feat: add student supervision automation

README.md

@@ -12,7 +12,7 @@
 
 - Supabase/PostgreSQL 多租户数据库 schema、RLS、索引、触发器。
 - `apps/api` 独立业务 API，后续供 H5、Taro 小程序、管理后台统一调用；已支持 Supabase Auth JWT 和迁移期 `tk_` session 双入口。
-- 租户后台能力：品牌、主题模板/草稿/发布、域名、公开设置、支付账户、登录配置、私密密钥掩码、活动内容、考试日期、题目反馈处理、用户站内通知查看、激活码、优惠券规则/核销报表、勋章管理/手动发放/签到积分反馈自动发放、成员权限、自定义角色模板、班级/教师/学生范围权限、学生批量导入、批量分班、学生备注、跟进任务、跟进效果统计、学生批量 CRM 推送、审计日志。
+- 租户后台能力：品牌、主题模板/草稿/发布、域名、公开设置、支付账户、登录配置、私密密钥掩码、活动内容、考试日期、题目反馈处理、用户站内通知查看、激活码、优惠券规则/核销报表、勋章管理/手动发放/签到积分反馈自动发放、成员权限、自定义角色模板、班级/教师/学生范围权限、学生批量导入、批量分班、学生备注、跟进任务、跟进效果统计、学习督导自动化预览/生成、学生批量 CRM 推送、审计日志。
 - 租户内容能力：可配置题库入口、任意深度分类树、考试意向标记、题目集合、顺序/随机/全真模拟蓝图、题目录入/更新、视频绑定、分数线、单词、知识手册、资料资源台账、题目/单词/知识手册/分数线/视频 JSON/CSV/Excel 批量导入。
 - 学生端能力：题库入口、分类树、题目集合、顺序/随机/模考 session 组卷快照、答题、错题本、收藏夹、背单词卡片学习/发音/收藏练习、个人中心、男女默认预设头像、站内通知、勋章、考试倒计时、签到积分、积分活动任务、积分兑换、题目反馈、排行榜接口（租户默认关闭）、分数线、AI 择校推荐、题目视频、订单详情/状态轮询、优惠券领取/抵扣、权益、激活码预检查/兑换、资料下载；签到、积分阈值、反馈解决和积分活动可返回自动获得勋章结果，反馈处理/奖励、勋章发放和积分兑换会写入用户站内通知。学生头像不支持上传或第三方头像落库，学生激励默认以勋章自动发放为主，不默认启用排行榜。
 - 平台后台能力：租户管理、租户详情、账务资料维护、平台员工创建/授权/启停、平台细粒度权限点、平台审计日志查询和 CSV/JSON 导出、平台审计告警规则/开放告警查询/确认/解决、平台审计告警外部通知渠道和发送事件、SaaS 套餐、订阅、订阅账单候选预览/dry-run/批量生成、自动计费 worker、账单、服务费收款、逾期标记、内部催缴台账、平台催缴外部通知渠道和发送事件、用量记录、公共题库授权。
@@ -35,7 +35,7 @@
 - 题库导出已完成服务端结构化 payload、PDF/Word 二进制 worker、每日一练基础导出和每日一练 ZIP 图片素材包；后续还要补更精细试卷模板、多模板排版和导出操作台体验。
 - 优惠券复杂规则和核销报表已可联调，包含状态启停、活动分组、最低订单金额、优惠封顶、单用户限次、首单限制、适用套餐/地区、核销明细和活动报表；Taro 租户营销中心已接优惠券规则表单、筛选、核销明细和报表第一版。
 - 勋章管理、手动发放、签到连续天数、积分阈值、反馈解决、积分活动任务、练习次数、单词掌握和模考成绩系统触发勋章已可联调；积分活动任务、积分兑换商品、兑换订单、优惠券兑换履约、租户后台配置和用户站内通知第一版已完成，Taro 学生个人中心已接积分任务/兑换/积分明细和消息中心第一版，租户营销中心已接积分任务/兑换操作台和用户通知查看第一版。学生激励默认以后台配置勋章自动发放为主，排行榜默认不开启也不在学生端默认请求。后续还要补更细活动效果看板、外部微信订阅消息/短信推送、分佣真实打款 provider、发票、批量凭证上传、CRM 富卡片模板、失败告警、死信运营台、销售转化看板、公共题库版本通知和冲突处理操作台。
-- `apps/taro` 已建立 Taro 4 React 跨端前端地基，包含 H5 学生端、租户后台、平台后台三套构建入口、租户解析、统一 API client 和 Supabase Auth client 初始化；学生端第一批页面已接入登录、首页、题库、练习、背单词、知识手册、分数线、AI 择校推荐、资料和个人中心，已新增 `RichContent` 安全渲染组件用于题干、选项、解析、知识手册和逐题复盘，H5 端已用 KaTeX 渲染 `$...$`、`$$...$$`、`\(...\)`、`\[...\]` 公式，私有题图可用 `asset:<uuid>`/`content_asset:<uuid>` 资源引用走短期预览签名，已升级背单词为今日计划/单元学习/收藏练习、卡片翻转、发音、美/英音切换和本地位置恢复第一版，资料页已补齐预览/下载的短签名、水印 traceId 和强制水印容器第一版，个人中心已接学习报告、14 天趋势、题型表现、最近练习、积分任务/兑换/积分明细和消息中心第一版；学生端不默认请求排行榜，仅在租户显式开启 `enableLeaderboard` 并完成压测后进入独立排行榜页或活动页；租户后台第一批页面已接入工作台、数据看板、学生/班级、题库内容、营销中心、财务运营和租户设置，学生运营页已接跟进看板和批量 CRM 推送第一版，营销中心已接 CRM、分佣结算、优惠券规则/核销报表、积分任务/兑换操作台和用户通知查看第一版，财务运营已接退款状态机、官方账单任务、对账异常、差错工单和调整凭证第一版，设置页已接主题模板、草稿预览/发布、角色模板和成员绑定第一版；平台后台已接入工作台、租户管理、账务中心、公共题库授权、平台员工管理，以及创建租户、租户详情、状态变更、账务资料维护、平台员工创建/编辑/禁用恢复、权限点勾选、平台审计查询/CSV 导出、开放审计告警确认/解决、审计告警外部通知渠道/事件状态摘要、订阅、订阅账单候选/dry-run/批量生成、自动计费 worker 生成结果查看、收款、逾期预览/催缴记录、催缴外部通知渠道/事件摘要、用量和题库授权第一版写操作。
+- `apps/taro` 已建立 Taro 4 React 跨端前端地基，包含 H5 学生端、租户后台、平台后台三套构建入口、租户解析、统一 API client 和 Supabase Auth client 初始化；学生端第一批页面已接入登录、首页、题库、练习、背单词、知识手册、分数线、AI 择校推荐、资料和个人中心，已新增 `RichContent` 安全渲染组件用于题干、选项、解析、知识手册和逐题复盘，H5 端已用 KaTeX 渲染 `$...$`、`$$...$$`、`\(...\)`、`\[...\]` 公式，私有题图可用 `asset:<uuid>`/`content_asset:<uuid>` 资源引用走短期预览签名，已升级背单词为今日计划/单元学习/收藏练习、卡片翻转、发音、美/英音切换和本地位置恢复第一版，资料页已补齐预览/下载的短签名、水印 traceId 和强制水印容器第一版，个人中心已接学习报告、14 天趋势、题型表现、最近练习、积分任务/兑换/积分明细和消息中心第一版；学生端不默认请求排行榜，仅在租户显式开启 `enableLeaderboard` 并完成压测后进入独立排行榜页或活动页；租户后台第一批页面已接入工作台、数据看板、学生/班级、题库内容、营销中心、财务运营和租户设置，学生运营页已接跟进看板、学习督导自动化和批量 CRM 推送第一版，营销中心已接 CRM、分佣结算、优惠券规则/核销报表、积分任务/兑换操作台和用户通知查看第一版，财务运营已接退款状态机、官方账单任务、对账异常、差错工单和调整凭证第一版，设置页已接主题模板、草稿预览/发布、角色模板和成员绑定第一版；平台后台已接入工作台、租户管理、账务中心、公共题库授权、平台员工管理，以及创建租户、租户详情、状态变更、账务资料维护、平台员工创建/编辑/禁用恢复、权限点勾选、平台审计查询/CSV 导出、开放审计告警确认/解决、审计告警外部通知渠道/事件状态摘要、订阅、订阅账单候选/dry-run/批量生成、自动计费 worker 生成结果查看、收款、逾期预览/催缴记录、催缴外部通知渠道/事件摘要、用量和题库授权第一版写操作。
 - 根目录已清理为新 Supabase SaaS monorepo 编排层；旧 PocketBase/React 项目和旧构建产物仅保留在 `参考/` 目录作为迁移参考，不进入 Git 提交。
 
 更完整的进度看这些文档：

apps/api/src/features/tenant-admin/auth.ts

@@ -14,7 +14,7 @@ const ROLE_PERMISSION_DEFAULTS: Record<string, string[]> = {
   tenant_owner: ['*'],
   tenant_admin: ['*'],
   tenant_operator: ['dashboard:read', 'content:*', 'marketing:*', 'badges:*', 'notifications:read', 'codes:read', 'coupons:read', 'referral:read', 'commission:read', 'crm:read'],
-  teacher: ['content:*', 'classes:read', 'students:read', 'students:notes:*', 'students:followups:*'],
+  teacher: ['content:*', 'classes:read', 'students:read', 'students:notes:*', 'students:followups:*', 'students:supervision:*'],
   sales: ['codes:*', 'coupons:read', 'coupons:write', 'referral:*', 'commission:self'],
   agent: ['codes:read', 'coupons:read', 'referral:self', 'commission:self'],
   student: [],
@@ -136,6 +136,8 @@ export function tenantPermissionCatalog() {
       { key: 'students:notes:write', label: '学生备注管理' },
       { key: 'students:followups:read', label: '学生跟进任务查看' },
       { key: 'students:followups:write', label: '学生跟进任务管理' },
+      { key: 'students:supervision:read', label: '学习督导预览' },
+      { key: 'students:supervision:write', label: '学习督导生成' },
       { key: 'members:read', label: '成员查看' },
       { key: 'members:write', label: '成员管理' },
       { key: 'roles:read', label: '角色模板查看' },

apps/api/src/features/tenant-admin/classes.ts

@@ -25,12 +25,23 @@ const FOLLOWUP_REPORT_RANGES: Record<string, number> = { '7d': 7, '30d': 30, '90
 const MAX_BULK_STUDENTS = 200;
 const MAX_BULK_CLASS_ASSIGNMENTS = 500;
 const MAX_BULK_CRM_PUSH = 100;
+const MAX_SUPERVISION_GENERATE = 100;
 const CRM_ASSIGNABLE_ROLES = ['tenant_owner', 'tenant_admin', 'tenant_operator', 'teacher', 'sales', 'agent'];
 const STUDENT_AVATAR_FIELD_KEYS = ['avatarUrl', 'avatar_url', 'avatar', 'headimgurl', 'headImgUrl', 'figureurl', 'figureurl_qq_1', 'figureurl_qq_2'];
 const STUDENT_PRIMARY_ROLE_FIELD_KEYS = ['primaryRole', 'primary_role'];
 const UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 const DATE_KEY_PATTERN = /^\d{4}-\d{2}-\d{2}$/;
 
+const SUPERVISION_RULE_DEFAULTS = {
+  windowDays: 14,
+  inactivityDays: 7,
+  minAnswers: 10,
+  lowAccuracyThreshold: 0.6,
+  wrongQuestionThreshold: 5,
+  vocabularyDueThreshold: 20,
+  staleSessionDays: 3,
+};
+
 const shanghaiDateFormatter = new Intl.DateTimeFormat('en-US', {
   timeZone: 'Asia/Shanghai',
   year: 'numeric',
@@ -94,11 +105,21 @@ function intValue(value: unknown, fallback: number) {
   return Number.isFinite(numberValue) ? Math.trunc(numberValue) : fallback;
 }
 
+function boundedIntValue(value: unknown, fallback: number, min: number, max: number) {
+  const parsed = intValue(value, fallback);
+  return Math.max(min, Math.min(max, parsed));
+}
+
 function numberValue(value: unknown, fallback = 0) {
   const parsed = Number(value ?? fallback);
   return Number.isFinite(parsed) ? parsed : fallback;
 }
 
+function boundedNumberValue(value: unknown, fallback: number, min: number, max: number) {
+  const parsed = numberValue(value, fallback);
+  return Math.max(min, Math.min(max, parsed));
+}
+
 function ratio(numerator: number, denominator: number) {
   if (denominator <= 0) return 0;
   return Number((numerator / denominator).toFixed(4));
@@ -181,6 +202,10 @@ function isValidShanghaiDateKey(dateKey: string) {
   return Number.isFinite(date.getTime()) && shanghaiDateKey(date) === dateKey;
 }
 
+function shanghaiTodayKey() {
+  return shanghaiDateKey(new Date());
+}
+
 function daysBetweenInclusive(startDate: string, endDate: string) {
   const start = Date.parse(`${startDate}T00:00:00+08:00`);
   const end = Date.parse(`${endDate}T00:00:00+08:00`);
@@ -221,6 +246,48 @@ function parseFollowupReportRange(timeRangeValue: string, startDateValue: string
   };
 }
 
+interface SupervisionRuleConfig {
+  windowDays: number;
+  inactivityDays: number;
+  minAnswers: number;
+  lowAccuracyThreshold: number;
+  wrongQuestionThreshold: number;
+  vocabularyDueThreshold: number;
+  staleSessionDays: number;
+}
+
+function parseSupervisionRules(value: unknown): SupervisionRuleConfig {
+  const raw = objectValue(value);
+  return {
+    windowDays: boundedIntValue(raw.windowDays, SUPERVISION_RULE_DEFAULTS.windowDays, 3, 90),
+    inactivityDays: boundedIntValue(raw.inactivityDays, SUPERVISION_RULE_DEFAULTS.inactivityDays, 1, 90),
+    minAnswers: boundedIntValue(raw.minAnswers, SUPERVISION_RULE_DEFAULTS.minAnswers, 1, 500),
+    lowAccuracyThreshold: boundedNumberValue(raw.lowAccuracyThreshold, SUPERVISION_RULE_DEFAULTS.lowAccuracyThreshold, 0.1, 0.95),
+    wrongQuestionThreshold: boundedIntValue(raw.wrongQuestionThreshold, SUPERVISION_RULE_DEFAULTS.wrongQuestionThreshold, 1, 200),
+    vocabularyDueThreshold: boundedIntValue(raw.vocabularyDueThreshold, SUPERVISION_RULE_DEFAULTS.vocabularyDueThreshold, 1, 1000),
+    staleSessionDays: boundedIntValue(raw.staleSessionDays, SUPERVISION_RULE_DEFAULTS.staleSessionDays, 1, 30),
+  };
+}
+
+function supervisionBatchKey(value: unknown) {
+  const candidate = nullableString(value);
+  if (!candidate) return `manual:${shanghaiTodayKey()}`;
+  return candidate.length <= 120 ? candidate : createHash('sha256').update(candidate).digest('hex');
+}
+
+function defaultSupervisionDueAt() {
+  const date = new Date();
+  date.setDate(date.getDate() + 1);
+  date.setHours(18, 0, 0, 0);
+  return date.toISOString();
+}
+
+function supervisionPriority(score: number) {
+  if (score >= 90) return 'urgent';
+  if (score >= 60) return 'high';
+  return 'normal';
+}
+
 function classCodeValue(value: unknown) {
   const code = nullableString(value);
   if (!code) return null;
@@ -350,6 +417,295 @@ async function ensureStudentInScope(auth: TenantAdminAuth, studentUserId: string
   }
 }
 
+async function loadStudentSupervisionCandidates(auth: TenantAdminAuth, input: {
+  rules: SupervisionRuleConfig;
+  classId: string | null;
+  assignedToUserId: string | null;
+  studentUserIds?: string[];
+  limit: number;
+}) {
+  const scopedIds = await scopedClassIds(auth);
+  const params: unknown[] = [auth.tenantId, input.rules.windowDays, input.rules.staleSessionDays];
+  const filters = [
+    'tm.tenant_id = $1',
+    `tm.role = 'student'`,
+    `tm.status = 'active'`,
+  ];
+
+  if (input.classId) {
+    params.push(input.classId);
+    filters.push(`exists (
+      select 1 from public.tenant_class_members scoped_cm
+      where scoped_cm.tenant_id = tm.tenant_id
+        and scoped_cm.user_id = tm.user_id
+        and scoped_cm.class_id = $${params.length}::uuid
+        and scoped_cm.member_type = 'student'
+        and scoped_cm.status = 'active'
+    )`);
+  }
+  if (scopedIds) {
+    params.push(scopedIds);
+    filters.push(`exists (
+      select 1 from public.tenant_class_members scoped_cm
+      where scoped_cm.tenant_id = tm.tenant_id
+        and scoped_cm.user_id = tm.user_id
+        and scoped_cm.class_id = any($${params.length}::uuid[])
+        and scoped_cm.member_type = 'student'
+        and scoped_cm.status = 'active'
+    )`);
+  }
+  if (input.studentUserIds?.length) {
+    params.push(input.studentUserIds);
+    filters.push(`tm.user_id = any($${params.length}::uuid[])`);
+  }
+
+  params.push(input.limit);
+  const rows = await query<Record<string, unknown>>(
+    `
+    with student_scope as (
+      select tm.tenant_id, tm.user_id, tm.created_at
+      from public.tenant_memberships tm
+      where ${filters.join(' and ')}
+    ),
+    class_agg as (
+      select tcm.tenant_id, tcm.user_id,
+             min(tcm.class_id::text) as "defaultClassId",
+             jsonb_agg(
+               jsonb_build_object('classId', tc.id, 'className', tc.name, 'classCode', tc.code)
+               order by tc.sort_order asc, tc.created_at desc
+             ) filter (where tcm.status = 'active') as classes
+      from public.tenant_class_members tcm
+      join public.tenant_classes tc on tc.tenant_id = tcm.tenant_id and tc.id = tcm.class_id
+      join student_scope ss on ss.tenant_id = tcm.tenant_id and ss.user_id = tcm.user_id
+      where tcm.member_type = 'student'
+        and tcm.status = 'active'
+      group by tcm.tenant_id, tcm.user_id
+    ),
+    answers as (
+      select ar.tenant_id, ar.user_id,
+             count(*) filter (where ar.answered_at >= now() - ($2::int * interval '1 day'))::int as "answerCount",
+             count(*) filter (where ar.answered_at >= now() - ($2::int * interval '1 day') and ar.is_correct is true)::int as "correctCount",
+             count(*) filter (where ar.answered_at >= now() - ($2::int * interval '1 day') and ar.is_correct is false)::int as "wrongAnswerCount",
+             max(ar.answered_at) as "latestAnsweredAt"
+      from public.answer_records ar
+      join student_scope ss on ss.tenant_id = ar.tenant_id and ss.user_id = ar.user_id
+      group by ar.tenant_id, ar.user_id
+    ),
+    wrongs as (
+      select wq.tenant_id, wq.user_id,
+             count(*) filter (where wq.resolved_at is null)::int as "unresolvedWrongQuestions",
+             coalesce(sum(wq.wrong_count) filter (where wq.resolved_at is null), 0)::int as "wrongQuestionAttempts",
+             max(wq.last_wrong_at) filter (where wq.resolved_at is null) as "latestWrongAt"
+      from public.wrong_questions wq
+      join student_scope ss on ss.tenant_id = wq.tenant_id and ss.user_id = wq.user_id
+      group by wq.tenant_id, wq.user_id
+    ),
+    sessions as (
+      select ps.tenant_id, ps.user_id,
+             count(*) filter (
+               where ps.finished_at is null
+                 and ps.started_at <= now() - ($3::int * interval '1 day')
+                 and (ps.expires_at is null or ps.expires_at > now())
+             )::int as "staleActiveSessions",
+             max(ps.started_at) as "latestSessionAt"
+      from public.practice_sessions ps
+      join student_scope ss on ss.tenant_id = ps.tenant_id and ss.user_id = ps.user_id
+      group by ps.tenant_id, ps.user_id
+    ),
+    reports as (
+      select pr.tenant_id, pr.user_id,
+             max(pr.submitted_at) as "latestReportAt",
+             min(pr.accuracy) filter (where pr.submitted_at >= now() - ($2::int * interval '1 day')) as "lowestReportAccuracy",
+             max(pr.score) filter (where pr.submitted_at >= now() - ($2::int * interval '1 day')) as "bestReportScore"
+      from public.practice_session_reports pr
+      join student_scope ss on ss.tenant_id = pr.tenant_id and ss.user_id = pr.user_id
+      group by pr.tenant_id, pr.user_id
+    ),
+    vocab as (
+      select uwp.tenant_id, uwp.user_id,
+             count(*) filter (
+               where uwp.status in ('new', 'learning', 'reviewing')
+                 and (uwp.next_review_date is null or uwp.next_review_date <= now())
+             )::int as "dueVocabularyWords",
+             count(*) filter (where uwp.status = 'mastered')::int as "masteredVocabularyWords",
+             max(uwp.last_review_date) as "latestVocabularyReviewAt"
+      from public.user_word_progress uwp
+      join student_scope ss on ss.tenant_id = uwp.tenant_id and ss.user_id = uwp.user_id
+      group by uwp.tenant_id, uwp.user_id
+    )
+    select ss.user_id as "studentUserId",
+           u.username, u.name, u.email::text as email,
+           case when ${canSeeStudentPhone(auth) ? 'true' : 'false'} then u.phone else null end as "studentPhone",
+           sp.region_id as "regionId", r.name as "regionName",
+           sp.selected_school_id as "selectedSchoolId", school.name as "selectedSchoolName",
+           sp.selected_major_id as "selectedMajorId", major.name as "selectedMajorName",
+           coalesce(sp.mastered_words_count, 0)::int as "profileMasteredWords",
+           coalesce(ca."defaultClassId", null) as "defaultClassId",
+           coalesce(ca.classes, '[]'::jsonb) as classes,
+           coalesce(a."answerCount", 0)::int as "answerCount",
+           coalesce(a."correctCount", 0)::int as "correctCount",
+           coalesce(a."wrongAnswerCount", 0)::int as "wrongAnswerCount",
+           a."latestAnsweredAt",
+           coalesce(w."unresolvedWrongQuestions", 0)::int as "unresolvedWrongQuestions",
+           coalesce(w."wrongQuestionAttempts", 0)::int as "wrongQuestionAttempts",
+           w."latestWrongAt",
+           coalesce(s."staleActiveSessions", 0)::int as "staleActiveSessions",
+           s."latestSessionAt",
+           rep."latestReportAt",
+           rep."lowestReportAccuracy",
+           rep."bestReportScore",
+           coalesce(v."dueVocabularyWords", 0)::int as "dueVocabularyWords",
+           coalesce(v."masteredVocabularyWords", 0)::int as "masteredVocabularyWords",
+           v."latestVocabularyReviewAt"
+    from student_scope ss
+    join public.platform_users u on u.id = ss.user_id
+    left join public.student_profiles sp on sp.tenant_id = ss.tenant_id and sp.user_id = ss.user_id
+    left join public.regions r on r.tenant_id = ss.tenant_id and r.id = sp.region_id
+    left join public.schools school on school.tenant_id = ss.tenant_id and school.id = sp.selected_school_id
+    left join public.majors major on major.tenant_id = ss.tenant_id and major.id = sp.selected_major_id
+    left join class_agg ca on ca.tenant_id = ss.tenant_id and ca.user_id = ss.user_id
+    left join answers a on a.tenant_id = ss.tenant_id and a.user_id = ss.user_id
+    left join wrongs w on w.tenant_id = ss.tenant_id and w.user_id = ss.user_id
+    left join sessions s on s.tenant_id = ss.tenant_id and s.user_id = ss.user_id
+    left join reports rep on rep.tenant_id = ss.tenant_id and rep.user_id = ss.user_id
+    left join vocab v on v.tenant_id = ss.tenant_id and v.user_id = ss.user_id
+    order by coalesce(a."latestAnsweredAt", s."latestSessionAt", v."latestVocabularyReviewAt", ss.created_at) asc nulls first
+    limit $${params.length}
+    `,
+    params,
+  );
+
+  return rows.map(row => buildSupervisionCandidate(row, input.rules, {
+    assignedToUserId: input.assignedToUserId,
+    classId: input.classId,
+  })).filter(Boolean) as Record<string, unknown>[];
+}
+
+function buildSupervisionCandidate(
+  row: Record<string, unknown>,
+  rules: SupervisionRuleConfig,
+  options: { assignedToUserId: string | null; classId: string | null },
+) {
+  const answerCount = intValue(row.answerCount, 0);
+  const correctCount = intValue(row.correctCount, 0);
+  const unresolvedWrongQuestions = intValue(row.unresolvedWrongQuestions, 0);
+  const staleActiveSessions = intValue(row.staleActiveSessions, 0);
+  const dueVocabularyWords = intValue(row.dueVocabularyWords, 0);
+  const latestStudyAt = latestIso([
+    row.latestAnsweredAt,
+    row.latestSessionAt,
+    row.latestVocabularyReviewAt,
+    row.latestReportAt,
+  ]);
+  const inactiveDays = latestStudyAt ? Math.floor((Date.now() - new Date(latestStudyAt).getTime()) / 86_400_000) : null;
+  const accuracy = answerCount > 0 ? correctCount / answerCount : null;
+  const reasons: Array<Record<string, unknown>> = [];
+  let riskScore = 0;
+
+  if (inactiveDays === null || inactiveDays >= rules.inactivityDays) {
+    const score = inactiveDays === null ? 35 : Math.min(55, inactiveDays * 5);
+    riskScore += score;
+    reasons.push({
+      code: 'inactive',
+      label: inactiveDays === null ? '未产生学习记录' : `${inactiveDays} 天未学习`,
+      severity: inactiveDays === null || inactiveDays >= rules.inactivityDays * 2 ? 'high' : 'medium',
+      value: inactiveDays,
+      threshold: rules.inactivityDays,
+    });
+  }
+
+  if (unresolvedWrongQuestions >= rules.wrongQuestionThreshold) {
+    riskScore += Math.min(45, unresolvedWrongQuestions * 4);
+    reasons.push({
+      code: 'wrong_backlog',
+      label: `未解决错题 ${unresolvedWrongQuestions} 道`,
+      severity: unresolvedWrongQuestions >= rules.wrongQuestionThreshold * 2 ? 'high' : 'medium',
+      value: unresolvedWrongQuestions,
+      threshold: rules.wrongQuestionThreshold,
+    });
+  }
+
+  if (answerCount >= rules.minAnswers && accuracy !== null && accuracy < rules.lowAccuracyThreshold) {
+    riskScore += Math.round((rules.lowAccuracyThreshold - accuracy) * 100);
+    reasons.push({
+      code: 'low_accuracy',
+      label: `近 ${rules.windowDays} 天正确率 ${Math.round(accuracy * 100)}%`,
+      severity: accuracy < rules.lowAccuracyThreshold * 0.75 ? 'high' : 'medium',
+      value: Number(accuracy.toFixed(4)),
+      threshold: rules.lowAccuracyThreshold,
+    });
+  }
+
+  if (dueVocabularyWords >= rules.vocabularyDueThreshold) {
+    riskScore += Math.min(35, Math.ceil(dueVocabularyWords / Math.max(1, rules.vocabularyDueThreshold)) * 10);
+    reasons.push({
+      code: 'vocabulary_due',
+      label: `待复习单词 ${dueVocabularyWords} 个`,
+      severity: dueVocabularyWords >= rules.vocabularyDueThreshold * 2 ? 'high' : 'medium',
+      value: dueVocabularyWords,
+      threshold: rules.vocabularyDueThreshold,
+    });
+  }
+
+  if (staleActiveSessions > 0) {
+    riskScore += Math.min(25, staleActiveSessions * 10);
+    reasons.push({
+      code: 'stale_session',
+      label: `存在 ${staleActiveSessions} 个未完成练习`,
+      severity: 'medium',
+      value: staleActiveSessions,
+      threshold: 1,
+    });
+  }
+
+  if (!reasons.length) return null;
+  const priority = supervisionPriority(riskScore);
+  const studentName = nullableString(row.name) || nullableString(row.username) || nullableString(row.studentPhone) || String(row.studentUserId);
+  const primaryReason = String(reasons[0]?.label || '学习状态需要跟进');
+  const classId = options.classId || nullableString(row.defaultClassId);
+  return {
+    studentUserId: row.studentUserId,
+    studentName,
+    studentPhone: row.studentPhone,
+    assignedToUserId: options.assignedToUserId,
+    classId,
+    classes: row.classes,
+    title: `学习督导：${primaryReason}`,
+    description: reasons.map(item => item.label).join('；'),
+    followupType: 'learning',
+    priority,
+    riskScore: Math.min(100, Math.round(riskScore)),
+    reasons,
+    evidence: {
+      windowDays: rules.windowDays,
+      answerCount,
+      correctCount,
+      wrongAnswerCount: intValue(row.wrongAnswerCount, 0),
+      accuracy: accuracy === null ? null : Number(accuracy.toFixed(4)),
+      latestStudyAt,
+      inactiveDays,
+      unresolvedWrongQuestions,
+      wrongQuestionAttempts: intValue(row.wrongQuestionAttempts, 0),
+      staleActiveSessions,
+      dueVocabularyWords,
+      masteredVocabularyWords: intValue(row.masteredVocabularyWords, 0),
+      latestWrongAt: row.latestWrongAt || null,
+      latestReportAt: row.latestReportAt || null,
+      lowestReportAccuracy: row.lowestReportAccuracy === null || row.lowestReportAccuracy === undefined ? null : numberValue(row.lowestReportAccuracy, 0),
+      bestReportScore: row.bestReportScore === null || row.bestReportScore === undefined ? null : numberValue(row.bestReportScore, 0),
+      latestVocabularyReviewAt: row.latestVocabularyReviewAt || null,
+    },
+  };
+}
+
+function latestIso(values: unknown[]) {
+  const timestamps = values
+    .map(value => (typeof value === 'string' || value instanceof Date ? new Date(value).getTime() : NaN))
+    .filter(Number.isFinite);
+  if (!timestamps.length) return null;
+  return new Date(Math.max(...timestamps)).toISOString();
+}
+
 async function ensureUserTenantMembership(
   client: pg.PoolClient,
   tenantId: string,
@@ -1765,6 +2121,177 @@ export async function tenantStudentFollowupReportRoute(ctx: RequestContext) {
   };
 }
 
+export async function tenantStudentSupervisionPreviewRoute(ctx: RequestContext) {
+  const auth = await requireTenantAdmin(ctx);
+  requireTenantPermission(auth, 'students:read');
+  requireTenantPermission(auth, 'students:supervision:read');
+  const limit = intParam(ctx, 'limit', 20, 100);
+  const classId = stringParam(ctx, 'classId') || null;
+  const assignedToUserId = stringParam(ctx, 'assignedToUserId') || null;
+  if (classId) await ensureReadableClass(auth, classId);
+  if (assignedToUserId) {
+    await query(
+      `
+      select 1
+      from public.tenant_memberships
+      where tenant_id = $1 and user_id = $2::uuid and status = 'active'
+        and role = any($3::text[])
+      limit 1
+      `,
+      [auth.tenantId, assignedToUserId, CRM_ASSIGNABLE_ROLES],
+    ).then(rows => {
+      if (!rows[0]) throw new HttpError(400, 'User is not an active tenant member', 'ASSIGNEE_NOT_FOUND');
+    });
+  }
+
+  const rules = parseSupervisionRules({
+    windowDays: stringParam(ctx, 'windowDays'),
+    inactivityDays: stringParam(ctx, 'inactivityDays'),
+    minAnswers: stringParam(ctx, 'minAnswers'),
+    lowAccuracyThreshold: stringParam(ctx, 'lowAccuracyThreshold'),
+    wrongQuestionThreshold: stringParam(ctx, 'wrongQuestionThreshold'),
+    vocabularyDueThreshold: stringParam(ctx, 'vocabularyDueThreshold'),
+    staleSessionDays: stringParam(ctx, 'staleSessionDays'),
+  });
+  const candidates = await loadStudentSupervisionCandidates(auth, { rules, classId, assignedToUserId, limit });
+  return {
+    item: {
+      rules,
+      filters: {
+        classId,
+        assignedToUserId,
+        scoped: (await scopedClassIds(auth)) !== null,
+      },
+      totalCandidates: candidates.length,
+      candidates,
+    },
+  };
+}
+
+export async function generateTenantStudentSupervisionRoute(ctx: RequestContext) {
+  const auth = await requireTenantAdmin(ctx);
+  requireTenantPermission(auth, 'students:read');
+  requireTenantPermission(auth, 'students:supervision:write');
+  const body = await readJsonBody(ctx);
+  const limit = boundedIntValue(body.limit, 20, 1, MAX_SUPERVISION_GENERATE);
+  const classId = nullableString(body.classId);
+  const assignedToUserId = nullableString(body.assignedToUserId);
+  const dueAt = optionalTimestampString(body.dueAt, 'dueAt') || defaultSupervisionDueAt();
+  const batchKey = supervisionBatchKey(body.batchKey);
+  const rules = parseSupervisionRules(body.rules);
+  const onlyStudentUserIds = Array.isArray(body.studentUserIds)
+    ? strictUuidArrayValue(body.studentUserIds, 'studentUserIds', MAX_SUPERVISION_GENERATE)
+    : [];
+  if (classId) await ensureReadableClass(auth, classId);
+
+  const result = await transaction(async client => {
+    await ensureUserTenantMembership(client, auth.tenantId, assignedToUserId, CRM_ASSIGNABLE_ROLES, 'ASSIGNEE_NOT_FOUND');
+    let candidates = await loadStudentSupervisionCandidates(auth, {
+      rules,
+      classId,
+      assignedToUserId,
+      studentUserIds: onlyStudentUserIds,
+      limit: Math.max(limit, onlyStudentUserIds.length || 0) || limit,
+    });
+    candidates = candidates.slice(0, limit);
+
+    const items: unknown[] = [];
+    const errors: unknown[] = [];
+    for (let index = 0; index < candidates.length; index += 1) {
+      const candidate = candidates[index];
+      const studentUserId = String(candidate.studentUserId || '');
+      try {
+        await ensureStudentInScope(auth, studentUserId);
+        const candidateClassId = nullableString(candidate.classId);
+        if (candidateClassId) await ensureTenantClass(client, auth.tenantId, candidateClassId);
+        const idempotencyKey = `student_supervision:${batchKey}:${studentUserId}`;
+        const metadata = {
+          ...objectValue(body.metadata),
+          autoSupervision: {
+            idempotencyKey,
+            batchKey,
+            generatedAt: new Date().toISOString(),
+            rules,
+            riskScore: candidate.riskScore,
+            reasons: candidate.reasons,
+            evidence: candidate.evidence,
+          },
+        };
+        const followup = await client.query<Record<string, unknown>>(
+          `
+          insert into public.tenant_student_followups (
+            tenant_id, student_user_id, assigned_to_user_id, class_id,
+            title, description, followup_type, priority, status, due_at,
+            metadata, created_by, updated_by
+          )
+          values (
+            $1, $2::uuid, $3::uuid, $4::uuid,
+            $5, $6, 'learning', $7, 'open', $8::timestamptz,
+            $9::jsonb, $10, $10
+          )
+          on conflict (tenant_id, (metadata->'autoSupervision'->>'idempotencyKey'))
+          where metadata->'autoSupervision'->>'idempotencyKey' is not null
+          do update set assigned_to_user_id = coalesce(excluded.assigned_to_user_id, public.tenant_student_followups.assigned_to_user_id),
+                        class_id = coalesce(excluded.class_id, public.tenant_student_followups.class_id),
+                        title = excluded.title,
+                        description = excluded.description,
+                        priority = excluded.priority,
+                        due_at = excluded.due_at,
+                        metadata = public.tenant_student_followups.metadata || excluded.metadata,
+                        updated_by = excluded.updated_by,
+                        updated_at = now()
+          returning id, student_user_id as "studentUserId",
+                    assigned_to_user_id as "assignedToUserId", class_id as "classId",
+                    title, description, followup_type as "followupType", priority, status,
+                    due_at as "dueAt", metadata, created_at as "createdAt", updated_at as "updatedAt"
+          `,
+          [
+            auth.tenantId,
+            studentUserId,
+            assignedToUserId,
+            candidateClassId,
+            candidate.title,
+            candidate.description,
+            candidate.priority,
+            dueAt,
+            JSON.stringify(metadata),
+            auth.userId,
+          ],
+        );
+        items.push({ index, studentUserId, followupId: followup.rows[0].id, item: followup.rows[0] });
+      } catch (error) {
+        errors.push({
+          index,
+          studentUserId,
+          code: error instanceof HttpError ? error.code : 'STUDENT_SUPERVISION_ITEM_FAILED',
+          message: error instanceof Error ? error.message : 'Student supervision item failed',
+        });
+      }
+    }
+
+    await recordAudit(client, auth, 'tenant.students.supervision_generated', 'tenant_student_followups', null, {
+      batchKey,
+      classId,
+      assignedToUserId,
+      total: candidates.length,
+      successCount: items.length,
+      errorCount: errors.length,
+      rules,
+    });
+
+    return {
+      batchKey,
+      total: candidates.length,
+      successCount: items.length,
+      errorCount: errors.length,
+      items,
+      errors,
+    };
+  });
+
+  return result;
+}
+
 export async function upsertTenantStudentFollowupRoute(ctx: RequestContext) {
   const auth = await requireTenantAdmin(ctx);
   requireTenantPermission(auth, 'students:followups:write');

apps/api/src/features/tenant-admin/index.ts

@@ -6,9 +6,11 @@ import {
   removeTenantClassMemberRoute,
   tenantClassesRoute,
   tenantClassMembersRoute,
+  generateTenantStudentSupervisionRoute,
   tenantStudentFollowupsRoute,
   tenantStudentFollowupReportRoute,
   tenantStudentNotesRoute,
+  tenantStudentSupervisionPreviewRoute,
   tenantStudentsRoute,
   tenantTeachersRoute,
   pushTenantStudentsToCrmRoute,
@@ -105,6 +107,8 @@ export const tenantAdminRoutes: RouteDefinition[] = [
   ['GET', '/api/tenant-admin/students/followups', tenantStudentFollowupsRoute],
   ['GET', '/api/tenant-admin/students/followups/report', tenantStudentFollowupReportRoute],
   ['PUT', '/api/tenant-admin/students/followups', upsertTenantStudentFollowupRoute],
+  ['GET', '/api/tenant-admin/students/supervision/preview', tenantStudentSupervisionPreviewRoute],
+  ['POST', '/api/tenant-admin/students/supervision/generate', generateTenantStudentSupervisionRoute],
   ['GET', '/api/tenant-admin/teachers', tenantTeachersRoute],
   ['GET', '/api/tenant-admin/overview', tenantOverviewRoute],
   ['GET', '/api/tenant-admin/dashboard', tenantDashboardRoute],

apps/taro/src/pages/tenant-admin/students/index.tsx

@@ -4,6 +4,7 @@ import { Button, Input, Text, Textarea, View } from '@tarojs/components';
 import {
   bulkAssignTenantClassMembers,
   bulkUpsertTenantStudents,
+  generateTenantStudentSupervision,
   loadTenantClasses,
   loadTenantStudentFollowups,
   loadTenantStudentFollowupReport,
@@ -11,6 +12,7 @@ import {
   loadTenantStudents,
   loadTenantTeachers,
   loadTenantMembers,
+  previewTenantStudentSupervision,
   pushTenantStudentsToCrm,
   updateTenantStudentStatus,
   upsertTenantStudent,
@@ -24,6 +26,7 @@ import {
   type TenantStudentNoteItem,
   type TenantStudentCrmPushInput,
   type TenantStudentFollowupReport,
+  type TenantStudentSupervisionCandidate,
   type TenantTeacherItem,
   type TenantMemberItem,
 } from '@/services/tenantAdmin';
@@ -35,6 +38,15 @@ const followupTypes = ['learning', 'service', 'sales', 'renewal', 'risk', 'custo
 const followupPriorities = ['low', 'normal', 'high', 'urgent'];
 const followupStatuses = ['open', 'in_progress', 'done', 'cancelled'];
 const crmAssignableRoles = ['tenant_owner', 'tenant_admin', 'tenant_operator', 'teacher', 'sales', 'agent'];
+const defaultSupervisionRules = {
+  windowDays: 14,
+  inactivityDays: 7,
+  minAnswers: 10,
+  lowAccuracyThreshold: 0.6,
+  wrongQuestionThreshold: 5,
+  vocabularyDueThreshold: 20,
+  staleSessionDays: 3,
+};
 
 function emptyStudentForm(): TenantStudentInput {
   return {
@@ -124,7 +136,10 @@ export default function TenantStudentsPage() {
   const [bulkResult, setBulkResult] = useState<BulkOperationResult | null>(null);
   const [assignResult, setAssignResult] = useState<BulkOperationResult | null>(null);
   const [crmPushResult, setCrmPushResult] = useState<BulkOperationResult | null>(null);
+  const [supervisionResult, setSupervisionResult] = useState<BulkOperationResult | null>(null);
   const [followupReport, setFollowupReport] = useState<TenantStudentFollowupReport['item'] | null>(null);
+  const [supervisionCandidates, setSupervisionCandidates] = useState<TenantStudentSupervisionCandidate[]>([]);
+  const [supervisionRules, setSupervisionRules] = useState(defaultSupervisionRules);
   const [scoped, setScoped] = useState(false);
   const [busy, setBusy] = useState('');
   const [error, setError] = useState('');
@@ -332,6 +347,50 @@ export default function TenantStudentsPage() {
     }
   }
 
+  async function previewSupervision() {
+    setBusy('supervisionPreview');
+    setError('');
+    try {
+      const payload = await previewTenantStudentSupervision({
+        ...supervisionRules,
+        classId: selectedClassId || undefined,
+        limit: 20,
+      });
+      setSupervisionCandidates(payload.item?.candidates || []);
+      Taro.showToast({ title: '督导候选已刷新', icon: 'success' });
+    } catch (nextError) {
+      setError(nextError instanceof Error ? nextError.message : '学习督导预览失败');
+    } finally {
+      setBusy('');
+    }
+  }
+
+  async function generateSupervision() {
+    if (!supervisionCandidates.length) {
+      Taro.showToast({ title: '请先预览候选', icon: 'none' });
+      return;
+    }
+    setBusy('supervisionGenerate');
+    setError('');
+    try {
+      const result = await generateTenantStudentSupervision({
+        rules: supervisionRules,
+        classId: selectedClassId || null,
+        studentUserIds: supervisionCandidates.map(item => item.studentUserId),
+        batchKey: `taro-supervision-${new Date().toISOString().slice(0, 10)}-${selectedClassId || 'all'}`,
+        limit: supervisionCandidates.length,
+        metadata: { source: 'taro-tenant-admin' },
+      });
+      setSupervisionResult(result);
+      Taro.showToast({ title: '督导任务已生成', icon: result.errorCount ? 'none' : 'success' });
+      reload();
+    } catch (nextError) {
+      setError(nextError instanceof Error ? nextError.message : '学习督导生成失败');
+    } finally {
+      setBusy('');
+    }
+  }
+
   async function saveNote() {
     if (!selectedStudent) {
       Taro.showToast({ title: '请选择学生', icon: 'none' });
@@ -575,6 +634,32 @@ export default function TenantStudentsPage() {
           ))}
         </View>
 
+        <View className='admin-section'>
+          <Text className='admin-section-title'>学习督导自动化</Text>
+          <View className='admin-form-grid'>
+            <Input className='admin-input' placeholder='观察天数' value={String(supervisionRules.windowDays)} onInput={event => setSupervisionRules(prev => ({ ...prev, windowDays: Number(event.detail.value || prev.windowDays) }))} />
+            <Input className='admin-input' placeholder='未学习天数' value={String(supervisionRules.inactivityDays)} onInput={event => setSupervisionRules(prev => ({ ...prev, inactivityDays: Number(event.detail.value || prev.inactivityDays) }))} />
+            <Input className='admin-input' placeholder='最低答题数' value={String(supervisionRules.minAnswers)} onInput={event => setSupervisionRules(prev => ({ ...prev, minAnswers: Number(event.detail.value || prev.minAnswers) }))} />
+            <Input className='admin-input' placeholder='低正确率阈值' value={String(supervisionRules.lowAccuracyThreshold)} onInput={event => setSupervisionRules(prev => ({ ...prev, lowAccuracyThreshold: Number(event.detail.value || prev.lowAccuracyThreshold) }))} />
+            <Input className='admin-input' placeholder='错题阈值' value={String(supervisionRules.wrongQuestionThreshold)} onInput={event => setSupervisionRules(prev => ({ ...prev, wrongQuestionThreshold: Number(event.detail.value || prev.wrongQuestionThreshold) }))} />
+            <Input className='admin-input' placeholder='待复习单词阈值' value={String(supervisionRules.vocabularyDueThreshold)} onInput={event => setSupervisionRules(prev => ({ ...prev, vocabularyDueThreshold: Number(event.detail.value || prev.vocabularyDueThreshold) }))} />
+          </View>
+          <View className='admin-actions compact'>
+            <Button className='admin-button primary' loading={busy === 'supervisionPreview'} onClick={previewSupervision}>预览候选</Button>
+            <Button className='admin-button' loading={busy === 'supervisionGenerate'} onClick={generateSupervision}>生成跟进任务</Button>
+            {supervisionResult ? <Text className='admin-row-meta'>{resultSummary(supervisionResult)}</Text> : null}
+          </View>
+          <View className='admin-list'>
+            {supervisionCandidates.slice(0, 6).map(item => (
+              <View className='admin-row' key={item.studentUserId}>
+                <Text className='admin-row-main'>{item.studentName || item.studentUserId} · 风险 {String(item.riskScore || 0)}</Text>
+                <Text className='admin-row-meta'>{item.priority || 'normal'} · {item.description || '学习状态需要跟进'}</Text>
+              </View>
+            ))}
+          </View>
+          {!supervisionCandidates.length ? <Text className='admin-row-meta'>可按当前班级范围预览未学习、错题积压、正确率偏低、单词待复习和未完成练习的学生。</Text> : null}
+        </View>
+
         <View className='admin-section'>
           <Text className='admin-section-title'>CRM 批量推送</Text>
           <View className='admin-form-grid'>

apps/taro/src/services/tenantAdmin.ts

@@ -174,6 +174,40 @@ export interface TenantStudentFollowupReport {
   };
 }
 
+export interface TenantStudentSupervisionRules {
+  windowDays?: number;
+  inactivityDays?: number;
+  minAnswers?: number;
+  lowAccuracyThreshold?: number;
+  wrongQuestionThreshold?: number;
+  vocabularyDueThreshold?: number;
+  staleSessionDays?: number;
+}
+
+export interface TenantStudentSupervisionCandidate {
+  studentUserId: string;
+  studentName?: string | null;
+  studentPhone?: string | null;
+  assignedToUserId?: string | null;
+  classId?: string | null;
+  title?: string;
+  description?: string;
+  followupType?: string;
+  priority?: string;
+  riskScore?: number;
+  reasons?: Record<string, unknown>[];
+  evidence?: Record<string, unknown>;
+}
+
+export interface TenantStudentSupervisionPreview {
+  item?: {
+    rules?: TenantStudentSupervisionRules;
+    filters?: Record<string, unknown>;
+    totalCandidates?: number;
+    candidates?: TenantStudentSupervisionCandidate[];
+  };
+}
+
 export interface ImportJobItem {
   id: string;
   importType?: string;
@@ -1113,6 +1147,32 @@ export async function loadTenantStudentFollowupReport(query: {
   });
 }
 
+export async function previewTenantStudentSupervision(query: TenantStudentSupervisionRules & {
+  classId?: string;
+  assignedToUserId?: string;
+  limit?: number;
+} = {}) {
+  return apiRequest<TenantStudentSupervisionPreview>('/api/tenant-admin/students/supervision/preview', {
+    query: { ...query, limit: query.limit || 20 },
+  });
+}
+
+export async function generateTenantStudentSupervision(input: {
+  rules?: TenantStudentSupervisionRules;
+  classId?: string | null;
+  assignedToUserId?: string | null;
+  studentUserIds?: string[];
+  dueAt?: string | null;
+  batchKey?: string;
+  limit?: number;
+  metadata?: Record<string, unknown>;
+}) {
+  return apiRequest<BulkOperationResult>('/api/tenant-admin/students/supervision/generate', {
+    method: 'POST',
+    body: input,
+  });
+}
+
 export async function upsertTenantStudentFollowup(input: {
   id?: string;
   studentUserId: string;

docs/refactor/backend-capability-status.md

@@ -45,7 +45,7 @@
 | 租户角色权限 | 可联调 | `tenant_memberships.role + permissions + role_template_id`，接口有权限点校验 |
 | 自定义角色模板 | 可联调 | `tenant_role_templates` + `/api/tenant-admin/role-templates`，支持权限、菜单、模块、字段、数据范围配置；Taro 租户设置页已接创建、编辑、停用、权限点、菜单、模块、字段和基础数据范围配置第一版 |
 | 班级/教师/学生范围权限 | 可联调 | `tenant_classes`、`tenant_class_members` + `/api/tenant-admin/classes`、`classes/members`、`students`、`teachers`；教师默认只看自己负责班级，字段权限可脱敏学生手机号 |
-| 学生运营备注和跟进 | 可联调 | `tenant_student_notes`、`tenant_student_followups` + `/api/tenant-admin/students/notes`、`students/followups`；教师/班主任只能操作范围内学生，支持备注可见性、任务指派、完成状态和审计 |
+| 学生运营备注、跟进和学习督导 | 可联调 | `tenant_student_notes`、`tenant_student_followups` + `/api/tenant-admin/students/notes`、`students/followups`、`students/supervision/preview`、`students/supervision/generate`；教师/班主任只能操作范围内学生，支持备注可见性、任务指派、完成状态、学习风险候选预览、自动生成跟进任务和审计 |
 
 ## 学生端题库主链路
 
@@ -144,7 +144,7 @@
 | 激活码批次/生成/列表 | 可联调 | `/api/tenant-admin/code-batches`、`activation-codes` |
 | 成员/角色权限/审计 | 可联调 | `/api/tenant-admin/members`、`permissions`、`role-templates`、`audit-logs` |
 | 班级/学生/教师管理 | 可联调 | `/api/tenant-admin/classes`、`classes/members`、`students`、`teachers`，支持班级范围权限和审计 |
-| 学生批量运营 | 可联调 | `/api/tenant-admin/students/bulk-upsert`、`students/status`、`classes/members/bulk-assign`、`students/notes`、`students/followups`、`students/followups/report`、`students/crm-push`；支持逐行结果、限量、防跨租户和教师范围校验；跟进报表支持 7/30/90 天或自定义日期范围、状态/类型/优先级/负责人/班级聚合、逾期待办、CRM 推送队列摘要和每日趋势；批量 CRM 推送会为学生生成跟进任务并写入异步 CRM 队列，要求 `crm:write`、`students:read`、`students:followups:write`；学生导入/upsert/分班禁止 `avatarUrl/avatar_url/avatar/headimgurl/figureurl` 和 `primaryRole/primary_role`，避免绕过预设头像与租户角色体系 |
+| 学生批量运营 | 可联调 | `/api/tenant-admin/students/bulk-upsert`、`students/status`、`classes/members/bulk-assign`、`students/notes`、`students/followups`、`students/followups/report`、`students/supervision/preview`、`students/supervision/generate`、`students/crm-push`；支持逐行结果、限量、防跨租户和教师范围校验；跟进报表支持 7/30/90 天或自定义日期范围、状态/类型/优先级/负责人/班级聚合、逾期待办、CRM 推送队列摘要和每日趋势；学习督导由后端读取答题、错题、单词待复习和未完成练习数据，按阈值预览候选并幂等生成 `learning` 跟进任务，要求 `students:supervision:read/write`；批量 CRM 推送会为学生生成跟进任务并写入异步 CRM 队列，要求 `crm:write`、`students:read`、`students:followups:write`；学生导入/upsert/分班禁止 `avatarUrl/avatar_url/avatar/headimgurl/figureurl` 和 `primaryRole/primary_role`，避免绕过预设头像与租户角色体系 |
 | 用户站内通知查看 | 可联调 | `GET /api/tenant-admin/user-notifications`；需要 `notifications:read` 权限，支持按用户、状态、类型查询租户内通知和状态汇总，租户后台只读不直接代学生改状态 |
 | 平台租户/详情/账务资料/员工/审计/告警/套餐/订阅/账单/用量 | 可联调 | `/api/platform-admin/*`；已支持当前平台账号权限目录、平台员工列表、平台员工创建/编辑、平台员工禁用/恢复、租户列表、创建租户、租户详情、状态变更、账务资料维护、平台审计日志查询、CSV/JSON 审计导出、平台审计告警规则查询、告警列表、确认/解决/忽略、审计告警外部通知渠道和发送事件、SaaS 套餐、订阅、账单、订阅账单候选预览、dry-run、批量生成、自动计费 worker、重复开票保护、收款、逾期标记、内部催缴台账、催缴外部通知渠道和发送事件、用量；平台 API 已拆分 `platform:staff:read/write/status`、`platform:tenant:read/write/status/billing_profile`、`platform:billing:read/write/payment/dunning/notification`、`platform:audit:read/export/alert/notification`、`platform:question_bank:read/grant/ops` 等权限点；审计导出、平台员工操作、告警响应和通知事件都会对 `details`/payload 中的 token/secret/password/key 等敏感字段递归脱敏；`apps/worker --job platform-audit-alerts` 会把租户状态变更、账务资料变更、批量开票、逾期处理、手工收款确认、审计导出等高风险平台审计动作生成内部告警；`apps/worker --job platform-audit-notifications` 会按 `platform_audit_notification_channels` 把开放告警推送到 generic/钉钉/飞书/企微 webhook，签名密钥放 `app_private.platform_secrets` 且 API 不回显原文；`apps/worker --job platform-dunning-notifications` 会按 `platform_dunning_notification_channels` 把内部催缴记录推送到 generic/钉钉/飞书/企微 webhook，发送成功会推进提醒状态，失败会退避重试，联系方式和请求 payload 会脱敏；创建租户、平台员工变更、状态变更、账务资料维护、订阅批量开票、自动开票、逾期催缴、手工收款确认、审计导出、告警状态更新、通知渠道变更和催缴通知渠道变更会写入审计 |
 | 数据看板聚合接口 | 可联调 | `GET /api/tenant-admin/dashboard`；支持 `7d/30d/90d`、地区筛选、学生/学习/内容/订单/激活码/反馈卡片、趋势、24h 活跃、题型分布、科目排行、地区统计、套餐销量和运营动态 |

docs/refactor/backend-progress.md

@@ -22,7 +22,7 @@
 - 平台后台租户运营第一版已补齐：`GET /api/platform-admin/tenants/detail` 返回租户、域名、订阅、账单、用量和账务资料；`PUT /api/platform-admin/tenants/billing-profile` 维护开票/联系/银行掩码资料；`GET /api/platform-admin/audit-logs` 支持按租户、动作、目标、操作者、日期和关键词查询平台审计；`GET /api/platform-admin/audit-logs/export` 支持平台管理员导出 CSV/JSON，返回 base64 内容、sha256、行数和筛选条件，并对 `details` 中的 token/secret/password/key 等敏感字段递归脱敏，同时写入 `platform.audit.exported` 审计；`GET /api/platform-admin/audit-alert-rules`、`GET /api/platform-admin/audit-alerts` 和 `POST /api/platform-admin/audit-alerts/status` 支持平台内部审计告警规则查询、开放告警查询、确认/解决/忽略，API 返回告警 details 时递归脱敏敏感字段；`apps/worker --job platform-audit-alerts` 会把租户状态变更、账务资料变更、批量开票、逾期处理、手工收款确认、审计导出等高风险平台审计动作生成内部告警；`GET/PUT /api/platform-admin/audit-notification-channels` 和 `GET /api/platform-admin/audit-notification-events` 已支持平台审计告警外部通知渠道配置和发送事件查询，`apps/worker --job platform-audit-notifications` 可按渠道把开放告警推送到 generic/钉钉/飞书/企微 webhook，签名密钥进入 `app_private.platform_secrets`，API 只回显 `secretRef` 和 webhook host/path；`GET /api/platform-admin/invoices/subscription-candidates` 和 `POST /api/platform-admin/invoices/from-subscriptions-batch` 支持订阅账单候选预览、dry-run、批量生成、重复开票跳过和平台审计；`apps/worker --job platform-billing` 可自动为即将到期且未开票订阅生成服务费账单；`POST /api/platform-admin/invoices/process-overdue`、`GET /api/platform-admin/invoices/reminders` 和 `apps/worker --job platform-dunning` 可处理已逾期未结清服务费账单，写入内部催缴台账和审计；`GET/PUT /api/platform-admin/dunning-notification-channels`、`GET /api/platform-admin/dunning-notification-events` 和 `apps/worker --job platform-dunning-notifications` 已支持平台催缴外部通知渠道配置、发送事件查询、重试和幂等发送。创建租户、状态变更、账务资料维护、订阅批量开票、自动计费、逾期催缴、手工收款确认、审计导出、审计告警状态更新、审计告警通知渠道变更和催缴通知渠道变更会写入审计日志，API/worker 集成测试已覆盖平台管理员可操作、学生越权拒绝、重复保护、非法输入拒绝、敏感字段脱敏和审计记录存在。
 - 租户自定义角色模板已落库：`tenant_role_templates` 支持权限、菜单、模块、字段和数据范围配置，成员可通过 `role_template_id` 绑定模板。
 - 班级与学生范围权限已落库：`tenant_classes`、`tenant_class_members` 支持教师/班主任/助教/学生分组，教师按负责班级查看学生，字段权限可脱敏学生手机号。
-- 学生运营管理已落库：`tenant_student_notes`、`tenant_student_followups` 支持学生备注、家校/班主任/销售跟进任务、可见性、指派、完成状态和审计；批量学生 upsert、批量分班、禁用/恢复、学生批量 CRM 推送和跟进效果统计已接入权限校验、范围校验和集成测试。`GET /api/tenant-admin/students/followups/report` 支持 7/30/90 天或自定义日期范围、负责人/类型/班级筛选、状态/类型/优先级/负责人/班级聚合、每日趋势、逾期待办和 CRM 队列摘要，并会沿用教师班级范围与字段脱敏规则。
+- 学生运营管理已落库：`tenant_student_notes`、`tenant_student_followups` 支持学生备注、家校/班主任/销售跟进任务、可见性、指派、完成状态和审计；批量学生 upsert、批量分班、禁用/恢复、学生批量 CRM 推送、跟进效果统计和学习督导自动化已接入权限校验、范围校验和集成测试。`GET /api/tenant-admin/students/followups/report` 支持 7/30/90 天或自定义日期范围、负责人/类型/班级筛选、状态/类型/优先级/负责人/班级聚合、每日趋势、逾期待办和 CRM 队列摘要，并会沿用教师班级范围与字段脱敏规则。`GET /api/tenant-admin/students/supervision/preview` 和 `POST /api/tenant-admin/students/supervision/generate` 支持按未学习、错题积压、低正确率、单词待复习和超期未完成练习生成风险候选，并用 `metadata.autoSupervision.idempotencyKey` 幂等生成 `learning` 跟进任务。
 - 旧题库常用运营功能已补齐一批：`exam_dates` 支持学生端考试倒计时和租户后台维护；`reports/report_status_events` 支持学生题目反馈、租户后台状态流转和 7/30/90 天只读反馈运营报表；`user_score_events` 支持每日签到积分流水、租户配置化连续签到奖励和反馈奖励幂等；`badges/user_badges` 支持租户后台勋章维护、手动发放、重复发放幂等和学生个人中心展示；`user_notifications` 支持反馈处理、反馈奖励、勋章发放和积分兑换的学生站内通知；Taro 学生个人中心已接积分任务/兑换/积分明细和消息中心第一版，租户营销中心已接反馈运营摘要、积分任务/每日签到奖励/兑换操作台和用户通知查看第一版。
 - 旧题库排行榜主链路已补齐但租户默认关闭：`GET /api/learning/leaderboard` 只有在 `feature_flags.enableLeaderboard=true` 时可用，支持刷题、积分、背单词、模考四类指标，支持全量/7 天/30 天周期，以及租户/地区/班级范围。
 - `learning` 已接入商用访问控制：免费用户每日题量、SVIP 范围、SVIP-only 内容、答题 session 快照保护由后端强制执行。
@@ -220,6 +220,8 @@ PUT  /api/tenant-admin/students/notes
 GET  /api/tenant-admin/students/followups
 PUT  /api/tenant-admin/students/followups
 GET  /api/tenant-admin/students/followups/report
+GET  /api/tenant-admin/students/supervision/preview
+POST /api/tenant-admin/students/supervision/generate
 POST /api/tenant-admin/students/crm-push
 GET  /api/tenant-admin/teachers
 GET  /api/tenant-admin/overview

docs/refactor/frontend-handoff-index.md

@@ -30,7 +30,7 @@
 ## 当前可进入的前端工作
 
 - `apps/taro` 已经建立，且学生端第一批 H5 页面已经可构建：登录、首页、地区选择、题库、练习、错题/收藏、练习报告、视频解析、会员收银台、订单详情、背单词、知识手册、分数线、资料、个人中心。
-- 租户后台第一批 H5 页面已经可构建：工作台、数据看板、学生/班级、题库内容、营销中心、财务运营、租户设置；工作台已接 `/api/tenant-admin/permissions` 做权限驱动模块入口；学生运营页已具备学生创建/更新、状态禁用/恢复、批量导入、批量分班、学生备注、跟进任务、跟进看板和 CRM 批量推送第一版；题库内容页已具备公共题库采纳/同步、同步通知、冲突查看、单条/批量采纳平台版本或保留本地版本、导入任务详情、异步轮询、导入问题查看、模板预览/下载、导入后复检详情、JSON/CSV/Excel 选择文件或粘贴内容、后端预览、字段别名覆盖和同步/异步执行导入的第一版操作能力；营销中心已具备 CRM 配置、CRM 队列查看、分佣规则、成员分佣比例、分佣订单、结算单生成/审核/标记打款、优惠券规则/核销报表、积分任务/兑换、积分风控只读摘要和用户通知查看第一版；财务运营页已具备退款申请/审核/供应商提交与查询、官方账单下载任务、对账批次/异常明细、差错工单处理、人工调整凭证提交/复核和异常订单运营台第一版；租户设置页已具备主题模板、草稿预览/发布、角色模板新建、编辑、停用、成员搜索/新建、成员绑定模板、成员状态和额外权限覆盖第一版。
+- 租户后台第一批 H5 页面已经可构建：工作台、数据看板、学生/班级、题库内容、营销中心、财务运营、租户设置；工作台已接 `/api/tenant-admin/permissions` 做权限驱动模块入口；学生运营页已具备学生创建/更新、状态禁用/恢复、批量导入、批量分班、学生备注、跟进任务、跟进看板、学习督导自动化和 CRM 批量推送第一版；题库内容页已具备公共题库采纳/同步、同步通知、冲突查看、单条/批量采纳平台版本或保留本地版本、导入任务详情、异步轮询、导入问题查看、模板预览/下载、导入后复检详情、JSON/CSV/Excel 选择文件或粘贴内容、后端预览、字段别名覆盖和同步/异步执行导入的第一版操作能力；营销中心已具备 CRM 配置、CRM 队列查看、分佣规则、成员分佣比例、分佣订单、结算单生成/审核/标记打款、优惠券规则/核销报表、积分任务/兑换、积分风控只读摘要和用户通知查看第一版；财务运营页已具备退款申请/审核/供应商提交与查询、官方账单下载任务、对账批次/异常明细、差错工单处理、人工调整凭证提交/复核和异常订单运营台第一版；租户设置页已具备主题模板、草稿预览/发布、角色模板新建、编辑、停用、成员搜索/新建、成员绑定模板、成员状态和额外权限覆盖第一版。
 - 平台后台第一批 H5 页面已经可构建：工作台、租户管理、账务中心、公共题库授权、平台员工；启动时应先接 `GET /api/platform-admin/permissions` 获取 `effective` 权限用于菜单和按钮可见性；租户管理页已接租户详情、账务资料编辑和最近平台审计，平台员工页已接员工列表、搜索、创建/编辑、权限点勾选、禁用和恢复，工作台已展示最近平台审计摘要、支持导出最近平台审计 CSV，并可查看开放审计告警、确认或解决告警，也能查看审计告警外部通知渠道、催缴外部通知渠道和最近发送事件摘要；账务中心已接订阅账单候选预览、dry-run、批量生成、自动计费生成结果查看、逾期预览、内部催缴生成和催缴记录查看。
 - 可以继续复刻旧题库学生端主要视觉和交互：勋章展示、小程序端分享/支付体验、背单词更细统计和更完整复盘体验。地区选择、刷题答题卡、后端权威断点续练、本地进度恢复、模拟倒计时、主观题后端自评、阅读理解/案例分析多小题、题干/选项/解析 RichContent 安全渲染、视频解析、题目反馈、模考/练习报告逐题复盘、错题复习、收藏复习、背单词卡片学习/发音/收藏练习、商城收银台、订单详情和售后入口已经有第一版页面。
 - 可以按新后端主模型接入内容导航：
@@ -95,13 +95,13 @@
 | --- | --- | --- |
 | 工作台 | `apps/taro/src/pages/tenant-admin/workbench/index.tsx` | `tenant-admin/overview`、`tenant-admin/dashboard`、`tenant-admin/permissions` |
 | 数据看板 | `apps/taro/src/pages/tenant-admin/dashboard/index.tsx` | `tenant-admin/dashboard` |
-| 学生运营 | `apps/taro/src/pages/tenant-admin/students/index.tsx` | `tenant-admin/classes`、`tenant-admin/teachers`、`tenant-admin/students`、`students/bulk-upsert`、`students/status`、`classes/members/bulk-assign`、`students/notes`、`students/followups`、`students/followups/report`、`students/crm-push` |
+| 学生运营 | `apps/taro/src/pages/tenant-admin/students/index.tsx` | `tenant-admin/classes`、`tenant-admin/teachers`、`tenant-admin/students`、`students/bulk-upsert`、`students/status`、`classes/members/bulk-assign`、`students/notes`、`students/followups`、`students/followups/report`、`students/supervision/preview`、`students/supervision/generate`、`students/crm-push` |
 | 题库内容 | `apps/taro/src/pages/tenant-admin/content/index.tsx` | `tenant-content/content-entries`、`tenant-content/imports`、`imports/detail`、`imports/issues`、`imports/field-mapping`、`imports/templates`、`imports/post-check`、`tenant-content/exports/questions`、`tenant-content/exports/jobs`、`tenant-content/assets/sign-download`、`tenant-content/assets/sign-preview`、`tenant-content/assets/security-scan-events`、`tenant-content/public-question-banks`、`public-question-banks/adopt`、`public-question-banks/sync`、`public-question-banks/conflicts`、`public-question-banks/conflicts/resolve`、`public-question-banks/conflicts/resolve-batch`、`tenant-content/notifications`、`tenant-content/notifications/status` |
 | 营销中心 | `apps/taro/src/pages/tenant-admin/marketing/index.tsx` | `tenant-admin/coupons`、`code-batches`、`activation-codes`、`crm/config`、`crm/queue`、`commission/settings`、`member-rate`、`summary`、`orders`、`settlements`、`settlements/generate`、`settlements/status`、`tenant-admin/feedbacks/report`、`tenant-admin/point-activity-tasks`、`tenant-admin/point-activity-claims`、`tenant-admin/point-exchange-items`、`tenant-admin/point-exchange-orders`、`tenant-admin/points-risk-report`、`tenant-admin/user-notifications`；已接 CRM、分佣、优惠券规则/核销报表、反馈运营摘要、积分任务/兑换配置与记录查看、积分风控摘要、用户通知查看第一版 |
 | 财务运营 | `apps/taro/src/pages/tenant-admin/finance/index.tsx` | `commerce/refunds`、`commerce/refunds/status`、`commerce/operations/anomalies`、`commerce/reconciliation/batches`、`commerce/reconciliation/items`、`commerce/reconciliation/issues/create`、`commerce/reconciliation/issues`、`commerce/reconciliation/issues/status`、`commerce/reconciliation/provider-bills/request`、`commerce/reconciliation/provider-bills/jobs`、`commerce/adjustment-vouchers`、`commerce/adjustment-vouchers/status`、`commerce/adjustment-vouchers/report` |
 | 租户设置 | `apps/taro/src/pages/tenant-admin/settings/index.tsx` | `tenant-admin/overview`、`domains`、`payment-accounts`、`auth-providers`、`theme-templates`、`theme`、`theme/preview`、`theme/publish`、`permissions`、`GET/PUT role-templates`、`POST role-templates/disable`、`GET/PUT members`、`POST members/disable` |
 
-当前租户后台已有第一批运营操作：工作台按权限矩阵隐藏不可见模块；学生运营页支持学生创建/更新、状态禁用/恢复、批量导入、批量分班、学生备注、跟进任务、完成跟进、跟进看板和 CRM 入队推送；题库内容页支持公共题库采纳/同步、同步通知查看与已读/忽略、同步冲突查看、单条/批量采纳平台版本或保留本地版本、导入任务详情、异步 job 轮询、导入问题查看、字段映射/模板预览/下载、JSON/CSV/Excel 导入预览和执行、字段别名覆盖和导入后复检详情，也可接 JSON/试卷 payload 同步导出与 PDF/Word 异步导出 job 轮询，完成后用 `assetId` 走后台资源签名下载/预览；营销中心支持 CRM 配置保存、队列按状态查看、分佣规则、成员分佣比例、分佣订单明细、结算单生成、审核通过/驳回、标记线下打款、优惠券规则/核销报表、反馈运营摘要、积分任务/兑换配置、领取/兑换记录查看、积分风控只读摘要和用户通知查看第一版；财务运营页支持退款状态流、官方账单任务、对账异常、差错工单和调整凭证，且只通过后端命令层写审计与状态；租户设置页支持主题模板选择、草稿预览、发布、角色模板创建、编辑、停用、权限点、菜单、模块、字段、基础数据范围配置、成员搜索/新建、成员绑定模板、成员状态和额外权限覆盖。下一批需要继续补更精细的学生导入模板体验、更细数据范围 UI、主题素材库、真实打款 provider、发票、真实生产账单抽样验收和小程序端兼容。
+当前租户后台已有第一批运营操作：工作台按权限矩阵隐藏不可见模块；学生运营页支持学生创建/更新、状态禁用/恢复、批量导入、批量分班、学生备注、跟进任务、完成跟进、跟进看板、学习督导候选预览/一键生成跟进任务和 CRM 入队推送；题库内容页支持公共题库采纳/同步、同步通知查看与已读/忽略、同步冲突查看、单条/批量采纳平台版本或保留本地版本、导入任务详情、异步 job 轮询、导入问题查看、字段映射/模板预览/下载、JSON/CSV/Excel 导入预览和执行、字段别名覆盖和导入后复检详情，也可接 JSON/试卷 payload 同步导出与 PDF/Word 异步导出 job 轮询，完成后用 `assetId` 走后台资源签名下载/预览；营销中心支持 CRM 配置保存、队列按状态查看、分佣规则、成员分佣比例、分佣订单明细、结算单生成、审核通过/驳回、标记线下打款、优惠券规则/核销报表、反馈运营摘要、积分任务/兑换配置、领取/兑换记录查看、积分风控只读摘要和用户通知查看第一版；财务运营页支持退款状态流、官方账单任务、对账异常、差错工单和调整凭证，且只通过后端命令层写审计与状态；租户设置页支持主题模板选择、草稿预览、发布、角色模板创建、编辑、停用、权限点、菜单、模块、字段、基础数据范围配置、成员搜索/新建、成员绑定模板、成员状态和额外权限覆盖。下一批需要继续补更精细的学生导入模板体验、更细数据范围 UI、主题素材库、真实打款 provider、发票、真实生产账单抽样验收和小程序端兼容。
 
 ## 已落地的 Taro 平台后台页面
 

docs/refactor/legacy-feature-gap-matrix.md

@@ -42,7 +42,7 @@
 
 | 旧功能/组件 | 新后端状态 | 待补齐 |
 | --- | --- | --- |
-| 用户管理 | 已覆盖 | 租户成员、学生列表、学生资料、批量学生 upsert、禁用/恢复、批量分班、学生备注、跟进任务、跟进效果统计和批量 CRM 推送已实现；后续补学习督导自动化、更细导入模板体验和更细数据范围 UI |
+| 用户管理 | 已覆盖 | 租户成员、学生列表、学生资料、批量学生 upsert、禁用/恢复、批量分班、学生备注、跟进任务、跟进效果统计、学习督导自动化预览/生成和批量 CRM 推送已实现；后续补更细导入模板体验、更细数据范围 UI 和运营策略配置 |
 | 销售/代理管理 | 部分覆盖 | referral/team/stats 已有；分佣设置、订单/激活码归因、结算单生成、审核、打款状态、CSV/JSON 导出、打款凭证登记/复核和本人/全局权限范围已覆盖；还缺真实打款 provider、发票、批量凭证上传和分佣看板 |
 | 班级/教师管理 | 已覆盖 | 班级、班级成员、教师/班主任/助教/学生范围权限已有；可视化 UI 和更细数据范围组合待补 |
 | 数据看板 | 部分覆盖 | 租户 dashboard 聚合 API 已覆盖收益、注册、答题、活跃、题型、科目、题量、套餐销量、运营动态、24h 活跃和激活码使用；后续补预聚合 worker、销售转化和分佣结算看板 |
@@ -127,6 +127,6 @@
 ### P2：增强体验
 
 1. 素材库、更多主题模板和可视化细节编辑。
-2. 班级、教师、学生分组和学习督导。
+2. 班级、教师、学生分组的更细数据范围 UI 和学习督导策略配置。
 3. AI 择校推荐和 PDF 报告。
 4. 题库导出模板精排、多模板排版和运营操作台。

docs/refactor/next-development-todo.md

@@ -20,7 +20,7 @@
 - 内容导入：题目、单词、知识手册、分数线、视频 JSON/CSV/Excel 预览、校验、导入、幂等、审计。
 - 内容导出：题库 JSON、`paper_json`、打印 payload 导出基础已完成，支持集合/入口/分类范围、导出 job、审计、跨租户拒绝、答案/解析开关和复合题子题脱敏。
 - 租户组织范围：班级、班级成员、教师/班主任/助教/学生分组，教师按负责班级查看学生，字段权限可脱敏学生手机号。
-- 学生运营管理：学生批量 upsert、禁用/恢复、批量分班、备注、跟进任务、跟进效果统计、批量 CRM 推送已完成接口和集成测试；学生写入口已拒绝头像 URL、第三方头像字段和 `primaryRole`，学生头像统一走男女预设；Taro 租户学生运营页已接学生创建/更新、状态切换、批量导入、批量分班、备注、跟进任务、跟进看板和 CRM 推送第一版；后续补自动学习督导和更细导入模板体验。
+- 学生运营管理：学生批量 upsert、禁用/恢复、批量分班、备注、跟进任务、跟进效果统计、学习督导自动化、批量 CRM 推送已完成接口和集成测试；学生写入口已拒绝头像 URL、第三方头像字段和 `primaryRole`，学生头像统一走男女预设；Taro 租户学生运营页已接学生创建/更新、状态切换、批量导入、批量分班、备注、跟进任务、跟进看板、学习督导预览/生成和 CRM 推送第一版；后续补督导规则模板、周期任务、触达联动和更细导入模板体验。
 - 旧题库运营缺口已补一批：考试日期/倒计时、题目反馈/纠错处理、反馈运营聚合报表、每日签到积分和积分流水、学习排行榜已完成接口和集成测试但租户默认关闭。
 - 勋章管理已完成租户后台维护、手动发放、重复发放幂等、学生个人中心展示、权限点和集成测试；签到连续天数、积分阈值、反馈解决、积分活动任务、练习次数、单词掌握和模考成绩自动发放已完成并纳入 API 集成测试；自动/手动发放会写入用户站内通知。学生激励以后台配置勋章自动发放为主，不默认启用排行榜竞争。后续补更细活动效果看板和更细前端运营配置体验。
 - 积分活动和兑换第一阶段已完成：租户后台可配置积分任务/兑换商品并查看领取/兑换记录，学生端可查询任务、领取奖励、查看兑换商品、兑换并生成 `redeem_cost` 积分流水；优惠券兑换会生成 `coupon_redemptions`，手工/自定义商品进入待履约订单；兑换完成或待履约会写入用户站内通知；Taro 学生个人中心已接积分任务、兑换商品和积分明细第一版，租户营销中心已接积分任务/兑换操作台、反馈运营摘要和积分风控只读摘要第一版。后续补更细活动效果看板。
@@ -160,8 +160,9 @@
 
 12. 学生运营管理
    - 已完成学生列表、学生资料维护、班级分组、教师范围可见、学生批量导入、禁用/恢复、批量分班、学生备注、跟进任务、跟进效果统计和批量 CRM 推送；学生写入口拒绝头像 URL、第三方头像字段和 `primaryRole`，避免绕过预设头像与租户角色体系。
-   - 已完成 Taro 学生运营页第一版：学生创建/更新、状态禁用/恢复、批量导入、批量分班、备注、跟进任务、完成跟进、跟进看板和 CRM 入队推送。
+   - 已完成学习督导自动化第一版：后端按未学习、错题积压、低正确率、单词待复习和超期未完成练习预览风险学生，并幂等生成 `learning` 跟进任务；教师账号沿用班级范围，手机号按字段权限脱敏，生成动作写审计。
-   - 继续补学习督导自动化和更细导入模板体验。
+   - 已完成 Taro 学生运营页第一版：学生创建/更新、状态禁用/恢复、批量导入、批量分班、备注、跟进任务、完成跟进、跟进看板、学习督导候选预览/生成和 CRM 入队推送。
+   - 继续补督导规则模板、定时自动生成、和 CRM/站内通知/企微/飞书/钉钉的触达联动、督导效果归因，以及更细导入模板体验。
 
 13. AI 择校推荐
    - 已完成 `ai_recommendation_reports` 报告台账、SVIP 门禁、学生输入 schema、地区/分数线上下文、`local_rules` 稳定 JSON 输出、报告列表/详情接口和 Taro 学生端基础页。
@@ -201,7 +202,7 @@
 - 旧原生小程序前端位于 `F:\project\参考\旧题库小程序前端文件`，后续 Taro 小程序/H5 交互补齐时只作为交互、页面状态和微信平台能力参考，不继承旧直连 PocketBase 或旧鉴权逻辑。
 - 租户通过域名、小程序配置或启动参数解析。
 - 页面主题、品牌、功能开关都从后端租户配置读取；学生端和后台只消费 `/api/tenant/resolve` 的已发布 `branding.theme/publicAssets`，租户后台草稿只通过 `/api/tenant-admin/theme` 查看。
-- 当前已完成 H5 学生端、租户后台、平台后台三套构建入口和统一 API client；学生端、租户后台、平台后台都有第一批真实 API 页面；学生端已补地区选择、刷题答题卡、后端权威断点续练、本地进度恢复、模拟倒计时、主观题后端自评、阅读理解/案例分析多小题、错题/收藏复习、题目反馈、视频解析、练习/模考报告、个人中心学习报告可视化、会员收银台、订单详情、售后入口、站内消息中心第一版、积分任务/兑换/积分明细第一版、预设头像契约、题干/选项/解析/知识手册 RichContent 安全渲染、H5 KaTeX 公式渲染、私有资源 ID 题图短签名渲染、逐题复盘、背单词卡片学习/发音/收藏练习第一版；平台后台已接入创建租户、租户详情、状态变更、账务资料维护、平台员工列表/创建/编辑/禁用恢复、平台审计查询/CSV 导出、开放审计告警展示/确认/解决、审计告警外部通知渠道/事件状态摘要、催缴外部通知渠道/事件摘要、订阅、订阅账单候选/dry-run/批量生成、自动计费生成结果查看、收款、用量和公共题库授权第一版写操作；租户后台已接权限驱动工作台、学生运营操作台、主题模板预览/发布、角色模板、成员绑定、CRM/分佣操作台、积分任务/兑换操作台和用户通知查看第一版；下一步补预设头像 UI、小程序公式真机验收、题图资源字段化、独立消息中心增强、状态管理、更细数据范围 UI、学生批量运营增强和小程序兼容验证。
+- 当前已完成 H5 学生端、租户后台、平台后台三套构建入口和统一 API client；学生端、租户后台、平台后台都有第一批真实 API 页面；学生端已补地区选择、刷题答题卡、后端权威断点续练、本地进度恢复、模拟倒计时、主观题后端自评、阅读理解/案例分析多小题、错题/收藏复习、题目反馈、视频解析、练习/模考报告、个人中心学习报告可视化、会员收银台、订单详情、售后入口、站内消息中心第一版、积分任务/兑换/积分明细第一版、预设头像契约、题干/选项/解析/知识手册 RichContent 安全渲染、H5 KaTeX 公式渲染、私有资源 ID 题图短签名渲染、逐题复盘、背单词卡片学习/发音/收藏练习第一版；平台后台已接入创建租户、租户详情、状态变更、账务资料维护、平台员工列表/创建/编辑/禁用恢复、平台审计查询/CSV 导出、开放审计告警展示/确认/解决、审计告警外部通知渠道/事件状态摘要、催缴外部通知渠道/事件摘要、订阅、订阅账单候选/dry-run/批量生成、自动计费生成结果查看、收款、用量和公共题库授权第一版写操作；租户后台已接权限驱动工作台、学生运营操作台、学习督导自动化、主题模板预览/发布、角色模板、成员绑定、CRM/分佣操作台、积分任务/兑换操作台和用户通知查看第一版；下一步补预设头像 UI、小程序公式真机验收、题图资源字段化、独立消息中心增强、状态管理、更细数据范围 UI、督导策略配置和小程序兼容验证。
 
 ### 第一批页面
 

docs/refactor/taro-frontend-integration.md

@@ -276,6 +276,7 @@ tenant:<tenantId>:theme
 | 学生备注 | `GET/PUT /api/tenant-admin/students/notes` |
 | 学生跟进任务 | `GET/PUT /api/tenant-admin/students/followups` |
 | 学生跟进看板 | `GET /api/tenant-admin/students/followups/report?timeRange=30d&classId=...` |
+| 学习督导自动化 | `GET /api/tenant-admin/students/supervision/preview?classId=...`、`POST /api/tenant-admin/students/supervision/generate` |
 | 租户教师 | `GET /api/tenant-admin/teachers` |
 | 租户考试日期 | `GET/PUT /api/tenant-admin/exam-dates` |
 | 租户反馈处理 | `GET /api/tenant-admin/feedbacks`、`GET /api/tenant-admin/feedbacks/report`、`POST /api/tenant-admin/feedbacks/status`、`GET /api/tenant-admin/feedbacks/events` |
@@ -1480,6 +1481,7 @@ content_entries
 - 学生批量导入和批量分班接口会返回 `total/successCount/errorCount/results`，前端必须展示逐行错误，不要在浏览器端静默丢弃失败行。学生导入模板不要提供头像 URL 或 `primaryRole` 字段；后端会拒绝这类字段，学生头像统一由个人中心 `avatarPreset` 控制。
 - 学生批量 CRM 推送统一调用 `POST /api/tenant-admin/students/crm-push`，请求包含 `studentUserIds/title/message/followupType/priority/assignedToUserId/classId/dueAt/idempotencyKey`。前端不要直接写 `crm_webhook_queue`，也不要持有 webhook 密钥；后端会校验 `crm:write`、学生范围、班级范围、指派人租户成员和幂等键，并返回逐行 `queueId/followupId/errors`。
 - 学生跟进看板统一调用 `GET /api/tenant-admin/students/followups/report`，不要由前端直接读取 `tenant_student_followups` 或 `crm_webhook_queue` 后自行聚合。该接口支持 `timeRange=7d|30d|90d` 或 `startDate/endDate`、`assignedToUserId`、`followupType`、`classId` 和 `limit`，返回 `summary/crmQueue/byStatus/byType/byPriority/byAssignee/byClass/dailyTrend/overdueItems`；后端会沿用当前账号的租户权限、教师班级范围和手机号脱敏规则。
+- 学习督导自动化统一走后端 `preview -> generate`：先调用 `GET /api/tenant-admin/students/supervision/preview` 预览候选学生和风险原因，再调用 `POST /api/tenant-admin/students/supervision/generate` 幂等生成 `learning` 跟进任务。前端不要直接读取 `answer_records`、`wrong_questions`、`user_word_progress`、`practice_sessions` 或 `tenant_student_followups.metadata` 自行计算风险；后端会统一执行 `students:supervision:read/write` 权限、教师班级范围、学生手机号字段脱敏和审计。
 - 教师可以为范围内学生创建备注和跟进任务，但是否能禁用学生、批量导入、查看手机号由后端权限和字段权限决定；前端只按返回值渲染。
 - H5 自定义域名下要注意缓存隔离，不能把 A 租户主题缓存用到 B 租户。
 
@@ -3145,7 +3147,7 @@ GET /api/ai/school-recommendations/detail?reportId=<reportId>
 - 品牌/主题/域名/公开设置
 - 支付账户/登录 provider/密钥引用
 - 用户与成员权限
-- 班级/教师/学生：`/api/tenant-admin/classes`、`classes/members`、`students`、`teachers`、`students/notes`、`students/followups`、`students/followups/report`、`students/crm-push`
+- 班级/教师/学生：`/api/tenant-admin/classes`、`classes/members`、`students`、`teachers`、`students/notes`、`students/followups`、`students/followups/report`、`students/supervision/preview`、`students/supervision/generate`、`students/crm-push`
 - 角色模板与成员：`GET/PUT /api/tenant-admin/role-templates`、`POST /api/tenant-admin/role-templates/disable`、`GET/PUT /api/tenant-admin/members`、`POST /api/tenant-admin/members/disable`；当前 Taro 租户设置页已提供第一版创建、编辑、停用、权限点、菜单、模块、字段、基础数据范围、成员绑定模板和成员状态配置。
 - 主题模板：`GET /api/tenant-admin/theme-templates`、`GET /api/tenant-admin/theme`、`POST /api/tenant-admin/theme/preview`、`POST /api/tenant-admin/theme/publish`；当前 Taro 租户设置页已提供第一版模板选择、主色/强调色、Logo/分享图、安全草稿预览和发布。
 - 内容入口/分类树/题目集合/练习蓝图

scripts/api-integration-test.js

@@ -9356,6 +9356,96 @@ async function testTenantStudentOperations() {
     'teacher follow-up report must not expose unscoped students',
   );
 
+  const supervisionPreview = await request('/api/tenant-admin/students/supervision/preview', {
+    userId: TENANT_TEACHER_USER_ID,
+    query: {
+      classId: ids.tenantClass,
+      inactivityDays: 1,
+      wrongQuestionThreshold: 1,
+      minAnswers: 1,
+      lowAccuracyThreshold: 0.99,
+      vocabularyDueThreshold: 1,
+      limit: 20,
+    },
+  });
+  assert.equal(supervisionPreview.item?.filters?.scoped, true, 'teacher supervision preview should be scoped');
+  assert.ok(
+    supervisionPreview.item?.candidates?.some(item => item.studentUserId === USER_ID),
+    'supervision preview should include scoped risky student',
+  );
+  assert.ok(
+    !supervisionPreview.item?.candidates?.some(item => item.studentUserId === SECOND_STUDENT_USER_ID),
+    'supervision preview must not expose unscoped student',
+  );
+  const supervisionCandidate = supervisionPreview.item?.candidates?.find(item => item.studentUserId === USER_ID);
+  assert.ok(
+    supervisionCandidate?.reasons?.some(item => ['wrong_backlog', 'low_accuracy', 'vocabulary_due', 'stale_session', 'inactive'].includes(item.code)),
+    'supervision candidate should include rule-based reasons',
+  );
+
+  const generatedSupervision = await request('/api/tenant-admin/students/supervision/generate', {
+    userId: TENANT_TEACHER_USER_ID,
+    method: 'POST',
+    body: {
+      classId: ids.tenantClass,
+      studentUserIds: [USER_ID],
+      batchKey: 'integration-supervision-teacher',
+      rules: {
+        inactivityDays: 1,
+        wrongQuestionThreshold: 1,
+        minAnswers: 1,
+        lowAccuracyThreshold: 0.99,
+        vocabularyDueThreshold: 1,
+      },
+      limit: 5,
+    },
+  });
+  assert.equal(generatedSupervision.successCount, 1, 'supervision generation should create follow-up for scoped student');
+  assert.equal(generatedSupervision.items?.[0]?.studentUserId, USER_ID, 'supervision generation should target requested student');
+
+  const repeatedSupervision = await request('/api/tenant-admin/students/supervision/generate', {
+    userId: TENANT_TEACHER_USER_ID,
+    method: 'POST',
+    body: {
+      classId: ids.tenantClass,
+      studentUserIds: [USER_ID],
+      batchKey: 'integration-supervision-teacher',
+      rules: {
+        inactivityDays: 1,
+        wrongQuestionThreshold: 1,
+        minAnswers: 1,
+        lowAccuracyThreshold: 0.99,
+        vocabularyDueThreshold: 1,
+      },
+      limit: 5,
+    },
+  });
+  assert.equal(
+    repeatedSupervision.items?.[0]?.followupId,
+    generatedSupervision.items?.[0]?.followupId,
+    'supervision generation should be idempotent for the same batch and student',
+  );
+
+  const teacherOtherSupervisionDenied = await request('/api/tenant-admin/students/supervision/generate', {
+    userId: TENANT_TEACHER_USER_ID,
+    method: 'POST',
+    body: {
+      classId: ids.tenantClassOther,
+      studentUserIds: [SECOND_STUDENT_USER_ID],
+      batchKey: 'integration-supervision-denied',
+      rules: { inactivityDays: 1 },
+    },
+    expectStatus: 403,
+  });
+  assert.equal(teacherOtherSupervisionDenied.code, 'CLASS_SCOPE_REQUIRED', 'teacher supervision generation must reject unscoped class');
+
+  const operatorSupervisionDenied = await request('/api/tenant-admin/students/supervision/preview', {
+    userId: TENANT_OPERATOR_USER_ID,
+    query: { limit: 5 },
+    expectStatus: 403,
+  });
+  assert.equal(operatorSupervisionDenied.code, 'TENANT_PERMISSION_REQUIRED', 'operator without supervision permission should be denied');
+
   const teacherOtherFollowupDenied = await request('/api/tenant-admin/students/followups', {
     userId: TENANT_TEACHER_USER_ID,
     method: 'PUT',
@@ -9413,6 +9503,7 @@ async function testTenantStudentOperations() {
   assert.ok(auditLogs.items?.some(item => item.action === 'tenant.student.status_updated'), 'audit logs should include student status update');
   assert.ok(auditLogs.items?.some(item => item.action === 'tenant.student_note.upserted'), 'audit logs should include student note upsert');
   assert.ok(auditLogs.items?.some(item => item.action === 'tenant.student_followup.upserted'), 'audit logs should include student follow-up upsert');
+  assert.ok(auditLogs.items?.some(item => item.action === 'tenant.students.supervision_generated'), 'audit logs should include supervision generation');
 }
 
 async function testReferralAndCrmGrowth() {

supabase/migrations/202606300013_student_supervision_followups.sql

@@ -0,0 +1,13 @@
+create unique index if not exists idx_student_followups_auto_supervision_key
+  on public.tenant_student_followups(tenant_id, (metadata->'autoSupervision'->>'idempotencyKey'))
+  where metadata->'autoSupervision'->>'idempotencyKey' is not null;
+
+create index if not exists idx_student_followups_auto_supervision
+  on public.tenant_student_followups(tenant_id, student_user_id, created_at desc)
+  where metadata->'autoSupervision' is not null;
+
+create index if not exists idx_answer_records_tenant_user_answered
+  on public.answer_records(tenant_id, user_id, answered_at desc);
+
+create index if not exists idx_practice_reports_tenant_user_submitted
+  on public.practice_session_reports(tenant_id, user_id, submitted_at desc);