleItem, operation appCardLifecycleOperation, batchNo string, remark string, now *gtime.Time) error {
+func (s *sAppCard) insertPendingLifecycleBatch(ctx context.Context, tx gdb.TX, user *entity.SysUser, items []*appCardLifecycleItem, operation appCardLifecycleOperation, batchNo string, remark string, executionMode int, now *gtime.Time) error {
 	quantity := len(items)
 	_, err := dao.BatchMain.Ctx(ctx).TX(tx).Data(do.BatchMain{
 		BatchNo:          batchNo,
@@ -390,7 +438,8 @@ func (s *sAppCard) insertPendingLifecycleBatch(ctx context.Context, tx gdb.TX, u
 		BatchStatus:      consts.BatchAsyncStatusPending,
 		BatchAsyncStatus: consts.BatchAsyncStatusPending,
 		SourceType:       consts.BatchSourceTypeBatchSelect,
-		SourceBatchNo:    batchNo,
+		SourceChannel:    batchmetadata.MiniProgram,
+		ExecutionMode:    batchmetadata.NormalizeMode(executionMode),
 		DeptId:           user.DeptId,
 		TotalCount:       quantity,
 		ValidCount:       0,
@@ -962,13 +1011,21 @@ func appLifecycleOperType(operation appCardLifecycleOperation) string {
 	}
 }
 
-func appNormalizeLifecycleCardValues(cardValue string, cardValues []string) []string {
+func appNormalizeLifecycleCardValues(cardValue string, cardValues []string) ([]string, int, error) {
 	values := make([]string, 0, len(cardValues)+1)
 	if strings.TrimSpace(cardValue) != "" {
 		values = append(values, cardValue)
 	}
 	values = append(values, cardValues...)
-	return appNormalizeRenewCardValues(values)
+	normalized := appNormalizeRenewCardValues(values)
+	mode := batchmetadata.Bulk
+	if strings.TrimSpace(cardValue) != "" && len(cardValues) == 0 {
+		mode = batchmetadata.Single
+		if len(normalized) != 1 {
+			return nil, mode, gerror.New("单卡操作只能指定一张卡，请使用批量操作")
+		}
+	}
+	return normalized, mode, nil
 }
 
 func appLifecycleBatchInfo(operation appCardLifecycleOperation, items []*appCardLifecycleItem, batchNo string, remark string, now *gtime.Time) *gjson.Json {
diff --git a/server/internal/logic/app/app_card_restart_test.go b/server/internal/logic/app/app_card_restart_test.go
index 7f4076d..b339c1e 100644
--- a/server/internal/logic/app/app_card_restart_test.go
+++ b/server/internal/logic/app/app_card_restart_test.go
@@ -25,6 +25,22 @@ func TestAppLifecycleShouldPublishWorkerIncludesRestart(t *testing.T) {
 	}
 }
 
+func TestAppLifecycleFailReasonForResponseHidesInternalSQL(t *testing.T) {
+	reason := "save data service detail 238726 result: UPDATE `t_sim_card_info` SET `traffic_cutoff_status`=null: Error 1048 (23000)"
+	got := appLifecycleFailReasonForResponse("failed", reason)
+	want := "后台执行失败，请稍后重试；如持续失败，请联系管理员并提供批次号"
+	if got != want {
+		t.Fatalf("appLifecycleFailReasonForResponse() = %q, want %q", got, want)
+	}
+}
+
+func TestAppLifecycleFailReasonForResponseKeepsBusinessReason(t *testing.T) {
+	const reason = "当前卡片状态不允许停用数据服务"
+	if got := appLifecycleFailReasonForResponse("failed", reason); got != reason {
+		t.Fatalf("appLifecycleFailReasonForResponse() = %q, want %q", got, reason)
+	}
+}
+
 func TestAppLifecycleBatchInfoMatchesWorkerRestartProtocol(t *testing.T) {
 	operation, err := appCardLifecycleOperationByCode("restart")
 	if err != nil {
diff --git a/server/internal/logic/app/app_customer.go b/server/internal/logic/app/app_customer.go
index de61359..2b1f044 100644
--- a/server/internal/logic/app/app_customer.go
+++ b/server/internal/logic/app/app_customer.go
@@ -10,6 +10,7 @@ import (
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/entity"
 
+	"github.com/gogf/gf/v2/database/gdb"
 	"github.com/gogf/gf/v2/errors/gerror"
 )
 
@@ -20,26 +21,30 @@ const (
 )
 
 type appCustomerCardStat struct {
-	DeptId          int64 `orm:"dept_id"`
-	TerminalId      int64 `orm:"terminal_id"`
-	CardCount       int   `orm:"card_count"`
-	NormalCardCount int   `orm:"normal_card_count"`
+	PackageStatus       int `orm:"package_status"`
+	PackageStatusCounts []model.AppCustomerStatusCount
+	BossCardStatus      int `orm:"boss_card_status"`
+	CardStatusCounts    []model.AppCustomerStatusCount
+	DeptId              int64 `orm:"dept_id"`
+	TerminalId          int64 `orm:"terminal_id"`
+	CardCount           int   `orm:"card_count"`
+	NormalCardCount     int   `orm:"normal_card_count"`
 }
 
 type appTerminalCustomerIdRow struct {
 	TerminalId int64 `orm:"terminal_id"`
 }
 
-func (s *sAppUser) CustomerList(ctx context.Context, param *model.AppCustomerListParam) (items []*model.AppCustomerModel, total int, err error) {
+func (s *sAppUser) CustomerList(ctx context.Context, param *model.AppCustomerListParam) (items []*model.AppCustomerModel, total int, summary *model.AppCustomerSummary, err error) {
 	if param == nil {
 		param = &model.AppCustomerListParam{}
 	}
 	user, err := appCurrentUser(ctx)
 	if err != nil {
-		return nil, 0, err
+		return nil, 0, nil, err
 	}
 	if err = appEnsureEnterpriseCustomerScope(ctx, user); err != nil {
-		return nil, 0, err
+		return nil, 0, nil, err
 	}
 	if param.Page <= 0 {
 		param.Page = 1
@@ -53,23 +58,65 @@ func (s *sAppUser) CustomerList(ctx context.Context, param *model.AppCustomerLis
 
 	customerType := appNormalizeCustomerType(param.CustomerType)
 	if customerType == appCustomerTypeTerminal {
-		return nil, 0, gerror.New("暂不支持查看终端客户")
+		return nil, 0, nil, gerror.New("暂不支持查看终端客户")
 	}
 
 	list, err := s.enterpriseCustomerList(ctx, user, param)
 	if err != nil {
-		return nil, 0, err
+		return nil, 0, nil, err
 	}
 	total = len(list)
-	start := (param.Page - 1) * param.PageSize
-	if start >= total {
-		return []*model.AppCustomerModel{}, total, nil
+	summary = appCustomerSummary(list)
+	items = appCustomerPage(list, param.Page, param.PageSize)
+	if len(items) == 0 {
+		return items, total, summary, nil
 	}
-	end := start + param.PageSize
-	if end > total {
-		end = total
+	deptIds := make([]int64, 0, len(items))
+	for _, item := range items {
+		deptIds = append(deptIds, item.CustomerId)
 	}
-	return list[start:end], total, nil
+	stats, err := appCardStatsByDept(ctx, user.TenantId, deptIds)
+	if err != nil {
+		return nil, 0, nil, err
+	}
+	for _, item := range items {
+		if stat := stats[item.CustomerId]; stat != nil {
+			item.CardCount = stat.CardCount
+			item.NormalCardCount = stat.NormalCardCount
+			item.CardStatusCounts = stat.CardStatusCounts
+			item.PackageStatusCounts = stat.PackageStatusCounts
+		}
+	}
+	return items, total, summary, nil
+}
+
+func appCustomerPage(items []*model.AppCustomerModel, page, pageSize int) []*model.AppCustomerModel {
+	if page <= 0 || pageSize <= 0 || len(items) == 0 || page > (len(items)-1)/pageSize+1 {
+		return []*model.AppCustomerModel{}
+	}
+	start := (page - 1) * pageSize
+	remaining := len(items) - start
+	if remaining < pageSize {
+		return items[start:]
+	}
+	return items[start : start+pageSize]
+}
+
+func appCustomerSummary(items []*model.AppCustomerModel) *model.AppCustomerSummary {
+	summary := &model.AppCustomerSummary{}
+	for _, item := range items {
+		if item == nil {
+			continue
+		}
+		summary.Total++
+		if item.Status == consts.SysDeptStatusNormal {
+			summary.NormalCount++
+		}
+		if item.RealNameStatus != "已录入实名资料" {
+			summary.PendingProfileCount++
+		}
+	}
+	return summary
 }
 
 func (s *sAppUser) CustomerDetail(ctx context.Context, param *model.AppCustomerDetailParam) (*model.AppCustomerDetailModel, error) {
@@ -95,16 +142,12 @@ func (s *sAppUser) CustomerDetail(ctx context.Context, param *model.AppCustomerD
 }
 
 func (s *sAppUser) enterpriseCustomerList(ctx context.Context, user *entity.SysUser, param *model.AppCustomerListParam) ([]*model.AppCustomerModel, error) {
-	depts, err := appEnterpriseDirectCustomerDepts(ctx, user)
+	depts, err := appEnterpriseAuthorizedCustomerDepts(ctx, user)
 	if err != nil {
 		return nil, err
 	}
 	depts = appFilterEnterpriseDepts(depts, strings.TrimSpace(param.Keyword), strings.TrimSpace(param.Status))
 	deptIds := appDeptIds(depts)
-	stats, err := appCardStatsByDept(ctx, user.TenantId, deptIds)
-	if err != nil {
-		return nil, err
-	}
 	profiles, err := appEnterpriseProfileMap(ctx, user.TenantId, deptIds)
 	if err != nil {
 		return nil, err
@@ -113,8 +156,7 @@ func (s *sAppUser) enterpriseCustomerList(ctx context.Context, user *entity.SysU
 	list := make([]*model.AppCustomerModel, 0, len(depts))
 	for _, dept := range depts {
 		profile := profiles[dept.DeptId]
-		stat := stats[dept.DeptId]
-		item := appEnterpriseCustomerModel(dept, profile, 0, stat)
+		item := appEnterpriseCustomerModel(dept, profile, 0, nil)
 		list = append(list, item)
 	}
 	return list, nil
@@ -125,7 +167,7 @@ func (s *sAppUser) enterpriseCustomerDetail(ctx context.Context, user *entity.Sy
 	if err != nil {
 		return nil, err
 	}
-	if dept == nil || dept.DeptId == 0 {
+	if dept == nil || dept.DeptId == 0 || dept.DeptType != 1 {
 		return nil, gerror.New("企业客户不存在")
 	}
 	visible, err := appEnterpriseCustomerDeptVisible(ctx, user, dept.DeptId)
@@ -251,6 +293,7 @@ func appDirectChildDepts(ctx context.Context, user *entity.SysUser) ([]*entity.S
 	err := dao.SysDept.Ctx(ctx).
 		Where(dao.SysDept.Columns().TenantId, user.TenantId).
 		Where(dao.SysDept.Columns().ParentId, user.DeptId).
+		Where(dao.SysDept.Columns().DeptType, 1).
 		WhereNull(dao.SysDept.Columns().DeletedAt).
 		OrderAsc(dao.SysDept.Columns().OrderNum).
 		OrderAsc(dao.SysDept.Columns().DeptId).
@@ -324,28 +367,67 @@ func appEnterpriseSubCustomerDepts(ctx context.Context, user *entity.SysUser) ([
 	return rows, nil
 }
 
+func appEnterpriseCustomerQuery(ctx context.Context, user *entity.SysUser) (*gdb.Model, error) {
+	scope, err := appResolveEnterpriseDataScope(ctx, user)
+	if err != nil {
+		return nil, err
+	}
+	mod := dao.SysDept.Ctx(ctx).
+		Where(dao.SysDept.Columns().TenantId, user.TenantId).
+		Where(dao.SysDept.Columns().DeptType, 1)
+	if scope.Configured {
+		if !scope.All {
+			if len(scope.DeptIds) == 0 {
+				return mod.Where("1 = 0"), nil
+			}
+			mod = mod.WhereIn(dao.SysDept.Columns().DeptId, scope.DeptIds)
+		}
+	} else {
+		ids, err := appEnterpriseDeptAndSubIds(ctx, user.TenantId, user.DeptId)
+		if err != nil {
+			return nil, err
+		}
+		mod = mod.WhereIn(dao.SysDept.Columns().DeptId, ids)
+	}
+	excluded, err := appEnterpriseCustomerExcludedDeptIds(ctx, user.TenantId, user.DeptId)
+	if err != nil {
+		return nil, err
+	}
+	excludedIds := []int64{user.DeptId}
+	for id := range excluded {
+		excludedIds = append(excludedIds, id)
+	}
+	mod = mod.WhereNotIn(dao.SysDept.Columns().DeptId, excludedIds)
+	return mod, nil
+}
+
+func appEnterpriseAuthorizedCustomerDepts(ctx context.Context, user *entity.SysUser) ([]*entity.SysDept, error) {
+	mod, err := appEnterpriseCustomerQuery(ctx, user)
+	if err != nil {
+		return nil, err
+	}
+	var rows []*entity.SysDept
+	err = mod.OrderAsc(dao.SysDept.Columns().OrderNum).
+		OrderAsc(dao.SysDept.Columns().DeptId).Scan(&rows)
+	if err != nil {
+		return nil, gerror.Wrap(err, "查询授权企业客户失败")
+	}
+	return rows, nil
+}
+
 func appEnterpriseCustomerDeptVisible(ctx context.Context, user *entity.SysUser, deptId int64) (bool, error) {
 	if user == nil || user.DeptId <= 0 || deptId <= 0 {
 		return false, nil
 	}
-	if deptId == user.DeptId {
-		return true, nil
-	}
-	excludeIds, err := appEnterpriseCustomerExcludedDeptIds(ctx, user.TenantId, user.DeptId)
+	mod, err := appEnterpriseCustomerQuery(ctx, user)
 	if err != nil {
 		return false, err
 	}
-	if _, excluded := excludeIds[deptId]; excluded {
-		return false, nil
-	}
-	dept, err := appLoadCustomerDept(ctx, user.TenantId, deptId)
+	count, err := mod.Where(dao.SysDept.Columns().DeptId, deptId).Count()
 	if err != nil {
-		return false, err
+		return false, gerror.Wrap(err, "校验企业客户范围失败")
 	}
-	if dept == nil || dept.DeptId <= 0 || dept.ParentId != user.DeptId {
-		return false, nil
-	}
-	return appEnterpriseDeptVisibleByDataScope(ctx, user, dept.DeptId)
+	return count > 0, nil
 }
 
 func appEnterpriseCustomerExcludedDeptIds(ctx context.Context, tenantId string, currentDeptId int64) (map[int64]struct{}, error) {
@@ -461,6 +543,16 @@ func appDeptIds(depts []*entity.SysDept) []int64 {
 	return ids
 }
 
+func appAccumulateCustomerStatusCount(counts []model.AppCustomerStatusCount, status, count int) []model.AppCustomerStatusCount {
+	for index := range counts {
+		if counts[index].Status == status {
+			counts[index].Count += count
+			return counts
+		}
+	}
+	return append(counts, model.AppCustomerStatusCount{Status: status, Count: count})
+}
+
 func appCardStatsByDept(ctx context.Context, tenantId string, deptIds []int64) (map[int64]*appCustomerCardStat, error) {
 	result := make(map[int64]*appCustomerCardStat)
 	if len(deptIds) == 0 {
@@ -474,16 +566,28 @@ func appCardStatsByDept(ctx context.Context, tenantId string, deptIds []int64) (
 		Fields(cardTable+"."+dao.TSimCardInfo.Columns().DeptId+" AS dept_id").
 		Fields("COUNT(1) AS card_count").
 		Fields(normalCountExpr).
+		Fields("COALESCE("+cardTable+"."+dao.TSimCardInfo.Columns().BossCardStatus+", 0) AS boss_card_status").
+		Fields("COALESCE("+cardTable+"."+dao.TSimCardInfo.Columns().PackageStatus+", -1) AS package_status").
 		Where(cardTable+"."+dao.TSimCardInfo.Columns().TenantId, tenantId).
 		WhereIn(cardTable+"."+dao.TSimCardInfo.Columns().DeptId, deptIds).
-		Group(cardTable + "." + dao.TSimCardInfo.Columns().DeptId).
+		Group(cardTable + "." + dao.TSimCardInfo.Columns().DeptId + ", COALESCE(" + cardTable + "." + dao.TSimCardInfo.Columns().BossCardStatus + ", 0), COALESCE(" + cardTable + "." + dao.TSimCardInfo.Columns().PackageStatus + ", -1)").
+		OrderAsc("boss_card_status").
+		OrderAsc("package_status").
 		Scan(&rows)
 	if err != nil {
 		return nil, gerror.Wrap(err, "统计企业客户卡数量失败")
 	}
 	for _, row := range rows {
 		if row != nil {
-			result[row.DeptId] = row
+			stat := result[row.DeptId]
+			if stat == nil {
+				stat = &appCustomerCardStat{DeptId: row.DeptId}
+				result[row.DeptId] = stat
+			}
+			stat.CardCount += row.CardCount
+			stat.NormalCardCount += row.NormalCardCount
+			stat.CardStatusCounts = appAccumulateCustomerStatusCount(stat.CardStatusCounts, row.BossCardStatus, row.CardCount)
+			stat.PackageStatusCounts = appAccumulateCustomerStatusCount(stat.PackageStatusCounts, row.PackageStatus, row.CardCount)
 		}
 	}
 	return result, nil
@@ -680,6 +784,8 @@ func appEnterpriseCustomerModel(dept *entity.SysDept, profile *entity.TAgentEnte
 	if stat != nil {
 		item.CardCount = stat.CardCount
 		item.NormalCardCount = stat.NormalCardCount
+		item.CardStatusCounts = stat.CardStatusCounts
+		item.PackageStatusCounts = stat.PackageStatusCounts
 	}
 	return item
 }
@@ -710,6 +816,8 @@ func appTerminalCustomerModel(terminal *entity.TTerminal, stat *appCustomerCardS
 	if stat != nil {
 		item.CardCount = stat.CardCount
 		item.NormalCardCount = stat.NormalCardCount
+		item.CardStatusCounts = stat.CardStatusCounts
+		item.PackageStatusCounts = stat.PackageStatusCounts
 	}
 	return item
 }
diff --git a/server/internal/logic/app/app_customer_scope_test.go b/server/internal/logic/app/app_customer_scope_test.go
new file mode 100644
index 0000000..30b51e4
--- /dev/null
+++ b/server/internal/logic/app/app_customer_scope_test.go
@@ -0,0 +1,148 @@
+package app
+
+import (
+	"context"
+	"reflect"
+	"testing"
+
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/contexts"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/entity"
+
+	_ "github.com/gogf/gf/contrib/drivers/sqlite/v2"
+	"github.com/gogf/gf/v2/database/gdb"
+	"github.com/gogf/gf/v2/frame/g"
+)
+
+func TestAppCustomerScopeSQL(t *testing.T) {
+	ctx := context.Background()
+	previous := gdb.GetConfig("default")
+	if err := gdb.SetConfigGroup("default", gdb.ConfigGroup{{Type: "sqlite", Link: "sqlite::@file(:memory:)", MaxOpenConnCount: 1}}); err != nil {
+		t.Fatal(err)
+	}
+	database := g.DB()
+	t.Cleanup(func() {
+		if err := database.GetCore().ClearCacheAll(ctx); err != nil {
+			t.Error(err)
+		}
+		if err := database.Close(ctx); err != nil {
+			t.Error(err)
+		}
+		if err := gdb.SetConfigGroup("default", previous); err != nil {
+			t.Error(err)
+		}
+	})
+	if err := database.GetCore().ClearCacheAll(ctx); err != nil {
+		t.Fatal(err)
+	}
+	statements := []string{
+		"CREATE TABLE sys_menu (menu_id INTEGER PRIMARY KEY, perms TEXT, status TEXT, deleted_at DATETIME)",
+		"INSERT INTO sys_menu VALUES (1,'agent:dept:list','0',NULL)",
+		"CREATE TABLE sys_config (config_id INTEGER PRIMARY KEY, tenant_id TEXT, config_key TEXT, config_value TEXT, deleted_at DATETIME)",
+		"INSERT INTO sys_config VALUES (1,'A','iot.register.app.dept','900',NULL)",
+		"CREATE TABLE sys_dept (dept_id INTEGER PRIMARY KEY, tenant_id TEXT, parent_id INTEGER, dept_type INTEGER, order_num INTEGER, dept_name TEXT, dept_key TEXT, status TEXT, deleted_at DATETIME)",
+		"INSERT INTO sys_dept VALUES (100,'A',0,1,0,'顶级','TOP','0',NULL),(101,'A',100,1,1,'客户甲','A101','0',NULL),(102,'A',101,1,2,'客户乙','A102','1',NULL),(103,'A',100,0,3,'普通部门','D103','0',NULL),(104,'A',100,1,4,'已删除','A104','0','2026-01-01'),(200,'B',0,1,5,'其他租户','B200','0',NULL),(900,'A',100,1,6,'注册组织','R900','0',NULL),(901,'A',900,1,7,'注册下级','R901','0',NULL)",
+		"CREATE TABLE sys_role_dept (role_id INTEGER, dept_id INTEGER, tenant_id TEXT)",
+		"INSERT INTO sys_role_dept VALUES (9,102,'A'),(9,200,'B')",
+	}
+	for _, statement := range statements {
+		if _, err := database.Exec(ctx, statement); err != nil {
+			t.Fatal(err)
+		}
+	}
+	t.Run("卡统计包含全部状态并隔离租户与删除记录", func(t *testing.T) {
+		statements := []string{
+			"CREATE TABLE t_sim_card_info (id INTEGER PRIMARY KEY, tenant_id TEXT, dept_id INTEGER, boss_card_status INTEGER, package_status INTEGER, deleted_at DATETIME)",
+			"INSERT INTO t_sim_card_info VALUES (1,'A',101,2,2,NULL),(2,'A',101,2,3,NULL),(3,'A',101,4,2,NULL),(4,'A',101,1,0,NULL),(5,'A',101,6,0,NULL),(6,'A',101,7,0,NULL),(7,'A',101,8,0,NULL),(8,'A',101,9,0,NULL),(9,'A',101,NULL,NULL,NULL),(10,'A',101,88,0,NULL),(11,'A',101,2,2,'2026-01-01'),(12,'B',101,2,2,NULL),(13,'A',102,4,2,NULL)",
+		}
+		for _, statement := range statements {
+			if _, err := database.Exec(ctx, statement); err != nil {
+				t.Fatal(err)
+			}
+		}
+		stats, err := appCardStatsByDept(ctx, "A", []int64{101, 999})
+		if err != nil {
+			t.Fatal(err)
+		}
+		stat := stats[101]
+		if stat == nil || stat.CardCount != 10 || stat.NormalCardCount != 1 || len(stats) != 1 {
+			t.Fatalf("unexpected stats: stat=%+v, departments=%d", stat, len(stats))
+		}
+		expected := []model.AppCustomerStatusCount{{Status: 0, Count: 1}, {Status: 1, Count: 1}, {Status: 2, Count: 2}, {Status: 4, Count: 1}, {Status: 6, Count: 1}, {Status: 7, Count: 1}, {Status: 8, Count: 1}, {Status: 9, Count: 1}, {Status: 88, Count: 1}}
+		if !reflect.DeepEqual(stat.CardStatusCounts, expected) {
+			t.Fatalf("actual=%+v expected=%+v", stat.CardStatusCounts, expected)
+		}
+		item := appEnterpriseCustomerModel(&entity.SysDept{DeptId: 101}, nil, 0, stat)
+		if !reflect.DeepEqual(item.CardStatusCounts, expected) || item.CardCount != 10 {
+			t.Fatalf("model lost card status counts: %+v", item)
+		}
+		packageCounts := make(map[int]int)
+		for _, count := range stat.PackageStatusCounts {
+			packageCounts[count.Status] = count.Count
+		}
+		if !reflect.DeepEqual(packageCounts, map[int]int{-1: 1, 0: 6, 2: 2, 3: 1}) {
+			t.Fatalf("unexpected package counts: %+v", packageCounts)
+		}
+		if !reflect.DeepEqual(item.PackageStatusCounts, stat.PackageStatusCounts) {
+			t.Fatalf("model lost package counts: %+v", item)
+		}
+		if _, err := database.Exec(ctx, "INSERT INTO t_sim_card_info VALUES (14,'A',105,2,2,NULL),(15,'A',105,2,2,NULL),(16,'A',105,2,2,NULL),(17,'A',105,2,2,NULL),(18,'A',105,2,2,NULL),(19,'A',105,2,2,NULL),(20,'A',105,2,3,NULL),(21,'A',105,2,3,NULL)"); err != nil {
+			t.Fatal(err)
+		}
+		activatedStats, err := appCardStatsByDept(ctx, "A", []int64{105})
+		if err != nil {
+			t.Fatal(err)
+		}
+		activated := activatedStats[105]
+		if activated == nil || activated.CardCount != 8 || activated.NormalCardCount != 6 || !reflect.DeepEqual(activated.CardStatusCounts, []model.AppCustomerStatusCount{{Status: 2, Count: 8}}) {
+			t.Fatalf("unexpected activated stats: %+v", activated)
+		}
+		if !reflect.DeepEqual(activated.PackageStatusCounts, []model.AppCustomerStatusCount{{Status: 2, Count: 6}, {Status: 3, Count: 2}}) {
+			t.Fatalf("expired packages must not be counted as stopped cards: %+v", activated)
+		}
+	})
+	user := &entity.SysUser{UserId: 7, TenantId: "A", DeptId: 100}
+	cases := []struct {
+		name, scope string
+		expected    []int64
+	}{
+		{"全部仍限制租户和企业类型", consts.SysRoleDataScopeAll, []int64{101, 102}},
+		{"直属下级不含孙级", consts.SysRoleDataScopeOrgNextLevel, []int64{101}},
+		{"本级及下级包含孙级", consts.SysRoleDataScopeDeptAndBelow, []int64{101, 102}},
+		{"自定义指定孙级", consts.SysRoleDataScopeCustom, []int64{102}},
+		{"仅本级没有客户", consts.SysRoleDataScopeDept, []int64{}},
+		{"仅本人没有组织权限", consts.SysRoleDataScopePersonal, []int64{}},
+		{"未知范围拒绝", "invalid", []int64{}},
+	}
+	for _, item := range cases {
+		t.Run(item.name, func(t *testing.T) {
+			scopeCtx := contexts.Set(ctx, &model.Context{User: &model.Identity{BaseClaims: model.BaseClaims{ID: user.UserId, TenantId: user.TenantId, DeptId: user.DeptId}}})
+			contexts.SetDataValue(scopeCtx, "currentRoleId", "9")
+			contexts.SetDataValue(scopeCtx, "currentRoleDataScope", item.scope)
+			rows, err := appEnterpriseAuthorizedCustomerDepts(scopeCtx, user)
+			if err != nil {
+				t.Fatal(err)
+			}
+			actual := appDeptIds(rows)
+			if !reflect.DeepEqual(actual, item.expected) {
+				t.Fatalf("actual=%v expected=%v", actual, item.expected)
+			}
+			for _, candidate := range []int64{100, 101, 102, 103, 104, 200, 900, 901, 999} {
+				visible, err := appEnterpriseCustomerDeptVisible(scopeCtx, user, candidate)
+				if err != nil {
+					t.Fatal(err)
+				}
+				expected := false
+				for _, id := range item.expected {
+					if candidate == id {
+						expected = true
+					}
+				}
+				if visible != expected {
+					t.Fatalf("detail visibility for %d: actual=%v expected=%v", candidate, visible, expected)
+				}
+			}
+		})
+	}
+}
diff --git a/server/internal/logic/app/app_customer_test.go b/server/internal/logic/app/app_customer_test.go
new file mode 100644
index 0000000..ded07f3
--- /dev/null
+++ b/server/internal/logic/app/app_customer_test.go
@@ -0,0 +1,125 @@
+package app
+
+import (
+	"context"
+	"testing"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/entity"
+)
+
+func TestAppCustomerSummary(t *testing.T) {
+	items := make([]*model.AppCustomerModel, 0, 25)
+	for index := 0; index < 25; index++ {
+		items = append(items, &model.AppCustomerModel{Status: "0", RealNameStatus: "已录入实名资料"})
+	}
+	items[24].Status = "1"
+	items[24].RealNameStatus = "实名资料待完善"
+	items = append(items, nil)
+	summary := appCustomerSummary(items)
+	if summary.Total != 25 || summary.NormalCount != 24 || summary.PendingProfileCount != 1 {
+		t.Fatalf("unexpected summary: %+v", summary)
+	}
+}
+
+func TestAppCustomerSummaryEmpty(t *testing.T) {
+	summary := appCustomerSummary(nil)
+	if summary.Total != 0 || summary.NormalCount != 0 || summary.PendingProfileCount != 0 {
+		t.Fatalf("unexpected empty summary: %+v", summary)
+	}
+}
+
+func TestAppCustomerFilterKeepsAuthorizedScope(t *testing.T) {
+	depts := []*entity.SysDept{
+		{DeptId: 101, DeptName: "企业甲", DeptKey: "A101", Status: "0"},
+		{DeptId: 102, DeptName: "企业乙", DeptKey: "A102", Status: "1"},
+		nil,
+	}
+	cases := []struct {
+		name, keyword, status string
+		want                  int64
+	}{
+		{"按编码搜索", "A101", "", 101},
+		{"按企业名称搜索", "企业乙", "", 102},
+		{"仅停用客户", "", "1", 102},
+	}
+	for _, item := range cases {
+		t.Run(item.name, func(t *testing.T) {
+			rows := appFilterEnterpriseDepts(depts, item.keyword, item.status)
+			if len(rows) != 1 || rows[0].DeptId != item.want {
+				t.Fatalf("unexpected result: %+v", rows)
+			}
+		})
+	}
+	if rows := appFilterEnterpriseDepts(depts, "A101", "1"); len(rows) != 0 {
+		t.Fatalf("combined filters must intersect: %+v", rows)
+	}
+	if rows := appFilterEnterpriseDepts(depts, "未授权企业", ""); len(rows) != 0 {
+		t.Fatalf("search must not expand candidate scope: %+v", rows)
+	}
+}
+
+func TestAppCustomerPage(t *testing.T) {
+	items := make([]*model.AppCustomerModel, 25)
+	for index := range items {
+		items[index] = &model.AppCustomerModel{CustomerId: int64(index + 1)}
+	}
+	cases := []struct {
+		name              string
+		page, size, count int
+		first             int64
+	}{
+		{"首页", 1, 20, 20, 1},
+		{"末页", 2, 20, 5, 21},
+		{"越界页", 3, 20, 0, 0},
+		{"最大页码", int(^uint(0) >> 1), 20, 0, 0},
+		{"最大页容量", 1, int(^uint(0) >> 1), 25, 1},
+		{"无效页", 0, 20, 0, 0},
+		{"无效容量", 1, 0, 0, 0},
+	}
+	for _, item := range cases {
+		t.Run(item.name, func(t *testing.T) {
+			rows := appCustomerPage(items, item.page, item.size)
+			if len(rows) != item.count {
+				t.Fatalf("count=%d want=%d", len(rows), item.count)
+			}
+			if len(rows) > 0 && rows[0].CustomerId != item.first {
+				t.Fatalf("first=%d want=%d", rows[0].CustomerId, item.first)
+			}
+		})
+	}
+	if rows := appCustomerPage(nil, 1, 20); rows == nil || len(rows) != 0 {
+		t.Fatal("empty result must serialize as an array")
+	}
+}
+
+func TestAppCustomerRoleScope(t *testing.T) {
+	user := &entity.SysUser{UserId: 7, DeptId: 101, TenantId: "A"}
+	cases := []struct {
+		name, scope          string
+		all                  bool
+		deptCount, userCount int
+	}{
+		{"全部数据", consts.SysRoleDataScopeAll, true, 0, 0},
+		{"仅本级", consts.SysRoleDataScopeDept, false, 1, 0},
+		{"仅本人", consts.SysRoleDataScopePersonal, false, 0, 1},
+		{"未知权限拒绝", "invalid", false, 0, 0},
+	}
+	for _, item := range cases {
+		t.Run(item.name, func(t *testing.T) {
+			scope, err := appBuildEnterpriseDataScope(context.Background(), user, 1, item.scope, true)
+			if err != nil {
+				t.Fatal(err)
+			}
+			if scope.All != item.all || len(scope.DeptIds) != item.deptCount || len(scope.UserIds) != item.userCount {
+				t.Fatalf("unexpected scope: %+v", scope)
+			}
+			if !scope.All && !scope.Restricted {
+				t.Fatal("non-all scope must remain restricted")
+			}
+			if len(scope.DeptIds) > 0 && scope.DeptIds[0] != user.DeptId {
+				t.Fatal("wrong dept scope")
+			}
+		})
+	}
+}
diff --git a/server/internal/logic/app/app_diagnosis.go b/server/internal/logic/app/app_diagnosis.go
index 144b053..ae4aba4 100644
--- a/server/internal/logic/app/app_diagnosis.go
+++ b/server/internal/logic/app/app_diagnosis.go
@@ -4,6 +4,7 @@ import (
 	"context"
 	"encoding/json"
 	"fmt"
+	"math"
 	"strconv"
 	"strings"
 	"sync"
@@ -14,20 +15,28 @@ import (
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/entity"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/service"
 	"git.5iot.com/iotlcm-public/iotlcm-app/utility"
+	"git.5iot.com/iotlcm-public/iotlcm-app/utility/uuid32"
 
 	"github.com/gogf/gf/v2/errors/gerror"
 	"github.com/gogf/gf/v2/frame/g"
 	"github.com/gogf/gf/v2/os/gtime"
+	"golang.org/x/sync/singleflight"
 )
 
 type sAppDiagnosis struct{}
 
 const (
-	appDiagnosisRegionCacheTTL = time.Hour
-	appOpenDiagnosisRateWindow = time.Minute
-	appOpenDiagnosisRateLimit  = 20
+	appDiagnosisRegionCacheTTL     = time.Hour
+	appDiagnosisRegionLockTTL      = 15 * time.Second
+	appDiagnosisRegionLockWait     = 12 * time.Second
+	appDiagnosisRegionLockPoll     = 100 * time.Millisecond
+	appOpenDiagnosisRateWindow     = time.Minute
+	appOpenDiagnosisRateLimit      = 20
+	appDiagnosisNotIncludedMessage = "该卡暂未纳入服务"
 )
 
+var appDiagnosisRegionFlight singleflight.Group
+
 type appDiagnosisUpdateFunc func(func())
 type appDiagnosisSetModuleFunc func(key string, status string, message string, cached bool, updatedAt string)
 
@@ -36,6 +45,12 @@ type appDiagnosisRegionCachePayload struct {
 	CachedAt string                  `json:"cachedAt"`
 }
 
+type appDiagnosisRegionQueryResult struct {
+	Item     *appUpstreamSimQueryItem
+	CachedAt string
+	Cached   bool
+}
+
 func NewAppDiagnosis() *sAppDiagnosis {
 	return &sAppDiagnosis{}
 }
@@ -44,19 +59,24 @@ func init() {
 	service.RegisterAppDiagnosis(NewAppDiagnosis())
 }
 
-// Info 查询登录用户权限范围内的SIM卡诊断信息。
+// Info 查询登录用户可见的SIM卡诊断信息，并保留完整会话字段。
 func (s *sAppDiagnosis) Info(ctx context.Context, param *model.AppDiagnosisInfoParam) (res *model.AppDiagnosisInfoModel, err error) {
 	if param == nil {
 		param = &model.AppDiagnosisInfoParam{}
 	}
-	if err = appEnsureFeatureAccess(ctx, "card:diagnosis"); err != nil {
-		return nil, err
-	}
-	_, cardLogic, row, err := s.resolveDiagnosisCard(ctx, param.QueryCode)
+	user, cardLogic, row, err := s.resolveDiagnosisCard(ctx, param.QueryCode)
 	if err != nil {
 		return nil, err
 	}
-	return s.buildDiagnosisInfo(ctx, row, cardLogic.publicCardRowToModel(ctx, row, param.QueryCode))
+	cardModel := cardLogic.cardRowToModel(ctx, row, user, cardLogic.ownerType(ctx, user), true)
+	res, err = s.buildDiagnosisInfo(ctx, row, cardModel)
+	if err != nil {
+		return nil, err
+	}
+	if row.Id == 0 {
+		return sanitizeOpenDiagnosisInfo(res), nil
+	}
+	return res, nil
 }
 
 func (s *sAppDiagnosis) OpenInfo(ctx context.Context, param *model.AppOpenDiagnosisInfoParam) (res *model.AppDiagnosisInfoModel, err error) {
@@ -82,6 +102,7 @@ func (s *sAppDiagnosis) buildDiagnosisInfo(ctx context.Context, row *appCardQuer
 	if row == nil {
 		return nil, gerror.New("卡片信息为空，不能诊断")
 	}
+	ctx = context.WithValue(ctx, appDiagnosisProxyContextKey{}, true)
 	simKey, err := s.prepareDiagnosisSimKey(ctx, row)
 	if err != nil {
 		return nil, err
@@ -96,70 +117,25 @@ func (s *sAppDiagnosis) buildDiagnosisInfo(ctx context.Context, row *appCardQuer
 		if strings.TrimSpace(row.Msisdn) != "" {
 			cardModel.Msisdn = strings.TrimSpace(row.Msisdn)
 		}
+		cardModel.UsedFlowMb = 0
+		cardModel.RemainFlowMb = 0
+		cardModel.UsedFlowPercent = 0
 	}
-	totalFlow := row.PackageTotalFlowMb
-	usedFlow := row.UsedFlowMb
-	remainFlow := totalFlow - usedFlow
-	if remainFlow < 0 {
-		remainFlow = 0
-	}
-	packageType := fmt.Sprintf("%d", appCardPackageType(row))
-	hasLocalCard := row.Id > 0
-	var status *string
-	var dataStatus *string
-	var packageTotalFlowMb *float64
-	var infoUsedFlowMb *float64
-	var infoRemainFlowMb *float64
-	if hasLocalCard {
-		statusValue := fmt.Sprintf("%d", row.BossCardStatus)
-		dataStatusValue := fmt.Sprintf("%d", row.DataServiceStatus)
-		status = &statusValue
-		dataStatus = &dataStatusValue
-		packageTotalFlowMb = &totalFlow
-		infoUsedFlowMb = &usedFlow
-		infoRemainFlowMb = &remainFlow
-	}
-
-	var packageInfo *model.AppDiagnosisPackageItem
-	if hasLocalCard {
-		packageInfo = &model.AppDiagnosisPackageItem{
-			PackageName:        appDiagnosisStringPtr(appCardPackageName(row)),
-			PackageType:        appDiagnosisStringPtr(packageType),
-			EffectiveStatus:    appDiagnosisPackageEffectiveStatus(row.PackageStatus),
-			PackageTotalFlowMb: &totalFlow,
-			UsedFlowMb:         &usedFlow,
-			RemainFlowMb:       &remainFlow,
-			DurationMonths:     appDiagnosisDurationMonths(row.FlowPkgBeginAt, row.FlowPkgEndAt),
-			ExpectedExpireTime: appDiagnosisTimeString(row.FlowPkgEndAt),
-		}
-	}
-
 	res = &model.AppDiagnosisInfoModel{
 		Info: &model.AppDiagnosisInfoItem{
-			Iccid:              appDiagnosisStringPtr(row.Iccid),
-			Imsi:               appDiagnosisStringPtr(row.Imsi),
-			Msisdn:             appDiagnosisStringPtr(row.Msisdn),
-			Status:             status,
-			DataStatus:         dataStatus,
-			PackageTotalFlowMb: packageTotalFlowMb,
-			UsedFlowMb:         infoUsedFlowMb,
-			RemainFlowMb:       infoRemainFlowMb,
+			Iccid:  appDiagnosisStringPtr(row.Iccid),
+			Imsi:   appDiagnosisStringPtr(row.Imsi),
+			Msisdn: appDiagnosisStringPtr(row.Msisdn),
 		},
 		Session: &model.AppDiagnosisSessionItem{},
-		Package: packageInfo,
 		Modules: make(map[string]*model.AppDiagnosisModuleItem),
 		Card:    cardModel,
 	}
+	res.Info.DataServiceSource = "apn"
+	if appDiagnosisIsTelecomChannel(row.TempKey, row.ChanKey) {
+		res.Info.DataServiceSource = "network_block"
+	}
 	appSetDiagnosisModule(res, "card", "success", "", false, "")
-	if hasLocalCard {
-		appSetDiagnosisModule(res, "package", "success", "", false, "")
-	} else {
-		appSetDiagnosisModule(res, "package", "skipped", "本地卡表暂无套餐信息", false, "")
-	}
-
-	if appDiagnosisIsMobileChannel(row.TempKey, row.ChanKey) {
-		res.Info.HumanLimitStatus = appDiagnosisStringPtr("3")
-	}
 
 	var mu sync.Mutex
 	updateDiagnosis := func(fn func()) {
@@ -170,6 +146,9 @@ func (s *sAppDiagnosis) buildDiagnosisInfo(ctx context.Context, row *appCardQuer
 	setModule := func(key string, status string, message string, cached bool, updatedAt string) {
 		updateDiagnosis(func() {
 			appSetDiagnosisModule(res, key, status, message, cached, updatedAt)
+			if key == "cardStatus" && res.Info.DataServiceSource == "network_block" && res.Info.NetBlockStatus == nil && status != "success" && status != "cached" {
+				appSetDiagnosisModule(res, "dataService", status, message, cached, updatedAt)
+			}
 		})
 	}
 	runDiagnose := func(wg *sync.WaitGroup, fn func()) {
@@ -181,29 +160,50 @@ func (s *sAppDiagnosis) buildDiagnosisInfo(ctx context.Context, row *appCardQuer
 	}
 
 	var wg sync.WaitGroup
+	runDiagnose(&wg, func() { s.attachUpstreamDataService(ctx, simKey, row, res, updateDiagnosis, setModule) })
 	runDiagnose(&wg, func() { s.attachUpstreamBasicInfo(ctx, simKey, row, res, updateDiagnosis, setModule) })
 	runDiagnose(&wg, func() { s.attachUpstreamCardStatus(ctx, simKey, res, updateDiagnosis, setModule) })
 	runDiagnose(&wg, func() { s.attachUpstreamSession(ctx, simKey, row, res, updateDiagnosis, setModule) })
+	runDiagnose(&wg, func() { s.attachUpstreamLatestImei(ctx, simKey, res, updateDiagnosis, setModule) })
 	runDiagnose(&wg, func() { s.attachUpstreamDeviceStatus(ctx, simKey, row, res, updateDiagnosis, setModule) })
 	runDiagnose(&wg, func() { s.attachUpstreamBindStatus(ctx, simKey, res, updateDiagnosis, setModule) })
-	runDiagnose(&wg, func() { s.attachUpstreamRegionLimitStatus(ctx, simKey, res, updateDiagnosis, setModule) })
+	runDiagnose(&wg, func() {
+		s.attachUpstreamRegionLimitStatus(ctx, simKey, row.TempKey, row.ChanKey, res, updateDiagnosis, setModule)
+	})
 	runDiagnose(&wg, func() { s.attachUpstreamRateLimitStatus(ctx, simKey, res, updateDiagnosis, setModule) })
 	runDiagnose(&wg, func() { s.attachUpstreamStopReason(ctx, simKey, res, updateDiagnosis, setModule) })
 	runDiagnose(&wg, func() { s.attachUpstreamFrozenState(ctx, simKey, res, updateDiagnosis, setModule) })
-	runDiagnose(&wg, func() { s.attachUpstreamCurrentFlowUsage(ctx, simKey, res, updateDiagnosis, setModule) })
+	runDiagnose(&wg, func() { s.attachUpstreamCurrentFlowUsage(ctx, simKey, row, res, updateDiagnosis, setModule) })
 	wg.Wait()
+	// Online status is determined solely by the realtime session. The data service
+	// status is independent and must not make an online session appear offline.
+	sessionStatus := appDiagnosisSessionStatus(appDiagnosisPtrValue(res.Session.Status))
+	if res.Session.Status == nil {
+		res.Info.OnlineStatus = nil
+		if res.Card != nil {
+			res.Card.OnlineStatus = ""
+		}
+	} else {
+		res.Info.OnlineStatus = appDiagnosisOnlineStatus(sessionStatus)
+		if res.Card != nil {
+			// AppCardModel uses the upstream session status convention:
+			// 0 means online and -1 means offline.
+			res.Card.OnlineStatus = sessionStatus
+		}
+	}
 	return res, nil
 }
 
-// Flow 查询SIM卡使用流量。小程序诊断完全开放，不校验登录用户和卡片归属。
+// Flow 查询登录用户可见SIM卡的流量趋势。
 func (s *sAppDiagnosis) Flow(ctx context.Context, param *model.AppDiagnosisFlowParam) (res *model.AppDiagnosisFlowModel, err error) {
 	if param == nil {
 		param = &model.AppDiagnosisFlowParam{}
 	}
-	return s.OpenFlow(ctx, &model.AppOpenDiagnosisFlowParam{
-		QueryCode: param.QueryCode,
-		QueryType: param.QueryType,
-	})
+	_, _, row, err := s.resolveDiagnosisCard(ctx, param.QueryCode)
+	if err != nil {
+		return nil, err
+	}
+	return s.queryDiagnosisFlowByCard(ctx, row, param.QueryType)
 }
 
 func (s *sAppDiagnosis) OpenFlow(ctx context.Context, param *model.AppOpenDiagnosisFlowParam) (res *model.AppDiagnosisFlowModel, err error) {
@@ -274,7 +274,6 @@ func sanitizeOpenDiagnosisInfo(res *model.AppDiagnosisInfoModel) *model.AppDiagn
 	}
 	if res.Session != nil {
 		res.Session.ApnId = nil
-		res.Session.Imei = nil
 		res.Session.Ipv4 = nil
 		res.Session.Ipv6 = nil
 		res.Session.Ipv6Prefix = nil
@@ -283,7 +282,6 @@ func sanitizeOpenDiagnosisInfo(res *model.AppDiagnosisInfoModel) *model.AppDiagn
 		res.Card.Iccid = appDiagnosisMaskIdentifier(res.Card.Iccid)
 		res.Card.Msisdn = appDiagnosisMaskIdentifier(res.Card.Msisdn)
 		res.Card.Imsi = ""
-		res.Card.Imei = ""
 		res.Card.ApnName = ""
 		res.Card.ApnId = ""
 		res.Card.Ipv4 = ""
@@ -336,7 +334,7 @@ func (s *sAppDiagnosis) resolveDiagnosisCard(ctx context.Context, queryCode stri
 			return nil, nil, nil, gerror.Wrap(openErr, "查询诊断卡片失败")
 		}
 		if openRow != nil && openRow.Id > 0 {
-			return nil, nil, nil, gerror.New("卡片不存在")
+			return nil, nil, nil, gerror.New(appDiagnosisNotIncludedMessage)
 		}
 		row, err = s.resolveAssocOnlyDiagnosisCard(ctx, cardLogic, user.TenantId, queryCode, "查询诊断卡片")
 		if err != nil {
@@ -344,7 +342,7 @@ func (s *sAppDiagnosis) resolveDiagnosisCard(ctx context.Context, queryCode stri
 		}
 	}
 	if row == nil {
-		return nil, nil, nil, gerror.New("卡片不存在")
+		return nil, nil, nil, gerror.New(appDiagnosisNotIncludedMessage)
 	}
 	if err = s.resolveDiagnosisCardChannel(ctx, cardLogic, row, queryCode, "查询诊断卡片"); err != nil {
 		return nil, nil, nil, err
@@ -370,7 +368,7 @@ func (s *sAppDiagnosis) resolveOpenDiagnosisCard(ctx context.Context, tenantId s
 		}
 	}
 	if row == nil {
-		return nil, nil, gerror.New("卡片不存在")
+		return nil, nil, gerror.New(appDiagnosisNotIncludedMessage)
 	}
 	if err = s.resolveDiagnosisCardChannel(ctx, cardLogic, row, queryCode, "查询公开诊断卡片"); err != nil {
 		return nil, nil, err
@@ -379,71 +377,100 @@ func (s *sAppDiagnosis) resolveOpenDiagnosisCard(ctx context.Context, tenantId s
 }
 
 func (s *sAppDiagnosis) resolveAssocOnlyDiagnosisCard(ctx context.Context, cardLogic *sAppCard, tenantId string, queryCode string, operation string) (*appCardQueryRow, error) {
-	if cardLogic == nil {
-		return nil, nil
-	}
-	queryCode = strings.TrimSpace(queryCode)
-	if queryCode == "" {
-		return nil, nil
-	}
-	info, err := cardLogic.findAssocCardChannelInfo(ctx, tenantId, queryCode)
+	info, err := cardLogic.findDiagnosisAssocChannel(ctx, tenantId, queryCode)
 	if err != nil {
 		return nil, gerror.Wrap(err, operation+"失败")
 	}
-	if info == nil || strings.TrimSpace(info.ChanKey) == "" {
+	if info != nil {
+		if err = validateDiagnosisCardChannelInfo(info); err != nil {
+			return nil, err
+		}
+		return &appCardQueryRow{
+			TSimCardInfo: entity.TSimCardInfo{TenantId: tenantId, Iccid: queryCode, ChanKey: info.ChanKey},
+			ChanName:     info.ChanName, ChanAlias: info.ChanAlias, TempKey: info.TempKey,
+		}, nil
+	}
+	card, err := queryLegacyDiagnosisCard(ctx, queryCode)
+	if err != nil {
+		return nil, gerror.Wrap(err, operation+"失败")
+	}
+	if card == nil {
 		return nil, nil
 	}
 	return &appCardQueryRow{
 		TSimCardInfo: entity.TSimCardInfo{
 			TenantId: tenantId,
-			Iccid:    queryCode,
-			ChanKey:  info.ChanKey,
+			Iccid:    card.ICCID,
+			Imsi:     card.IMSI,
+			Msisdn:   card.MSISDN,
 		},
-		ChanName:  info.ChanName,
-		ChanAlias: info.ChanAlias,
-		TempKey:   info.TempKey,
 	}, nil
 }
 
 func (s *sAppDiagnosis) resolveDiagnosisCardChannel(ctx context.Context, cardLogic *sAppCard, row *appCardQueryRow, queryCode string, operation string) error {
 	if cardLogic == nil || row == nil {
-		return nil
-	}
-	applyInfo := func(info *appCardChannelInfo) bool {
-		if info == nil || strings.TrimSpace(info.ChanKey) == "" {
-			return false
-		}
-		row.ChanKey = info.ChanKey
-		row.ChanName = info.ChanName
-		row.ChanAlias = info.ChanAlias
-		row.TempKey = info.TempKey
-		return true
-	}
-	var assocErr error
-	for _, value := range []string{queryCode, row.Iccid} {
-		value = strings.TrimSpace(value)
-		if value == "" {
-			continue
-		}
-		info, err := cardLogic.findAssocCardChannelInfo(ctx, row.TenantId, value)
-		if err != nil {
-			g.Log().Warningf(ctx, "app diagnosis resolve assoc channel failed, value:%s, err:%+v", appDiagnosisMaskIdentifier(value), err)
-			if assocErr == nil {
-				assocErr = err
-			}
-			continue
-		}
-		if applyInfo(info) {
-			return nil
-		}
-	}
-	if strings.TrimSpace(row.ChanKey) != "" {
-		return nil
+		return gerror.New(appDiagnosisNotIncludedMessage)
 	}
+	assocInfo, assocErr := cardLogic.findDiagnosisAssocChannel(ctx, row.TenantId, row.Iccid)
 	if assocErr != nil {
 		return gerror.Wrap(assocErr, operation+"失败")
 	}
-	return cardLogic.attachDiagnosisCardChannelInfo(ctx, row)
+	if assocInfo != nil {
+		if err := validateDiagnosisCardChannelInfo(assocInfo); err != nil {
+			return err
+		}
+		row.ChanKey = assocInfo.ChanKey
+		row.ChanName = assocInfo.ChanName
+		row.ChanAlias = assocInfo.ChanAlias
+		row.TempKey = assocInfo.TempKey
+		return nil
+	}
+	if row.Id > 0 && strings.TrimSpace(row.ChanKey) != "" {
+		info, err := cardLogic.findLegacyCardChannelInfo(ctx, row.TenantId, row.ChanKey)
+		if err != nil {
+			return gerror.Wrap(err, operation+"失败")
+		}
+		if validateDiagnosisCardChannelInfo(info) == nil {
+			row.ChanKey = info.ChanKey
+			row.ChanName = info.ChanName
+			row.ChanAlias = info.ChanAlias
+			row.TempKey = info.TempKey
+			return nil
+		}
+	}
+	lookupCode := strings.TrimSpace(row.Iccid)
+	if lookupCode == "" {
+		lookupCode = strings.TrimSpace(queryCode)
+	}
+	card, err := queryLegacyDiagnosisCard(ctx, lookupCode)
+	if err != nil {
+		return gerror.Wrap(err, operation+"失败")
+	}
+	if card == nil || (row.Iccid != "" && card.ICCID != row.Iccid) {
+		return gerror.New(appDiagnosisNotIncludedMessage)
+	}
+	info, err := cardLogic.findLegacyCardChannelInfo(ctx, row.TenantId, card.ChannelKey)
+	if err != nil {
+		return gerror.Wrap(err, operation+"失败")
+	}
+	if err = validateDiagnosisCardChannelInfo(info); err != nil {
+		return err
+	}
+	row.Iccid = card.ICCID
+	row.Imsi = card.IMSI
+	row.Msisdn = card.MSISDN
+	row.ChanKey = info.ChanKey
+	row.ChanName = info.ChanName
+	row.ChanAlias = info.ChanAlias
+	row.TempKey = info.TempKey
+	return nil
+}
+
+func validateDiagnosisCardChannelInfo(info *appCardChannelInfo) error {
+	if info == nil || strings.TrimSpace(info.ChanKey) == "" || info.ChanStatus != 0 {
+		return gerror.New(appDiagnosisNotIncludedMessage)
+	}
+	return nil
 }
 
 func (s *sAppDiagnosis) prepareDiagnosisSimKey(ctx context.Context, row *appCardQueryRow) (*appUpstreamSimKey, error) {
@@ -451,12 +478,15 @@ func (s *sAppDiagnosis) prepareDiagnosisSimKey(ctx context.Context, row *appCard
 	if err != nil {
 		return nil, err
 	}
-	if strings.TrimSpace(simKey.MSISDN) != "" && strings.TrimSpace(simKey.IMSI) != "" {
+	if row.Id > 0 && strings.TrimSpace(simKey.MSISDN) != "" && strings.TrimSpace(simKey.IMSI) != "" {
 		return simKey, nil
 	}
 	threeCodes, err := s.resolveDiagnosisThreeCodes(ctx, simKey)
 	if err != nil {
 		g.Log().Warningf(ctx, "app diagnosis resolve three codes failed, iccid:%s, chanKey:%s, err:%+v", simKey.ICCID, simKey.ChanKey, err)
+		if row.Id == 0 {
+			return nil, err
+		}
 		return simKey, nil
 	}
 	if threeCodes == nil {
@@ -541,8 +571,8 @@ func (s *sAppDiagnosis) attachUpstreamBasicInfo(ctx context.Context, simKey *app
 		if value := appDiagnosisStringPtr(appDiagnosisRawString(item.ResData, "msisdn", "MSISDN")); value != nil {
 			res.Info.Msisdn = value
 		}
-		if status := appDiagnosisCardStatus(appDiagnosisRawString(item.ResData, "simStatus", "sim_status", "cardStatus", "card_status", "status")); status != nil {
-			res.Info.Status = status
+		if value := appDiagnosisRawString(item.ResData, "imei", "IMEI"); value != "" && res.Card != nil {
+			res.Card.Imei = value
 		}
 		if res.Info.RegionLimitType == nil {
 			res.Info.RegionLimitType = appDiagnosisStringPtr(appDiagnosisRawString(item.ResData, "areaLimitType", "area_limit_type"))
@@ -561,6 +591,46 @@ func (s *sAppDiagnosis) attachUpstreamBasicInfo(ctx context.Context, simKey *app
 	setModule("basicInfo", "success", "", false, "")
 }
 
+func (s *sAppDiagnosis) attachUpstreamDataService(ctx context.Context, simKey *appUpstreamSimKey, row *appCardQueryRow, res *model.AppDiagnosisInfoModel, update appDiagnosisUpdateFunc, setModule appDiagnosisSetModuleFunc) {
+	if appDiagnosisIsTelecomChannel(row.TempKey, row.ChanKey) {
+		return
+	}
+	items, err := queryAppUpstreamSimWithKey(ctx, simKey, "/sim/query/sim-apn-info", map[string]any{})
+	if err != nil {
+		g.Log().Warningf(ctx, "app diagnosis query sim data service failed, iccid:%s, err:%v", simKey.ICCID, err)
+		setModule("dataService", "error", err.Error(), false, "")
+		return
+	}
+	dataStatus := appDiagnosisDataServiceStatusFromItemsForChannel(items, row.TempKey, row.ChanKey)
+	if dataStatus != nil {
+		update(func() {
+			res.Info.DataStatus = dataStatus
+			if res.Card != nil {
+				if value, err := strconv.Atoi(*dataStatus); err == nil {
+					res.Card.DataServiceStatus = value
+				}
+			}
+		})
+		setModule("dataService", "success", "", false, "")
+		return
+	}
+	item := appDiagnosisFirstAvailableItem(items)
+	if item == nil {
+		setModule("dataService", "skipped", "上游数据服务未返回有效结果", false, "")
+		return
+	}
+	if item.Code == 5000 {
+		setModule("dataService", "skipped", appDiagnosisModuleMessage(item, "上游数据服务暂不支持"), false, "")
+		return
+	}
+	if item.Code != 0 {
+		status, message := appDiagnosisUpstreamFailure("上游数据服务查询失败", item.Code, item.Message)
+		setModule("dataService", status, message, false, "")
+		return
+	}
+	setModule("dataService", "skipped", "上游数据服务未返回有效状态", false, "")
+}
+
 func (s *sAppDiagnosis) attachUpstreamCardStatus(ctx context.Context, simKey *appUpstreamSimKey, res *model.AppDiagnosisInfoModel, update appDiagnosisUpdateFunc, setModule appDiagnosisSetModuleFunc) {
 	items, err := queryAppUpstreamSimWithKey(ctx, simKey, "/sim/query/sim-status", map[string]any{})
 	if err != nil {
@@ -582,6 +652,15 @@ func (s *sAppDiagnosis) attachUpstreamCardStatus(ctx context.Context, simKey *ap
 		setModule("cardStatus", status, message, false, "")
 		return
 	}
+	if res.Info.DataServiceSource == "network_block" {
+		update(func() {
+			if appDiagnosisApplyNetworkBlock(res.Info, item.ResData) {
+				appSetDiagnosisModule(res, "dataService", "success", "", false, "")
+			} else {
+				appSetDiagnosisModule(res, "dataService", "skipped", "电信未返回有效断网状态", false, "")
+			}
+		})
+	}
 	status := appDiagnosisCardStatus(appDiagnosisRawString(item.ResData, "cardStatus", "card_status", "simStatus", "sim_status", "status"))
 	if status == nil {
 		setModule("cardStatus", "skipped", "上游卡状态未返回有效结果", false, "")
@@ -594,21 +673,33 @@ func (s *sAppDiagnosis) attachUpstreamCardStatus(ctx context.Context, simKey *ap
 				res.Card.BossCardStatus = value
 			}
 		}
+		appSetDiagnosisModule(res, "cardStatus", "success", "", false, "")
 	})
-	setModule("cardStatus", "success", "", false, "")
 }
 
 func (s *sAppDiagnosis) attachUpstreamSession(ctx context.Context, simKey *appUpstreamSimKey, row *appCardQueryRow, res *model.AppDiagnosisInfoModel, update appDiagnosisUpdateFunc, setModule appDiagnosisSetModuleFunc) {
-	session, source, err := queryAppCardRealtimeSessionWithKey(ctx, row, simKey)
+	items, err := queryAppUpstreamSimWithKey(ctx, simKey, "/sim/query/sim-session", nil)
 	if err != nil {
-		g.Log().Warningf(ctx, "app diagnosis query sim session failed, iccid:%s, err:%+v", row.Iccid, err)
 		setModule("session", "error", err.Error(), false, "")
 		return
 	}
-	if source == "onelink_mock" {
-		g.Log().Debugf(ctx, "app diagnosis sim session loaded from onelink mock, iccid:%s", row.Iccid)
+	item := appDiagnosisFirstAvailableItem(items)
+	if item == nil {
+		setModule("session", "skipped", "上游会话信息未返回有效结果", false, "")
+		return
 	}
-	if session == nil || session.isZero() {
+	if item.Code != 0 {
+		status, message := appDiagnosisUpstreamFailure("上游会话查询失败", item.Code, item.Message)
+		setModule("session", status, message, false, "")
+		return
+	}
+	session := &appOneLinkMockSimSessionItem{}
+	if err := json.Unmarshal(appDiagnosisUnwrapResData(item.ResData), session); err != nil {
+		setModule("session", "error", "会话响应格式无效", false, "")
+		return
+	}
+	appNormalizeUpstreamSession(session, item.ResData)
+	if session.isZero() {
 		setModule("session", "skipped", "上游会话信息未返回有效结果", false, "")
 		return
 	}
@@ -617,18 +708,50 @@ func (s *sAppDiagnosis) attachUpstreamSession(ctx context.Context, simKey *appUp
 		res.Info.OnlineStatus = appDiagnosisOnlineStatus(sessionStatus)
 		res.Session.ApnId = appDiagnosisStringPtr(session.ApnId)
 		res.Session.Rat = appDiagnosisStringPtr(session.Rat)
-		res.Session.Imei = appDiagnosisStringPtr(session.Imei)
 		res.Session.CreateTime = appDiagnosisStringPtr(session.CreateTime)
 		res.Session.Ipv4 = appDiagnosisStringPtr(session.Ipv4)
 		res.Session.Ipv6 = appDiagnosisStringPtr(session.Ipv6)
 		res.Session.Ipv6Prefix = appDiagnosisStringPtr(session.Ipv6Prefix)
 		res.Session.Status = appDiagnosisStringPtr(sessionStatus)
 	})
-	message := ""
-	if source == "onelink_mock" {
-		message = "已使用OneLink挡板会话结果"
+	setModule("session", "success", "", false, "")
+}
+
+func (s *sAppDiagnosis) attachUpstreamLatestImei(ctx context.Context, simKey *appUpstreamSimKey, res *model.AppDiagnosisInfoModel, update appDiagnosisUpdateFunc, setModule appDiagnosisSetModuleFunc) {
+	items, err := queryAppUpstreamSimWithKey(ctx, simKey, "/sim/query/sim-imei", nil)
+	if err != nil {
+		setModule("imei", "error", err.Error(), false, "")
+		return
 	}
-	setModule("session", "success", message, false, "")
+	item := appDiagnosisFirstAvailableItem(items)
+	if item == nil {
+		setModule("imei", "skipped", "上游IMEI未返回有效结果", false, "")
+		return
+	}
+	if item.Code != 0 {
+		status, message := appDiagnosisUpstreamFailure("上游IMEI查询失败", item.Code, item.Message)
+		setModule("imei", status, message, false, "")
+		return
+	}
+	imei := appDiagnosisLatestImei(items)
+	if imei == "" {
+		setModule("imei", "skipped", "上游IMEI未返回有效结果", false, "")
+		return
+	}
+	update(func() { res.Session.Imei = appDiagnosisStringPtr(imei) })
+	setModule("imei", "success", "", false, "")
+}
+
+func appDiagnosisLatestImei(items []appUpstreamSimQueryItem) string {
+	for _, item := range items {
+		if item.Code != 0 {
+			continue
+		}
+		if imei := appDiagnosisRawString(item.ResData, "imei", "IMEI"); imei != "" {
+			return imei
+		}
+	}
+	return ""
 }
 
 func (s *sAppDiagnosis) attachUpstreamDeviceStatus(ctx context.Context, simKey *appUpstreamSimKey, row *appCardQueryRow, res *model.AppDiagnosisInfoModel, update appDiagnosisUpdateFunc, setModule appDiagnosisSetModuleFunc) {
@@ -655,6 +778,10 @@ func (s *sAppDiagnosis) attachUpstreamDeviceStatus(ctx context.Context, simKey *
 		setModule("device", status, message, false, "")
 		return
 	}
+	if appDiagnosisDeviceStatus(appDiagnosisRawString(item.ResData, "deviceStatus", "device_status")) == nil && appDiagnosisOperatingStatus(appDiagnosisRawString(item.ResData, "operatingStatus", "operating_status")) == nil {
+		setModule("device", "skipped", "上游设备状态未返回有效结果", false, "")
+		return
+	}
 	update(func() {
 		res.Info.DeviceStatus = appDiagnosisDeviceStatus(appDiagnosisRawString(item.ResData, "deviceStatus", "device_status"))
 		res.Info.OperatingStatus = appDiagnosisOperatingStatus(appDiagnosisRawString(item.ResData, "operatingStatus", "operating_status"))
@@ -682,10 +809,31 @@ func (s *sAppDiagnosis) attachUpstreamBindStatus(ctx context.Context, simKey *ap
 		return
 	}
 	if item.Code != 0 {
+		g.Log().Warningf(ctx, "app diagnosis sim bind status returned error, iccid:%s, code:%d, message:%s", simKey.ICCID, item.Code, item.Message)
 		status, message := appDiagnosisUpstreamFailure("上游机卡绑定状态查询失败", item.Code, item.Message)
 		setModule("cardBind", status, message, false, "")
 		return
 	}
+	if appDiagnosisRawString(item.ResData, "orderStatus", "order_status") == "1" {
+		setModule("cardBind", "skipped", "该卡未订购机卡绑定服务", false, "")
+		return
+	}
+	if appDiagnosisRawString(item.ResData, "bindStatus", "bind_status", "cardBindStatus") == "2" {
+		message := appDiagnosisRawString(item.ResData, "errorDes", "error_des", "errorCode", "error_code")
+		if message == "" {
+			message = "上游机卡绑定状态查询失败"
+		}
+		setModule("cardBind", "error", message, false, "")
+		return
+	}
+	if appDiagnosisRawString(item.ResData, "bindStatus", "bind_status", "cardBindStatus") == "-" {
+		setModule("cardBind", "error", "上游机卡绑定网络查询失败", false, "")
+		return
+	}
+	if appDiagnosisRawString(item.ResData, "bindStatus", "bind_status", "cardBindStatus", "cardBindingType", "card_binding_type") == "" {
+		setModule("cardBind", "skipped", "上游机卡绑定状态未返回有效结果", false, "")
+		return
+	}
 	bindStatus := appDiagnosisBindStatus(
 		appDiagnosisRawString(item.ResData, "bindStatus", "bind_status", "cardBindStatus"),
 		appDiagnosisRawString(item.ResData, "cardBindingType", "card_binding_type"),
@@ -696,37 +844,36 @@ func (s *sAppDiagnosis) attachUpstreamBindStatus(ctx context.Context, simKey *ap
 	setModule("cardBind", "success", "", false, "")
 }
 
-func (s *sAppDiagnosis) attachUpstreamRegionLimitStatus(ctx context.Context, simKey *appUpstreamSimKey, res *model.AppDiagnosisInfoModel, update appDiagnosisUpdateFunc, setModule appDiagnosisSetModuleFunc) {
-	if cachedRegion, cachedAt, ok := appGetCachedDiagnosisRegionLimit(ctx, simKey); ok {
-		update(func() {
-			appDiagnosisApplyRegionLimit(res, cachedRegion)
-		})
-		status, message := appCachedDiagnosisRegionModule(cachedRegion)
-		setModule("region", status, message, true, cachedAt)
-		return
-	}
-
-	items, err := queryAppUpstreamSimWithKey(ctx, simKey, "/sim/query/sim-region-limit-status", map[string]any{})
+func (s *sAppDiagnosis) attachUpstreamRegionLimitStatus(ctx context.Context, simKey *appUpstreamSimKey, tempKey string, chanKey string, res *model.AppDiagnosisInfoModel, update appDiagnosisUpdateFunc, setModule appDiagnosisSetModuleFunc) {
+	result, err := appQueryDiagnosisRegionLimit(ctx, simKey, appDiagnosisShouldCacheRegionLimit(tempKey, chanKey))
 	if err != nil {
 		g.Log().Warningf(ctx, "app diagnosis query sim region limit status failed, iccid:%s, err:%+v", simKey.ICCID, err)
 		setModule("region", "error", err.Error(), false, "")
 		return
 	}
-	item := appDiagnosisFirstAvailableItem(items)
-	if item == nil {
+	if result == nil {
 		setModule("region", "skipped", "上游区域限制未返回有效结果", false, "")
 		return
 	}
+	item := result.Item
+	if item == nil {
+		setModule("region", "skipped", "上游区域限制未返回有效结果", result.Cached, result.CachedAt)
+		return
+	}
 	update(func() {
 		appDiagnosisApplyRegionLimit(res, item)
 	})
-	appSetCachedDiagnosisRegionLimit(ctx, simKey, *item)
+	if result.Cached {
+		status, message := appCachedDiagnosisRegionModule(item)
+		setModule("region", status, message, true, result.CachedAt)
+		return
+	}
 	if appDiagnosisRegionLimitHasData(item) {
 		message := ""
 		if item.Code != 0 {
 			message = appDiagnosisModuleMessage(item, "区域限制查询已返回有效结果")
 		}
-		setModule("region", "success", message, false, "")
+		setModule("region", "success", message, false, result.CachedAt)
 		return
 	}
 	if item.Code == 5000 {
@@ -753,6 +900,13 @@ func (s *sAppDiagnosis) attachUpstreamRateLimitStatus(ctx context.Context, simKe
 		setModule("rateLimit", "skipped", "上游达量限速未返回有效结果", false, "")
 		return
 	}
+	if item.Code == 0 {
+		item.ResData = appDiagnosisNormalizeRateLimitBody(item.ResData)
+	}
+	if item.Code == 0 && appDiagnosisRawString(item.ResData, "rateLimitStatus", "rate_limit_status", "rateLimitReason", "rateLimitDetail") == "" && len(appDiagnosisRateLimitApnDetails(item.ResData)) == 0 {
+		setModule("rateLimit", "skipped", "上游达量限速未返回有效结果", false, "")
+		return
+	}
 	update(func() {
 		appDiagnosisApplyRateLimit(res, item)
 	})
@@ -816,6 +970,10 @@ func (s *sAppDiagnosis) attachUpstreamFrozenState(ctx context.Context, simKey *a
 		setModule("frozen", status, message, false, "")
 		return
 	}
+	if appDiagnosisRawString(item.ResData, "frozenStatus", "frozen_status") == "" {
+		setModule("frozen", "skipped", "上游冻结状态未返回有效结果", false, "")
+		return
+	}
 	update(func() {
 		res.Info.FrozenStatus = appDiagnosisStringPtr(appDiagnosisRawString(item.ResData, "frozenStatus", "frozen_status"))
 		res.Info.FrozenReason = appDiagnosisStringPtr(appDiagnosisRawString(item.ResData, "frozenReason", "frozen_reason"))
@@ -824,11 +982,11 @@ func (s *sAppDiagnosis) attachUpstreamFrozenState(ctx context.Context, simKey *a
 	setModule("frozen", "success", "", false, "")
 }
 
-func (s *sAppDiagnosis) attachUpstreamCurrentFlowUsage(ctx context.Context, simKey *appUpstreamSimKey, res *model.AppDiagnosisInfoModel, update appDiagnosisUpdateFunc, setModule appDiagnosisSetModuleFunc) {
+func (s *sAppDiagnosis) attachUpstreamCurrentFlowUsage(ctx context.Context, simKey *appUpstreamSimKey, row *appCardQueryRow, res *model.AppDiagnosisInfoModel, update appDiagnosisUpdateFunc, setModule appDiagnosisSetModuleFunc) {
 	items, err := queryAppUpstreamSimWithKey(ctx, simKey, "/sim/query/sim-datausage", map[string]any{})
 	if err != nil {
 		g.Log().Warningf(ctx, "app diagnosis query current flow usage failed, iccid:%s, err:%+v", simKey.ICCID, err)
-		setModule("flowUsage", "error", err.Error(), false, "")
+		setModule("flowUsage", "error", "", false, "")
 		return
 	}
 	item := appDiagnosisFirstAvailableItem(items)
@@ -850,8 +1008,9 @@ func (s *sAppDiagnosis) attachUpstreamCurrentFlowUsage(ctx context.Context, simK
 		setModule("flowUsage", "skipped", "上游实时流量未返回有效结果", false, "")
 		return
 	}
-	if usedFlow < 0 {
-		usedFlow = 0
+	if usedFlow < 0 || math.IsNaN(usedFlow) || math.IsInf(usedFlow, 0) {
+		setModule("flowUsage", "error", "实时流量未返回有效数值", false, "")
+		return
 	}
 	update(func() {
 		now := gtime.Now()
@@ -902,15 +1061,67 @@ func appSetDiagnosisModule(res *model.AppDiagnosisInfoModel, key string, status
 	if res.Modules == nil {
 		res.Modules = make(map[string]*model.AppDiagnosisModuleItem)
 	}
+	reason := appDiagnosisModuleReason(status, message)
 	message = appDiagnosisNormalizeCustomerMessage(message)
 	res.Modules[key] = &model.AppDiagnosisModuleItem{
 		Status:    strings.TrimSpace(status),
+		Reason:    reason,
 		Message:   strings.TrimSpace(message),
 		Cached:    cached,
 		UpdatedAt: updatedAt,
 	}
 }
 
+func appDiagnosisModuleReason(status string, message string) string {
+	status = strings.TrimSpace(status)
+	message = strings.TrimSpace(message)
+	switch {
+	case status == "error" && (strings.Contains(message, "60分钟") || strings.Contains(message, "频率限制")):
+		return "rate_limited"
+	case status == "error":
+		return "query_error"
+	case appDiagnosisIsUnsubscribedMessage(message):
+		return "not_subscribed"
+	case appDiagnosisIsUnsupportedCapabilityMessage(message):
+		return "unsupported"
+	case status == "skipped" && appDiagnosisIsNoDataMessage(message):
+		return "no_data"
+	case status == "skipped":
+		return "unsupported"
+	default:
+		return ""
+	}
+}
+
+func appDiagnosisIsUnsubscribedMessage(message string) bool {
+	message = strings.TrimSpace(message)
+	return strings.Contains(message, "未订购") ||
+		strings.Contains(message, "接口未开通") ||
+		strings.Contains(message, "能力未开通") ||
+		strings.Contains(message, "服务未开通") ||
+		strings.Contains(message, "未开通该接口") ||
+		strings.Contains(message, "通道未申请")
+}
+
+func appDiagnosisIsUnsupportedCapabilityMessage(message string) bool {
+	message = strings.TrimSpace(message)
+	return strings.Contains(message, "暂不提供") ||
+		strings.Contains(message, "暂未提供") ||
+		strings.Contains(message, "未提供独立") ||
+		strings.Contains(message, "不支持查询") ||
+		strings.Contains(message, "运营商暂不支持") ||
+		strings.Contains(message, "暂未提供当前达量限速查询能力") ||
+		strings.Contains(message, "不提供查询能力")
+}
+
+func appDiagnosisIsNoDataMessage(message string) bool {
+	message = strings.TrimSpace(message)
+	return strings.Contains(message, "未返回") ||
+		strings.Contains(message, "未查询到") ||
+		strings.Contains(message, "无数据") ||
+		strings.Contains(message, "暂无数据")
+}
+
 func appDiagnosisModuleMessage(item *appUpstreamSimQueryItem, fallback string) string {
 	if item == nil || strings.TrimSpace(item.Message) == "" {
 		return fallback
@@ -940,6 +1151,124 @@ func appDiagnosisSafeCachePart(value string) string {
 	return replacer.Replace(value)
 }
 
+func appDiagnosisShouldCacheRegionLimit(tempKey string, chanKey string) bool {
+	value := strings.ToLower(strings.TrimSpace(tempKey + " " + chanKey))
+	return strings.Contains(value, "sim_yd") ||
+		strings.Contains(value, "yd_mock") ||
+		strings.Contains(value, "onelink") ||
+		strings.Contains(value, "shared_token")
+}
+
+func appQueryDiagnosisRegionLimit(ctx context.Context, simKey *appUpstreamSimKey, useCache bool) (*appDiagnosisRegionQueryResult, error) {
+	if !useCache {
+		return appFetchDiagnosisRegionLimit(ctx, simKey)
+	}
+	if cached, cachedAt, ok := appGetCachedDiagnosisRegionLimit(ctx, simKey); ok {
+		return &appDiagnosisRegionQueryResult{Item: cached, CachedAt: cachedAt, Cached: true}, nil
+	}
+
+	value, err, _ := appDiagnosisRegionFlight.Do(appDiagnosisRegionCacheKey(simKey), func() (any, error) {
+		if cached, cachedAt, ok := appGetCachedDiagnosisRegionLimit(ctx, simKey); ok {
+			return &appDiagnosisRegionQueryResult{Item: cached, CachedAt: cachedAt, Cached: true}, nil
+		}
+		return appQueryDiagnosisRegionLimitWithLock(ctx, simKey)
+	})
+	if err != nil {
+		return nil, err
+	}
+	result, ok := value.(*appDiagnosisRegionQueryResult)
+	if !ok || result == nil {
+		return nil, gerror.New("区域限制查询未返回有效结果")
+	}
+	return result, nil
+}
+
+func appQueryDiagnosisRegionLimitWithLock(ctx context.Context, simKey *appUpstreamSimKey) (*appDiagnosisRegionQueryResult, error) {
+	lockKey := appDiagnosisRegionCacheKey(simKey) + ":lock"
+	lockValue := uuid32.S()
+	acquired, err := appAcquireDiagnosisRegionLock(ctx, lockKey, lockValue)
+	if err != nil {
+		g.Log().Warningf(ctx, "app diagnosis acquire region cache lock failed, key:%s, err:%+v", lockKey, err)
+		return appFetchAndCacheDiagnosisRegionLimit(ctx, simKey)
+	}
+	if acquired {
+		defer appReleaseDiagnosisRegionLock(lockKey, lockValue)
+		if cached, cachedAt, ok := appGetCachedDiagnosisRegionLimit(ctx, simKey); ok {
+			return &appDiagnosisRegionQueryResult{Item: cached, CachedAt: cachedAt, Cached: true}, nil
+		}
+		return appFetchAndCacheDiagnosisRegionLimit(ctx, simKey)
+	}
+
+	deadline := time.NewTimer(appDiagnosisRegionLockWait)
+	ticker := time.NewTicker(appDiagnosisRegionLockPoll)
+	defer deadline.Stop()
+	defer ticker.Stop()
+	for {
+		select {
+		case <-ctx.Done():
+			return nil, ctx.Err()
+		case <-deadline.C:
+			return nil, gerror.New("区域限制查询正在处理中，请稍后重试")
+		case <-ticker.C:
+			if cached, cachedAt, ok := appGetCachedDiagnosisRegionLimit(ctx, simKey); ok {
+				return &appDiagnosisRegionQueryResult{Item: cached, CachedAt: cachedAt, Cached: true}, nil
+			}
+			acquired, lockErr := appAcquireDiagnosisRegionLock(ctx, lockKey, lockValue)
+			if lockErr != nil {
+				g.Log().Warningf(ctx, "app diagnosis retry region cache lock failed, key:%s, err:%+v", lockKey, lockErr)
+				continue
+			}
+			if acquired {
+				defer appReleaseDiagnosisRegionLock(lockKey, lockValue)
+				return appFetchAndCacheDiagnosisRegionLimit(ctx, simKey)
+			}
+		}
+	}
+}
+
+func appFetchDiagnosisRegionLimit(ctx context.Context, simKey *appUpstreamSimKey) (*appDiagnosisRegionQueryResult, error) {
+	items, err := queryAppUpstreamSimWithKey(ctx, simKey, "/sim/query/sim-region-limit-status", map[string]any{})
+	if err != nil {
+		return nil, err
+	}
+	item := appDiagnosisFirstAvailableItem(items)
+	if item == nil {
+		return nil, nil
+	}
+	return &appDiagnosisRegionQueryResult{
+		Item:     item,
+		CachedAt: gtime.Now().Format("Y-m-d H:i:s"),
+	}, nil
+}
+
+func appFetchAndCacheDiagnosisRegionLimit(ctx context.Context, simKey *appUpstreamSimKey) (*appDiagnosisRegionQueryResult, error) {
+	result, err := appFetchDiagnosisRegionLimit(ctx, simKey)
+	if err != nil || result == nil || result.Item == nil {
+		return result, err
+	}
+	if appDiagnosisRegionLimitHasData(result.Item) {
+		appSetCachedDiagnosisRegionLimit(ctx, simKey, *result.Item, result.CachedAt)
+	}
+	return result, nil
+}
+
+func appAcquireDiagnosisRegionLock(ctx context.Context, key string, value string) (bool, error) {
+	res, err := g.Redis().Do(ctx, "SET", key, value, "NX", "PX", appDiagnosisRegionLockTTL.Milliseconds())
+	if err != nil {
+		return false, err
+	}
+	return strings.EqualFold(strings.TrimSpace(res.String()), "OK"), nil
+}
+
+func appReleaseDiagnosisRegionLock(key string, value string) {
+	const script = `if redis.call("GET", KEYS[1]) == ARGV[1] then return redis.call("DEL", KEYS[1]) else return 0 end`
+	releaseCtx, cancel := context.WithTimeout(context.Background(), 3*time.Second)
+	defer cancel()
+	if _, err := g.Redis().Do(releaseCtx, "EVAL", script, 1, key, value); err != nil {
+		g.Log().Warningf(releaseCtx, "app diagnosis release region cache lock failed, key:%s, err:%+v", key, err)
+	}
+}
+
 func appGetCachedDiagnosisRegionLimit(ctx context.Context, simKey *appUpstreamSimKey) (*appUpstreamSimQueryItem, string, bool) {
 	cacheKey := appDiagnosisRegionCacheKey(simKey)
 	value, err := g.Redis().Get(ctx, cacheKey)
@@ -951,13 +1280,22 @@ func appGetCachedDiagnosisRegionLimit(ctx context.Context, simKey *appUpstreamSi
 		g.Log().Warningf(ctx, "app diagnosis unmarshal region cache failed, key:%s, err:%+v", cacheKey, err)
 		return nil, "", false
 	}
+	if !appDiagnosisRegionLimitHasData(&payload.Item) {
+		if _, err = g.Redis().Do(ctx, "DEL", cacheKey); err != nil {
+			g.Log().Warningf(ctx, "app diagnosis delete invalid region cache failed, key:%s, err:%+v", cacheKey, err)
+		}
+		return nil, "", false
+	}
 	return &payload.Item, payload.CachedAt, true
 }
 
-func appSetCachedDiagnosisRegionLimit(ctx context.Context, simKey *appUpstreamSimKey, item appUpstreamSimQueryItem) {
+func appSetCachedDiagnosisRegionLimit(ctx context.Context, simKey *appUpstreamSimKey, item appUpstreamSimQueryItem, cachedAt string) {
+	if strings.TrimSpace(cachedAt) == "" {
+		cachedAt = gtime.Now().Format("Y-m-d H:i:s")
+	}
 	payload := appDiagnosisRegionCachePayload{
 		Item:     item,
-		CachedAt: gtime.Now().Format("Y-m-d H:i:s"),
+		CachedAt: cachedAt,
 	}
 	raw, err := json.Marshal(payload)
 	if err != nil {
@@ -1049,6 +1387,7 @@ func appDiagnosisApplyRateLimit(res *model.AppDiagnosisInfoModel, item *appUpstr
 	if item.Code != 0 {
 		return
 	}
+	item.ResData = appDiagnosisNormalizeRateLimitBody(item.ResData)
 	res.Info.RateLimitStatus = appDiagnosisRateLimitStatus(appDiagnosisRawString(item.ResData, "rateLimitStatus", "rate_limit_status"))
 	res.Info.RateLimitReason = appDiagnosisStringPtr(appDiagnosisRawString(item.ResData, "rateLimitReason", "rate_limit_reason"))
 	res.Info.RateLimitDetail = appDiagnosisStringPtr(appDiagnosisRawString(item.ResData, "rateLimitDetail", "rate_limit_detail"))
@@ -1287,6 +1626,92 @@ func appDiagnosisDurationMonths(begin, end *gtime.Time) *int {
 	return &months
 }
 
+func appDiagnosisDataServiceStatus(status string) *string {
+	var value string
+	switch strings.ToUpper(strings.TrimSpace(status)) {
+	case "0", "OFF", "CLOSED", "DISABLED":
+		value = "0"
+	case "1", "ON", "OPEN", "ENABLED":
+		value = "1"
+	case "-1", "2", "UNKNOWN":
+		value = "-1"
+	default:
+		return nil
+	}
+	return &value
+}
+
+func appDiagnosisDataServiceStatusFromItems(items []appUpstreamSimQueryItem) *string {
+	for _, item := range items {
+		if item.Code == 0 {
+			if status := appDiagnosisDataServiceStatusFromApn(item.ResData); status != nil {
+				return status
+			}
+		}
+	}
+	return nil
+}
+
+func appDiagnosisDataServiceStatusFromItemsForChannel(items []appUpstreamSimQueryItem, tempKey string, chanKey string) *string {
+	mobile := appDiagnosisIsMobileChannel(tempKey, chanKey)
+	for _, item := range items {
+		if item.Code == 0 {
+			if status := appDiagnosisDataServiceStatusFromApnForChannel(item.ResData, mobile); status != nil {
+				return status
+			}
+		}
+	}
+	return nil
+}
+func appDiagnosisDataServiceStatusFromApn(raw json.RawMessage) *string {
+	return appDiagnosisDataServiceStatusFromApnForChannel(raw, true)
+}
+
+func appDiagnosisDataServiceStatusFromApnForChannel(raw json.RawMessage, mobile bool) *string {
+	if mobile {
+		return appDiagnosisDataServiceStatusFromApnTarget(raw)
+	}
+	return appDiagnosisDataServiceStatusFromApnAny(raw)
+}
+
+func appDiagnosisDataServiceStatusFromApnTarget(raw json.RawMessage) *string {
+	return appDiagnosisDataServiceStatusFromApnFiltered(raw, true)
+}
+
+func appDiagnosisDataServiceStatusFromApnAny(raw json.RawMessage) *string {
+	return appDiagnosisDataServiceStatusFromApnFiltered(raw, false)
+}
+
+func appDiagnosisDataServiceStatusFromApnFiltered(raw json.RawMessage, targetOnly bool) *string {
+	if len(raw) == 0 || string(raw) == "null" {
+		return nil
+	}
+	var payload struct {
+		ApnList []struct {
+			ApnName string `json:"apnName"`
+			Status  string `json:"status"`
+		} `json:"apnList"`
+	}
+	if err := json.Unmarshal(appDiagnosisUnwrapResData(raw), &payload); err != nil {
+		return nil
+	}
+	var selected *string
+	for _, apn := range payload.ApnList {
+		isTarget := strings.EqualFold(strings.TrimSpace(apn.ApnName), consts.SimCardDataApnName)
+		if targetOnly && !isTarget {
+			continue
+		}
+		status := strings.TrimSpace(apn.Status)
+		if strings.TrimSpace(apn.ApnName) == "" || (status != "0" && status != "1") {
+			return nil
+		}
+		if selected != nil && *selected != status {
+			return nil
+		}
+		selected = appDiagnosisStringPtr(status)
+	}
+	return selected
+}
 func appDiagnosisOnlineStatus(status string) *string {
 	var value string
 	switch strings.ToUpper(strings.TrimSpace(status)) {
@@ -1308,7 +1733,7 @@ func appDiagnosisSessionStatus(status string) string {
 		return "0"
 	case "-1", "00", "OFFLINE":
 		return "-1"
-	case "-2", "02", "2", "UNKNOWN", "":
+	case "-2", "02", "2", "UNKNOWN":
 		return "-2"
 	default:
 		return "-2"
@@ -1419,9 +1844,12 @@ func appDiagnosisRegionLimitStatus(status string) *string {
 
 func appDiagnosisUpstreamFailure(prefix string, code int, message string) (status string, displayMessage string) {
 	if code == 5000 || appDiagnosisIsUnsupportedMessage(message) {
-		return "skipped", ""
+		return "skipped", message
 	}
-	return "error", appDiagnosisUpstreamMessage(prefix, code, message)
+	if appDiagnosisIsConnectivityMessage(message) {
+		return "error", ""
+	}
+	return "error", appDiagnosisRetryMessage
 }
 
 func appDiagnosisUpstreamMessage(prefix string, code int, message string) string {
@@ -1444,23 +1872,17 @@ func appDiagnosisUpstreamMessage(prefix string, code int, message string) string
 	return appDiagnosisNormalizeCustomerMessage(prefix)
 }
 
-const appDiagnosisRetryMessage = "查询暂时未完成，请稍后重试"
+const appDiagnosisRetryMessage = "服务繁忙，请重试"
+const appDiagnosisMissingMSISDNMessage = "机卡绑定信息暂不可查"
 
 func appDiagnosisIsUnsupportedMessage(message string) bool {
-	message = strings.TrimSpace(message)
-	if message == "" {
-		return false
-	}
-	return strings.Contains(message, "暂不提供") ||
-		strings.Contains(message, "暂未提供") ||
-		strings.Contains(message, "未提供独立") ||
-		strings.Contains(message, "不支持查询") ||
-		strings.Contains(message, "运营商暂不支持") ||
-		strings.Contains(message, "暂未提供当前达量限速查询能力") ||
-		strings.Contains(message, "不提供查询能力")
+	return appDiagnosisIsUnsubscribedMessage(message) || appDiagnosisIsUnsupportedCapabilityMessage(message)
 }
 
 func appDiagnosisNormalizeCustomerMessage(message string) string {
+	if strings.Contains(message, "同一卡号60分钟") {
+		return "区域限制查询受运营商频率限制，暂未取得有效结果，请在上次查询60分钟后再试"
+	}
 	message = strings.TrimSpace(message)
 	if message == "" {
 		return ""
@@ -1469,15 +1891,9 @@ func appDiagnosisNormalizeCustomerMessage(message string) string {
 	switch {
 	case appDiagnosisIsUnsupportedMessage(message):
 		return ""
-	case strings.Contains(lower, "context deadline exceeded"),
-		strings.Contains(lower, "client.timeout"),
-		strings.Contains(lower, "dial tcp"),
-		strings.Contains(lower, "connection refused"),
-		strings.Contains(lower, "request failed"),
-		strings.Contains(lower, "timeout"),
-		strings.Contains(lower, "token"),
-		strings.Contains(lower, "http://"),
-		strings.Contains(lower, "https://"):
+	case strings.Contains(lower, "missing msisdn"):
+		return appDiagnosisMissingMSISDNMessage
+	case appDiagnosisIsConnectivityMessage(message):
 		return appDiagnosisRetryMessage
 	case strings.Contains(message, "上游"),
 		strings.Contains(message, "缓存"),
@@ -1490,6 +1906,21 @@ func appDiagnosisNormalizeCustomerMessage(message string) string {
 	}
 }
 
+func appDiagnosisIsConnectivityMessage(message string) bool {
+	lower := strings.ToLower(strings.TrimSpace(message))
+	return strings.Contains(lower, "context deadline exceeded") ||
+		strings.Contains(lower, "client.timeout") ||
+		strings.Contains(lower, "dial tcp") ||
+		strings.Contains(lower, "connection refused") ||
+		strings.Contains(lower, "request failed") ||
+		strings.Contains(lower, "timeout") ||
+		strings.Contains(lower, "no such host") ||
+		strings.Contains(lower, "network is unreachable") ||
+		strings.Contains(lower, "connection reset") ||
+		strings.Contains(lower, "http://") ||
+		strings.Contains(lower, "https://")
+}
+
 func appDiagnosisHumanLimitStatus(status string) *string {
 	var value string
 	switch strings.TrimSpace(status) {
diff --git a/server/internal/logic/app/app_diagnosis_contract_test.go b/server/internal/logic/app/app_diagnosis_contract_test.go
new file mode 100644
index 0000000..7aaa40f
--- /dev/null
+++ b/server/internal/logic/app/app_diagnosis_contract_test.go
@@ -0,0 +1,103 @@
+package app
+
+import (
+	"context"
+	"encoding/json"
+	"fmt"
+	"net/http"
+	"net/http/httptest"
+	"strings"
+	"sync"
+	"testing"
+
+	"github.com/gogf/gf/v2/frame/g"
+	"github.com/gogf/gf/v2/os/gcfg"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/entity"
+)
+
+func TestAppDiagnosisUpstreamContract(t *testing.T) {
+	scenarios := []string{"success", "session failure with IMEI", "IMEI failure with session"}
+	for _, scenario := range scenarios {
+		t.Run(scenario, func(t *testing.T) {
+			var mu sync.Mutex
+			seen := map[string]int{}
+			responses := map[string]string{
+				"sim-basic-info":          `{"simStatus":"1","iccid":"card","imsi":"imsi","msisdn":"msisdn"}`,
+				"sim-status":              `{"cardStatus":4}`,
+				"sim-session":             `{"status":"0","apnId":"CMIOT","ipv4":"192.0.2.10"}`,
+				"sim-imei":                `{"imei":"latest"}`,
+				"sim-device-status":       `{"deviceStatus":"1","operatingStatus":"1"}`,
+				"sim-card-bind-status":    `{"bindStatus":"1","orderStatus":"0"}`,
+				"sim-region-limit-status": `{"regionLimitStatus":"0","orderStatus":"1"}`,
+				"sim-data-diagnosis":      `{"status":"0","message":"正确","result":[{"APNList":{"APNInfo":[{"APNName":"CMIOT","modifyTime":"20250526140211","APNStatus":"2","APNServiceUsageState":"1"}]}}]}`,
+				"sim-stop-reason":         `{"stopReason":"000000000000"}`,
+				"sim-frozen-state":        `{"frozenStatus":"0"}`,
+				"sim-datausage":           `{"dataUsage":0}`,
+				"sim-apn-info":            `{"apnList":[{"apnName":"CMIOT","status":"0"}]}`,
+			}
+			proxy := httptest.NewServer(http.HandlerFunc(func(writer http.ResponseWriter, request *http.Request) {
+				const prefix = "/internal/app-diagnosis/sim/query/"
+				if !strings.HasPrefix(request.URL.Path, prefix) || request.Header.Get("X-App-Diagnosis-Token") != "test-token" {
+					t.Errorf("proxy contract mismatch: %s", request.URL.Path)
+				}
+				var input appUpstreamSimQueryInput
+				if err := json.NewDecoder(request.Body).Decode(&input); err != nil || len(input.SimKeys) != 1 || input.SimKeys[0].ICCID != "card" || input.SimKeys[0].ChanKey != "test-channel" {
+					t.Errorf("query key mismatch: %+v, %v", input, err)
+				}
+				endpoint := strings.TrimPrefix(request.URL.Path, prefix)
+				mu.Lock()
+				seen[endpoint]++
+				mu.Unlock()
+				writer.Header().Set("Content-Type", "application/json")
+				fail := scenario == "session failure with IMEI" && endpoint == "sim-session" || scenario == "IMEI failure with session" && endpoint == "sim-imei"
+				if fail {
+					_, _ = writer.Write([]byte(`{"code":0,"data":[{"code":500,"message":"query failed"}]}`))
+					return
+				}
+				raw, ok := responses[endpoint]
+				if !ok {
+					t.Errorf("unknown endpoint: %s", endpoint)
+					return
+				}
+				_, _ = fmt.Fprintf(writer, `{"code":0,"data":[{"code":0,"resData":%s}]}`, raw)
+			}))
+			defer proxy.Close()
+			adapter, err := gcfg.NewAdapterContent(fmt.Sprintf(`{"upstream":{"default":{"clientName":%q,"timeout":"2s"},"appDiagnosisToken":"test-token","onelinkMock":{"enabled":true}}}`, proxy.URL))
+			if err != nil {
+				t.Fatal(err)
+			}
+			previous := g.Cfg().GetAdapter()
+			g.Cfg().SetAdapter(adapter)
+			t.Cleanup(func() { g.Cfg().SetAdapter(previous) })
+			row := &appCardQueryRow{TSimCardInfo: entity.TSimCardInfo{Id: 1, Iccid: "card", Imsi: "imsi", Msisdn: "msisdn", ChanKey: "test-channel", BossCardStatus: 2, DataServiceStatus: 1, Imei: "local-old"}}
+			result, err := NewAppDiagnosis().buildDiagnosisInfo(context.Background(), row, &model.AppCardModel{})
+			if err != nil {
+				t.Fatal(err)
+			}
+			if result.Info.Status == nil || *result.Info.Status != "4" {
+				t.Fatal("card status did not come from sim-status")
+			}
+			if result.Info.DataStatus == nil || *result.Info.DataStatus != "0" {
+				t.Fatal("APN status did not come from sim-apn-info")
+			}
+			if result.Info.UsedFlowMb == nil || *result.Info.UsedFlowMb != 0 {
+				t.Fatal("zero usage was lost")
+			}
+			if result.Info.RateLimitStatus == nil || *result.Info.RateLimitStatus != "1" || len(result.Info.RateLimitApnDetails) != 1 {
+				t.Fatal("mobile APN policy response was not normalized")
+			}
+			if scenario == "session failure with IMEI" {
+				if result.Modules["session"].Status != "error" || result.Info.OnlineStatus != nil || result.Session.Imei == nil || *result.Session.Imei != "latest" {
+					t.Fatal("session failure was masked or IMEI was not independent")
+				}
+			} else if scenario == "IMEI failure with session" {
+				if result.Modules["imei"].Status != "error" || result.Modules["session"].Status != "success" || result.Session.Imei != nil {
+					t.Fatal("IMEI failure fell back to another source")
+				}
+			} else if result.Info.OnlineStatus == nil || *result.Info.OnlineStatus != "1" {
+				t.Fatal("online status did not come from session")
+			}
+		})
+	}
+}
diff --git a/server/internal/logic/app/app_diagnosis_enterprise_test.go b/server/internal/logic/app/app_diagnosis_enterprise_test.go
new file mode 100644
index 0000000..ad43ed9
--- /dev/null
+++ b/server/internal/logic/app/app_diagnosis_enterprise_test.go
@@ -0,0 +1,54 @@
+package app
+
+import (
+	"context"
+	"path/filepath"
+	"testing"
+
+	_ "github.com/gogf/gf/contrib/drivers/sqlite/v2"
+	"github.com/gogf/gf/v2/database/gdb"
+	"github.com/gogf/gf/v2/frame/g"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/entity"
+)
+
+func TestDiagnosisTopLevelEnterprise(t *testing.T) {
+	ctx := context.Background()
+	previous := gdb.GetConfig("default")
+	if err := gdb.SetConfigGroup("default", gdb.ConfigGroup{{Type: "sqlite", Name: filepath.Join(t.TempDir(), "diagnosis.db")}}); err != nil {
+		t.Fatal(err)
+	}
+	db := g.DB()
+	_ = db.GetCore().ClearCacheAll(ctx)
+	t.Cleanup(func() {
+		_ = db.GetCore().ClearCacheAll(ctx)
+		_ = db.Close(ctx)
+		_ = gdb.SetConfigGroup("default", previous)
+	})
+	for _, sql := range []string{
+		"CREATE TABLE sys_dept (dept_id INTEGER, tenant_id TEXT, parent_id INTEGER, status TEXT, deleted_at DATETIME)",
+		"INSERT INTO sys_dept VALUES (100,'A',0,'0',NULL),(200,'A',100,'0',NULL),(300,'A',200,'0',NULL),(400,'B',0,'0',NULL),(500,'A',0,'1',NULL),(600,'A',0,'0','2026-01-01')",
+	} {
+		if _, err := db.Exec(ctx, sql); err != nil {
+			t.Fatal(err)
+		}
+	}
+	for _, tc := range []struct {
+		name string
+		dept int64
+		want bool
+	}{
+		{"顶级企业运营人员", 100, true}, {"下级管理员", 200, false}, {"多层企业", 300, false},
+		{"跨租户机构", 400, false}, {"停用机构", 500, false}, {"删除机构", 600, false}, {"缺失机构", 700, false},
+	} {
+		t.Run(tc.name, func(t *testing.T) {
+			got, err := appIsTopLevelEnterprise(ctx, &entity.SysUser{UserId: 20, TenantId: "A", DeptId: tc.dept, UserType: "sys_user"})
+			if err != nil || got != tc.want {
+				t.Fatalf("got %v, err %v; want %v", got, err, tc.want)
+			}
+		})
+	}
+	got, err := appIsTopLevelEnterprise(ctx, &entity.SysUser{UserId: 20, TenantId: "A", DeptId: 100, UserType: "app_user"})
+	if err != nil || got {
+		t.Fatal("终端不能使用顶级企业展示", got, err)
+	}
+}
diff --git a/server/internal/logic/app/app_diagnosis_legacy_card.go b/server/internal/logic/app/app_diagnosis_legacy_card.go
new file mode 100644
index 0000000..a9d18a7
--- /dev/null
+++ b/server/internal/logic/app/app_diagnosis_legacy_card.go
@@ -0,0 +1,44 @@
+package app
+
+import (
+	"context"
+	"strings"
+
+	"github.com/gogf/gf/v2/errors/gerror"
+	"github.com/gogf/gf/v2/frame/g"
+)
+
+type legacyDiagnosisCard struct {
+	ICCID      string `orm:"iccid"`
+	IMSI       string `orm:"imsi"`
+	MSISDN     string `orm:"msisdn"`
+	ChannelKey string `orm:"channel_id"`
+}
+
+// Legacy channel_id references yz_card_route.cd_id, which maps to chan_key.
+// The legacy route ID is not the new platform t_sim_channels.id.
+func queryLegacyDiagnosisCard(ctx context.Context, code string) (*legacyDiagnosisCard, error) {
+	code = strings.TrimSpace(code)
+	if code == "" {
+		return nil, nil
+	}
+	if strings.TrimSpace(g.Cfg().MustGet(ctx, "database.legacyCard.link").String()) == "" {
+		return nil, gerror.New("旧平台只读数据库未配置")
+	}
+	var cards []*legacyDiagnosisCard
+	err := g.DB("legacyCard").Model("yz_card_info c").Ctx(ctx).
+		InnerJoin("yz_card_route r", "r.cd_id = c.channel_id").
+		Fields("c.iccid,c.imsi,c.msisdn,r.cd_id AS channel_id").
+		Where("c.iccid = ? OR c.msisdn = ? OR c.imsi = ?", code, code, code).
+		Limit(2).Scan(&cards)
+	if err != nil {
+		return nil, gerror.New("旧平台卡信息查询失败，请稍后重试")
+	}
+	if len(cards) > 1 {
+		return nil, gerror.New("卡号对应多张卡，无法确定通道")
+	}
+	if len(cards) == 0 || strings.TrimSpace(cards[0].ChannelKey) == "" {
+		return nil, nil
+	}
+	return cards[0], nil
+}
diff --git a/server/internal/logic/app/app_diagnosis_legacy_card_test.go b/server/internal/logic/app/app_diagnosis_legacy_card_test.go
new file mode 100644
index 0000000..c572ef8
--- /dev/null
+++ b/server/internal/logic/app/app_diagnosis_legacy_card_test.go
@@ -0,0 +1,115 @@
+package app
+
+import (
+	"context"
+	"fmt"
+	"os"
+	"strings"
+	"testing"
+
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/entity"
+
+	_ "github.com/gogf/gf/contrib/drivers/mysql/v2"
+	"github.com/gogf/gf/v2/frame/g"
+	"github.com/gogf/gf/v2/os/gcfg"
+)
+
+func TestDiagnosisPrefersPlatformChannelWithoutLegacyDB(t *testing.T) {
+	if os.Getenv("IOTLCM_TEST_LOCAL_READONLY") != "1" {
+		t.Skip("set IOTLCM_TEST_LOCAL_READONLY=1 for the local read-only DB integration test")
+	}
+	ctx := context.Background()
+	link := g.Cfg().MustGet(ctx, "database.default.link").String()
+	adapter, err := gcfg.NewAdapterContent(fmt.Sprintf(`{"database":{"default":{"link":%q},"legacyCard":{"link":""}}}`, link))
+	if err != nil {
+		t.Fatal(err)
+	}
+	previous := g.Cfg().GetAdapter()
+	g.Cfg().SetAdapter(adapter)
+	t.Cleanup(func() { g.Cfg().SetAdapter(previous) })
+
+	row := &appCardQueryRow{TSimCardInfo: entity.TSimCardInfo{Id: 1, TenantId: "000000", Iccid: "898608771525C0625498", ChanKey: "129"}}
+	if err = NewAppDiagnosis().resolveDiagnosisCardChannel(ctx, NewAppCard(), row, row.Iccid, "查询诊断卡片"); err != nil {
+		t.Fatalf("platform channel should not need the legacy DB: %v", err)
+	}
+	if row.ChanKey != "129" || row.TempKey == "" {
+		t.Fatalf("unexpected platform channel: key=%q template=%q", row.ChanKey, row.TempKey)
+	}
+}
+
+func TestLegacyDiagnosisCardRejectsMissingReadOnlyDatabase(t *testing.T) {
+	adapter, err := gcfg.NewAdapterContent(`{"database":{"legacyCard":{"link":""}}}`)
+	if err != nil {
+		t.Fatal(err)
+	}
+	previous := g.Cfg().GetAdapter()
+	g.Cfg().SetAdapter(adapter)
+	t.Cleanup(func() { g.Cfg().SetAdapter(previous) })
+	card, err := queryLegacyDiagnosisCard(context.Background(), "89860401788250435125")
+	if card != nil || err == nil || !strings.Contains(err.Error(), "旧平台只读数据库未配置") {
+		t.Fatalf("missing read-only config: card=%+v err=%v", card, err)
+	}
+}
+
+func TestLifecycleChannelAvailability(t *testing.T) {
+	tests := []struct {
+		name string
+		info *appCardChannelInfo
+		want bool
+	}{
+		{name: "enabled channel", info: &appCardChannelInfo{ChanKey: "129", ChanStatus: 0}, want: true},
+		{name: "disabled channel", info: &appCardChannelInfo{ChanKey: "129", ChanStatus: 1}},
+		{name: "missing channel key", info: &appCardChannelInfo{ChanStatus: 0}},
+		{name: "missing channel"},
+	}
+	for _, test := range tests {
+		t.Run(test.name, func(t *testing.T) {
+			if got := appCardChannelAvailable(test.info); got != test.want {
+				t.Fatalf("appCardChannelAvailable() = %t, want %t", got, test.want)
+			}
+		})
+	}
+}
+
+func TestDiagnosisRangeAssociationWithoutLegacyDatabase(t *testing.T) {
+	if os.Getenv("IOTLCM_TEST_LOCAL_READONLY") != "1" {
+		t.Skip("set IOTLCM_TEST_LOCAL_READONLY=1 for the local read-only DB integration test")
+	}
+	ctx := context.Background()
+	const iccid = "898608141623D0229706"
+	cardLogic := NewAppCard()
+	row, err := NewAppDiagnosis().resolveAssocOnlyDiagnosisCard(ctx, cardLogic, "000000", iccid, "查询诊断卡片")
+	if err != nil || row == nil {
+		t.Fatalf("range association should work without legacy database: row=%+v err=%v", row, err)
+	}
+	if row.ChanKey != "28" || row.TempKey != "sim_yd_v5" || row.Id != 0 {
+		t.Fatalf("unexpected range association: %+v", row)
+	}
+	if err = NewAppDiagnosis().resolveDiagnosisCardChannel(ctx, cardLogic, row, iccid, "查询诊断卡片"); err != nil {
+		t.Fatal(err)
+	}
+}
+
+func TestLegacyDiagnosisCardReadOnlyIntegration(t *testing.T) {
+	if os.Getenv("IOTLCM_TEST_LEGACY_READONLY") != "1" {
+		t.Skip("set IOTLCM_TEST_LEGACY_READONLY=1 for the read-only legacy DB integration test")
+	}
+	for _, test := range []struct {
+		iccid   string
+		chanKey string
+	}{
+		{iccid: "898608771525C0625498", chanKey: "129"},
+		{iccid: "898604F4152391115474", chanKey: "112"},
+		{iccid: "8986112223600594371", chanKey: "71"},
+	} {
+		t.Run(test.iccid, func(t *testing.T) {
+			card, err := queryLegacyDiagnosisCard(context.Background(), test.iccid)
+			if err != nil {
+				t.Fatalf("read-only legacy card lookup: %v", err)
+			}
+			if card == nil || card.ICCID != test.iccid || card.ChannelKey != test.chanKey {
+				t.Fatalf("unexpected legacy channel mapping: card=%+v, want channel %q", card, test.chanKey)
+			}
+		})
+	}
+}
diff --git a/server/internal/logic/app/app_diagnosis_network_block.go b/server/internal/logic/app/app_diagnosis_network_block.go
new file mode 100644
index 0000000..e3d3ad6
--- /dev/null
+++ b/server/internal/logic/app/app_diagnosis_network_block.go
@@ -0,0 +1,39 @@
+package app
+
+import (
+	"encoding/json"
+	"strings"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model"
+)
+
+func appDiagnosisApplyNetworkBlock(info *model.AppDiagnosisInfoItem, raw json.RawMessage) bool {
+	var data struct {
+		NetBlockStatus *string `json:"netBlockStatus"`
+		NetBlockTypes  []struct {
+			BlockType     string `json:"blockType"`
+			BlockTypeName string `json:"blockTypeName"`
+		} `json:"netBlockTypes"`
+	}
+	if err := json.Unmarshal(raw, &data); err != nil || data.NetBlockStatus == nil {
+		return false
+	}
+	status := strings.TrimSpace(*data.NetBlockStatus)
+	if status != "0" && status != "1" {
+		return false
+	}
+	info.NetBlockStatus = appDiagnosisStringPtr(status)
+	info.NetBlockReason = nil
+	if status == "1" {
+		names := make([]string, 0, len(data.NetBlockTypes))
+		seen := make(map[string]bool)
+		for _, item := range data.NetBlockTypes {
+			name := strings.TrimSpace(item.BlockTypeName)
+			if item.BlockType != "0" && name != "" && !seen[name] {
+				names = append(names, name)
+				seen[name] = true
+			}
+		}
+		info.NetBlockReason = appDiagnosisStringPtr(strings.Join(names, "、"))
+	}
+	return true
+}
diff --git a/server/internal/logic/app/app_diagnosis_network_block_test.go b/server/internal/logic/app/app_diagnosis_network_block_test.go
new file mode 100644
index 0000000..5f92233
--- /dev/null
+++ b/server/internal/logic/app/app_diagnosis_network_block_test.go
@@ -0,0 +1,43 @@
+package app
+
+import (
+	"encoding/json"
+	"testing"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model"
+)
+
+func TestAppDiagnosisNetworkBlock(t *testing.T) {
+	tests := []struct {
+		raw    string
+		status string
+		reason string
+	}{
+		{raw: `{"netBlockStatus":"1","netBlockTypes":[{"blockType":"1","blockTypeName":"达量断网"},{"blockType":"5","blockTypeName":"区域限制断网"},{"blockType":"1","blockTypeName":"达量断网"}]}`, status: "1", reason: "达量断网、区域限制断网"},
+		{raw: `{"netBlockStatus":"0","netBlockTypes":[{"blockType":"0","blockTypeName":"未断网"}]}`, status: "0"},
+		{raw: `{"netBlockStatus":"1"}`, status: "1"},
+		{raw: `{}`}, {raw: `{"netBlockStatus":"2"}`}, {raw: `{"netBlockStatus":null}`}, {raw: `invalid`},
+	}
+	for index, test := range tests {
+		info := &model.AppDiagnosisInfoItem{DataServiceSource: "network_block"}
+		ok := appDiagnosisApplyNetworkBlock(info, json.RawMessage(test.raw))
+		if ok != (test.status != "") || info.DataStatus != nil {
+			t.Fatalf("case %d: ok=%v, info=%+v", index, ok, info)
+		}
+		if test.status == "" {
+			if info.NetBlockStatus != nil {
+				t.Fatalf("case %d: unexpected status", index)
+			}
+			continue
+		}
+		if info.NetBlockStatus == nil || *info.NetBlockStatus != test.status {
+			t.Fatalf("case %d: status = %v", index, info.NetBlockStatus)
+		}
+		if test.reason == "" {
+			if info.NetBlockReason != nil {
+				t.Fatalf("case %d: unexpected reason", index)
+			}
+		} else if info.NetBlockReason == nil || *info.NetBlockReason != test.reason {
+			t.Fatalf("case %d: reason=%v", index, info.NetBlockReason)
+		}
+	}
+}
diff --git a/server/internal/logic/app/app_diagnosis_rate_limit.go b/server/internal/logic/app/app_diagnosis_rate_limit.go
new file mode 100644
index 0000000..aae4a71
--- /dev/null
+++ b/server/internal/logic/app/app_diagnosis_rate_limit.go
@@ -0,0 +1,381 @@
+package app
+
+import (
+	"encoding/json"
+	"fmt"
+	"strings"
+
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model"
+)
+
+type appYdDataDiagnosisResp struct {
+	Status  string                     `json:"status"`
+	Message string                     `json:"message"`
+	Result  []appYdDataDiagnosisResult `json:"result"`
+}
+
+type appYdDataDiagnosisResult struct {
+	ApnList json.RawMessage `json:"apnList"`
+}
+
+type appYdDataDiagnosisApnInfo struct {
+	ApnName              string          `json:"apnName"`
+	ApnStatus            string          `json:"apnStatus"`
+	ModifyTime           string          `json:"modifyTime"`
+	OverUseDetails       string          `json:"overUseDetails"`
+	ApnServiceUsageState string          `json:"apnServiceUsageState"`
+	PccList              json.RawMessage `json:"pccList"`
+}
+
+type appYdDataDiagnosisPccInfo struct {
+	PccServiceCode       string `json:"pccServiceCode"`
+	PccName              string `json:"pccName"`
+	PccNameLower         string `json:"pccname"`
+	PccPolicyStatus      string `json:"pccPolicyStatus"`
+	PccServiceUsageState string `json:"pccServiceUsageState"`
+	ModifyTime           string `json:"modifyTime"`
+}
+
+func appParseYdDataDiagnosisBody(body json.RawMessage) (appYdDataDiagnosisItem, error) {
+	var ydResp appYdDataDiagnosisResp
+	if err := json.Unmarshal(body, &ydResp); err != nil {
+		return appYdDataDiagnosisItem{}, err
+	}
+	return appBuildYdDataDiagnosisItem(ydResp.Result), nil
+}
+
+func appBuildYdDataDiagnosisItem(results []appYdDataDiagnosisResult) appYdDataDiagnosisItem {
+	apnInfos := make([]appYdDataDiagnosisApnInfo, 0)
+	for _, result := range results {
+		apnInfos = append(apnInfos, appDecodeYdDataDiagnosisApnInfos(result.ApnList)...)
+	}
+	if len(apnInfos) == 0 {
+		return appYdDataDiagnosisItem{
+			RateLimitStatus: "2",
+			RateLimitReason: "上游未返回达量限速明细",
+		}
+	}
+
+	triggered := false
+	reasons := make([]string, 0)
+	details := make([]string, 0, len(apnInfos))
+	apnDetails := make([]model.AppDiagnosisRateLimitApnItem, 0, len(apnInfos))
+
+	for _, apn := range apnInfos {
+		apnName := strings.TrimSpace(apn.ApnName)
+		displayApn := apnName
+		if displayApn == "" {
+			displayApn = "未命名APN"
+		}
+
+		if overUseText := appMapYdOverUseDetailsText(apn.OverUseDetails); overUseText != "" {
+			triggered = true
+			reasons = append(reasons, fmt.Sprintf("%s：%s", displayApn, overUseText))
+		}
+		if stateText, limited := appMapYdUsageStateText(apn.ApnServiceUsageState); limited {
+			triggered = true
+			reasons = append(reasons, fmt.Sprintf("%s：%s", displayApn, stateText))
+		}
+
+		pccInfos := appDecodeYdDataDiagnosisPccInfos(apn.PccList)
+		pccDetails := make([]model.AppDiagnosisRateLimitPccItem, 0, len(pccInfos))
+		pccText := make([]string, 0, len(pccInfos))
+		for _, pcc := range pccInfos {
+			pccName := appFirstNonEmpty(pcc.PccName, pcc.PccNameLower, pcc.PccServiceCode)
+			if pccName == "" {
+				pccName = "未命名PCC策略"
+			}
+			if stateText, limited := appMapYdUsageStateText(pcc.PccServiceUsageState); limited {
+				triggered = true
+				reasons = append(reasons, fmt.Sprintf("%s/%s：%s", displayApn, pccName, stateText))
+			}
+			pccText = append(pccText, fmt.Sprintf("%s %s %s", pccName, appMapYdPccPolicyStatusText(pcc.PccPolicyStatus), appMapYdUsageStateTextForDetail(pcc.PccServiceUsageState)))
+			pccDetails = append(pccDetails, model.AppDiagnosisRateLimitPccItem{
+				PccServiceCode:       strings.TrimSpace(pcc.PccServiceCode),
+				PccName:              appFirstNonEmpty(pcc.PccName, pcc.PccNameLower),
+				PccPolicyStatus:      strings.TrimSpace(pcc.PccPolicyStatus),
+				PccServiceUsageState: strings.TrimSpace(pcc.PccServiceUsageState),
+				ModifyTime:           strings.TrimSpace(pcc.ModifyTime),
+			})
+		}
+
+		detailParts := []string{fmt.Sprintf("%s %s %s", displayApn, appMapYdApnStatusText(apn.ApnStatus), appMapYdUsageStateTextForDetail(apn.ApnServiceUsageState))}
+		if overUseText := appMapYdOverUseDetailsText(apn.OverUseDetails); overUseText != "" {
+			detailParts = append(detailParts, "超停原因："+overUseText)
+		}
+		if len(pccText) > 0 {
+			detailParts = append(detailParts, "PCC："+strings.Join(pccText, "；"))
+		}
+		details = append(details, strings.Join(detailParts, "；"))
+		apnDetails = append(apnDetails, model.AppDiagnosisRateLimitApnItem{
+			ApnName:              apnName,
+			ApnStatus:            strings.TrimSpace(apn.ApnStatus),
+			ModifyTime:           strings.TrimSpace(apn.ModifyTime),
+			OverUseDetails:       strings.TrimSpace(apn.OverUseDetails),
+			ApnServiceUsageState: strings.TrimSpace(apn.ApnServiceUsageState),
+			PccDetails:           pccDetails,
+		})
+	}
+
+	status := "1"
+	reason := "未发现达量限速或流量关停"
+	if triggered {
+		status = "0"
+		reason = strings.Join(appUniqueNonEmptyStrings(reasons), "；")
+	}
+	return appYdDataDiagnosisItem{
+		RateLimitStatus: status,
+		RateLimitReason: reason,
+		RateLimitDetail: strings.Join(appUniqueNonEmptyStrings(details), "；"),
+		ApnDetails:      apnDetails,
+	}
+}
+
+func appDecodeYdDataDiagnosisApnInfos(raw json.RawMessage) []appYdDataDiagnosisApnInfo {
+	raw = appTrimJSONRaw(raw)
+	if len(raw) == 0 {
+		return nil
+	}
+	if raw[0] == '{' {
+		var wrapper struct {
+			ApnInfo json.RawMessage `json:"apnInfo"`
+		}
+		if json.Unmarshal(raw, &wrapper) == nil && len(appTrimJSONRaw(wrapper.ApnInfo)) > 0 {
+			return appDecodeYdDataDiagnosisApnInfoList(wrapper.ApnInfo)
+		}
+		var item appYdDataDiagnosisApnInfo
+		if json.Unmarshal(raw, &item) == nil {
+			return []appYdDataDiagnosisApnInfo{item}
+		}
+		return nil
+	}
+	if raw[0] == '[' {
+		var wrappers []struct {
+			ApnInfo json.RawMessage `json:"apnInfo"`
+		}
+		if json.Unmarshal(raw, &wrappers) == nil {
+			items := make([]appYdDataDiagnosisApnInfo, 0)
+			for _, wrapper := range wrappers {
+				items = append(items, appDecodeYdDataDiagnosisApnInfoList(wrapper.ApnInfo)...)
+			}
+			if len(items) > 0 {
+				return items
+			}
+		}
+		return appDecodeYdDataDiagnosisApnInfoList(raw)
+	}
+	return nil
+}
+
+func appDecodeYdDataDiagnosisApnInfoList(raw json.RawMessage) []appYdDataDiagnosisApnInfo {
+	raw = appTrimJSONRaw(raw)
+	if len(raw) == 0 {
+		return nil
+	}
+	if raw[0] == '[' {
+		var items []appYdDataDiagnosisApnInfo
+		if json.Unmarshal(raw, &items) == nil && len(items) > 0 {
+			return items
+		}
+	}
+	if raw[0] == '{' {
+		var item appYdDataDiagnosisApnInfo
+		if json.Unmarshal(raw, &item) == nil {
+			return []appYdDataDiagnosisApnInfo{item}
+		}
+	}
+	return nil
+}
+
+func appDecodeYdDataDiagnosisPccInfos(raw json.RawMessage) []appYdDataDiagnosisPccInfo {
+	raw = appTrimJSONRaw(raw)
+	if len(raw) == 0 {
+		return nil
+	}
+	if raw[0] == '{' {
+		var wrapper struct {
+			PccInfo json.RawMessage `json:"pccInfo"`
+		}
+		if json.Unmarshal(raw, &wrapper) == nil && len(appTrimJSONRaw(wrapper.PccInfo)) > 0 {
+			return appDecodeYdDataDiagnosisPccInfoList(wrapper.PccInfo)
+		}
+		var item appYdDataDiagnosisPccInfo
+		if json.Unmarshal(raw, &item) == nil {
+			return []appYdDataDiagnosisPccInfo{item}
+		}
+		return nil
+	}
+	if raw[0] == '[' {
+		var wrappers []struct {
+			PccInfo json.RawMessage `json:"pccInfo"`
+		}
+		if json.Unmarshal(raw, &wrappers) == nil {
+			items := make([]appYdDataDiagnosisPccInfo, 0)
+			for _, wrapper := range wrappers {
+				items = append(items, appDecodeYdDataDiagnosisPccInfoList(wrapper.PccInfo)...)
+			}
+			if len(items) > 0 {
+				return items
+			}
+		}
+		return appDecodeYdDataDiagnosisPccInfoList(raw)
+	}
+	return nil
+}
+
+func appDecodeYdDataDiagnosisPccInfoList(raw json.RawMessage) []appYdDataDiagnosisPccInfo {
+	raw = appTrimJSONRaw(raw)
+	if len(raw) == 0 {
+		return nil
+	}
+	if raw[0] == '[' {
+		var items []appYdDataDiagnosisPccInfo
+		if json.Unmarshal(raw, &items) == nil && len(items) > 0 {
+			return items
+		}
+	}
+	if raw[0] == '{' {
+		var item appYdDataDiagnosisPccInfo
+		if json.Unmarshal(raw, &item) == nil {
+			return []appYdDataDiagnosisPccInfo{item}
+		}
+	}
+	return nil
+}
+
+func appTrimJSONRaw(raw json.RawMessage) json.RawMessage {
+	return json.RawMessage(strings.TrimSpace(string(raw)))
+}
+
+func appFirstNonEmpty(values ...string) string {
+	for _, value := range values {
+		if value = strings.TrimSpace(value); value != "" {
+			return value
+		}
+	}
+	return ""
+}
+
+func appUniqueNonEmptyStrings(values []string) []string {
+	seen := make(map[string]struct{}, len(values))
+	result := make([]string, 0, len(values))
+	for _, value := range values {
+		value = strings.TrimSpace(value)
+		if value == "" {
+			continue
+		}
+		if _, ok := seen[value]; ok {
+			continue
+		}
+		seen[value] = struct{}{}
+		result = append(result, value)
+	}
+	return result
+}
+
+func appMapYdOverUseDetailsText(value string) string {
+	parts := strings.FieldsFunc(strings.TrimSpace(value), func(r rune) bool {
+		return r == '|' || r == ',' || r == ';' || r == '，' || r == '；'
+	})
+	texts := make([]string, 0, len(parts))
+	for _, part := range parts {
+		switch strings.TrimSpace(part) {
+		case "12":
+			texts = append(texts, "流量用尽关停")
+		case "17":
+			texts = append(texts, "限额管控关停")
+		case "18":
+			texts = append(texts, "超量关停")
+		case "":
+		default:
+			texts = append(texts, strings.TrimSpace(part))
+		}
+	}
+	return strings.Join(appUniqueNonEmptyStrings(texts), "；")
+}
+
+func appMapYdUsageStateText(value string) (text string, limited bool) {
+	switch strings.TrimSpace(value) {
+	case "", "1":
+		return "正常速率", false
+	case "91":
+		return "限速至2Mbps(月初不自动恢复)", true
+	case "92":
+		return "限速至2Mbps(月初自动恢复)", true
+	case "95":
+		return "限速至1Mbps(月初不自动恢复)", true
+	case "96":
+		return "限速至1Mbps(月初自动恢复)", true
+	case "97":
+		return "达量限速2M", true
+	case "98":
+		return "达量限速1M", true
+	default:
+		value = strings.TrimSpace(value)
+		if value == "" {
+			return "", false
+		}
+		return value, value != "0"
+	}
+}
+
+func appMapYdUsageStateTextForDetail(value string) string {
+	text, _ := appMapYdUsageStateText(value)
+	return text
+}
+
+func appMapYdApnStatusText(value string) string {
+	switch strings.TrimSpace(value) {
+	case "", "0", "1":
+		return "APN已停用"
+	case "2":
+		return "APN已激活"
+	case "3":
+		return "APN已删除"
+	case "4":
+		return "APN已暂停"
+	default:
+		return strings.TrimSpace(value)
+	}
+}
+
+func appMapYdPccPolicyStatusText(value string) string {
+	switch strings.TrimSpace(value) {
+	case "", "0", "1":
+		return "策略已停用"
+	case "2":
+		return "策略已激活"
+	case "3":
+		return "策略已删除"
+	case "4":
+		return "策略已暂停"
+	default:
+		return strings.TrimSpace(value)
+	}
+}
+
+type appYdDataDiagnosisItem struct {
+	RateLimitStatus string                               `json:"rateLimitStatus"`
+	RateLimitReason string                               `json:"rateLimitReason"`
+	RateLimitDetail string                               `json:"rateLimitDetail"`
+	ApnDetails      []model.AppDiagnosisRateLimitApnItem `json:"apnDetails"`
+}
+
+func appDiagnosisNormalizeRateLimitBody(raw json.RawMessage) json.RawMessage {
+	if appDiagnosisRawString(raw, "rateLimitStatus", "rate_limit_status") != "" || len(appDiagnosisRateLimitApnDetails(raw)) > 0 {
+		return raw
+	}
+	var payload map[string]json.RawMessage
+	if json.Unmarshal(raw, &payload) != nil || len(payload["result"]) == 0 {
+		return raw
+	}
+	parsed, err := appParseYdDataDiagnosisBody(raw)
+	if err != nil || len(parsed.ApnDetails) == 0 {
+		return raw
+	}
+	normalized, err := json.Marshal(parsed)
+	if err != nil {
+		return raw
+	}
+	return normalized
+}
diff --git a/server/internal/logic/app/app_diagnosis_test.go b/server/internal/logic/app/app_diagnosis_test.go
index f038fac..804f3c6 100644
--- a/server/internal/logic/app/app_diagnosis_test.go
+++ b/server/internal/logic/app/app_diagnosis_test.go
@@ -8,6 +8,130 @@ import (
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model"
 )
 
+func TestAppDiagnosisDataServiceStatus(t *testing.T) {
+	tests := []struct {
+		name string
+		raw  string
+		want string
+	}{
+		{name: "disabled", raw: "0", want: "0"},
+		{name: "enabled", raw: "1", want: "1"},
+		{name: "unknown", raw: "2", want: "-1"},
+		{name: "empty", raw: "", want: ""},
+		{name: "invalid", raw: "unexpected", want: ""},
+	}
+	for _, test := range tests {
+		t.Run(test.name, func(t *testing.T) {
+			got := appDiagnosisDataServiceStatus(test.raw)
+			if test.want == "" {
+				if got != nil {
+					t.Fatalf("appDiagnosisDataServiceStatus(%q) = %q, want nil", test.raw, *got)
+				}
+				return
+			}
+			if got == nil || *got != test.want {
+				t.Fatalf("appDiagnosisDataServiceStatus(%q) = %v, want %q", test.raw, got, test.want)
+			}
+		})
+	}
+}
+
+func TestAppDiagnosisDataServiceStatusFromApn(t *testing.T) {
+	tests := []struct {
+		name string
+		raw  json.RawMessage
+		want string
+	}{
+		{name: "mobile APN enabled", raw: json.RawMessage(`{"apnList":[{"apnName":"CMIOT","status":"1"}]}`), want: "1"},
+		{name: "mobile APN disabled", raw: json.RawMessage(`{"apnList":[{"apnName":"CMIOT","status":"0"}]}`), want: "0"},
+		{name: "ignore unrelated APN", raw: json.RawMessage(`{"apnList":[{"apnName":"OTHER","status":"0"},{"apnName":"cmiot","status":"1"}]}`), want: "1"},
+		{name: "no APN entry", raw: json.RawMessage(`{"status":"1","apnList":[]}`)},
+		{name: "other APN only", raw: json.RawMessage(`{"apnList":[{"apnName":"OTHER","status":"1"}]}`)},
+	}
+	for _, test := range tests {
+		t.Run(test.name, func(t *testing.T) {
+			got := appDiagnosisDataServiceStatusFromApn(test.raw)
+			if test.want == "" {
+				if got != nil {
+					t.Fatalf("status = %q, want no data", *got)
+				}
+				return
+			}
+			if got == nil || *got != test.want {
+				t.Fatalf("status = %v, want %q", got, test.want)
+			}
+		})
+	}
+}
+
+func TestAppDiagnosisDataServiceStatusFromItems(t *testing.T) {
+	items := []appUpstreamSimQueryItem{
+		{Code: 0, ResData: json.RawMessage(`{"apnList":[{"apnName":"OTHER","status":"0"}]}`)},
+		{Code: 5000, ResData: json.RawMessage(`{"apnList":[{"apnName":"CMIOT","status":"0"}]}`)},
+		{Code: 0, ResData: json.RawMessage(`{"apnList":[{"apnName":"CMIOT","status":"1"}]}`)},
+	}
+	status := appDiagnosisDataServiceStatusFromItems(items)
+	if status == nil || *status != "1" {
+		t.Fatalf("status = %v, want enabled CMIOT from successful upstream item", status)
+	}
+}
+
+func TestAppDiagnosisDataServiceStatusForCarrier(t *testing.T) {
+	tests := []struct {
+		name    string
+		tempKey string
+		chanKey string
+		raw     json.RawMessage
+		want    string
+	}{
+		{name: "mobile only reads CMIOT", tempKey: "sim_yd_v5", raw: json.RawMessage(`{"apnList":[{"apnName":"OTHER","status":"1"}]}`)},
+		{name: "telecom reads returned DNN", tempKey: "sim_dx_v1", raw: json.RawMessage(`{"apnList":[{"apnName":"ctnet","status":"1"}]}`), want: "1"},
+		{name: "telecom reads disabled DNN", tempKey: "sim_dx_v1", raw: json.RawMessage(`{"apnList":[{"apnName":"ctnet","status":"0"}]}`), want: "0"},
+	}
+	for _, test := range tests {
+		t.Run(test.name, func(t *testing.T) {
+			got := appDiagnosisDataServiceStatusFromItemsForChannel([]appUpstreamSimQueryItem{{Code: 0, ResData: test.raw}}, test.tempKey, test.chanKey)
+			if test.want == "" {
+				if got != nil {
+					t.Fatalf("status = %q, want no data", *got)
+				}
+				return
+			}
+			if got == nil || *got != test.want {
+				t.Fatalf("status = %v, want %q", got, test.want)
+			}
+		})
+	}
+}
+func TestAppDiagnosisAPNStatusRequiresAgreement(t *testing.T) {
+	tests := []struct {
+		name string
+		raw  string
+		want string
+	}{
+		{name: "all enabled", raw: `{"apnList":[{"apnName":"ctnet","status":"1"},{"apnName":"ctiot","status":"1"}]}`, want: "1"},
+		{name: "all stopped", raw: `{"apnList":[{"apnName":"ctnet","status":"0"},{"apnName":"ctiot","status":"0"}]}`, want: "0"},
+		{name: "mixed", raw: `{"apnList":[{"apnName":"ctnet","status":"1"},{"apnName":"ctiot","status":"0"}]}`},
+		{name: "mixed reversed", raw: `{"apnList":[{"apnName":"ctiot","status":"0"},{"apnName":"ctnet","status":"1"}]}`},
+		{name: "missing status", raw: `{"apnList":[{"apnName":"ctnet","status":"1"},{"apnName":"ctiot"}]}`},
+		{name: "unknown status", raw: `{"apnList":[{"apnName":"ctnet","status":"1"},{"apnName":"ctiot","status":"-1"}]}`},
+		{name: "missing name", raw: `{"apnList":[{"status":"1"}]}`},
+		{name: "no mobile preference for telecom", raw: `{"apnList":[{"apnName":"CMIOT","status":"1"},{"apnName":"ctnet","status":"0"}]}`},
+	}
+	for _, test := range tests {
+		t.Run(test.name, func(t *testing.T) {
+			got := appDiagnosisDataServiceStatusFromItemsForChannel([]appUpstreamSimQueryItem{{Code: 0, ResData: json.RawMessage(test.raw)}}, "sim_dx_v1", "channel_dx")
+			if test.want == "" {
+				if got != nil {
+					t.Fatalf("status = %q, want no data", *got)
+				}
+			} else if got == nil || *got != test.want {
+				t.Fatalf("status = %v, want %q", got, test.want)
+			}
+		})
+	}
+}
+
 func TestQueryDiagnosisFlowByCardRejectsUnsupportedPeriod(t *testing.T) {
 	_, err := NewAppDiagnosis().queryDiagnosisFlowByCard(nil, nil, "12M")
 	if err == nil || !strings.Contains(err.Error(), "3M") {
@@ -15,6 +139,100 @@ func TestQueryDiagnosisFlowByCardRejectsUnsupportedPeriod(t *testing.T) {
 	}
 }
 
+func TestValidateDiagnosisCardChannelInfo(t *testing.T) {
+	tests := []struct {
+		name    string
+		info    *appCardChannelInfo
+		wantErr bool
+	}{
+		{name: "missing channel", wantErr: true},
+		{name: "empty channel key", info: &appCardChannelInfo{}, wantErr: true},
+		{name: "disabled channel", info: &appCardChannelInfo{ChanKey: "channel-1", ChanStatus: 1}, wantErr: true},
+		{name: "enabled channel", info: &appCardChannelInfo{ChanKey: "channel-1", ChanStatus: 0}},
+	}
+
+	for _, test := range tests {
+		t.Run(test.name, func(t *testing.T) {
+			err := validateDiagnosisCardChannelInfo(test.info)
+			if test.wantErr {
+				if err == nil || !strings.Contains(err.Error(), appDiagnosisNotIncludedMessage) {
+					t.Fatalf("error = %v, want %q", err, appDiagnosisNotIncludedMessage)
+				}
+				return
+			}
+			if err != nil {
+				t.Fatalf("error = %v, want nil", err)
+			}
+		})
+	}
+}
+
+func TestAppDiagnosisUnsupportedMessageIncludesUnsubscribedCapabilities(t *testing.T) {
+	for _, message := range []string{"接口未订购", "能力未开通", "服务未开通", "未开通该接口", "通道未申请"} {
+		if !appDiagnosisIsUnsupportedMessage(message) {
+			t.Fatalf("message %q should be treated as unsupported", message)
+		}
+	}
+}
+
+func TestAppDiagnosisModuleReason(t *testing.T) {
+	tests := []struct {
+		name    string
+		status  string
+		message string
+		want    string
+	}{
+		{name: "unsubscribed", status: "skipped", message: "该卡未订购机卡绑定服务", want: "not_subscribed"},
+		{name: "unsupported", status: "skipped", message: "运营商暂不支持", want: "unsupported"},
+		{name: "empty skipped", status: "skipped", want: "unsupported"},
+		{name: "no data", status: "skipped", message: "上游会话信息未返回有效结果", want: "no_data"},
+		{name: "query error", status: "error", message: "查询超时", want: "query_error"},
+		{name: "success", status: "success"},
+	}
+	for _, test := range tests {
+		t.Run(test.name, func(t *testing.T) {
+			if got := appDiagnosisModuleReason(test.status, test.message); got != test.want {
+				t.Fatalf("appDiagnosisModuleReason() = %q, want %q", got, test.want)
+			}
+		})
+	}
+}
+
+func TestAppSetDiagnosisModulePreservesStructuredReason(t *testing.T) {
+	res := &model.AppDiagnosisInfoModel{}
+	appSetDiagnosisModule(res, "cardBind", "skipped", "该卡未订购机卡绑定服务", false, "")
+	module := res.Modules["cardBind"]
+	if module == nil || module.Reason != "not_subscribed" || module.Message != "" {
+		t.Fatalf("module = %+v, want hidden not_subscribed reason", module)
+	}
+}
+
+func TestAppDiagnosisDoesNotExposeUpstreamErrors(t *testing.T) {
+	for _, message := range []string{"missing msisdn", "Missing MSISDN"} {
+		res := &model.AppDiagnosisInfoModel{}
+		status, displayMessage := appDiagnosisUpstreamFailure("上游机卡绑定状态查询失败", 9999, message)
+		appSetDiagnosisModule(res, "cardBind", status, displayMessage, false, "")
+		module := res.Modules["cardBind"]
+		if module == nil || module.Status != "error" || module.Message != appDiagnosisRetryMessage {
+			t.Fatalf("message %q: module = %+v", message, module)
+		}
+	}
+}
+
+func TestAppDiagnosisNormalizesLegacyBusyMessage(t *testing.T) {
+	status, displayMessage := appDiagnosisUpstreamFailure("上游实时流量查询失败", 13000, "系统忙，请稍后再试")
+	if status != "error" || displayMessage != appDiagnosisRetryMessage {
+		t.Fatalf("status = %q, message = %q", status, displayMessage)
+	}
+}
+
+func TestAppDiagnosisHidesConnectivityFailureMessage(t *testing.T) {
+	status, displayMessage := appDiagnosisUpstreamFailure("上游实时流量查询失败", 9999, "dial tcp 127.0.0.1:8510: connection refused")
+	if status != "error" || displayMessage != "" {
+		t.Fatalf("status = %q, message = %q", status, displayMessage)
+	}
+}
+
 func TestAppCachedDiagnosisRegionModuleTreatsCachedDataAsSuccess(t *testing.T) {
 	raw, err := json.Marshal(map[string]string{
 		"regionLimitStatus": "1",
@@ -103,7 +321,7 @@ func TestAppDiagnosisApplyRateLimitIncludesApnDetails(t *testing.T) {
 	}
 }
 
-func TestSanitizeOpenDiagnosisInfoMasksIdentifiersAndRemovesNetworkData(t *testing.T) {
+func TestSanitizeOpenDiagnosisInfoKeepsImeiAndRemovesOtherNetworkData(t *testing.T) {
 	res := &model.AppDiagnosisInfoModel{
 		Info: &model.AppDiagnosisInfoItem{
 			Iccid:  appDiagnosisStringPtr("8986001234567890123"),
@@ -116,7 +334,7 @@ func TestSanitizeOpenDiagnosisInfoMasksIdentifiersAndRemovesNetworkData(t *testi
 		Session: &model.AppDiagnosisSessionItem{
 			ApnId: appDiagnosisStringPtr("internet"),
 			Imei:  appDiagnosisStringPtr("860123456789012"),
-			Ipv4:  appDiagnosisStringPtr("10.0.0.1"),
+			Ipv4:  appDiagnosisStringPtr("192.0.2.10"),
 			Ipv6:  appDiagnosisStringPtr("2001:db8::1"),
 		},
 		Card: &model.AppCardModel{
@@ -124,7 +342,7 @@ func TestSanitizeOpenDiagnosisInfoMasksIdentifiersAndRemovesNetworkData(t *testi
 			Msisdn: "13800008000",
 			Imsi:   "460001234567890",
 			Imei:   "860123456789012",
-			Ipv4:   "10.0.0.1",
+			Ipv4:   "192.0.2.10",
 		},
 	}
 
@@ -135,24 +353,30 @@ func TestSanitizeOpenDiagnosisInfoMasksIdentifiersAndRemovesNetworkData(t *testi
 	if got := *res.Info.Msisdn; got != "1380****8000" {
 		t.Fatalf("masked MSISDN = %q", got)
 	}
-	if res.Info.Imsi != nil || len(res.Info.RateLimitApnDetails) != 0 || res.Session.ApnId != nil || res.Session.Imei != nil || res.Session.Ipv4 != nil {
+	if res.Info.Imsi != nil || len(res.Info.RateLimitApnDetails) != 0 || res.Session.ApnId != nil || res.Session.Ipv4 != nil {
 		t.Fatal("sensitive diagnosis fields were not removed")
 	}
-	if res.Card.Imsi != "" || res.Card.Imei != "" || res.Card.Ipv4 != "" {
+	if res.Session.Imei == nil || *res.Session.Imei != "860123456789012" {
+		t.Fatalf("session IMEI = %#v, want public 30-day IMEI", res.Session.Imei)
+	}
+	if res.Card.Imsi != "" || res.Card.Imei != "860123456789012" || res.Card.Ipv4 != "" {
 		t.Fatal("sensitive card fields were not removed")
 	}
 }
 
-func TestBuildDiagnosisInfoKeepsSessionImeiBeforeOpenSanitization(t *testing.T) {
-	res := &model.AppDiagnosisInfoModel{
-		Session: &model.AppDiagnosisSessionItem{Imei: appDiagnosisStringPtr("860123456789012")},
+func TestAppDiagnosisLatestImeiUsesSuccessfulGatewayResult(t *testing.T) {
+	raw, err := json.Marshal(map[string]any{
+		"resData": map[string]string{"imei": "861789024851199"},
+	})
+	if err != nil {
+		t.Fatalf("marshal IMEI response: %v", err)
 	}
-	if res.Session.Imei == nil || *res.Session.Imei != "860123456789012" {
-		t.Fatal("authenticated diagnosis should keep session IMEI")
+	items := []appUpstreamSimQueryItem{
+		{Code: 5000, ResData: json.RawMessage(`{"imei":"ignored"}`)},
+		{Code: 0, ResData: raw},
 	}
-	sanitizeOpenDiagnosisInfo(res)
-	if res.Session.Imei != nil {
-		t.Fatal("open diagnosis should remove session IMEI")
+	if got := appDiagnosisLatestImei(items); got != "861789024851199" {
+		t.Fatalf("latest IMEI = %q, want 861789024851199", got)
 	}
 }
 
@@ -206,6 +430,30 @@ func TestAppDiagnosisBindStatusSupportsTelecomCardBindingType(t *testing.T) {
 	}
 }
 
+func TestAppDiagnosisShouldCacheRegionLimitMatchesConsoleChannels(t *testing.T) {
+	tests := []struct {
+		name    string
+		tempKey string
+		chanKey string
+		want    bool
+	}{
+		{name: "mobile template", tempKey: "sim_yd", want: true},
+		{name: "mobile mock channel", chanKey: "channel_yd_mock", want: true},
+		{name: "onelink", chanKey: "onelink_shared", want: true},
+		{name: "shared token", tempKey: "shared_token", want: true},
+		{name: "telecom", tempKey: "sim_dx", chanKey: "channel_dx", want: false},
+		{name: "unicom", tempKey: "sim_lt", chanKey: "channel_lt", want: false},
+	}
+
+	for _, test := range tests {
+		t.Run(test.name, func(t *testing.T) {
+			if got := appDiagnosisShouldCacheRegionLimit(test.tempKey, test.chanKey); got != test.want {
+				t.Fatalf("appDiagnosisShouldCacheRegionLimit(%q, %q) = %v, want %v", test.tempKey, test.chanKey, got, test.want)
+			}
+		})
+	}
+}
+
 func TestAppDiagnosisSessionStatusNormalizesUpstreamValues(t *testing.T) {
 	tests := map[string]string{
 		"0":       "0",
diff --git a/server/internal/logic/app/app_diagnosis_traffic.go b/server/internal/logic/app/app_diagnosis_traffic.go
index 430ec27..12f4572 100644
--- a/server/internal/logic/app/app_diagnosis_traffic.go
+++ b/server/internal/logic/app/app_diagnosis_traffic.go
@@ -36,18 +36,18 @@ type appDiagnosisTrafficConfig struct {
 	MaxIdleConns  int
 }
 
-// dbNameFor 返回指定超级表所在 database。
-//
-// 日流量与月流量分库存储（两库 duration 不同，而 duration 只能建库时确定）；
-// 未单独配置 dailyDbName/monthlyDbName 时回退到 DbName，与改造前行为一致。
-func (c appDiagnosisTrafficConfig) dbNameFor(stable string) string {
-	if stable == appDiagnosisDailyStable && c.DailyDbName != "" {
-		return c.DailyDbName
+func (cfg appDiagnosisTrafficConfig) databaseFor(stable string) string {
+	switch stable {
+	case appDiagnosisDailyStable:
+		if cfg.DailyDbName != "" {
+			return cfg.DailyDbName
+		}
+	case appDiagnosisMonthlyStable:
+		if cfg.MonthlyDbName != "" {
+			return cfg.MonthlyDbName
+		}
 	}
-	if stable == appDiagnosisMonthlyStable && c.MonthlyDbName != "" {
-		return c.MonthlyDbName
-	}
-	return c.DbName
+	return cfg.DbName
 }
 
 type appDiagnosisTrafficRecord struct {
@@ -67,24 +67,28 @@ func (s *sAppDiagnosis) queryDiagnosisDailyFlow(ctx context.Context, iccid strin
 
 	records, err := appDiagnosisQueryTrafficRows(ctx, iccid, appDiagnosisDailyStable, startTime, endTime)
 	if err != nil {
-		return nil, gerror.Wrap(err, "查询SIM卡使用流量失败，请稍后重试")
+		g.Log().Errorf(ctx, "app diagnosis daily traffic query failed, iccid:%s, days:%d, err:%+v", appDiagnosisMaskIdentifier(iccid), days, err)
+		return nil, gerror.New("流量趋势服务暂时不可用，请稍后重试")
 	}
 	usageMap := make(map[string]float64, len(records))
 	for _, item := range records {
-		usageMap[item.Ts.Format("2006-01-02")] = item.UsageMb
+		usageMap[item.Ts.Format("2006-01-02")] += item.UsageMb
 	}
 
 	res := &model.AppDiagnosisFlowModel{
-		Times:       make([]string, 0, days),
-		Flow:        make([]float64, 0, days),
-		Unit:        "MB",
-		Granularity: "day",
-		HasData:     len(records) > 0,
+		Times:         make([]string, 0, days),
+		Flow:          make([]float64, 0, days),
+		FlowAvailable: make([]bool, 0, days),
+		Unit:          "MB",
+		Granularity:   "day",
+		HasData:       len(records) > 0,
 	}
 	for i := 0; i < days; i++ {
 		current := startTime.AddDate(0, 0, i)
 		res.Times = append(res.Times, current.Format("01-02"))
-		res.Flow = append(res.Flow, usageMap[current.Format("2006-01-02")])
+		usage, ok := usageMap[current.Format("2006-01-02")]
+		res.Flow = append(res.Flow, usage)
+		res.FlowAvailable = append(res.FlowAvailable, ok)
 	}
 	return res, nil
 }
@@ -100,25 +104,29 @@ func (s *sAppDiagnosis) queryDiagnosisMonthlyFlow(ctx context.Context, iccid str
 
 	records, err := appDiagnosisQueryTrafficRows(ctx, iccid, appDiagnosisMonthlyStable, startMonth, endTime)
 	if err != nil {
-		return nil, gerror.Wrap(err, "查询SIM卡使用流量失败，请稍后重试")
+		g.Log().Errorf(ctx, "app diagnosis monthly traffic query failed, iccid:%s, months:%d, err:%+v", appDiagnosisMaskIdentifier(iccid), months, err)
+		return nil, gerror.New("流量趋势服务暂时不可用，请稍后重试")
 	}
 	usageMap := make(map[string]float64, len(records))
 	for _, item := range records {
-		usageMap[item.Ts.Format("2006-01")] = item.UsageMb
+		usageMap[item.Ts.Format("2006-01")] += item.UsageMb
 	}
 
 	res := &model.AppDiagnosisFlowModel{
-		Times:       make([]string, 0, months),
-		Flow:        make([]float64, 0, months),
-		Unit:        "MB",
-		Granularity: "month",
-		HasData:     len(records) > 0,
+		Times:         make([]string, 0, months),
+		Flow:          make([]float64, 0, months),
+		FlowAvailable: make([]bool, 0, months),
+		Unit:          "MB",
+		Granularity:   "month",
+		HasData:       len(records) > 0,
 	}
 	for i := 0; i < months; i++ {
 		current := startMonth.AddDate(0, i, 0)
 		key := current.Format("2006-01")
 		res.Times = append(res.Times, key)
-		res.Flow = append(res.Flow, usageMap[key])
+		usage, ok := usageMap[key]
+		res.Flow = append(res.Flow, usage)
+		res.FlowAvailable = append(res.FlowAvailable, ok)
 	}
 	return res, nil
 }
@@ -133,8 +141,8 @@ func appDiagnosisQueryTrafficRows(ctx context.Context, iccid string, stable stri
 		g.Log().Debug(ctx, "app diagnosis traffic query skipped, tdengine disabled")
 		return []appDiagnosisTrafficRecord{}, nil
 	}
-	dbName := cfg.dbNameFor(stable)
-	if err := appDiagnosisValidateTableConfig(dbName, stable); err != nil {
+	database := cfg.databaseFor(stable)
+	if err := appDiagnosisValidateTableConfig(database, stable); err != nil {
 		return nil, err
 	}
 
@@ -150,7 +158,7 @@ func appDiagnosisQueryTrafficRows(ctx context.Context, iccid string, stable stri
 	db.SetMaxOpenConns(cfg.MaxOpenConns)
 	db.SetMaxIdleConns(cfg.MaxIdleConns)
 
-	table := appDiagnosisQualify(dbName, appDiagnosisChildTrafficTableName(stable, iccid))
+	table := appDiagnosisQualify(database, appDiagnosisChildTrafficTableName(stable, iccid))
 	rows, err := db.QueryContext(ctx, fmt.Sprintf(
 		"SELECT ts, usage_mb, package_code, iccid FROM %s%s ORDER BY ts ASC",
 		table,
@@ -179,18 +187,23 @@ func appDiagnosisQueryTrafficRows(ctx context.Context, iccid string, stable stri
 }
 
 func appDiagnosisGetTrafficConfig(ctx context.Context) appDiagnosisTrafficConfig {
-	// dbName 只是兑底键名，不决定实际访问哪个库；默认取日库，避免兑底到不存在的库名。
-	dbName := strings.TrimSpace(g.Cfg().MustGet(ctx, "tsdb.tdengine.dbName", "iotlcm_daily").String())
-	return appDiagnosisTrafficConfig{
+	cfg := appDiagnosisTrafficConfig{
 		Enabled:       strings.EqualFold(g.Cfg().MustGet(ctx, "tsdb.database", "TdEngine").String(), "TdEngine"),
 		DriverName:    strings.TrimSpace(g.Cfg().MustGet(ctx, "tsdb.tdengine.type", "taosWS").String()),
 		Dsn:           strings.TrimSpace(g.Cfg().MustGet(ctx, "tsdb.tdengine.dsn", "").String()),
-		DbName:        dbName,
-		DailyDbName:   strings.TrimSpace(g.Cfg().MustGet(ctx, "tsdb.tdengine.dailyDbName", dbName).String()),
-		MonthlyDbName: strings.TrimSpace(g.Cfg().MustGet(ctx, "tsdb.tdengine.monthlyDbName", dbName).String()),
+		DbName:        strings.TrimSpace(g.Cfg().MustGet(ctx, "tsdb.tdengine.dbName", "iotlcm_daily").String()),
+		DailyDbName:   strings.TrimSpace(g.Cfg().MustGet(ctx, "tsdb.tdengine.dailyDbName", "").String()),
+		MonthlyDbName: strings.TrimSpace(g.Cfg().MustGet(ctx, "tsdb.tdengine.monthlyDbName", "").String()),
 		MaxOpenConns:  g.Cfg().MustGet(ctx, "tsdb.tdengine.maxOpenConns", 100).Int(),
 		MaxIdleConns:  g.Cfg().MustGet(ctx, "tsdb.tdengine.maxIdleConns", 10).Int(),
 	}
+	if cfg.DailyDbName == "" {
+		cfg.DailyDbName = cfg.DbName
+	}
+	if cfg.MonthlyDbName == "" {
+		cfg.MonthlyDbName = cfg.DbName
+	}
+	return cfg
 }
 
 func appDiagnosisValidateTableConfig(database string, stable string) error {
diff --git a/server/internal/logic/app/app_diagnosis_traffic_test.go b/server/internal/logic/app/app_diagnosis_traffic_test.go
new file mode 100644
index 0000000..ec72adf
--- /dev/null
+++ b/server/internal/logic/app/app_diagnosis_traffic_test.go
@@ -0,0 +1,111 @@
+package app
+
+import (
+	"context"
+	"testing"
+
+	"github.com/gogf/gf/v2/frame/g"
+	"github.com/gogf/gf/v2/os/gcfg"
+)
+
+func TestAppDiagnosisTrafficDatabaseFor(t *testing.T) {
+	tests := []struct {
+		name   string
+		config appDiagnosisTrafficConfig
+		stable string
+		want   string
+	}{
+		{
+			name:   "daily usage uses daily database",
+			config: appDiagnosisTrafficConfig{DbName: "iotlcm", DailyDbName: "iotlcm_daily", MonthlyDbName: "iotlcm_monthly"},
+			stable: appDiagnosisDailyStable,
+			want:   "iotlcm_daily",
+		},
+		{
+			name:   "monthly usage uses monthly database",
+			config: appDiagnosisTrafficConfig{DbName: "iotlcm", DailyDbName: "iotlcm_daily", MonthlyDbName: "iotlcm_monthly"},
+			stable: appDiagnosisMonthlyStable,
+			want:   "iotlcm_monthly",
+		},
+		{
+			name:   "daily usage falls back to legacy database",
+			config: appDiagnosisTrafficConfig{DbName: "iotlcm"},
+			stable: appDiagnosisDailyStable,
+			want:   "iotlcm",
+		},
+		{
+			name:   "monthly usage falls back to legacy database",
+			config: appDiagnosisTrafficConfig{DbName: "iotlcm"},
+			stable: appDiagnosisMonthlyStable,
+			want:   "iotlcm",
+		},
+	}
+
+	for _, test := range tests {
+		t.Run(test.name, func(t *testing.T) {
+			if got := test.config.databaseFor(test.stable); got != test.want {
+				t.Fatalf("databaseFor(%q) = %q, want %q", test.stable, got, test.want)
+			}
+		})
+	}
+}
+
+func TestAppDiagnosisGetTrafficConfig(t *testing.T) {
+	tests := []struct {
+		name        string
+		content     string
+		wantDaily   string
+		wantMonthly string
+	}{
+		{
+			name:        "explicit split databases",
+			content:     `{"tsdb":{"tdengine":{"dbName":"iotlcm","dailyDbName":"iotlcm_daily","monthlyDbName":"iotlcm_monthly"}}}`,
+			wantDaily:   "iotlcm_daily",
+			wantMonthly: "iotlcm_monthly",
+		},
+		{
+			name:        "custom database names are trimmed",
+			content:     `{"tsdb":{"tdengine":{"dbName":" legacy ","dailyDbName":" custom_daily ","monthlyDbName":" custom_monthly "}}}`,
+			wantDaily:   "custom_daily",
+			wantMonthly: "custom_monthly",
+		},
+		{
+			name:        "missing split settings use configured database",
+			content:     `{"tsdb":{"tdengine":{"dbName":"iotlcm"}}}`,
+			wantDaily:   "iotlcm",
+			wantMonthly: "iotlcm",
+		},
+		{
+			name:        "blank split settings use configured database",
+			content:     `{"tsdb":{"tdengine":{"dbName":"iotlcm","dailyDbName":" ","monthlyDbName":""}}}`,
+			wantDaily:   "iotlcm",
+			wantMonthly: "iotlcm",
+		},
+		{
+			name:        "missing settings match console default database",
+			content:     `{"tsdb":{"tdengine":{}}}`,
+			wantDaily:   "iotlcm_daily",
+			wantMonthly: "iotlcm_daily",
+		},
+	}
+
+	for _, test := range tests {
+		t.Run(test.name, func(t *testing.T) {
+			adapter, err := gcfg.NewAdapterContent(test.content)
+			if err != nil {
+				t.Fatalf("configure traffic database: %v", err)
+			}
+			previous := g.Cfg().GetAdapter()
+			g.Cfg().SetAdapter(adapter)
+			t.Cleanup(func() { g.Cfg().SetAdapter(previous) })
+
+			config := appDiagnosisGetTrafficConfig(context.Background())
+			if got := config.databaseFor(appDiagnosisDailyStable); got != test.wantDaily {
+				t.Fatalf("daily database = %q, want %q", got, test.wantDaily)
+			}
+			if got := config.databaseFor(appDiagnosisMonthlyStable); got != test.wantMonthly {
+				t.Fatalf("monthly database = %q, want %q", got, test.wantMonthly)
+			}
+		})
+	}
+}
diff --git a/server/internal/logic/app/app_lifecycle_metadata_test.go b/server/internal/logic/app/app_lifecycle_metadata_test.go
new file mode 100644
index 0000000..657cddf
--- /dev/null
+++ b/server/internal/logic/app/app_lifecycle_metadata_test.go
@@ -0,0 +1,33 @@
+package app
+
+import (
+	"testing"
+
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/batchmetadata"
+)
+
+func TestLifecycleExecutionModeUsesRequestShape(t *testing.T) {
+	tests := []struct {
+		name       string
+		cardValue  string
+		cardValues []string
+		wantMode   int
+		wantCount  int
+		wantError  bool
+	}{
+		{name: "single", cardValue: "card1", wantMode: batchmetadata.Single, wantCount: 1},
+		{name: "bulk with one card", cardValues: []string{"card1"}, wantMode: batchmetadata.Bulk, wantCount: 1},
+		{name: "bulk deduplicated to one", cardValues: []string{"card1", "card1"}, wantMode: batchmetadata.Bulk, wantCount: 1},
+		{name: "multiple cards in single input", cardValue: "card1,card2", wantMode: batchmetadata.Single, wantError: true},
+		{name: "multiple lines in single input", cardValue: "card1\ncard2", wantMode: batchmetadata.Single, wantError: true},
+		{name: "bulk input", cardValues: []string{"card1,card2"}, wantMode: batchmetadata.Bulk, wantCount: 2},
+	}
+	for _, test := range tests {
+		t.Run(test.name, func(t *testing.T) {
+			values, mode, err := appNormalizeLifecycleCardValues(test.cardValue, test.cardValues)
+			if (err != nil) != test.wantError || mode != test.wantMode || len(values) != test.wantCount {
+				t.Fatalf("values=%v mode=%d err=%v", values, mode, err)
+			}
+		})
+	}
+}
diff --git a/server/internal/logic/app/app_message.go b/server/internal/logic/app/app_message.go
index db00d71..20cddfb 100644
--- a/server/internal/logic/app/app_message.go
+++ b/server/internal/logic/app/app_message.go
@@ -12,7 +12,6 @@ import (
 
 	"github.com/gogf/gf/v2/database/gdb"
 	"github.com/gogf/gf/v2/errors/gerror"
-	"github.com/gogf/gf/v2/os/gtime"
 )
 
 type sAppMessage struct{}
@@ -118,7 +117,6 @@ func (s *sAppMessage) Read(ctx context.Context, param *model.AppMessageReadParam
 		Data(do.TUserMessage{
 			IsRead:    1,
 			UpdatedBy: user.UserId,
-			UpdatedAt: gtime.Now(),
 		}).
 		Update()
 	if err != nil {
@@ -129,10 +127,10 @@ func (s *sAppMessage) Read(ctx context.Context, param *model.AppMessageReadParam
 
 func (s *sAppMessage) ownerMessageModel(ctx context.Context, user *entity.SysUser) *gdb.Model {
 	return dao.TUserMessage.Ctx(ctx).As("um").
-		LeftJoin(dao.TMessageLog.Table()+" ml", "ml."+dao.TMessageLog.Columns().MessageLogId+" = um."+dao.TUserMessage.Columns().MessageLogId).
+		InnerJoin(dao.TMessageLog.Table()+" ml", "ml."+dao.TMessageLog.Columns().MessageLogId+" = um."+dao.TUserMessage.Columns().MessageLogId+" AND ml."+dao.TMessageLog.Columns().TenantId+" = um."+dao.TUserMessage.Columns().TenantId).
 		Where("um."+dao.TUserMessage.Columns().TenantId, user.TenantId).
 		Where("um."+dao.TUserMessage.Columns().UserId, user.UserId).
-		Where("(ml."+dao.TMessageLog.Columns().MessageLogId+" IS NULL OR ml."+dao.TMessageLog.Columns().IsRecall+" = ?)", 0)
+		Where("ml."+dao.TMessageLog.Columns().IsRecall, 0)
 }
 
 func (s *sAppMessage) applyFilters(mod *gdb.Model, param *model.AppMessageListParam) *gdb.Model {
diff --git a/server/internal/logic/app/app_notification.go b/server/internal/logic/app/app_notification.go
new file mode 100644
index 0000000..7b3d7de
--- /dev/null
+++ b/server/internal/logic/app/app_notification.go
@@ -0,0 +1,137 @@
+package app
+
+import (
+	"context"
+	"fmt"
+	"strings"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/dao"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/do"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/entity"
+
+	"github.com/gogf/gf/v2/database/gdb"
+	"github.com/gogf/gf/v2/errors/gerror"
+)
+
+func warningPreferenceKey(userID int64) string {
+	return fmt.Sprintf("app.wechat.warning.enabled.%d", userID)
+}
+
+func (s *sAppUser) WarningPreference(ctx context.Context) (*model.AppWarningPreferenceModel, error) {
+	user, err := appCurrentUser(ctx)
+	if err != nil {
+		return nil, err
+	}
+	var config *entity.SysConfig
+	err = dao.SysConfig.Ctx(ctx).Where("tenant_id", user.TenantId).Where("config_key", warningPreferenceKey(user.UserId)).OrderDesc("config_id").Scan(&config)
+	if err != nil {
+		return nil, gerror.Wrap(err, "读取消息提醒设置失败")
+	}
+	bound, _, err := appUserWechatBindingStatus(ctx, user)
+	if err != nil {
+		return nil, err
+	}
+	return &model.AppWarningPreferenceModel{Enabled: bound && (config == nil || config.ConfigValue == "1"), WechatBound: bound}, nil
+}
+
+func saveWarningPreference(ctx context.Context, tx gdb.TX, user *entity.SysUser, enabled bool) error {
+	value := "0"
+	if enabled {
+		value = "1"
+	}
+	var config *entity.SysConfig
+	if err := dao.SysConfig.Ctx(ctx).TX(tx).Where("tenant_id", user.TenantId).Where("config_key", warningPreferenceKey(user.UserId)).OrderDesc("config_id").Scan(&config); err != nil {
+		return gerror.Wrap(err, "读取消息提醒设置失败")
+	}
+	data := do.SysConfig{ConfigValue: value, UpdatedBy: user.UserId}
+	if config != nil {
+		_, err := dao.SysConfig.Ctx(ctx).TX(tx).Where("tenant_id", user.TenantId).Where("config_key", warningPreferenceKey(user.UserId)).Data(data).Update()
+		return gerror.Wrap(err, "保存消息提醒设置失败")
+	}
+	data.TenantId = user.TenantId
+	data.ConfigKey = warningPreferenceKey(user.UserId)
+	data.ConfigName = "小程序用户微信预警提醒偏好"
+	data.ConfigType = "N"
+	data.CreatedBy = user.UserId
+	data.CreatedDept = user.DeptId
+	_, err := dao.SysConfig.Ctx(ctx).TX(tx).Data(data).Insert()
+	return gerror.Wrap(err, "保存消息提醒设置失败")
+}
+
+func (s *sAppUser) SaveWarningPreference(ctx context.Context, param *model.AppWarningPreferenceParam) (*model.AppWarningPreferenceModel, error) {
+	if param == nil || param.Enabled == nil {
+		return nil, gerror.New("请选择是否开启预警订阅")
+	}
+	user, err := appCurrentUser(ctx)
+	if err != nil {
+		return nil, err
+	}
+	err = dao.SysUser.Transaction(ctx, func(ctx context.Context, tx gdb.TX) error {
+		var locked *entity.SysUser
+		lockModel := dao.SysUser.Ctx(ctx).TX(tx).WherePri(user.UserId).Where("tenant_id", user.TenantId)
+		if dao.SysUser.DB().GetConfig().Type != "sqlite" {
+			lockModel = lockModel.LockUpdate()
+		}
+		if err := lockModel.Scan(&locked); err != nil {
+			return err
+		}
+		if locked == nil {
+			return gerror.New("账号不存在")
+		}
+		if *param.Enabled {
+			count, err := dao.SysSocial.Ctx(ctx).TX(tx).Where("tenant_id", user.TenantId).Where("user_id", user.UserId).Where("source", consts.SourceWechatMp).Where("open_id <> ?", "").Count()
+			if err != nil {
+				return err
+			}
+			if count == 0 {
+				return gerror.New("请先在个人资料中绑定微信")
+			}
+		}
+		return saveWarningPreference(ctx, tx, user, *param.Enabled)
+	})
+	if err != nil {
+		return nil, gerror.Wrap(err, "保存消息提醒设置失败")
+	}
+	return s.WarningPreference(ctx)
+}
+
+func (s *sAppUser) UnbindWechat(ctx context.Context) (*model.AppWechatBindModel, error) {
+	user, err := appCurrentUser(ctx)
+	if err != nil {
+		return nil, err
+	}
+	if strings.TrimSpace(user.UserName) == "" || strings.TrimSpace(user.Password) == "" {
+		return nil, gerror.New("请先设置可用的账号密码，再解除微信绑定")
+	}
+	err = unbindWechatBindings(ctx, user)
+	if err != nil {
+		return nil, gerror.Wrap(err, "解除微信绑定失败")
+	}
+	info, err := getAppUserInfoById(ctx, user.UserId)
+	if err != nil {
+		return nil, err
+	}
+	return &model.AppWechatBindModel{Success: true, UserInfo: info}, nil
+}
+
+func unbindWechatBindings(ctx context.Context, user *entity.SysUser) error {
+	return dao.SysUser.Transaction(ctx, func(ctx context.Context, tx gdb.TX) error {
+		var locked *entity.SysUser
+		lockModel := dao.SysUser.Ctx(ctx).TX(tx).WherePri(user.UserId).Where("tenant_id", user.TenantId)
+		if dao.SysUser.DB().GetConfig().Type != "sqlite" {
+			lockModel = lockModel.LockUpdate()
+		}
+		if err := lockModel.Scan(&locked); err != nil {
+			return err
+		}
+		if locked == nil || strings.TrimSpace(locked.UserName) == "" || strings.TrimSpace(locked.Password) == "" {
+			return gerror.New("请先设置可用的账号密码")
+		}
+		if err := saveWarningPreference(ctx, tx, user, false); err != nil {
+			return err
+		}
+		_, err := dao.SysSocial.Ctx(ctx).TX(tx).Where("tenant_id", user.TenantId).Where("user_id", user.UserId).Where("source", consts.SourceWechatMp).Delete()
+		return err
+	})
+}
diff --git a/server/internal/logic/app/app_notification_test.go b/server/internal/logic/app/app_notification_test.go
new file mode 100644
index 0000000..cb8f479
--- /dev/null
+++ b/server/internal/logic/app/app_notification_test.go
@@ -0,0 +1,111 @@
+package app
+
+import (
+	"context"
+	"github.com/gogf/gf/v2/frame/g"
+	"testing"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/contexts"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/do"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/entity"
+)
+
+func TestWarningPreferenceIsolationAndBinding(t *testing.T) {
+	ctx := context.Background()
+	db := g.DB()
+	statements := []string{
+		"CREATE TABLE sys_user (user_id INTEGER PRIMARY KEY, tenant_id TEXT, user_name TEXT, password TEXT, deleted_at DATETIME)",
+		"CREATE TABLE sys_social (id INTEGER PRIMARY KEY, tenant_id TEXT, user_id INTEGER, source TEXT, open_id TEXT, deleted_at DATETIME)",
+		"CREATE TABLE sys_config (config_id INTEGER PRIMARY KEY AUTOINCREMENT, tenant_id TEXT, config_key TEXT, config_value TEXT, config_name TEXT, config_type TEXT, created_dept INTEGER, created_by INTEGER, updated_by INTEGER, created_at DATETIME, updated_at DATETIME)",
+	}
+	for _, table := range []string{"sys_user", "sys_social", "sys_config"} {
+		_, _ = db.Exec(ctx, "DROP TABLE IF EXISTS "+table)
+	}
+	t.Cleanup(func() {
+		for _, table := range []string{"sys_user", "sys_social", "sys_config"} {
+			_, _ = db.Exec(ctx, "DROP TABLE IF EXISTS "+table)
+		}
+		_ = db.GetCore().ClearCacheAll(ctx)
+	})
+	for _, statement := range statements {
+		if _, err := db.Exec(ctx, statement); err != nil {
+			t.Fatal(err)
+		}
+	}
+	for _, userID := range []int64{101, 102} {
+		if _, err := db.Model("sys_user").Data(do.SysUser{UserId: userID, TenantId: "tenant", UserName: "account", Password: "hash"}).Insert(); err != nil {
+			t.Fatal(err)
+		}
+	}
+	if _, err := db.Model("sys_social").Data(do.SysSocial{Id: 1, TenantId: "tenant", UserId: 101, Source: "wechat_mp", OpenId: "openid"}).Insert(); err != nil {
+		t.Fatal(err)
+	}
+	userCtx := contexts.Set(ctx, &model.Context{User: &model.Identity{BaseClaims: model.BaseClaims{ID: 101, TenantId: "tenant"}}})
+	service := NewAppUser()
+	preference, err := service.WarningPreference(userCtx)
+	if err != nil || !preference.Enabled {
+		t.Fatalf("legacy bound user should remain enabled: %v %v", preference, err)
+	}
+	enabled := false
+	preference, err = service.SaveWarningPreference(userCtx, &model.AppWarningPreferenceParam{Enabled: &enabled})
+	if err != nil || preference.Enabled || !preference.WechatBound {
+		t.Fatalf("disable must preserve binding: %v %v", preference, err)
+	}
+	enabled = true
+	preference, err = service.SaveWarningPreference(userCtx, &model.AppWarningPreferenceParam{Enabled: &enabled})
+	if err != nil || !preference.Enabled {
+		t.Fatalf("enable failed: %v %v", preference, err)
+	}
+	otherCtx := contexts.Set(ctx, &model.Context{User: &model.Identity{BaseClaims: model.BaseClaims{ID: 102, TenantId: "tenant"}}})
+	if _, err := service.SaveWarningPreference(otherCtx, &model.AppWarningPreferenceParam{Enabled: &enabled}); err == nil {
+		t.Fatal("unbound account must not enable")
+	}
+	if _, err := service.SaveWarningPreference(userCtx, &model.AppWarningPreferenceParam{}); err == nil {
+		t.Fatal("missing enabled must be rejected")
+	}
+	if _, err := service.WarningPreference(context.Background()); err == nil {
+		t.Fatal("anonymous access must fail")
+	}
+	count, err := db.Model("sys_config").Where("tenant_id", "tenant").Where("config_key", warningPreferenceKey(101)).Count()
+	if err != nil || count != 1 {
+		t.Fatalf("expected one persisted preference: %d %v", count, err)
+	}
+	if _, err := db.Model("sys_social").Data(do.SysSocial{Id: 2, TenantId: "other", UserId: 101, Source: "wechat_mp", OpenId: "other"}).Insert(); err != nil {
+		t.Fatal(err)
+	}
+	if _, err := db.Exec(ctx, "ALTER TABLE sys_social RENAME TO sys_social_unavailable"); err != nil {
+		t.Fatal(err)
+	}
+	if err := unbindWechatBindings(userCtx, &entity.SysUser{UserId: 101, TenantId: "tenant"}); err == nil {
+		t.Fatal("failed binding deletion must fail transaction")
+	}
+	persisted, err := db.Model("sys_config").Where("tenant_id", "tenant").Where("config_key", warningPreferenceKey(101)).Value("config_value")
+	if err != nil || persisted.String() != "1" {
+		t.Fatalf("failed unbind changed preference: %v %v", persisted, err)
+	}
+	if _, err := db.Exec(ctx, "ALTER TABLE sys_social_unavailable RENAME TO sys_social"); err != nil {
+		t.Fatal(err)
+	}
+	if err := unbindWechatBindings(userCtx, &entity.SysUser{UserId: 101, TenantId: "tenant"}); err != nil {
+		t.Fatal(err)
+	}
+	remaining, err := db.Model("sys_social").Where("tenant_id", "tenant").Count()
+	if err != nil || remaining != 0 {
+		t.Fatalf("unbind did not delete current binding: %d %v", remaining, err)
+	}
+	remaining, err = db.Model("sys_social").Where("tenant_id", "other").Count()
+	if err != nil || remaining != 1 {
+		t.Fatalf("unbind changed other tenant: %d %v", remaining, err)
+	}
+	preference, err = service.WarningPreference(userCtx)
+	if err != nil || preference.Enabled || preference.WechatBound {
+		t.Fatalf("unbind must disable notifications: %v %v", preference, err)
+	}
+	if _, err := db.Model("sys_social").Data(do.SysSocial{Id: 3, TenantId: "tenant", UserId: 101, Source: "wechat_mp", OpenId: "new"}).Insert(); err != nil {
+		t.Fatal(err)
+	}
+	preference, err = service.WarningPreference(userCtx)
+	if err != nil || preference.Enabled || !preference.WechatBound {
+		t.Fatalf("rebind must not silently enable: %v %v", preference, err)
+	}
+}
diff --git a/server/internal/logic/app/app_onelink_mock.go b/server/internal/logic/app/app_onelink_mock.go
index cfca567..cdf004d 100644
--- a/server/internal/logic/app/app_onelink_mock.go
+++ b/server/internal/logic/app/app_onelink_mock.go
@@ -106,7 +106,7 @@ func newAppOneLinkMockClient(ctx context.Context) (*appOneLinkMockClient, error)
 
 func appLoadOneLinkMockConfig(ctx context.Context) (*appOneLinkMockConfig, error) {
 	cfg := &appOneLinkMockConfig{
-		BaseURL: "https://iotlcm.example.com/onelink-mock/v5",
+		BaseURL: "https://example.com/onelink-mock/v5",
 		Timeout: "10s",
 	}
 	if err := g.Cfg().MustGet(ctx, "upstream.onelinkMock").Scan(cfg); err != nil {
diff --git a/server/internal/logic/app/app_payment_wechat.go b/server/internal/logic/app/app_payment_wechat.go
index 5ee0708..bb2eaf8 100644
--- a/server/internal/logic/app/app_payment_wechat.go
+++ b/server/internal/logic/app/app_payment_wechat.go
@@ -84,7 +84,7 @@ type appWechatPayRequest struct {
 
 func appWechatPayUrl(payRequest *appWechatPayRequest) string {
 	if payRequest == nil {
-		return "物联网卡管理平台"
+		return ""
 	}
 	return payRequest.PayUrl
 }
@@ -875,7 +875,7 @@ func appWechatH5AppName(cfg *appWechatConfig) string {
 	if cfg.H5.AppName != "" {
 		return cfg.H5.AppName
 	}
-	return "物联网卡管理平台"
+	return "示例企业"
 }
 
 func appParseWechatPayTime(value string) *gtime.Time {
diff --git a/server/internal/logic/app/app_upstream_session.go b/server/internal/logic/app/app_upstream_session.go
index d14ad03..415c027 100644
--- a/server/internal/logic/app/app_upstream_session.go
+++ b/server/internal/logic/app/app_upstream_session.go
@@ -19,6 +19,8 @@ type appUpstreamDefaultConfig struct {
 	Timeout    string `json:"timeout"`
 }
 
+type appDiagnosisProxyContextKey struct{}
+
 type appUpstreamSimKey struct {
 	ChanKey string `json:"chanKey,omitempty"`
 	ICCID   string `json:"iccid,omitempty"`
@@ -39,7 +41,7 @@ type appUpstreamSimQueryItem struct {
 }
 
 type appUpstreamSimQueryResponse struct {
-	Code    int                       `json:"code"`
+	Code    *int                      `json:"code"`
 	Message string                    `json:"message"`
 	Data    []appUpstreamSimQueryItem `json:"data"`
 }
@@ -57,7 +59,7 @@ func queryAppCardRealtimeSessionWithKey(ctx context.Context, row *appCardQueryRo
 	if err == nil {
 		return session, "upstream", nil
 	}
-	if !appUpstreamMockFallbackEnabled(ctx) {
+	if ctx.Value(appDiagnosisProxyContextKey{}) == true || !appUpstreamMockFallbackEnabled(ctx) {
 		return nil, "upstream", err
 	}
 	g.Log().Debugf(ctx, "app card session upstream query failed, fallback to onelink mock, iccid:%s, err:%+v", appCardQueryLogIccid(row), err)
@@ -90,6 +92,7 @@ func queryAppCardRealtimeSessionByUpstreamWithKey(ctx context.Context, simKey *a
 		if err = json.Unmarshal(item.ResData, &session); err != nil {
 			return nil, gerror.Wrap(err, "解析上游会话响应失败")
 		}
+		appNormalizeUpstreamSession(&session, item.ResData)
 		if !session.isZero() {
 			return &session, nil
 		}
@@ -97,6 +100,42 @@ func queryAppCardRealtimeSessionByUpstreamWithKey(ctx context.Context, simKey *a
 	return nil, nil
 }
 
+func appNormalizeUpstreamSession(session *appOneLinkMockSimSessionItem, raw json.RawMessage) {
+	if session == nil {
+		return
+	}
+	if session.ApnId == "" {
+		session.ApnId = appDiagnosisRawString(raw, "apnId", "apn")
+	}
+	if session.Rat == "" {
+		session.Rat = appDiagnosisRawString(raw, "rat", "accessType", "netModel")
+	}
+	if session.Imei == "" {
+		session.Imei = appDiagnosisRawString(raw, "imei", "IMEI")
+	}
+	if session.Ipv4 == "" {
+		session.Ipv4 = appDiagnosisRawString(raw, "ipv4", "ipv4Address", "ip")
+	}
+	if session.Ipv6 == "" {
+		session.Ipv6 = appDiagnosisRawString(raw, "ipv6", "ipv6Address")
+	}
+	if session.Ipv6Prefix == "" {
+		session.Ipv6Prefix = appDiagnosisRawString(raw, "ipv6Prefix")
+	}
+	if session.CreateTime == "" {
+		session.CreateTime = appDiagnosisRawString(raw, "createTime", "startTime")
+	}
+	if session.Status == "" {
+		session.Status = appDiagnosisRawString(raw, "status", "onlineStatus", "sessionStatus")
+	}
+	if session.Status == "1" && appDiagnosisRawString(raw, "onlineStatus", "sessionStatus") != "" {
+		session.Status = "-1"
+	}
+	if session.Status == "2" {
+		session.Status = "-2"
+	}
+}
+
 func queryAppCardRealtimeSessionByMock(ctx context.Context, row *appCardQueryRow) (*appOneLinkMockSimSessionItem, error) {
 	client, err := newAppOneLinkMockClient(ctx)
 	if err != nil {
@@ -171,18 +210,29 @@ func queryAppUpstreamSimWithKey(ctx context.Context, simKey *appUpstreamSimKey,
 	client.SetDiscovery(gsvc.GetRegistry())
 	appSetUpstreamClientTimeout(client, timeout)
 	client.SetHeader("Content-Type", "application/json")
+	if ctx.Value(appDiagnosisProxyContextKey{}) == true {
+		token := strings.TrimSpace(g.Cfg().MustGet(ctx, "upstream.appDiagnosisToken").String())
+		if token == "" {
+			return nil, gerror.New("诊断代理内部令牌未配置")
+		}
+		requestURL = appUpstreamURL(cfg.ClientName, "/internal/app-diagnosis"+path)
+		client.SetHeader("X-App-Diagnosis-Token", token)
+	}
 	resp, err := client.Post(ctx, requestURL, string(body))
 	if err != nil {
 		return nil, gerror.Wrap(err, "请求上游信息失败")
 	}
 	defer resp.Close()
 	respBody := resp.ReadAll()
+	if ctx.Value(appDiagnosisProxyContextKey{}) == true && resp.StatusCode == http.StatusNotFound && strings.Contains(string(respBody), "诊断通道不可用") {
+		return nil, gerror.New(appDiagnosisNotIncludedMessage)
+	}
 
 	output := appUpstreamSimQueryResponse{}
 	if err = json.Unmarshal(respBody, &output); err != nil {
 		return nil, gerror.Wrap(err, "解析上游响应失败")
 	}
-	if output.Code != 0 {
+	if resp.StatusCode < 200 || resp.StatusCode >= 300 || output.Code == nil || *output.Code != 0 {
 		message := strings.TrimSpace(output.Message)
 		if message == "" {
 			message = "上游查询失败"
diff --git a/server/internal/logic/app/app_upstream_session_test.go b/server/internal/logic/app/app_upstream_session_test.go
new file mode 100644
index 0000000..a5979db
--- /dev/null
+++ b/server/internal/logic/app/app_upstream_session_test.go
@@ -0,0 +1,132 @@
+package app
+
+import (
+	"context"
+	"encoding/json"
+	"fmt"
+	"net/http"
+	"net/http/httptest"
+	"testing"
+
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/entity"
+
+	"github.com/gogf/gf/v2/frame/g"
+	"github.com/gogf/gf/v2/os/gcfg"
+)
+
+func TestAppNormalizeUpstreamSessionSupportsTelecomFields(t *testing.T) {
+	session := &appOneLinkMockSimSessionItem{}
+	raw := json.RawMessage(`{"onlineStatus":"0","accessType":"5G","ipv4Address":"192.0.2.10","ipv6Address":"2001:db8::1","apn":"CMIOT","startTime":"2026-10-08 10:00:00"}`)
+	appNormalizeUpstreamSession(session, raw)
+	if session.Status != "0" || session.Rat != "5G" || session.Ipv4 != "192.0.2.10" || session.Ipv6 != "2001:db8::1" || session.ApnId != "CMIOT" {
+		t.Fatalf("normalized session = %+v", session)
+	}
+}
+
+func TestAppDiagnosisUpstreamUsesProxy(t *testing.T) {
+	proxy := httptest.NewServer(http.HandlerFunc(func(writer http.ResponseWriter, request *http.Request) {
+		if request.Method != http.MethodPost || request.URL.Path != "/sim/query/sim-basic-info" {
+			t.Errorf("request = %s %s", request.Method, request.URL.Path)
+		}
+		var input appUpstreamSimQueryInput
+		if err := json.NewDecoder(request.Body).Decode(&input); err != nil {
+			t.Errorf("decode proxy request: %v", err)
+		} else if len(input.SimKeys) != 1 || input.SimKeys[0].ChanKey != "test-channel" || input.SimKeys[0].ICCID != "test-iccid" || input.SimKeys[0].IMSI != "test-imsi" || input.SimKeys[0].MSISDN != "test-msisdn" {
+			t.Errorf("proxy sim key = %+v", input.SimKeys)
+		}
+		writer.Header().Set("Content-Type", "application/json")
+		_, _ = writer.Write([]byte(`{"code":0,"data":[{"code":0,"resData":{"simStatus":"0"}}]}`))
+	}))
+	defer proxy.Close()
+
+	config, err := gcfg.NewAdapterContent(fmt.Sprintf(`{"upstream":{"default":{"clientName":%q,"timeout":"2s"},"gateway":{"clientName":"http://127.0.0.1:1"}}}`, proxy.URL))
+	if err != nil {
+		t.Fatalf("configure upstream: %v", err)
+	}
+	original := g.Cfg().GetAdapter()
+	g.Cfg().SetAdapter(config)
+	t.Cleanup(func() { g.Cfg().SetAdapter(original) })
+
+	items, err := queryAppUpstreamSimWithKey(context.Background(), &appUpstreamSimKey{
+		ChanKey: "test-channel", ICCID: "test-iccid", IMSI: "test-imsi", MSISDN: "test-msisdn",
+	}, "/sim/query/sim-basic-info", nil)
+	if err != nil {
+		t.Fatalf("query upstream through proxy: %v", err)
+	}
+	if len(items) != 1 || items[0].Code != 0 {
+		t.Fatalf("proxy response = %+v", items)
+	}
+}
+
+func TestAppDiagnosisUsesDedicatedProxyRoute(t *testing.T) {
+	proxy := httptest.NewServer(http.HandlerFunc(func(writer http.ResponseWriter, request *http.Request) {
+		if request.URL.Path != "/internal/app-diagnosis/sim/query/sim-basic-info" {
+			t.Errorf("unexpected path: %s", request.URL.Path)
+		}
+		if request.Header.Get("X-App-Diagnosis-Token") != "test-internal-token" {
+			t.Errorf("missing internal token")
+		}
+		writer.Header().Set("Content-Type", "application/json")
+		_, _ = writer.Write([]byte(`{"code":0,"data":[{"code":0,"resData":{"simStatus":"0"}}]}`))
+	}))
+	defer proxy.Close()
+	adapter, err := gcfg.NewAdapterContent(fmt.Sprintf(`{"upstream":{"default":{"clientName":%q,"timeout":"2s"},"appDiagnosisToken":"test-internal-token"}}`, proxy.URL))
+	if err != nil {
+		t.Fatal(err)
+	}
+	previous := g.Cfg().GetAdapter()
+	g.Cfg().SetAdapter(adapter)
+	t.Cleanup(func() { g.Cfg().SetAdapter(previous) })
+	ctx := context.WithValue(context.Background(), appDiagnosisProxyContextKey{}, true)
+	items, err := queryAppUpstreamSimWithKey(ctx, &appUpstreamSimKey{ChanKey: "test-channel", ICCID: "test-iccid"}, "/sim/query/sim-basic-info", nil)
+	if err != nil || len(items) != 1 || items[0].Code != 0 {
+		t.Fatalf("dedicated proxy request: items=%+v err=%v", items, err)
+	}
+}
+
+func TestAppDiagnosisDoesNotFallbackToMockSession(t *testing.T) {
+	proxy := httptest.NewServer(http.HandlerFunc(func(writer http.ResponseWriter, request *http.Request) {
+		writer.Header().Set("Content-Type", "application/json")
+		_, _ = writer.Write([]byte(`{"code":500,"message":"upstream unavailable"}`))
+	}))
+	defer proxy.Close()
+	adapter, err := gcfg.NewAdapterContent(fmt.Sprintf(`{"upstream":{"default":{"clientName":%q,"timeout":"2s"},"appDiagnosisToken":"test-token","onelinkMock":{"enabled":true}}}`, proxy.URL))
+	if err != nil {
+		t.Fatal(err)
+	}
+	previous := g.Cfg().GetAdapter()
+	g.Cfg().SetAdapter(adapter)
+	t.Cleanup(func() { g.Cfg().SetAdapter(previous) })
+	ctx := context.WithValue(context.Background(), appDiagnosisProxyContextKey{}, true)
+	session, source, err := queryAppCardRealtimeSessionWithKey(ctx, &appCardQueryRow{}, &appUpstreamSimKey{ChanKey: "test-channel", ICCID: "test-iccid"})
+	if err == nil || session != nil || source != "upstream" {
+		t.Fatalf("session = %+v, source = %q, err = %v; want upstream failure without mock fallback", session, source, err)
+	}
+}
+
+func TestAppDiagnosisTreatsMissingProxyChannelAsNotIncluded(t *testing.T) {
+	proxy := httptest.NewServer(http.HandlerFunc(func(writer http.ResponseWriter, request *http.Request) {
+		writer.WriteHeader(http.StatusNotFound)
+		_, _ = writer.Write([]byte(`Not Found{"code":404,"message":"诊断通道不可用"}`))
+	}))
+	defer proxy.Close()
+	adapter, err := gcfg.NewAdapterContent(fmt.Sprintf(`{"upstream":{"default":{"clientName":%q,"timeout":"2s"},"appDiagnosisToken":"test-internal-token"}}`, proxy.URL))
+	if err != nil {
+		t.Fatal(err)
+	}
+	previous := g.Cfg().GetAdapter()
+	g.Cfg().SetAdapter(adapter)
+	t.Cleanup(func() { g.Cfg().SetAdapter(previous) })
+	ctx := context.WithValue(context.Background(), appDiagnosisProxyContextKey{}, true)
+	_, err = queryAppUpstreamSimWithKey(ctx, &appUpstreamSimKey{ChanKey: "missing-channel", ICCID: "test-iccid"}, "/sim/query/sim-basic-info", nil)
+	if err == nil || err.Error() != appDiagnosisNotIncludedMessage {
+		t.Fatalf("missing proxy channel error = %v", err)
+	}
+	row := &appCardQueryRow{TSimCardInfo: entity.TSimCardInfo{
+		Iccid: "test-iccid", Imsi: "test-imsi", Msisdn: "test-msisdn", ChanKey: "missing-channel",
+	}}
+	_, err = (&sAppDiagnosis{}).prepareDiagnosisSimKey(ctx, row)
+	if err == nil || err.Error() != appDiagnosisNotIncludedMessage {
+		t.Fatalf("legacy diagnosis preflight error = %v", err)
+	}
+}
diff --git a/server/internal/logic/app/app_user.go b/server/internal/logic/app/app_user.go
index 5f11140..02bac07 100644
--- a/server/internal/logic/app/app_user.go
+++ b/server/internal/logic/app/app_user.go
@@ -111,6 +111,16 @@ func (s *sAppUser) UpdateInfo(ctx context.Context, param *model.AppUpdateUserInf
 }
 
 func (s *sAppUser) BindWechat(ctx context.Context, param *model.AppWechatBindParam) (res *model.AppWechatBindModel, err error) {
+	if param == nil || strings.TrimSpace(param.WxCode) == "" {
+		return nil, gerror.New("微信登录凭证不能为空")
+	}
+	config, err := appLoadWechatConfig(ctx)
+	if err != nil {
+		return nil, err
+	}
+	if !config.Mini.Enabled {
+		return nil, gerror.New("微信小程序绑定暂未启用")
+	}
 	user, err := appCurrentUser(ctx)
 	if err != nil {
 		return nil, err
@@ -122,6 +132,9 @@ func (s *sAppUser) BindWechat(ctx context.Context, param *model.AppWechatBindPar
 	if err != nil {
 		return nil, err
 	}
+	if !userInfo.WechatBound {
+		return nil, gerror.New("微信绑定未完成，请检查小程序配置后重试")
+	}
 	return &model.AppWechatBindModel{
 		Success:  true,
 		UserInfo: userInfo,
@@ -291,6 +304,10 @@ func getAppUserInfoById(ctx context.Context, userId int64) (res *model.AppUserIn
 		}
 	}
 	roleName, roleKey, roleNames := appLoadBoundRoleNames(ctx, user.UserId)
+	isTopLevelEnterprise, err := appIsTopLevelEnterprise(ctx, user)
+	if err != nil {
+		return nil, err
+	}
 
 	wechatBound, wechatBindText, err := appUserWechatBindingStatus(ctx, user)
 	if err != nil {
@@ -298,6 +315,7 @@ func getAppUserInfoById(ctx context.Context, userId int64) (res *model.AppUserIn
 	}
 
 	return &model.AppUserInfoModel{
+		IsTopLevelEnterprise:  isTopLevelEnterprise,
 		UserId:                user.UserId,
 		TenantId:              user.TenantId,
 		DeptId:                user.DeptId,
@@ -321,6 +339,25 @@ func getAppUserInfoById(ctx context.Context, userId int64) (res *model.AppUserIn
 	}, nil
 }
 
+// 顶级企业按机构层级识别，不依赖运营、管理员等角色名称。
+func appIsTopLevelEnterprise(ctx context.Context, user *entity.SysUser) (bool, error) {
+	if user == nil || user.UserId <= 0 || user.UserType == consts.SysUserTypeAPP || appIsTerminalUser(ctx, user) {
+		return false, nil
+	}
+	if user.UserId == 1 {
+		return true, nil
+	}
+	if user.DeptId <= 0 {
+		return false, nil
+	}
+	var dept *entity.SysDept
+	err := dao.SysDept.Ctx(ctx).Fields("dept_id", "parent_id", "status", "deleted_at").Where("tenant_id", user.TenantId).Where("dept_id", user.DeptId).Scan(&dept)
+	if err != nil {
+		return false, gerror.Wrap(err, "查询诊断企业层级失败")
+	}
+	return dept != nil && dept.ParentId == 0 && dept.Status == "0" && (dept.DeletedAt == nil || dept.DeletedAt.IsZero()), nil
+}
+
 // appLoadBoundRoleNames 读取账户在 sys_user_role 中绑定的角色，并关联 sys_role 返回真实角色名称。
 // 这样既保留原有账号类型 role，又能让前端按真实的角色表名称展示账户身份标识。
 func appLoadBoundRoleNames(ctx context.Context, userId int64) (roleName string, roleKey string, roleNames []string) {
diff --git a/server/internal/logic/app/app_warning.go b/server/internal/logic/app/app_warning.go
index 7fd6fff..bc5e1ab 100644
--- a/server/internal/logic/app/app_warning.go
+++ b/server/internal/logic/app/app_warning.go
@@ -87,15 +87,37 @@ func (s *sAppWarning) ConfigMeta(ctx context.Context) (res *model.AppWarningConf
 	if err != nil {
 		return nil, err
 	}
+	var summary appWarningNotifySummary
+	if err = appWarningNotifySummaryModel(s.configModel(ctx), user).Scan(&summary); err != nil {
+		return nil, gerror.Wrap(err, "查询当前账号预警提醒配置失败")
+	}
 	return &model.AppWarningConfigMetaModel{
-		TemplateId:       appWarningWechatTemplateId(ctx),
-		TemplateReady:    appWarningTemplateReady(ctx),
-		WechatBound:      wechatBound,
-		WechatBindText:   wechatBindText,
-		AppNotifyEnabled: appWarningNotifyEnabledValue(nil),
+		TemplateId:        appWarningWechatTemplateId(ctx),
+		TemplateReady:     appWarningTemplateReady(ctx),
+		WechatBound:       wechatBound,
+		WechatBindText:    wechatBindText,
+		AppNotifyEnabled:  appWarningNotifyEnabledValue(nil),
+		ActiveConfigCount: summary.ActiveConfigCount,
+		NotifyConfigCount: summary.NotifyConfigCount,
 	}, nil
 }
 
+type appWarningNotifySummary struct {
+	ActiveConfigCount int `orm:"active_config_count"`
+	NotifyConfigCount int `orm:"notify_config_count"`
+}
+
+func appWarningNotifySummaryModel(mod *gdb.Model, user *entity.SysUser) *gdb.Model {
+	columns := dao.TWarnConfig.Columns()
+	return mod.
+		Where(columns.TenantId, user.TenantId).
+		Where(columns.CreatedBy, user.UserId).
+		Where(columns.ItemType, appWarningItemTypeCard).
+		Where(columns.WarnUnit, appWarningUnitMb).
+		Where(columns.IsEnabled, 1).
+		Fields("COUNT(*) AS active_config_count, COALESCE(SUM(CASE WHEN " + columns.AppNotifyEnabled + " = 1 THEN 1 ELSE 0 END), 0) AS notify_config_count")
+}
+
 func (s *sAppWarning) ConfigSave(ctx context.Context, param *model.AppWarningConfigSaveParam) (res *model.AppWarningConfigSaveModel, err error) {
 	if err = normalizeAppWarningSaveParam(param); err != nil {
 		return nil, err
diff --git a/server/internal/logic/app/app_warning_summary_test.go b/server/internal/logic/app/app_warning_summary_test.go
new file mode 100644
index 0000000..a0db432
--- /dev/null
+++ b/server/internal/logic/app/app_warning_summary_test.go
@@ -0,0 +1,53 @@
+package app
+
+import (
+	"context"
+	"path/filepath"
+	"testing"
+
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/do"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/entity"
+
+	_ "github.com/gogf/gf/contrib/drivers/sqlite/v2"
+	"github.com/gogf/gf/v2/database/gdb"
+)
+
+func TestAppWarningNotifySummaryScopesConfiguration(t *testing.T) {
+	ctx := context.Background()
+	db, err := gdb.New(gdb.ConfigNode{Type: "sqlite", Name: filepath.Join(t.TempDir(), "warning.db")})
+	if err != nil {
+		t.Fatal(err)
+	}
+	t.Cleanup(func() { _ = db.Close(ctx) })
+	_, err = db.Exec(ctx, "CREATE TABLE t_warn_config (id INTEGER PRIMARY KEY, tenant_id TEXT, created_by INTEGER, item_type INTEGER, warn_unit INTEGER, is_enabled INTEGER, app_notify_enabled INTEGER)")
+	if err != nil {
+		t.Fatal(err)
+	}
+	configs := []do.TWarnConfig{
+		{TenantId: "tenant-a", CreatedBy: 11, ItemType: 1, WarnUnit: 1, IsEnabled: 1, AppNotifyEnabled: 1},
+		{TenantId: "tenant-a", CreatedBy: 11, ItemType: 1, WarnUnit: 1, IsEnabled: 1, AppNotifyEnabled: 0},
+		{TenantId: "tenant-b", CreatedBy: 11, ItemType: 1, WarnUnit: 1, IsEnabled: 1, AppNotifyEnabled: 1},
+		{TenantId: "tenant-a", CreatedBy: 12, ItemType: 1, WarnUnit: 1, IsEnabled: 1, AppNotifyEnabled: 1},
+		{TenantId: "tenant-a", CreatedBy: 11, ItemType: 1, WarnUnit: 1, IsEnabled: 0, AppNotifyEnabled: 1},
+		{TenantId: "tenant-a", CreatedBy: 11, ItemType: 1, WarnUnit: 3, IsEnabled: 1, AppNotifyEnabled: 1},
+		{TenantId: "tenant-a", CreatedBy: 11, ItemType: 2, WarnUnit: 1, IsEnabled: 1, AppNotifyEnabled: 1},
+	}
+	if _, err = db.Model("t_warn_config").Ctx(ctx).Data(configs).Insert(); err != nil {
+		t.Fatal(err)
+	}
+	var summary appWarningNotifySummary
+	user := &entity.SysUser{TenantId: "tenant-a", UserId: 11}
+	if err = appWarningNotifySummaryModel(db.Model("t_warn_config").Ctx(ctx), user).Scan(&summary); err != nil {
+		t.Fatal(err)
+	}
+	if summary.ActiveConfigCount != 2 || summary.NotifyConfigCount != 1 {
+		t.Fatalf("summary = %+v, expected active=2, notify=1", summary)
+	}
+	user.UserId = 99
+	if err = appWarningNotifySummaryModel(db.Model("t_warn_config").Ctx(ctx), user).Scan(&summary); err != nil {
+		t.Fatal(err)
+	}
+	if summary.ActiveConfigCount != 0 || summary.NotifyConfigCount != 0 {
+		t.Fatalf("empty summary = %+v, expected zero counts", summary)
+	}
+}
diff --git a/server/internal/logic/app/app_work_order.go b/server/internal/logic/app/app_work_order.go
index 0063a38..7372a8b 100644
--- a/server/internal/logic/app/app_work_order.go
+++ b/server/internal/logic/app/app_work_order.go
@@ -2,10 +2,13 @@ package app
 
 import (
 	"context"
+	"regexp"
 	"strings"
+	"unicode/utf8"
 
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/dao"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/appidentity"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/do"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/entity"
@@ -14,6 +17,7 @@ import (
 	"github.com/gogf/gf/v2/database/gdb"
 	"github.com/gogf/gf/v2/encoding/gjson"
 	"github.com/gogf/gf/v2/errors/gerror"
+	"github.com/gogf/gf/v2/frame/g"
 	"github.com/gogf/gf/v2/os/gtime"
 )
 
@@ -42,9 +46,38 @@ func init() {
 
 func (s *sAppWorkOrder) Upload(ctx context.Context) (output *model.SysOssUploadModel, err error) {
 	if err = appEnsureFeatureAccess(ctx, "workorder:create"); err != nil {
+		if err = appEnsureFeatureAccess(ctx, "workorder:detail"); err != nil {
+			return nil, err
+		}
+	}
+	request := g.RequestFromCtx(ctx)
+	if request == nil {
+		return nil, gerror.New("上传请求无效")
+	}
+	file := request.GetUploadFile("file")
+	if file == nil {
+		return nil, gerror.New("请选择附件")
+	}
+	if file.Size > 10*1024*1024 {
+		return nil, gerror.New("单个附件不能超过10MB")
+	}
+	originalName, err := appWorkOrderOriginalName(request.GetForm("originalName").String())
+	if err != nil {
 		return nil, err
 	}
-	return service.SysOss().Upload(ctx, &model.SysOssUploadParam{FileType: "file"})
+	output, err = service.SysOss().Upload(ctx, &model.SysOssUploadParam{FileType: "file"})
+	if err != nil || originalName == "" {
+		return output, err
+	}
+	columns := dao.SysOss.Columns()
+	if _, err = dao.SysOss.Ctx(ctx).
+		Where(columns.OssId, output.OssId).
+		Where(columns.TenantId, output.TenantId).
+		Data(do.SysOss{OriginalName: originalName}).Update(); err != nil {
+		return nil, gerror.Wrap(err, "保存工单附件原名失败")
+	}
+	output.OriginalName = originalName
+	return output, nil
 }
 
 func (s *sAppWorkOrder) List(ctx context.Context, param *model.AppWorkOrderListParam) (items []*model.AppWorkOrderModel, total int, err error) {
@@ -70,11 +103,30 @@ func (s *sAppWorkOrder) List(ctx context.Context, param *model.AppWorkOrderListP
 	}
 
 	mod := s.ownerModel(ctx, user)
+	if param.Scope != "" && param.Scope != "all" && param.Scope != "submitted" && param.Scope != "received" {
+		return nil, 0, gerror.New("工单范围不正确")
+	}
+	if param.Scope == "submitted" {
+		mod = mod.Where(dao.TWoMain.Columns().CreatorUserId, user.UserId)
+	}
+	if param.Scope == "received" {
+		if appIsTerminalUser(ctx, user) {
+			return nil, 0, gerror.New("终端账号不能查看待处理工单")
+		}
+		columns := dao.TWoMain.Columns()
+		mod = mod.WhereNot(columns.CreatorUserId, user.UserId).Where("("+columns.HandlerUserId+" = ? OR ("+columns.HandlerDeptId+" = ? AND ? > 0))", user.UserId, user.DeptId, user.DeptId)
+	}
+	if param.CurrentStatus < 0 || param.CurrentStatus > 5 {
+		return nil, 0, gerror.New("工单状态不正确")
+	}
 	if param.CurrentStatus > 0 {
 		mod = mod.Where(dao.TWoMain.Columns().CurrentStatus, param.CurrentStatus)
 	}
-	if param.WoType > 0 {
-		mod = mod.Where(dao.TWoMain.Columns().WoType, param.WoType)
+	if param.WoType != nil {
+		if *param.WoType < 0 || *param.WoType > 5 {
+			return nil, 0, gerror.New("工单类型不正确")
+		}
+		mod = mod.Where(dao.TWoMain.Columns().WoType, *param.WoType)
 	}
 
 	keyword := strings.TrimSpace(param.Keyword)
@@ -142,17 +194,59 @@ func (s *sAppWorkOrder) Detail(ctx context.Context, param *model.AppWorkOrderDet
 
 	res = appWorkOrderToModel(row)
 	var communications []*entity.TWoCommunication
-	if err = dao.TWoCommunication.Ctx(ctx).
+	communicationModel := dao.TWoCommunication.Ctx(ctx).
 		Where(dao.TWoCommunication.Columns().TenantId, user.TenantId).
-		Where(dao.TWoCommunication.Columns().WoNo, row.WoNo).
-		OrderAsc(dao.TWoCommunication.Columns().Id).
+		Where(dao.TWoCommunication.Columns().WoNo, row.WoNo)
+	if param.BeforeId > 0 {
+		communicationModel = communicationModel.WhereLT(dao.TWoCommunication.Columns().Id, param.BeforeId)
+	}
+	if err = communicationModel.OrderDesc(dao.TWoCommunication.Columns().Id).Limit(21).
 		Scan(&communications); err != nil {
 		return nil, gerror.Wrap(err, "查询工单沟通记录失败")
 	}
+	res.HasMoreCommunications = len(communications) > 20
+	if res.HasMoreCommunications {
+		communications = communications[:20]
+	}
+	for left, right := 0, len(communications)-1; left < right; left, right = left+1, right-1 {
+		communications[left], communications[right] = communications[right], communications[left]
+	}
 	res.Communications = appWorkOrderCommunicationsToModels(communications)
+	urls := append([]string{}, res.AttachmentUrls...)
+	for _, communication := range communications {
+		if communication != nil && communication.AttachmentUrls != nil {
+			urls = append(urls, communication.AttachmentUrls.Var().Strings()...)
+		}
+	}
+	res.AttachmentNames, err = appWorkOrderAttachmentNames(ctx, user.TenantId, urls)
+	if err != nil {
+		return nil, err
+	}
+	res.Actions = appAvailableWorkOrderActions(ctx, row, user)
+	res.IsCreator = row.CreatorUserId == user.UserId
+	var records []*entity.TWoRecord
+	if err = dao.TWoRecord.Ctx(ctx).Where(dao.TWoRecord.Columns().TenantId, user.TenantId).Where(dao.TWoRecord.Columns().WoNo, row.WoNo).OrderAsc(dao.TWoRecord.Columns().Id).Scan(&records); err != nil {
+		return nil, gerror.Wrap(err, "查询工单进度失败")
+	}
+	for _, record := range records {
+		res.Records = append(res.Records, &model.AppWorkOrderProgressModel{Id: record.Id, OperationType: record.OperationType, OperationText: appWorkOrderOperationText(record), BeforeStatus: record.BeforeStatus, AfterStatus: record.AfterStatus, CreatedAt: record.CreatedAt})
+	}
 	return res, nil
 }
 
+var appWorkOrderPhonePattern = regexp.MustCompile(`^1[3-9]\d{9}$`)
+
+func appWorkOrderContactPhone(phone string) (string, error) {
+	value := strings.TrimSpace(phone)
+	if value == "" {
+		return "", gerror.New("请输入创建人手机号")
+	}
+	if !appWorkOrderPhonePattern.MatchString(value) {
+		return "", gerror.New("请输入正确的手机号")
+	}
+	return value, nil
+}
+
 func (s *sAppWorkOrder) Create(ctx context.Context, param *model.AppWorkOrderCreateParam) (res *model.AppWorkOrderModel, err error) {
 	if err = appEnsureFeatureAccess(ctx, "workorder:create"); err != nil {
 		return nil, err
@@ -178,6 +272,22 @@ func (s *sAppWorkOrder) Create(ctx context.Context, param *model.AppWorkOrderCre
 		return nil, err
 	}
 
+	creatorPhone, err := appWorkOrderContactPhone(param.CreatorPhone)
+	if err != nil {
+		return nil, err
+	}
+	if utf8.RuneCountInString(title) > 100 || utf8.RuneCountInString(content) > 2000 {
+		return nil, gerror.New("标题最多100字，问题描述最多2000字")
+	}
+	if err = s.validateRelatedWorkOrder(ctx, user, param); err != nil {
+		return nil, err
+	}
+	if err = appValidateWorkOrderAttachments(param.AttachmentUrls); err != nil {
+		return nil, err
+	}
+	if err = s.validateAttachmentOwnership(ctx, user, param.AttachmentUrls); err != nil {
+		return nil, err
+	}
 	now := gtime.Now()
 	woNo := appCardBatchNo("WO", user.UserId, now)
 	createdDept := user.DeptId
@@ -194,6 +304,7 @@ func (s *sAppWorkOrder) Create(ctx context.Context, param *model.AppWorkOrderCre
 		return nil, err
 	}
 
+	var created *entity.TWoMain
 	err = dao.TWoMain.Transaction(ctx, func(ctx context.Context, tx gdb.TX) error {
 		_, err := dao.TWoMain.Ctx(ctx).TX(tx).Data(do.TWoMain{
 			WoNo:          woNo,
@@ -201,12 +312,12 @@ func (s *sAppWorkOrder) Create(ctx context.Context, param *model.AppWorkOrderCre
 			RelatedId:     param.RelatedId,
 			Title:         title,
 			Content:       content,
-			Attachment:    firstAttachment(param.AttachmentUrls),
+			Attachment:    appWorkOrderEncodeAttachments(param.AttachmentUrls),
 			CreatorType:   creatorType,
 			CreatorDeptId: createdDept,
 			CreatorUserId: user.UserId,
 			CreatorName:   creatorName,
-			CreatorPhone:  strings.TrimSpace(user.Phonenumber),
+			CreatorPhone:  creatorPhone,
 			AssignDeptId:  handlerDeptId,
 			AssignUserId:  handlerUserId,
 			CurrentStatus: appWorkOrderStatusProcessing,
@@ -260,73 +371,110 @@ func (s *sAppWorkOrder) Create(ctx context.Context, param *model.AppWorkOrderCre
 		}).Insert(); err != nil {
 			return gerror.Wrap(err, "创建工单操作记录失败")
 		}
+		if err := dao.TWoMain.Ctx(ctx).TX(tx).
+			Where(dao.TWoMain.Columns().TenantId, user.TenantId).
+			Where(dao.TWoMain.Columns().CreatorUserId, user.UserId).
+			Where(dao.TWoMain.Columns().WoNo, woNo).
+			Scan(&created); err != nil {
+			return gerror.Wrap(err, "读取新建工单失败")
+		}
 		return nil
 	})
 	if err != nil {
 		return nil, err
 	}
 
-	return s.Detail(ctx, &model.AppWorkOrderDetailParam{WoNo: woNo})
+	return appWorkOrderToModel(created), nil
 }
 
 func (s *sAppWorkOrder) ownerModel(ctx context.Context, user *entity.SysUser) *gdb.Model {
 	columns := dao.TWoMain.Columns()
 	mod := dao.TWoMain.Ctx(ctx).
 		Where(columns.TenantId, user.TenantId)
-	if appIsTerminalUser(ctx, user) {
+	terminal, identityErr := appidentity.IsTerminalUser(ctx, user)
+	if identityErr != nil {
+		g.Log().Errorf(ctx, "工单用户身份查询失败: %v", identityErr)
+		return mod.Where("1 = 0")
+	}
+	if terminal {
 		return mod.Where(columns.CreatorUserId, user.UserId)
 	}
-	return appApplyEnterpriseDataScope(
-		ctx,
-		user,
-		mod,
-		columns.CreatorDeptId,
-		columns.CreatorUserId,
-		func(legacyMod *gdb.Model) *gdb.Model {
-			return legacyMod.Where(
-				"("+columns.CreatorDeptId+" = ? OR "+columns.CreatorUserId+" = ?)",
-				user.DeptId,
-				user.UserId,
-			)
-		},
-	)
+	scope, err := appResolveEnterpriseDataScope(ctx, user)
+	if err != nil {
+		g.Log().Errorf(ctx, "work order data scope: %v", err)
+		return mod.Where("1 = 0")
+	}
+	if scope.All {
+		return mod
+	}
+	condition := ""
+	args := []any{}
+	if !scope.Configured {
+		condition = columns.CreatorDeptId + " = ? OR " + columns.CreatorUserId + " = ?"
+		args = append(args, user.DeptId, user.UserId)
+	} else {
+		if len(scope.DeptIds) > 0 {
+			condition = columns.CreatorDeptId + " IN (?)"
+			args = append(args, scope.DeptIds)
+		}
+		if len(scope.UserIds) > 0 {
+			if condition != "" {
+				condition += " OR "
+			}
+			condition += columns.CreatorUserId + " IN (?)"
+			args = append(args, scope.UserIds)
+		}
+	}
+	if condition != "" {
+		condition += " OR "
+	}
+	condition += columns.HandlerUserId + " = ?"
+	args = append(args, user.UserId)
+	if user.DeptId > 0 {
+		condition += " OR " + columns.HandlerDeptId + " = ?"
+		args = append(args, user.DeptId)
+	}
+	return mod.Where("("+condition+")", args...)
 }
 
 func appWorkOrderHandler(ctx context.Context, user *entity.SysUser, createdDept int64) (deptId int64, userId int64, err error) {
-	if user == nil {
-		return createdDept, 0, nil
+	if user == nil || strings.TrimSpace(user.TenantId) == "" || createdDept <= 0 {
+		return 0, 0, gerror.New("当前账号未配置有效的工单所属部门")
 	}
-
-	var topDept *entity.SysDept
+	columns := dao.SysDept.Columns()
+	var currentDept *entity.SysDept
 	if err = dao.SysDept.Ctx(ctx).
-		Where(dao.SysDept.Columns().TenantId, user.TenantId).
-		Where(dao.SysDept.Columns().ParentId, 0).
-		OrderAsc(dao.SysDept.Columns().OrderNum).
-		OrderAsc(dao.SysDept.Columns().DeptId).
+		Fields(columns.DeptId, columns.ParentId, columns.Leader, columns.Status).
+		Where(columns.TenantId, user.TenantId).
+		Where(columns.DeptId, createdDept).
+		WhereNull(columns.DeletedAt).
 		Limit(1).
-		Scan(&topDept); err != nil {
-		return 0, 0, gerror.Wrap(err, "查询顶级工单处理部门失败")
+		Scan(&currentDept); err != nil {
+		return 0, 0, gerror.Wrap(err, "查询工单所属部门失败")
 	}
-	if topDept != nil && topDept.DeptId > 0 {
-		return topDept.DeptId, topDept.Leader, nil
+	if currentDept == nil || currentDept.DeptId <= 0 || currentDept.Status != "0" {
+		return 0, 0, gerror.New("工单所属部门不存在或已停用")
 	}
-
-	deptId = createdDept
-	if deptId <= 0 {
-		deptId = appUserDeptOrDefault(user)
+	if currentDept.ParentId == 0 {
+		return currentDept.DeptId, currentDept.Leader, nil
 	}
-	var dept *entity.SysDept
+	if currentDept.ParentId == currentDept.DeptId {
+		return 0, 0, gerror.New("工单所属部门的上级配置异常")
+	}
+	var parentDept *entity.SysDept
 	if err = dao.SysDept.Ctx(ctx).
-		Where(dao.SysDept.Columns().TenantId, user.TenantId).
-		Where(dao.SysDept.Columns().DeptId, deptId).
+		Fields(columns.DeptId, columns.Leader, columns.Status).
+		Where(columns.TenantId, user.TenantId).
+		Where(columns.DeptId, currentDept.ParentId).
+		WhereNull(columns.DeletedAt).
 		Limit(1).
-		Scan(&dept); err != nil {
-		return 0, 0, gerror.Wrap(err, "查询工单处理部门失败")
+		Scan(&parentDept); err != nil {
+		return 0, 0, gerror.Wrap(err, "查询上级工单处理部门失败")
 	}
-	if dept != nil && dept.Leader > 0 {
-		userId = dept.Leader
+	if parentDept == nil || parentDept.DeptId <= 0 || parentDept.Status != "0" {
+		return 0, 0, gerror.New("上级工单处理部门不存在或已停用，请联系管理员")
 	}
-	return deptId, userId, nil
+	return parentDept.DeptId, parentDept.Leader, nil
 }
 
 func appWorkOrderToModel(row *entity.TWoMain) *model.AppWorkOrderModel {
@@ -335,6 +483,12 @@ func appWorkOrderToModel(row *entity.TWoMain) *model.AppWorkOrderModel {
 	}
 	return &model.AppWorkOrderModel{
 		Id:                row.Id,
+		Actions:           []string{},
+		ResolveTime:       row.ResolveTime,
+		CloseTime:         row.CloseTime,
+		SatisfactionLevel: row.SatisfactionLevel,
+		EvalContent:       row.EvalContent,
+		EvalTime:          row.EvalTime,
 		WoNo:              row.WoNo,
 		WoType:            row.WoType,
 		WoTypeText:        appWorkOrderTypeText(row.WoType),
@@ -373,20 +527,13 @@ func appWorkOrderCommunicationsToModels(rows []*entity.TWoCommunication) []*mode
 	return items
 }
 
-func firstAttachment(urls []string) string {
-	if len(urls) == 0 {
-		return ""
-	}
-	return strings.TrimSpace(urls[0])
-}
-
 func decodeAttachmentUrls(value string) []string {
 	value = strings.TrimSpace(value)
 	if value == "" {
 		return nil
 	}
 	var urls []string
-	if err := gjson.DecodeTo(value, &urls); err == nil && len(urls) > 0 {
+	if err := gjson.DecodeTo(value, &urls); err == nil && (strings.HasPrefix(value, "[") || value == "null") {
 		return urls
 	}
 	return []string{value}
diff --git a/server/internal/logic/app/app_work_order_action.go b/server/internal/logic/app/app_work_order_action.go
new file mode 100644
index 0000000..2e78148
--- /dev/null
+++ b/server/internal/logic/app/app_work_order_action.go
@@ -0,0 +1,378 @@
+package app
+
+import (
+	"context"
+	"net/url"
+	"strings"
+	"time"
+	"unicode/utf8"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/rabbitmq"
+
+	"github.com/gogf/gf/v2/database/gdb"
+	"github.com/gogf/gf/v2/encoding/gjson"
+	"github.com/gogf/gf/v2/errors/gerror"
+	"github.com/gogf/gf/v2/frame/g"
+	"github.com/gogf/gf/v2/os/gtime"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/dao"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/appidentity"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/contexts"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/mcache"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/do"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/entity"
+)
+
+func appValidateWorkOrderAttachments(urls []string) error {
+	if len(urls) > 6 {
+		return gerror.New("最多上传6个附件")
+	}
+	for _, value := range urls {
+		parsed, err := url.Parse(strings.TrimSpace(value))
+		if err != nil || parsed == nil || len(value) > 2048 || strings.TrimSpace(value) == "" {
+			return gerror.New("附件地址不正确")
+		}
+		if parsed.User != nil || ((parsed.Scheme == "http" || parsed.Scheme == "https") && parsed.Host == "") {
+			return gerror.New("附件地址不正确")
+		}
+		if parsed.Scheme != "" && parsed.Scheme != "http" && parsed.Scheme != "https" {
+			return gerror.New("附件地址不正确")
+		}
+		if parsed.Scheme == "" && (!strings.HasPrefix(value, "/") || strings.HasPrefix(value, "//")) {
+			return gerror.New("附件地址不正确")
+		}
+	}
+	return nil
+}
+
+func appWorkOrderActions(row *entity.TWoMain, userID int64) []string {
+	actions := []string{}
+	if row == nil || row.CreatorUserId != userID || userID == 0 {
+		return actions
+	}
+	switch row.CurrentStatus {
+	case appWorkOrderStatusAssigned, appWorkOrderStatusProcessing:
+		return []string{"reply", "cancel"}
+	case appWorkOrderStatusResolved:
+		return []string{"reopen", "confirm"}
+	case appWorkOrderStatusClosed:
+		if row.EvalTime == nil && row.SatisfactionLevel == 0 {
+			return []string{"evaluate"}
+		}
+	}
+	return actions
+}
+
+func appWorkOrderHandlerActions(row *entity.TWoMain, user *entity.SysUser) []string {
+	if row == nil || user == nil || user.UserId <= 0 || row.TenantId != user.TenantId || row.CreatorUserId == user.UserId {
+		return []string{}
+	}
+	if row.HandlerUserId != user.UserId && (user.DeptId <= 0 || row.HandlerDeptId != user.DeptId) {
+		return []string{}
+	}
+	switch row.CurrentStatus {
+	case appWorkOrderStatusAssigned, appWorkOrderStatusProcessing:
+		return []string{"reply", "resolve", "transfer"}
+	case appWorkOrderStatusResolved:
+		return []string{"reply", "close"}
+	}
+	return []string{}
+}
+
+func appWorkOrderHandlerPermission(action string) string {
+	if action == "reply" || action == "reopen" {
+		return "cpm:gen:tWoCommunication:message"
+	}
+	if action == "confirm" {
+		action = "close"
+	}
+	return "cpm:gen:tWoMain:" + action
+}
+
+func appEnsureWorkOrderHandlerPermission(ctx context.Context, action string) error {
+	if contexts.IsSuperAdmin(ctx) {
+		return nil
+	}
+	codes, _, err := mcache.GetUserAccessCodeList(ctx, contexts.GetUserId(ctx))
+	if err != nil {
+		return gerror.Wrap(err, "读取工单办理权限失败")
+	}
+	if !appAccessCodesMatchExpression(codes, appWorkOrderHandlerPermission(action)) {
+		return gerror.New("暂无工单办理权限")
+	}
+	return nil
+}
+
+func appAvailableWorkOrderActions(ctx context.Context, row *entity.TWoMain, user *entity.SysUser) []string {
+	creatorActions := appWorkOrderActions(row, user.UserId)
+	terminal, err := appidentity.IsTerminalUser(ctx, user)
+	if err != nil {
+		return []string{}
+	}
+	if terminal {
+		return creatorActions
+	}
+	actions := []string{}
+	for _, action := range append(creatorActions, appWorkOrderHandlerActions(row, user)...) {
+		if appEnsureWorkOrderHandlerPermission(ctx, action) == nil {
+			actions = append(actions, action)
+		}
+	}
+	return actions
+}
+
+func appWorkOrderOperationText(row *entity.TWoRecord) string {
+	if row.BeforeStatus == appWorkOrderStatusResolved && row.AfterStatus == appWorkOrderStatusProcessing {
+		return "用户反馈未解决，继续处理"
+	}
+	switch row.OperationType {
+	case 0:
+		return "提交工单"
+	case 1:
+		return "工单已分派"
+	case 2:
+		return "跟进处理"
+	case 3:
+		return "已解决，等待确认"
+	case 4:
+		return "工单已完结"
+	case 5:
+		return "工单已取消"
+	default:
+		return "工单进度更新"
+	}
+}
+
+func (s *sAppWorkOrder) Action(ctx context.Context, param *model.AppWorkOrderActionParam) error {
+	if err := appEnsureFeatureAccess(ctx, "workorder:detail"); err != nil {
+		return err
+	}
+	if param == nil || strings.TrimSpace(param.WoNo) == "" {
+		return gerror.New("工单编号不能为空")
+	}
+	user, err := appCurrentUser(ctx)
+	if err != nil {
+		return err
+	}
+	param.Content = strings.TrimSpace(param.Content)
+	if utf8.RuneCountInString(param.Content) > 2000 {
+		return gerror.New("内容最多2000字")
+	}
+	if err = appValidateWorkOrderAttachments(param.AttachmentUrls); err != nil {
+		return err
+	}
+	if err = s.validateAttachmentOwnership(ctx, user, param.AttachmentUrls); err != nil {
+		return err
+	}
+	var current *entity.TWoMain
+	if err := s.ownerModel(ctx, user).Where(dao.TWoMain.Columns().WoNo, strings.TrimSpace(param.WoNo)).Scan(&current); err != nil {
+		return gerror.Wrap(err, "读取工单失败")
+	}
+	if current == nil {
+		return gerror.New("工单不存在或无权访问")
+	}
+	terminal, identityErr := appidentity.IsTerminalUser(ctx, user)
+	if identityErr != nil {
+		return gerror.Wrap(identityErr, "读取工单用户身份失败")
+	}
+	if terminal && current.CreatorUserId != user.UserId {
+		return gerror.New("终端账号不能办理其他用户工单")
+	}
+	if !terminal {
+		if err := appEnsureWorkOrderHandlerPermission(ctx, param.Action); err != nil {
+			return err
+		}
+	}
+	err = s.applyWorkOrderAction(ctx, user, param)
+	if err == nil && param.Action == "resolve" && rabbitmq.Enabled(ctx) {
+		var resolved *entity.TWoMain
+		if scanErr := dao.TWoMain.Ctx(ctx).Fields(dao.TWoMain.Columns().ResolveTime).Where(dao.TWoMain.Columns().TenantId, user.TenantId).Where(dao.TWoMain.Columns().WoNo, param.WoNo).Scan(&resolved); scanErr == nil && resolved != nil && resolved.ResolveTime != nil {
+			if publishErr := rabbitmq.PublishDelayed(ctx, consts.QueueWorkOrderAutoCloseDelay, consts.QueueWorkOrderAutoClose, 72*time.Hour, model.WorkOrderAutoCloseMessage{WoNo: param.WoNo, ResolveTimeTs: resolved.ResolveTime.Timestamp()}); publishErr != nil {
+				g.Log().Errorf(ctx, "工单延时关闭消息发送失败，补偿扫描仍可处理: %v", publishErr)
+			}
+		} else if scanErr != nil {
+			g.Log().Errorf(ctx, "读取工单解决时间失败: %v", scanErr)
+		}
+	}
+	return err
+}
+
+// applyWorkOrderAction 在事务内验证操作人、租户和状态。
+func (s *sAppWorkOrder) applyWorkOrderAction(ctx context.Context, user *entity.SysUser, param *model.AppWorkOrderActionParam) error {
+	return dao.TWoMain.Transaction(ctx, func(ctx context.Context, tx gdb.TX) error {
+		var current *entity.TWoMain
+		query := dao.TWoMain.Ctx(ctx).TX(tx).Where(dao.TWoMain.Columns().TenantId, user.TenantId).Where(dao.TWoMain.Columns().WoNo, strings.TrimSpace(param.WoNo))
+		// SQLite 通过事务串行化写入，不支持 SELECT FOR UPDATE。
+		if g.DB().GetConfig().Type != "sqlite" {
+			query = query.LockUpdate()
+		}
+		if err := query.Scan(&current); err != nil {
+			return gerror.Wrap(err, "读取工单失败")
+		}
+		if current != nil && current.CreatorUserId != user.UserId {
+			if err := appEnsureWorkOrderHandlerPermission(ctx, param.Action); err != nil {
+				return err
+			}
+		}
+		allowed := false
+		for _, action := range append(appWorkOrderActions(current, user.UserId), appWorkOrderHandlerActions(current, user)...) {
+			if action == param.Action {
+				allowed = true
+				break
+			}
+		}
+		if !allowed {
+			return gerror.New("工单状态已变化或无权执行此操作，请刷新后重试")
+		}
+		now := gtime.Now()
+		update := do.TWoMain{UpdatedBy: user.UserId}
+		after, operation := current.CurrentStatus, -1
+		switch param.Action {
+		case "reply", "reopen":
+			if param.Content == "" && len(param.AttachmentUrls) == 0 {
+				return gerror.New("请输入回复内容或上传附件")
+			}
+			if param.Action == "reopen" && param.Content == "" {
+				return gerror.New("请说明问题尚未解决的原因")
+			}
+			if param.Action == "reopen" {
+				after, operation = appWorkOrderStatusProcessing, 2
+				update.CurrentStatus = after
+			}
+			commType := 1
+			if current.CreatorUserId != user.UserId {
+				commType = 0
+			}
+			communication := do.TWoCommunication{WoNo: current.WoNo, CommType: commType, SenderDeptId: user.DeptId, SenderUserId: user.UserId, SenderName: appFirstNotEmpty(user.NickName, user.UserName), Content: param.Content, TenantId: user.TenantId, CreatedDept: user.DeptId, CreatedBy: user.UserId, UpdatedBy: user.UserId}
+			if len(param.AttachmentUrls) > 0 {
+				communication.AttachmentUrls = gjson.New(param.AttachmentUrls)
+			}
+			if current.CreatorUserId != user.UserId && current.FirstResponseTime == nil {
+				update.FirstResponseTime = now
+			}
+			if _, err := dao.TWoCommunication.Ctx(ctx).TX(tx).Data(communication).Insert(); err != nil {
+				return gerror.Wrap(err, "保存工单回复失败")
+			}
+		case "transfer":
+			var topDept *entity.SysDept
+			if err := dao.SysDept.Ctx(ctx).TX(tx).Where(dao.SysDept.Columns().TenantId, user.TenantId).Where(dao.SysDept.Columns().ParentId, 0).Where(dao.SysDept.Columns().Status, "0").Fields(dao.SysDept.Columns().DeptId, dao.SysDept.Columns().Leader, dao.SysDept.Columns().Status).OrderAsc(dao.SysDept.Columns().OrderNum).OrderAsc(dao.SysDept.Columns().DeptId).Scan(&topDept); err != nil {
+				return gerror.Wrap(err, "查询顶级部门失败")
+			}
+			if topDept == nil || topDept.DeptId <= 0 {
+				return gerror.New("未找到启用的同租户顶级部门")
+			}
+			if topDept.DeptId == current.HandlerDeptId && topDept.Leader == current.HandlerUserId {
+				return gerror.New("工单已由顶级部门处理，无需重复转单")
+			}
+			after, operation = appWorkOrderStatusProcessing, 1
+			update.AssignDeptId, update.AssignUserId = topDept.DeptId, topDept.Leader
+			update.HandlerDeptId, update.HandlerUserId, update.CurrentStatus = topDept.DeptId, topDept.Leader, after
+		case "resolve":
+			after, operation = appWorkOrderStatusResolved, 3
+			update.CurrentStatus, update.ResolveTime = after, now
+			update.HandlerDeptId, update.HandlerUserId = user.DeptId, user.UserId
+		case "confirm", "close":
+			after, operation = appWorkOrderStatusClosed, 4
+			update.CurrentStatus, update.CloseTime = after, now
+		case "cancel":
+			after, operation = appWorkOrderStatusCanceled, 5
+			update.CurrentStatus, update.CloseTime = after, now
+		case "evaluate":
+			if param.SatisfactionLevel < 1 || param.SatisfactionLevel > 5 {
+				return gerror.New("请选择1至5星评价")
+			}
+			update.SatisfactionLevel, update.EvalContent, update.EvalTime = param.SatisfactionLevel, param.Content, now
+		}
+		result, err := dao.TWoMain.Ctx(ctx).TX(tx).Where(dao.TWoMain.Columns().Id, current.Id).Where(dao.TWoMain.Columns().TenantId, user.TenantId).Where(dao.TWoMain.Columns().CurrentStatus, current.CurrentStatus).Data(update).Update()
+		if err != nil {
+			return gerror.Wrap(err, "更新工单失败")
+		}
+		affected, err := result.RowsAffected()
+		if err != nil {
+			return err
+		}
+		if affected == 0 && param.Action != "reply" {
+			return gerror.New("工单已更新，请刷新后重试")
+		}
+		if operation >= 0 {
+			if _, err := dao.TWoRecord.Ctx(ctx).TX(tx).Data(do.TWoRecord{WoNo: current.WoNo, TargetDeptId: update.HandlerDeptId, TargetUserId: update.HandlerUserId, OperationType: operation, OperationDeptId: user.DeptId, OperationUserId: user.UserId, BeforeStatus: current.CurrentStatus, AfterStatus: after, TenantId: user.TenantId, CreatedDept: user.DeptId, CreatedBy: user.UserId, UpdatedBy: user.UserId}).Insert(); err != nil {
+				return gerror.Wrap(err, "保存工单进度失败")
+			}
+		}
+		if current.CreatorUserId != user.UserId && (param.Action == "reply" || param.Action == "resolve") {
+			title := "工单收到回复"
+			content := param.Content
+			if param.Action == "resolve" {
+				title, content = "工单待确认解决", "问题已标记解决，请在72小时内确认或反馈未解决。"
+			}
+			if err := appSaveWorkOrderNotice(ctx, tx, current, user.UserId, title, content); err != nil {
+				return err
+			}
+		}
+		return nil
+	})
+}
+
+func appSaveWorkOrderNotice(ctx context.Context, tx gdb.TX, current *entity.TWoMain, operator int64, title, content string) error {
+	if current == nil || current.CreatorUserId <= 0 || current.CreatorUserId == operator {
+		return nil
+	}
+	id, err := dao.TMessageLog.Ctx(ctx).TX(tx).Data(do.TMessageLog{MessageType: 1, SendUserType: current.CreatorType, UserIds: gjson.New([]int64{current.CreatorUserId}), MessageTitle: title, MessageContent: content, MessageLink: "/pages/business/views/workOrderDetail/index?woNo=" + url.QueryEscape(current.WoNo), SendTime: gtime.Now(), IsRecall: 0, TenantId: current.TenantId, CreatedDept: current.CreatorDeptId, CreatedBy: operator}).InsertAndGetId()
+	if err != nil {
+		return gerror.Wrap(err, "保存工单通知失败")
+	}
+	_, err = dao.TUserMessage.Ctx(ctx).TX(tx).Data(do.TUserMessage{MessageLogId: id, UserId: current.CreatorUserId, IsRead: 0, TenantId: current.TenantId, CreatedDept: current.CreatorDeptId, CreatedBy: operator}).Insert()
+	return gerror.Wrap(err, "保存工单用户通知失败")
+}
+
+// validateRelatedWorkOrder 复用卡片和订单的数据范围，禁止关联其他用户的业务。
+func (s *sAppWorkOrder) validateRelatedWorkOrder(ctx context.Context, user *entity.SysUser, param *model.AppWorkOrderCreateParam) error {
+	if param.RelatedId == 0 {
+		return nil
+	}
+	if param.RelatedId < 0 {
+		return gerror.New("关联业务不存在或无权访问")
+	}
+	var count int
+	var err error
+	switch param.WoType {
+	case 0:
+		count, err = NewAppCard().visibleCardModel(ctx, user).Where(dao.TSimCardInfo.Table()+"."+dao.TSimCardInfo.Columns().Id, param.RelatedId).Count()
+	case 3:
+		count, err = NewAppOrder().ownerOrderModel(ctx, user).Where(dao.TOrder.Table()+"."+dao.TOrder.Columns().Id, param.RelatedId).Count()
+	default:
+		return gerror.New("当前类型不支持关联业务，请在描述中提供相关信息")
+	}
+	if err != nil {
+		return gerror.Wrap(err, "查询关联业务失败")
+	}
+	if count == 0 {
+		return gerror.New("关联业务不存在或无权访问")
+	}
+	return nil
+}
+
+func appWorkOrderEncodeAttachments(urls []string) string {
+	if len(urls) == 0 {
+		return ""
+	}
+	return gjson.MustEncodeString(urls)
+}
+
+// validateAttachmentOwnership 只接受当前用户在本租户上传的附件。
+func (s *sAppWorkOrder) validateAttachmentOwnership(ctx context.Context, user *entity.SysUser, urls []string) error {
+	columns := dao.SysOss.Columns()
+	for _, value := range urls {
+		var file *entity.SysOss
+		if err := dao.SysOss.Ctx(ctx).Where(columns.TenantId, user.TenantId).Where(columns.CreatedBy, user.UserId).Where(columns.Url, value).Limit(1).Scan(&file); err != nil {
+			return gerror.Wrap(err, "校验工单附件失败")
+		}
+		if file == nil || file.OssId == 0 {
+			return gerror.New("附件不存在或不属于当前用户，请重新上传")
+		}
+		if file.FileSize > 10*1024*1024 {
+			return gerror.New("单个附件不能超过10MB")
+		}
+	}
+	return nil
+}
diff --git a/server/internal/logic/app/app_work_order_action_test.go b/server/internal/logic/app/app_work_order_action_test.go
new file mode 100644
index 0000000..915b6de
--- /dev/null
+++ b/server/internal/logic/app/app_work_order_action_test.go
@@ -0,0 +1,246 @@
+package app
+
+import (
+	"context"
+	_ "github.com/gogf/gf/contrib/drivers/sqlite/v2"
+	"github.com/gogf/gf/v2/database/gdb"
+	"github.com/gogf/gf/v2/frame/g"
+	"github.com/gogf/gf/v2/os/gtime"
+	"path/filepath"
+	"reflect"
+	"testing"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/contexts"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/entity"
+)
+
+func TestWorkOrderCreatorActions(t *testing.T) {
+	cases := []struct {
+		name string
+		row  *entity.TWoMain
+		user int64
+		want []string
+	}{
+		{"other user cannot operate", &entity.TWoMain{CreatorUserId: 1, CurrentStatus: 2}, 2, []string{}},
+		{"anonymous cannot operate", &entity.TWoMain{CreatorUserId: 0, CurrentStatus: 2}, 0, []string{}},
+		{"missing order", nil, 1, []string{}},
+		{"processing", &entity.TWoMain{CreatorUserId: 1, CurrentStatus: 2}, 1, []string{"reply", "cancel"}},
+		{"resolved", &entity.TWoMain{CreatorUserId: 1, CurrentStatus: 3}, 1, []string{"reopen", "confirm"}},
+		{"closed", &entity.TWoMain{CreatorUserId: 1, CurrentStatus: 4}, 1, []string{"evaluate"}},
+		{"canceled cannot evaluate", &entity.TWoMain{CreatorUserId: 1, CurrentStatus: 5}, 1, []string{}},
+		{"evaluated once", &entity.TWoMain{CreatorUserId: 1, CurrentStatus: 4, EvalTime: gtime.Now()}, 1, []string{}},
+	}
+	for _, tc := range cases {
+		t.Run(tc.name, func(t *testing.T) {
+			if got := appWorkOrderActions(tc.row, tc.user); !reflect.DeepEqual(got, tc.want) {
+				t.Fatalf("actions = %v, want %v", got, tc.want)
+			}
+		})
+	}
+}
+
+func TestWorkOrderHandlerActions(t *testing.T) {
+	user := &entity.SysUser{UserId: 20, DeptId: 30, TenantId: "tenant-a"}
+	for _, tc := range []struct {
+		name string
+		row  *entity.TWoMain
+		want []string
+	}{
+		{"assignee", &entity.TWoMain{TenantId: "tenant-a", CreatorUserId: 10, HandlerUserId: 20, CurrentStatus: 1}, []string{"reply", "resolve", "transfer"}},
+		{"department", &entity.TWoMain{TenantId: "tenant-a", CreatorUserId: 10, HandlerDeptId: 30, CurrentStatus: 2}, []string{"reply", "resolve", "transfer"}},
+		{"resolved", &entity.TWoMain{TenantId: "tenant-a", CreatorUserId: 10, HandlerUserId: 20, CurrentStatus: 3}, []string{"reply", "close"}},
+		{"creator cannot handle", &entity.TWoMain{TenantId: "tenant-a", CreatorUserId: 20, HandlerUserId: 20, CurrentStatus: 2}, []string{}},
+		{"other department", &entity.TWoMain{TenantId: "tenant-a", CreatorUserId: 10, HandlerDeptId: 40, CurrentStatus: 2}, []string{}},
+		{"other tenant", &entity.TWoMain{TenantId: "tenant-b", CreatorUserId: 10, HandlerUserId: 20, CurrentStatus: 2}, []string{}},
+		{"closed", &entity.TWoMain{TenantId: "tenant-a", CreatorUserId: 10, HandlerUserId: 20, CurrentStatus: 4}, []string{}},
+	} {
+		t.Run(tc.name, func(t *testing.T) {
+			if got := appWorkOrderHandlerActions(tc.row, user); !reflect.DeepEqual(got, tc.want) {
+				t.Fatalf("actions=%v want=%v", got, tc.want)
+			}
+		})
+	}
+}
+
+func TestWorkOrderHandlerTransactionAndNotification(t *testing.T) {
+	ctx := contexts.Set(context.Background(), &model.Context{User: &model.Identity{BaseClaims: model.BaseClaims{ID: 20, Roles: []model.Role{{RoleId: consts.SuperAdminRoleId}}}}})
+	previous := gdb.GetConfig("default")
+	if err := gdb.SetConfigGroup("default", gdb.ConfigGroup{{Type: "sqlite", Name: filepath.Join(t.TempDir(), "handler.db")}}); err != nil {
+		t.Fatal(err)
+	}
+	database := g.DB()
+	if err := database.GetCore().ClearCacheAll(ctx); err != nil {
+		t.Fatal(err)
+	}
+	t.Cleanup(func() {
+		if err := database.GetCore().ClearCacheAll(ctx); err != nil {
+			t.Error(err)
+		}
+		if err := database.Close(ctx); err != nil {
+			t.Error(err)
+		}
+		if err := gdb.SetConfigGroup("default", previous); err != nil {
+			t.Error(err)
+		}
+	})
+	for _, sql := range []string{
+		`CREATE TABLE t_wo_main (id INTEGER PRIMARY KEY, wo_no TEXT, tenant_id TEXT, creator_type INTEGER, creator_dept_id INTEGER, creator_user_id INTEGER, handler_dept_id INTEGER, handler_user_id INTEGER, assign_dept_id INTEGER, assign_user_id INTEGER, current_status INTEGER, first_response_time DATETIME, resolve_time DATETIME, close_time DATETIME, eval_time DATETIME, satisfaction_level INTEGER DEFAULT 0, eval_content TEXT, updated_by INTEGER, updated_at DATETIME)`,
+		`CREATE TABLE sys_dept (dept_id INTEGER PRIMARY KEY, tenant_id TEXT, parent_id INTEGER, leader INTEGER, status TEXT, order_num INTEGER, deleted_at DATETIME)`,
+		`CREATE TABLE t_wo_communication (id INTEGER PRIMARY KEY, wo_no TEXT, comm_type INTEGER, sender_dept_id INTEGER, sender_user_id INTEGER, sender_name TEXT, content TEXT, tenant_id TEXT, created_dept INTEGER, created_by INTEGER, updated_by INTEGER, created_at DATETIME, updated_at DATETIME)`,
+		`CREATE TABLE t_wo_record (id INTEGER PRIMARY KEY, wo_no TEXT, operation_type INTEGER, operation_dept_id INTEGER, operation_user_id INTEGER, target_dept_id INTEGER, target_user_id INTEGER, before_status INTEGER, after_status INTEGER, tenant_id TEXT, created_dept INTEGER, created_by INTEGER, updated_by INTEGER, created_at DATETIME, updated_at DATETIME)`,
+		`CREATE TABLE t_message_log (message_log_id INTEGER PRIMARY KEY, message_type INTEGER, send_user_type INTEGER, user_ids TEXT, message_title TEXT, message_content TEXT, message_link TEXT, send_time DATETIME, is_recall INTEGER, tenant_id TEXT, created_dept INTEGER, created_by INTEGER, created_at DATETIME)`,
+		`CREATE TABLE t_user_message (message_id INTEGER PRIMARY KEY, message_log_id INTEGER, user_id INTEGER, is_read INTEGER, tenant_id TEXT, created_dept INTEGER, created_by INTEGER, created_at DATETIME)`,
+		`INSERT INTO t_wo_main(id,wo_no,tenant_id,creator_type,creator_dept_id,creator_user_id,handler_dept_id,handler_user_id,current_status) VALUES(1,'WO-1','tenant-a',2,10,10,30,20,1)`,
+		`INSERT INTO sys_dept(dept_id,tenant_id,parent_id,leader,status,order_num) VALUES(50,'tenant-a',0,51,'0',1)`,
+	} {
+		if _, err := g.DB().Exec(ctx, sql); err != nil {
+			t.Fatal(err)
+		}
+	}
+	if _, err := database.GetCore().GetTablesWithCache(); err != nil {
+		t.Fatal(err)
+	}
+	service := NewAppWorkOrder()
+	handler := &entity.SysUser{UserId: 20, DeptId: 30, TenantId: "tenant-a"}
+	for _, action := range []string{"reply", "transfer", "resolve", "close"} {
+		if err := service.applyWorkOrderAction(ctx, handler, &model.AppWorkOrderActionParam{WoNo: "WO-1", Action: action, Content: "已收到，正在排查"}); action == "resolve" || action == "close" {
+			if err == nil {
+				t.Fatalf("transferred handler unexpectedly performed %s", action)
+			}
+		} else if err != nil {
+			t.Fatalf("%s: %v", action, err)
+		}
+	}
+	status, err := g.DB().GetValue(ctx, "SELECT current_status FROM t_wo_main WHERE id=1")
+	if err != nil || status.Int() != 2 {
+		t.Fatalf("transfer status=%v err=%v", status, err)
+	}
+	handler = &entity.SysUser{UserId: 51, DeptId: 50, TenantId: "tenant-a"}
+	if err := service.applyWorkOrderAction(ctx, handler, &model.AppWorkOrderActionParam{WoNo: "WO-1", Action: "resolve"}); err != nil {
+		t.Fatal(err)
+	}
+	notice, err := g.DB().GetValue(ctx, "SELECT COUNT(*) FROM t_user_message WHERE user_id=10")
+	if err != nil || notice.Int() != 2 {
+		t.Fatalf("notification count=%v err=%v", notice, err)
+	}
+	if err := service.applyWorkOrderAction(ctx, handler, &model.AppWorkOrderActionParam{WoNo: "WO-1", Action: "close"}); err != nil {
+		t.Fatal(err)
+	}
+	if err := service.applyWorkOrderAction(ctx, handler, &model.AppWorkOrderActionParam{WoNo: "WO-1", Action: "reply", Content: "closed"}); err == nil {
+		t.Fatal("replied after close")
+	}
+}
+
+func TestWorkOrderAttachmentCompatibility(t *testing.T) {
+	for _, tc := range []struct {
+		value string
+		want  []string
+	}{
+		{"", nil}, {"[]", []string{}}, {"null", nil}, {"/files/a.png", []string{"/files/a.png"}},
+		{"[\"/a.png\",\"/b.pdf\"]", []string{"/a.png", "/b.pdf"}},
+	} {
+		if got := decodeAttachmentUrls(tc.value); !reflect.DeepEqual(got, tc.want) {
+			t.Fatalf("decode %q = %v, want %v", tc.value, got, tc.want)
+		}
+	}
+	for _, value := range []string{"javascript:alert(1)", "file:///etc/passwd", "//other/a", "", "not-a-url"} {
+		if appValidateWorkOrderAttachments([]string{value}) == nil {
+			t.Fatalf("accepted invalid URL %q", value)
+		}
+	}
+}
+
+func TestWorkOrderActionTransactions(t *testing.T) {
+	ctx := context.Background()
+	previous := gdb.GetConfig("default")
+	if err := gdb.SetConfigGroup("default", gdb.ConfigGroup{{Type: "sqlite", Name: filepath.Join(t.TempDir(), "workorder.db")}}); err != nil {
+		t.Fatal(err)
+	}
+	database := g.DB()
+	if err := database.GetCore().ClearCacheAll(ctx); err != nil {
+		t.Fatal(err)
+	}
+	t.Cleanup(func() {
+		if err := database.GetCore().ClearCacheAll(ctx); err != nil {
+			t.Error(err)
+		}
+		if err := database.Close(ctx); err != nil {
+			t.Error(err)
+		}
+		if err := gdb.SetConfigGroup("default", previous); err != nil {
+			t.Error(err)
+		}
+	})
+	for _, sql := range []string{
+		`CREATE TABLE t_wo_main (id INTEGER PRIMARY KEY, wo_no TEXT, tenant_id TEXT, creator_type INTEGER, creator_dept_id INTEGER, creator_user_id INTEGER, assign_dept_id INTEGER, assign_user_id INTEGER, handler_dept_id INTEGER, handler_user_id INTEGER, first_response_time DATETIME, current_status INTEGER, updated_by INTEGER, updated_at DATETIME, close_time DATETIME, eval_time DATETIME, satisfaction_level INTEGER DEFAULT 0, eval_content TEXT, resolve_time DATETIME)`,
+		`CREATE TABLE t_wo_communication (id INTEGER PRIMARY KEY, wo_no TEXT, comm_type INTEGER, sender_dept_id INTEGER, sender_user_id INTEGER, sender_name TEXT, content TEXT, attachment_urls TEXT, tenant_id TEXT, created_dept INTEGER, created_by INTEGER, updated_by INTEGER, created_at DATETIME, updated_at DATETIME)`,
+		`CREATE TABLE t_wo_record (id INTEGER PRIMARY KEY, wo_no TEXT, operation_type INTEGER, operation_dept_id INTEGER, operation_user_id INTEGER, before_status INTEGER, after_status INTEGER, tenant_id TEXT, created_dept INTEGER, created_by INTEGER, updated_by INTEGER, created_at DATETIME, updated_at DATETIME)`,
+	} {
+		if _, err := g.DB().Exec(ctx, sql); err != nil {
+			t.Fatal(err)
+		}
+	}
+	if _, err := g.DB().Exec(ctx, "INSERT INTO t_wo_main(id,wo_no,tenant_id,creator_user_id,current_status) VALUES(1,'WO-1','tenant-a',10,3),(2,'WO-2','tenant-a',10,3)"); err != nil {
+		t.Fatal(err)
+	}
+	user := &entity.SysUser{UserId: 10, TenantId: "tenant-a", DeptId: 20}
+	if _, err := database.GetCore().GetTablesWithCache(); err != nil {
+		t.Fatal(err)
+	}
+	service := NewAppWorkOrder()
+	run := func(wo, action, content string, who *entity.SysUser, rating int) error {
+		return service.applyWorkOrderAction(ctx, who, &model.AppWorkOrderActionParam{WoNo: wo, Action: action, Content: content, SatisfactionLevel: rating})
+	}
+	if err := run("WO-1", "confirm", "", &entity.SysUser{UserId: 11, TenantId: "tenant-a"}, 0); err == nil {
+		t.Fatal("other user confirmed order")
+	}
+	if err := run("WO-1", "confirm", "", &entity.SysUser{UserId: 10, TenantId: "tenant-b"}, 0); err == nil {
+		t.Fatal("other tenant confirmed order")
+	}
+	if err := run("WO-1", "reopen", "仍无法上网", user, 0); err != nil {
+		t.Fatal(err)
+	}
+	status, err := g.DB().GetValue(ctx, "SELECT current_status FROM t_wo_main WHERE id=1")
+	if err != nil || status.Int() != 2 {
+		t.Fatalf("reopen status=%v err=%v", status, err)
+	}
+	if err := run("WO-1", "confirm", "", user, 0); err == nil {
+		t.Fatal("confirmed processing order")
+	}
+	if err := run("WO-1", "cancel", "", user, 0); err != nil {
+		t.Fatal(err)
+	}
+	if err := run("WO-1", "reply", "cancelled reply", user, 0); err == nil {
+		t.Fatal("replied to canceled order")
+	}
+	if err := run("WO-1", "evaluate", "", user, 5); err == nil {
+		t.Fatal("evaluated canceled order")
+	}
+	if err := run("WO-2", "confirm", "", user, 0); err != nil {
+		t.Fatal(err)
+	}
+	if err := run("WO-2", "evaluate", "满意", user, 5); err != nil {
+		t.Fatal(err)
+	}
+	if err := run("WO-2", "evaluate", "重复评价", user, 1); err == nil {
+		t.Fatal("evaluated twice")
+	}
+	if _, err := g.DB().Exec(ctx, "INSERT INTO t_wo_main(id,wo_no,tenant_id,creator_user_id,current_status) VALUES(3,'WO-3','tenant-a',10,3)"); err != nil {
+		t.Fatal(err)
+	}
+	if _, err := g.DB().Exec(ctx, "DROP TABLE t_wo_record"); err != nil {
+		t.Fatal(err)
+	}
+	if err := run("WO-3", "reopen", "需要继续排查", user, 0); err == nil {
+		t.Fatal("expected record insert failure")
+	}
+	status, err = g.DB().GetValue(ctx, "SELECT current_status FROM t_wo_main WHERE id=3")
+	if err != nil || status.Int() != 3 {
+		t.Fatalf("status did not roll back: %v %v", status, err)
+	}
+	count, err := g.DB().GetValue(ctx, "SELECT COUNT(*) FROM t_wo_communication WHERE wo_no='WO-3'")
+	if err != nil || count.Int() != 0 {
+		t.Fatalf("communication did not roll back: %v %v", count, err)
+	}
+}
diff --git a/server/internal/logic/app/app_work_order_attachment.go b/server/internal/logic/app/app_work_order_attachment.go
new file mode 100644
index 0000000..c5b13cf
--- /dev/null
+++ b/server/internal/logic/app/app_work_order_attachment.go
@@ -0,0 +1,59 @@
+package app
+
+import (
+	"context"
+	"path"
+	"strings"
+	"unicode"
+	"unicode/utf8"
+
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/dao"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/entity"
+
+	"github.com/gogf/gf/v2/errors/gerror"
+)
+
+func appWorkOrderOriginalName(value string) (string, error) {
+	value = strings.TrimSpace(value)
+	if value == "" {
+		return "", nil
+	}
+	name := path.Base(strings.ReplaceAll(value, "\\", "/"))
+	if name == "." || name == ".." || name == "/" || utf8.RuneCountInString(name) > 255 || strings.ContainsFunc(name, unicode.IsControl) {
+		return "", gerror.New("附件文件名无效")
+	}
+	return name, nil
+}
+
+func appWorkOrderAttachmentNames(ctx context.Context, tenantID string, urls []string) (map[string]string, error) {
+	names := make(map[string]string)
+	if len(urls) == 0 || strings.TrimSpace(tenantID) == "" {
+		return names, nil
+	}
+	columns := dao.SysOss.Columns()
+	var files []*entity.SysOss
+	if err := dao.SysOss.Ctx(ctx).
+		Fields(columns.Url, columns.Path, columns.OriginalName).
+		Where(columns.TenantId, tenantID).
+		Where("("+columns.Url+" IN (?) OR "+columns.Path+" IN (?))", urls, urls).
+		OrderAsc(columns.OssId).
+		Scan(&files); err != nil {
+		return nil, gerror.Wrap(err, "查询工单附件原名失败")
+	}
+	requested := make(map[string]bool, len(urls))
+	for _, url := range urls {
+		requested[url] = true
+	}
+	for _, file := range files {
+		name, err := appWorkOrderOriginalName(file.OriginalName)
+		if err != nil || name == "" {
+			continue
+		}
+		for _, url := range []string{file.Url, file.Path} {
+			if requested[url] {
+				names[url] = name
+			}
+		}
+	}
+	return names, nil
+}
diff --git a/server/internal/logic/app/app_work_order_attachment_test.go b/server/internal/logic/app/app_work_order_attachment_test.go
new file mode 100644
index 0000000..fd7b710
--- /dev/null
+++ b/server/internal/logic/app/app_work_order_attachment_test.go
@@ -0,0 +1,73 @@
+package app
+
+import (
+	"context"
+	"path/filepath"
+	"strings"
+	"testing"
+
+	_ "github.com/gogf/gf/contrib/drivers/sqlite/v2"
+	"github.com/gogf/gf/v2/database/gdb"
+	"github.com/gogf/gf/v2/frame/g"
+)
+
+func TestWorkOrderOriginalName(t *testing.T) {
+	cases := []struct {
+		input   string
+		want    string
+		invalid bool
+	}{
+		{"", "", false},
+		{"  排查说明.pdf  ", "排查说明.pdf", false},
+		{"C:\\fakepath\\资费表.xlsx", "资费表.xlsx", false},
+		{"../../说明.docx", "说明.docx", false},
+		{"..", "", true},
+		{"bad\nname.pdf", "", true},
+		{strings.Repeat("字", 256), "", true},
+	}
+	for _, item := range cases {
+		name, err := appWorkOrderOriginalName(item.input)
+		if name != item.want || (err != nil) != item.invalid {
+			t.Fatalf("input=%q, name=%q, err=%v", item.input, name, err)
+		}
+	}
+}
+
+func TestWorkOrderAttachmentNamesTenantAndLegacy(t *testing.T) {
+	ctx := context.Background()
+	previous := gdb.GetConfig("default")
+	if err := gdb.SetConfigGroup("default", gdb.ConfigGroup{{Type: "sqlite", Name: filepath.Join(t.TempDir(), "attachment.db")}}); err != nil {
+		t.Fatal(err)
+	}
+	database := g.DB()
+	if err := database.GetCore().ClearTableFields(ctx, "sys_oss"); err != nil {
+		t.Fatal(err)
+	}
+	t.Cleanup(func() {
+		_ = database.GetCore().ClearTableFields(ctx, "sys_oss")
+		_ = database.Close(ctx)
+		_ = gdb.SetConfigGroup("default", previous)
+	})
+	statements := []string{
+		`CREATE TABLE sys_oss (oss_id INTEGER, tenant_id TEXT, url TEXT, path TEXT, original_name TEXT)`,
+		`INSERT INTO sys_oss VALUES (1,'A','https://files/upload/random.pdf','resource/upload/random.pdf','排查说明.pdf'),(2,'B','https://files/upload/other.xlsx','resource/upload/other.xlsx','其他租户.xlsx'),(3,'A','https://files/upload/empty.pdf','resource/upload/empty.pdf','')`,
+	}
+	for _, statement := range statements {
+		if _, err := database.Exec(ctx, statement); err != nil {
+			t.Fatal(err)
+		}
+	}
+	names, err := appWorkOrderAttachmentNames(ctx, "A", []string{"https://files/upload/random.pdf", "resource/upload/random.pdf", "https://files/upload/other.xlsx", "https://files/upload/empty.pdf", "missing.pdf"})
+	if err != nil {
+		t.Fatal(err)
+	}
+	if len(names) != 2 || names["https://files/upload/random.pdf"] != "排查说明.pdf" || names["resource/upload/random.pdf"] != "排查说明.pdf" {
+		t.Fatalf("names=%v", names)
+	}
+	for _, tenant := range []string{"", "B"} {
+		names, err = appWorkOrderAttachmentNames(ctx, tenant, []string{"https://files/upload/random.pdf"})
+		if err != nil || len(names) != 0 {
+			t.Fatalf("tenant=%q, names=%v, err=%v", tenant, names, err)
+		}
+	}
+}
diff --git a/server/internal/logic/app/app_work_order_contact_test.go b/server/internal/logic/app/app_work_order_contact_test.go
new file mode 100644
index 0000000..dc8476f
--- /dev/null
+++ b/server/internal/logic/app/app_work_order_contact_test.go
@@ -0,0 +1,44 @@
+package app
+
+import (
+	"encoding/json"
+	"testing"
+
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model"
+)
+
+func TestWorkOrderContactPhone(t *testing.T) {
+	for _, testCase := range []struct {
+		name      string
+		phone     string
+		want      string
+		wantError bool
+	}{
+		{"使用填写的手机号", "13900009000", "13900009000", false},
+		{"去除首尾空格", " 13800008000 ", "13800008000", false},
+		{"空手机号", "", "", true},
+		{"仅空格", " ", "", true},
+		{"位数不正确", "1380013800", "", true},
+		{"前缀不正确", "12800138000", "", true},
+		{"包含非数字", "1380013800a", "", true},
+	} {
+		t.Run(testCase.name, func(t *testing.T) {
+			got, err := appWorkOrderContactPhone(testCase.phone)
+			if got != testCase.want || (err != nil) != testCase.wantError {
+				t.Fatalf("phone = %q, error = %v", got, err)
+			}
+		})
+	}
+}
+
+func TestWorkOrderContactPhoneRequired(t *testing.T) {
+	for _, payload := range []string{`{}`, `{"creatorPhone":null}`, `{"creatorPhone":""}`, `{"creatorPhone":" "}`} {
+		var param model.AppWorkOrderCreateParam
+		if err := json.Unmarshal([]byte(payload), &param); err != nil {
+			t.Fatal(err)
+		}
+		if _, err := appWorkOrderContactPhone(param.CreatorPhone); err == nil {
+			t.Fatalf("未拦截未填写手机号的请求: %s", payload)
+		}
+	}
+}
diff --git a/server/internal/logic/app/app_work_order_handler_test.go b/server/internal/logic/app/app_work_order_handler_test.go
new file mode 100644
index 0000000..ea29a25
--- /dev/null
+++ b/server/internal/logic/app/app_work_order_handler_test.go
@@ -0,0 +1,114 @@
+package app
+
+import (
+	"context"
+	"path/filepath"
+	"testing"
+
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/entity"
+
+	_ "github.com/gogf/gf/contrib/drivers/sqlite/v2"
+	"github.com/gogf/gf/v2/database/gdb"
+	"github.com/gogf/gf/v2/frame/g"
+)
+
+func TestWorkOrderHandlerUsesDirectParent(t *testing.T) {
+	ctx := context.Background()
+	previous := gdb.GetConfig("default")
+	if err := gdb.SetConfigGroup("default", gdb.ConfigGroup{{Type: "sqlite", Name: filepath.Join(t.TempDir(), "handler.db")}}); err != nil {
+		t.Fatal(err)
+	}
+	database := g.DB()
+	if err := database.GetCore().ClearTableFields(ctx, "sys_dept"); err != nil {
+		t.Fatal(err)
+	}
+	t.Cleanup(func() {
+		_ = database.GetCore().ClearTableFields(ctx, "sys_dept")
+		_ = database.Close(ctx)
+		_ = gdb.SetConfigGroup("default", previous)
+	})
+	statements := []string{
+		"CREATE TABLE sys_dept (dept_id INTEGER, tenant_id TEXT, parent_id INTEGER, leader INTEGER, status TEXT, deleted_at DATETIME)",
+		"INSERT INTO sys_dept VALUES (100,'A',0,1,'0',NULL),(200,'A',100,2,'0',NULL),(300,'A',200,3,'0',NULL),(400,'A',300,4,'0',NULL)",
+		"INSERT INTO sys_dept VALUES (500,'A',999,5,'0',NULL),(999,'B',0,99,'0',NULL),(600,'A',700,6,'0',NULL),(700,'A',100,7,'1',NULL)",
+		"INSERT INTO sys_dept VALUES (800,'A',900,8,'0',NULL),(900,'A',100,9,'0','2026-01-01'),(1000,'A',1000,10,'0',NULL),(1100,'A',1200,11,'0',NULL)",
+		"INSERT INTO sys_dept VALUES (1200,'A',100,0,'0',NULL),(1300,'A',100,13,'1',NULL),(1400,'A',100,14,'0','2026-01-01')",
+	}
+	for _, statement := range statements {
+		if _, err := database.Exec(ctx, statement); err != nil {
+			t.Fatal(err)
+		}
+	}
+	cases := []struct {
+		name      string
+		dept      int64
+		wantDept  int64
+		wantUser  int64
+		wantError bool
+	}{
+		{"直属上级而非顶级", 300, 200, 2, false},
+		{"多层代理只向上一级", 400, 300, 3, false},
+		{"顶级部门由本部门处理", 100, 100, 1, false},
+		{"一级代理分派给父级100及其负责人", 200, 100, 1, false},
+		{"无负责人仍归属处理部门", 1100, 1200, 0, false},
+		{"跨租户父级不能接单", 500, 0, 0, true},
+		{"停用父级不能接单", 600, 0, 0, true},
+		{"删除父级不能接单", 800, 0, 0, true},
+		{"部门不能指向自身", 1000, 0, 0, true},
+		{"停用所属部门不能提交", 1300, 0, 0, true},
+		{"删除所属部门不能提交", 1400, 0, 0, true},
+		{"缺失所属部门不能提交", 1500, 0, 0, true},
+	}
+	for _, testCase := range cases {
+		t.Run(testCase.name, func(t *testing.T) {
+			user := &entity.SysUser{UserId: 10, TenantId: "A", DeptId: testCase.dept}
+			deptID, userID, err := appWorkOrderHandler(ctx, user, user.DeptId)
+			if (err != nil) != testCase.wantError {
+				t.Fatalf("error = %v, wantError = %v", err, testCase.wantError)
+			}
+			if deptID != testCase.wantDept || userID != testCase.wantUser {
+				t.Fatalf("handler = (%d, %d), want (%d, %d)", deptID, userID, testCase.wantDept, testCase.wantUser)
+			}
+		})
+	}
+	for _, user := range []*entity.SysUser{nil, {DeptId: 200}, {TenantId: "A"}} {
+		var deptID int64
+		if user != nil {
+			deptID = user.DeptId
+		}
+		if _, _, err := appWorkOrderHandler(ctx, user, deptID); err == nil {
+			t.Fatal("invalid user was assigned")
+		}
+	}
+}
+
+func TestWorkOrderParentDepartmentCanReply(t *testing.T) {
+	row := &entity.TWoMain{
+		TenantId: "A", CreatorDeptId: 175, CreatorUserId: 133,
+		HandlerDeptId: 100, HandlerUserId: 36, CurrentStatus: appWorkOrderStatusProcessing,
+	}
+	cases := []struct {
+		name    string
+		user    entity.SysUser
+		allowed bool
+	}{
+		{"父级部门管理员无需为部门负责人", entity.SysUser{UserId: 1, DeptId: 100, TenantId: "A"}, true},
+		{"父级负责人可以办理", entity.SysUser{UserId: 36, DeptId: 100, TenantId: "A"}, true},
+		{"下级其他用户不能办理", entity.SysUser{UserId: 134, DeptId: 175, TenantId: "A"}, false},
+		{"无关部门不能办理", entity.SysUser{UserId: 200, DeptId: 200, TenantId: "A"}, false},
+		{"跨租户不能办理", entity.SysUser{UserId: 1, DeptId: 100, TenantId: "B"}, false},
+	}
+	for _, testCase := range cases {
+		t.Run(testCase.name, func(t *testing.T) {
+			allowed := false
+			for _, action := range appWorkOrderHandlerActions(row, &testCase.user) {
+				if action == "reply" {
+					allowed = true
+				}
+			}
+			if allowed != testCase.allowed {
+				t.Fatalf("reply=%v, expected=%v", allowed, testCase.allowed)
+			}
+		})
+	}
+}
diff --git a/server/internal/logic/app/app_worker_batch_async.go b/server/internal/logic/app/app_worker_batch_async.go
index d99d9a4..3d7ba66 100644
--- a/server/internal/logic/app/app_worker_batch_async.go
+++ b/server/internal/logic/app/app_worker_batch_async.go
@@ -21,7 +21,7 @@ func appWorkerBatchAsyncEnabled(ctx context.Context) bool {
 	return g.Cfg().MustGet(ctx, "workerBatchAsync.enabled", false).Bool()
 }
 
-func (s *sAppCard) publishWorkerBatchExecute(ctx context.Context, batchNo string, batchType int) error {
+func (s *sAppCard) publishWorkerBatchExecute(ctx context.Context, batchNo string, batchType int, requirePublication ...bool) error {
 	if strings.TrimSpace(batchNo) == "" {
 		return gerror.New("批次号不能为空")
 	}
@@ -39,7 +39,7 @@ func (s *sAppCard) publishWorkerBatchExecute(ctx context.Context, batchNo string
 	})
 	if err != nil {
 		g.Log().Errorf(ctx, "投递 worker 批次失败, queue:%s, batchNo:%s, batchType:%d, err:%+v", queueName, batchNo, batchType, err)
-		if g.Cfg().MustGet(ctx, "workerBatchAsync.failOnPublish", true).Bool() {
+		if (len(requirePublication) > 0 && requirePublication[0]) || g.Cfg().MustGet(ctx, "workerBatchAsync.failOnPublish", true).Bool() {
 			return gerror.Wrap(err, "批次已创建但投递 worker 失败")
 		}
 		return nil
diff --git a/server/internal/logic/app/main_test.go b/server/internal/logic/app/main_test.go
new file mode 100644
index 0000000..1354f30
--- /dev/null
+++ b/server/internal/logic/app/main_test.go
@@ -0,0 +1,20 @@
+package app
+
+import (
+	"fmt"
+	"os"
+	"testing"
+
+	_ "github.com/gogf/gf/contrib/drivers/sqlite/v2"
+	"github.com/gogf/gf/v2/database/gdb"
+	"github.com/gogf/gf/v2/frame/g"
+)
+
+func TestMain(tests *testing.M) {
+	if err := gdb.SetConfigGroup("default", gdb.ConfigGroup{{Type: "sqlite", Link: "sqlite::@file(:memory:)", MaxOpenConnCount: 1}}); err != nil {
+		fmt.Fprintln(os.Stderr, err)
+		os.Exit(1)
+	}
+	g.DB()
+	os.Exit(tests.Run())
+}
diff --git a/server/internal/logic/gen/test_demo.go b/server/internal/logic/gen/test_demo.go
index 4957f1d..a13ba00 100644
--- a/server/internal/logic/gen/test_demo.go
+++ b/server/internal/logic/gen/test_demo.go
@@ -1,7 +1,7 @@
 // Package gen
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 // @AutoGenerate Version
 package gen
diff --git a/server/internal/logic/gen/test_tree.go b/server/internal/logic/gen/test_tree.go
index 11128f4..5d52df4 100644
--- a/server/internal/logic/gen/test_tree.go
+++ b/server/internal/logic/gen/test_tree.go
@@ -1,7 +1,7 @@
 // Package gen
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2026 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 // @AutoGenerate Version
 package gen
diff --git a/server/internal/logic/gen_codes/gen_selects.go b/server/internal/logic/gen_codes/gen_selects.go
index 4f8b648..c610714 100644
--- a/server/internal/logic/gen_codes/gen_selects.go
+++ b/server/internal/logic/gen_codes/gen_selects.go
@@ -1,6 +1,6 @@
 // package gen_codes
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package gen_codes
diff --git a/server/internal/logic/gen_codes/sys_gen_table.go b/server/internal/logic/gen_codes/sys_gen_table.go
index 679d857..8de683a 100644
--- a/server/internal/logic/gen_codes/sys_gen_table.go
+++ b/server/internal/logic/gen_codes/sys_gen_table.go
@@ -1,7 +1,7 @@
 // package gen_codes
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package gen_codes
 
diff --git a/server/internal/logic/info/info.go b/server/internal/logic/info/info.go
index aa0d529..f7749b4 100644
--- a/server/internal/logic/info/info.go
+++ b/server/internal/logic/info/info.go
@@ -2,9 +2,9 @@ package info
 
 import (
 	"context"
+	"runtime"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/service"
-	"runtime"
 
 	"github.com/gogf/gf/v2/frame/g"
 	"github.com/gogf/gf/v2/os/glog"
diff --git a/server/internal/logic/memorydb/memorydb.go b/server/internal/logic/memorydb/memorydb.go
index a1cf091..e6b1041 100644
--- a/server/internal/logic/memorydb/memorydb.go
+++ b/server/internal/logic/memorydb/memorydb.go
@@ -3,10 +3,10 @@ package memorydb
 import (
 	"context"
 	"errors"
+	"time"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/cmd/inithttp"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/service"
-	"time"
 
 	"github.com/gogf/gf/v2/database/gdb"
 	"github.com/gogf/gf/v2/frame/g"
diff --git a/server/internal/logic/middleware/middleware.go b/server/internal/logic/middleware/middleware.go
index ca12eb9..c83aeca 100644
--- a/server/internal/logic/middleware/middleware.go
+++ b/server/internal/logic/middleware/middleware.go
@@ -1,7 +1,7 @@
 // package middleware
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package middleware
 
diff --git a/server/internal/logic/monitor/monitor_server.go b/server/internal/logic/monitor/monitor_server.go
index cb2f5af..d051bfb 100644
--- a/server/internal/logic/monitor/monitor_server.go
+++ b/server/internal/logic/monitor/monitor_server.go
@@ -1,20 +1,20 @@
 // package monitor
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package monitor
 
 import (
 	"context"
 	"encoding/json"
-	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model"
-	"git.5iot.com/iotlcm-public/iotlcm-app/internal/service"
-	"git.5iot.com/iotlcm-public/iotlcm-app/utility"
 	"os"
 	"runtime"
 	"strconv"
 	"time"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/service"
+	"git.5iot.com/iotlcm-public/iotlcm-app/utility"
 
 	"github.com/gogf/gf/v2/encoding/gjson"
 	"github.com/gogf/gf/v2/frame/g"
diff --git a/server/internal/logic/system/sys_auth.go b/server/internal/logic/system/sys_auth.go
index b471afe..8a9a2e3 100644
--- a/server/internal/logic/system/sys_auth.go
+++ b/server/internal/logic/system/sys_auth.go
@@ -1,13 +1,16 @@
 // package system
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package system
 
 import (
 	"context"
 	"errors"
+	"slices"
+	"strings"
+	"time"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/dao"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/bcache"
@@ -18,9 +21,6 @@ import (
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/request"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/service"
 	"git.5iot.com/iotlcm-public/iotlcm-app/utility"
-	"slices"
-	"strings"
-	"time"
 
 	"github.com/gogf/gf/v2/errors/gcode"
 	"github.com/gogf/gf/v2/errors/gerror"
@@ -141,7 +141,7 @@ func (s *sSysAuth) GenerateToken(ctx context.Context, user *model.LoginUserOut)
 	ets := g.Cfg().MustGet(ctx, "jwt.expiresTime", "7d").String()
 	bts := g.Cfg().MustGet(ctx, "jwt.bufferTime", "1d").String()
 	iss := g.Cfg().MustGet(ctx, "jwt.issuer", "XiuAdmin").String()
-	sk := g.Cfg().MustGet(ctx, "jwt.signingKey", "${JWT_SIGNING_KEY}").String()
+	sk := g.Cfg().MustGet(ctx, "jwt.signingKey", "39c54195e73304e74a8429b178965865").String()
 	et, _ := utility.ParseDuration(ets)
 	bt, _ := utility.ParseDuration(bts)
 	g.Log().Infof(ctx, "sSysAuth.GenerateToken 生成Token: user:%+v, et:%s, bt:%s, iss:%s, sk:%s", user, et, bt, iss, sk)
@@ -211,7 +211,7 @@ func (s *sSysAuth) GenerateToken(ctx context.Context, user *model.LoginUserOut)
 
 // 解析Token
 func (s *sSysAuth) ParseToken(ctx context.Context, token string) (claims *model.CustomClaims, err error) {
-	sk := g.Cfg().MustGet(ctx, "jwt.signingKey", "${JWT_SIGNING_KEY}").String()
+	sk := g.Cfg().MustGet(ctx, "jwt.signingKey", "39c54195e73304e74a8429b178965865").String()
 	t, err := jwt.ParseWithClaims(token, &model.CustomClaims{}, func(token *jwt.Token) (interface{}, error) {
 		return []byte(sk), nil
 	})
@@ -233,7 +233,7 @@ func (s *sSysAuth) ParseToken(ctx context.Context, token string) (claims *model.
 
 // 删除Token
 func (s *sSysAuth) DeleteToken(ctx context.Context, token string) (err error) {
-	sk := g.Cfg().MustGet(ctx, "jwt.signingKey", "${JWT_SIGNING_KEY}").String()
+	sk := g.Cfg().MustGet(ctx, "jwt.signingKey", "39c54195e73304e74a8429b178965865").String()
 	t, err := jwt.ParseWithClaims(token, &model.CustomClaims{}, func(token *jwt.Token) (interface{}, error) {
 		return []byte(sk), nil
 	})
diff --git a/server/internal/logic/system/sys_captcha.go b/server/internal/logic/system/sys_captcha.go
index 1a99a2f..268ebc8 100644
--- a/server/internal/logic/system/sys_captcha.go
+++ b/server/internal/logic/system/sys_captcha.go
@@ -1,15 +1,15 @@
 // package system
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package system
 
 import (
 	"context"
+	"time"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/service"
-	"time"
 
 	"github.com/gogf/gf/v2/errors/gerror"
 	"github.com/gogf/gf/v2/frame/g"
diff --git a/server/internal/logic/system/sys_client.go b/server/internal/logic/system/sys_client.go
index 784f93e..59bc128 100644
--- a/server/internal/logic/system/sys_client.go
+++ b/server/internal/logic/system/sys_client.go
@@ -1,7 +1,7 @@
 // package system
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package system
 
diff --git a/server/internal/logic/system/sys_config.go b/server/internal/logic/system/sys_config.go
index 2298f5a..771dae8 100644
--- a/server/internal/logic/system/sys_config.go
+++ b/server/internal/logic/system/sys_config.go
@@ -1,7 +1,7 @@
 // package system
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package system
 
diff --git a/server/internal/logic/system/sys_dept.go b/server/internal/logic/system/sys_dept.go
index 46ac249..43fc4dc 100644
--- a/server/internal/logic/system/sys_dept.go
+++ b/server/internal/logic/system/sys_dept.go
@@ -1,7 +1,7 @@
 // package system
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package system
 
diff --git a/server/internal/logic/system/sys_dept_test.go b/server/internal/logic/system/sys_dept_test.go
index 002ec74..bdc4a08 100644
--- a/server/internal/logic/system/sys_dept_test.go
+++ b/server/internal/logic/system/sys_dept_test.go
@@ -1,47 +1,82 @@
 // package system_test
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package system_test
 
 import (
 	"context"
-	"fmt"
-	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
-	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model"
-	"git.5iot.com/iotlcm-public/iotlcm-app/internal/service"
 	"testing"
 
-	_ "github.com/gogf/gf/contrib/drivers/mysql/v2"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/contexts"
+	_ "git.5iot.com/iotlcm-public/iotlcm-app/internal/logic/memorydb"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/service"
+
+	_ "github.com/gogf/gf/contrib/drivers/sqlite/v2"
+	"github.com/gogf/gf/v2/database/gdb"
 	"github.com/gogf/gf/v2/frame/g"
-	"github.com/gogf/gf/v2/os/gctx"
 )
 
-func init() {
-	// 数据库只读，不执行
-	// g.DB().SetDryRun(true)
-	g.DB().SetDebug(true)
-	testing.Init()
+type deptTestMemoryDB struct {
+	service.IMemoryDB
+	database gdb.DB
+}
+
+func (memory *deptTestMemoryDB) DB(ctx context.Context) gdb.DB {
+	return memory.database
 }
 
 func TestSysDept_RefreshDeptAncestors(t *testing.T) {
-
-	// 设置上下文用户身份为用户
-	ctx := context.WithValue(gctx.New(), consts.ContextKey, &model.Context{
-		// 为了测试只设置了hook中需要用到的数据
-		User: &model.Identity{
-			BaseClaims: model.BaseClaims{
-				ID:       1,
-				TenantId: "000000",
-				DeptId:   1,
-			},
-		},
-	})
-
-	err := service.SysDept().RefreshDeptAncestors(ctx)
-	if err != nil {
+	var (
+		ctx = contexts.Set(context.Background(), &model.Context{
+			User: &model.Identity{BaseClaims: model.BaseClaims{ID: 1, TenantId: "A", DeptId: 1}},
+		})
+		previous       = gdb.GetConfig("default")
+		previousMemory = service.MemoryDB()
+	)
+	if err := gdb.SetConfigGroup("default", gdb.ConfigGroup{{Type: "sqlite", Link: "sqlite::@file(:memory:)", MaxOpenConnCount: 1}}); err != nil {
 		t.Fatal(err)
 	}
-	fmt.Println("RefreshDeptAncestors success")
+	database := g.DB()
+	service.RegisterMemoryDB(&deptTestMemoryDB{database: database})
+	t.Cleanup(func() {
+		service.RegisterMemoryDB(previousMemory)
+		if err := database.GetCore().ClearCacheAll(ctx); err != nil {
+			t.Error(err)
+		}
+		if err := database.Close(ctx); err != nil {
+			t.Error(err)
+		}
+		if err := gdb.SetConfigGroup("default", previous); err != nil {
+			t.Error(err)
+		}
+	})
+	if err := database.GetCore().ClearCacheAll(ctx); err != nil {
+		t.Fatal(err)
+	}
+	statements := []string{
+		"CREATE TABLE sys_dept (dept_id INTEGER PRIMARY KEY, parent_id INTEGER, tenant_id TEXT, ancestors TEXT, updated_at DATETIME, deleted_at DATETIME)",
+		"INSERT INTO sys_dept VALUES (1,0,'A','wrong',NULL,NULL),(2,1,'A','wrong',NULL,NULL),(3,2,'A','wrong',NULL,NULL),(4,1,'B','other-tenant',NULL,NULL),(5,1,'A','deleted',NULL,'2026-01-01')",
+	}
+	for _, statement := range statements {
+		if _, err := database.Exec(ctx, statement); err != nil {
+			t.Fatal(err)
+		}
+	}
+	for attempt := 0; attempt < 2; attempt++ {
+		if err := service.SysDept().RefreshDeptAncestors(ctx); err != nil {
+			t.Fatal(err)
+		}
+		for deptID, expected := range map[int]string{1: "0,", 2: "0,1,", 3: "0,1,2,", 4: "other-tenant", 5: "deleted"} {
+			actual, err := database.GetValue(ctx, "SELECT ancestors FROM sys_dept WHERE dept_id = ?", deptID)
+			if err != nil {
+				t.Fatal(err)
+			}
+			if actual.String() != expected {
+				t.Fatalf("attempt=%d, dept=%d, ancestors=%q, expected=%q", attempt, deptID, actual.String(), expected)
+			}
+		}
+	}
 }
diff --git a/server/internal/logic/system/sys_dict_data.go b/server/internal/logic/system/sys_dict_data.go
index ecacf4e..9b8d5fc 100644
--- a/server/internal/logic/system/sys_dict_data.go
+++ b/server/internal/logic/system/sys_dict_data.go
@@ -1,7 +1,7 @@
 // package system
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package system
 
diff --git a/server/internal/logic/system/sys_dict_type.go b/server/internal/logic/system/sys_dict_type.go
index d13e234..bfb2723 100644
--- a/server/internal/logic/system/sys_dict_type.go
+++ b/server/internal/logic/system/sys_dict_type.go
@@ -1,7 +1,7 @@
 // package system
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package system
 
@@ -9,6 +9,7 @@ import (
 	"context"
 	"errors"
 	"fmt"
+	"strings"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/dao"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/contexts"
@@ -18,7 +19,6 @@ import (
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/do"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/entity"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/service"
-	"strings"
 
 	"github.com/gogf/gf/v2/database/gdb"
 	"github.com/gogf/gf/v2/frame/g"
diff --git a/server/internal/logic/system/sys_job.go b/server/internal/logic/system/sys_job.go
index 0f045c9..8047204 100644
--- a/server/internal/logic/system/sys_job.go
+++ b/server/internal/logic/system/sys_job.go
@@ -1,7 +1,7 @@
 // package system
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package system
 
diff --git a/server/internal/logic/system/sys_logininfor.go b/server/internal/logic/system/sys_logininfor.go
index f73bf83..ca309e1 100644
--- a/server/internal/logic/system/sys_logininfor.go
+++ b/server/internal/logic/system/sys_logininfor.go
@@ -1,7 +1,7 @@
 // package system
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package system
 
diff --git a/server/internal/logic/system/sys_menu.go b/server/internal/logic/system/sys_menu.go
index fa6841e..0554c20 100644
--- a/server/internal/logic/system/sys_menu.go
+++ b/server/internal/logic/system/sys_menu.go
@@ -1,13 +1,16 @@
 // package system
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package system
 
 import (
 	"context"
 	"fmt"
+	"slices"
+	"sort"
+	"strings"
 	v1 "git.5iot.com/iotlcm-public/iotlcm-app/api/system/v1"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/dao"
@@ -18,9 +21,6 @@ import (
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/do"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/entity"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/service"
-	"slices"
-	"sort"
-	"strings"
 
 	"github.com/gogf/gf/v2/database/gdb"
 	"github.com/gogf/gf/v2/errors/gcode"
diff --git a/server/internal/logic/system/sys_notice.go b/server/internal/logic/system/sys_notice.go
index 013c9f6..6cd0b63 100644
--- a/server/internal/logic/system/sys_notice.go
+++ b/server/internal/logic/system/sys_notice.go
@@ -1,7 +1,7 @@
 // package system
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package system
 
diff --git a/server/internal/logic/system/sys_notice_user.go b/server/internal/logic/system/sys_notice_user.go
index e7b34a0..74235d5 100644
--- a/server/internal/logic/system/sys_notice_user.go
+++ b/server/internal/logic/system/sys_notice_user.go
@@ -1,7 +1,7 @@
 // Package gen
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 // @AutoGenerate Version
 package system
diff --git a/server/internal/logic/system/sys_oper_log.go b/server/internal/logic/system/sys_oper_log.go
index c20844f..a134551 100644
--- a/server/internal/logic/system/sys_oper_log.go
+++ b/server/internal/logic/system/sys_oper_log.go
@@ -1,12 +1,13 @@
 // package system
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package system
 
 import (
 	"context"
+	"strings"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/dao"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/contexts"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/mcache"
@@ -15,7 +16,6 @@ import (
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/request"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/service"
 	"git.5iot.com/iotlcm-public/iotlcm-app/utility"
-	"strings"
 
 	"github.com/gogf/gf/v2/encoding/gjson"
 	"github.com/gogf/gf/v2/errors/gcode"
diff --git a/server/internal/logic/system/sys_oss.go b/server/internal/logic/system/sys_oss.go
index 4509bf2..d18b35b 100644
--- a/server/internal/logic/system/sys_oss.go
+++ b/server/internal/logic/system/sys_oss.go
@@ -1,7 +1,7 @@
 // package system
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package system
 
@@ -9,6 +9,12 @@ import (
 	"context"
 	"errors"
 	"fmt"
+	"mime"
+	"net/http"
+	"os"
+	"path/filepath"
+	"strings"
+	"time"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/dao"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/contexts"
@@ -19,12 +25,6 @@ import (
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/request"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/service"
 	"git.5iot.com/iotlcm-public/iotlcm-app/utility/hash"
-	"mime"
-	"net/http"
-	"os"
-	"path/filepath"
-	"strings"
-	"time"
 
 	"github.com/gogf/gf/v2/crypto/gmd5"
 	"github.com/gogf/gf/v2/database/gdb"
@@ -439,6 +439,16 @@ func (s *sSysOss) buildLocalFileURL(ctx context.Context, fullFilePath string) st
 	if fullFilePath == "" {
 		return ""
 	}
+	uploadPath := strings.TrimSpace(g.Cfg().MustGet(ctx, "system.upload.local.path").String())
+	publicURL := strings.TrimSpace(os.Getenv("IOTLCM_UPLOAD_PUBLIC_URL"))
+	if publicURL == "" {
+		publicURL = strings.TrimSpace(g.Cfg().MustGet(ctx, "system.upload.local.publicUrl", "").String())
+	}
+	if publicURL != "" {
+		if fileURL, ok := localFileURLByBase(fullFilePath, uploadPath, publicURL); ok {
+			return fileURL
+		}
+	}
 	configValue := ""
 	configType, err := service.SysConfig().GetConfigByKey(ctx, consts.ConfigOssUrlPath)
 	if err == nil && configType != nil {
@@ -448,7 +458,6 @@ func (s *sSysOss) buildLocalFileURL(ctx context.Context, fullFilePath string) st
 		return url
 	}
 
-	uploadPath := strings.TrimSpace(g.Cfg().MustGet(ctx, "system.upload.local.path").String())
 	baseURL := localFileURLFallbackBase(configValue)
 	if baseURL != "" {
 		if url, ok := localFileURLByBase(fullFilePath, uploadPath, baseURL); ok {
diff --git a/server/internal/logic/system/sys_oss_config.go b/server/internal/logic/system/sys_oss_config.go
index 5434a7b..7299970 100644
--- a/server/internal/logic/system/sys_oss_config.go
+++ b/server/internal/logic/system/sys_oss_config.go
@@ -1,7 +1,7 @@
 // package system
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package system
 
diff --git a/server/internal/logic/system/sys_oss_path_test.go b/server/internal/logic/system/sys_oss_path_test.go
index 3d234ec..256e9c1 100644
--- a/server/internal/logic/system/sys_oss_path_test.go
+++ b/server/internal/logic/system/sys_oss_path_test.go
@@ -5,8 +5,58 @@ import (
 	"os"
 	"path/filepath"
 	"testing"
+
+	"github.com/gogf/gf/v2/frame/g"
+	"github.com/gogf/gf/v2/os/gcfg"
 )
 
+func TestLocalFileURLUsesConfiguredPublicURL(t *testing.T) {
+	t.Setenv("IOTLCM_UPLOAD_PUBLIC_URL", "")
+	previous := g.Cfg().GetAdapter()
+	t.Cleanup(func() { g.Cfg().SetAdapter(previous) })
+	cases := []struct {
+		name string
+		root string
+		base string
+		file string
+		want string
+	}{
+		{"本地跨端预览", "resource/upload", "http://localhost:8010/upload/", "resource/upload/000000/user/file/photo.jpeg", "http://localhost:8010/upload/000000/user/file/photo.jpeg"},
+		{"独立部署前缀", "/data/app/upload", "https://files.example.com/app/upload", "/data/app/upload/000000/user/file/photo.jpeg", "https://files.example.com/app/upload/000000/user/file/photo.jpeg"},
+		{"Windows共享目录", "F:/shared/upload", "https://files.example.com/upload", "F:/shared/upload/000000/user/file/photo.jpeg", "https://files.example.com/upload/000000/user/file/photo.jpeg"},
+	}
+	for _, testCase := range cases {
+		t.Run(testCase.name, func(t *testing.T) {
+			adapter, err := gcfg.NewAdapterContent(
+				"system:\n  upload:\n    local:\n      path: " + testCase.root + "\n      publicUrl: " + testCase.base + "\n",
+			)
+			if err != nil {
+				t.Fatal(err)
+			}
+			g.Cfg().SetAdapter(adapter)
+			got := NewSysOss().buildLocalFileURL(context.Background(), testCase.file)
+			if got != testCase.want {
+				t.Fatalf("url = %q, want %q", got, testCase.want)
+			}
+		})
+	}
+}
+
+func TestLocalFileURLUsesEnvironmentOverride(t *testing.T) {
+	t.Setenv("IOTLCM_UPLOAD_PUBLIC_URL", "http://localhost:8010/upload")
+	previous := g.Cfg().GetAdapter()
+	t.Cleanup(func() { g.Cfg().SetAdapter(previous) })
+	adapter, err := gcfg.NewAdapterContent("system:\n  upload:\n    local:\n      path: resource/upload\n      publicUrl: https://files.example.com/upload\n")
+	if err != nil {
+		t.Fatal(err)
+	}
+	g.Cfg().SetAdapter(adapter)
+	got := NewSysOss().buildLocalFileURL(context.Background(), "resource/upload/000000/photo.jpeg")
+	if got != "http://localhost:8010/upload/000000/photo.jpeg" {
+		t.Fatalf("environment override did not take precedence: %q", got)
+	}
+}
+
 func TestResolveLocalOssPathFromProjectRoot(t *testing.T) {
 	tempDir := t.TempDir()
 	relativePath := filepath.FromSlash("resource/upload/000000/user/file/test.xlsx")
@@ -49,13 +99,13 @@ func TestAppOssDownloadContentTypeXlsx(t *testing.T) {
 
 func TestLocalFileURLByMappingWithProductionUploadPath(t *testing.T) {
 	filePath := "/data/app/iotlcmadmin-web-svc/upload/000000/user/file/20260710/sim-card-renew/result/REN-result.xlsx"
-	configValue := "/data/app/iotlcmadmin-web-svc/upload|http://iotlcm.example.com:8008/upload"
+	configValue := "/data/app/iotlcmadmin-web-svc/upload|http://example.com:8008/upload"
 
 	got, ok := localFileURLByMapping(filePath, configValue)
 	if !ok {
 		t.Fatal("expected production upload path mapping to match")
 	}
-	want := "http://iotlcm.example.com:8008/upload/000000/user/file/20260710/sim-card-renew/result/REN-result.xlsx"
+	want := "http://example.com:8008/upload/000000/user/file/20260710/sim-card-renew/result/REN-result.xlsx"
 	if got != want {
 		t.Fatalf("url = %q, want %q", got, want)
 	}
@@ -63,11 +113,11 @@ func TestLocalFileURLByMappingWithProductionUploadPath(t *testing.T) {
 
 func TestLocalFileURLByBaseWithProductionUploadPath(t *testing.T) {
 	filePath := "/data/app/iotlcmadmin-web-svc/upload/000000/user/file/20260710/sim-card-renew/import/REN-import.xlsx"
-	got, ok := localFileURLByBase(filePath, "/data/app/iotlcmadmin-web-svc/upload", "http://iotlcm.example.com:8008/upload")
+	got, ok := localFileURLByBase(filePath, "/data/app/iotlcmadmin-web-svc/upload", "http://example.com:8008/upload")
 	if !ok {
 		t.Fatal("expected upload path base mapping to match")
 	}
-	want := "http://iotlcm.example.com:8008/upload/000000/user/file/20260710/sim-card-renew/import/REN-import.xlsx"
+	want := "http://example.com:8008/upload/000000/user/file/20260710/sim-card-renew/import/REN-import.xlsx"
 	if got != want {
 		t.Fatalf("url = %q, want %q", got, want)
 	}
diff --git a/server/internal/logic/system/sys_post.go b/server/internal/logic/system/sys_post.go
index 278d404..6381001 100644
--- a/server/internal/logic/system/sys_post.go
+++ b/server/internal/logic/system/sys_post.go
@@ -1,7 +1,7 @@
 // package system
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package system
 
diff --git a/server/internal/logic/system/sys_qrcode.go b/server/internal/logic/system/sys_qrcode.go
index 2b1ba80..0afb176 100644
--- a/server/internal/logic/system/sys_qrcode.go
+++ b/server/internal/logic/system/sys_qrcode.go
@@ -8,6 +8,9 @@ import (
 	"encoding/json"
 	"errors"
 	"fmt"
+	"strconv"
+	"strings"
+	"time"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/dao"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/contexts"
@@ -15,9 +18,6 @@ import (
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/entity"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/request"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/service"
-	"strconv"
-	"strings"
-	"time"
 
 	"github.com/gogf/gf/v2/container/gset"
 	"github.com/gogf/gf/v2/errors/gerror"
diff --git a/server/internal/logic/system/sys_role.go b/server/internal/logic/system/sys_role.go
index 593bcde..7df0576 100644
--- a/server/internal/logic/system/sys_role.go
+++ b/server/internal/logic/system/sys_role.go
@@ -1,12 +1,13 @@
 // package system
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package system
 
 import (
 	"context"
+	"slices"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/dao"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/contexts"
@@ -17,7 +18,6 @@ import (
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/entity"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/service"
 	"git.5iot.com/iotlcm-public/iotlcm-app/utility"
-	"slices"
 
 	"github.com/gogf/gf/v2/database/gdb"
 	"github.com/gogf/gf/v2/errors/gerror"
diff --git a/server/internal/logic/system/sys_social.go b/server/internal/logic/system/sys_social.go
index 5f0d5d4..b7a1638 100644
--- a/server/internal/logic/system/sys_social.go
+++ b/server/internal/logic/system/sys_social.go
@@ -1,7 +1,7 @@
 // package system
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package system
 
diff --git a/server/internal/logic/system/sys_tenant.go b/server/internal/logic/system/sys_tenant.go
index 5b1121b..ba6ad63 100644
--- a/server/internal/logic/system/sys_tenant.go
+++ b/server/internal/logic/system/sys_tenant.go
@@ -1,7 +1,7 @@
 // package system
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package system
 
@@ -10,6 +10,8 @@ import (
 	"database/sql"
 	"errors"
 	"fmt"
+	"slices"
+	"strings"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/dao"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/contexts"
@@ -20,8 +22,6 @@ import (
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/entity"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/service"
 	"git.5iot.com/iotlcm-public/iotlcm-app/utility"
-	"slices"
-	"strings"
 
 	"github.com/gogf/gf/v2/database/gdb"
 	"github.com/gogf/gf/v2/frame/g"
@@ -445,7 +445,7 @@ func (l *sSysTenant) BatchInsertSysParam(ctx context.Context, tx gdb.TX, tenantI
 			TenantId:    tenantId,
 			ConfigName:  "上传文件Url路径",
 			ConfigKey:   "sys.oss.urlPath",
-			ConfigValue: "/data/app/iotlcmadmin-web-svc/upload|http://iotlcm.example.com:8008/upload",
+			ConfigValue: "/data/app/iotlcmadmin-web-svc/upload|http://example.com:8008/upload",
 			ConfigType:  "Y",
 			CreatedDept: createdDept,
 			CreatedBy:   createdBy,
diff --git a/server/internal/logic/system/sys_tenant_package.go b/server/internal/logic/system/sys_tenant_package.go
index ec2e9c0..0b480c1 100644
--- a/server/internal/logic/system/sys_tenant_package.go
+++ b/server/internal/logic/system/sys_tenant_package.go
@@ -1,7 +1,7 @@
 // package system
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package system
 
diff --git a/server/internal/logic/system/sys_user.go b/server/internal/logic/system/sys_user.go
index 1286678..2dc865a 100644
--- a/server/internal/logic/system/sys_user.go
+++ b/server/internal/logic/system/sys_user.go
@@ -1,7 +1,7 @@
 // package system
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package system
 
@@ -9,6 +9,7 @@ import (
 	"context"
 	"errors"
 	"fmt"
+	"slices"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/dao"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/contexts"
@@ -20,7 +21,6 @@ import (
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/request"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/service"
 	"git.5iot.com/iotlcm-public/iotlcm-app/utility"
-	"slices"
 
 	"github.com/gogf/gf/v2/database/gdb"
 	"github.com/gogf/gf/v2/errors/gerror"
diff --git a/server/internal/logic/system/sys_user_online.go b/server/internal/logic/system/sys_user_online.go
index d8ecc15..a7e8bdc 100644
--- a/server/internal/logic/system/sys_user_online.go
+++ b/server/internal/logic/system/sys_user_online.go
@@ -1,7 +1,7 @@
 // package system
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package system
 
diff --git a/server/internal/logic/system/sys_user_test.go b/server/internal/logic/system/sys_user_test.go
index 3b580b7..ed2042f 100644
--- a/server/internal/logic/system/sys_user_test.go
+++ b/server/internal/logic/system/sys_user_test.go
@@ -1,37 +1,28 @@
 // package system_test
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package system_test
 
 import (
-	"context"
-	"fmt"
-	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
+	"testing"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/dao"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/contexts"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/do"
-	"testing"
 
 	"git.5iot.com/iotlcm-public/iotlcm-app/utility"
 
-	_ "github.com/gogf/gf/contrib/drivers/mysql/v2"
+	_ "github.com/gogf/gf/contrib/drivers/sqlite/v2"
+	"github.com/gogf/gf/v2/database/gdb"
 	"github.com/gogf/gf/v2/frame/g"
 	"github.com/gogf/gf/v2/os/gctx"
-	"github.com/gogf/gf/v2/os/gtime"
 )
 
-func init() {
-	// 数据库只读，不执行
-	// g.DB().SetDryRun(true)
-	g.DB().SetDebug(true)
-	testing.Init()
-}
-
 func TestSysUser_UpdateUserPassword(t *testing.T) {
 	// 设置上下文用户身份为用户
-	ctx := context.WithValue(gctx.New(), consts.ContextKey, &model.Context{
+	ctx := contexts.Set(gctx.New(), &model.Context{
 		// 为了测试只设置了hook中需要用到的数据
 		User: &model.Identity{
 			BaseClaims: model.BaseClaims{
@@ -41,6 +32,33 @@ func TestSysUser_UpdateUserPassword(t *testing.T) {
 			},
 		},
 	})
+	previous := gdb.GetConfig("default")
+	if err := gdb.SetConfigGroup("default", gdb.ConfigGroup{{Type: "sqlite", Link: "sqlite::@file(:memory:)", MaxOpenConnCount: 1}}); err != nil {
+		t.Fatal(err)
+	}
+	database := g.DB()
+	t.Cleanup(func() {
+		if err := database.GetCore().ClearCacheAll(ctx); err != nil {
+			t.Error(err)
+		}
+		if err := database.Close(ctx); err != nil {
+			t.Error(err)
+		}
+		if err := gdb.SetConfigGroup("default", previous); err != nil {
+			t.Error(err)
+		}
+	})
+	if err := database.GetCore().ClearCacheAll(ctx); err != nil {
+		t.Fatal(err)
+	}
+	for _, statement := range []string{
+		"CREATE TABLE sys_user (user_id INTEGER PRIMARY KEY, password TEXT, salt TEXT, updated_by INTEGER, updated_at DATETIME, tenant_id TEXT)",
+		"INSERT INTO sys_user VALUES (1,'old','old',0,NULL,'000000'),(2,'unchanged','unchanged',0,NULL,'000000')",
+	} {
+		if _, err := database.Exec(ctx, statement); err != nil {
+			t.Fatal(err)
+		}
+	}
 	newPassword := "123456"
 	salt := "123456"
 	password := utility.PasswordEncrypt(utility.Md5(newPassword), salt)
@@ -48,11 +66,17 @@ func TestSysUser_UpdateUserPassword(t *testing.T) {
 		Password:  password,
 		Salt:      salt,
 		UpdatedBy: 1,
-		UpdatedAt: gtime.Now(),
 	}
 	_, err := dao.SysUser.Ctx(ctx).Where(dao.SysUser.Columns().UserId, 1).Data(data).OmitEmpty().Update()
 	if err != nil {
 		t.Fatal(err)
 	}
-	fmt.Println("UpdateUserPassword success")
+	actual, err := database.GetValue(ctx, "SELECT password FROM sys_user WHERE user_id = 1")
+	if err != nil || actual.String() != password {
+		t.Fatalf("password=%v, error=%v", actual, err)
+	}
+	unchanged, err := database.GetValue(ctx, "SELECT password FROM sys_user WHERE user_id = 2")
+	if err != nil || unchanged.String() != "unchanged" {
+		t.Fatalf("unrelated user changed: password=%v, error=%v", unchanged, err)
+	}
 }
diff --git a/server/internal/logic/system/task_test.go b/server/internal/logic/system/task_test.go
index b033ddb..e5b9ed9 100644
--- a/server/internal/logic/system/task_test.go
+++ b/server/internal/logic/system/task_test.go
@@ -1,7 +1,7 @@
 // // package system_test
 // // @Link  https://github.com/xiujiecn/xiu-admin
 // // @Copyright  Copyright (c) 2025 LiXiujie
-// // @Author  Lxj <li@xiujie.cn>
+// // @Author  Lxj <li@example.com>
 // // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package system_test
 
diff --git a/server/internal/model/app_auth.go b/server/internal/model/app_auth.go
index 5d274b1..82d1d69 100644
--- a/server/internal/model/app_auth.go
+++ b/server/internal/model/app_auth.go
@@ -5,7 +5,7 @@ type AppPhoneRegisterParam struct {
 	Phone    string `json:"phone" v:"required|phone#手机号不能为空|手机号格式不正确" dc:"手机号"`
 	Password string `json:"password" v:"required|length:6,32#密码不能为空|密码长度应为6到32位" dc:"密码"`
 	NickName string `json:"nickName" dc:"昵称"`
-	SmsCode  string `json:"smsCode" dc:"短信验证码，当前注册未接入短信时可为空"`
+	SmsCode  string `json:"smsCode" v:"required#短信验证码不能为空" dc:"短信验证码"`
 }
 
 type AppPhoneLoginParam struct {
@@ -18,6 +18,13 @@ type AppPhoneLoginParam struct {
 	WxCode         string `json:"wxCode" dc:"微信小程序登录临时凭证，用于后端绑定openid"`
 }
 
+type AppPhoneSmsLoginParam struct {
+	TenantId       string `json:"tenantId" v:"required#租户ID不能为空" dc:"租户ID"`
+	Phone          string `json:"phone" v:"required|phone#手机号不能为空|手机号格式不正确" dc:"手机号"`
+	SmsCode        string `json:"smsCode" v:"required#短信验证码不能为空" dc:"短信验证码"`
+	SelectedUserId int64  `json:"selectedUserId" dc:"手机号多账号登录时选中的用户ID"`
+}
+
 type AppWechatLoginParam struct {
 	TenantId string `json:"tenantId" v:"required#租户ID不能为空" dc:"租户ID"`
 	WxCode   string `json:"wxCode" v:"required#微信登录凭证不能为空" dc:"微信小程序登录临时凭证"`
@@ -27,8 +34,7 @@ type AppWechatBindPhoneParam struct {
 	TenantId       string `json:"tenantId" v:"required#租户ID不能为空" dc:"租户ID"`
 	BindTicket     string `json:"bindTicket" v:"required#微信绑定凭证不能为空" dc:"微信绑定临时凭证"`
 	Phone          string `json:"phone" v:"required|phone#手机号不能为空|手机号格式不正确" dc:"手机号"`
-	CaptchaKey     string `json:"captchaKey" dc:"图形验证码Key"`
-	CaptchaPoint   string `json:"captchaPoint" dc:"图形验证码坐标"`
+	SmsCode        string `json:"smsCode" v:"required#短信验证码不能为空" dc:"短信验证码"`
 	SelectedUserId int64  `json:"selectedUserId" dc:"手机号多账号绑定时选中的用户ID"`
 }
 
@@ -40,9 +46,11 @@ type AppForgotPasswordParam struct {
 }
 
 type AppSendSmsParam struct {
-	TenantId string `json:"tenantId" v:"required#租户ID不能为空" dc:"租户ID"`
-	Phone    string `json:"phone" v:"required|phone#手机号不能为空|手机号格式不正确" dc:"手机号"`
-	Scene    string `json:"scene" v:"required|in:register,forgotPassword#短信场景不能为空|短信场景不正确" dc:"短信场景"`
+	TenantId     string `json:"tenantId" v:"required#租户ID不能为空" dc:"租户ID"`
+	Phone        string `json:"phone" v:"required|phone#手机号不能为空|手机号格式不正确" dc:"手机号"`
+	Scene        string `json:"scene" v:"required|in:register,login,forgotPassword,wechatBindPhone#短信场景不能为空|短信场景不正确" dc:"短信场景"`
+	CaptchaKey   string `json:"captchaKey" v:"required#滑块验证码key不能为空" dc:"滑块验证码key"`
+	CaptchaPoint string `json:"captchaPoint" v:"required#滑块验证码坐标不能为空" dc:"滑块验证码坐标"`
 }
 
 type AppSendSmsModel struct {
diff --git a/server/internal/model/app_card.go b/server/internal/model/app_card.go
index b605f3d..9b0d290 100644
--- a/server/internal/model/app_card.go
+++ b/server/internal/model/app_card.go
@@ -26,6 +26,7 @@ type AppCardListParam struct {
 	CardValue    string `json:"cardValue" dc:"卡号标识"`
 	Status       string `json:"status" dc:"状态分类：all/normal/low-flow/expiring/error"`
 	CategoryCode string `json:"categoryCode" dc:"套餐分类编码"`
+	AllocateOnly bool   `json:"allocateOnly"`
 	IncludeTotal *bool  `json:"includeTotal" dc:"是否返回精确总数"`
 }
 
@@ -99,15 +100,18 @@ type AppCardAllocateTargetListParam struct {
 }
 
 type AppCardAllocateBatchPrepareParam struct {
-	CardValues   []string `json:"cardValues" v:"required#请选择需要划拨的卡" dc:"卡号标识列表"`
-	TargetDeptId int64    `json:"targetDeptId" v:"required|min:1#请选择划拨目标客户|请选择划拨目标客户" dc:"目标客户部门ID"`
+	ExecutionMode int      `json:"executionMode" v:"in:0,1,2"`
+	CardValues    []string `json:"cardValues" v:"required#请选择需要划拨的卡" dc:"卡号标识列表"`
+	TargetDeptId  int64    `json:"targetDeptId" v:"required|min:1#请选择划拨目标客户|请选择划拨目标客户" dc:"目标客户部门ID"`
 }
 
 type AppCardAllocateBatchSubmitParam struct {
-	CardValues   []string `json:"cardValues" dc:"卡号标识列表"`
-	BatchNo      string   `json:"batchNo" v:"required#预处理批次号不能为空" dc:"预处理批次号"`
-	TargetDeptId int64    `json:"targetDeptId" dc:"目标客户部门ID"`
-	Remark       string   `json:"remark" dc:"划拨备注"`
+	CardValues    []string `json:"cardValues" dc:"卡号标识列表"`
+	BatchNo       string   `json:"batchNo" v:"length:0,64" dc:"预处理批次号或已受理批次号"`
+	RequestId     string   `json:"requestId" v:"length:0,96" dc:"历史请求恢复标识，新任务直接提交不传"`
+	ExecutionMode int      `json:"executionMode" v:"in:0,1,2" dc:"执行规模"`
+	TargetDeptId  int64    `json:"targetDeptId" dc:"目标客户部门ID"`
+	Remark        string   `json:"remark" dc:"划拨备注"`
 }
 
 type AppCardChangePrepareParam struct {
diff --git a/server/internal/model/app_customer.go b/server/internal/model/app_customer.go
index ce0c87c..6ae0ce3 100644
--- a/server/internal/model/app_customer.go
+++ b/server/internal/model/app_customer.go
@@ -8,32 +8,45 @@ type AppCustomerListParam struct {
 	Status       string `json:"status" dc:"客户状态"`
 }
 
+type AppCustomerSummary struct {
+	Total               int `json:"total" dc:"筛选结果客户总数"`
+	NormalCount         int `json:"normalCount" dc:"筛选结果正常客户数"`
+	PendingProfileCount int `json:"pendingProfileCount" dc:"筛选结果实名资料待完善客户数"`
+}
+
 type AppCustomerDetailParam struct {
 	CustomerType string `json:"customerType" v:"required#客户类型不能为空" dc:"客户类型：enterprise/terminal"`
 	CustomerId   int64  `json:"customerId" v:"required|min:1#客户ID不能为空|客户ID不能为空" dc:"客户ID"`
 }
 
+type AppCustomerStatusCount struct {
+	Status int `json:"status" dc:"状态编码"`
+	Count  int `json:"count" dc:"卡数量"`
+}
+
 type AppCustomerModel struct {
-	CustomerType     string  `json:"customerType" dc:"客户类型"`
-	CustomerTypeName string  `json:"customerTypeName" dc:"客户类型名称"`
-	CustomerId       int64   `json:"customerId" dc:"客户ID"`
-	DeptId           int64   `json:"-" dc:"企业部门ID"`
-	TerminalId       int64   `json:"-" dc:"终端客户ID"`
-	ParentDeptId     int64   `json:"-" dc:"上级部门ID"`
-	CustomerCode     string  `json:"customerCode,omitempty" dc:"客户编码"`
-	CustomerName     string  `json:"customerName" dc:"客户名称"`
-	DeptCategory     string  `json:"deptCategory,omitempty" dc:"部门类别"`
-	Phone            string  `json:"phone,omitempty" dc:"联系电话"`
-	Email            string  `json:"email,omitempty" dc:"邮箱"`
-	Status           string  `json:"status,omitempty" dc:"状态"`
-	StatusText       string  `json:"statusText" dc:"状态文本"`
-	RealNameStatus   string  `json:"realNameStatus" dc:"实名状态"`
-	Balance          float64 `json:"-" dc:"账户余额"`
-	CardCount        int     `json:"cardCount" dc:"卡数量"`
-	NormalCardCount  int     `json:"normalCardCount" dc:"正常卡数量"`
-	Address          string  `json:"address,omitempty" dc:"地址"`
-	FullName         string  `json:"fullName,omitempty" dc:"单位全称"`
-	CreatedAt        string  `json:"createdAt,omitempty" dc:"创建时间"`
+	PackageStatusCounts []AppCustomerStatusCount `json:"packageStatusCounts,omitempty" dc:"各套餐状态的直接持卡数量"`
+	CustomerType        string                   `json:"customerType" dc:"客户类型"`
+	CustomerTypeName    string                   `json:"customerTypeName" dc:"客户类型名称"`
+	CustomerId          int64                    `json:"customerId" dc:"客户ID"`
+	DeptId              int64                    `json:"-" dc:"企业部门ID"`
+	TerminalId          int64                    `json:"-" dc:"终端客户ID"`
+	ParentDeptId        int64                    `json:"-" dc:"上级部门ID"`
+	CustomerCode        string                   `json:"customerCode,omitempty" dc:"客户编码"`
+	CustomerName        string                   `json:"customerName" dc:"客户名称"`
+	DeptCategory        string                   `json:"deptCategory,omitempty" dc:"部门类别"`
+	Phone               string                   `json:"phone,omitempty" dc:"联系电话"`
+	Email               string                   `json:"email,omitempty" dc:"邮箱"`
+	Status              string                   `json:"status,omitempty" dc:"状态"`
+	StatusText          string                   `json:"statusText" dc:"状态文本"`
+	RealNameStatus      string                   `json:"realNameStatus" dc:"实名状态"`
+	Balance             float64                  `json:"-" dc:"账户余额"`
+	CardCount           int                      `json:"cardCount" dc:"卡数量"`
+	CardStatusCounts    []AppCustomerStatusCount `json:"cardStatusCounts,omitempty" dc:"各运营商状态的直接持卡数量"`
+	NormalCardCount     int                      `json:"normalCardCount" dc:"正常卡数量"`
+	Address             string                   `json:"address,omitempty" dc:"地址"`
+	FullName            string                   `json:"fullName,omitempty" dc:"单位全称"`
+	CreatedAt           string                   `json:"createdAt,omitempty" dc:"创建时间"`
 }
 
 type AppCustomerDetailModel struct {
diff --git a/server/internal/model/app_diagnosis.go b/server/internal/model/app_diagnosis.go
index 559d875..ab09c88 100644
--- a/server/internal/model/app_diagnosis.go
+++ b/server/internal/model/app_diagnosis.go
@@ -34,6 +34,7 @@ type AppDiagnosisInfoModel struct {
 // AppDiagnosisModuleItem 诊断模块状态，保持与控制台智能诊断一致。
 type AppDiagnosisModuleItem struct {
 	Status    string `json:"status" dc:"状态：success/error/cached/skipped"`
+	Reason    string `json:"reason,omitempty" dc:"展示原因：not_subscribed/unsupported/no_data/query_error"`
 	Message   string `json:"message,omitempty" dc:"状态说明"`
 	Cached    bool   `json:"cached,omitempty" dc:"是否使用缓存"`
 	UpdatedAt string `json:"updatedAt,omitempty" dc:"缓存更新时间"`
@@ -41,14 +42,18 @@ type AppDiagnosisModuleItem struct {
 
 // AppDiagnosisFlowModel 对齐控制台诊断流量响应。
 type AppDiagnosisFlowModel struct {
-	Times       []string  `json:"times" dc:"时间列表"`
-	Flow        []float64 `json:"flow" dc:"流量列表"`
-	Unit        string    `json:"unit" dc:"流量单位"`
-	Granularity string    `json:"granularity" dc:"粒度：day或month"`
-	HasData     bool      `json:"hasData" dc:"是否存在流量数据"`
+	Times         []string  `json:"times" dc:"时间列表"`
+	Flow          []float64 `json:"flow" dc:"流量列表"`
+	FlowAvailable []bool    `json:"flowAvailable" dc:"各时间点是否存在采集记录"`
+	Unit          string    `json:"unit" dc:"流量单位"`
+	Granularity   string    `json:"granularity" dc:"粒度：day或month"`
+	HasData       bool      `json:"hasData" dc:"是否存在流量数据"`
 }
 
 type AppDiagnosisInfoItem struct {
+	DataServiceSource        string                         `json:"dataServiceSource" dc:"数据服务依据：apn或network_block"`
+	NetBlockStatus           *string                        `json:"netBlockStatus" dc:"断网状态：0未断网 1已断网"`
+	NetBlockReason           *string                        `json:"netBlockReason" dc:"断网原因"`
 	Iccid                    *string                        `json:"iccid" dc:"ICCID"`
 	Imsi                     *string                        `json:"imsi" dc:"IMSI"`
 	Msisdn                   *string                        `json:"msisdn" dc:"MSISDN/卡号"`
diff --git a/server/internal/model/app_execution_log.go b/server/internal/model/app_execution_log.go
new file mode 100644
index 0000000..e4e731f
--- /dev/null
+++ b/server/internal/model/app_execution_log.go
@@ -0,0 +1,53 @@
+package model
+
+import (
+	"github.com/gogf/gf/v2/encoding/gjson"
+	"github.com/gogf/gf/v2/os/gtime"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/allocationunits"
+)
+
+type AppExecutionLogListParam struct {
+	Page             int    `json:"page" d:"1" v:"min:1"`
+	PageSize         int    `json:"pageSize" d:"20" v:"between:1,100"`
+	BatchNo          string `json:"batchNo" v:"length:0,64"`
+	SourceChannel    string `json:"sourceChannel" v:"in:console,mini_program,api,system,legacy"`
+	ExecutionMode    *int   `json:"executionMode" v:"in:0,1,2"`
+	SourceType       *int   `json:"sourceType" v:"in:0,1,2,3,4"`
+	BatchAsyncStatus *int   `json:"batchAsyncStatus" v:"in:0,1,2,3,4,5"`
+}
+
+type AppExecutionLogDetailParam struct {
+	BatchNo      string `json:"batchNo" v:"required|length:1,64#批次号不能为空|批次号过长"`
+	Page         int    `json:"page" d:"1" v:"min:1"`
+	PageSize     int    `json:"pageSize" d:"20" v:"between:1,100"`
+	DetailStatus *int   `json:"detailStatus" v:"in:0,1,2,3"`
+}
+
+type AppExecutionLogItem struct {
+	allocationunits.Fields
+	StoredSourceDeptId int64       `json:"-" orm:"created_dept"`
+	StoredTargetDeptId int64       `json:"-" orm:"target_dept_id"`
+	UnitInfo           *gjson.Json `json:"-" orm:"batch_info"`
+	BatchNo            string      `json:"batchNo"`
+	BatchType          int         `json:"batchType"`
+	SourceChannel      string      `json:"sourceChannel"`
+	ExecutionMode      int         `json:"executionMode"`
+	SourceType         *int        `json:"sourceType"`
+	BatchAsyncStatus   int         `json:"batchAsyncStatus"`
+	TotalCount         int         `json:"totalCount"`
+	RunResult          int         `json:"runResult"`
+	FailReason         string      `json:"failReason"`
+	CreatedAt          *gtime.Time `json:"createdAt"`
+	StartTime          *gtime.Time `json:"startTime"`
+	EndTime            *gtime.Time `json:"endTime"`
+}
+
+type AppExecutionLogDetail struct {
+	allocationunits.Fields
+	UnitInfo     *gjson.Json `json:"-" orm:"snapshot"`
+	RowNo        int         `json:"rowNo"`
+	ItemId       string      `json:"itemId"`
+	DetailStatus int         `json:"detailStatus"`
+	ErrorCode    string      `json:"errorCode"`
+	ErrorReason  string      `json:"errorReason"`
+}
diff --git a/server/internal/model/app_notification.go b/server/internal/model/app_notification.go
new file mode 100644
index 0000000..8435824
--- /dev/null
+++ b/server/internal/model/app_notification.go
@@ -0,0 +1,9 @@
+package model
+
+type AppWarningPreferenceParam struct {
+	Enabled *bool `json:"enabled"`
+}
+type AppWarningPreferenceModel struct {
+	Enabled     bool `json:"enabled"`
+	WechatBound bool `json:"wechatBound"`
+}
diff --git a/server/internal/model/app_user.go b/server/internal/model/app_user.go
index e8d8be9..21e5390 100644
--- a/server/internal/model/app_user.go
+++ b/server/internal/model/app_user.go
@@ -1,6 +1,7 @@
 package model
 
 type AppUserInfoModel struct {
+	IsTopLevelEnterprise  bool                       `json:"isTopLevelEnterprise" dc:"是否顶级企业账户"`
 	UserId                int64                      `json:"-" dc:"用户ID"`
 	TenantId              string                     `json:"-" dc:"租户ID"`
 	DeptId                int64                      `json:"-" dc:"部门ID"`
diff --git a/server/internal/model/app_warning.go b/server/internal/model/app_warning.go
index fc221b0..4440678 100644
--- a/server/internal/model/app_warning.go
+++ b/server/internal/model/app_warning.go
@@ -93,11 +93,13 @@ type AppWarningConfigBatchFailItem struct {
 }
 
 type AppWarningConfigMetaModel struct {
-	TemplateId       string `json:"templateId" dc:"微信订阅消息模板ID"`
-	TemplateReady    bool   `json:"templateReady" dc:"模板ID是否已配置"`
-	WechatBound      bool   `json:"wechatBound" dc:"是否已绑定微信用户"`
-	WechatBindText   string `json:"wechatBindText" dc:"微信绑定状态文本"`
-	AppNotifyEnabled int    `json:"appNotifyEnabled" dc:"是否开启小程序预警通知默认值"`
+	TemplateId        string `json:"templateId" dc:"微信订阅消息模板ID"`
+	TemplateReady     bool   `json:"templateReady" dc:"模板ID是否已配置"`
+	WechatBound       bool   `json:"wechatBound" dc:"是否已绑定微信用户"`
+	WechatBindText    string `json:"wechatBindText" dc:"微信绑定状态文本"`
+	AppNotifyEnabled  int    `json:"appNotifyEnabled" dc:"批量配置表单的默认提醒开关，仅用于兼容旧客户端，不代表当前账号的实际配置状态"`
+	ActiveConfigCount int    `json:"activeConfigCount" dc:"当前账号创建的有效流量预警配置数"`
+	NotifyConfigCount int    `json:"notifyConfigCount" dc:"当前账号创建且开启微信提醒的有效流量预警配置数"`
 }
 
 type AppWarningConfigBatchSaveModel struct {
diff --git a/server/internal/model/app_work_order.go b/server/internal/model/app_work_order.go
index 39461b9..62171ea 100644
--- a/server/internal/model/app_work_order.go
+++ b/server/internal/model/app_work_order.go
@@ -9,16 +9,19 @@ import (
 
 type AppWorkOrderListParam struct {
 	request.PageInfo
+	Scope         string `json:"scope" dc:"工单范围：all或空值全部相关，submitted我提交的，received我收到的"`
 	Keyword       string `json:"keyword" dc:"工单编号、标题或内容"`
 	CurrentStatus int    `json:"currentStatus" dc:"工单状态：0全部，1已分派，2处理中，3已解决，4已完结，5已取消"`
-	WoType        int    `json:"woType" dc:"工单类型：0卡，1模组，2设备，3订单，4余额，5提现"`
+	WoType        *int   `json:"woType" dc:"工单类型：0卡，1模组，2设备，3订单，4余额，5提现"`
 }
 
 type AppWorkOrderDetailParam struct {
-	WoNo string `json:"woNo" v:"required#工单编号不能为空" dc:"工单编号"`
+	BeforeId int64  `json:"beforeId"`
+	WoNo     string `json:"woNo" v:"required#工单编号不能为空" dc:"工单编号"`
 }
 
 type AppWorkOrderCreateParam struct {
+	CreatorPhone   string   `json:"creatorPhone" v:"required#请输入创建人手机号" dc:"创建人手机号"`
 	WoType         int      `json:"woType" dc:"工单类型：0卡，1模组，2设备，3订单，4余额，5提现"`
 	RelatedId      int64    `json:"relatedId" dc:"关联业务ID"`
 	Title          string   `json:"title" v:"required#请输入工单标题" dc:"工单标题"`
@@ -27,6 +30,17 @@ type AppWorkOrderCreateParam struct {
 }
 
 type AppWorkOrderModel struct {
+	AttachmentNames       map[string]string            `json:"attachmentNames,omitempty" dc:"附件URL对应的原始文件名"`
+	IsCreator             bool                         `json:"isCreator"`
+	HasMoreCommunications bool                         `json:"hasMoreCommunications"`
+	Actions               []string                     `json:"actions"`
+	Records               []*AppWorkOrderProgressModel `json:"records,omitempty"`
+	ResolveTime           *gtime.Time                  `json:"resolveTime,omitempty"`
+	CloseTime             *gtime.Time                  `json:"closeTime,omitempty"`
+	SatisfactionLevel     int                          `json:"satisfactionLevel"`
+	EvalContent           string                       `json:"evalContent"`
+	EvalTime              *gtime.Time                  `json:"evalTime,omitempty"`
+
 	Id                int64                    `json:"id" dc:"主键ID"`
 	WoNo              string                   `json:"woNo" dc:"工单编号"`
 	WoType            int                      `json:"woType" dc:"工单类型"`
@@ -56,3 +70,20 @@ type AppWorkOrderCommModel struct {
 	AttachmentUrls *gjson.Json `json:"attachmentUrls,omitempty" dc:"附件URL列表"`
 	CreatedAt      *gtime.Time `json:"createdAt" dc:"创建时间"`
 }
+
+// AppWorkOrderActionParam 按创建人或处理方权限执行工单操作。
+type AppWorkOrderActionParam struct {
+	WoNo              string   `json:"woNo" v:"required#工单编号不能为空"`
+	Action            string   `json:"action" v:"required#请选择工单操作"`
+	Content           string   `json:"content"`
+	AttachmentUrls    []string `json:"attachmentUrls"`
+	SatisfactionLevel int      `json:"satisfactionLevel"`
+}
+type AppWorkOrderProgressModel struct {
+	Id            int64       `json:"id"`
+	OperationType int         `json:"operationType"`
+	OperationText string      `json:"operationText"`
+	BeforeStatus  int         `json:"beforeStatus"`
+	AfterStatus   int         `json:"afterStatus"`
+	CreatedAt     *gtime.Time `json:"createdAt"`
+}
diff --git a/server/internal/model/context.go b/server/internal/model/context.go
index 45e4a5e..6f81f33 100644
--- a/server/internal/model/context.go
+++ b/server/internal/model/context.go
@@ -1,7 +1,7 @@
 // package model
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package model
 
diff --git a/server/internal/model/do/batch_main.go b/server/internal/model/do/batch_main.go
index 0e77e66..4b3eb94 100644
--- a/server/internal/model/do/batch_main.go
+++ b/server/internal/model/do/batch_main.go
@@ -18,19 +18,19 @@ type BatchMain struct {
 	OrderSn          any         // 订单编号
 	BatchType        any         // 批次类型 枚举
 	BatchStatus      any         // 批次状态 枚举
-	BatchAsyncStatus any         // 异步处理状态 0=已创建 1=待处理 2=处理中 3=成功 4=失败 5=部分成功
+	BatchAsyncStatus any         // 异步处理状态
 	SourceType       any         // 来源方式 枚举
 	SourceBatchNo    any         // 来源批次编号
 	SourceOssId      any         // 源文件OSS ID
 	ResultOssId      any         // 结果文件OSS ID
-	IsCrossDept      any         // 是否跨级操作机构 0-否 1-是
+	IsCrossDept      any         // 是否跨级操作机构
 	TargetDeptId     any         // 目标机构编号
 	DeptId           any         // 机构编号
 	TotalCount       any         // 总数量
 	ValidCount       any         // 有效数量
 	SuccessCount     any         // 成功数量
 	FailCount        any         // 失败数量
-	RunResult        any         // 运行结果：0-待运行 1-运行中 2-成功 3-失败
+	RunResult        any         // 运行结果
 	FailReason       any         // 失败原因
 	BatchInfo        *gjson.Json // 批次信息：入库/出库展示字段
 	Remark           *gjson.Json // 备注扩展字段
@@ -42,4 +42,6 @@ type BatchMain struct {
 	CreatedAt        *gtime.Time // 创建时间
 	UpdatedBy        any         // 更新者ID
 	UpdatedAt        *gtime.Time // 更新时间
+	SourceChannel    any         // 发起渠道:console/mini_program/api/system/legacy
+	ExecutionMode    any         // 操作规模:0未知1单卡2批量
 }
diff --git a/server/internal/model/entity/batch_main.go b/server/internal/model/entity/batch_main.go
index 35cc813..3d2c057 100644
--- a/server/internal/model/entity/batch_main.go
+++ b/server/internal/model/entity/batch_main.go
@@ -16,19 +16,19 @@ type BatchMain struct {
 	OrderSn          string      `json:"orderSn"          orm:"order_sn"           description:"订单编号"`
 	BatchType        int         `json:"batchType"        orm:"batch_type"         description:"批次类型 枚举"`
 	BatchStatus      int         `json:"batchStatus"      orm:"batch_status"       description:"批次状态 枚举"`
-	BatchAsyncStatus int         `json:"batchAsyncStatus" orm:"batch_async_status" description:"异步处理状态 0=已创建 1=待处理 2=处理中 3=成功 4=失败 5=部分成功"`
+	BatchAsyncStatus int         `json:"batchAsyncStatus" orm:"batch_async_status" description:"异步处理状态"`
 	SourceType       int         `json:"sourceType"       orm:"source_type"        description:"来源方式 枚举"`
 	SourceBatchNo    string      `json:"sourceBatchNo"    orm:"source_batch_no"    description:"来源批次编号"`
 	SourceOssId      int64       `json:"sourceOssId"      orm:"source_oss_id"      description:"源文件OSS ID"`
 	ResultOssId      int64       `json:"resultOssId"      orm:"result_oss_id"      description:"结果文件OSS ID"`
-	IsCrossDept      int         `json:"isCrossDept"      orm:"is_cross_dept"      description:"是否跨级操作机构 0-否 1-是"`
+	IsCrossDept      int         `json:"isCrossDept"      orm:"is_cross_dept"      description:"是否跨级操作机构"`
 	TargetDeptId     int64       `json:"targetDeptId"     orm:"target_dept_id"     description:"目标机构编号"`
 	DeptId           int64       `json:"deptId"           orm:"dept_id"            description:"机构编号"`
 	TotalCount       int         `json:"totalCount"       orm:"total_count"        description:"总数量"`
 	ValidCount       int         `json:"validCount"       orm:"valid_count"        description:"有效数量"`
 	SuccessCount     int         `json:"successCount"     orm:"success_count"      description:"成功数量"`
 	FailCount        int         `json:"failCount"        orm:"fail_count"         description:"失败数量"`
-	RunResult        int         `json:"runResult"        orm:"run_result"         description:"运行结果：0-待运行 1-运行中 2-成功 3-失败"`
+	RunResult        int         `json:"runResult"        orm:"run_result"         description:"运行结果"`
 	FailReason       string      `json:"failReason"       orm:"fail_reason"        description:"失败原因"`
 	BatchInfo        *gjson.Json `json:"batchInfo"        orm:"batch_info"         description:"批次信息：入库/出库展示字段"`
 	Remark           *gjson.Json `json:"remark"           orm:"remark"             description:"备注扩展字段"`
@@ -40,4 +40,6 @@ type BatchMain struct {
 	CreatedAt        *gtime.Time `json:"createdAt"        orm:"created_at"         description:"创建时间"`
 	UpdatedBy        int64       `json:"updatedBy"        orm:"updated_by"         description:"更新者ID"`
 	UpdatedAt        *gtime.Time `json:"updatedAt"        orm:"updated_at"         description:"更新时间"`
+	SourceChannel    string      `json:"sourceChannel"    orm:"source_channel"     description:"发起渠道:console/mini_program/api/system/legacy"`
+	ExecutionMode    uint        `json:"executionMode"    orm:"execution_mode"     description:"操作规模:0未知1单卡2批量"`
 }
diff --git a/server/internal/model/genin/test_demo.go b/server/internal/model/genin/test_demo.go
index 0c25b5c..affe8f4 100644
--- a/server/internal/model/genin/test_demo.go
+++ b/server/internal/model/genin/test_demo.go
@@ -1,7 +1,7 @@
 // Package genin
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 // @AutoGenerate Version
 package genin
diff --git a/server/internal/model/genin/test_tree.go b/server/internal/model/genin/test_tree.go
index 5f22e48..bff6c60 100644
--- a/server/internal/model/genin/test_tree.go
+++ b/server/internal/model/genin/test_tree.go
@@ -1,7 +1,7 @@
 // Package genin
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2026 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 // @AutoGenerate Version
 package genin
@@ -169,4 +169,4 @@ func (t *TestTreeTreeOption) PID() int64 {
 // SetChildren 设置子节点数据
 func (t *TestTreeTreeOption) SetChildren(children []tree.Node) {
 	t.Children = children
-}
+}
\ No newline at end of file
diff --git a/server/internal/model/monitor_server.go b/server/internal/model/monitor_server.go
index 2be2376..7a2bc3d 100644
--- a/server/internal/model/monitor_server.go
+++ b/server/internal/model/monitor_server.go
@@ -1,7 +1,7 @@
 // package model
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package model
 
diff --git a/server/internal/model/request/common.go b/server/internal/model/request/common.go
index e816e9d..2b5baf2 100644
--- a/server/internal/model/request/common.go
+++ b/server/internal/model/request/common.go
@@ -1,7 +1,7 @@
 // package request
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package request
 
diff --git a/server/internal/model/response/common.go b/server/internal/model/response/common.go
index 9f9000a..578d4dd 100644
--- a/server/internal/model/response/common.go
+++ b/server/internal/model/response/common.go
@@ -1,7 +1,7 @@
 // package response
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package response
 
diff --git a/server/internal/model/sys_auth.go b/server/internal/model/sys_auth.go
index 1b12fce..1563076 100644
--- a/server/internal/model/sys_auth.go
+++ b/server/internal/model/sys_auth.go
@@ -1,7 +1,7 @@
 // package model
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package model
 
diff --git a/server/internal/model/sys_client.go b/server/internal/model/sys_client.go
index 5cca246..56f2e6d 100644
--- a/server/internal/model/sys_client.go
+++ b/server/internal/model/sys_client.go
@@ -1,7 +1,7 @@
 // package model
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package model
 
diff --git a/server/internal/model/sys_config.go b/server/internal/model/sys_config.go
index c9efabc..e011547 100644
--- a/server/internal/model/sys_config.go
+++ b/server/internal/model/sys_config.go
@@ -1,7 +1,7 @@
 // package model
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package model
 
diff --git a/server/internal/model/sys_dept.go b/server/internal/model/sys_dept.go
index 25b380c..8bbec06 100644
--- a/server/internal/model/sys_dept.go
+++ b/server/internal/model/sys_dept.go
@@ -1,7 +1,7 @@
 // package model
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package model
 
diff --git a/server/internal/model/sys_dict.go b/server/internal/model/sys_dict.go
index 84a1d44..43b49d1 100644
--- a/server/internal/model/sys_dict.go
+++ b/server/internal/model/sys_dict.go
@@ -1,7 +1,7 @@
 // package model
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package model
 
diff --git a/server/internal/model/sys_gen_table.go b/server/internal/model/sys_gen_table.go
index 0a89f1b..559db2b 100644
--- a/server/internal/model/sys_gen_table.go
+++ b/server/internal/model/sys_gen_table.go
@@ -1,7 +1,7 @@
 // package model
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package model
 
diff --git a/server/internal/model/sys_job.go b/server/internal/model/sys_job.go
index d2ba0c4..9cd687a 100644
--- a/server/internal/model/sys_job.go
+++ b/server/internal/model/sys_job.go
@@ -1,7 +1,7 @@
 // package model
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package model
 
diff --git a/server/internal/model/sys_logininfor.go b/server/internal/model/sys_logininfor.go
index 7124ae2..d87b6b7 100644
--- a/server/internal/model/sys_logininfor.go
+++ b/server/internal/model/sys_logininfor.go
@@ -1,7 +1,7 @@
 // package model
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package model
 
diff --git a/server/internal/model/sys_menu.go b/server/internal/model/sys_menu.go
index 2e5dbea..ff9b33c 100644
--- a/server/internal/model/sys_menu.go
+++ b/server/internal/model/sys_menu.go
@@ -1,7 +1,7 @@
 // package model
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package model
 
diff --git a/server/internal/model/sys_notice.go b/server/internal/model/sys_notice.go
index 8573aa9..77552a9 100644
--- a/server/internal/model/sys_notice.go
+++ b/server/internal/model/sys_notice.go
@@ -1,7 +1,7 @@
 // package model
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package model
 
diff --git a/server/internal/model/sys_notice_user.go b/server/internal/model/sys_notice_user.go
index 1dcdc8b..771e5f3 100644
--- a/server/internal/model/sys_notice_user.go
+++ b/server/internal/model/sys_notice_user.go
@@ -1,17 +1,17 @@
 // Package genin
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 // @AutoGenerate Version
 package model
 
 import (
 	"context"
+	"slices"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/xgorm/hook"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/request"
-	"slices"
 
 	"github.com/gogf/gf/v2/errors/gerror"
 	"github.com/gogf/gf/v2/os/gtime"
diff --git a/server/internal/model/sys_oper_log.go b/server/internal/model/sys_oper_log.go
index f6dffe0..9d43083 100644
--- a/server/internal/model/sys_oper_log.go
+++ b/server/internal/model/sys_oper_log.go
@@ -1,7 +1,7 @@
 // package model
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package model
 
diff --git a/server/internal/model/sys_oss.go b/server/internal/model/sys_oss.go
index a44e50f..ec2e8f9 100644
--- a/server/internal/model/sys_oss.go
+++ b/server/internal/model/sys_oss.go
@@ -1,7 +1,7 @@
 // package model
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package model
 
diff --git a/server/internal/model/sys_oss_config.go b/server/internal/model/sys_oss_config.go
index bb084af..9355cd7 100644
--- a/server/internal/model/sys_oss_config.go
+++ b/server/internal/model/sys_oss_config.go
@@ -1,7 +1,7 @@
 // package model
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package model
 
diff --git a/server/internal/model/sys_post.go b/server/internal/model/sys_post.go
index f7aa330..cc5998c 100644
--- a/server/internal/model/sys_post.go
+++ b/server/internal/model/sys_post.go
@@ -1,7 +1,7 @@
 // package model
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package model
 
diff --git a/server/internal/model/sys_role.go b/server/internal/model/sys_role.go
index 82e8d0a..3b5933b 100644
--- a/server/internal/model/sys_role.go
+++ b/server/internal/model/sys_role.go
@@ -1,7 +1,7 @@
 // package model
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package model
 
diff --git a/server/internal/model/sys_social.go b/server/internal/model/sys_social.go
index 1fd12e0..51c72da 100644
--- a/server/internal/model/sys_social.go
+++ b/server/internal/model/sys_social.go
@@ -1,7 +1,7 @@
 // package model
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package model
 
diff --git a/server/internal/model/sys_tenant.go b/server/internal/model/sys_tenant.go
index b2b69af..fe0a5e6 100644
--- a/server/internal/model/sys_tenant.go
+++ b/server/internal/model/sys_tenant.go
@@ -1,7 +1,7 @@
 // package model
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package model
 
diff --git a/server/internal/model/sys_tenant_package.go b/server/internal/model/sys_tenant_package.go
index aee0362..6a1fc75 100644
--- a/server/internal/model/sys_tenant_package.go
+++ b/server/internal/model/sys_tenant_package.go
@@ -1,7 +1,7 @@
 // package model
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package model
 
diff --git a/server/internal/model/sys_user.go b/server/internal/model/sys_user.go
index bc381d2..c1d5a8d 100644
--- a/server/internal/model/sys_user.go
+++ b/server/internal/model/sys_user.go
@@ -1,7 +1,7 @@
 // package model
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package model
 
diff --git a/server/internal/model/sys_user_online.go b/server/internal/model/sys_user_online.go
index 2642e23..e8a3ba6 100644
--- a/server/internal/model/sys_user_online.go
+++ b/server/internal/model/sys_user_online.go
@@ -1,7 +1,7 @@
 // package model
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package model
 
diff --git a/server/internal/model/work_order_queue.go b/server/internal/model/work_order_queue.go
new file mode 100644
index 0000000..ac63206
--- /dev/null
+++ b/server/internal/model/work_order_queue.go
@@ -0,0 +1,7 @@
+package model
+
+// WorkOrderAutoCloseMessage triggers the shared worker's delayed close.
+type WorkOrderAutoCloseMessage struct {
+	WoNo          string `json:"woNo"`
+	ResolveTimeTs int64  `json:"resolveTimeTs"`
+}
diff --git a/server/internal/packed/packed.go b/server/internal/packed/packed.go
index 25355af..31e510e 100644
--- a/server/internal/packed/packed.go
+++ b/server/internal/packed/packed.go
@@ -1,6 +1,6 @@
 // package packed
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package packed
diff --git a/server/internal/packed/response/response.go b/server/internal/packed/response/response.go
index ebe24b1..6ff3a03 100644
--- a/server/internal/packed/response/response.go
+++ b/server/internal/packed/response/response.go
@@ -1,7 +1,7 @@
 // package response
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package response
 
diff --git a/server/internal/queues/base.go b/server/internal/queues/base.go
index 84435a5..0f3e2f3 100644
--- a/server/internal/queues/base.go
+++ b/server/internal/queues/base.go
@@ -1,7 +1,7 @@
 // package queues
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package queues
 
diff --git a/server/internal/queues/httpqueues/sys_opt_log_queue.go b/server/internal/queues/httpqueues/sys_opt_log_queue.go
index 9f9eeeb..fea324d 100644
--- a/server/internal/queues/httpqueues/sys_opt_log_queue.go
+++ b/server/internal/queues/httpqueues/sys_opt_log_queue.go
@@ -1,7 +1,7 @@
 // package queues
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package httpqueues
 
diff --git a/server/internal/router/app.go b/server/internal/router/app.go
index 87984e3..e86d37c 100644
--- a/server/internal/router/app.go
+++ b/server/internal/router/app.go
@@ -3,7 +3,11 @@ package router
 import (
 	"context"
 
+	"github.com/gogf/gf/v2/errors/gcode"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/controller/app"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/contexts"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/mcache"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/packed/response"
 	"git.5iot.com/iotlcm-public/iotlcm-app/internal/service"
 
 	"github.com/gogf/gf/v2/net/ghttp"
@@ -12,10 +16,25 @@ import (
 func App(ctx context.Context, group *ghttp.RouterGroup) {
 	group.Group("/", func(group *ghttp.RouterGroup) {
 		group.Middleware(
+			func(r *ghttp.Request) {
+				ctx := r.GetCtx()
+				userId := contexts.GetUserId(ctx)
+				if userId != 0 && !contexts.IsSuperAdmin(ctx) {
+					freshCtx, err := mcache.WithFreshUserAccess(ctx, userId)
+					if err != nil {
+						response.JsonExit(r, gcode.CodeNotAuthorized.Code(), "权限校验失败，请重试")
+						return
+					}
+					r.SetCtx(freshCtx)
+				}
+				r.Middleware.Next()
+			},
 			service.Middleware().Auth,
 		)
 		group.Bind(
 			app.NewV1(),
+			&app.ExecutionLogController{},
+			&app.AllocateResultController{},
 		)
 	})
 }
diff --git a/server/internal/router/common.go b/server/internal/router/common.go
index a7e0887..64a586a 100644
--- a/server/internal/router/common.go
+++ b/server/internal/router/common.go
@@ -1,7 +1,7 @@
 // package router
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package router
 
diff --git a/server/internal/router/gen.go b/server/internal/router/gen.go
index 216002c..f4100db 100644
--- a/server/internal/router/gen.go
+++ b/server/internal/router/gen.go
@@ -1,7 +1,7 @@
 // package router
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package router
 
diff --git a/server/internal/router/gen_codes.go b/server/internal/router/gen_codes.go
index cba11d5..994b3d8 100644
--- a/server/internal/router/gen_codes.go
+++ b/server/internal/router/gen_codes.go
@@ -1,7 +1,7 @@
 // package router
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package router
 
diff --git a/server/internal/router/genrouter/init.go b/server/internal/router/genrouter/init.go
index 9139f51..0d7be6a 100644
--- a/server/internal/router/genrouter/init.go
+++ b/server/internal/router/genrouter/init.go
@@ -1,7 +1,7 @@
 // package genrouter
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package genrouter
 
diff --git a/server/internal/router/genrouter/test_demo.go b/server/internal/router/genrouter/test_demo.go
index b37d822..322889a 100644
--- a/server/internal/router/genrouter/test_demo.go
+++ b/server/internal/router/genrouter/test_demo.go
@@ -1,7 +1,7 @@
 // Package genrouter
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 // @AutoGenerate Version
 package genrouter
diff --git a/server/internal/router/genrouter/test_tree.go b/server/internal/router/genrouter/test_tree.go
index d2c7b0c..eeb6e7f 100644
--- a/server/internal/router/genrouter/test_tree.go
+++ b/server/internal/router/genrouter/test_tree.go
@@ -1,7 +1,7 @@
 // Package genrouter
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2026 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 // @AutoGenerate Version
 package genrouter
@@ -10,4 +10,4 @@ import "git.5iot.com/iotlcm-public/iotlcm-app/internal/controller/gen"
 
 func init() {
 	LoginRequiredRouter = append(LoginRequiredRouter, gen.TestTree) // 测试树表
-}
+}
\ No newline at end of file
diff --git a/server/internal/router/monitor.go b/server/internal/router/monitor.go
index 49293fa..be9e4da 100644
--- a/server/internal/router/monitor.go
+++ b/server/internal/router/monitor.go
@@ -1,7 +1,7 @@
 // package router
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package router
 
diff --git a/server/internal/router/router.go b/server/internal/router/router.go
index faf06f0..b49b205 100644
--- a/server/internal/router/router.go
+++ b/server/internal/router/router.go
@@ -1,7 +1,7 @@
 // package router
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package router
 
diff --git a/server/internal/router/system.go b/server/internal/router/system.go
index 4733cf2..2658f64 100644
--- a/server/internal/router/system.go
+++ b/server/internal/router/system.go
@@ -1,7 +1,7 @@
 // package router
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package router
 
diff --git a/server/internal/service/allocatedispatch/service.go b/server/internal/service/allocatedispatch/service.go
new file mode 100644
index 0000000..e9371b7
--- /dev/null
+++ b/server/internal/service/allocatedispatch/service.go
@@ -0,0 +1,144 @@
+package allocatedispatch
+
+import (
+	"context"
+	"strings"
+	"time"
+
+	"github.com/gogf/gf/v2/frame/g"
+	"github.com/gogf/gf/v2/os/gtime"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/dao"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/batchmetadata"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/rabbitmq"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/entity"
+)
+
+type message struct {
+	BatchNo   string `json:"batchNo"`
+	BatchType int    `json:"batchType"`
+}
+
+func Start(ctx context.Context) context.CancelFunc {
+	ctx, cancel := context.WithCancel(ctx)
+	if !g.Cfg().MustGet(ctx, "workerBatchAsync.enabled", false).Bool() || !g.Cfg().MustGet(ctx, "workerBatchAsync.allocateRecovery.enabled", true).Bool() {
+		return cancel
+	}
+	interval := g.Cfg().MustGet(ctx, "workerBatchAsync.allocateRecovery.intervalSeconds", 60).Int()
+	if interval < 30 {
+		interval = 30
+	}
+	go func() {
+		ticker := time.NewTicker(time.Duration(interval) * time.Second)
+		defer ticker.Stop()
+		var cursor int64
+		for {
+			select {
+			case <-ctx.Done():
+				return
+			case <-ticker.C:
+				next, err := recoverPage(ctx, cursor, publish)
+				if err != nil {
+					g.Log().Errorf(ctx, "划拨任务补投失败: %+v", err)
+				} else {
+					cursor = next
+				}
+			}
+		}
+	}()
+	return cancel
+}
+
+func due(batch *entity.BatchMain, now time.Time, processingDelay time.Duration) bool {
+	if batch == nil || batch.BatchType != consts.BatchTypeAllocate || batch.SourceChannel != batchmetadata.MiniProgram {
+		return false
+	}
+	delay := time.Minute
+	switch batch.BatchAsyncStatus {
+	case consts.BatchAsyncStatusPending:
+	case consts.BatchAsyncStatusProcessing:
+		delay = processingDelay
+	default:
+		return false
+	}
+	timestamp := batch.UpdatedAt
+	if batch.BatchAsyncStatus == consts.BatchAsyncStatusProcessing && batch.StartTime != nil && !batch.StartTime.IsZero() {
+		timestamp = batch.StartTime
+	}
+	if timestamp == nil || timestamp.IsZero() {
+		timestamp = batch.CreatedAt
+	}
+	if timestamp == nil || timestamp.IsZero() {
+		return false
+	}
+	return !timestamp.Time.Add(delay).After(now)
+}
+
+func recoverPage(ctx context.Context, cursor int64, send func(context.Context, string, string) error) (int64, error) {
+	if ctx.Err() != nil {
+		return cursor, ctx.Err()
+	}
+	columns := dao.BatchMain.Columns()
+	var parents []*entity.BatchMain
+	err := dao.BatchMain.Ctx(ctx).Where(columns.Id+" > ?", cursor).
+		Where(columns.BatchType, consts.BatchTypeAllocate).Where(columns.SourceChannel, batchmetadata.MiniProgram).
+		Where("COALESCE(source_batch_no, '') = ''").
+		WhereIn(columns.BatchAsyncStatus, []int{consts.BatchAsyncStatusPending, consts.BatchAsyncStatusProcessing}).
+		OrderAsc(columns.Id).Limit(50).Scan(&parents)
+	if err != nil {
+		return cursor, err
+	}
+	if len(parents) == 0 {
+		return 0, nil
+	}
+	minutes := g.Cfg().MustGet(ctx, "workerBatchAsync.allocateRecovery.processingRetryMinutes", 30).Int()
+	if minutes < 30 {
+		minutes = 30
+	}
+	delay := time.Duration(minutes) * time.Minute
+	queue := strings.TrimSpace(g.Cfg().MustGet(ctx, "workerBatchAsync.queueName", "iotlcm.batch.execute").String())
+	if queue == "" {
+		queue = "iotlcm.batch.execute"
+	}
+	for _, parent := range parents {
+		if ctx.Err() != nil {
+			return cursor, ctx.Err()
+		}
+		cursor = parent.Id
+		if parent.BatchInfo == nil || parent.BatchInfo.Get("jobRole").String() != "allocate_parent" || !due(parent, time.Now(), delay) {
+			continue
+		}
+		var children []*entity.BatchMain
+		err = dao.BatchMain.Ctx(ctx).Where(columns.SourceBatchNo, parent.BatchNo).
+			Where(columns.BatchType, consts.BatchTypeAllocate).Where(columns.TenantId, parent.TenantId).
+			Where(columns.CreatedBy, parent.CreatedBy).Where(columns.SourceChannel, batchmetadata.MiniProgram).Scan(&children)
+		if err != nil {
+			return cursor, err
+		}
+		for _, child := range children {
+			if child.BatchInfo == nil || child.BatchInfo.Get("jobRole").String() != "allocate_chunk" || !due(child, time.Now(), delay) {
+				continue
+			}
+			if err := send(ctx, queue, child.BatchNo); err != nil {
+				g.Log().Errorf(ctx, "划拨子任务补投失败 batchNo:%s err:%+v", child.BatchNo, err)
+			}
+		}
+		if err := send(ctx, queue, parent.BatchNo); err != nil {
+			g.Log().Errorf(ctx, "划拨父任务补投失败 batchNo:%s err:%+v", parent.BatchNo, err)
+		}
+	}
+	if len(parents) < 50 {
+		return 0, nil
+	}
+	return cursor, nil
+}
+
+func publish(ctx context.Context, queue, batchNo string) error {
+	ctx, cancel := context.WithTimeout(ctx, 10*time.Second)
+	defer cancel()
+	err := rabbitmq.Publish(ctx, queue, message{BatchNo: batchNo, BatchType: consts.BatchTypeAllocate})
+	if err == nil {
+		g.Log().Infof(ctx, "划拨持久任务补投 batchNo:%s time:%s", batchNo, gtime.Now())
+	}
+	return err
+}
diff --git a/server/internal/service/allocatedispatch/service_test.go b/server/internal/service/allocatedispatch/service_test.go
new file mode 100644
index 0000000..1d4eae8
--- /dev/null
+++ b/server/internal/service/allocatedispatch/service_test.go
@@ -0,0 +1,77 @@
+package allocatedispatch
+
+import (
+	"context"
+	"errors"
+	_ "github.com/gogf/gf/contrib/drivers/sqlite/v2"
+	"github.com/gogf/gf/v2/database/gdb"
+	"github.com/gogf/gf/v2/frame/g"
+	"github.com/gogf/gf/v2/os/gtime"
+	"testing"
+	"time"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/entity"
+)
+
+func TestDue(t *testing.T) {
+	now := time.Now()
+	for _, test := range []struct {
+		status int
+		age    time.Duration
+		due    bool
+	}{{1, 59 * time.Second, false}, {1, 2 * time.Minute, true}, {2, 29 * time.Minute, false}, {2, 31 * time.Minute, true}, {3, time.Hour, false}, {4, time.Hour, false}, {5, time.Hour, false}} {
+		batch := &entity.BatchMain{BatchType: 3, SourceChannel: "mini_program", BatchAsyncStatus: test.status, UpdatedAt: gtime.New(now.Add(-test.age))}
+		if due(batch, now, 30*time.Minute) != test.due {
+			t.Fatal(test)
+		}
+	}
+	if due(&entity.BatchMain{BatchType: 3, SourceChannel: "console", BatchAsyncStatus: 1, UpdatedAt: gtime.New(now.Add(-time.Hour))}, now, 30*time.Minute) {
+		t.Fatal("foreign channel replayed")
+	}
+	if due(&entity.BatchMain{BatchType: 3, SourceChannel: "mini_program", BatchAsyncStatus: 1}, now, 30*time.Minute) {
+		t.Fatal("missing time replayed")
+	}
+}
+
+func TestRecoveryPersistsFailureAndIsolatesParents(t *testing.T) {
+	ctx := context.Background()
+	if err := gdb.SetConfig(gdb.Config{"default": gdb.ConfigGroup{{Type: "sqlite", Link: "sqlite::@file(:memory:)", MaxOpenConnCount: 1}}}); err != nil {
+		t.Fatal(err)
+	}
+	t.Cleanup(func() { _ = g.DB().Close(ctx) })
+	for _, sql := range []string{
+		`CREATE TABLE batch_main (id INTEGER PRIMARY KEY,batch_no TEXT,batch_type INTEGER,source_batch_no TEXT,source_channel TEXT,batch_async_status INTEGER,tenant_id TEXT,created_by INTEGER,batch_info TEXT,created_at TEXT,updated_at TEXT,start_time TEXT)`,
+		`INSERT INTO batch_main VALUES (1,'PARENT',3,'','mini_program',1,'A',7,'{"jobRole":"allocate_parent"}','2020-01-01','2020-01-01',NULL), (2,'CHILD',3,'PARENT','mini_program',1,'A',7,'{"jobRole":"allocate_chunk"}','2020-01-01','2020-01-01',NULL), (3,'FOREIGN',3,'PARENT','mini_program',1,'B',7,'{"jobRole":"allocate_chunk"}','2020-01-01','2020-01-01',NULL), (4,'DONE',3,'','mini_program',3,'A',7,'{"jobRole":"allocate_parent"}','2020-01-01','2020-01-01',NULL), (5,'OTHER',101,'','mini_program',1,'A',7,'{}','2020-01-01','2020-01-01',NULL), (6,'CONSOLE',3,'','console',1,'A',7,'{"jobRole":"allocate_parent"}','2020-01-01','2020-01-01',NULL)`,
+	} {
+		if _, err := g.DB().Exec(ctx, sql); err != nil {
+			t.Fatal(err)
+		}
+	}
+	for _, fail := range []bool{true, false} {
+		var calls []string
+		cursor, err := recoverPage(ctx, 0, func(ctx context.Context, queue, batchNo string) error {
+			calls = append(calls, batchNo)
+			if queue != "iotlcm.batch.execute" {
+				t.Fatal(queue)
+			}
+			if fail {
+				return errors.New("queue offline")
+			}
+			return nil
+		})
+		if err != nil || cursor != 0 || len(calls) != 2 || calls[0] != "CHILD" || calls[1] != "PARENT" {
+			t.Fatal(calls, cursor, err)
+		}
+	}
+	if _, err := g.DB().Exec(ctx, `UPDATE batch_main SET batch_async_status=3 WHERE batch_no='PARENT'`); err != nil {
+		t.Fatal(err)
+	}
+	_, err := recoverPage(ctx, 0, func(context.Context, string, string) error { t.Fatal("terminal parent replayed"); return nil })
+	if err != nil {
+		t.Fatal(err)
+	}
+	cancelled, cancel := context.WithCancel(ctx)
+	cancel()
+	if _, err := recoverPage(cancelled, 0, func(context.Context, string, string) error { t.Fatal("cancelled replay"); return nil }); err == nil {
+		t.Fatal("cancel ignored")
+	}
+}
diff --git a/server/internal/service/app.go b/server/internal/service/app.go
index 02ffe68..3401627 100644
--- a/server/internal/service/app.go
+++ b/server/internal/service/app.go
@@ -19,6 +19,7 @@ type (
 		SendSms(ctx context.Context, param *model.AppSendSmsParam) (res *model.AppSendSmsModel, err error)
 		PhoneRegister(ctx context.Context, param *model.AppPhoneRegisterParam) (res *model.AppAuthTokenModel, err error)
 		PhoneLogin(ctx context.Context, param *model.AppPhoneLoginParam) (res *model.AppAuthTokenModel, err error)
+		PhoneSmsLogin(ctx context.Context, param *model.AppPhoneSmsLoginParam) (res *model.AppAuthTokenModel, err error)
 		WechatLogin(ctx context.Context, param *model.AppWechatLoginParam) (res *model.AppWechatLoginModel, err error)
 		WechatBindPhone(ctx context.Context, param *model.AppWechatBindPhoneParam) (res *model.AppWechatBindPhoneModel, err error)
 		BindWechatOpenIdByLoginCode(ctx context.Context, user *entity.SysUser, wxCode string) error
@@ -79,7 +80,10 @@ type (
 		RecognizeCard(ctx context.Context) (res *model.AppCardRecognitionModel, err error)
 	}
 	IAppUser interface {
-		CustomerList(ctx context.Context, param *model.AppCustomerListParam) (items []*model.AppCustomerModel, total int, err error)
+		WarningPreference(ctx context.Context) (*model.AppWarningPreferenceModel, error)
+		SaveWarningPreference(ctx context.Context, param *model.AppWarningPreferenceParam) (*model.AppWarningPreferenceModel, error)
+		UnbindWechat(ctx context.Context) (*model.AppWechatBindModel, error)
+		CustomerList(ctx context.Context, param *model.AppCustomerListParam) (items []*model.AppCustomerModel, total int, summary *model.AppCustomerSummary, err error)
 		CustomerDetail(ctx context.Context, param *model.AppCustomerDetailParam) (*model.AppCustomerDetailModel, error)
 		Info(ctx context.Context) (res *model.AppUserInfoModel, err error)
 		UpdateInfo(ctx context.Context, param *model.AppUpdateUserInfoParam) (res *model.AppUserInfoModel, err error)
@@ -103,6 +107,7 @@ type (
 		ConfigBatchNotify(ctx context.Context, param *model.AppWarningConfigBatchNotifyParam) (res *model.AppWarningConfigBatchNotifyModel, err error)
 	}
 	IAppWorkOrder interface {
+		Action(ctx context.Context, param *model.AppWorkOrderActionParam) error
 		Upload(ctx context.Context) (output *model.SysOssUploadModel, err error)
 		List(ctx context.Context, param *model.AppWorkOrderListParam) (items []*model.AppWorkOrderModel, total int, err error)
 		Detail(ctx context.Context, param *model.AppWorkOrderDetailParam) (res *model.AppWorkOrderModel, err error)
diff --git a/server/internal/service/executionlog/service.go b/server/internal/service/executionlog/service.go
new file mode 100644
index 0000000..94bc6b4
--- /dev/null
+++ b/server/internal/service/executionlog/service.go
@@ -0,0 +1,303 @@
+package executionlog
+
+import (
+	"context"
+	"github.com/gogf/gf/v2/database/gdb"
+	"github.com/gogf/gf/v2/errors/gerror"
+	"github.com/gogf/gf/v2/frame/g"
+	"github.com/gogf/gf/v2/util/gconv"
+	"regexp"
+	"slices"
+	"strings"
+	"unicode/utf8"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/dao"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/allocationunits"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/batchmetadata"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/contexts"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/xgorm/handler"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model"
+)
+
+// 办理结果只允许发起人查看；通用批次日志沿用控制台的数据范围。
+type ownerOnlyKey struct{}
+
+func scope(ctx context.Context) (*gdb.Model, error) {
+	if contexts.GetUserId(ctx) <= 0 || strings.TrimSpace(contexts.GetTenantId(ctx)) == "" {
+		return nil, gerror.New("请先登录")
+	}
+	return scopedModel(ctx, dao.BatchMain.Ctx(ctx))
+}
+
+func scopedModel(ctx context.Context, mod *gdb.Model) (*gdb.Model, error) {
+	user, tenant := contexts.GetUserId(ctx), strings.TrimSpace(contexts.GetTenantId(ctx))
+	if user <= 0 || tenant == "" {
+		return nil, gerror.New("请先登录")
+	}
+	mod = mod.Where("tenant_id", tenant)
+	if ownerOnly, _ := ctx.Value(ownerOnlyKey{}).(bool); ownerOnly {
+		return mod.Where("created_by", user), nil
+	}
+	if contexts.IsSuperAdmin(ctx) {
+		return mod, nil
+	}
+	// 菜单范围由认证中间件读取当前数据库后写入，优先于登录时的角色快照。
+	roleId := gconv.Int64(contexts.GetDataValue(ctx, "currentRoleId"))
+	dataScope := gconv.String(contexts.GetDataValue(ctx, "currentRoleDataScope"))
+	if roleId > 0 && dataScope != "" && len(contexts.GetRoles(ctx)) == 0 {
+		identity := *contexts.GetUser(ctx)
+		identity.Roles = []model.Role{{RoleId: roleId, DataScope: dataScope}}
+		copied := *contexts.Get(ctx)
+		copied.User = &identity
+		ctx = contexts.Set(ctx, &copied)
+		mod = mod.Ctx(ctx)
+	}
+	if len(contexts.GetRoles(ctx)) == 0 {
+		return mod.Where("1 = 0"), nil
+	}
+	validScopes := []string{
+		consts.SysRoleDataScopeAll, consts.SysRoleDataScopeCustom,
+		consts.SysRoleDataScopeDept, consts.SysRoleDataScopeDeptAndBelow,
+		consts.SysRoleDataScopePersonal, consts.SysRoleDataScopeDeptAndBelowOrPersonal,
+		consts.SysRoleDataScopeOrgAndNextLevel, consts.SysRoleDataScopeOrgNextLevel,
+	}
+	if roleId > 0 && dataScope != "" {
+		if !slices.Contains(validScopes, dataScope) {
+			return mod.Where("1 = 0"), nil
+		}
+	} else {
+		for _, role := range contexts.GetRoles(ctx) {
+			if !slices.Contains(validScopes, role.DataScope) {
+				return mod.Where("1 = 0"), nil
+			}
+		}
+	}
+	// 先生成创建部门/创建人的过滤条件，再选择返回字段，避免 DTO 缺少权限字段导致漏过滤。
+	return handler.FilterAuth(mod.Fields("created_dept", "created_by")), nil
+}
+
+func dbError(ctx context.Context, err error) error {
+	g.Log().Error(ctx, "execution log query failed", err)
+	return gerror.New("执行日志查询失败，请稍后重试")
+}
+
+func paging(page, size int) (int, int) {
+	if page < 1 {
+		page = 1
+	}
+	if size < 1 {
+		size = 20
+	}
+	if size > 100 {
+		size = 100
+	}
+	return page, size
+}
+
+func normalize(item *model.AppExecutionLogItem) {
+	item.SourceChannel = batchmetadata.Channel(item.SourceChannel)
+	if !batchmetadata.ValidMode(item.ExecutionMode) {
+		item.ExecutionMode = batchmetadata.Unknown
+	}
+	item.FailReason = safeReason(item.FailReason)
+}
+
+// Do not expose internal network addresses, credentials or stack traces to mobile clients.
+var publicErrorCode = regexp.MustCompile("^[A-Za-z0-9_.-]{1,64}$")
+
+func safeReason(value string) string {
+	value = strings.TrimSpace(value)
+	if value == "" {
+		return ""
+	}
+	lower := strings.ToLower(value)
+	for _, marker := range []string{"token", "secret", "password", "authorization", "api_key", "apikey", "http:", "https:", "rpc", "sql", "tcp", "panic", "goroutine", "stack", "/src/", "/app/", "dial ", "127.0.", "192." + "168.", "10.", "172.", "sk-", "mysql", "redis"} {
+		if strings.Contains(lower, marker) {
+			return "执行失败，请凭批次号联系客服核查"
+		}
+	}
+	if strings.ContainsAny(value, "\r\n") || utf8.RuneCountInString(value) > 180 {
+		return "执行失败，请凭批次号联系客服核查"
+	}
+	return value
+}
+
+func List(ctx context.Context, in *model.AppExecutionLogListParam) ([]*model.AppExecutionLogItem, int, error) {
+	mod, err := scope(ctx)
+	if err != nil {
+		return nil, 0, err
+	}
+	if in == nil {
+		in = &model.AppExecutionLogListParam{}
+	}
+	c := dao.BatchMain.Columns()
+	mod = mod.Fields(model.AppExecutionLogItem{})
+	if n := strings.TrimSpace(in.BatchNo); n != "" {
+		mod = mod.Where(c.BatchNo, n)
+	}
+	if in.SourceChannel != "" {
+		mod = mod.Where(c.SourceChannel, in.SourceChannel)
+	}
+	if in.ExecutionMode != nil {
+		mod = mod.Where(c.ExecutionMode, *in.ExecutionMode)
+	}
+	if in.SourceType != nil {
+		mod = mod.Where(c.SourceType, *in.SourceType)
+	}
+	if in.BatchAsyncStatus != nil {
+		mod = mod.Where(c.BatchAsyncStatus, *in.BatchAsyncStatus)
+	}
+	// Split allocation children are execution details, not a second user submission.
+	// Allocation children are execution details of the parent submission. The
+	// source_batch_no relation is authoritative; batch_info is only descriptive.
+	mod = mod.Where("NOT (batch_type = ? AND COALESCE(source_batch_no, '') <> '' AND source_batch_no <> batch_no)", consts.BatchTypeAllocate)
+	page, size := paging(in.Page, in.PageSize)
+	items := make([]*model.AppExecutionLogItem, 0)
+	total := 0
+	if err = mod.Page(page, size).OrderDesc(c.Id).ScanAndCount(&items, &total, false); err != nil {
+		return nil, 0, dbError(ctx, err)
+	}
+	unitFields := []*allocationunits.Fields{}
+	for _, item := range items {
+		normalize(item)
+		if item.BatchType == consts.BatchTypeAllocate {
+			item.Fields = allocationunits.Resolve(item.UnitInfo, item.StoredSourceDeptId, item.StoredTargetDeptId)
+			unitFields = append(unitFields, &item.Fields)
+		}
+	}
+	if err := allocationunits.Fill(ctx, contexts.GetTenantId(ctx), unitFields); err != nil {
+		return nil, 0, dbError(ctx, err)
+	}
+	return items, total, nil
+}
+
+func ensureAllocateParent(ctx context.Context, batchNo string) error {
+	mod, err := scope(ctx)
+	if err != nil {
+		return err
+	}
+	columns := dao.BatchMain.Columns()
+	count, err := mod.Where(columns.BatchNo, strings.TrimSpace(batchNo)).Where("(batch_type = ? OR (batch_type = ? AND JSON_EXTRACT(batch_info, '$.targetBatchType') = ?))", consts.BatchTypeAllocate, consts.BatchTypePrepare, consts.BatchTypeAllocate).Where("COALESCE(source_batch_no, '') = ''").Count()
+	if err != nil {
+		return dbError(ctx, err)
+	}
+	if count != 1 {
+		return gerror.New("划拨批次不存在或无权查看")
+	}
+	return nil
+}
+func AllocateSummary(ctx context.Context, batchNo string) (*model.AppExecutionLogItem, error) {
+	ctx = context.WithValue(ctx, ownerOnlyKey{}, true)
+	if err := ensureAllocateParent(ctx, batchNo); err != nil {
+		return nil, err
+	}
+	return Summary(ctx, batchNo)
+}
+func AllocateDetails(ctx context.Context, in *model.AppExecutionLogDetailParam) ([]*model.AppExecutionLogDetail, int, error) {
+	ctx = context.WithValue(ctx, ownerOnlyKey{}, true)
+	if in == nil {
+		return nil, 0, gerror.New("批次号不能为空")
+	}
+	if err := ensureAllocateParent(ctx, in.BatchNo); err != nil {
+		return nil, 0, err
+	}
+	return Details(ctx, in)
+}
+
+func Summary(ctx context.Context, batchNo string) (*model.AppExecutionLogItem, error) {
+	mod, err := scope(ctx)
+	if err != nil {
+		return nil, err
+	}
+	if strings.TrimSpace(batchNo) == "" {
+		return nil, gerror.New("批次号不能为空")
+	}
+	var item *model.AppExecutionLogItem
+	if err = mod.Fields(model.AppExecutionLogItem{}).
+		Where(dao.BatchMain.Columns().BatchNo, batchNo).
+		Where("NOT (batch_type = ? AND COALESCE(source_batch_no, '') <> '' AND source_batch_no <> batch_no)", consts.BatchTypeAllocate).
+		Scan(&item); err != nil {
+		return nil, dbError(ctx, err)
+	}
+	if item == nil {
+		return nil, gerror.New("执行日志不存在或无权查看")
+	}
+	normalize(item)
+	if item.BatchType == consts.BatchTypeAllocate {
+		item.Fields = allocationunits.Resolve(item.UnitInfo, item.StoredSourceDeptId, item.StoredTargetDeptId)
+		if err := allocationunits.Fill(ctx, contexts.GetTenantId(ctx), []*allocationunits.Fields{&item.Fields}); err != nil {
+			return nil, dbError(ctx, err)
+		}
+	}
+	return item, nil
+}
+
+func Details(ctx context.Context, in *model.AppExecutionLogDetailParam) ([]*model.AppExecutionLogDetail, int, error) {
+	if in == nil {
+		return nil, 0, gerror.New("批次号不能为空")
+	}
+	parent, err := Summary(ctx, in.BatchNo)
+	if err != nil {
+		return nil, 0, err
+	}
+	c := dao.BatchDetail.Columns()
+	mod, err := scopedModel(ctx, dao.BatchDetail.Ctx(ctx))
+	if err != nil {
+		return nil, 0, err
+	}
+	mod = mod.Fields(model.AppExecutionLogDetail{})
+	if parent.BatchType == consts.BatchTypeAllocate {
+		// 先按当前菜单的数据范围解析子批次，再用批次号索引查询明细。
+		var children []struct {
+			BatchNo string `orm:"batch_no"`
+		}
+		mainColumns := dao.BatchMain.Columns()
+		childrenMod, err := scope(ctx)
+		if err != nil {
+			return nil, 0, err
+		}
+		if err := childrenMod.Fields(mainColumns.BatchNo).
+			Where(mainColumns.SourceBatchNo, in.BatchNo).Where(mainColumns.BatchType, parent.BatchType).
+			Where(mainColumns.BatchNo+" <> ?", in.BatchNo).Scan(&children); err != nil {
+			return nil, 0, dbError(ctx, err)
+		}
+		batchNos := []string{in.BatchNo}
+		for _, child := range children {
+			batchNos = append(batchNos, child.BatchNo)
+		}
+		mod = mod.WhereIn(c.BatchNo, batchNos)
+	} else {
+		mod = mod.Where(c.BatchNo, in.BatchNo)
+	}
+	if in.DetailStatus != nil {
+		mod = mod.Where(c.DetailStatus, *in.DetailStatus)
+	}
+	page, size := paging(in.Page, in.PageSize)
+	items := make([]*model.AppExecutionLogDetail, 0)
+	total := 0
+	if err = mod.OrderAsc(c.Id).Page(page, size).ScanAndCount(&items, &total, false); err != nil {
+		return nil, 0, dbError(ctx, err)
+	}
+	unitFields := []*allocationunits.Fields{}
+	for index, item := range items {
+		if parent.BatchType == consts.BatchTypeAllocate {
+			item.Fields = allocationunits.Resolve(item.UnitInfo, parent.SourceDeptId, parent.TargetDeptId)
+			if item.SourceDeptName == "" && item.SourceDeptId == parent.SourceDeptId {
+				item.SourceDeptName = parent.SourceDeptName
+			}
+			if item.TargetDeptName == "" && item.TargetDeptId == parent.TargetDeptId {
+				item.TargetDeptName = parent.TargetDeptName
+			}
+			unitFields = append(unitFields, &item.Fields)
+		}
+		item.RowNo = (page-1)*size + index + 1
+		item.ErrorReason = safeReason(item.ErrorReason)
+		if item.ErrorCode != "" && !publicErrorCode.MatchString(item.ErrorCode) {
+			item.ErrorCode = "EXECUTION_FAILED"
+		}
+	}
+	if err := allocationunits.Fill(ctx, contexts.GetTenantId(ctx), unitFields); err != nil {
+		return nil, 0, dbError(ctx, err)
+	}
+	return items, total, nil
+}
diff --git a/server/internal/service/executionlog/service_test.go b/server/internal/service/executionlog/service_test.go
new file mode 100644
index 0000000..80a4504
--- /dev/null
+++ b/server/internal/service/executionlog/service_test.go
@@ -0,0 +1,251 @@
+package executionlog
+
+import (
+	"context"
+	_ "github.com/gogf/gf/contrib/drivers/sqlite/v2"
+	"github.com/gogf/gf/v2/database/gdb"
+	"github.com/gogf/gf/v2/frame/g"
+	"testing"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/contexts"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/model"
+)
+
+func TestPrincipalIsolation(t *testing.T) {
+	ctx := context.Background()
+	if _, _, err := List(ctx, nil); err == nil {
+		t.Fatal("guest allowed")
+	}
+	if _, err := Summary(ctx, "mine"); err == nil {
+		t.Fatal("guest summary allowed")
+	}
+	if _, _, err := Details(ctx, &model.AppExecutionLogDetailParam{BatchNo: "mine"}); err == nil {
+		t.Fatal("guest details allowed")
+	}
+	if err := gdb.SetConfig(gdb.Config{"default": gdb.ConfigGroup{{Type: "sqlite", Link: "sqlite::@file(:memory:)", MaxOpenConnCount: 1}}}); err != nil {
+		t.Fatal(err)
+	}
+	t.Cleanup(func() { _ = g.DB().Close(ctx) })
+	for _, sql := range []string{
+		"CREATE TABLE batch_main (id INTEGER PRIMARY KEY, batch_no TEXT, batch_type INTEGER, source_batch_no TEXT, source_channel TEXT, execution_mode INTEGER, source_type INTEGER, batch_async_status INTEGER, total_count INTEGER, run_result INTEGER, fail_reason TEXT, created_at TEXT, start_time TEXT, end_time TEXT, tenant_id TEXT, created_by INTEGER, created_dept INTEGER DEFAULT 10, target_dept_id INTEGER DEFAULT 0, batch_info TEXT)",
+		"CREATE TABLE batch_detail (id INTEGER PRIMARY KEY, batch_no TEXT, row_no INTEGER, item_id TEXT, detail_status INTEGER, error_code TEXT, error_reason TEXT, tenant_id TEXT, created_by INTEGER, created_dept INTEGER DEFAULT 10, snapshot TEXT)",
+		"INSERT INTO batch_main(id,batch_no,batch_type,tenant_id,created_by,source_channel,execution_mode,source_type) VALUES (1,'mine',101,'A',7,'mini_program',1,0),(2,'other-user',101,'A',8,'console',2,3),(3,'other-tenant',101,'B',7,'console',2,3)",
+		"INSERT INTO batch_detail(id,batch_no,row_no,item_id,detail_status,error_code,error_reason,tenant_id,created_by) VALUES(1,'mine',1,'card1',3,'ERR','套餐已过期','A',7),(2,'mine',2,'hidden',3,'ERR','hidden','B',7)",
+	} {
+		if _, err := g.DB().Exec(ctx, sql); err != nil {
+			t.Fatal(err)
+		}
+	}
+	ctx = contexts.Set(ctx, &model.Context{User: &model.Identity{BaseClaims: model.BaseClaims{ID: 7, DeptId: 10, TenantId: "A", Roles: []model.Role{{RoleId: 82, DataScope: consts.SysRoleDataScopePersonal}}}}})
+	list, total, err := List(ctx, nil)
+	if err != nil || total != 1 || len(list) != 1 || list[0].BatchNo != "mine" {
+		t.Fatalf("list=%+v total=%d err=%v", list, total, err)
+	}
+	for _, no := range []string{"other-user", "other-tenant", "missing"} {
+		if _, err := Summary(ctx, no); err == nil {
+			t.Fatalf("summary exposed %s", no)
+		}
+		if _, _, err := Details(ctx, &model.AppExecutionLogDetailParam{BatchNo: no}); err == nil {
+			t.Fatalf("details exposed %s", no)
+		}
+	}
+	details, total, err := Details(ctx, &model.AppExecutionLogDetailParam{BatchNo: "mine"})
+	if err != nil || total != 1 || len(details) != 1 || details[0].ItemId != "card1" {
+		t.Fatalf("details=%+v total=%d err=%v", details, total, err)
+	}
+	source := 0
+	list, total, err = List(ctx, &model.AppExecutionLogListParam{SourceType: &source, SourceChannel: "mini_program"})
+	if err != nil || total != 1 || len(list) != 1 {
+		t.Fatal("zero filter failed", err, total)
+	}
+	source = 3
+	_, total, err = List(ctx, &model.AppExecutionLogListParam{SourceType: &source})
+	if err != nil || total != 0 {
+		t.Fatal("foreign records leaked through filter", err, total)
+	}
+
+	t.Run("控制台数据范围", func(t *testing.T) {
+		for _, sql := range []string{
+			"CREATE TABLE sys_dept (dept_id INTEGER PRIMARY KEY, parent_id INTEGER, dept_type INTEGER, ancestors TEXT,tenant_id TEXT,dept_key TEXT,dept_name TEXT,deleted_at TEXT)",
+			"CREATE TABLE sys_role_dept (tenant_id TEXT, role_id INTEGER, dept_id INTEGER)",
+			"INSERT INTO sys_dept(dept_id,parent_id,dept_type,ancestors) VALUES(10,0,1,',0,'),(20,10,1,',0,10,'),(30,20,1,',0,10,20,'),(40,0,1,',0,')",
+			"UPDATE sys_dept SET tenant_id='A',dept_name='部门',dept_key='key'",
+			"INSERT INTO sys_role_dept VALUES('A',82,20),('B',82,40)",
+			"UPDATE batch_main SET created_dept=20 WHERE batch_no='other-user'",
+			"INSERT INTO batch_main(id,batch_no,batch_type,tenant_id,created_by,created_dept) VALUES(20,'grandchild',101,'A',9,30),(21,'outside',101,'A',10,40)",
+			"INSERT INTO batch_detail(id,batch_no,row_no,item_id,detail_status,tenant_id,created_by,created_dept) VALUES(50,'other-user',1,'other-card',2,'A',8,20)",
+		} {
+			if _, err := g.DB().Exec(ctx, sql); err != nil {
+				t.Fatal(err)
+			}
+		}
+		t.Cleanup(func() {
+			_, _ = g.DB().Exec(ctx, "DELETE FROM batch_main WHERE id IN (20,21)")
+			_, _ = g.DB().Exec(ctx, "DELETE FROM batch_detail WHERE id=50")
+		})
+		cases := []struct {
+			name, roleScope, menuScope string
+			dept, role                 int64
+			count                      int
+			super                      bool
+		}{
+			{name: "仅本人", roleScope: "5", dept: 10, role: 82, count: 1},
+			{name: "本部门", roleScope: "3", dept: 10, role: 82, count: 1},
+			{name: "本部门及下级", roleScope: "4", dept: 10, role: 82, count: 3},
+			{name: "自定义部门", roleScope: "2", dept: 10, role: 82, count: 1},
+			{name: "全部仍隔离租户", roleScope: "1", dept: 10, role: 82, count: 4},
+			{name: "部门及下级或本人", roleScope: "6", dept: 40, role: 82, count: 2},
+			{name: "本组织及下一级", roleScope: "7", dept: 10, role: 82, count: 2},
+			{name: "本组织下一级", roleScope: "8", dept: 10, role: 82, count: 1},
+			{name: "无下一级", roleScope: "8", dept: 40, role: 82, count: 0},
+			{name: "自定义空集合", roleScope: "2", dept: 10, role: 99, count: 0},
+			{name: "菜单收窄角色", roleScope: "1", menuScope: "5", dept: 10, role: 82, count: 1},
+			{name: "菜单放宽角色", roleScope: "5", menuScope: "1", dept: 10, role: 82, count: 4},
+			{name: "无角色", dept: 10, count: 0},
+			{name: "未知范围", roleScope: "unknown", dept: 10, role: 82, count: 0},
+			{name: "超管仍隔离租户", dept: 10, role: consts.SuperAdminRoleId, count: 4, super: true},
+		}
+		for _, tc := range cases {
+			t.Run(tc.name, func(t *testing.T) {
+				roles := []model.Role{}
+				if tc.role > 0 {
+					roles = append(roles, model.Role{RoleId: tc.role, DataScope: tc.roleScope})
+				}
+				testCtx := contexts.Set(context.Background(), &model.Context{User: &model.Identity{BaseClaims: model.BaseClaims{ID: 7, DeptId: tc.dept, TenantId: "A", Roles: roles}}})
+				if tc.menuScope != "" {
+					contexts.SetDataValue(testCtx, "currentRoleId", "82")
+					contexts.SetDataValue(testCtx, "currentRoleDataScope", tc.menuScope)
+				}
+				list, total, err := List(testCtx, nil)
+				if err != nil || total != tc.count {
+					t.Fatalf("total=%d want=%d err=%v", total, tc.count, err)
+				}
+				for _, item := range list {
+					if _, err := Summary(testCtx, item.BatchNo); err != nil {
+						t.Fatal("列表与概览范围不一致", err)
+					}
+				}
+				if _, err := Summary(testCtx, "other-tenant"); err == nil {
+					t.Fatal("泄露其他租户")
+				}
+				if _, _, err := Details(testCtx, &model.AppExecutionLogDetailParam{BatchNo: "other-tenant"}); err == nil {
+					t.Fatal("泄露其他租户明细")
+				}
+				visibleOther := false
+				for _, item := range list {
+					if item.BatchNo == "other-user" {
+						visibleOther = true
+					}
+				}
+				rows, total, err := Details(testCtx, &model.AppExecutionLogDetailParam{BatchNo: "other-user"})
+				if visibleOther {
+					if err != nil || total != 1 || rows[0].ItemId != "other-card" {
+						t.Fatalf("可见部门明细缺失: %v %d %v", rows, total, err)
+					}
+				} else if err == nil {
+					t.Fatal("不可见批次明细被放行")
+				}
+			})
+		}
+	})
+	for _, sql := range []string{
+		`INSERT INTO batch_main(id,batch_no,batch_type,source_batch_no,batch_info,tenant_id,created_by) VALUES (4,'PARENT',3,'','{"jobRole":"allocate_parent"}','A',7),(5,'CHILD',3,'PARENT','{"jobRole":"allocate_chunk"}','A',7),(6,'FOREIGN-CHILD',3,'PARENT','{"jobRole":"allocate_chunk"}','A',8),(7,'RELATED',3,'PARENT','{}','A',7)`,
+		"INSERT INTO batch_detail(id,batch_no,row_no,item_id,detail_status,error_code,error_reason,tenant_id,created_by) VALUES(3,'PARENT',1,'parent-card',2,'','','A',7),(4,'CHILD',1,'mine-child',2,'','','A',7),(5,'FOREIGN-CHILD',1,'foreign-child',2,'','','A',8),(6,'RELATED',1,'related-child',2,'','','A',7)",
+	} {
+		if _, err := g.DB().Exec(ctx, sql); err != nil {
+			t.Fatal(err)
+		}
+	}
+	for _, sql := range []string{
+		`UPDATE batch_main SET target_dept_id=20,batch_info='{"jobRole":"allocate_parent","sourceDeptName":"提交时划拨单位","targetDeptName":"提交时接收单位"}' WHERE batch_no='PARENT'`,
+		`UPDATE batch_detail SET snapshot='{"sourceDeptId":10,"targetDeptId":20,"sourceDeptName":"明细划拨单位","targetDeptName":"明细接收单位"}' WHERE id=4`,
+	} {
+		if _, err := g.DB().Exec(ctx, sql); err != nil {
+			t.Fatal(err)
+		}
+	}
+	summary, err := Summary(ctx, "PARENT")
+	if err != nil || summary.SourceDeptName != "提交时划拨单位" || summary.TargetDeptName != "提交时接收单位" {
+		t.Fatal("概览未优先使用历史名称", summary, err)
+	}
+	details, total, err = Details(ctx, &model.AppExecutionLogDetailParam{BatchNo: "PARENT"})
+	if err != nil || total != 3 || len(details) != 3 {
+		t.Fatalf("child isolation: %+v %d %v", details, total, err)
+	}
+	seen := map[string]bool{}
+	for _, detail := range details {
+		if detail.ItemId == "mine-child" && (detail.SourceDeptName != "明细划拨单位" || detail.TargetDeptName != "明细接收单位") {
+			t.Fatal("明细快照名称被覆盖", detail)
+		}
+		if detail.ItemId != "mine-child" && detail.TargetDeptName != "提交时接收单位" {
+			t.Fatal("明细未继承批次历史接收单位", detail)
+		}
+		seen[detail.ItemId] = true
+	}
+	for _, itemID := range []string{"parent-card", "mine-child", "related-child"} {
+		if !seen[itemID] {
+			t.Fatalf("parent details missing %s: %+v", itemID, details)
+		}
+	}
+	list, total, err = List(ctx, nil)
+	if err != nil || total != 2 {
+		t.Fatalf("children appeared as submissions: %+v %d %v", list, total, err)
+	}
+	if _, err := AllocateSummary(ctx, "PARENT"); err != nil {
+		t.Fatal("allocate result rejected", err)
+	}
+	if _, total, err := AllocateDetails(ctx, &model.AppExecutionLogDetailParam{BatchNo: "PARENT"}); err != nil || total != 3 {
+		t.Fatal("allocate details rejected", total, err)
+	}
+	allCtx := contexts.Set(context.Background(), &model.Context{User: &model.Identity{BaseClaims: model.BaseClaims{ID: 8, DeptId: 20, TenantId: "A", Roles: []model.Role{{RoleId: 82, DataScope: consts.SysRoleDataScopeAll}}}}})
+	if _, err := Summary(allCtx, "PARENT"); err != nil {
+		t.Fatal("全部范围不能查看他人批次", err)
+	}
+	if _, err := AllocateSummary(allCtx, "PARENT"); err == nil {
+		t.Fatal("办理恢复接口泄露他人任务")
+	}
+	if _, _, err := AllocateDetails(allCtx, &model.AppExecutionLogDetailParam{BatchNo: "PARENT"}); err == nil {
+		t.Fatal("办理明细接口泄露他人任务")
+	}
+	for _, no := range []string{"mine", "CHILD", "RELATED", "other-user", "other-tenant", "missing"} {
+		if _, err := AllocateSummary(ctx, no); err == nil {
+			t.Fatalf("allocate summary exposed %s", no)
+		}
+		if _, _, err := AllocateDetails(ctx, &model.AppExecutionLogDetailParam{BatchNo: no}); err == nil {
+			t.Fatalf("allocate details exposed %s", no)
+		}
+	}
+	for _, no := range []string{"CHILD", "RELATED"} {
+		if _, err := Summary(ctx, no); err == nil {
+			t.Fatalf("child exposed as a standalone submission: %s", no)
+		}
+	}
+	if _, err := g.DB().Exec(ctx, "INSERT INTO batch_main(id,batch_no,batch_type,source_batch_no,tenant_id,created_by) VALUES (8,'SELF',3,'SELF','A',7)"); err != nil {
+		t.Fatal(err)
+	}
+	if _, err := g.DB().Exec(ctx, "INSERT INTO batch_detail(id,batch_no,row_no,item_id,detail_status,error_code,error_reason,tenant_id,created_by) VALUES(7,'SELF',1,'self-card',2,'','','A',7)"); err != nil {
+		t.Fatal(err)
+	}
+	if _, err := Summary(ctx, "SELF"); err != nil {
+		t.Fatal("self-referencing allocation hidden", err)
+	}
+	details, total, err = Details(ctx, &model.AppExecutionLogDetailParam{BatchNo: "SELF"})
+	if err != nil || total != 1 || len(details) != 1 || details[0].ItemId != "self-card" {
+		t.Fatalf("self allocation details lost: %+v %d %v", details, total, err)
+	}
+}
+
+func TestSafeReason(t *testing.T) {
+	for _, s := range []string{"token=abc", "dial tcp 192.0.2.10", "secret=abc", "panic\nstack", "https://internal"} {
+		if safeReason(s) == s {
+			t.Fatalf("sensitive reason exposed: %s", s)
+		}
+	}
+	if safeReason("套餐已过期") != "套餐已过期" {
+		t.Fatal("business explanation lost")
+	}
+	p, n := paging(0, 5000)
+	if p != 1 || n != 100 {
+		t.Fatal(p, n)
+	}
+}
diff --git a/server/internal/tasks/clear_data.go b/server/internal/tasks/clear_data.go
index d1f1faa..eb32f51 100644
--- a/server/internal/tasks/clear_data.go
+++ b/server/internal/tasks/clear_data.go
@@ -2,8 +2,8 @@ package tasks
 
 import (
 	"context"
-	"git.5iot.com/iotlcm-public/iotlcm-app/internal/service"
 	"time"
+	"git.5iot.com/iotlcm-public/iotlcm-app/internal/service"
 
 	"github.com/gogf/gf/v2/frame/g"
 	"github.com/gogf/gf/v2/util/gconv"
diff --git a/server/main.go b/server/main.go
index f10b962..f866c1b 100644
--- a/server/main.go
+++ b/server/main.go
@@ -1,7 +1,7 @@
 // package main
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package main
 
diff --git a/server/resource/generate/default/curd/api.go.template b/server/resource/generate/default/curd/api.go.template
index a320f9a..e27e081 100644
--- a/server/resource/generate/default/curd/api.go.template
+++ b/server/resource/generate/default/curd/api.go.template
@@ -1,7 +1,7 @@
 // Package @{.varName | ToLower}
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) @{NowYear} LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 // @AutoGenerate Version @{.xiuVersion}
 //
diff --git a/server/resource/generate/default/curd/controller.go.template b/server/resource/generate/default/curd/controller.go.template
index 6922a02..b2f33d2 100644
--- a/server/resource/generate/default/curd/controller.go.template
+++ b/server/resource/generate/default/curd/controller.go.template
@@ -1,7 +1,7 @@
 // Package @{.templateGroup}
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) @{NowYear} LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 // @AutoGenerate Version @{.xiuVersion}
 //
diff --git a/server/resource/generate/default/curd/input.go.template b/server/resource/generate/default/curd/input.go.template
index 197b647..c801dc9 100644
--- a/server/resource/generate/default/curd/input.go.template
+++ b/server/resource/generate/default/curd/input.go.template
@@ -1,7 +1,7 @@
 // Package @{.templateGroup}in
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) @{NowYear} LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 // @AutoGenerate Version @{.xiuVersion}
 //
diff --git a/server/resource/generate/default/curd/logic.go.template b/server/resource/generate/default/curd/logic.go.template
index b4a41e8..a6300c3 100644
--- a/server/resource/generate/default/curd/logic.go.template
+++ b/server/resource/generate/default/curd/logic.go.template
@@ -1,7 +1,7 @@
 // Package @{.templateGroup}
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) @{NowYear} LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 // @AutoGenerate Version @{.xiuVersion}
 //
diff --git a/server/resource/generate/default/curd/router.go.template b/server/resource/generate/default/curd/router.go.template
index ce51d72..9b7c479 100644
--- a/server/resource/generate/default/curd/router.go.template
+++ b/server/resource/generate/default/curd/router.go.template
@@ -1,7 +1,7 @@
 // Package genrouter
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) @{NowYear} LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 // @AutoGenerate Version @{.xiuVersion}
 //
diff --git a/server/resource/migrations/20261009_batch_execution_metadata.sql b/server/resource/migrations/20261009_batch_execution_metadata.sql
new file mode 100644
index 0000000..0dba225
--- /dev/null
+++ b/server/resource/migrations/20261009_batch_execution_metadata.sql
@@ -0,0 +1,12 @@
+-- 执行日志元数据：仅新增两列，不回填、不重建表。
+-- 部署前确认库、备份、同名字段和DDL维护窗口。
+-- 旧写入端兼容legacy/0；应用新版本依赖此结构，先迁移再部署。
+-- 此脚本尚未在开发、预演或生产数据库执行。
+ALTER TABLE batch_main
+  ADD COLUMN source_channel VARCHAR(24) NOT NULL DEFAULT 'legacy'
+    COMMENT '发起渠道:console/mini_program/api/system/legacy',
+  ADD COLUMN execution_mode TINYINT UNSIGNED NOT NULL DEFAULT 0
+    COMMENT '操作规模:0未知1单卡2批量';
+
+-- 不自动创建索引：按目标表已有索引和查询EXPLAIN确认。
+-- 不自动回填：历史来源必须有可验证证据，不能按数量推断单卡。
diff --git a/server/storage/data/xiu_admin.sql b/server/storage/data/xiu_admin.sql
index 02b2728..31b971c 100644
--- a/server/storage/data/xiu_admin.sql
+++ b/server/storage/data/xiu_admin.sql
@@ -141,7 +141,7 @@ INSERT INTO `sys_config` (`config_id`, `tenant_id`, `config_name`, `config_key`,
 INSERT INTO `sys_config` (`config_id`, `tenant_id`, `config_name`, `config_key`, `config_value`, `config_type`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `remark`) VALUES (15, '000000', '上传图片类型', 'sys.oss.imgType', 'jpg,jpeg,png,gif,webp', 'Y', 103, 1, '2025-03-14 11:29:32', 1, '2025-03-14 11:29:32', '');
 INSERT INTO `sys_config` (`config_id`, `tenant_id`, `config_name`, `config_key`, `config_value`, `config_type`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `remark`) VALUES (16, '000000', '上传文件大小', 'sys.oss.fileSize', '20M', 'Y', 103, 1, '2025-03-14 11:29:48', 1, '2025-03-14 11:29:48', '');
 INSERT INTO `sys_config` (`config_id`, `tenant_id`, `config_name`, `config_key`, `config_value`, `config_type`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `remark`) VALUES (17, '000000', '上传图片大小', 'sys.oss.imgSize', '5M', 'Y', 103, 1, '2025-03-14 11:30:07', 1, '2025-03-14 11:30:07', '');
-INSERT INTO `sys_config` (`config_id`, `tenant_id`, `config_name`, `config_key`, `config_value`, `config_type`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `remark`) VALUES (18, '000000', '上传文件Url路径', 'sys.oss.urlPath', '/data/app/iotlcmadmin-web-svc/upload|http://iotlcm.example.com:8008/upload', 'Y', 103, 1, '2025-03-14 12:48:44', 1, '2025-03-14 12:48:44', '\"http://ab.com/\" 或 \"/\" 或 \"resource/upload|http://ab.com/upload\"');
+INSERT INTO `sys_config` (`config_id`, `tenant_id`, `config_name`, `config_key`, `config_value`, `config_type`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `remark`) VALUES (18, '000000', '上传文件Url路径', 'sys.oss.urlPath', '/data/app/iotlcmadmin-web-svc/upload|http://example.com:8008/upload', 'Y', 103, 1, '2025-03-14 12:48:44', 1, '2025-03-14 12:48:44', '\"http://ab.com/\" 或 \"/\" 或 \"resource/upload|http://ab.com/upload\"');
 INSERT INTO `sys_config` (`config_id`, `tenant_id`, `config_name`, `config_key`, `config_value`, `config_type`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `remark`) VALUES (19, '000000', '是否启动在线用户强制退出', 'sys.online.forceLogout', 'true', 'Y', 103, 1, '2025-03-26 20:07:24', 1, '2025-03-26 20:08:33', 'true开启,false关闭');
 COMMIT;
 
@@ -176,21 +176,21 @@ CREATE TABLE `sys_dept` (
 -- Records of sys_dept
 -- ----------------------------
 BEGIN;
-INSERT INTO `sys_dept` (`dept_id`, `tenant_id`, `parent_id`, `ancestors`, `dept_name`, `dept_category`, `order_num`, `leader`, `phone`, `email`, `status`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`, `dept_type` ) VALUES (100, '000000', 0, '0,', 'XXX科技', NULL, 0, NULL, '15888888888', 'xxx@example.com', '0', 103, 1, '2025-02-13 11:56:36', NULL, '2025-02-27 22:21:39', NULL, NULL, 1);
-INSERT INTO `sys_dept` (`dept_id`, `tenant_id`, `parent_id`, `ancestors`, `dept_name`, `dept_category`, `order_num`, `leader`, `phone`, `email`, `status`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`) VALUES (101, '000000', 100, '0,100,', '济南总公司', NULL, 1, NULL, '15888888888', 'xxx@example.com', '0', 103, 1, '2025-02-13 11:56:36', NULL, '2025-02-27 22:21:39', NULL, NULL);
-INSERT INTO `sys_dept` (`dept_id`, `tenant_id`, `parent_id`, `ancestors`, `dept_name`, `dept_category`, `order_num`, `leader`, `phone`, `email`, `status`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`) VALUES (102, '000000', 100, '0,100,', '上海分公司', NULL, 2, NULL, '15888888888', 'xxx@example.com', '0', 103, 1, '2025-02-13 11:56:36', NULL, '2025-02-27 22:21:40', NULL, NULL);
-INSERT INTO `sys_dept` (`dept_id`, `tenant_id`, `parent_id`, `ancestors`, `dept_name`, `dept_category`, `order_num`, `leader`, `phone`, `email`, `status`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`) VALUES (103, '000000', 101, '0,100,101,', '研发部门', NULL, 1, 1, '15888888888', 'xxx@example.com', '0', 103, 1, '2025-02-13 11:56:36', NULL, '2025-02-27 22:21:40', NULL, NULL);
-INSERT INTO `sys_dept` (`dept_id`, `tenant_id`, `parent_id`, `ancestors`, `dept_name`, `dept_category`, `order_num`, `leader`, `phone`, `email`, `status`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`) VALUES (104, '000000', 101, '0,100,101,', '市场部门', NULL, 2, NULL, '15888888888', 'xxx@example.com', '0', 103, 1, '2025-02-13 11:56:36', NULL, '2025-02-27 22:21:40', NULL, NULL);
-INSERT INTO `sys_dept` (`dept_id`, `tenant_id`, `parent_id`, `ancestors`, `dept_name`, `dept_category`, `order_num`, `leader`, `phone`, `email`, `status`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`) VALUES (105, '000000', 101, '0,100,101,', '测试部门', NULL, 3, NULL, '15888888888', 'xxx@example.com', '0', 103, 1, '2025-02-13 11:56:36', NULL, '2025-02-27 22:21:40', NULL, NULL);
-INSERT INTO `sys_dept` (`dept_id`, `tenant_id`, `parent_id`, `ancestors`, `dept_name`, `dept_category`, `order_num`, `leader`, `phone`, `email`, `status`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`) VALUES (106, '000000', 101, '0,100,101,', '财务部门', NULL, 4, NULL, '15888888888', 'xxx@example.com', '0', 103, 1, '2025-02-13 11:56:36', NULL, '2025-02-27 22:21:40', NULL, NULL);
-INSERT INTO `sys_dept` (`dept_id`, `tenant_id`, `parent_id`, `ancestors`, `dept_name`, `dept_category`, `order_num`, `leader`, `phone`, `email`, `status`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`) VALUES (107, '000000', 101, '0,100,101,', '运维部门', NULL, 5, NULL, '15888888888', 'xxx@example.com', '0', 103, 1, '2025-02-13 11:56:36', NULL, '2025-02-27 22:21:40', NULL, NULL);
-INSERT INTO `sys_dept` (`dept_id`, `tenant_id`, `parent_id`, `ancestors`, `dept_name`, `dept_category`, `order_num`, `leader`, `phone`, `email`, `status`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`) VALUES (108, '000000', 102, '0,100,102,', '市场部门', NULL, 1, NULL, '15888888888', 'xxx@example.com', '0', 103, 1, '2025-02-13 11:56:36', NULL, '2025-02-27 22:21:40', NULL, NULL);
-INSERT INTO `sys_dept` (`dept_id`, `tenant_id`, `parent_id`, `ancestors`, `dept_name`, `dept_category`, `order_num`, `leader`, `phone`, `email`, `status`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`) VALUES (109, '000000', 102, '0,100,102,', '财务部门', NULL, 2, NULL, '15888888888', 'xxx@example.com', '0', 103, 1, '2025-02-13 11:56:36', NULL, '2025-02-27 22:21:41', NULL, NULL);
-INSERT INTO `sys_dept` (`dept_id`, `tenant_id`, `parent_id`, `ancestors`, `dept_name`, `dept_category`, `order_num`, `leader`, `phone`, `email`, `status`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`) VALUES (110, '000000', 100, '0,100,', '青岛分公司', '33', 3, 0, '15888888888', 'lxj521w@example.com', '0', 103, 1, '2025-02-27 22:25:56', 1, '2025-02-27 22:31:24', NULL, NULL);
+INSERT INTO `sys_dept` (`dept_id`, `tenant_id`, `parent_id`, `ancestors`, `dept_name`, `dept_category`, `order_num`, `leader`, `phone`, `email`, `status`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`, `dept_type` ) VALUES (100, '000000', 0, '0,', 'XXX科技', NULL, 0, NULL, '15800008888', 'xxx@example.com', '0', 103, 1, '2025-02-13 11:56:36', NULL, '2025-02-27 22:21:39', NULL, NULL, 1);
+INSERT INTO `sys_dept` (`dept_id`, `tenant_id`, `parent_id`, `ancestors`, `dept_name`, `dept_category`, `order_num`, `leader`, `phone`, `email`, `status`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`) VALUES (101, '000000', 100, '0,100,', '济南总公司', NULL, 1, NULL, '15800008888', 'xxx@example.com', '0', 103, 1, '2025-02-13 11:56:36', NULL, '2025-02-27 22:21:39', NULL, NULL);
+INSERT INTO `sys_dept` (`dept_id`, `tenant_id`, `parent_id`, `ancestors`, `dept_name`, `dept_category`, `order_num`, `leader`, `phone`, `email`, `status`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`) VALUES (102, '000000', 100, '0,100,', '上海分公司', NULL, 2, NULL, '15800008888', 'xxx@example.com', '0', 103, 1, '2025-02-13 11:56:36', NULL, '2025-02-27 22:21:40', NULL, NULL);
+INSERT INTO `sys_dept` (`dept_id`, `tenant_id`, `parent_id`, `ancestors`, `dept_name`, `dept_category`, `order_num`, `leader`, `phone`, `email`, `status`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`) VALUES (103, '000000', 101, '0,100,101,', '研发部门', NULL, 1, 1, '15800008888', 'xxx@example.com', '0', 103, 1, '2025-02-13 11:56:36', NULL, '2025-02-27 22:21:40', NULL, NULL);
+INSERT INTO `sys_dept` (`dept_id`, `tenant_id`, `parent_id`, `ancestors`, `dept_name`, `dept_category`, `order_num`, `leader`, `phone`, `email`, `status`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`) VALUES (104, '000000', 101, '0,100,101,', '市场部门', NULL, 2, NULL, '15800008888', 'xxx@example.com', '0', 103, 1, '2025-02-13 11:56:36', NULL, '2025-02-27 22:21:40', NULL, NULL);
+INSERT INTO `sys_dept` (`dept_id`, `tenant_id`, `parent_id`, `ancestors`, `dept_name`, `dept_category`, `order_num`, `leader`, `phone`, `email`, `status`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`) VALUES (105, '000000', 101, '0,100,101,', '测试部门', NULL, 3, NULL, '15800008888', 'xxx@example.com', '0', 103, 1, '2025-02-13 11:56:36', NULL, '2025-02-27 22:21:40', NULL, NULL);
+INSERT INTO `sys_dept` (`dept_id`, `tenant_id`, `parent_id`, `ancestors`, `dept_name`, `dept_category`, `order_num`, `leader`, `phone`, `email`, `status`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`) VALUES (106, '000000', 101, '0,100,101,', '财务部门', NULL, 4, NULL, '15800008888', 'xxx@example.com', '0', 103, 1, '2025-02-13 11:56:36', NULL, '2025-02-27 22:21:40', NULL, NULL);
+INSERT INTO `sys_dept` (`dept_id`, `tenant_id`, `parent_id`, `ancestors`, `dept_name`, `dept_category`, `order_num`, `leader`, `phone`, `email`, `status`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`) VALUES (107, '000000', 101, '0,100,101,', '运维部门', NULL, 5, NULL, '15800008888', 'xxx@example.com', '0', 103, 1, '2025-02-13 11:56:36', NULL, '2025-02-27 22:21:40', NULL, NULL);
+INSERT INTO `sys_dept` (`dept_id`, `tenant_id`, `parent_id`, `ancestors`, `dept_name`, `dept_category`, `order_num`, `leader`, `phone`, `email`, `status`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`) VALUES (108, '000000', 102, '0,100,102,', '市场部门', NULL, 1, NULL, '15800008888', 'xxx@example.com', '0', 103, 1, '2025-02-13 11:56:36', NULL, '2025-02-27 22:21:40', NULL, NULL);
+INSERT INTO `sys_dept` (`dept_id`, `tenant_id`, `parent_id`, `ancestors`, `dept_name`, `dept_category`, `order_num`, `leader`, `phone`, `email`, `status`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`) VALUES (109, '000000', 102, '0,100,102,', '财务部门', NULL, 2, NULL, '15800008888', 'xxx@example.com', '0', 103, 1, '2025-02-13 11:56:36', NULL, '2025-02-27 22:21:41', NULL, NULL);
+INSERT INTO `sys_dept` (`dept_id`, `tenant_id`, `parent_id`, `ancestors`, `dept_name`, `dept_category`, `order_num`, `leader`, `phone`, `email`, `status`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`) VALUES (110, '000000', 100, '0,100,', '青岛分公司', '33', 3, 0, '15800008888', 'xxx@example.com', '0', 103, 1, '2025-02-27 22:25:56', 1, '2025-02-27 22:31:24', NULL, NULL);
 INSERT INTO `sys_dept` (`dept_id`, `tenant_id`, `parent_id`, `ancestors`, `dept_name`, `dept_category`, `order_num`, `leader`, `phone`, `email`, `status`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`) VALUES (111, '000000', 110, '0,100,110,', '市场部门', '', 1, 0, '', '', '0', 103, 1, '2025-02-27 22:31:49', 1, '2025-02-27 22:31:50', NULL, '2025-02-27 22:31:52');
 INSERT INTO `sys_dept` (`dept_id`, `tenant_id`, `parent_id`, `ancestors`, `dept_name`, `dept_category`, `order_num`, `leader`, `phone`, `email`, `status`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`) VALUES (112, '000000', 110, '0,100,110,', '打点', '', 3, 0, '', '', '0', 103, 1, '2025-02-27 22:32:43', 1, '2025-02-27 22:32:43', NULL, '2025-02-27 22:32:49');
 INSERT INTO `sys_dept` (`dept_id`, `tenant_id`, `parent_id`, `ancestors`, `dept_name`, `dept_category`, `order_num`, `leader`, `phone`, `email`, `status`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`) VALUES (113, '000000', 110, '0,100,110,', '市场部门', '', 1, 0, '', '', '0', 103, 1, '2025-03-02 08:59:25', 1, '2025-03-02 08:59:26', NULL, NULL);
-INSERT INTO `sys_dept` (`dept_id`, `tenant_id`, `parent_id`, `ancestors`, `dept_name`, `dept_category`, `order_num`, `leader`, `phone`, `email`, `status`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`, `dept_type`) VALUES (117, '100006', 0, '', '秀杰智联', NULL, 0, 10, NULL, NULL, '0', NULL, 0, '2025-03-16 14:36:52', 0, '2025-03-16 14:36:52', NULL, NULL, 1);
+INSERT INTO `sys_dept` (`dept_id`, `tenant_id`, `parent_id`, `ancestors`, `dept_name`, `dept_category`, `order_num`, `leader`, `phone`, `email`, `status`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`, `dept_type`) VALUES (117, '100006', 0, '', '示例企业', NULL, 0, 10, NULL, NULL, '0', NULL, 0, '2025-03-16 14:36:52', 0, '2025-03-16 14:36:52', NULL, NULL, 1);
 COMMIT;
 
 -- ----------------------------
@@ -1011,13 +1011,13 @@ INSERT INTO `sys_tenant` (
   `package_id`, `admin_role_id`, `admin_dept_id`, `admin_user_id`, `expire_time`, 
   `account_count`, `status`, `created_dept`, `created_by`, `created_at`, 
   `updated_by`, `updated_at`, `deleted_by`, `deleted_at`) VALUES (
-    1, '000000', '管理组', '15888888888', 'XXX有限公司', 
+    1, '000000', '管理组', '13800000000', 'XXX有限公司',
     NULL, NULL, '多租户通用后台管理管理系统', NULL, '备注', 
     NULL, 1, 103, 1, NULL, 
     -1, '0', 103, 1, '2025-02-13 11:56:36', 
     NULL, NULL, NULL, NULL);
 
-INSERT INTO `sys_tenant` (`id`, `tenant_id`, `contact_user_name`, `contact_phone`, `company_name`, `license_number`, `address`, `intro`, `domain`, `remark`, `package_id`, `admin_role_id`, `admin_dept_id`, `admin_user_id`, `expire_time`, `account_count`, `status`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`) VALUES (6, '100006', '李先生', '18600000000', '秀杰智联', '3332233', '地址', '企业介绍', 'xiujiezhilian.com', '备注', 9, 117, 10, 1, '2026-03-16 00:00:00', -1, '0', 103, 1, '2025-03-16 14:36:52', 1, '2025-03-16 14:37:11', NULL, NULL);
+INSERT INTO `sys_tenant` (`id`, `tenant_id`, `contact_user_name`, `contact_phone`, `company_name`, `license_number`, `address`, `intro`, `domain`, `remark`, `package_id`, `admin_role_id`, `admin_dept_id`, `admin_user_id`, `expire_time`, `account_count`, `status`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`) VALUES (6, '100006', '李先生', '18600000000', '示例企业', '3332233', '地址', '企业介绍', 'xiujiezhilian.com', '备注', 9, 117, 10, 1, '2026-03-16 00:00:00', -1, '0', 103, 1, '2025-03-16 14:36:52', 1, '2025-03-16 14:37:11', NULL, NULL);
 COMMIT;
 
 -- ----------------------------
@@ -1084,13 +1084,13 @@ CREATE TABLE `sys_user` (
 -- Records of sys_user
 -- ----------------------------
 BEGIN;
-INSERT INTO `sys_user` (`user_id`, `tenant_id`, `dept_id`, `user_name`, `nick_name`, `user_type`, `email`, `phonenumber`, `sex`, `avatar`, `salt`, `password`, `status`, `login_ip`, `login_date`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`, `remark`) VALUES (1, '000000', 103, 'admin', '好心情', 'sys_user', 'lxj521w@example.com', '15888888887', '0', 'https://iot.xiujie.cn/wp-content/uploads/2024/09/96x96.png', '123456', '5f1d7a84db00d2fce00b31a7fc73224f', '0', '127.0.0.1', '2025-02-13 11:56:36', 103, 1, '2025-02-13 11:56:36', 1, '2025-03-26 13:44:18', NULL, NULL, '管理员');
+INSERT INTO `sys_user` (`user_id`, `tenant_id`, `dept_id`, `user_name`, `nick_name`, `user_type`, `email`, `phonenumber`, `sex`, `avatar`, `salt`, `password`, `status`, `login_ip`, `login_date`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`, `remark`) VALUES (1, '000000', 103, 'admin', '好心情', 'sys_user', 'xxx@example.com', '15800008887', '0', 'https://example.com/wp-content/uploads/2024/09/96x96.png', '123456', '5f1d7a84db00d2fce00b31a7fc73224f', '0', '127.0.0.1', '2025-02-13 11:56:36', 103, 1, '2025-02-13 11:56:36', 1, '2025-03-26 13:44:18', NULL, NULL, '管理员');
 INSERT INTO `sys_user` (`user_id`, `tenant_id`, `dept_id`, `user_name`, `nick_name`, `user_type`, `email`, `phonenumber`, `sex`, `avatar`, `salt`, `password`, `status`, `login_ip`, `login_date`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`, `remark`) VALUES (3, '000000', 108, 'test', '本部门及以下 密码666666', 'sys_user', '', '', '0', NULL, 'ddd', '$2a$10$b8yUzN0C71sbz.PhNOCgJe.Tu1yWC3RNrTyjSQ8p1W0.aaUXUJ.Ne', '0', '127.0.0.1', '2025-02-13 11:56:36', 103, 1, '2025-02-13 11:56:36', 3, '2025-02-13 11:56:36', NULL, NULL, NULL);
 INSERT INTO `sys_user` (`user_id`, `tenant_id`, `dept_id`, `user_name`, `nick_name`, `user_type`, `email`, `phonenumber`, `sex`, `avatar`, `salt`, `password`, `status`, `login_ip`, `login_date`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`, `remark`) VALUES (4, '000000', 102, 'test1', '仅本人 密码666666', 'sys_user', '', '', '0', NULL, 'ddd', '$2a$10$b8yUzN0C71sbz.PhNOCgJe.Tu1yWC3RNrTyjSQ8p1W0.aaUXUJ.Ne', '0', '127.0.0.1', '2025-02-13 11:56:36', 103, 1, '2025-02-13 11:56:36', 4, '2025-02-13 11:56:36', NULL, NULL, NULL);
-INSERT INTO `sys_user` (`user_id`, `tenant_id`, `dept_id`, `user_name`, `nick_name`, `user_type`, `email`, `phonenumber`, `sex`, `avatar`, `salt`, `password`, `status`, `login_ip`, `login_date`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`, `remark`) VALUES (5, '000000', 103, 'test2', '好心情', '', 'li@example.com', '15888888887', '0', '', 'mjhhs', 'de396f3b10c2020d35161d8f45d0db52', '0', '', NULL, 103, 1, '2025-02-25 21:39:16', 1, '2025-02-25 22:09:49', 1, '2025-02-25 22:09:49', '');
-INSERT INTO `sys_user` (`user_id`, `tenant_id`, `dept_id`, `user_name`, `nick_name`, `user_type`, `email`, `phonenumber`, `sex`, `avatar`, `salt`, `password`, `status`, `login_ip`, `login_date`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`, `remark`) VALUES (6, '000000', 100, 'test3', '好心情', '', 'li@example.com', '15888888889', '0', '', '5nyxW', '8f2dd9b2f537dc0f3a4adf7238ab9939', '0', '', NULL, 103, 1, '2025-02-25 22:43:18', 1, '2025-02-25 23:27:08', 1, '2025-02-25 23:27:08', '');
+INSERT INTO `sys_user` (`user_id`, `tenant_id`, `dept_id`, `user_name`, `nick_name`, `user_type`, `email`, `phonenumber`, `sex`, `avatar`, `salt`, `password`, `status`, `login_ip`, `login_date`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`, `remark`) VALUES (5, '000000', 103, 'test2', '好心情', '', 'li@example.com', '15800008887', '0', '', 'mjhhs', 'de396f3b10c2020d35161d8f45d0db52', '0', '', NULL, 103, 1, '2025-02-25 21:39:16', 1, '2025-02-25 22:09:49', 1, '2025-02-25 22:09:49', '');
+INSERT INTO `sys_user` (`user_id`, `tenant_id`, `dept_id`, `user_name`, `nick_name`, `user_type`, `email`, `phonenumber`, `sex`, `avatar`, `salt`, `password`, `status`, `login_ip`, `login_date`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`, `remark`) VALUES (6, '000000', 100, 'test3', '好心情', '', 'li@example.com', '15800008889', '0', '', '5nyxW', '8f2dd9b2f537dc0f3a4adf7238ab9939', '0', '', NULL, 103, 1, '2025-02-25 22:43:18', 1, '2025-02-25 23:27:08', 1, '2025-02-25 23:27:08', '');
 INSERT INTO `sys_user` (`user_id`, `tenant_id`, `dept_id`, `user_name`, `nick_name`, `user_type`, `email`, `phonenumber`, `sex`, `avatar`, `salt`, `password`, `status`, `login_ip`, `login_date`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`, `remark`) VALUES (10, '100006', 117, 'xiujiezhilian', '李先生', 'sys_user', '', '18600000000', '2', NULL, '5nyxW', '68c6e105523f29f1a97607f6739cd245', '0', '', NULL, 0, 0, '2025-03-16 14:36:52', 0, '2025-03-16 14:36:52', NULL, NULL, NULL);
-INSERT INTO `sys_user` (`user_id`, `tenant_id`, `dept_id`, `user_name`, `nick_name`, `user_type`, `email`, `phonenumber`, `sex`, `avatar`, `salt`, `password`, `status`, `login_ip`, `login_date`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`, `remark`) VALUES (11, '000000', 101, 'test001', '济南测试1', '', '563242931@example.com', '', '0', '', 'mLwlN', '70824cefa9bc3da395ea16a48118e477', '0', '', NULL, 103, 1, '2025-03-17 13:52:46', 1, '2025-03-17 13:55:24', NULL, NULL, '');
+INSERT INTO `sys_user` (`user_id`, `tenant_id`, `dept_id`, `user_name`, `nick_name`, `user_type`, `email`, `phonenumber`, `sex`, `avatar`, `salt`, `password`, `status`, `login_ip`, `login_date`, `created_dept`, `created_by`, `created_at`, `updated_by`, `updated_at`, `deleted_by`, `deleted_at`, `remark`) VALUES (11, '000000', 101, 'test001', '济南测试1', '', 'xxx@example.com', '', '0', '', 'mLwlN', '70824cefa9bc3da395ea16a48118e477', '0', '', NULL, 103, 1, '2025-03-17 13:52:46', 1, '2025-03-17 13:55:24', NULL, NULL, '');
 COMMIT;
 
 -- ----------------------------
@@ -1180,7 +1180,7 @@ INSERT INTO `sys_user_online` (`online_id`, `tenant_id`, `uuid`, `user_name`, `c
 INSERT INTO `sys_user_online` (`online_id`, `tenant_id`, `uuid`, `user_name`, `client_key`, `device_type`, `ipaddr`, `login_location`, `browser`, `os`, `token`, `login_time`, `expire_time`, `deleted_at`) VALUES (59, '000000', 'a8ae3c2d058b4da5a8ef4cca0ab559c2', 'admin', 'web', 'web', '127.0.0.1', '内网IP', 'Chrome', 'Windows', 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJVVUlEIjoiYThhZTNjMmQwNThiNGRhNWE4ZWY0Y2NhMGFiNTU5YzIiLCJJRCI6MSwiVXNlcm5hbWUiOiJhZG1pbiIsIk5pY2tOYW1lIjoi5aW95b-D5oOFIiwiRGVwdElkIjoxMDMsIlRlbmFudElkIjoiMDAwMDAwIiwiUm9sZXMiOlt7IlJvbGVJZCI6MSwiRGF0YVNjb3BlIjoiMSJ9XSwiTG9naW5BdCI6MTc0MzA1ODc0NSwiQnVmZmVyVGltZSI6ODY0MDAsImlzcyI6InhpdWppZSIsImF1ZCI6WyJYaXVqaWVBZG1pbiJdLCJleHAiOjE3NDM2NjM1NDUsIm5iZiI6MTc0MzA1ODc0NX0.cNboyNDe_vcFU9KF1aeuucuwB8fFgTYVzvZi2FCQEx4', '2025-03-27 14:59:06', '2025-04-03 14:59:05', NULL);
 INSERT INTO `sys_user_online` (`online_id`, `tenant_id`, `uuid`, `user_name`, `client_key`, `device_type`, `ipaddr`, `login_location`, `browser`, `os`, `token`, `login_time`, `expire_time`, `deleted_at`) VALUES (60, '000000', '0e875fd0eaea45299e23b1ad95657cb1', 'admin', 'web', 'web', '::1', '山东省 济南市', 'Chrome', 'macOS', 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJVVUlEIjoiMGU4NzVmZDBlYWVhNDUyOTllMjNiMWFkOTU2NTdjYjEiLCJJRCI6MSwiVXNlcm5hbWUiOiJhZG1pbiIsIk5pY2tOYW1lIjoi5aW95b-D5oOFIiwiRGVwdElkIjoxMDMsIlRlbmFudElkIjoiMDAwMDAwIiwiUm9sZXMiOlt7IlJvbGVJZCI6MSwiRGF0YVNjb3BlIjoiMSJ9XSwiTG9naW5BdCI6MTc0MzA2ODM0MywiQnVmZmVyVGltZSI6ODY0MDAsImlzcyI6InhpdWppZSIsImF1ZCI6WyJYaXVqaWVBZG1pbiJdLCJleHAiOjE3NDM2NzMxNDMsIm5iZiI6MTc0MzA2ODM0M30.PrTAkOp6YvWMhnXgKAo5hHFNB9U8SVU8q7Wck7q6QDM', '2025-03-27 17:39:04', '2025-04-03 17:39:03', NULL);
 INSERT INTO `sys_user_online` (`online_id`, `tenant_id`, `uuid`, `user_name`, `client_key`, `device_type`, `ipaddr`, `login_location`, `browser`, `os`, `token`, `login_time`, `expire_time`, `deleted_at`) VALUES (61, '000000', 'sss', 'test001', '1111', '', '', '', '', '', '', NULL, NULL, '2025-03-27 17:41:50');
-INSERT INTO `sys_user_online` (`online_id`, `tenant_id`, `uuid`, `user_name`, `client_key`, `device_type`, `ipaddr`, `login_location`, `browser`, `os`, `token`, `login_time`, `expire_time`, `deleted_at`) VALUES (62, '000000', 'aa@example.com', '1111', '', '', '', '', '', '', '', NULL, NULL, '2025-03-27 17:41:52');
+INSERT INTO `sys_user_online` (`online_id`, `tenant_id`, `uuid`, `user_name`, `client_key`, `device_type`, `ipaddr`, `login_location`, `browser`, `os`, `token`, `login_time`, `expire_time`, `deleted_at`) VALUES (62, '000000', 'xxx@example.com', '1111', '', '', '', '', '', '', '', NULL, NULL, '2025-03-27 17:41:52');
 COMMIT;
 
 -- ----------------------------
diff --git a/server/utility/convert/convert.go b/server/utility/convert/convert.go
index 8b4be61..cc9e390 100644
--- a/server/utility/convert/convert.go
+++ b/server/utility/convert/convert.go
@@ -1,7 +1,7 @@
 // package convert
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package convert
 
diff --git a/server/utility/excel/excel.go b/server/utility/excel/excel.go
index dbce1a4..3ad1961 100644
--- a/server/utility/excel/excel.go
+++ b/server/utility/excel/excel.go
@@ -1,7 +1,7 @@
 // package excel
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package excel
 
diff --git a/server/utility/gfredis/gfredis.go b/server/utility/gfredis/gfredis.go
index d6d230b..95984b6 100644
--- a/server/utility/gfredis/gfredis.go
+++ b/server/utility/gfredis/gfredis.go
@@ -31,7 +31,7 @@ type Redis struct {
 
 // Config is redis configuration.
 type Config struct {
-	// Address It supports single and cluster redis server. Multiple addresses joined with char ','. Eg: 192.168.1.1:6379, 192.168.1.2:6379.
+	// Address It supports single and cluster redis server. Multiple addresses joined with char ','. Eg: 192.0.2.10:6379, 192.0.2.10:6379.
 	Address         string        `json:"address"`
 	Db              int           `json:"db"`              // Redis db.
 	User            string        `json:"user"`            // Username for AUTH.
diff --git a/server/utility/tree/tree.go b/server/utility/tree/tree.go
index 9a0a27d..8378b18 100644
--- a/server/utility/tree/tree.go
+++ b/server/utility/tree/tree.go
@@ -1,7 +1,7 @@
 // package tree
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package tree
 
diff --git a/server/utility/tree/tree_node.go b/server/utility/tree/tree_node.go
index 1d29ed1..21e3b36 100644
--- a/server/utility/tree/tree_node.go
+++ b/server/utility/tree/tree_node.go
@@ -1,7 +1,7 @@
 // package tree
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package tree
 
diff --git a/server/utility/utility.go b/server/utility/utility.go
index be4735c..3146a15 100644
--- a/server/utility/utility.go
+++ b/server/utility/utility.go
@@ -1,7 +1,7 @@
 // package utility
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package utility
 
diff --git a/server/utility/version/version.go b/server/utility/version/version.go
index e718bcf..3b01488 100644
--- a/server/utility/version/version.go
+++ b/server/utility/version/version.go
@@ -1,7 +1,7 @@
 // package version
 // @Link  https://github.com/xiujiecn/xiu-admin
 // @Copyright  Copyright (c) 2025 LiXiujie
-// @Author  Lxj <li@xiujie.cn>
+// @Author  Lxj <li@example.com>
 // @License  https://github.com/xiujiecn/xiu-admin/blob/master/LICENSE
 package version
 
@@ -24,22 +24,16 @@ func ShowLogo(buildVersion, buildTime, commitID string) {
 	CommitID = commitID
 	//版本号
 
-	fmt.Println(`
-     ██╗██╗███████╗    ██╗ ██████╗ ████████╗
-     ██║██║██╔════╝    ██║██╔═══██╗╚══██╔══╝
-     ██║██║█████╗      ██║██║   ██║   ██║
-██   ██║██║██╔══╝      ██║██║   ██║   ██║
-╚█████╔╝██║███████╗    ██║╚██████╔╝   ██║
- ╚════╝ ╚═╝╚══════╝    ╚═╝ ╚═════╝    ╚═╝`)
+	fmt.Println(" __  __ _             _        _             _        \n \\ \\/ /(_) _   _     / \\    __| | _ __ ___  (_) _ __  \n  \\  / | || | | |   / _ \\  / _` || '_ ` _ \\ | || '_ \\ \n  /  \\ | || |_| |  / ___ \\| (_| || | | | | || || | | |\n /_/\\_\\|_| \\__,_| /_/   \\_\\\\__,_||_| |_| |_||_||_| |_|")
 	fmt.Println("")
 
 	fmt.Println("Version   ：", buildVersion)
 	fmt.Println("BuildTime ：", buildTime)
 	fmt.Println("CommitID  ：", commitID)
 	fmt.Println("")
-	fmt.Println("Copyright:", "2026 The iotLCM Authors")
+	fmt.Println("Copyright:", "XiuJieZhiLian Technology Co.,Ltd")
 }
 
 func AppName(ctx context.Context) string {
-	return g.Cfg().MustGet(ctx, "system.appName", "IotLCM").String()
+	return g.Cfg().MustGet(ctx, "system.appName", "XiuAdmin").String()
 }