diff --git a/README.md b/README.md index 8cadc2ed..abd26812 100644 --- a/README.md +++ b/README.md @@ -12,7 +12,7 @@ - Supabase/PostgreSQL 多租户数据库 schema、RLS、索引、触发器。 - `apps/api` 独立业务 API,后续供 H5、Taro 小程序、管理后台统一调用;已支持 Supabase Auth JWT 和迁移期 `tk_` session 双入口。 -- 租户后台能力:品牌、主题模板/草稿/发布、域名、公开设置、支付账户、登录配置、私密密钥掩码、活动内容、考试日期、题目反馈处理、用户站内通知查看、激活码、优惠券规则/核销报表、勋章管理/手动发放/签到积分反馈自动发放、成员权限、自定义角色模板、班级/教师/学生范围权限、学生批量导入、批量分班、学生备注、跟进任务、跟进效果统计、学生批量 CRM 推送、审计日志。 +- 租户后台能力:品牌、主题模板/草稿/发布、域名、公开设置、支付账户、登录配置、私密密钥掩码、活动内容、考试日期、题目反馈处理、用户站内通知查看、激活码、优惠券规则/核销报表、勋章管理/手动发放/签到积分反馈自动发放、成员权限、自定义角色模板、班级/教师/学生范围权限、学生批量导入、批量分班、学生备注、跟进任务、跟进效果统计、学习督导自动化预览/生成、学生批量 CRM 推送、审计日志。 - 租户内容能力:可配置题库入口、任意深度分类树、考试意向标记、题目集合、顺序/随机/全真模拟蓝图、题目录入/更新、视频绑定、分数线、单词、知识手册、资料资源台账、题目/单词/知识手册/分数线/视频 JSON/CSV/Excel 批量导入。 - 学生端能力:题库入口、分类树、题目集合、顺序/随机/模考 session 组卷快照、答题、错题本、收藏夹、背单词卡片学习/发音/收藏练习、个人中心、男女默认预设头像、站内通知、勋章、考试倒计时、签到积分、积分活动任务、积分兑换、题目反馈、排行榜接口(租户默认关闭)、分数线、AI 择校推荐、题目视频、订单详情/状态轮询、优惠券领取/抵扣、权益、激活码预检查/兑换、资料下载;签到、积分阈值、反馈解决和积分活动可返回自动获得勋章结果,反馈处理/奖励、勋章发放和积分兑换会写入用户站内通知。学生头像不支持上传或第三方头像落库,学生激励默认以勋章自动发放为主,不默认启用排行榜。 - 平台后台能力:租户管理、租户详情、账务资料维护、平台员工创建/授权/启停、平台细粒度权限点、平台审计日志查询和 CSV/JSON 导出、平台审计告警规则/开放告警查询/确认/解决、平台审计告警外部通知渠道和发送事件、SaaS 套餐、订阅、订阅账单候选预览/dry-run/批量生成、自动计费 worker、账单、服务费收款、逾期标记、内部催缴台账、平台催缴外部通知渠道和发送事件、用量记录、公共题库授权。 @@ -35,7 +35,7 @@ - 题库导出已完成服务端结构化 payload、PDF/Word 二进制 worker、每日一练基础导出和每日一练 ZIP 图片素材包;后续还要补更精细试卷模板、多模板排版和导出操作台体验。 - 优惠券复杂规则和核销报表已可联调,包含状态启停、活动分组、最低订单金额、优惠封顶、单用户限次、首单限制、适用套餐/地区、核销明细和活动报表;Taro 租户营销中心已接优惠券规则表单、筛选、核销明细和报表第一版。 - 勋章管理、手动发放、签到连续天数、积分阈值、反馈解决、积分活动任务、练习次数、单词掌握和模考成绩系统触发勋章已可联调;积分活动任务、积分兑换商品、兑换订单、优惠券兑换履约、租户后台配置和用户站内通知第一版已完成,Taro 学生个人中心已接积分任务/兑换/积分明细和消息中心第一版,租户营销中心已接积分任务/兑换操作台和用户通知查看第一版。学生激励默认以后台配置勋章自动发放为主,排行榜默认不开启也不在学生端默认请求。后续还要补更细活动效果看板、外部微信订阅消息/短信推送、分佣真实打款 provider、发票、批量凭证上传、CRM 富卡片模板、失败告警、死信运营台、销售转化看板、公共题库版本通知和冲突处理操作台。 -- `apps/taro` 已建立 Taro 4 React 跨端前端地基,包含 H5 学生端、租户后台、平台后台三套构建入口、租户解析、统一 API client 和 Supabase Auth client 初始化;学生端第一批页面已接入登录、首页、题库、练习、背单词、知识手册、分数线、AI 择校推荐、资料和个人中心,已新增 `RichContent` 安全渲染组件用于题干、选项、解析、知识手册和逐题复盘,H5 端已用 KaTeX 渲染 `$...$`、`$$...$$`、`\(...\)`、`\[...\]` 公式,私有题图可用 `asset:`/`content_asset:` 资源引用走短期预览签名,已升级背单词为今日计划/单元学习/收藏练习、卡片翻转、发音、美/英音切换和本地位置恢复第一版,资料页已补齐预览/下载的短签名、水印 traceId 和强制水印容器第一版,个人中心已接学习报告、14 天趋势、题型表现、最近练习、积分任务/兑换/积分明细和消息中心第一版;学生端不默认请求排行榜,仅在租户显式开启 `enableLeaderboard` 并完成压测后进入独立排行榜页或活动页;租户后台第一批页面已接入工作台、数据看板、学生/班级、题库内容、营销中心、财务运营和租户设置,学生运营页已接跟进看板和批量 CRM 推送第一版,营销中心已接 CRM、分佣结算、优惠券规则/核销报表、积分任务/兑换操作台和用户通知查看第一版,财务运营已接退款状态机、官方账单任务、对账异常、差错工单和调整凭证第一版,设置页已接主题模板、草稿预览/发布、角色模板和成员绑定第一版;平台后台已接入工作台、租户管理、账务中心、公共题库授权、平台员工管理,以及创建租户、租户详情、状态变更、账务资料维护、平台员工创建/编辑/禁用恢复、权限点勾选、平台审计查询/CSV 导出、开放审计告警确认/解决、审计告警外部通知渠道/事件状态摘要、订阅、订阅账单候选/dry-run/批量生成、自动计费 worker 生成结果查看、收款、逾期预览/催缴记录、催缴外部通知渠道/事件摘要、用量和题库授权第一版写操作。 +- `apps/taro` 已建立 Taro 4 React 跨端前端地基,包含 H5 学生端、租户后台、平台后台三套构建入口、租户解析、统一 API client 和 Supabase Auth client 初始化;学生端第一批页面已接入登录、首页、题库、练习、背单词、知识手册、分数线、AI 择校推荐、资料和个人中心,已新增 `RichContent` 安全渲染组件用于题干、选项、解析、知识手册和逐题复盘,H5 端已用 KaTeX 渲染 `$...$`、`$$...$$`、`\(...\)`、`\[...\]` 公式,私有题图可用 `asset:`/`content_asset:` 资源引用走短期预览签名,已升级背单词为今日计划/单元学习/收藏练习、卡片翻转、发音、美/英音切换和本地位置恢复第一版,资料页已补齐预览/下载的短签名、水印 traceId 和强制水印容器第一版,个人中心已接学习报告、14 天趋势、题型表现、最近练习、积分任务/兑换/积分明细和消息中心第一版;学生端不默认请求排行榜,仅在租户显式开启 `enableLeaderboard` 并完成压测后进入独立排行榜页或活动页;租户后台第一批页面已接入工作台、数据看板、学生/班级、题库内容、营销中心、财务运营和租户设置,学生运营页已接跟进看板、学习督导自动化和批量 CRM 推送第一版,营销中心已接 CRM、分佣结算、优惠券规则/核销报表、积分任务/兑换操作台和用户通知查看第一版,财务运营已接退款状态机、官方账单任务、对账异常、差错工单和调整凭证第一版,设置页已接主题模板、草稿预览/发布、角色模板和成员绑定第一版;平台后台已接入工作台、租户管理、账务中心、公共题库授权、平台员工管理,以及创建租户、租户详情、状态变更、账务资料维护、平台员工创建/编辑/禁用恢复、权限点勾选、平台审计查询/CSV 导出、开放审计告警确认/解决、审计告警外部通知渠道/事件状态摘要、订阅、订阅账单候选/dry-run/批量生成、自动计费 worker 生成结果查看、收款、逾期预览/催缴记录、催缴外部通知渠道/事件摘要、用量和题库授权第一版写操作。 - 根目录已清理为新 Supabase SaaS monorepo 编排层;旧 PocketBase/React 项目和旧构建产物仅保留在 `参考/` 目录作为迁移参考,不进入 Git 提交。 更完整的进度看这些文档: diff --git a/apps/api/src/features/tenant-admin/auth.ts b/apps/api/src/features/tenant-admin/auth.ts index 98515b73..28dc1267 100644 --- a/apps/api/src/features/tenant-admin/auth.ts +++ b/apps/api/src/features/tenant-admin/auth.ts @@ -14,7 +14,7 @@ const ROLE_PERMISSION_DEFAULTS: Record = { tenant_owner: ['*'], tenant_admin: ['*'], tenant_operator: ['dashboard:read', 'content:*', 'marketing:*', 'badges:*', 'notifications:read', 'codes:read', 'coupons:read', 'referral:read', 'commission:read', 'crm:read'], - teacher: ['content:*', 'classes:read', 'students:read', 'students:notes:*', 'students:followups:*'], + teacher: ['content:*', 'classes:read', 'students:read', 'students:notes:*', 'students:followups:*', 'students:supervision:*'], sales: ['codes:*', 'coupons:read', 'coupons:write', 'referral:*', 'commission:self'], agent: ['codes:read', 'coupons:read', 'referral:self', 'commission:self'], student: [], @@ -136,6 +136,8 @@ export function tenantPermissionCatalog() { { key: 'students:notes:write', label: '学生备注管理' }, { key: 'students:followups:read', label: '学生跟进任务查看' }, { key: 'students:followups:write', label: '学生跟进任务管理' }, + { key: 'students:supervision:read', label: '学习督导预览' }, + { key: 'students:supervision:write', label: '学习督导生成' }, { key: 'members:read', label: '成员查看' }, { key: 'members:write', label: '成员管理' }, { key: 'roles:read', label: '角色模板查看' }, diff --git a/apps/api/src/features/tenant-admin/classes.ts b/apps/api/src/features/tenant-admin/classes.ts index 95774cf3..07dab5b4 100644 --- a/apps/api/src/features/tenant-admin/classes.ts +++ b/apps/api/src/features/tenant-admin/classes.ts @@ -25,12 +25,23 @@ const FOLLOWUP_REPORT_RANGES: Record = { '7d': 7, '30d': 30, '90 const MAX_BULK_STUDENTS = 200; const MAX_BULK_CLASS_ASSIGNMENTS = 500; const MAX_BULK_CRM_PUSH = 100; +const MAX_SUPERVISION_GENERATE = 100; const CRM_ASSIGNABLE_ROLES = ['tenant_owner', 'tenant_admin', 'tenant_operator', 'teacher', 'sales', 'agent']; const STUDENT_AVATAR_FIELD_KEYS = ['avatarUrl', 'avatar_url', 'avatar', 'headimgurl', 'headImgUrl', 'figureurl', 'figureurl_qq_1', 'figureurl_qq_2']; const STUDENT_PRIMARY_ROLE_FIELD_KEYS = ['primaryRole', 'primary_role']; const UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i; const DATE_KEY_PATTERN = /^\d{4}-\d{2}-\d{2}$/; +const SUPERVISION_RULE_DEFAULTS = { + windowDays: 14, + inactivityDays: 7, + minAnswers: 10, + lowAccuracyThreshold: 0.6, + wrongQuestionThreshold: 5, + vocabularyDueThreshold: 20, + staleSessionDays: 3, +}; + const shanghaiDateFormatter = new Intl.DateTimeFormat('en-US', { timeZone: 'Asia/Shanghai', year: 'numeric', @@ -94,11 +105,21 @@ function intValue(value: unknown, fallback: number) { return Number.isFinite(numberValue) ? Math.trunc(numberValue) : fallback; } +function boundedIntValue(value: unknown, fallback: number, min: number, max: number) { + const parsed = intValue(value, fallback); + return Math.max(min, Math.min(max, parsed)); +} + function numberValue(value: unknown, fallback = 0) { const parsed = Number(value ?? fallback); return Number.isFinite(parsed) ? parsed : fallback; } +function boundedNumberValue(value: unknown, fallback: number, min: number, max: number) { + const parsed = numberValue(value, fallback); + return Math.max(min, Math.min(max, parsed)); +} + function ratio(numerator: number, denominator: number) { if (denominator <= 0) return 0; return Number((numerator / denominator).toFixed(4)); @@ -181,6 +202,10 @@ function isValidShanghaiDateKey(dateKey: string) { return Number.isFinite(date.getTime()) && shanghaiDateKey(date) === dateKey; } +function shanghaiTodayKey() { + return shanghaiDateKey(new Date()); +} + function daysBetweenInclusive(startDate: string, endDate: string) { const start = Date.parse(`${startDate}T00:00:00+08:00`); const end = Date.parse(`${endDate}T00:00:00+08:00`); @@ -221,6 +246,48 @@ function parseFollowupReportRange(timeRangeValue: string, startDateValue: string }; } +interface SupervisionRuleConfig { + windowDays: number; + inactivityDays: number; + minAnswers: number; + lowAccuracyThreshold: number; + wrongQuestionThreshold: number; + vocabularyDueThreshold: number; + staleSessionDays: number; +} + +function parseSupervisionRules(value: unknown): SupervisionRuleConfig { + const raw = objectValue(value); + return { + windowDays: boundedIntValue(raw.windowDays, SUPERVISION_RULE_DEFAULTS.windowDays, 3, 90), + inactivityDays: boundedIntValue(raw.inactivityDays, SUPERVISION_RULE_DEFAULTS.inactivityDays, 1, 90), + minAnswers: boundedIntValue(raw.minAnswers, SUPERVISION_RULE_DEFAULTS.minAnswers, 1, 500), + lowAccuracyThreshold: boundedNumberValue(raw.lowAccuracyThreshold, SUPERVISION_RULE_DEFAULTS.lowAccuracyThreshold, 0.1, 0.95), + wrongQuestionThreshold: boundedIntValue(raw.wrongQuestionThreshold, SUPERVISION_RULE_DEFAULTS.wrongQuestionThreshold, 1, 200), + vocabularyDueThreshold: boundedIntValue(raw.vocabularyDueThreshold, SUPERVISION_RULE_DEFAULTS.vocabularyDueThreshold, 1, 1000), + staleSessionDays: boundedIntValue(raw.staleSessionDays, SUPERVISION_RULE_DEFAULTS.staleSessionDays, 1, 30), + }; +} + +function supervisionBatchKey(value: unknown) { + const candidate = nullableString(value); + if (!candidate) return `manual:${shanghaiTodayKey()}`; + return candidate.length <= 120 ? candidate : createHash('sha256').update(candidate).digest('hex'); +} + +function defaultSupervisionDueAt() { + const date = new Date(); + date.setDate(date.getDate() + 1); + date.setHours(18, 0, 0, 0); + return date.toISOString(); +} + +function supervisionPriority(score: number) { + if (score >= 90) return 'urgent'; + if (score >= 60) return 'high'; + return 'normal'; +} + function classCodeValue(value: unknown) { const code = nullableString(value); if (!code) return null; @@ -350,6 +417,295 @@ async function ensureStudentInScope(auth: TenantAdminAuth, studentUserId: string } } +async function loadStudentSupervisionCandidates(auth: TenantAdminAuth, input: { + rules: SupervisionRuleConfig; + classId: string | null; + assignedToUserId: string | null; + studentUserIds?: string[]; + limit: number; +}) { + const scopedIds = await scopedClassIds(auth); + const params: unknown[] = [auth.tenantId, input.rules.windowDays, input.rules.staleSessionDays]; + const filters = [ + 'tm.tenant_id = $1', + `tm.role = 'student'`, + `tm.status = 'active'`, + ]; + + if (input.classId) { + params.push(input.classId); + filters.push(`exists ( + select 1 from public.tenant_class_members scoped_cm + where scoped_cm.tenant_id = tm.tenant_id + and scoped_cm.user_id = tm.user_id + and scoped_cm.class_id = $${params.length}::uuid + and scoped_cm.member_type = 'student' + and scoped_cm.status = 'active' + )`); + } + if (scopedIds) { + params.push(scopedIds); + filters.push(`exists ( + select 1 from public.tenant_class_members scoped_cm + where scoped_cm.tenant_id = tm.tenant_id + and scoped_cm.user_id = tm.user_id + and scoped_cm.class_id = any($${params.length}::uuid[]) + and scoped_cm.member_type = 'student' + and scoped_cm.status = 'active' + )`); + } + if (input.studentUserIds?.length) { + params.push(input.studentUserIds); + filters.push(`tm.user_id = any($${params.length}::uuid[])`); + } + + params.push(input.limit); + const rows = await query>( + ` + with student_scope as ( + select tm.tenant_id, tm.user_id, tm.created_at + from public.tenant_memberships tm + where ${filters.join(' and ')} + ), + class_agg as ( + select tcm.tenant_id, tcm.user_id, + min(tcm.class_id::text) as "defaultClassId", + jsonb_agg( + jsonb_build_object('classId', tc.id, 'className', tc.name, 'classCode', tc.code) + order by tc.sort_order asc, tc.created_at desc + ) filter (where tcm.status = 'active') as classes + from public.tenant_class_members tcm + join public.tenant_classes tc on tc.tenant_id = tcm.tenant_id and tc.id = tcm.class_id + join student_scope ss on ss.tenant_id = tcm.tenant_id and ss.user_id = tcm.user_id + where tcm.member_type = 'student' + and tcm.status = 'active' + group by tcm.tenant_id, tcm.user_id + ), + answers as ( + select ar.tenant_id, ar.user_id, + count(*) filter (where ar.answered_at >= now() - ($2::int * interval '1 day'))::int as "answerCount", + count(*) filter (where ar.answered_at >= now() - ($2::int * interval '1 day') and ar.is_correct is true)::int as "correctCount", + count(*) filter (where ar.answered_at >= now() - ($2::int * interval '1 day') and ar.is_correct is false)::int as "wrongAnswerCount", + max(ar.answered_at) as "latestAnsweredAt" + from public.answer_records ar + join student_scope ss on ss.tenant_id = ar.tenant_id and ss.user_id = ar.user_id + group by ar.tenant_id, ar.user_id + ), + wrongs as ( + select wq.tenant_id, wq.user_id, + count(*) filter (where wq.resolved_at is null)::int as "unresolvedWrongQuestions", + coalesce(sum(wq.wrong_count) filter (where wq.resolved_at is null), 0)::int as "wrongQuestionAttempts", + max(wq.last_wrong_at) filter (where wq.resolved_at is null) as "latestWrongAt" + from public.wrong_questions wq + join student_scope ss on ss.tenant_id = wq.tenant_id and ss.user_id = wq.user_id + group by wq.tenant_id, wq.user_id + ), + sessions as ( + select ps.tenant_id, ps.user_id, + count(*) filter ( + where ps.finished_at is null + and ps.started_at <= now() - ($3::int * interval '1 day') + and (ps.expires_at is null or ps.expires_at > now()) + )::int as "staleActiveSessions", + max(ps.started_at) as "latestSessionAt" + from public.practice_sessions ps + join student_scope ss on ss.tenant_id = ps.tenant_id and ss.user_id = ps.user_id + group by ps.tenant_id, ps.user_id + ), + reports as ( + select pr.tenant_id, pr.user_id, + max(pr.submitted_at) as "latestReportAt", + min(pr.accuracy) filter (where pr.submitted_at >= now() - ($2::int * interval '1 day')) as "lowestReportAccuracy", + max(pr.score) filter (where pr.submitted_at >= now() - ($2::int * interval '1 day')) as "bestReportScore" + from public.practice_session_reports pr + join student_scope ss on ss.tenant_id = pr.tenant_id and ss.user_id = pr.user_id + group by pr.tenant_id, pr.user_id + ), + vocab as ( + select uwp.tenant_id, uwp.user_id, + count(*) filter ( + where uwp.status in ('new', 'learning', 'reviewing') + and (uwp.next_review_date is null or uwp.next_review_date <= now()) + )::int as "dueVocabularyWords", + count(*) filter (where uwp.status = 'mastered')::int as "masteredVocabularyWords", + max(uwp.last_review_date) as "latestVocabularyReviewAt" + from public.user_word_progress uwp + join student_scope ss on ss.tenant_id = uwp.tenant_id and ss.user_id = uwp.user_id + group by uwp.tenant_id, uwp.user_id + ) + select ss.user_id as "studentUserId", + u.username, u.name, u.email::text as email, + case when ${canSeeStudentPhone(auth) ? 'true' : 'false'} then u.phone else null end as "studentPhone", + sp.region_id as "regionId", r.name as "regionName", + sp.selected_school_id as "selectedSchoolId", school.name as "selectedSchoolName", + sp.selected_major_id as "selectedMajorId", major.name as "selectedMajorName", + coalesce(sp.mastered_words_count, 0)::int as "profileMasteredWords", + coalesce(ca."defaultClassId", null) as "defaultClassId", + coalesce(ca.classes, '[]'::jsonb) as classes, + coalesce(a."answerCount", 0)::int as "answerCount", + coalesce(a."correctCount", 0)::int as "correctCount", + coalesce(a."wrongAnswerCount", 0)::int as "wrongAnswerCount", + a."latestAnsweredAt", + coalesce(w."unresolvedWrongQuestions", 0)::int as "unresolvedWrongQuestions", + coalesce(w."wrongQuestionAttempts", 0)::int as "wrongQuestionAttempts", + w."latestWrongAt", + coalesce(s."staleActiveSessions", 0)::int as "staleActiveSessions", + s."latestSessionAt", + rep."latestReportAt", + rep."lowestReportAccuracy", + rep."bestReportScore", + coalesce(v."dueVocabularyWords", 0)::int as "dueVocabularyWords", + coalesce(v."masteredVocabularyWords", 0)::int as "masteredVocabularyWords", + v."latestVocabularyReviewAt" + from student_scope ss + join public.platform_users u on u.id = ss.user_id + left join public.student_profiles sp on sp.tenant_id = ss.tenant_id and sp.user_id = ss.user_id + left join public.regions r on r.tenant_id = ss.tenant_id and r.id = sp.region_id + left join public.schools school on school.tenant_id = ss.tenant_id and school.id = sp.selected_school_id + left join public.majors major on major.tenant_id = ss.tenant_id and major.id = sp.selected_major_id + left join class_agg ca on ca.tenant_id = ss.tenant_id and ca.user_id = ss.user_id + left join answers a on a.tenant_id = ss.tenant_id and a.user_id = ss.user_id + left join wrongs w on w.tenant_id = ss.tenant_id and w.user_id = ss.user_id + left join sessions s on s.tenant_id = ss.tenant_id and s.user_id = ss.user_id + left join reports rep on rep.tenant_id = ss.tenant_id and rep.user_id = ss.user_id + left join vocab v on v.tenant_id = ss.tenant_id and v.user_id = ss.user_id + order by coalesce(a."latestAnsweredAt", s."latestSessionAt", v."latestVocabularyReviewAt", ss.created_at) asc nulls first + limit $${params.length} + `, + params, + ); + + return rows.map(row => buildSupervisionCandidate(row, input.rules, { + assignedToUserId: input.assignedToUserId, + classId: input.classId, + })).filter(Boolean) as Record[]; +} + +function buildSupervisionCandidate( + row: Record, + rules: SupervisionRuleConfig, + options: { assignedToUserId: string | null; classId: string | null }, +) { + const answerCount = intValue(row.answerCount, 0); + const correctCount = intValue(row.correctCount, 0); + const unresolvedWrongQuestions = intValue(row.unresolvedWrongQuestions, 0); + const staleActiveSessions = intValue(row.staleActiveSessions, 0); + const dueVocabularyWords = intValue(row.dueVocabularyWords, 0); + const latestStudyAt = latestIso([ + row.latestAnsweredAt, + row.latestSessionAt, + row.latestVocabularyReviewAt, + row.latestReportAt, + ]); + const inactiveDays = latestStudyAt ? Math.floor((Date.now() - new Date(latestStudyAt).getTime()) / 86_400_000) : null; + const accuracy = answerCount > 0 ? correctCount / answerCount : null; + const reasons: Array> = []; + let riskScore = 0; + + if (inactiveDays === null || inactiveDays >= rules.inactivityDays) { + const score = inactiveDays === null ? 35 : Math.min(55, inactiveDays * 5); + riskScore += score; + reasons.push({ + code: 'inactive', + label: inactiveDays === null ? '未产生学习记录' : `${inactiveDays} 天未学习`, + severity: inactiveDays === null || inactiveDays >= rules.inactivityDays * 2 ? 'high' : 'medium', + value: inactiveDays, + threshold: rules.inactivityDays, + }); + } + + if (unresolvedWrongQuestions >= rules.wrongQuestionThreshold) { + riskScore += Math.min(45, unresolvedWrongQuestions * 4); + reasons.push({ + code: 'wrong_backlog', + label: `未解决错题 ${unresolvedWrongQuestions} 道`, + severity: unresolvedWrongQuestions >= rules.wrongQuestionThreshold * 2 ? 'high' : 'medium', + value: unresolvedWrongQuestions, + threshold: rules.wrongQuestionThreshold, + }); + } + + if (answerCount >= rules.minAnswers && accuracy !== null && accuracy < rules.lowAccuracyThreshold) { + riskScore += Math.round((rules.lowAccuracyThreshold - accuracy) * 100); + reasons.push({ + code: 'low_accuracy', + label: `近 ${rules.windowDays} 天正确率 ${Math.round(accuracy * 100)}%`, + severity: accuracy < rules.lowAccuracyThreshold * 0.75 ? 'high' : 'medium', + value: Number(accuracy.toFixed(4)), + threshold: rules.lowAccuracyThreshold, + }); + } + + if (dueVocabularyWords >= rules.vocabularyDueThreshold) { + riskScore += Math.min(35, Math.ceil(dueVocabularyWords / Math.max(1, rules.vocabularyDueThreshold)) * 10); + reasons.push({ + code: 'vocabulary_due', + label: `待复习单词 ${dueVocabularyWords} 个`, + severity: dueVocabularyWords >= rules.vocabularyDueThreshold * 2 ? 'high' : 'medium', + value: dueVocabularyWords, + threshold: rules.vocabularyDueThreshold, + }); + } + + if (staleActiveSessions > 0) { + riskScore += Math.min(25, staleActiveSessions * 10); + reasons.push({ + code: 'stale_session', + label: `存在 ${staleActiveSessions} 个未完成练习`, + severity: 'medium', + value: staleActiveSessions, + threshold: 1, + }); + } + + if (!reasons.length) return null; + const priority = supervisionPriority(riskScore); + const studentName = nullableString(row.name) || nullableString(row.username) || nullableString(row.studentPhone) || String(row.studentUserId); + const primaryReason = String(reasons[0]?.label || '学习状态需要跟进'); + const classId = options.classId || nullableString(row.defaultClassId); + return { + studentUserId: row.studentUserId, + studentName, + studentPhone: row.studentPhone, + assignedToUserId: options.assignedToUserId, + classId, + classes: row.classes, + title: `学习督导:${primaryReason}`, + description: reasons.map(item => item.label).join(';'), + followupType: 'learning', + priority, + riskScore: Math.min(100, Math.round(riskScore)), + reasons, + evidence: { + windowDays: rules.windowDays, + answerCount, + correctCount, + wrongAnswerCount: intValue(row.wrongAnswerCount, 0), + accuracy: accuracy === null ? null : Number(accuracy.toFixed(4)), + latestStudyAt, + inactiveDays, + unresolvedWrongQuestions, + wrongQuestionAttempts: intValue(row.wrongQuestionAttempts, 0), + staleActiveSessions, + dueVocabularyWords, + masteredVocabularyWords: intValue(row.masteredVocabularyWords, 0), + latestWrongAt: row.latestWrongAt || null, + latestReportAt: row.latestReportAt || null, + lowestReportAccuracy: row.lowestReportAccuracy === null || row.lowestReportAccuracy === undefined ? null : numberValue(row.lowestReportAccuracy, 0), + bestReportScore: row.bestReportScore === null || row.bestReportScore === undefined ? null : numberValue(row.bestReportScore, 0), + latestVocabularyReviewAt: row.latestVocabularyReviewAt || null, + }, + }; +} + +function latestIso(values: unknown[]) { + const timestamps = values + .map(value => (typeof value === 'string' || value instanceof Date ? new Date(value).getTime() : NaN)) + .filter(Number.isFinite); + if (!timestamps.length) return null; + return new Date(Math.max(...timestamps)).toISOString(); +} + async function ensureUserTenantMembership( client: pg.PoolClient, tenantId: string, @@ -1765,6 +2121,177 @@ export async function tenantStudentFollowupReportRoute(ctx: RequestContext) { }; } +export async function tenantStudentSupervisionPreviewRoute(ctx: RequestContext) { + const auth = await requireTenantAdmin(ctx); + requireTenantPermission(auth, 'students:read'); + requireTenantPermission(auth, 'students:supervision:read'); + const limit = intParam(ctx, 'limit', 20, 100); + const classId = stringParam(ctx, 'classId') || null; + const assignedToUserId = stringParam(ctx, 'assignedToUserId') || null; + if (classId) await ensureReadableClass(auth, classId); + if (assignedToUserId) { + await query( + ` + select 1 + from public.tenant_memberships + where tenant_id = $1 and user_id = $2::uuid and status = 'active' + and role = any($3::text[]) + limit 1 + `, + [auth.tenantId, assignedToUserId, CRM_ASSIGNABLE_ROLES], + ).then(rows => { + if (!rows[0]) throw new HttpError(400, 'User is not an active tenant member', 'ASSIGNEE_NOT_FOUND'); + }); + } + + const rules = parseSupervisionRules({ + windowDays: stringParam(ctx, 'windowDays'), + inactivityDays: stringParam(ctx, 'inactivityDays'), + minAnswers: stringParam(ctx, 'minAnswers'), + lowAccuracyThreshold: stringParam(ctx, 'lowAccuracyThreshold'), + wrongQuestionThreshold: stringParam(ctx, 'wrongQuestionThreshold'), + vocabularyDueThreshold: stringParam(ctx, 'vocabularyDueThreshold'), + staleSessionDays: stringParam(ctx, 'staleSessionDays'), + }); + const candidates = await loadStudentSupervisionCandidates(auth, { rules, classId, assignedToUserId, limit }); + return { + item: { + rules, + filters: { + classId, + assignedToUserId, + scoped: (await scopedClassIds(auth)) !== null, + }, + totalCandidates: candidates.length, + candidates, + }, + }; +} + +export async function generateTenantStudentSupervisionRoute(ctx: RequestContext) { + const auth = await requireTenantAdmin(ctx); + requireTenantPermission(auth, 'students:read'); + requireTenantPermission(auth, 'students:supervision:write'); + const body = await readJsonBody(ctx); + const limit = boundedIntValue(body.limit, 20, 1, MAX_SUPERVISION_GENERATE); + const classId = nullableString(body.classId); + const assignedToUserId = nullableString(body.assignedToUserId); + const dueAt = optionalTimestampString(body.dueAt, 'dueAt') || defaultSupervisionDueAt(); + const batchKey = supervisionBatchKey(body.batchKey); + const rules = parseSupervisionRules(body.rules); + const onlyStudentUserIds = Array.isArray(body.studentUserIds) + ? strictUuidArrayValue(body.studentUserIds, 'studentUserIds', MAX_SUPERVISION_GENERATE) + : []; + if (classId) await ensureReadableClass(auth, classId); + + const result = await transaction(async client => { + await ensureUserTenantMembership(client, auth.tenantId, assignedToUserId, CRM_ASSIGNABLE_ROLES, 'ASSIGNEE_NOT_FOUND'); + let candidates = await loadStudentSupervisionCandidates(auth, { + rules, + classId, + assignedToUserId, + studentUserIds: onlyStudentUserIds, + limit: Math.max(limit, onlyStudentUserIds.length || 0) || limit, + }); + candidates = candidates.slice(0, limit); + + const items: unknown[] = []; + const errors: unknown[] = []; + for (let index = 0; index < candidates.length; index += 1) { + const candidate = candidates[index]; + const studentUserId = String(candidate.studentUserId || ''); + try { + await ensureStudentInScope(auth, studentUserId); + const candidateClassId = nullableString(candidate.classId); + if (candidateClassId) await ensureTenantClass(client, auth.tenantId, candidateClassId); + const idempotencyKey = `student_supervision:${batchKey}:${studentUserId}`; + const metadata = { + ...objectValue(body.metadata), + autoSupervision: { + idempotencyKey, + batchKey, + generatedAt: new Date().toISOString(), + rules, + riskScore: candidate.riskScore, + reasons: candidate.reasons, + evidence: candidate.evidence, + }, + }; + const followup = await client.query>( + ` + insert into public.tenant_student_followups ( + tenant_id, student_user_id, assigned_to_user_id, class_id, + title, description, followup_type, priority, status, due_at, + metadata, created_by, updated_by + ) + values ( + $1, $2::uuid, $3::uuid, $4::uuid, + $5, $6, 'learning', $7, 'open', $8::timestamptz, + $9::jsonb, $10, $10 + ) + on conflict (tenant_id, (metadata->'autoSupervision'->>'idempotencyKey')) + where metadata->'autoSupervision'->>'idempotencyKey' is not null + do update set assigned_to_user_id = coalesce(excluded.assigned_to_user_id, public.tenant_student_followups.assigned_to_user_id), + class_id = coalesce(excluded.class_id, public.tenant_student_followups.class_id), + title = excluded.title, + description = excluded.description, + priority = excluded.priority, + due_at = excluded.due_at, + metadata = public.tenant_student_followups.metadata || excluded.metadata, + updated_by = excluded.updated_by, + updated_at = now() + returning id, student_user_id as "studentUserId", + assigned_to_user_id as "assignedToUserId", class_id as "classId", + title, description, followup_type as "followupType", priority, status, + due_at as "dueAt", metadata, created_at as "createdAt", updated_at as "updatedAt" + `, + [ + auth.tenantId, + studentUserId, + assignedToUserId, + candidateClassId, + candidate.title, + candidate.description, + candidate.priority, + dueAt, + JSON.stringify(metadata), + auth.userId, + ], + ); + items.push({ index, studentUserId, followupId: followup.rows[0].id, item: followup.rows[0] }); + } catch (error) { + errors.push({ + index, + studentUserId, + code: error instanceof HttpError ? error.code : 'STUDENT_SUPERVISION_ITEM_FAILED', + message: error instanceof Error ? error.message : 'Student supervision item failed', + }); + } + } + + await recordAudit(client, auth, 'tenant.students.supervision_generated', 'tenant_student_followups', null, { + batchKey, + classId, + assignedToUserId, + total: candidates.length, + successCount: items.length, + errorCount: errors.length, + rules, + }); + + return { + batchKey, + total: candidates.length, + successCount: items.length, + errorCount: errors.length, + items, + errors, + }; + }); + + return result; +} + export async function upsertTenantStudentFollowupRoute(ctx: RequestContext) { const auth = await requireTenantAdmin(ctx); requireTenantPermission(auth, 'students:followups:write'); diff --git a/apps/api/src/features/tenant-admin/index.ts b/apps/api/src/features/tenant-admin/index.ts index bc7f8b1d..002c8394 100644 --- a/apps/api/src/features/tenant-admin/index.ts +++ b/apps/api/src/features/tenant-admin/index.ts @@ -6,9 +6,11 @@ import { removeTenantClassMemberRoute, tenantClassesRoute, tenantClassMembersRoute, + generateTenantStudentSupervisionRoute, tenantStudentFollowupsRoute, tenantStudentFollowupReportRoute, tenantStudentNotesRoute, + tenantStudentSupervisionPreviewRoute, tenantStudentsRoute, tenantTeachersRoute, pushTenantStudentsToCrmRoute, @@ -105,6 +107,8 @@ export const tenantAdminRoutes: RouteDefinition[] = [ ['GET', '/api/tenant-admin/students/followups', tenantStudentFollowupsRoute], ['GET', '/api/tenant-admin/students/followups/report', tenantStudentFollowupReportRoute], ['PUT', '/api/tenant-admin/students/followups', upsertTenantStudentFollowupRoute], + ['GET', '/api/tenant-admin/students/supervision/preview', tenantStudentSupervisionPreviewRoute], + ['POST', '/api/tenant-admin/students/supervision/generate', generateTenantStudentSupervisionRoute], ['GET', '/api/tenant-admin/teachers', tenantTeachersRoute], ['GET', '/api/tenant-admin/overview', tenantOverviewRoute], ['GET', '/api/tenant-admin/dashboard', tenantDashboardRoute], diff --git a/apps/taro/src/pages/tenant-admin/students/index.tsx b/apps/taro/src/pages/tenant-admin/students/index.tsx index 639f6376..05801be7 100644 --- a/apps/taro/src/pages/tenant-admin/students/index.tsx +++ b/apps/taro/src/pages/tenant-admin/students/index.tsx @@ -4,6 +4,7 @@ import { Button, Input, Text, Textarea, View } from '@tarojs/components'; import { bulkAssignTenantClassMembers, bulkUpsertTenantStudents, + generateTenantStudentSupervision, loadTenantClasses, loadTenantStudentFollowups, loadTenantStudentFollowupReport, @@ -11,6 +12,7 @@ import { loadTenantStudents, loadTenantTeachers, loadTenantMembers, + previewTenantStudentSupervision, pushTenantStudentsToCrm, updateTenantStudentStatus, upsertTenantStudent, @@ -24,6 +26,7 @@ import { type TenantStudentNoteItem, type TenantStudentCrmPushInput, type TenantStudentFollowupReport, + type TenantStudentSupervisionCandidate, type TenantTeacherItem, type TenantMemberItem, } from '@/services/tenantAdmin'; @@ -35,6 +38,15 @@ const followupTypes = ['learning', 'service', 'sales', 'renewal', 'risk', 'custo const followupPriorities = ['low', 'normal', 'high', 'urgent']; const followupStatuses = ['open', 'in_progress', 'done', 'cancelled']; const crmAssignableRoles = ['tenant_owner', 'tenant_admin', 'tenant_operator', 'teacher', 'sales', 'agent']; +const defaultSupervisionRules = { + windowDays: 14, + inactivityDays: 7, + minAnswers: 10, + lowAccuracyThreshold: 0.6, + wrongQuestionThreshold: 5, + vocabularyDueThreshold: 20, + staleSessionDays: 3, +}; function emptyStudentForm(): TenantStudentInput { return { @@ -124,7 +136,10 @@ export default function TenantStudentsPage() { const [bulkResult, setBulkResult] = useState(null); const [assignResult, setAssignResult] = useState(null); const [crmPushResult, setCrmPushResult] = useState(null); + const [supervisionResult, setSupervisionResult] = useState(null); const [followupReport, setFollowupReport] = useState(null); + const [supervisionCandidates, setSupervisionCandidates] = useState([]); + const [supervisionRules, setSupervisionRules] = useState(defaultSupervisionRules); const [scoped, setScoped] = useState(false); const [busy, setBusy] = useState(''); const [error, setError] = useState(''); @@ -332,6 +347,50 @@ export default function TenantStudentsPage() { } } + async function previewSupervision() { + setBusy('supervisionPreview'); + setError(''); + try { + const payload = await previewTenantStudentSupervision({ + ...supervisionRules, + classId: selectedClassId || undefined, + limit: 20, + }); + setSupervisionCandidates(payload.item?.candidates || []); + Taro.showToast({ title: '督导候选已刷新', icon: 'success' }); + } catch (nextError) { + setError(nextError instanceof Error ? nextError.message : '学习督导预览失败'); + } finally { + setBusy(''); + } + } + + async function generateSupervision() { + if (!supervisionCandidates.length) { + Taro.showToast({ title: '请先预览候选', icon: 'none' }); + return; + } + setBusy('supervisionGenerate'); + setError(''); + try { + const result = await generateTenantStudentSupervision({ + rules: supervisionRules, + classId: selectedClassId || null, + studentUserIds: supervisionCandidates.map(item => item.studentUserId), + batchKey: `taro-supervision-${new Date().toISOString().slice(0, 10)}-${selectedClassId || 'all'}`, + limit: supervisionCandidates.length, + metadata: { source: 'taro-tenant-admin' }, + }); + setSupervisionResult(result); + Taro.showToast({ title: '督导任务已生成', icon: result.errorCount ? 'none' : 'success' }); + reload(); + } catch (nextError) { + setError(nextError instanceof Error ? nextError.message : '学习督导生成失败'); + } finally { + setBusy(''); + } + } + async function saveNote() { if (!selectedStudent) { Taro.showToast({ title: '请选择学生', icon: 'none' }); @@ -575,6 +634,32 @@ export default function TenantStudentsPage() { ))} + + 学习督导自动化 + + setSupervisionRules(prev => ({ ...prev, windowDays: Number(event.detail.value || prev.windowDays) }))} /> + setSupervisionRules(prev => ({ ...prev, inactivityDays: Number(event.detail.value || prev.inactivityDays) }))} /> + setSupervisionRules(prev => ({ ...prev, minAnswers: Number(event.detail.value || prev.minAnswers) }))} /> + setSupervisionRules(prev => ({ ...prev, lowAccuracyThreshold: Number(event.detail.value || prev.lowAccuracyThreshold) }))} /> + setSupervisionRules(prev => ({ ...prev, wrongQuestionThreshold: Number(event.detail.value || prev.wrongQuestionThreshold) }))} /> + setSupervisionRules(prev => ({ ...prev, vocabularyDueThreshold: Number(event.detail.value || prev.vocabularyDueThreshold) }))} /> + + + + + {supervisionResult ? {resultSummary(supervisionResult)} : null} + + + {supervisionCandidates.slice(0, 6).map(item => ( + + {item.studentName || item.studentUserId} · 风险 {String(item.riskScore || 0)} + {item.priority || 'normal'} · {item.description || '学习状态需要跟进'} + + ))} + + {!supervisionCandidates.length ? 可按当前班级范围预览未学习、错题积压、正确率偏低、单词待复习和未完成练习的学生。 : null} + + CRM 批量推送 diff --git a/apps/taro/src/services/tenantAdmin.ts b/apps/taro/src/services/tenantAdmin.ts index 569db1e6..c79b5cb2 100644 --- a/apps/taro/src/services/tenantAdmin.ts +++ b/apps/taro/src/services/tenantAdmin.ts @@ -174,6 +174,40 @@ export interface TenantStudentFollowupReport { }; } +export interface TenantStudentSupervisionRules { + windowDays?: number; + inactivityDays?: number; + minAnswers?: number; + lowAccuracyThreshold?: number; + wrongQuestionThreshold?: number; + vocabularyDueThreshold?: number; + staleSessionDays?: number; +} + +export interface TenantStudentSupervisionCandidate { + studentUserId: string; + studentName?: string | null; + studentPhone?: string | null; + assignedToUserId?: string | null; + classId?: string | null; + title?: string; + description?: string; + followupType?: string; + priority?: string; + riskScore?: number; + reasons?: Record[]; + evidence?: Record; +} + +export interface TenantStudentSupervisionPreview { + item?: { + rules?: TenantStudentSupervisionRules; + filters?: Record; + totalCandidates?: number; + candidates?: TenantStudentSupervisionCandidate[]; + }; +} + export interface ImportJobItem { id: string; importType?: string; @@ -1113,6 +1147,32 @@ export async function loadTenantStudentFollowupReport(query: { }); } +export async function previewTenantStudentSupervision(query: TenantStudentSupervisionRules & { + classId?: string; + assignedToUserId?: string; + limit?: number; +} = {}) { + return apiRequest('/api/tenant-admin/students/supervision/preview', { + query: { ...query, limit: query.limit || 20 }, + }); +} + +export async function generateTenantStudentSupervision(input: { + rules?: TenantStudentSupervisionRules; + classId?: string | null; + assignedToUserId?: string | null; + studentUserIds?: string[]; + dueAt?: string | null; + batchKey?: string; + limit?: number; + metadata?: Record; +}) { + return apiRequest('/api/tenant-admin/students/supervision/generate', { + method: 'POST', + body: input, + }); +} + export async function upsertTenantStudentFollowup(input: { id?: string; studentUserId: string; diff --git a/docs/refactor/backend-capability-status.md b/docs/refactor/backend-capability-status.md index 2300ed2f..8e73abeb 100644 --- a/docs/refactor/backend-capability-status.md +++ b/docs/refactor/backend-capability-status.md @@ -45,7 +45,7 @@ | 租户角色权限 | 可联调 | `tenant_memberships.role + permissions + role_template_id`,接口有权限点校验 | | 自定义角色模板 | 可联调 | `tenant_role_templates` + `/api/tenant-admin/role-templates`,支持权限、菜单、模块、字段、数据范围配置;Taro 租户设置页已接创建、编辑、停用、权限点、菜单、模块、字段和基础数据范围配置第一版 | | 班级/教师/学生范围权限 | 可联调 | `tenant_classes`、`tenant_class_members` + `/api/tenant-admin/classes`、`classes/members`、`students`、`teachers`;教师默认只看自己负责班级,字段权限可脱敏学生手机号 | -| 学生运营备注和跟进 | 可联调 | `tenant_student_notes`、`tenant_student_followups` + `/api/tenant-admin/students/notes`、`students/followups`;教师/班主任只能操作范围内学生,支持备注可见性、任务指派、完成状态和审计 | +| 学生运营备注、跟进和学习督导 | 可联调 | `tenant_student_notes`、`tenant_student_followups` + `/api/tenant-admin/students/notes`、`students/followups`、`students/supervision/preview`、`students/supervision/generate`;教师/班主任只能操作范围内学生,支持备注可见性、任务指派、完成状态、学习风险候选预览、自动生成跟进任务和审计 | ## 学生端题库主链路 @@ -144,7 +144,7 @@ | 激活码批次/生成/列表 | 可联调 | `/api/tenant-admin/code-batches`、`activation-codes` | | 成员/角色权限/审计 | 可联调 | `/api/tenant-admin/members`、`permissions`、`role-templates`、`audit-logs` | | 班级/学生/教师管理 | 可联调 | `/api/tenant-admin/classes`、`classes/members`、`students`、`teachers`,支持班级范围权限和审计 | -| 学生批量运营 | 可联调 | `/api/tenant-admin/students/bulk-upsert`、`students/status`、`classes/members/bulk-assign`、`students/notes`、`students/followups`、`students/followups/report`、`students/crm-push`;支持逐行结果、限量、防跨租户和教师范围校验;跟进报表支持 7/30/90 天或自定义日期范围、状态/类型/优先级/负责人/班级聚合、逾期待办、CRM 推送队列摘要和每日趋势;批量 CRM 推送会为学生生成跟进任务并写入异步 CRM 队列,要求 `crm:write`、`students:read`、`students:followups:write`;学生导入/upsert/分班禁止 `avatarUrl/avatar_url/avatar/headimgurl/figureurl` 和 `primaryRole/primary_role`,避免绕过预设头像与租户角色体系 | +| 学生批量运营 | 可联调 | `/api/tenant-admin/students/bulk-upsert`、`students/status`、`classes/members/bulk-assign`、`students/notes`、`students/followups`、`students/followups/report`、`students/supervision/preview`、`students/supervision/generate`、`students/crm-push`;支持逐行结果、限量、防跨租户和教师范围校验;跟进报表支持 7/30/90 天或自定义日期范围、状态/类型/优先级/负责人/班级聚合、逾期待办、CRM 推送队列摘要和每日趋势;学习督导由后端读取答题、错题、单词待复习和未完成练习数据,按阈值预览候选并幂等生成 `learning` 跟进任务,要求 `students:supervision:read/write`;批量 CRM 推送会为学生生成跟进任务并写入异步 CRM 队列,要求 `crm:write`、`students:read`、`students:followups:write`;学生导入/upsert/分班禁止 `avatarUrl/avatar_url/avatar/headimgurl/figureurl` 和 `primaryRole/primary_role`,避免绕过预设头像与租户角色体系 | | 用户站内通知查看 | 可联调 | `GET /api/tenant-admin/user-notifications`;需要 `notifications:read` 权限,支持按用户、状态、类型查询租户内通知和状态汇总,租户后台只读不直接代学生改状态 | | 平台租户/详情/账务资料/员工/审计/告警/套餐/订阅/账单/用量 | 可联调 | `/api/platform-admin/*`;已支持当前平台账号权限目录、平台员工列表、平台员工创建/编辑、平台员工禁用/恢复、租户列表、创建租户、租户详情、状态变更、账务资料维护、平台审计日志查询、CSV/JSON 审计导出、平台审计告警规则查询、告警列表、确认/解决/忽略、审计告警外部通知渠道和发送事件、SaaS 套餐、订阅、账单、订阅账单候选预览、dry-run、批量生成、自动计费 worker、重复开票保护、收款、逾期标记、内部催缴台账、催缴外部通知渠道和发送事件、用量;平台 API 已拆分 `platform:staff:read/write/status`、`platform:tenant:read/write/status/billing_profile`、`platform:billing:read/write/payment/dunning/notification`、`platform:audit:read/export/alert/notification`、`platform:question_bank:read/grant/ops` 等权限点;审计导出、平台员工操作、告警响应和通知事件都会对 `details`/payload 中的 token/secret/password/key 等敏感字段递归脱敏;`apps/worker --job platform-audit-alerts` 会把租户状态变更、账务资料变更、批量开票、逾期处理、手工收款确认、审计导出等高风险平台审计动作生成内部告警;`apps/worker --job platform-audit-notifications` 会按 `platform_audit_notification_channels` 把开放告警推送到 generic/钉钉/飞书/企微 webhook,签名密钥放 `app_private.platform_secrets` 且 API 不回显原文;`apps/worker --job platform-dunning-notifications` 会按 `platform_dunning_notification_channels` 把内部催缴记录推送到 generic/钉钉/飞书/企微 webhook,发送成功会推进提醒状态,失败会退避重试,联系方式和请求 payload 会脱敏;创建租户、平台员工变更、状态变更、账务资料维护、订阅批量开票、自动开票、逾期催缴、手工收款确认、审计导出、告警状态更新、通知渠道变更和催缴通知渠道变更会写入审计 | | 数据看板聚合接口 | 可联调 | `GET /api/tenant-admin/dashboard`;支持 `7d/30d/90d`、地区筛选、学生/学习/内容/订单/激活码/反馈卡片、趋势、24h 活跃、题型分布、科目排行、地区统计、套餐销量和运营动态 | diff --git a/docs/refactor/backend-progress.md b/docs/refactor/backend-progress.md index f2120606..8fb16b9b 100644 --- a/docs/refactor/backend-progress.md +++ b/docs/refactor/backend-progress.md @@ -22,7 +22,7 @@ - 平台后台租户运营第一版已补齐:`GET /api/platform-admin/tenants/detail` 返回租户、域名、订阅、账单、用量和账务资料;`PUT /api/platform-admin/tenants/billing-profile` 维护开票/联系/银行掩码资料;`GET /api/platform-admin/audit-logs` 支持按租户、动作、目标、操作者、日期和关键词查询平台审计;`GET /api/platform-admin/audit-logs/export` 支持平台管理员导出 CSV/JSON,返回 base64 内容、sha256、行数和筛选条件,并对 `details` 中的 token/secret/password/key 等敏感字段递归脱敏,同时写入 `platform.audit.exported` 审计;`GET /api/platform-admin/audit-alert-rules`、`GET /api/platform-admin/audit-alerts` 和 `POST /api/platform-admin/audit-alerts/status` 支持平台内部审计告警规则查询、开放告警查询、确认/解决/忽略,API 返回告警 details 时递归脱敏敏感字段;`apps/worker --job platform-audit-alerts` 会把租户状态变更、账务资料变更、批量开票、逾期处理、手工收款确认、审计导出等高风险平台审计动作生成内部告警;`GET/PUT /api/platform-admin/audit-notification-channels` 和 `GET /api/platform-admin/audit-notification-events` 已支持平台审计告警外部通知渠道配置和发送事件查询,`apps/worker --job platform-audit-notifications` 可按渠道把开放告警推送到 generic/钉钉/飞书/企微 webhook,签名密钥进入 `app_private.platform_secrets`,API 只回显 `secretRef` 和 webhook host/path;`GET /api/platform-admin/invoices/subscription-candidates` 和 `POST /api/platform-admin/invoices/from-subscriptions-batch` 支持订阅账单候选预览、dry-run、批量生成、重复开票跳过和平台审计;`apps/worker --job platform-billing` 可自动为即将到期且未开票订阅生成服务费账单;`POST /api/platform-admin/invoices/process-overdue`、`GET /api/platform-admin/invoices/reminders` 和 `apps/worker --job platform-dunning` 可处理已逾期未结清服务费账单,写入内部催缴台账和审计;`GET/PUT /api/platform-admin/dunning-notification-channels`、`GET /api/platform-admin/dunning-notification-events` 和 `apps/worker --job platform-dunning-notifications` 已支持平台催缴外部通知渠道配置、发送事件查询、重试和幂等发送。创建租户、状态变更、账务资料维护、订阅批量开票、自动计费、逾期催缴、手工收款确认、审计导出、审计告警状态更新、审计告警通知渠道变更和催缴通知渠道变更会写入审计日志,API/worker 集成测试已覆盖平台管理员可操作、学生越权拒绝、重复保护、非法输入拒绝、敏感字段脱敏和审计记录存在。 - 租户自定义角色模板已落库:`tenant_role_templates` 支持权限、菜单、模块、字段和数据范围配置,成员可通过 `role_template_id` 绑定模板。 - 班级与学生范围权限已落库:`tenant_classes`、`tenant_class_members` 支持教师/班主任/助教/学生分组,教师按负责班级查看学生,字段权限可脱敏学生手机号。 -- 学生运营管理已落库:`tenant_student_notes`、`tenant_student_followups` 支持学生备注、家校/班主任/销售跟进任务、可见性、指派、完成状态和审计;批量学生 upsert、批量分班、禁用/恢复、学生批量 CRM 推送和跟进效果统计已接入权限校验、范围校验和集成测试。`GET /api/tenant-admin/students/followups/report` 支持 7/30/90 天或自定义日期范围、负责人/类型/班级筛选、状态/类型/优先级/负责人/班级聚合、每日趋势、逾期待办和 CRM 队列摘要,并会沿用教师班级范围与字段脱敏规则。 +- 学生运营管理已落库:`tenant_student_notes`、`tenant_student_followups` 支持学生备注、家校/班主任/销售跟进任务、可见性、指派、完成状态和审计;批量学生 upsert、批量分班、禁用/恢复、学生批量 CRM 推送、跟进效果统计和学习督导自动化已接入权限校验、范围校验和集成测试。`GET /api/tenant-admin/students/followups/report` 支持 7/30/90 天或自定义日期范围、负责人/类型/班级筛选、状态/类型/优先级/负责人/班级聚合、每日趋势、逾期待办和 CRM 队列摘要,并会沿用教师班级范围与字段脱敏规则。`GET /api/tenant-admin/students/supervision/preview` 和 `POST /api/tenant-admin/students/supervision/generate` 支持按未学习、错题积压、低正确率、单词待复习和超期未完成练习生成风险候选,并用 `metadata.autoSupervision.idempotencyKey` 幂等生成 `learning` 跟进任务。 - 旧题库常用运营功能已补齐一批:`exam_dates` 支持学生端考试倒计时和租户后台维护;`reports/report_status_events` 支持学生题目反馈、租户后台状态流转和 7/30/90 天只读反馈运营报表;`user_score_events` 支持每日签到积分流水、租户配置化连续签到奖励和反馈奖励幂等;`badges/user_badges` 支持租户后台勋章维护、手动发放、重复发放幂等和学生个人中心展示;`user_notifications` 支持反馈处理、反馈奖励、勋章发放和积分兑换的学生站内通知;Taro 学生个人中心已接积分任务/兑换/积分明细和消息中心第一版,租户营销中心已接反馈运营摘要、积分任务/每日签到奖励/兑换操作台和用户通知查看第一版。 - 旧题库排行榜主链路已补齐但租户默认关闭:`GET /api/learning/leaderboard` 只有在 `feature_flags.enableLeaderboard=true` 时可用,支持刷题、积分、背单词、模考四类指标,支持全量/7 天/30 天周期,以及租户/地区/班级范围。 - `learning` 已接入商用访问控制:免费用户每日题量、SVIP 范围、SVIP-only 内容、答题 session 快照保护由后端强制执行。 @@ -220,6 +220,8 @@ PUT /api/tenant-admin/students/notes GET /api/tenant-admin/students/followups PUT /api/tenant-admin/students/followups GET /api/tenant-admin/students/followups/report +GET /api/tenant-admin/students/supervision/preview +POST /api/tenant-admin/students/supervision/generate POST /api/tenant-admin/students/crm-push GET /api/tenant-admin/teachers GET /api/tenant-admin/overview diff --git a/docs/refactor/frontend-handoff-index.md b/docs/refactor/frontend-handoff-index.md index 634e045d..445fe2b4 100644 --- a/docs/refactor/frontend-handoff-index.md +++ b/docs/refactor/frontend-handoff-index.md @@ -30,7 +30,7 @@ ## 当前可进入的前端工作 - `apps/taro` 已经建立,且学生端第一批 H5 页面已经可构建:登录、首页、地区选择、题库、练习、错题/收藏、练习报告、视频解析、会员收银台、订单详情、背单词、知识手册、分数线、资料、个人中心。 -- 租户后台第一批 H5 页面已经可构建:工作台、数据看板、学生/班级、题库内容、营销中心、财务运营、租户设置;工作台已接 `/api/tenant-admin/permissions` 做权限驱动模块入口;学生运营页已具备学生创建/更新、状态禁用/恢复、批量导入、批量分班、学生备注、跟进任务、跟进看板和 CRM 批量推送第一版;题库内容页已具备公共题库采纳/同步、同步通知、冲突查看、单条/批量采纳平台版本或保留本地版本、导入任务详情、异步轮询、导入问题查看、模板预览/下载、导入后复检详情、JSON/CSV/Excel 选择文件或粘贴内容、后端预览、字段别名覆盖和同步/异步执行导入的第一版操作能力;营销中心已具备 CRM 配置、CRM 队列查看、分佣规则、成员分佣比例、分佣订单、结算单生成/审核/标记打款、优惠券规则/核销报表、积分任务/兑换、积分风控只读摘要和用户通知查看第一版;财务运营页已具备退款申请/审核/供应商提交与查询、官方账单下载任务、对账批次/异常明细、差错工单处理、人工调整凭证提交/复核和异常订单运营台第一版;租户设置页已具备主题模板、草稿预览/发布、角色模板新建、编辑、停用、成员搜索/新建、成员绑定模板、成员状态和额外权限覆盖第一版。 +- 租户后台第一批 H5 页面已经可构建:工作台、数据看板、学生/班级、题库内容、营销中心、财务运营、租户设置;工作台已接 `/api/tenant-admin/permissions` 做权限驱动模块入口;学生运营页已具备学生创建/更新、状态禁用/恢复、批量导入、批量分班、学生备注、跟进任务、跟进看板、学习督导自动化和 CRM 批量推送第一版;题库内容页已具备公共题库采纳/同步、同步通知、冲突查看、单条/批量采纳平台版本或保留本地版本、导入任务详情、异步轮询、导入问题查看、模板预览/下载、导入后复检详情、JSON/CSV/Excel 选择文件或粘贴内容、后端预览、字段别名覆盖和同步/异步执行导入的第一版操作能力;营销中心已具备 CRM 配置、CRM 队列查看、分佣规则、成员分佣比例、分佣订单、结算单生成/审核/标记打款、优惠券规则/核销报表、积分任务/兑换、积分风控只读摘要和用户通知查看第一版;财务运营页已具备退款申请/审核/供应商提交与查询、官方账单下载任务、对账批次/异常明细、差错工单处理、人工调整凭证提交/复核和异常订单运营台第一版;租户设置页已具备主题模板、草稿预览/发布、角色模板新建、编辑、停用、成员搜索/新建、成员绑定模板、成员状态和额外权限覆盖第一版。 - 平台后台第一批 H5 页面已经可构建:工作台、租户管理、账务中心、公共题库授权、平台员工;启动时应先接 `GET /api/platform-admin/permissions` 获取 `effective` 权限用于菜单和按钮可见性;租户管理页已接租户详情、账务资料编辑和最近平台审计,平台员工页已接员工列表、搜索、创建/编辑、权限点勾选、禁用和恢复,工作台已展示最近平台审计摘要、支持导出最近平台审计 CSV,并可查看开放审计告警、确认或解决告警,也能查看审计告警外部通知渠道、催缴外部通知渠道和最近发送事件摘要;账务中心已接订阅账单候选预览、dry-run、批量生成、自动计费生成结果查看、逾期预览、内部催缴生成和催缴记录查看。 - 可以继续复刻旧题库学生端主要视觉和交互:勋章展示、小程序端分享/支付体验、背单词更细统计和更完整复盘体验。地区选择、刷题答题卡、后端权威断点续练、本地进度恢复、模拟倒计时、主观题后端自评、阅读理解/案例分析多小题、题干/选项/解析 RichContent 安全渲染、视频解析、题目反馈、模考/练习报告逐题复盘、错题复习、收藏复习、背单词卡片学习/发音/收藏练习、商城收银台、订单详情和售后入口已经有第一版页面。 - 可以按新后端主模型接入内容导航: @@ -95,13 +95,13 @@ | --- | --- | --- | | 工作台 | `apps/taro/src/pages/tenant-admin/workbench/index.tsx` | `tenant-admin/overview`、`tenant-admin/dashboard`、`tenant-admin/permissions` | | 数据看板 | `apps/taro/src/pages/tenant-admin/dashboard/index.tsx` | `tenant-admin/dashboard` | -| 学生运营 | `apps/taro/src/pages/tenant-admin/students/index.tsx` | `tenant-admin/classes`、`tenant-admin/teachers`、`tenant-admin/students`、`students/bulk-upsert`、`students/status`、`classes/members/bulk-assign`、`students/notes`、`students/followups`、`students/followups/report`、`students/crm-push` | +| 学生运营 | `apps/taro/src/pages/tenant-admin/students/index.tsx` | `tenant-admin/classes`、`tenant-admin/teachers`、`tenant-admin/students`、`students/bulk-upsert`、`students/status`、`classes/members/bulk-assign`、`students/notes`、`students/followups`、`students/followups/report`、`students/supervision/preview`、`students/supervision/generate`、`students/crm-push` | | 题库内容 | `apps/taro/src/pages/tenant-admin/content/index.tsx` | `tenant-content/content-entries`、`tenant-content/imports`、`imports/detail`、`imports/issues`、`imports/field-mapping`、`imports/templates`、`imports/post-check`、`tenant-content/exports/questions`、`tenant-content/exports/jobs`、`tenant-content/assets/sign-download`、`tenant-content/assets/sign-preview`、`tenant-content/assets/security-scan-events`、`tenant-content/public-question-banks`、`public-question-banks/adopt`、`public-question-banks/sync`、`public-question-banks/conflicts`、`public-question-banks/conflicts/resolve`、`public-question-banks/conflicts/resolve-batch`、`tenant-content/notifications`、`tenant-content/notifications/status` | | 营销中心 | `apps/taro/src/pages/tenant-admin/marketing/index.tsx` | `tenant-admin/coupons`、`code-batches`、`activation-codes`、`crm/config`、`crm/queue`、`commission/settings`、`member-rate`、`summary`、`orders`、`settlements`、`settlements/generate`、`settlements/status`、`tenant-admin/feedbacks/report`、`tenant-admin/point-activity-tasks`、`tenant-admin/point-activity-claims`、`tenant-admin/point-exchange-items`、`tenant-admin/point-exchange-orders`、`tenant-admin/points-risk-report`、`tenant-admin/user-notifications`;已接 CRM、分佣、优惠券规则/核销报表、反馈运营摘要、积分任务/兑换配置与记录查看、积分风控摘要、用户通知查看第一版 | | 财务运营 | `apps/taro/src/pages/tenant-admin/finance/index.tsx` | `commerce/refunds`、`commerce/refunds/status`、`commerce/operations/anomalies`、`commerce/reconciliation/batches`、`commerce/reconciliation/items`、`commerce/reconciliation/issues/create`、`commerce/reconciliation/issues`、`commerce/reconciliation/issues/status`、`commerce/reconciliation/provider-bills/request`、`commerce/reconciliation/provider-bills/jobs`、`commerce/adjustment-vouchers`、`commerce/adjustment-vouchers/status`、`commerce/adjustment-vouchers/report` | | 租户设置 | `apps/taro/src/pages/tenant-admin/settings/index.tsx` | `tenant-admin/overview`、`domains`、`payment-accounts`、`auth-providers`、`theme-templates`、`theme`、`theme/preview`、`theme/publish`、`permissions`、`GET/PUT role-templates`、`POST role-templates/disable`、`GET/PUT members`、`POST members/disable` | -当前租户后台已有第一批运营操作:工作台按权限矩阵隐藏不可见模块;学生运营页支持学生创建/更新、状态禁用/恢复、批量导入、批量分班、学生备注、跟进任务、完成跟进、跟进看板和 CRM 入队推送;题库内容页支持公共题库采纳/同步、同步通知查看与已读/忽略、同步冲突查看、单条/批量采纳平台版本或保留本地版本、导入任务详情、异步 job 轮询、导入问题查看、字段映射/模板预览/下载、JSON/CSV/Excel 导入预览和执行、字段别名覆盖和导入后复检详情,也可接 JSON/试卷 payload 同步导出与 PDF/Word 异步导出 job 轮询,完成后用 `assetId` 走后台资源签名下载/预览;营销中心支持 CRM 配置保存、队列按状态查看、分佣规则、成员分佣比例、分佣订单明细、结算单生成、审核通过/驳回、标记线下打款、优惠券规则/核销报表、反馈运营摘要、积分任务/兑换配置、领取/兑换记录查看、积分风控只读摘要和用户通知查看第一版;财务运营页支持退款状态流、官方账单任务、对账异常、差错工单和调整凭证,且只通过后端命令层写审计与状态;租户设置页支持主题模板选择、草稿预览、发布、角色模板创建、编辑、停用、权限点、菜单、模块、字段、基础数据范围配置、成员搜索/新建、成员绑定模板、成员状态和额外权限覆盖。下一批需要继续补更精细的学生导入模板体验、更细数据范围 UI、主题素材库、真实打款 provider、发票、真实生产账单抽样验收和小程序端兼容。 +当前租户后台已有第一批运营操作:工作台按权限矩阵隐藏不可见模块;学生运营页支持学生创建/更新、状态禁用/恢复、批量导入、批量分班、学生备注、跟进任务、完成跟进、跟进看板、学习督导候选预览/一键生成跟进任务和 CRM 入队推送;题库内容页支持公共题库采纳/同步、同步通知查看与已读/忽略、同步冲突查看、单条/批量采纳平台版本或保留本地版本、导入任务详情、异步 job 轮询、导入问题查看、字段映射/模板预览/下载、JSON/CSV/Excel 导入预览和执行、字段别名覆盖和导入后复检详情,也可接 JSON/试卷 payload 同步导出与 PDF/Word 异步导出 job 轮询,完成后用 `assetId` 走后台资源签名下载/预览;营销中心支持 CRM 配置保存、队列按状态查看、分佣规则、成员分佣比例、分佣订单明细、结算单生成、审核通过/驳回、标记线下打款、优惠券规则/核销报表、反馈运营摘要、积分任务/兑换配置、领取/兑换记录查看、积分风控只读摘要和用户通知查看第一版;财务运营页支持退款状态流、官方账单任务、对账异常、差错工单和调整凭证,且只通过后端命令层写审计与状态;租户设置页支持主题模板选择、草稿预览、发布、角色模板创建、编辑、停用、权限点、菜单、模块、字段、基础数据范围配置、成员搜索/新建、成员绑定模板、成员状态和额外权限覆盖。下一批需要继续补更精细的学生导入模板体验、更细数据范围 UI、主题素材库、真实打款 provider、发票、真实生产账单抽样验收和小程序端兼容。 ## 已落地的 Taro 平台后台页面 diff --git a/docs/refactor/legacy-feature-gap-matrix.md b/docs/refactor/legacy-feature-gap-matrix.md index 89811495..f403b058 100644 --- a/docs/refactor/legacy-feature-gap-matrix.md +++ b/docs/refactor/legacy-feature-gap-matrix.md @@ -42,7 +42,7 @@ | 旧功能/组件 | 新后端状态 | 待补齐 | | --- | --- | --- | -| 用户管理 | 已覆盖 | 租户成员、学生列表、学生资料、批量学生 upsert、禁用/恢复、批量分班、学生备注、跟进任务、跟进效果统计和批量 CRM 推送已实现;后续补学习督导自动化、更细导入模板体验和更细数据范围 UI | +| 用户管理 | 已覆盖 | 租户成员、学生列表、学生资料、批量学生 upsert、禁用/恢复、批量分班、学生备注、跟进任务、跟进效果统计、学习督导自动化预览/生成和批量 CRM 推送已实现;后续补更细导入模板体验、更细数据范围 UI 和运营策略配置 | | 销售/代理管理 | 部分覆盖 | referral/team/stats 已有;分佣设置、订单/激活码归因、结算单生成、审核、打款状态、CSV/JSON 导出、打款凭证登记/复核和本人/全局权限范围已覆盖;还缺真实打款 provider、发票、批量凭证上传和分佣看板 | | 班级/教师管理 | 已覆盖 | 班级、班级成员、教师/班主任/助教/学生范围权限已有;可视化 UI 和更细数据范围组合待补 | | 数据看板 | 部分覆盖 | 租户 dashboard 聚合 API 已覆盖收益、注册、答题、活跃、题型、科目、题量、套餐销量、运营动态、24h 活跃和激活码使用;后续补预聚合 worker、销售转化和分佣结算看板 | @@ -127,6 +127,6 @@ ### P2:增强体验 1. 素材库、更多主题模板和可视化细节编辑。 -2. 班级、教师、学生分组和学习督导。 +2. 班级、教师、学生分组的更细数据范围 UI 和学习督导策略配置。 3. AI 择校推荐和 PDF 报告。 4. 题库导出模板精排、多模板排版和运营操作台。 diff --git a/docs/refactor/next-development-todo.md b/docs/refactor/next-development-todo.md index 4555ef27..d5add053 100644 --- a/docs/refactor/next-development-todo.md +++ b/docs/refactor/next-development-todo.md @@ -20,7 +20,7 @@ - 内容导入:题目、单词、知识手册、分数线、视频 JSON/CSV/Excel 预览、校验、导入、幂等、审计。 - 内容导出:题库 JSON、`paper_json`、打印 payload 导出基础已完成,支持集合/入口/分类范围、导出 job、审计、跨租户拒绝、答案/解析开关和复合题子题脱敏。 - 租户组织范围:班级、班级成员、教师/班主任/助教/学生分组,教师按负责班级查看学生,字段权限可脱敏学生手机号。 -- 学生运营管理:学生批量 upsert、禁用/恢复、批量分班、备注、跟进任务、跟进效果统计、批量 CRM 推送已完成接口和集成测试;学生写入口已拒绝头像 URL、第三方头像字段和 `primaryRole`,学生头像统一走男女预设;Taro 租户学生运营页已接学生创建/更新、状态切换、批量导入、批量分班、备注、跟进任务、跟进看板和 CRM 推送第一版;后续补自动学习督导和更细导入模板体验。 +- 学生运营管理:学生批量 upsert、禁用/恢复、批量分班、备注、跟进任务、跟进效果统计、学习督导自动化、批量 CRM 推送已完成接口和集成测试;学生写入口已拒绝头像 URL、第三方头像字段和 `primaryRole`,学生头像统一走男女预设;Taro 租户学生运营页已接学生创建/更新、状态切换、批量导入、批量分班、备注、跟进任务、跟进看板、学习督导预览/生成和 CRM 推送第一版;后续补督导规则模板、周期任务、触达联动和更细导入模板体验。 - 旧题库运营缺口已补一批:考试日期/倒计时、题目反馈/纠错处理、反馈运营聚合报表、每日签到积分和积分流水、学习排行榜已完成接口和集成测试但租户默认关闭。 - 勋章管理已完成租户后台维护、手动发放、重复发放幂等、学生个人中心展示、权限点和集成测试;签到连续天数、积分阈值、反馈解决、积分活动任务、练习次数、单词掌握和模考成绩自动发放已完成并纳入 API 集成测试;自动/手动发放会写入用户站内通知。学生激励以后台配置勋章自动发放为主,不默认启用排行榜竞争。后续补更细活动效果看板和更细前端运营配置体验。 - 积分活动和兑换第一阶段已完成:租户后台可配置积分任务/兑换商品并查看领取/兑换记录,学生端可查询任务、领取奖励、查看兑换商品、兑换并生成 `redeem_cost` 积分流水;优惠券兑换会生成 `coupon_redemptions`,手工/自定义商品进入待履约订单;兑换完成或待履约会写入用户站内通知;Taro 学生个人中心已接积分任务、兑换商品和积分明细第一版,租户营销中心已接积分任务/兑换操作台、反馈运营摘要和积分风控只读摘要第一版。后续补更细活动效果看板。 @@ -160,8 +160,9 @@ 12. 学生运营管理 - 已完成学生列表、学生资料维护、班级分组、教师范围可见、学生批量导入、禁用/恢复、批量分班、学生备注、跟进任务、跟进效果统计和批量 CRM 推送;学生写入口拒绝头像 URL、第三方头像字段和 `primaryRole`,避免绕过预设头像与租户角色体系。 - - 已完成 Taro 学生运营页第一版:学生创建/更新、状态禁用/恢复、批量导入、批量分班、备注、跟进任务、完成跟进、跟进看板和 CRM 入队推送。 - - 继续补学习督导自动化和更细导入模板体验。 + - 已完成学习督导自动化第一版:后端按未学习、错题积压、低正确率、单词待复习和超期未完成练习预览风险学生,并幂等生成 `learning` 跟进任务;教师账号沿用班级范围,手机号按字段权限脱敏,生成动作写审计。 + - 已完成 Taro 学生运营页第一版:学生创建/更新、状态禁用/恢复、批量导入、批量分班、备注、跟进任务、完成跟进、跟进看板、学习督导候选预览/生成和 CRM 入队推送。 + - 继续补督导规则模板、定时自动生成、和 CRM/站内通知/企微/飞书/钉钉的触达联动、督导效果归因,以及更细导入模板体验。 13. AI 择校推荐 - 已完成 `ai_recommendation_reports` 报告台账、SVIP 门禁、学生输入 schema、地区/分数线上下文、`local_rules` 稳定 JSON 输出、报告列表/详情接口和 Taro 学生端基础页。 @@ -201,7 +202,7 @@ - 旧原生小程序前端位于 `F:\project\参考\旧题库小程序前端文件`,后续 Taro 小程序/H5 交互补齐时只作为交互、页面状态和微信平台能力参考,不继承旧直连 PocketBase 或旧鉴权逻辑。 - 租户通过域名、小程序配置或启动参数解析。 - 页面主题、品牌、功能开关都从后端租户配置读取;学生端和后台只消费 `/api/tenant/resolve` 的已发布 `branding.theme/publicAssets`,租户后台草稿只通过 `/api/tenant-admin/theme` 查看。 -- 当前已完成 H5 学生端、租户后台、平台后台三套构建入口和统一 API client;学生端、租户后台、平台后台都有第一批真实 API 页面;学生端已补地区选择、刷题答题卡、后端权威断点续练、本地进度恢复、模拟倒计时、主观题后端自评、阅读理解/案例分析多小题、错题/收藏复习、题目反馈、视频解析、练习/模考报告、个人中心学习报告可视化、会员收银台、订单详情、售后入口、站内消息中心第一版、积分任务/兑换/积分明细第一版、预设头像契约、题干/选项/解析/知识手册 RichContent 安全渲染、H5 KaTeX 公式渲染、私有资源 ID 题图短签名渲染、逐题复盘、背单词卡片学习/发音/收藏练习第一版;平台后台已接入创建租户、租户详情、状态变更、账务资料维护、平台员工列表/创建/编辑/禁用恢复、平台审计查询/CSV 导出、开放审计告警展示/确认/解决、审计告警外部通知渠道/事件状态摘要、催缴外部通知渠道/事件摘要、订阅、订阅账单候选/dry-run/批量生成、自动计费生成结果查看、收款、用量和公共题库授权第一版写操作;租户后台已接权限驱动工作台、学生运营操作台、主题模板预览/发布、角色模板、成员绑定、CRM/分佣操作台、积分任务/兑换操作台和用户通知查看第一版;下一步补预设头像 UI、小程序公式真机验收、题图资源字段化、独立消息中心增强、状态管理、更细数据范围 UI、学生批量运营增强和小程序兼容验证。 +- 当前已完成 H5 学生端、租户后台、平台后台三套构建入口和统一 API client;学生端、租户后台、平台后台都有第一批真实 API 页面;学生端已补地区选择、刷题答题卡、后端权威断点续练、本地进度恢复、模拟倒计时、主观题后端自评、阅读理解/案例分析多小题、错题/收藏复习、题目反馈、视频解析、练习/模考报告、个人中心学习报告可视化、会员收银台、订单详情、售后入口、站内消息中心第一版、积分任务/兑换/积分明细第一版、预设头像契约、题干/选项/解析/知识手册 RichContent 安全渲染、H5 KaTeX 公式渲染、私有资源 ID 题图短签名渲染、逐题复盘、背单词卡片学习/发音/收藏练习第一版;平台后台已接入创建租户、租户详情、状态变更、账务资料维护、平台员工列表/创建/编辑/禁用恢复、平台审计查询/CSV 导出、开放审计告警展示/确认/解决、审计告警外部通知渠道/事件状态摘要、催缴外部通知渠道/事件摘要、订阅、订阅账单候选/dry-run/批量生成、自动计费生成结果查看、收款、用量和公共题库授权第一版写操作;租户后台已接权限驱动工作台、学生运营操作台、学习督导自动化、主题模板预览/发布、角色模板、成员绑定、CRM/分佣操作台、积分任务/兑换操作台和用户通知查看第一版;下一步补预设头像 UI、小程序公式真机验收、题图资源字段化、独立消息中心增强、状态管理、更细数据范围 UI、督导策略配置和小程序兼容验证。 ### 第一批页面 diff --git a/docs/refactor/taro-frontend-integration.md b/docs/refactor/taro-frontend-integration.md index 2f77d6ed..754bb75f 100644 --- a/docs/refactor/taro-frontend-integration.md +++ b/docs/refactor/taro-frontend-integration.md @@ -276,6 +276,7 @@ tenant::theme | 学生备注 | `GET/PUT /api/tenant-admin/students/notes` | | 学生跟进任务 | `GET/PUT /api/tenant-admin/students/followups` | | 学生跟进看板 | `GET /api/tenant-admin/students/followups/report?timeRange=30d&classId=...` | +| 学习督导自动化 | `GET /api/tenant-admin/students/supervision/preview?classId=...`、`POST /api/tenant-admin/students/supervision/generate` | | 租户教师 | `GET /api/tenant-admin/teachers` | | 租户考试日期 | `GET/PUT /api/tenant-admin/exam-dates` | | 租户反馈处理 | `GET /api/tenant-admin/feedbacks`、`GET /api/tenant-admin/feedbacks/report`、`POST /api/tenant-admin/feedbacks/status`、`GET /api/tenant-admin/feedbacks/events` | @@ -1480,6 +1481,7 @@ content_entries - 学生批量导入和批量分班接口会返回 `total/successCount/errorCount/results`,前端必须展示逐行错误,不要在浏览器端静默丢弃失败行。学生导入模板不要提供头像 URL 或 `primaryRole` 字段;后端会拒绝这类字段,学生头像统一由个人中心 `avatarPreset` 控制。 - 学生批量 CRM 推送统一调用 `POST /api/tenant-admin/students/crm-push`,请求包含 `studentUserIds/title/message/followupType/priority/assignedToUserId/classId/dueAt/idempotencyKey`。前端不要直接写 `crm_webhook_queue`,也不要持有 webhook 密钥;后端会校验 `crm:write`、学生范围、班级范围、指派人租户成员和幂等键,并返回逐行 `queueId/followupId/errors`。 - 学生跟进看板统一调用 `GET /api/tenant-admin/students/followups/report`,不要由前端直接读取 `tenant_student_followups` 或 `crm_webhook_queue` 后自行聚合。该接口支持 `timeRange=7d|30d|90d` 或 `startDate/endDate`、`assignedToUserId`、`followupType`、`classId` 和 `limit`,返回 `summary/crmQueue/byStatus/byType/byPriority/byAssignee/byClass/dailyTrend/overdueItems`;后端会沿用当前账号的租户权限、教师班级范围和手机号脱敏规则。 +- 学习督导自动化统一走后端 `preview -> generate`:先调用 `GET /api/tenant-admin/students/supervision/preview` 预览候选学生和风险原因,再调用 `POST /api/tenant-admin/students/supervision/generate` 幂等生成 `learning` 跟进任务。前端不要直接读取 `answer_records`、`wrong_questions`、`user_word_progress`、`practice_sessions` 或 `tenant_student_followups.metadata` 自行计算风险;后端会统一执行 `students:supervision:read/write` 权限、教师班级范围、学生手机号字段脱敏和审计。 - 教师可以为范围内学生创建备注和跟进任务,但是否能禁用学生、批量导入、查看手机号由后端权限和字段权限决定;前端只按返回值渲染。 - H5 自定义域名下要注意缓存隔离,不能把 A 租户主题缓存用到 B 租户。 @@ -3145,7 +3147,7 @@ GET /api/ai/school-recommendations/detail?reportId= - 品牌/主题/域名/公开设置 - 支付账户/登录 provider/密钥引用 - 用户与成员权限 -- 班级/教师/学生:`/api/tenant-admin/classes`、`classes/members`、`students`、`teachers`、`students/notes`、`students/followups`、`students/followups/report`、`students/crm-push` +- 班级/教师/学生:`/api/tenant-admin/classes`、`classes/members`、`students`、`teachers`、`students/notes`、`students/followups`、`students/followups/report`、`students/supervision/preview`、`students/supervision/generate`、`students/crm-push` - 角色模板与成员:`GET/PUT /api/tenant-admin/role-templates`、`POST /api/tenant-admin/role-templates/disable`、`GET/PUT /api/tenant-admin/members`、`POST /api/tenant-admin/members/disable`;当前 Taro 租户设置页已提供第一版创建、编辑、停用、权限点、菜单、模块、字段、基础数据范围、成员绑定模板和成员状态配置。 - 主题模板:`GET /api/tenant-admin/theme-templates`、`GET /api/tenant-admin/theme`、`POST /api/tenant-admin/theme/preview`、`POST /api/tenant-admin/theme/publish`;当前 Taro 租户设置页已提供第一版模板选择、主色/强调色、Logo/分享图、安全草稿预览和发布。 - 内容入口/分类树/题目集合/练习蓝图 diff --git a/scripts/api-integration-test.js b/scripts/api-integration-test.js index 1d60e7b8..0ddc7c12 100644 --- a/scripts/api-integration-test.js +++ b/scripts/api-integration-test.js @@ -9356,6 +9356,96 @@ async function testTenantStudentOperations() { 'teacher follow-up report must not expose unscoped students', ); + const supervisionPreview = await request('/api/tenant-admin/students/supervision/preview', { + userId: TENANT_TEACHER_USER_ID, + query: { + classId: ids.tenantClass, + inactivityDays: 1, + wrongQuestionThreshold: 1, + minAnswers: 1, + lowAccuracyThreshold: 0.99, + vocabularyDueThreshold: 1, + limit: 20, + }, + }); + assert.equal(supervisionPreview.item?.filters?.scoped, true, 'teacher supervision preview should be scoped'); + assert.ok( + supervisionPreview.item?.candidates?.some(item => item.studentUserId === USER_ID), + 'supervision preview should include scoped risky student', + ); + assert.ok( + !supervisionPreview.item?.candidates?.some(item => item.studentUserId === SECOND_STUDENT_USER_ID), + 'supervision preview must not expose unscoped student', + ); + const supervisionCandidate = supervisionPreview.item?.candidates?.find(item => item.studentUserId === USER_ID); + assert.ok( + supervisionCandidate?.reasons?.some(item => ['wrong_backlog', 'low_accuracy', 'vocabulary_due', 'stale_session', 'inactive'].includes(item.code)), + 'supervision candidate should include rule-based reasons', + ); + + const generatedSupervision = await request('/api/tenant-admin/students/supervision/generate', { + userId: TENANT_TEACHER_USER_ID, + method: 'POST', + body: { + classId: ids.tenantClass, + studentUserIds: [USER_ID], + batchKey: 'integration-supervision-teacher', + rules: { + inactivityDays: 1, + wrongQuestionThreshold: 1, + minAnswers: 1, + lowAccuracyThreshold: 0.99, + vocabularyDueThreshold: 1, + }, + limit: 5, + }, + }); + assert.equal(generatedSupervision.successCount, 1, 'supervision generation should create follow-up for scoped student'); + assert.equal(generatedSupervision.items?.[0]?.studentUserId, USER_ID, 'supervision generation should target requested student'); + + const repeatedSupervision = await request('/api/tenant-admin/students/supervision/generate', { + userId: TENANT_TEACHER_USER_ID, + method: 'POST', + body: { + classId: ids.tenantClass, + studentUserIds: [USER_ID], + batchKey: 'integration-supervision-teacher', + rules: { + inactivityDays: 1, + wrongQuestionThreshold: 1, + minAnswers: 1, + lowAccuracyThreshold: 0.99, + vocabularyDueThreshold: 1, + }, + limit: 5, + }, + }); + assert.equal( + repeatedSupervision.items?.[0]?.followupId, + generatedSupervision.items?.[0]?.followupId, + 'supervision generation should be idempotent for the same batch and student', + ); + + const teacherOtherSupervisionDenied = await request('/api/tenant-admin/students/supervision/generate', { + userId: TENANT_TEACHER_USER_ID, + method: 'POST', + body: { + classId: ids.tenantClassOther, + studentUserIds: [SECOND_STUDENT_USER_ID], + batchKey: 'integration-supervision-denied', + rules: { inactivityDays: 1 }, + }, + expectStatus: 403, + }); + assert.equal(teacherOtherSupervisionDenied.code, 'CLASS_SCOPE_REQUIRED', 'teacher supervision generation must reject unscoped class'); + + const operatorSupervisionDenied = await request('/api/tenant-admin/students/supervision/preview', { + userId: TENANT_OPERATOR_USER_ID, + query: { limit: 5 }, + expectStatus: 403, + }); + assert.equal(operatorSupervisionDenied.code, 'TENANT_PERMISSION_REQUIRED', 'operator without supervision permission should be denied'); + const teacherOtherFollowupDenied = await request('/api/tenant-admin/students/followups', { userId: TENANT_TEACHER_USER_ID, method: 'PUT', @@ -9413,6 +9503,7 @@ async function testTenantStudentOperations() { assert.ok(auditLogs.items?.some(item => item.action === 'tenant.student.status_updated'), 'audit logs should include student status update'); assert.ok(auditLogs.items?.some(item => item.action === 'tenant.student_note.upserted'), 'audit logs should include student note upsert'); assert.ok(auditLogs.items?.some(item => item.action === 'tenant.student_followup.upserted'), 'audit logs should include student follow-up upsert'); + assert.ok(auditLogs.items?.some(item => item.action === 'tenant.students.supervision_generated'), 'audit logs should include supervision generation'); } async function testReferralAndCrmGrowth() { diff --git a/supabase/migrations/202606300013_student_supervision_followups.sql b/supabase/migrations/202606300013_student_supervision_followups.sql new file mode 100644 index 00000000..59ec1dec --- /dev/null +++ b/supabase/migrations/202606300013_student_supervision_followups.sql @@ -0,0 +1,13 @@ +create unique index if not exists idx_student_followups_auto_supervision_key + on public.tenant_student_followups(tenant_id, (metadata->'autoSupervision'->>'idempotencyKey')) + where metadata->'autoSupervision'->>'idempotencyKey' is not null; + +create index if not exists idx_student_followups_auto_supervision + on public.tenant_student_followups(tenant_id, student_user_id, created_at desc) + where metadata->'autoSupervision' is not null; + +create index if not exists idx_answer_records_tenant_user_answered + on public.answer_records(tenant_id, user_id, answered_at desc); + +create index if not exists idx_practice_reports_tenant_user_submitted + on public.practice_session_reports(tenant_id, user_id, submitted_at desc);