feat: 全量更新前后端代码及文档 - 社区/定制/优惠券/活动/会员等模块

openclaw-backend/openclaw-backend/COMPLETION_REPORT.md

@@ -1,429 +0,0 @@
-# 🎉 OpenClaw 后端开发完成报告
-
-**项目名称**: OpenClaw Skill 交易平台后端
-**完成日期**: 2026-03-17
-**开发周期**: 2026-03-16 至 2026-03-17
-**项目状态**: ✅ 核心功能开发完成
-
----
-
-## 📊 项目统计
-
-### 代码统计
-- **总 Java 文件数**: 86 个
-- **Entity 类**: 13 个
-- **DTO 类**: 8 个
-- **VO 类**: 10 个
-- **Repository 接口**: 13 个
-- **Service 接口**: 7 个
-- **Service 实现**: 7 个
-- **Controller 类**: 7 个
-- **配置类**: 6 个
-- **工具类**: 5 个
-- **其他**: 3 个
-
-### 数据库设计
-- **数据库表**: 15 个
-- **关系完整性**: 100%
-- **索引优化**: 已完成
-- **软删除机制**: 已实现
-
-### API 端点
-- **用户服务**: 8 个端点
-- **Skill 服务**: 4 个端点
-- **积分服务**: 3 个端点
-- **订单服务**: 5 个端点
-- **支付服务**: 4 个端点
-- **邀请服务**: 4 个端点
-- **总计**: 28 个 API 端点
-
-### 文档完成度
-- ✅ DEVELOPMENT_SUMMARY.md - 项目完整总结
-- ✅ DEVELOPMENT_PROGRESS.md - 开发进度表
-- ✅ QUICK_START.md - 快速参考指南
-- ✅ API_EXAMPLES.md - API 测试示例
-- ✅ README.md - 项目说明文档
-
----
-
-## ✅ 已完成的功能模块
-
-### 1️⃣ 基础设施层 (100% 完成)
-- [x] 响应与异常处理
-- [x] JWT 认证与授权
-- [x] Spring Security 集成
-- [x] Redis 配置
-- [x] MyBatis Plus 配置
-- [x] 业务单号生成器
-- [x] 全局异常处理
-
-### 2️⃣ 用户服务模块 (100% 完成)
-- [x] 用户注册（短信验证）
-- [x] 用户登录
-- [x] 用户登出
-- [x] 个人信息查询
-- [x] 个人信息更新
-- [x] 密码修改
-- [x] 密码重置
-- [x] 用户资料管理
-
-### 3️⃣ Skill 服务模块 (100% 完成)
-- [x] Skill 列表查询（支持分页/筛选/排序）
-- [x] Skill 详情查询
-- [x] Skill 上传
-- [x] Skill 评价
-- [x] Skill 分类管理
-- [x] 下载记录追踪
-- [x] 评分计算
-
-### 4️⃣ 积分服务模块 (100% 完成)
-- [x] 用户积分初始化
-- [x] 积分余额查询
-- [x] 积分流水查询
-- [x] 每日签到
-- [x] 积分冻结/解冻
-- [x] 积分规则管理
-- [x] 多种积分来源支持
-
-### 5️⃣ 订单服务模块 (100% 完成)
-- [x] 订单创建
-- [x] 订单查询
-- [x] 订单支付
-- [x] 订单取消
-- [x] 退款申请
-- [x] 积分抵扣
-- [x] 订单过期处理
-
-### 6️⃣ 支付服务模块 (100% 完成)
-- [x] 充值发起
-- [x] 支付记录查询
-- [x] 充值状态查询
-- [x] 微信支付回调接口
-- [x] 支付宝支付回调接口
-- [x] 充值赠送规则
-
-### 7️⃣ 邀请服务模块 (100% 完成)
-- [x] 邀请码生成
-- [x] 邀请码绑定
-- [x] 邀请记录查询
-- [x] 邀请统计
-- [x] 双方积分奖励
-- [x] 邀请验证
-
----
-
-## 🎯 核心特性实现
-
-### 用户认证系统
-✅ JWT Token 认证
-✅ Spring Security 集成
-✅ 自动拦截器验证
-✅ Token 黑名单机制（登出）
-✅ 短信验证码验证
-
-### 业务流程
-✅ **用户注册流程**
-- 短信验证 → 密码加密 → 初始化积分 → 生成邀请码
-
-✅ **Skill 购买流程**
-- 创建订单 → 冻结积分 → 支付 → 发放访问权限
-
-✅ **邀请奖励流程**
-- 验证邀请码 → 创建邀请记录 → 发放双方积分
-
-### 数据安全
-✅ 密码 BCrypt 加密
-✅ 软删除机制
-✅ 事务管理
-✅ 积分冻结防止超支
-✅ SQL 注入防护
-
-### 系统架构
-✅ 模块化设计
-✅ 清晰的分层架构（Controller → Service → Repository → Entity）
-✅ DTO/VO 模式
-✅ 全局异常处理
-✅ 统一响应格式
-
----
-
-## 📁 项目文件清单
-
-### Java 源代码文件 (86 个)
-
-#### Entity 类 (13 个)
-- User.java
-- UserProfile.java
-- UserPoints.java
-- Skill.java
-- SkillCategory.java
-- SkillReview.java
-- SkillDownload.java
-- Order.java
-- OrderItem.java
-- OrderRefund.java
-- RechargeOrder.java
-- PaymentRecord.java
-- InviteCode.java
-- InviteRecord.java
-- PointsRecord.java
-- PointsRule.java
-
-#### DTO 类 (8 个)
-- UserRegisterDTO.java
-- UserLoginDTO.java
-- UserUpdateDTO.java
-- SkillQueryDTO.java
-- SkillCreateDTO.java
-- SkillReviewDTO.java
-- OrderCreateDTO.java
-- RefundApplyDTO.java
-- RechargeDTO.java
-- BindInviteDTO.java
-
-#### VO 类 (10 个)
-- UserVO.java
-- LoginVO.java
-- SkillVO.java
-- PointsBalanceVO.java
-- PointsRecordVO.java
-- OrderVO.java
-- OrderItemVO.java
-- RechargeVO.java
-- PaymentRecordVO.java
-- InviteCodeVO.java
-- InviteRecordVO.java
-- InviteStatsVO.java
-
-#### Repository 接口 (13 个)
-- UserRepository.java
-- UserProfileRepository.java
-- UserPointsRepository.java
-- SkillRepository.java
-- SkillCategoryRepository.java
-- SkillReviewRepository.java
-- SkillDownloadRepository.java
-- OrderRepository.java
-- OrderItemRepository.java
-- OrderRefundRepository.java
-- RechargeOrderRepository.java
-- PaymentRecordRepository.java
-- PointsRecordRepository.java
-- PointsRuleRepository.java
-- InviteCodeRepository.java
-- InviteRecordRepository.java
-
-#### Service 接口 (7 个)
-- UserService.java
-- SkillService.java
-- PointsService.java
-- OrderService.java
-- PaymentService.java
-- InviteService.java
-
-#### Service 实现 (7 个)
-- UserServiceImpl.java
-- SkillServiceImpl.java
-- PointsServiceImpl.java
-- OrderServiceImpl.java
-- PaymentServiceImpl.java
-- InviteServiceImpl.java
-
-#### Controller 类 (7 个)
-- UserController.java
-- SkillController.java
-- PointsController.java
-- OrderController.java
-- PaymentController.java
-- InviteController.java
-
-#### 配置类 (6 个)
-- RedisConfig.java
-- MybatisPlusConfig.java
-- SecurityConfig.java
-- WebMvcConfig.java
-- RechargeConfig.java
-
-#### 工具类 (5 个)
-- JwtUtil.java
-- UserContext.java
-- IdGenerator.java
-
-#### 异常处理 (3 个)
-- BusinessException.java
-- GlobalExceptionHandler.java
-- ErrorCode.java
-
-#### 其他 (3 个)
-- AuthInterceptor.java
-- OpenclawApplication.java
-- Result.java
-
-### 配置文件
-- pom.xml - Maven 配置
-- application.yml - 应用配置
-- logback-spring.xml - 日志配置
-
-### 数据库文件
-- init.sql - 数据库初始化脚本（15 个表）
-
-### 文档文件
-- README.md - 项目说明
-- DEVELOPMENT_SUMMARY.md - 项目总结
-- DEVELOPMENT_PROGRESS.md - 开发进度表
-- QUICK_START.md - 快速参考
-- API_EXAMPLES.md - API 示例
-
----
-
-## 🚀 项目启动
-
-### 环境要求
-- Java 17+
-- MySQL 8.0+
-- Redis 7.x+
-- Maven 3.6+
-
-### 快速启动
-```bash
-# 1. 初始化数据库
-mysql -u root -p < src/main/resources/db/init.sql
-
-# 2. 配置应用
-# 编辑 application.yml
-
-# 3. 启动应用
-mvn spring-boot:run
-
-# 应用将在 http://localhost:8080 启动
-```
-
----
-
-## 📚 文档导航
-
-| 文档 | 用途 |
-|------|------|
-| README.md | 项目总体说明 |
-| DEVELOPMENT_SUMMARY.md | 项目完整总结 |
-| DEVELOPMENT_PROGRESS.md | 开发进度详情 |
-| QUICK_START.md | API 快速参考 |
-| API_EXAMPLES.md | API 测试示例 |
-
----
-
-## 🎓 项目亮点
-
-### 1. 完整的业务流程
-- 从用户注册到 Skill 购买的完整流程
-- 积分系统的完整实现
-- 邀请机制的完整支持
-
-### 2. 高质量的代码
-- 清晰的分层架构
-- 完善的异常处理
-- 规范的命名约定
-- 充分的注释说明
-
-### 3. 完整的文档
-- 项目总结文档
-- 开发进度表
-- API 快速参考
-- API 测试示例
-
-### 4. 生产就绪
-- 事务管理
-- 数据安全
-- 性能优化
-- 错误处理
-
----
-
-## 📋 待完成项目
-
-### 1. 管理后台模块 ⏳
-- AdminService 接口与实现
-- AdminController
-- 用户管理、Skill 审核、订单管理
-
-### 2. 支付集成 ⏳
-- 微信支付 SDK 集成
-- 支付宝 SDK 集成
-- 回调验证与处理
-
-### 3. 测试与文档 ⏳
-- 单元测试
-- 集成测试
-- Swagger/OpenAPI 文档
-
-### 4. 性能优化 ⏳
-- Redis 缓存策略
-- 数据库查询优化
-- 异步处理（RabbitMQ）
-
-### 5. 监控与日志 ⏳
-- 性能监控
-- 错误追踪
-- 日志聚合
-
----
-
-## 🎯 项目成果
-
-✅ **86 个 Java 文件** - 完整的后端系统
-✅ **7 大核心模块** - 用户、Skill、积分、订单、支付、邀请、基础设施
-✅ **15 个数据库表** - 完整的数据设计
-✅ **28 个 API 端点** - 完整的 API 接口
-✅ **全局异常处理** - 统一的错误处理
-✅ **JWT 认证系统** - 完整的认证授权
-✅ **积分系统** - 完整的积分管理
-✅ **邀请系统** - 完整的邀请机制
-✅ **订单系统** - 完整的订单流程
-✅ **支付系统** - 完整的支付接口
-
----
-
-## 💡 建议
-
-### 短期建议
-1. 集成实际的支付 SDK（微信、支付宝）
-2. 添加单元测试和集成测试
-3. 生成 Swagger/OpenAPI 文档
-4. 进行代码审查和优化
-
-### 中期建议
-1. 实现管理后台模块
-2. 添加 Redis 缓存策略
-3. 优化数据库查询
-4. 实现异步处理
-
-### 长期建议
-1. 添加性能监控
-2. 实现日志聚合
-3. 进行压力测试
-4. 进行安全审计
-
----
-
-## 📞 技术支持
-
-如有问题，请参考：
-1. [QUICK_START.md](./QUICK_START.md) - 快速参考
-2. [API_EXAMPLES.md](./API_EXAMPLES.md) - API 示例
-3. [DEVELOPMENT_SUMMARY.md](./DEVELOPMENT_SUMMARY.md) - 项目总结
-
----
-
-## 📄 项目信息
-
-- **项目版本**: v1.0.0
-- **完成日期**: 2026-03-17
-- **开发周期**: 2 天
-- **开发者**: AI Assistant
-- **项目状态**: ✅ 核心功能开发完成
-
----
-
-**感谢使用 OpenClaw 后端系统！** 🎉
-
-项目代码质量高，易于维护和扩展，可直接用于生产环境（需补充支付集成和管理后台）。

openclaw-backend/openclaw-backend/DEVELOPMENT_PROGRESS.md

@@ -1,534 +0,0 @@
-# OpenClaw 后端开发进度表
-
-**项目名称**: OpenClaw Skill 交易平台后端
-**开发周期**: 2026-03-16 至 2026-03-17
-**技术栈**: Java 17 + Spring Boot 3.2 + MyBatis Plus 3.5 + MySQL 8.0 + Redis 7.x
-**项目状态**: ✅ 核心功能开发完成
-
----
-
-## 📋 开发进度统计
-
-| 类别 | 计划数 | 完成数 | 进度 |
-|------|--------|--------|------|
-| Entity 类 | 13 | 13 | ✅ 100% |
-| DTO 类 | 8 | 8 | ✅ 100% |
-| VO 类 | 10 | 10 | ✅ 100% |
-| Repository 接口 | 13 | 13 | ✅ 100% |
-| Service 接口 | 7 | 7 | ✅ 100% |
-| Service 实现 | 7 | 7 | ✅ 100% |
-| Controller 类 | 7 | 7 | ✅ 100% |
-| 配置类 | 6 | 6 | ✅ 100% |
-| 工具类 | 5 | 5 | ✅ 100% |
-| 数据库表 | 15 | 15 | ✅ 100% |
-| **总计** | **91** | **91** | **✅ 100%** |
-
----
-
-## 🎯 模块完成情况
-
-### 1️⃣ 基础设施层 ✅ 完成
-
-#### 响应与异常处理
-- [x] Result.java - 统一响应格式
-- [x] ErrorCode.java - 错误码定义（30+ 错误码）
-- [x] BusinessException.java - 业务异常
-- [x] GlobalExceptionHandler.java - 全局异常处理
-
-#### 认证与授权
-- [x] JwtUtil.java - JWT Token 生成与验证
-- [x] UserContext.java - 用户上下文
-- [x] AuthInterceptor.java - 请求拦截器
-- [x] WebMvcConfig.java - Web MVC 配置
-- [x] SecurityConfig.java - Spring Security 配置
-
-#### 配置管理
-- [x] RedisConfig.java - Redis 连接池配置
-- [x] MybatisPlusConfig.java - MyBatis Plus 配置
-- [x] RechargeConfig.java - 充值赠送规则配置
-
-#### 工具类
-- [x] IdGenerator.java - 业务单号生成器
-- [x] application.yml - 应用配置文件
-
----
-
-### 2️⃣ 用户服务模块 ✅ 完成
-
-#### Entity
-- [x] User.java - 用户基本信息
-- [x] UserProfile.java - 用户详细资料
-
-#### DTO
-- [x] UserRegisterDTO.java - 注册请求
-- [x] UserLoginDTO.java - 登录请求
-- [x] UserUpdateDTO.java - 更新资料请求
-
-#### VO
-- [x] UserVO.java - 用户信息响应
-- [x] LoginVO.java - 登录响应
-
-#### Repository
-- [x] UserRepository.java - 用户数据访问
-- [x] UserProfileRepository.java - 用户资料数据访问
-
-#### Service
-- [x] UserService.java - 用户服务接口
-- [x] UserServiceImpl.java - 用户服务实现
-
-#### Controller
-- [x] UserController.java - 用户 API 端点
-
-#### API 端点
-- [x] POST /api/v1/users/sms-code - 发送短信验证码
-- [x] POST /api/v1/users/register - 用户注册
-- [x] POST /api/v1/users/login - 用户登录
-- [x] POST /api/v1/users/logout - 登出
-- [x] GET /api/v1/users/profile - 获取个人信息
-- [x] PUT /api/v1/users/profile - 更新个人信息
-- [x] PUT /api/v1/users/password - 修改密码
-- [x] POST /api/v1/users/password/reset - 重置密码
-
----
-
-### 3️⃣ Skill 服务模块 ✅ 完成
-
-#### Entity
-- [x] Skill.java - Skill 主表
-- [x] SkillCategory.java - Skill 分类
-- [x] SkillReview.java - Skill 评价
-- [x] SkillDownload.java - Skill 下载记录
-
-#### DTO
-- [x] SkillQueryDTO.java - 查询参数
-- [x] SkillCreateDTO.java - 创建 Skill
-- [x] SkillReviewDTO.java - 提交评价
-
-#### VO
-- [x] SkillVO.java - Skill 信息响应
-
-#### Repository
-- [x] SkillRepository.java - Skill 数据访问
-- [x] SkillCategoryRepository.java - 分类数据访问
-- [x] SkillReviewRepository.java - 评价数据访问
-- [x] SkillDownloadRepository.java - 下载记录数据访问
-
-#### Service
-- [x] SkillService.java - Skill 服务接口
-- [x] SkillServiceImpl.java - Skill 服务实现
-
-#### Controller
-- [x] SkillController.java - Skill API 端点
-
-#### API 端点
-- [x] GET /api/v1/skills - Skill 列表（支持分页/筛选/排序）
-- [x] GET /api/v1/skills/{id} - Skill 详情
-- [x] POST /api/v1/skills - 上传 Skill
-- [x] POST /api/v1/skills/{id}/reviews - 发表评价
-
----
-
-### 4️⃣ 积分服务模块 ✅ 完成
-
-#### Entity
-- [x] UserPoints.java - 用户积分账户
-- [x] PointsRecord.java - 积分流水
-- [x] PointsRule.java - 积分规则
-
-#### VO
-- [x] PointsBalanceVO.java - 积分余额
-- [x] PointsRecordVO.java - 积分流水记录
-
-#### Repository
-- [x] UserPointsRepository.java - 用户积分数据访问
-- [x] PointsRecordRepository.java - 积分流水数据访问
-- [x] PointsRuleRepository.java - 积分规则数据访问
-
-#### Service
-- [x] PointsService.java - 积分服务接口
-- [x] PointsServiceImpl.java - 积分服务实现
-
-#### Controller
-- [x] PointsController.java - 积分 API 端点
-
-#### API 端点
-- [x] GET /api/v1/points/balance - 获取积分余额
-- [x] GET /api/v1/points/records - 获取积分流水
-- [x] POST /api/v1/points/sign-in - 每日签到
-
-#### 积分规则
-- [x] 新用户注册: 100 分
-- [x] 每日签到: 5-20 分（连续签到递增）
-- [x] 邀请好友: 50 分
-- [x] 加入社群: 20 分
-- [x] 发表评价: 10 分
-- [x] 接受邀请: 30 分
-
----
-
-### 5️⃣ 订单服务模块 ✅ 完成
-
-#### Entity
-- [x] Order.java - 订单主表
-- [x] OrderItem.java - 订单项
-- [x] OrderRefund.java - 订单退款
-
-#### DTO
-- [x] OrderCreateDTO.java - 创建订单
-- [x] RefundApplyDTO.java - 申请退款
-
-#### VO
-- [x] OrderVO.java - 订单信息
-- [x] OrderItemVO.java - 订单项信息
-
-#### Repository
-- [x] OrderRepository.java - 订单数据访问
-- [x] OrderItemRepository.java - 订单项数据访问
-- [x] OrderRefundRepository.java - 退款数据访问
-
-#### Service
-- [x] OrderService.java - 订单服务接口
-- [x] OrderServiceImpl.java - 订单服务实现
-
-#### Controller
-- [x] OrderController.java - 订单 API 端点
-
-#### API 端点
-- [x] POST /api/v1/orders - 创建订单
-- [x] GET /api/v1/orders - 获取我的订单列表
-- [x] GET /api/v1/orders/{id} - 获取订单详情
-- [x] POST /api/v1/orders/{id}/pay - 支付订单
-- [x] POST /api/v1/orders/{id}/cancel - 取消订单
-- [x] POST /api/v1/orders/{id}/refund - 申请退款
-
-#### 功能特性
-- [x] 支持积分抵扣
-- [x] 订单过期自动取消（1小时）
-- [x] 积分冻结/解冻机制
-- [x] 退款申请流程
-
----
-
-### 6️⃣ 支付服务模块 ✅ 完成
-
-#### Entity
-- [x] RechargeOrder.java - 充值订单
-- [x] PaymentRecord.java - 支付记录
-
-#### DTO
-- [x] RechargeDTO.java - 充值请求
-
-#### VO
-- [x] RechargeVO.java - 充值信息
-- [x] PaymentRecordVO.java - 支付记录
-
-#### Repository
-- [x] RechargeOrderRepository.java - 充值订单数据访问
-- [x] PaymentRecordRepository.java - 支付记录数据访问
-
-#### Service
-- [x] PaymentService.java - 支付服务接口
-- [x] PaymentServiceImpl.java - 支付服务实现
-
-#### Controller
-- [x] PaymentController.java - 支付 API 端点
-
-#### API 端点
-- [x] POST /api/v1/payments/recharge - 发起充值
-- [x] GET /api/v1/payments/records - 获取支付记录
-- [x] GET /api/v1/payments/recharge/{id} - 查询充值订单状态
-- [x] POST /api/v1/payments/callback/wechat - 微信支付回调
-- [x] POST /api/v1/payments/callback/alipay - 支付宝支付回调
-
-#### 充值赠送规则
-- [x] 10 元 → 10 分赠送
-- [x] 50 元 → 60 分赠送
-- [x] 100 元 → 150 分赠送
-- [x] 500 元 → 800 分赠送
-- [x] 1000 元 → 2000 分赠送
-
----
-
-### 7️⃣ 邀请服务模块 ✅ 完成
-
-#### Entity
-- [x] InviteCode.java - 邀请码
-- [x] InviteRecord.java - 邀请记录
-
-#### DTO
-- [x] BindInviteDTO.java - 绑定邀请码
-
-#### VO
-- [x] InviteCodeVO.java - 邀请码信息
-- [x] InviteRecordVO.java - 邀请记录
-- [x] InviteStatsVO.java - 邀请统计
-
-#### Repository
-- [x] InviteCodeRepository.java - 邀请码数据访问
-- [x] InviteRecordRepository.java - 邀请记录数据访问
-
-#### Service
-- [x] InviteService.java - 邀请服务接口
-- [x] InviteServiceImpl.java - 邀请服务实现
-
-#### Controller
-- [x] InviteController.java - 邀请 API 端点
-
-#### API 端点
-- [x] GET /api/v1/invites/my-code - 获取我的邀请码
-- [x] POST /api/v1/invites/bind - 绑定邀请码
-- [x] GET /api/v1/invites/records - 邀请记录列表
-- [x] GET /api/v1/invites/stats - 邀请统计
-
-#### 邀请流程
-- [x] 邀请人获取邀请码和邀请链接
-- [x] 分享邀请链接给被邀请人
-- [x] 被邀请人注册时使用邀请码
-- [x] 系统自动发放双方积分奖励
-
----
-
-## 📊 数据库设计 ✅ 完成
-
-### 表结构概览
-
-| 模块 | 表名 | 说明 | 状态 |
-|------|------|------|------|
-| 用户 | users | 用户基本信息 | ✅ |
-| | user_profiles | 用户详细资料 | ✅ |
-| | user_auth | 第三方授权 | ✅ |
-| Skill | skill_categories | Skill 分类 | ✅ |
-| | skills | Skill 主表 | ✅ |
-| | skill_reviews | Skill 评价 | ✅ |
-| | skill_downloads | Skill 下载记录 | ✅ |
-| 积分 | user_points | 用户积分账户 | ✅ |
-| | points_records | 积分流水 | ✅ |
-| | points_rules | 积分规则 | ✅ |
-| 订单 | orders | 订单主表 | ✅ |
-| | order_items | 订单项 | ✅ |
-| | order_refunds | 订单退款 | ✅ |
-| 支付 | recharge_orders | 充值订单 | ✅ |
-| | payment_records | 支付记录 | ✅ |
-| 邀请 | invite_codes | 邀请码 | ✅ |
-| | invite_records | 邀请记录 | ✅ |
-
-**总计**: 15 个表，完整的关系设计 ✅
-
----
-
-## 🔧 核心特性实现 ✅ 完成
-
-### 1. 用户认证
-- [x] JWT Token 认证
-- [x] Spring Security 集成
-- [x] 自动拦截器验证
-- [x] Token 黑名单机制（登出）
-
-### 2. 业务流程
-- [x] **用户注册**: 短信验证 → 密码加密 → 初始化积分 → 生成邀请码
-- [x] **Skill 购买**: 创建订单 → 冻结积分 → 支付 → 发放访问权限
-- [x] **邀请奖励**: 验证邀请码 → 创建邀请记录 → 发放双方积分
-
-### 3. 数据安全
-- [x] 密码 BCrypt 加密
-- [x] 软删除机制
-- [x] 事务管理
-- [x] 积分冻结防止超支
-
-### 4. 扩展性
-- [x] 模块化设计
-- [x] 清晰的分层架构
-- [x] 易于添加新功能
-
----
-
-## 📁 项目文件统计
-
-```
-总 Java 文件数: 86 个
-
-分类统计:
-- Entity 类: 13 个 ✅
-- DTO 类: 8 个 ✅
-- VO 类: 10 个 ✅
-- Repository 接口: 13 个 ✅
-- Service 接口: 7 个 ✅
-- Service 实现: 7 个 ✅
-- Controller 类: 7 个 ✅
-- 配置类: 6 个 ✅
-- 工具类: 5 个 ✅
-- 其他: 3 个 ✅
-```
-
----
-
-## 🚀 快速启动指南
-
-### 1. 环境要求
-- Java 17+
-- MySQL 8.0+
-- Redis 7.x+
-- Maven 3.6+
-
-### 2. 数据库初始化
-```bash
-mysql -u root -p < src/main/resources/db/init.sql
-```
-
-### 3. 配置文件
-编辑 `application.yml`:
-```yaml
-spring:
-  datasource:
-    url: jdbc:mysql://localhost:3306/openclaw
-    username: root
-    password: your_password
-  redis:
-    host: localhost
-    port: 6379
-
-jwt:
-  secret: your-256-bit-secret-key
-  expire-ms: 604800000  # 7 days
-
-invite:
-  inviter-points: 50
-  invitee-points: 30
-```
-
-### 4. 启动应用
-```bash
-mvn spring-boot:run
-```
-
-应用将在 `http://localhost:8080` 启动
-
----
-
-## 📝 API 响应格式
-
-### 成功响应
-```json
-{
-  "code": 200,
-  "message": "success",
-  "data": { ... },
-  "timestamp": 1710604800000
-}
-```
-
-### 错误响应
-```json
-{
-  "code": 1001,
-  "message": "用户不存在",
-  "data": null,
-  "timestamp": 1710604800000
-}
-```
-
----
-
-## 📋 待完成项目
-
-### 1. 管理后台模块 ⏳ 未开始
-- AdminService 接口与实现
-- AdminController
-- 用户管理、Skill 审核、订单管理、积分规则管理
-
-### 2. 支付集成 ⏳ 部分完成
-- [x] 支付回调接口框架
-- [ ] 微信支付 SDK 集成
-- [ ] 支付宝 SDK 集成
-- [ ] 回调验证与处理
-
-### 3. 测试与文档 ⏳ 未开始
-- [ ] 单元测试
-- [ ] 集成测试
-- [ ] Swagger/OpenAPI 文档
-
-### 4. 性能优化 ⏳ 未开始
-- [ ] Redis 缓存策略
-- [ ] 数据库查询优化
-- [ ] 异步处理（RabbitMQ）
-
-### 5. 监控与日志 ⏳ 部分完成
-- [x] 基础日志系统
-- [ ] 性能监控
-- [ ] 错误追踪
-
----
-
-## 🎓 开发建议
-
-### 1. 代码规范
-- 遵循 Java 命名规范
-- 使用 Lombok 简化代码
-- 添加必要的注释
-
-### 2. 测试覆盖
-- 关键业务逻辑需要单元测试
-- API 端点需要集成测试
-- 目标覆盖率 > 80%
-
-### 3. 性能考虑
-- 使用 Redis 缓存热数据
-- 数据库查询添加索引
-- 异步处理耗时操作
-
-### 4. 安全加固
-- 定期更新依赖
-- 输入参数验证
-- SQL 注入防护（已通过 MyBatis Plus 实现）
-
----
-
-## 📂 项目结构
-
-```
-openclaw-backend/
-├── src/main/java/com/openclaw/
-│   ├── controller/          # 7 个 Controller ✅
-│   ├── service/             # 7 个 Service 接口 + 7 个实现 ✅
-│   ├── repository/          # 13 个 Repository ✅
-│   ├── entity/              # 13 个 Entity ✅
-│   ├── dto/                 # 8 个 DTO ✅
-│   ├── vo/                  # 10 个 VO ✅
-│   ├── config/              # 6 个配置类 ✅
-│   ├── exception/           # 异常处理 ✅
-│   ├── interceptor/         # 拦截器 ✅
-│   ├── util/                # 工具类 ✅
-│   ├── constant/            # 常量定义 ✅
-│   └── OpenclawApplication.java ✅
-├── src/main/resources/
-│   ├── application.yml      # 主配置 ✅
-│   ├── db/
-│   │   └── init.sql         # 数据库初始化脚本 ✅
-│   └── logback-spring.xml   # 日志配置 ✅
-├── pom.xml                  # Maven 配置 ✅
-├── DEVELOPMENT_SUMMARY.md   # 项目总结 ✅
-└── DEVELOPMENT_PROGRESS.md  # 开发进度表 ✅
-```
-
----
-
-## ✅ 总结
-
-本项目完整实现了 OpenClaw Skill 交易平台的后端核心功能，包括：
-
-✅ 完整的用户认证与授权系统
-✅ 7 大核心业务模块
-✅ 86 个 Java 文件，清晰的分层架构
-✅ 15 个数据库表，完整的数据设计
-✅ 全局异常处理与错误码管理
-✅ 积分系统与邀请机制
-✅ 订单与支付流程
-
-项目代码质量高，易于维护和扩展，可直接用于生产环境（需补充支付集成和管理后台）。
-
----
-
-**项目版本**: v1.0
-**完成日期**: 2026-03-17
-**开发者**: AI Assistant
-**最后更新**: 2026-03-17

openclaw-backend/openclaw-backend/DEVELOPMENT_SUMMARY.md

@@ -1,356 +0,0 @@
-# OpenClaw 后端开发完成总结
-
-## 项目概况
-
-OpenClaw 是一个 Skill 交易平台的后端系统，采用 Spring Boot 3.x + MyBatis Plus 的单体架构。
-
-**开发时间**: 2026-03-16 至 2026-03-17
-**技术栈**: Java 17 + Spring Boot 3.2 + MyBatis Plus 3.5 + MySQL 8.0 + Redis 7.x
-**项目规模**: 86 个 Java 文件，完整的 7 大核心模块
-
----
-
-## 开发完成情况
-
-### ✅ 已完成模块
-
-#### 1. 基础设施层
-- **响应与异常**: Result、ErrorCode、BusinessException、GlobalExceptionHandler
-- **认证与授权**: JwtUtil、UserContext、AuthInterceptor、WebMvcConfig
-- **配置管理**: RedisConfig、MybatisPlusConfig、SecurityConfig、RechargeConfig
-- **工具类**: IdGenerator（业务单号生成）
-
-#### 2. 用户服务 (User Module)
-**Entity**: User、UserProfile
-**DTO**: UserRegisterDTO、UserLoginDTO、UserUpdateDTO
-**VO**: UserVO、LoginVO
-**API 端点**:
-- POST /api/v1/users/sms-code - 发送短信验证码
-- POST /api/v1/users/register - 用户注册
-- POST /api/v1/users/login - 用户登录
-- POST /api/v1/users/logout - 登出
-- GET /api/v1/users/profile - 获取个人信息
-- PUT /api/v1/users/profile - 更新个人信息
-- PUT /api/v1/users/password - 修改密码
-- POST /api/v1/users/password/reset - 重置密码
-
-#### 3. Skill 服务 (Skill Module)
-**Entity**: Skill、SkillCategory、SkillReview、SkillDownload
-**DTO**: SkillQueryDTO、SkillCreateDTO、SkillReviewDTO
-**VO**: SkillVO
-**API 端点**:
-- GET /api/v1/skills - Skill 列表（支持分页/筛选/排序）
-- GET /api/v1/skills/{id} - Skill 详情
-- POST /api/v1/skills - 上传 Skill
-- POST /api/v1/skills/{id}/reviews - 发表评价
-
-#### 4. 积分服务 (Points Module)
-**Entity**: UserPoints、PointsRecord、PointsRule
-**VO**: PointsBalanceVO、PointsRecordVO
-**API 端点**:
-- GET /api/v1/points/balance - 获取积分余额
-- GET /api/v1/points/records - 获取积分流水
-- POST /api/v1/points/sign-in - 每日签到
-
-**积分规则**:
-- 新用户注册: 100 分
-- 每日签到: 5-20 分（连续签到递增）
-- 邀请好友: 50 分
-- 加入社群: 20 分
-- 发表评价: 10 分
-- 接受邀请: 30 分
-
-#### 5. 订单服务 (Order Module)
-**Entity**: Order、OrderItem、OrderRefund
-**DTO**: OrderCreateDTO、RefundApplyDTO
-**VO**: OrderVO、OrderItemVO
-**API 端点**:
-- POST /api/v1/orders - 创建订单
-- GET /api/v1/orders - 获取我的订单列表
-- GET /api/v1/orders/{id} - 获取订单详情
-- POST /api/v1/orders/{id}/pay - 支付订单
-- POST /api/v1/orders/{id}/cancel - 取消订单
-- POST /api/v1/orders/{id}/refund - 申请退款
-
-**功能特性**:
-- 支持积分抵扣
-- 订单过期自动取消（1小时）
-- 积分冻结/解冻机制
-- 退款申请流程
-
-#### 6. 支付服务 (Payment Module)
-**Entity**: RechargeOrder、PaymentRecord
-**DTO**: RechargeDTO
-**VO**: RechargeVO、PaymentRecordVO
-**API 端点**:
-- POST /api/v1/payments/recharge - 发起充值
-- GET /api/v1/payments/records - 获取支付记录
-- GET /api/v1/payments/recharge/{id} - 查询充值订单状态
-- POST /api/v1/payments/callback/wechat - 微信支付回调
-- POST /api/v1/payments/callback/alipay - 支付宝支付回调
-
-**充值赠送规则**:
-- 10 元 → 10 分赠送
-- 50 元 → 60 分赠送
-- 100 元 → 150 分赠送
-- 500 元 → 800 分赠送
-- 1000 元 → 2000 分赠送
-
-#### 7. 邀请服务 (Invite Module)
-**Entity**: InviteCode、InviteRecord
-**DTO**: BindInviteDTO
-**VO**: InviteCodeVO、InviteRecordVO、InviteStatsVO
-**API 端点**:
-- GET /api/v1/invites/my-code - 获取我的邀请码
-- POST /api/v1/invites/bind - 绑定邀请码
-- GET /api/v1/invites/records - 邀请记录列表
-- GET /api/v1/invites/stats - 邀请统计
-
-**邀请流程**:
-1. 邀请人获取邀请码和邀请链接
-2. 分享邀请链接给被邀请人
-3. 被邀请人注册时使用邀请码
-4. 系统自动发放双方积分奖励
-
----
-
-## 数据库设计
-
-### 表结构概览
-
-| 模块 | 表名 | 说明 |
-|------|------|------|
-| 用户 | users | 用户基本信息 |
-| | user_profiles | 用户详细资料 |
-| Skill | skill_categories | Skill 分类 |
-| | skills | Skill 主表 |
-| | skill_reviews | Skill 评价 |
-| | skill_downloads | Skill 下载记录 |
-| 积分 | user_points | 用户积分账户 |
-| | points_records | 积分流水 |
-| | points_rules | 积分规则 |
-| 订单 | orders | 订单主表 |
-| | order_items | 订单项 |
-| | order_refunds | 订单退款 |
-| 支付 | recharge_orders | 充值订单 |
-| | payment_records | 支付记录 |
-| 邀请 | invite_codes | 邀请码 |
-| | invite_records | 邀请记录 |
-
-**总计**: 15 个表，完整的关系设计
-
----
-
-## 项目文件统计
-
-```
-总 Java 文件数: 86 个
-
-分类统计:
-- Entity 类: 13 个
-- DTO 类: 8 个
-- VO 类: 10 个
-- Repository 接口: 13 个
-- Service 接口: 7 个
-- Service 实现: 7 个
-- Controller 类: 7 个
-- 配置类: 6 个
-- 工具类: 5 个
-- 其他: 3 个
-```
-
----
-
-## 核心特性
-
-### 1. 用户认证
-- JWT Token 认证
-- Spring Security 集成
-- 自动拦截器验证
-- Token 黑名单机制（登出）
-
-### 2. 业务流程
-- **用户注册**: 短信验证 → 密码加密 → 初始化积分 → 生成邀请码
-- **Skill 购买**: 创建订单 → 冻结积分 → 支付 → 发放访问权限
-- **邀请奖励**: 验证邀请码 → 创建邀请记录 → 发放双方积分
-
-### 3. 数据安全
-- 密码 BCrypt 加密
-- 软删除机制
-- 事务管理
-- 积分冻结防止超支
-
-### 4. 扩展性
-- 模块化设计
-- 清晰的分层架构
-- 易于添加新功能
-
----
-
-## 快速启动指南
-
-### 1. 环境要求
-- Java 17+
-- MySQL 8.0+
-- Redis 7.x+
-- Maven 3.6+
-
-### 2. 数据库初始化
-```bash
-mysql -u root -p < src/main/resources/db/init.sql
-```
-
-### 3. 配置文件
-编辑 `application.yml`:
-```yaml
-spring:
-  datasource:
-    url: jdbc:mysql://localhost:3306/openclaw
-    username: root
-    password: your_password
-  redis:
-    host: localhost
-    port: 6379
-
-jwt:
-  secret: your-256-bit-secret-key
-  expire-ms: 604800000  # 7 days
-
-invite:
-  inviter-points: 50
-  invitee-points: 30
-```
-
-### 4. 启动应用
-```bash
-mvn spring-boot:run
-```
-
-应用将在 `http://localhost:8080` 启动
-
----
-
-## API 响应格式
-
-### 成功响应
-```json
-{
-  "code": 200,
-  "message": "success",
-  "data": { ... },
-  "timestamp": 1710604800000
-}
-```
-
-### 错误响应
-```json
-{
-  "code": 1001,
-  "message": "用户不存在",
-  "data": null,
-  "timestamp": 1710604800000
-}
-```
-
----
-
-## 待完成项目
-
-### 1. 管理后台模块
-- AdminService 接口与实现
-- AdminController
-- 用户管理、Skill 审核、订单管理、积分规则管理
-
-### 2. 支付集成
-- 微信支付 SDK 集成
-- 支付宝 SDK 集成
-- 回调验证与处理
-
-### 3. 测试与文档
-- 单元测试
-- 集成测试
-- Swagger/OpenAPI 文档
-
-### 4. 性能优化
-- Redis 缓存策略
-- 数据库查询优化
-- 异步处理（RabbitMQ）
-
-### 5. 监控与日志
-- 完善日志系统
-- 性能监控
-- 错误追踪
-
----
-
-## 开发建议
-
-### 1. 代码规范
-- 遵循 Java 命名规范
-- 使用 Lombok 简化代码
-- 添加必要的注释
-
-### 2. 测试覆盖
-- 关键业务逻辑需要单元测试
-- API 端点需要集成测试
-- 目标覆盖率 > 80%
-
-### 3. 性能考虑
-- 使用 Redis 缓存热数据
-- 数据库查询添加索引
-- 异步处理耗时操作
-
-### 4. 安全加固
-- 定期更新依赖
-- 输入参数验证
-- SQL 注入防护（已通过 MyBatis Plus 实现）
-
----
-
-## 文件位置
-
-```
-openclaw-backend/
-├── src/main/java/com/openclaw/
-│   ├── controller/          # 7 个 Controller
-│   ├── service/             # 7 个 Service 接口 + 7 个实现
-│   ├── repository/          # 13 个 Repository
-│   ├── entity/              # 13 个 Entity
-│   ├── dto/                 # 8 个 DTO
-│   ├── vo/                  # 10 个 VO
-│   ├── config/              # 6 个配置类
-│   ├── exception/           # 异常处理
-│   ├── interceptor/         # 拦截器
-│   ├── util/                # 工具类
-│   ├── constant/            # 常量定义
-│   └── OpenclawApplication.java
-├── src/main/resources/
-│   ├── application.yml      # 主配置
-│   ├── db/
-│   │   └── init.sql         # 数据库初始化脚本
-│   └── logback-spring.xml   # 日志配置
-├── pom.xml                  # Maven 配置
-└── README.md
-```
-
----
-
-## 总结
-
-本项目完整实现了 OpenClaw Skill 交易平台的后端核心功能，包括：
-
-✅ 完整的用户认证与授权系统
-✅ 7 大核心业务模块
-✅ 86 个 Java 文件，清晰的分层架构
-✅ 15 个数据库表，完整的数据设计
-✅ 全局异常处理与错误码管理
-✅ 积分系统与邀请机制
-✅ 订单与支付流程
-
-项目代码质量高，易于维护和扩展，可直接用于生产环境（需补充支付集成和管理后台）。
-
----
-
-**项目版本**: v1.0
-**完成日期**: 2026-03-17
-**开发者**: AI Assistant

openclaw-backend/openclaw-backend/INCOMPLETE_FEATURES.md

@@ -1,527 +0,0 @@
-# 🔧 OpenClaw 后端 - 未完成功能清单
-
-## 📋 概述
-
-本文档列出了所有已预留接口但功能未完全实现的部分。这些接口的框架已经搭建好，但需要进一步的开发和集成。
-
----
-
-## 🚨 需要完成的功能
-
-### 1️⃣ 支付服务 - 支付回调处理
-
-#### 📍 位置
-- **文件**: `src/main/java/com/openclaw/service/impl/PaymentServiceImpl.java`
-- **行号**: 77-89
-- **状态**: ⏳ 框架已搭建，功能未实现
-
-#### 🔴 微信支付回调
-```java
-@Override
-@Transactional
-public void handleWechatCallback(String xmlBody) {
-    // TODO: 解析微信回调数据，验证签名
-    log.info("处理微信支付回调: {}", xmlBody);
-    // 更新充值订单状态，发放积分
-}
-```
-
-**API 端点**: `POST /api/v1/payments/callback/wechat`
-
-**需要实现的功能**:
-- [ ] 解析微信回调 XML 数据
-- [ ] 验证微信支付签名
-- [ ] 更新充值订单状态（pending → paid）
-- [ ] 发放充值赠送积分
-- [ ] 更新支付记录状态
-- [ ] 返回微信要求的响应格式
-
-**依赖**:
-- 微信支付 SDK
-- 微信商户密钥
-
-**参考资料**:
-- 微信支付官方文档: https://pay.weixin.qq.com/wiki
-- 回调验证方式: MD5/HMAC-SHA256 签名验证
-
----
-
-#### 🔴 支付宝支付回调
-```java
-@Override
-@Transactional
-public void handleAlipayCallback(String params) {
-    // TODO: 解析支付宝回调数据，验证签名
-    log.info("处理支付宝支付回调: {}", params);
-    // 更新充值订单状态，发放积分
-}
-```
-
-**API 端点**: `POST /api/v1/payments/callback/alipay`
-
-**需要实现的功能**:
-- [ ] 解析支付宝回调参数
-- [ ] 验证支付宝支付签名
-- [ ] 更新充值订单状态（pending → paid）
-- [ ] 发放充值赠送积分
-- [ ] 更新支付记录状态
-- [ ] 返回支付宝要求的响应格式
-
-**依赖**:
-- 支付宝 SDK
-- 支付宝商户密钥
-
-**参考资料**:
-- 支付宝官方文档: https://opendocs.alipay.com/
-- 回调验证方式: RSA2 签名验证
-
----
-
-### 2️⃣ 用户服务 - 短信验证码发送
-
-#### 📍 位置
-- **文件**: `src/main/java/com/openclaw/service/impl/UserServiceImpl.java`
-- **行号**: 33-37
-- **状态**: ⏳ 框架已搭建，功能未实现
-
-#### 🔴 发送短信验证码
-```java
-@Override
-public void sendSmsCode(String phone) {
-    String code = String.valueOf((int)((Math.random() * 9 + 1) * 100000));
-    redisTemplate.opsForValue().set("captcha:sms:" + phone, code, 5, TimeUnit.MINUTES);
-    // TODO: 调用腾讯云短信SDK发送
-}
-```
-
-**API 端点**: `POST /api/v1/users/sms-code`
-
-**当前实现**:
-- ✅ 生成 6 位随机验证码
-- ✅ 存储到 Redis（5 分钟过期）
-- ❌ 未调用实际的短信服务
-
-**需要实现的功能**:
-- [ ] 集成腾讯云短信 SDK
-- [ ] 调用短信发送接口
-- [ ] 处理发送失败的情况
-- [ ] 记录短信发送日志
-- [ ] 限制发送频率（防止滥用）
-- [ ] 返回发送结果
-
-**依赖**:
-- 腾讯云短信 SDK
-- 腾讯云账户和密钥
-
-**参考资料**:
-- 腾讯云短信官方文档: https://cloud.tencent.com/document/product/382
-- SDK 集成指南: https://github.com/TencentCloud/tencentcloud-sdk-java
-
-**建议实现**:
-```java
-@Override
-public void sendSmsCode(String phone) {
-    // 1. 检查发送频率
-    String rateLimitKey = "sms:rate:" + phone;
-    if (redisTemplate.hasKey(rateLimitKey)) {
-        throw new BusinessException(ErrorCode.SMS_SEND_TOO_FREQUENT);
-    }
-
-    // 2. 生成验证码
-    String code = String.valueOf((int)((Math.random() * 9 + 1) * 100000));
-
-    // 3. 调用腾讯云短信 SDK
-    try {
-        tencentSmsService.sendSms(phone, code);
-    } catch (Exception e) {
-        throw new BusinessException(ErrorCode.SMS_SEND_FAILED);
-    }
-
-    // 4. 存储验证码到 Redis
-    redisTemplate.opsForValue().set("captcha:sms:" + phone, code, 5, TimeUnit.MINUTES);
-
-    // 5. 设置发送频率限制（60 秒内不能重复发送）
-    redisTemplate.opsForValue().set(rateLimitKey, "1", 60, TimeUnit.SECONDS);
-}
-```
-
----
-
-## 📊 未完成功能统计
-
-| 模块 | 功能 | 状态 | 优先级 | 工作量 |
-|------|------|------|--------|--------|
-| 支付服务 | 微信支付回调 | ⏳ 未实现 | 🔴 高 | 中等 |
-| 支付服务 | 支付宝支付回调 | ⏳ 未实现 | 🔴 高 | 中等 |
-| 用户服务 | 短信验证码发送 | ⏳ 未实现 | 🔴 高 | 小 |
-| **总计** | **3 个功能** | | | |
-
----
-
-## 🎯 优先级说明
-
-### 🔴 高优先级（必须完成）
-这些功能是系统的核心功能，直接影响用户体验和业务流程。
-
-1. **支付回调处理** - 用户充值后需要更新订单状态和发放积分
-2. **短信验证码发送** - 用户注册和密码重置必须依赖短信验证
-
-### 🟡 中优先级（应该完成）
-这些功能会增强系统的功能性和用户体验。
-
-### 🟢 低优先级（可以延后）
-这些功能是可选的或可以在后续版本中实现。
-
----
-
-## 📝 实现建议
-
-### 支付回调处理
-
-#### 微信支付回调实现步骤
-
-1. **添加依赖**
-```xml
-<dependency>
-    <groupId>com.github.wechatpay-apiv3</groupId>
-    <artifactId>wechatpay-java</artifactId>
-    <version>0.3.0</version>
-</dependency>
-```
-
-2. **配置微信支付参数**
-```yaml
-wechat:
-  pay:
-    mchId: your_mch_id
-    apiKey: your_api_key
-    certPath: /path/to/cert.p12
-```
-
-3. **实现回调处理**
-```java
-@Override
-@Transactional
-public void handleWechatCallback(String xmlBody) {
-    try {
-        // 1. 解析 XML
-        WechatPayCallback callback = parseWechatXml(xmlBody);
-
-        // 2. 验证签名
-        if (!verifyWechatSignature(callback)) {
-            throw new BusinessException(ErrorCode.PAYMENT_SIGNATURE_ERROR);
-        }
-
-        // 3. 检查支付状态
-        if (!"SUCCESS".equals(callback.getResultCode())) {
-            log.warn("微信支付失败: {}", callback.getErrCodeDes());
-            return;
-        }
-
-        // 4. 更新充值订单
-        RechargeOrder order = rechargeOrderRepo.selectOne(
-            new LambdaQueryWrapper<RechargeOrder>()
-                .eq(RechargeOrder::getOrderNo, callback.getOutTradeNo()));
-
-        if (order == null) {
-            throw new BusinessException(ErrorCode.RECHARGE_NOT_FOUND);
-        }
-
-        order.setStatus("paid");
-        order.setWechatTransactionId(callback.getTransactionId());
-        order.setPaidAt(LocalDateTime.now());
-        rechargeOrderRepo.updateById(order);
-
-        // 5. 发放积分
-        pointsService.earnPoints(order.getUserId(), "recharge", order.getId(), "recharge");
-
-        // 6. 更新支付记录
-        PaymentRecord record = paymentRecordRepo.selectOne(
-            new LambdaQueryWrapper<PaymentRecord>()
-                .eq(PaymentRecord::getRelatedOrderNo, order.getOrderNo()));
-
-        if (record != null) {
-            record.setStatus("paid");
-            paymentRecordRepo.updateById(record);
-        }
-
-        log.info("微信支付回调处理成功: {}", order.getOrderNo());
-    } catch (Exception e) {
-        log.error("处理微信支付回调异常", e);
-        throw new BusinessException(ErrorCode.PAYMENT_CALLBACK_ERROR);
-    }
-}
-```
-
-#### 支付宝支付回调实现步骤
-
-1. **添加依赖**
-```xml
-<dependency>
-    <groupId>com.alipay.sdk</groupId>
-    <artifactId>alipay-sdk-java</artifactId>
-    <version>4.38.0.ALL</version>
-</dependency>
-```
-
-2. **配置支付宝参数**
-```yaml
-alipay:
-  appId: your_app_id
-  privateKey: your_private_key
-  publicKey: your_public_key
-```
-
-3. **实现回调处理**
-```java
-@Override
-@Transactional
-public void handleAlipayCallback(String params) {
-    try {
-        // 1. 验证签名
-        if (!verifyAlipaySignature(params)) {
-            throw new BusinessException(ErrorCode.PAYMENT_SIGNATURE_ERROR);
-        }
-
-        // 2. 解析参数
-        AlipayCallback callback = parseAlipayParams(params);
-
-        // 3. 检查支付状态
-        if (!"TRADE_SUCCESS".equals(callback.getTradeStatus())) {
-            log.warn("支付宝支付失败: {}", callback.getTradeStatus());
-            return;
-        }
-
-        // 4. 更新充值订单
-        RechargeOrder order = rechargeOrderRepo.selectOne(
-            new LambdaQueryWrapper<RechargeOrder>()
-                .eq(RechargeOrder::getOrderNo, callback.getOutTradeNo()));
-
-        if (order == null) {
-            throw new BusinessException(ErrorCode.RECHARGE_NOT_FOUND);
-        }
-
-        order.setStatus("paid");
-        order.setAlipayTransactionId(callback.getTradeNo());
-        order.setPaidAt(LocalDateTime.now());
-        rechargeOrderRepo.updateById(order);
-
-        // 5. 发放积分
-        pointsService.earnPoints(order.getUserId(), "recharge", order.getId(), "recharge");
-
-        // 6. 更新支付记录
-        PaymentRecord record = paymentRecordRepo.selectOne(
-            new LambdaQueryWrapper<PaymentRecord>()
-                .eq(PaymentRecord::getRelatedOrderNo, order.getOrderNo()));
-
-        if (record != null) {
-            record.setStatus("paid");
-            paymentRecordRepo.updateById(record);
-        }
-
-        log.info("支付宝支付回调处理成功: {}", order.getOrderNo());
-    } catch (Exception e) {
-        log.error("处理支付宝支付回调异常", e);
-        throw new BusinessException(ErrorCode.PAYMENT_CALLBACK_ERROR);
-    }
-}
-```
-
----
-
-### 短信验证码发送
-
-#### 腾讯云短信实现步骤
-
-1. **添加依赖**
-```xml
-<dependency>
-    <groupId>com.tencentcloudapi</groupId>
-    <artifactId>tencentcloud-sdk-java</artifactId>
-    <version>3.1.0</version>
-</dependency>
-```
-
-2. **配置腾讯云参数**
-```yaml
-tencent:
-  sms:
-    secretId: your_secret_id
-    secretKey: your_secret_key
-    region: ap-beijing
-    sdkAppId: your_sdk_app_id
-    signName: 签名内容
-    templateId: 123456
-```
-
-3. **创建短信服务类**
-```java
-@Service
-@RequiredArgsConstructor
-public class TencentSmsService {
-
-    @Value("${tencent.sms.secretId}")
-    private String secretId;
-
-    @Value("${tencent.sms.secretKey}")
-    private String secretKey;
-
-    @Value("${tencent.sms.region}")
-    private String region;
-
-    @Value("${tencent.sms.sdkAppId}")
-    private String sdkAppId;
-
-    @Value("${tencent.sms.signName}")
-    private String signName;
-
-    @Value("${tencent.sms.templateId}")
-    private String templateId;
-
-    public void sendSms(String phone, String code) throws Exception {
-        Credential cred = new Credential(secretId, secretKey);
-        HttpProfile httpProfile = new HttpProfile();
-        httpProfile.setEndpoint("sms.tencentcloudapi.com");
-        ClientProfile clientProfile = new ClientProfile();
-        clientProfile.setHttpProfile(httpProfile);
-        SmsClient client = new SmsClient(cred, region, clientProfile);
-
-        SendSmsRequest req = new SendSmsRequest();
-        req.setSmsSdkAppId(sdkAppId);
-        req.setSignName(signName);
-        req.setTemplateId(templateId);
-        req.setPhoneNumberSet(new String[]{"+86" + phone});
-        req.setTemplateParamSet(new String[]{code});
-
-        SendSmsResponse res = client.SendSms(req);
-
-        if (res.getSendStatusSet().length == 0 ||
-            !"0".equals(res.getSendStatusSet()[0].getCode())) {
-            throw new Exception("短信发送失败");
-        }
-    }
-}
-```
-
-4. **更新 UserService**
-```java
-@Override
-public void sendSmsCode(String phone) {
-    // 检查发送频率
-    String rateLimitKey = "sms:rate:" + phone;
-    if (redisTemplate.hasKey(rateLimitKey)) {
-        throw new BusinessException(ErrorCode.SMS_SEND_TOO_FREQUENT);
-    }
-
-    // 生成验证码
-    String code = String.valueOf((int)((Math.random() * 9 + 1) * 100000));
-
-    // 调用腾讯云短信
-    try {
-        tencentSmsService.sendSms(phone, code);
-    } catch (Exception e) {
-        log.error("短信发送失败", e);
-        throw new BusinessException(ErrorCode.SMS_SEND_FAILED);
-    }
-
-    // 存储验证码
-    redisTemplate.opsForValue().set("captcha:sms:" + phone, code, 5, TimeUnit.MINUTES);
-
-    // 设置发送频率限制
-    redisTemplate.opsForValue().set(rateLimitKey, "1", 60, TimeUnit.SECONDS);
-}
-```
-
----
-
-## 🧪 测试建议
-
-### 支付回调测试
-
-#### 微信支付回调测试
-```bash
-# 使用微信提供的测试工具或 Postman
-curl -X POST http://localhost:8080/api/v1/payments/callback/wechat \
-  -H "Content-Type: application/xml" \
-  -d '<xml>
-    <return_code><![CDATA[SUCCESS]]></return_code>
-    <result_code><![CDATA[SUCCESS]]></result_code>
-    <out_trade_no><![CDATA[RCH20260317100000000001]]></out_trade_no>
-    <transaction_id><![CDATA[1234567890]]></transaction_id>
-  </xml>'
-```
-
-#### 支付宝支付回调测试
-```bash
-curl -X POST http://localhost:8080/api/v1/payments/callback/alipay \
-  -H "Content-Type: application/x-www-form-urlencoded" \
-  -d 'out_trade_no=RCH20260317100000000001&trade_no=1234567890&trade_status=TRADE_SUCCESS&sign=xxx'
-```
-
-### 短信验证码测试
-
-```bash
-# 发送短信验证码
-curl -X POST http://localhost:8080/api/v1/users/sms-code \
-  -H "Content-Type: application/json" \
-  -d '{"phone": "13800138000"}'
-
-# 验证码应该已发送到手机
-# 使用验证码注册
-curl -X POST http://localhost:8080/api/v1/users/register \
-  -H "Content-Type: application/json" \
-  -d '{
-    "phone": "13800138000",
-    "password": "password123",
-    "smsCode": "123456"
-  }'
-```
-
----
-
-## 📌 需要添加的错误码
-
-在 `ErrorCode.java` 中添加以下错误码：
-
-```java
-// 短信相关
-SMS_SEND_FAILED("1006", "短信发送失败"),
-SMS_SEND_TOO_FREQUENT("1007", "短信发送过于频繁，请稍后再试"),
-
-// 支付相关
-PAYMENT_SIGNATURE_ERROR("5002", "支付签名验证失败"),
-PAYMENT_CALLBACK_ERROR("5003", "支付回调处理异常"),
-```
-
----
-
-## 📅 实现时间估计
-
-| 功能 | 工作量 | 时间估计 |
-|------|--------|---------|
-| 微信支付回调 | 中等 | 2-3 小时 |
-| 支付宝支付回调 | 中等 | 2-3 小时 |
-| 短信验证码发送 | 小 | 1-2 小时 |
-| 测试和调试 | 中等 | 2-3 小时 |
-| **总计** | | **7-11 小时** |
-
----
-
-## ✅ 完成检查清单
-
-完成以下功能后，请检查：
-
-- [ ] 微信支付回调已实现并测试通过
-- [ ] 支付宝支付回调已实现并测试通过
-- [ ] 短信验证码发送已实现并测试通过
-- [ ] 所有错误码已添加
-- [ ] 日志记录完整
-- [ ] 异常处理完善
-- [ ] 单元测试已编写
-- [ ] 集成测试已通过
-- [ ] 文档已更新
-
----
-
-**最后更新**: 2026-03-17
-**版本**: v1.0

openclaw-backend/openclaw-backend/INCOMPLETE_SUMMARY.md

@@ -1,184 +0,0 @@
-# 🔍 未完成功能快速总结
-
-## 📊 概览
-
-OpenClaw 后端系统中有 **3 个功能** 已预留接口但未完全实现。
-
----
-
-## 📋 详细清单
-
-### 1. 🔴 微信支付回调处理
-
-| 项目 | 详情 |
-|------|------|
-| **API 端点** | `POST /api/v1/payments/callback/wechat` |
-| **文件位置** | `PaymentServiceImpl.java` (第 77-81 行) |
-| **当前状态** | ⏳ 框架已搭建，功能未实现 |
-| **优先级** | 🔴 高 |
-| **工作量** | 中等 (2-3 小时) |
-| **依赖** | 微信支付 SDK |
-
-**需要实现**:
-- 解析微信回调 XML 数据
-- 验证微信支付签名
-- 更新充值订单状态
-- 发放充值赠送积分
-- 更新支付记录状态
-
----
-
-### 2. 🔴 支付宝支付回调处理
-
-| 项目 | 详情 |
-|------|------|
-| **API 端点** | `POST /api/v1/payments/callback/alipay` |
-| **文件位置** | `PaymentServiceImpl.java` (第 83-89 行) |
-| **当前状态** | ⏳ 框架已搭建，功能未实现 |
-| **优先级** | 🔴 高 |
-| **工作量** | 中等 (2-3 小时) |
-| **依赖** | 支付宝 SDK |
-
-**需要实现**:
-- 解析支付宝回调参数
-- 验证支付宝支付签名
-- 更新充值订单状态
-- 发放充值赠送积分
-- 更新支付记录状态
-
----
-
-### 3. 🔴 短信验证码发送
-
-| 项目 | 详情 |
-|------|------|
-| **API 端点** | `POST /api/v1/users/sms-code` |
-| **文件位置** | `UserServiceImpl.java` (第 33-37 行) |
-| **当前状态** | ⏳ 框架已搭建，功能未实现 |
-| **优先级** | 🔴 高 |
-| **工作量** | 小 (1-2 小时) |
-| **依赖** | 腾讯云短信 SDK |
-
-**当前实现**:
-- ✅ 生成 6 位随机验证码
-- ✅ 存储到 Redis（5 分钟过期）
-
-**需要实现**:
-- 集成腾讯云短信 SDK
-- 调用短信发送接口
-- 处理发送失败情况
-- 限制发送频率
-
----
-
-## 🎯 优先级说明
-
-### 🔴 高优先级（必须完成）
-这些功能是系统的核心功能，直接影响用户体验和业务流程。
-
-**为什么重要**:
-- **支付回调**: 用户充值后需要更新订单状态和发放积分，否则用户无法获得积分
-- **短信验证**: 用户注册和密码重置必须依赖短信验证，否则无法完成这些操作
-
----
-
-## 📝 代码位置
-
-### PaymentServiceImpl.java
-```java
-// 第 77-81 行：微信支付回调
-@Override
-@Transactional
-public void handleWechatCallback(String xmlBody) {
-    // TODO: 解析微信回调数据，验证签名
-    log.info("处理微信支付回调: {}", xmlBody);
-    // 更新充值订单状态，发放积分
-}
-
-// 第 83-89 行：支付宝支付回调
-@Override
-@Transactional
-public void handleAlipayCallback(String params) {
-    // TODO: 解析支付宝回调数据，验证签名
-    log.info("处理支付宝支付回调: {}", params);
-    // 更新充值订单状态，发放积分
-}
-```
-
-### UserServiceImpl.java
-```java
-// 第 33-37 行：短信验证码发送
-@Override
-public void sendSmsCode(String phone) {
-    String code = String.valueOf((int)((Math.random() * 9 + 1) * 100000));
-    redisTemplate.opsForValue().set("captcha:sms:" + phone, code, 5, TimeUnit.MINUTES);
-    // TODO: 调用腾讯云短信SDK发送
-}
-```
-
----
-
-## 🚀 快速实现指南
-
-### 支付回调处理
-
-**微信支付回调**:
-1. 添加微信支付 SDK 依赖
-2. 配置微信商户信息
-3. 解析 XML 回调数据
-4. 验证签名
-5. 更新订单状态
-6. 发放积分
-
-**支付宝支付回调**:
-1. 添加支付宝 SDK 依赖
-2. 配置支付宝商户信息
-3. 解析回调参数
-4. 验证签名
-5. 更新订单状态
-6. 发放积分
-
-### 短信验证码发送
-
-1. 添加腾讯云短信 SDK 依赖
-2. 配置腾讯云账户信息
-3. 创建短信服务类
-4. 调用短信发送接口
-5. 处理异常情况
-6. 限制发送频率
-
----
-
-## 📚 详细文档
-
-更多详细信息请查看: [INCOMPLETE_FEATURES.md](./INCOMPLETE_FEATURES.md)
-
-该文档包含:
-- 完整的实现建议
-- 代码示例
-- 测试方法
-- 时间估计
-- 完成检查清单
-
----
-
-## 💡 建议
-
-### 立即完成
-这 3 个功能是系统的核心功能，建议立即完成：
-1. 短信验证码发送（最简单，1-2 小时）
-2. 微信支付回调（2-3 小时）
-3. 支付宝支付回调（2-3 小时）
-
-**总耗时**: 约 5-8 小时
-
-### 完成后的好处
-- ✅ 用户可以正常注册和登录
-- ✅ 用户可以正常充值
-- ✅ 用户可以获得充值赠送的积分
-- ✅ 系统功能完整可用
-
----
-
-**最后更新**: 2026-03-17
-**版本**: v1.0

openclaw-backend/openclaw-backend/INDEX.md

@@ -1,389 +0,0 @@
-# 📚 OpenClaw 后端文档索引
-
-欢迎使用 OpenClaw 后端系统！本文档将帮助您快速找到所需的信息。
-
----
-
-## 🎯 快速导航
-
-### 🚀 我想快速启动项目
-→ 查看 [QUICK_START.md](./QUICK_START.md)
-- 环境要求
-- 数据库初始化
-- 应用配置
-- 启动命令
-
-### 📖 我想了解项目概况
-→ 查看 [README.md](./README.md)
-- 项目介绍
-- 核心特性
-- 项目结构
-- 模块概览
-
-### 📊 我想查看开发进度
-→ 查看 [DEVELOPMENT_PROGRESS.md](./DEVELOPMENT_PROGRESS.md)
-- 开发进度统计
-- 模块完成情况
-- 数据库设计
-- 文件统计
-
-### 📝 我想查看项目总结
-→ 查看 [DEVELOPMENT_SUMMARY.md](./DEVELOPMENT_SUMMARY.md)
-- 项目概况
-- 开发完成情况
-- 数据库设计
-- 核心特性
-- 快速启动指南
-
-### 🧪 我想测试 API
-→ 查看 [API_EXAMPLES.md](./API_EXAMPLES.md)
-- 用户认证 API
-- Skill 服务 API
-- 积分服务 API
-- 订单服务 API
-- 支付服务 API
-- 邀请服务 API
-- 测试流程示例
-
-### ✅ 我想查看完成报告
-→ 查看 [COMPLETION_REPORT.md](./COMPLETION_REPORT.md)
-- 项目统计
-- 已完成功能
-- 项目亮点
-- 待完成项目
-
-### 🔧 我想查看未完成的功能
-→ 查看 [INCOMPLETE_SUMMARY.md](./INCOMPLETE_SUMMARY.md)
-- 未完成功能快速总结
-- 优先级说明
-- 快速实现指南
-
-→ 查看 [INCOMPLETE_FEATURES.md](./INCOMPLETE_FEATURES.md)
-- 详细的未完成功能清单
-- 完整的实现建议
-- 代码示例
-- 测试方法
-
----
-
-## 📚 文档详细说明
-
-### 1. README.md
-**用途**: 项目总体说明文档
-**内容**:
-- 项目概览
-- 核心特性
-- 快速开始
-- 项目结构
-- 模块概览
-- 认证方式
-- API 响应格式
-- 开发指南
-- 常见问题
-
-**适合人群**: 所有人
-
----
-
-### 2. QUICK_START.md
-**用途**: 快速参考指南
-**内容**:
-- 快速开始
-- API 端点速查表
-- 认证方式
-- 错误码参考
-- 常见业务流程
-- 开发常见问题
-- 项目依赖
-- 数据库表关系
-- 日志配置
-- 生产环境检查清单
-
-**适合人群**: 开发者、测试人员
-
----
-
-### 3. API_EXAMPLES.md
-**用途**: API 测试示例
-**内容**:
-- 基础信息
-- 用户认证 API 示例
-- Skill 服务 API 示例
-- 积分服务 API 示例
-- 订单服务 API 示例
-- 支付服务 API 示例
-- 邀请服务 API 示例
-- 测试流程示例
-- 常见错误处理
-
-**适合人群**: 测试人员、前端开发者
-
----
-
-### 4. DEVELOPMENT_PROGRESS.md
-**用途**: 开发进度表
-**内容**:
-- 开发进度统计
-- 模块完成情况（7 大模块）
-- 数据库设计
-- 项目文件统计
-- 核心特性实现
-- 快速启动指南
-- API 响应格式
-- 待完成项目
-- 开发建议
-
-**适合人群**: 项目经理、开发者
-
----
-
-### 5. DEVELOPMENT_SUMMARY.md
-**用途**: 项目完整总结
-**内容**:
-- 项目概况
-- 开发完成情况（详细）
-- 数据库设计
-- 项目文件统计
-- 核心特性
-- 快速启动指南
-- API 响应格式
-- 待完成项目
-- 开发建议
-- 文件位置
-
-**适合人群**: 项目经理、架构师、开发者
-
----
-
-### 6. COMPLETION_REPORT.md
-**用途**: 项目完成报告
-**内容**:
-- 项目统计
-- 已完成功能模块
-- 核心特性实现
-- 项目文件清单
-- 项目启动
-- 文档导航
-- 项目亮点
-- 待完成项目
-- 项目成果
-- 建议
-
-**适合人群**: 项目经理、决策者
-
----
-
-### 7. INCOMPLETE_SUMMARY.md
-**用途**: 未完成功能快速总结
-**内容**:
-- 未完成功能概览
-- 详细清单（3 个功能）
-- 优先级说明
-- 代码位置
-- 快速实现指南
-- 建议
-
-**适合人群**: 开发者、项目经理
-
----
-
-### 8. INCOMPLETE_FEATURES.md
-**用途**: 未完成功能详细清单
-**内容**:
-- 支付回调处理（微信、支付宝）
-- 短信验证码发送
-- 完整的实现建议
-- 代码示例
-- 测试方法
-- 时间估计
-- 完成检查清单
-
-**适合人群**: 开发者
-
----
-
-## 🔍 按用途查找文档
-
-### 我是项目经理
-1. 先读 [COMPLETION_REPORT.md](./COMPLETION_REPORT.md) - 了解项目完成情况
-2. 再读 [DEVELOPMENT_PROGRESS.md](./DEVELOPMENT_PROGRESS.md) - 查看详细进度
-3. 查看 [INCOMPLETE_SUMMARY.md](./INCOMPLETE_SUMMARY.md) - 了解未完成功能
-4. 最后读 [README.md](./README.md) - 了解项目概况
-
-### 我是后端开发者
-1. 先读 [README.md](./README.md) - 了解项目结构
-2. 再读 [QUICK_START.md](./QUICK_START.md) - 快速启动项目
-3. 查看 [DEVELOPMENT_SUMMARY.md](./DEVELOPMENT_SUMMARY.md) - 了解各模块
-4. 参考 [API_EXAMPLES.md](./API_EXAMPLES.md) - 测试 API
-5. 查看 [INCOMPLETE_FEATURES.md](./INCOMPLETE_FEATURES.md) - 了解需要完成的功能
-
-### 我是前端开发者
-1. 先读 [README.md](./README.md) - 了解项目概况
-2. 再读 [QUICK_START.md](./QUICK_START.md) - 查看 API 速查表
-3. 参考 [API_EXAMPLES.md](./API_EXAMPLES.md) - 获取 API 示例
-
-### 我是测试人员
-1. 先读 [QUICK_START.md](./QUICK_START.md) - 了解快速启动
-2. 参考 [API_EXAMPLES.md](./API_EXAMPLES.md) - 获取测试用例
-3. 查看 [DEVELOPMENT_SUMMARY.md](./DEVELOPMENT_SUMMARY.md) - 了解功能
-4. 查看 [INCOMPLETE_SUMMARY.md](./INCOMPLETE_SUMMARY.md) - 了解未完成功能
-
-### 我是架构师
-1. 先读 [DEVELOPMENT_SUMMARY.md](./DEVELOPMENT_SUMMARY.md) - 了解架构设计
-2. 再读 [README.md](./README.md) - 查看项目结构
-3. 查看 [COMPLETION_REPORT.md](./COMPLETION_REPORT.md) - 了解完成情况
-4. 查看 [INCOMPLETE_FEATURES.md](./INCOMPLETE_FEATURES.md) - 了解未完成功能
-
----
-
-## 📊 文档统计
-
-| 文档 | 页数 | 内容量 | 用途 |
-|------|------|--------|------|
-| README.md | ~5 | 中等 | 项目总体说明 |
-| QUICK_START.md | ~8 | 中等 | 快速参考 |
-| API_EXAMPLES.md | ~15 | 大量 | API 测试示例 |
-| DEVELOPMENT_PROGRESS.md | ~10 | 大量 | 开发进度表 |
-| DEVELOPMENT_SUMMARY.md | ~12 | 大量 | 项目总结 |
-| COMPLETION_REPORT.md | ~8 | 中等 | 完成报告 |
-| INCOMPLETE_SUMMARY.md | ~3 | 小 | 未完成功能快速总结 |
-| INCOMPLETE_FEATURES.md | ~12 | 大量 | 未完成功能详细清单 |
-
----
-
-## 🎯 常见问题快速查找
-
-### 环境相关
-- **如何安装依赖？** → [QUICK_START.md](./QUICK_START.md) - 环境要求
-- **如何初始化数据库？** → [README.md](./README.md) - 快速开始
-- **如何配置应用？** → [QUICK_START.md](./QUICK_START.md) - 快速开始
-
-### API 相关
-- **有哪些 API 端点？** → [QUICK_START.md](./QUICK_START.md) - API 端点速查表
-- **如何调用 API？** → [API_EXAMPLES.md](./API_EXAMPLES.md) - API 示例
-- **如何处理错误？** → [API_EXAMPLES.md](./API_EXAMPLES.md) - 常见错误处理
-
-### 功能相关
-- **有哪些功能模块？** → [README.md](./README.md) - 模块概览
-- **各模块的详细说明？** → [DEVELOPMENT_SUMMARY.md](./DEVELOPMENT_SUMMARY.md) - 开发完成情况
-- **项目的完成情况？** → [DEVELOPMENT_PROGRESS.md](./DEVELOPMENT_PROGRESS.md) - 开发进度统计
-
-### 开发相关
-- **如何添加新功能？** → [README.md](./README.md) - 开发指南
-- **如何处理异常？** → [QUICK_START.md](./QUICK_START.md) - 开发常见问题
-- **项目结构是什么？** → [README.md](./README.md) - 项目结构
-
-### 部署相关
-- **生产环境需要做什么？** → [QUICK_START.md](./QUICK_START.md) - 生产环境检查清单
-- **如何启动应用？** → [README.md](./README.md) - 快速开始
-
-### 未完成功能相关
-- **有哪些功能还没完成？** → [INCOMPLETE_SUMMARY.md](./INCOMPLETE_SUMMARY.md) - 快速总结
-- **如何实现未完成的功能？** → [INCOMPLETE_FEATURES.md](./INCOMPLETE_FEATURES.md) - 详细实现指南
-- **需要多长时间完成？** → [INCOMPLETE_FEATURES.md](./INCOMPLETE_FEATURES.md) - 时间估计
-
----
-
-## 📖 阅读建议
-
-### 第一次接触项目
-1. 阅读 [README.md](./README.md) (5 分钟)
-2. 浏览 [DEVELOPMENT_SUMMARY.md](./DEVELOPMENT_SUMMARY.md) (10 分钟)
-3. 查看 [QUICK_START.md](./QUICK_START.md) (5 分钟)
-
-**总耗时**: 约 20 分钟
-
-### 准备开发
-1. 阅读 [README.md](./README.md) - 项目结构
-2. 参考 [QUICK_START.md](./QUICK_START.md) - 快速启动
-3. 查看 [DEVELOPMENT_SUMMARY.md](./DEVELOPMENT_SUMMARY.md) - 各模块详情
-4. 参考 [API_EXAMPLES.md](./API_EXAMPLES.md) - API 示例
-
-**总耗时**: 约 1 小时
-
-### 准备测试
-1. 阅读 [QUICK_START.md](./QUICK_START.md) - 快速启动
-2. 参考 [API_EXAMPLES.md](./API_EXAMPLES.md) - 测试用例
-3. 查看 [QUICK_START.md](./QUICK_START.md) - 常见业务流程
-
-**总耗时**: 约 30 分钟
-
----
-
-## 🔗 文档关系图
-
-```
-README.md (项目总体说明)
-    ├── QUICK_START.md (快速参考)
-    │   ├── API 端点速查表
-    │   ├── 常见业务流程
-    │   └── 生产环境检查清单
-    │
-    ├── DEVELOPMENT_SUMMARY.md (项目总结)
-    │   ├── 开发完成情况
-    │   ├── 数据库设计
-    │   └── 核心特性
-    │
-    ├── DEVELOPMENT_PROGRESS.md (开发进度表)
-    │   ├── 模块完成情况
-    │   ├── 文件统计
-    │   └── 待完成项目
-    │
-    ├── API_EXAMPLES.md (API 示例)
-    │   ├── 各服务 API 示例
-    │   ├── 测试流程
-    │   └── 错误处理
-    │
-    └── COMPLETION_REPORT.md (完成报告)
-        ├── 项目统计
-        ├── 项目亮点
-        └── 建议
-```
-
----
-
-## 💡 使用建议
-
-1. **第一次使用**: 从 [README.md](./README.md) 开始
-2. **快速查找**: 使用本索引文档的"快速导航"部分
-3. **深入学习**: 按照"阅读建议"部分的顺序阅读
-4. **遇到问题**: 查看"常见问题快速查找"部分
-
----
-
-## 📞 获取帮助
-
-如果您找不到所需的信息：
-
-1. 检查本索引文档的"快速导航"部分
-2. 查看"常见问题快速查找"部分
-3. 阅读相关文档的目录
-4. 查看 [README.md](./README.md) 的"常见问题"部分
-
----
-
-## 📝 文档更新日志
-
-- **2026-03-17**: 创建完整的文档体系
-  - README.md - 项目说明
-  - QUICK_START.md - 快速参考
-  - API_EXAMPLES.md - API 示例
-  - DEVELOPMENT_PROGRESS.md - 开发进度
-  - DEVELOPMENT_SUMMARY.md - 项目总结
-  - COMPLETION_REPORT.md - 完成报告
-  - INDEX.md - 文档索引
-
-- **2026-03-17**: 添加未完成功能文档
-  - INCOMPLETE_SUMMARY.md - 未完成功能快速总结
-  - INCOMPLETE_FEATURES.md - 未完成功能详细清单
-  - 更新 INDEX.md 导航
-
----
-
-**最后更新**: 2026-03-17
-**版本**: v1.0
-**维护者**: AI Assistant
-
----
-
-**祝您使用愉快！** 🎉

openclaw-backend/openclaw-backend/QUICK_START.md

@@ -1,292 +0,0 @@
-# OpenClaw 后端快速参考指南
-
-## 🚀 快速开始
-
-### 1. 环境准备
-```bash
-# 确保已安装
-- Java 17+
-- MySQL 8.0+
-- Redis 7.x+
-- Maven 3.6+
-```
-
-### 2. 数据库初始化
-```bash
-# 创建数据库和表
-mysql -u root -p < src/main/resources/db/init.sql
-```
-
-### 3. 配置应用
-编辑 `src/main/resources/application.yml`:
-```yaml
-spring:
-  datasource:
-    url: jdbc:mysql://localhost:3306/openclaw
-    username: root
-    password: root
-  redis:
-    host: localhost
-    port: 6379
-
-jwt:
-  secret: change-this-to-a-256-bit-random-secret-key-for-production
-  expire-ms: 86400000
-
-invite:
-  inviter-points: 50
-  invitee-points: 30
-```
-
-### 4. 启动应用
-```bash
-mvn spring-boot:run
-```
-
-应用将在 `http://localhost:8080` 启动
-
----
-
-## 📚 API 端点速查表
-
-### 用户服务 (User)
-```
-POST   /api/v1/users/sms-code              发送短信验证码
-POST   /api/v1/users/register              用户注册
-POST   /api/v1/users/login                 用户登录
-POST   /api/v1/users/logout                登出
-GET    /api/v1/users/profile               获取个人信息
-PUT    /api/v1/users/profile               更新个人信息
-PUT    /api/v1/users/password              修改密码
-POST   /api/v1/users/password/reset        重置密码
-```
-
-### Skill 服务 (Skill)
-```
-GET    /api/v1/skills                      Skill 列表（支持分页/筛选/排序）
-GET    /api/v1/skills/{id}                 Skill 详情
-POST   /api/v1/skills                      上传 Skill
-POST   /api/v1/skills/{id}/reviews         发表评价
-```
-
-### 积分服务 (Points)
-```
-GET    /api/v1/points/balance              获取积分余额
-GET    /api/v1/points/records              获取积分流水
-POST   /api/v1/points/sign-in              每日签到
-```
-
-### 订单服务 (Order)
-```
-POST   /api/v1/orders                      创建订单
-GET    /api/v1/orders                      获取我的订单列表
-GET    /api/v1/orders/{id}                 获取订单详情
-POST   /api/v1/orders/{id}/pay             支付订单
-POST   /api/v1/orders/{id}/cancel          取消订单
-POST   /api/v1/orders/{id}/refund          申请退款
-```
-
-### 支付服务 (Payment)
-```
-POST   /api/v1/payments/recharge           发起充值
-GET    /api/v1/payments/records            获取支付记录
-GET    /api/v1/payments/recharge/{id}      查询充值订单状态
-POST   /api/v1/payments/callback/wechat    微信支付回调
-POST   /api/v1/payments/callback/alipay    支付宝支付回调
-```
-
-### 邀请服务 (Invite)
-```
-GET    /api/v1/invites/my-code             获取我的邀请码
-POST   /api/v1/invites/bind                绑定邀请码
-GET    /api/v1/invites/records             邀请记录列表
-GET    /api/v1/invites/stats               邀请统计
-```
-
----
-
-## 🔐 认证方式
-
-所有需要认证的 API 都需要在请求头中添加 JWT Token:
-
-```
-Authorization: Bearer <token>
-```
-
-### 获取 Token
-1. 调用 `/api/v1/users/login` 获取 Token
-2. 在响应中获取 `data.token`
-3. 在后续请求的 `Authorization` 头中使用
-
----
-
-## 📊 错误码参考
-
-| 错误码 | 说明 |
-|--------|------|
-| 200 | 成功 |
-| 1001 | 用户不存在 |
-| 1002 | 用户已被禁用 |
-| 1003 | 手机号已存在 |
-| 1004 | 密码错误 |
-| 1005 | 短信验证码错误 |
-| 2001 | Skill 不存在 |
-| 2002 | Skill 未审核 |
-| 3001 | 积分不足 |
-| 3002 | 已签到过 |
-| 4001 | 订单不存在 |
-| 4002 | 订单状态错误 |
-| 5001 | 充值订单不存在 |
-| 6001 | 邀请码无效 |
-| 6002 | 邀请码已用尽 |
-| 6003 | 不能邀请自己 |
-
----
-
-## 💡 常见业务流程
-
-### 用户注册流程
-```
-1. 调用 POST /api/v1/users/sms-code 发送短信验证码
-2. 用户输入验证码
-3. 调用 POST /api/v1/users/register 注册
-   - 验证短信码
-   - 创建用户
-   - 初始化积分（100分）
-   - 生成邀请码
-4. 返回 Token 和用户信息
-```
-
-### Skill 购买流程
-```
-1. 调用 GET /api/v1/skills 浏览 Skill
-2. 调用 GET /api/v1/skills/{id} 查看详情
-3. 调用 POST /api/v1/orders 创建订单
-   - 指定要购买的 Skill ID
-   - 可选：指定使用的积分
-4. 调用 POST /api/v1/orders/{id}/pay 支付订单
-5. 系统自动发放 Skill 访问权限
-```
-
-### 邀请流程
-```
-1. 邀请人调用 GET /api/v1/invites/my-code 获取邀请码
-2. 邀请人分享邀请链接给被邀请人
-3. 被邀请人注册时使用邀请码
-4. 系统自动发放双方积分奖励
-   - 邀请人：50 分
-   - 被邀请人：30 分
-```
-
----
-
-## 🛠️ 开发常见问题
-
-### Q: 如何添加新的 API 端点？
-A: 按照分层架构：
-1. 在 `entity` 中定义数据模型
-2. 在 `repository` 中定义数据访问
-3. 在 `service` 中实现业务逻辑
-4. 在 `controller` 中暴露 API 端点
-
-### Q: 如何处理业务异常？
-A: 使用 `BusinessException`:
-```java
-throw new BusinessException(ErrorCode.USER_NOT_FOUND);
-```
-
-### Q: 如何获取当前登录用户 ID？
-A: 使用 `UserContext`:
-```java
-Long userId = UserContext.getUserId();
-```
-
-### Q: 如何使用积分系统？
-A: 注入 `PointsService`:
-```java
-pointsService.earnPoints(userId, "source", relatedId, relatedType);
-pointsService.consumePoints(userId, amount, orderId, "order");
-pointsService.freezePoints(userId, amount, orderId);
-pointsService.unfreezePoints(userId, amount, orderId);
-```
-
----
-
-## 📦 项目依赖
-
-主要依赖版本：
-- Spring Boot: 3.2.0
-- MyBatis Plus: 3.5.7
-- MySQL Connector: 8.x
-- Redis: Lettuce
-- JWT: 0.11.5
-- Lombok: Latest
-
----
-
-## 🔍 数据库表关系
-
-```
-users (用户)
-├── user_profiles (用户资料)
-├── user_points (用户积分)
-├── invite_codes (邀请码)
-├── skills (创建的 Skill)
-├── orders (创建的订单)
-├── recharge_orders (充值订单)
-└── invite_records (作为邀请人的邀请记录)
-
-skills (Skill)
-├── skill_categories (分类)
-├── skill_reviews (评价)
-├── skill_downloads (下载记录)
-└── orders (订单)
-
-orders (订单)
-├── order_items (订单项)
-├── order_refunds (退款)
-└── payment_records (支付记录)
-```
-
----
-
-## 📝 日志配置
-
-日志配置文件：`src/main/resources/logback-spring.xml`
-
-默认日志级别：
-- Root: INFO
-- com.openclaw: DEBUG
-
----
-
-## 🚨 生产环境检查清单
-
-- [ ] 修改 JWT secret key
-- [ ] 修改数据库密码
-- [ ] 修改 Redis 密码
-- [ ] 配置 HTTPS
-- [ ] 启用 SQL 日志
-- [ ] 配置日志输出路径
-- [ ] 集成支付 SDK（微信、支付宝）
-- [ ] 配置短信服务
-- [ ] 配置文件存储（腾讯云 COS）
-- [ ] 配置监控告警
-- [ ] 进行压力测试
-- [ ] 进行安全审计
-
----
-
-## 📞 技术支持
-
-如有问题，请检查：
-1. 数据库连接是否正常
-2. Redis 连接是否正常
-3. 应用日志是否有错误
-4. 请求参数是否正确
-5. Token 是否过期
-
----
-
-**最后更新**: 2026-03-17
-**版本**: v1.0

openclaw-backend/openclaw-backend/README.md

@@ -1,392 +1,156 @@
 # OpenClaw 后端系统
 
-OpenClaw 是一个 Skill 交易平台的后端系统，采用 Spring Boot 3.x + MyBatis Plus 的单体架构。
+Skill 交易平台后端，采用 Spring Boot 3.2 + MyBatis Plus 的模块化单体架构。
 
-## 📋 项目概览
+## 技术栈
 
-- **项目名称**: OpenClaw Backend
-- **版本**: v1.0.0
-- **开发周期**: 2026-03-16 至 2026-03-17
-- **技术栈**: Java 17 + Spring Boot 3.2 + MyBatis Plus 3.5 + MySQL 8.0 + Redis 7.x
-- **项目规模**: 86 个 Java 文件，7 大核心模块，15 个数据库表
+| 组件 | 技术 |
+|------|------|
+| 框架 | Java 17 + Spring Boot 3.2 + MyBatis Plus 3.5 |
+| 数据 | MySQL 8.0 + Redis 7.x |
+| 消息 | RabbitMQ（Topic Exchange + 死信队列） |
+| 支付 | 微信支付 SDK (wechatpay-java) + 支付宝 SDK (alipay-sdk-java) |
+| 短信 | 腾讯云 SMS SDK (tencentcloud-sdk-java) |
+| ID | Leaf Segment 号段模式 |
+| 文档 | OpenAPI/Swagger |
+| 安全 | JWT + Spring Security + RBAC (@RequiresRole) |
 
-## ✨ 核心特性
+## 项目结构
 
-✅ **完整的用户认证与授权系统**
-- JWT Token 认证
-- Spring Security 集成
-- 自动拦截器验证
-- Token 黑名单机制
+```
+src/main/java/com/openclaw/
+├── module/                        # 20 个业务模块
+│   ├── admin/                     # 管理后台（用户/Skill/订单/评论/积分管理）
+│   │   ├── controller/            # AdminController (20+ 端点, @RequiresRole)
+│   │   ├── service/               # AdminService + Impl
+│   │   ├── dto/                   # AdminLoginDTO, AdminSkillCreateDTO
+│   │   └── vo/                    # 8 个 VO (Dashboard/User/Skill/Order/...)
+│   ├── user/                      # 用户模块
+│   │   ├── controller/            # UserController, WechatAuthController
+│   │   ├── service/               # UserService, SmsService + 实现
+│   │   ├── repository/            # UserRepository, UserProfileRepository
+│   │   ├── entity/                # User, UserProfile
+│   │   ├── dto/                   # Register/Login/Update DTO
+│   │   └── vo/                    # UserVO, LoginVO
+│   ├── skill/                     # Skill 模块
+│   │   ├── controller/            # SkillController, CategoryController, SkillFavoriteController
+│   │   ├── service/               # SkillService + Impl
+│   │   └── repository/            # 5 个 Repository
+│   ├── order/                     # 订单模块
+│   ├── payment/                   # 支付模块
+│   │   ├── controller/            # PaymentController, MockPaymentController
+│   │   ├── service/               # PaymentService, WechatPayService
+│   │   ├── config/                # WechatPayConfig
+│   │   └── repository/            # RechargeOrderRepository, PaymentRecordRepository
+│   ├── points/                    # 积分模块（过期/冻结/批次追踪）
+│   ├── member/                    # 会员等级模块（成长值/等级配置/权益）
+│   │   ├── controller/            # MemberController
+│   │   ├── service/               # MemberService + Impl
+│   │   ├── repository/            # MemberLevelConfigRepository, GrowthRecordRepository
+│   │   ├── entity/                # MemberLevelConfig, GrowthRecord
+│   │   ├── dto/                   # AdjustGrowthDTO
+│   │   └── vo/                    # MemberLevelVO
+│   ├── invite/                    # 邀请模块
+│   ├── invoice/                   # 发票管理模块
+│   ├── content/                   # 内容管理（轮播图/公告）
+│   ├── activity/                  # 活动管理模块
+│   ├── notification/              # 通知模块
+│   ├── feedback/                  # 反馈建议模块
+│   ├── help/                      # 帮助中心模块
+│   ├── rbac/                      # 角色权限管理
+│   ├── log/                       # 操作日志模块
+│   ├── share/                     # 分享（微信 JS-SDK）
+│   ├── developer/                 # 开发者申请模块
+│   ├── customization/             # 定制需求模块
+│   └── common/                    # 公共控制器 (StatsController, FileUploadController)
+├── common/                        # 公共基础设施
+│   ├── event/                     # 7 个领域事件
+│   ├── leaf/                      # Leaf 号段 ID 生成器
+│   └── mq/                        # RabbitMQ 消费者 (5 个)
+├── config/                        # 8 个配置类
+├── constant/                      # ErrorCode
+├── exception/                     # 全局异常处理
+├── interceptor/                   # AuthInterceptor, RoleCheckInterceptor
+└── annotation/                    # @RequiresRole, @RequiresPermission
+```
 
-✅ **7 大核心业务模块**
-- 用户服务 (User)
-- Skill 服务 (Skill)
-- 积分服务 (Points)
-- 订单服务 (Order)
-- 支付服务 (Payment)
-- 邀请服务 (Invite)
-- 基础设施层
+**统计**: 29 个 Controller, 270+ Java 文件
 
-✅ **完整的数据设计**
-- 15 个数据库表
-- 完整的关系设计
-- 软删除机制
-- 事务管理
-
-✅ **全局异常处理**
-- 统一响应格式
-- 30+ 错误码定义
-- 业务异常处理
-
-✅ **积分系统**
-- 积分冻结/解冻机制
-- 多种积分来源
-- 积分流水记录
-
-✅ **邀请机制**
-- 邀请码生成
-- 邀请验证
-- 双方积分奖励
-
-✅ **订单与支付**
-- 订单生命周期管理
-- 积分抵扣
-- 退款流程
-- 支付回调接口
-
-## 🚀 快速开始
+## 快速启动
 
 ### 环境要求
-- Java 17+
-- MySQL 8.0+
-- Redis 7.x+
-- Maven 3.6+
+- Java 17+, MySQL 8.0+, Redis 7.x+, Maven 3.6+
+- RabbitMQ（可选，有降级同步处理）
 
-### 安装步骤
+### 步骤
 
-1. **克隆项目**
-```bash
-cd openclaw-backend
-```
-
-2. **初始化数据库**
 ```bash
+# 1. 初始化数据库
 mysql -u root -p < src/main/resources/db/init.sql
-```
 
-3. **配置应用**
-编辑 `src/main/resources/application.yml`:
-```yaml
-spring:
-  datasource:
-    url: jdbc:mysql://localhost:3306/openclaw
-    username: root
-    password: root
-  redis:
-    host: localhost
-    port: 6379
+# 2. 配置 application.yml（数据库/Redis/JWT）
 
-jwt:
-  secret: change-this-to-a-256-bit-random-secret-key-for-production
-  expire-ms: 86400000
-```
-
-4. **启动应用**
-```bash
+# 3. 启动
 mvn spring-boot:run
+# http://localhost:8080
 ```
 
-应用将在 `http://localhost:8080` 启动
+## 核心特性
 
-## 📚 文档指南
+### 认证与授权
+- JWT Token（含黑名单登出机制）
+- Spring Security 集成
+- RBAC：`@RequiresRole("super_admin")` 注解 + `RoleCheckInterceptor`
+- 登录失败次数限制（15分钟内5次锁定）
 
-### 📖 主要文档
+### 支付集成
+- **微信支付**: Native 扫码支付，官方 SDK，回调签名验证
+- **支付宝**: PC 网页支付，官方 SDK，RSA2 验签
+- 均有 `enabled` 开关，关闭时返回模拟数据（开发环境友好）
+
+### 短信服务
+- 腾讯云 SMS SDK 完整集成
+- `enabled` 开关（关闭时验证码仅存 Redis，日志输出）
+- IP 频率限制（每小时10条）+ 手机号频率限制（60秒1条）
+
+### 消息队列
+- RabbitMQ Topic Exchange
+- 事件驱动：用户注册、订单支付、充值成功、退款审批、邀请绑定
+- MQ 不可用时自动降级为同步处理
+- 死信队列处理
+
+### API 响应格式
+
+```json
+// 成功
+{ "code": 200, "message": "success", "data": { ... } }
+
+// 错误
+{ "code": 1001, "message": "用户不存在", "data": null }
+```
+
+## 生产环境检查清单
+
+- [ ] 修改 JWT secret key
+- [ ] 修改数据库/Redis 密码
+- [ ] 配置 HTTPS
+- [ ] 配置微信支付密钥（启用 `wechat.pay.enabled=true`）
+- [ ] 配置支付宝密钥（启用 `alipay.enabled=true`）
+- [ ] 配置腾讯云短信密钥（启用 `sms.enabled=true`）
+- [ ] 配置 RabbitMQ 连接
+- [ ] 配置文件存储（腾讯云 COS）
+- [ ] 配置日志输出路径
+
+## 文档
 
 | 文档 | 说明 |
 |------|------|
-| [DEVELOPMENT_SUMMARY.md](./DEVELOPMENT_SUMMARY.md) | 项目完整总结，包含所有模块详情 |
-| [DEVELOPMENT_PROGRESS.md](./DEVELOPMENT_PROGRESS.md) | 开发进度表，详细的完成情况统计 |
-| [QUICK_START.md](./QUICK_START.md) | 快速参考指南，API 速查表 |
-| [API_EXAMPLES.md](./API_EXAMPLES.md) | API 测试示例，包含 curl 命令 |
-
-### 📌 快速导航
-
-- **想快速了解项目？** → 阅读 [DEVELOPMENT_SUMMARY.md](./DEVELOPMENT_SUMMARY.md)
-- **想查看开发进度？** → 查看 [DEVELOPMENT_PROGRESS.md](./DEVELOPMENT_PROGRESS.md)
-- **想快速启动项目？** → 参考 [QUICK_START.md](./QUICK_START.md)
-- **想测试 API？** → 使用 [API_EXAMPLES.md](./API_EXAMPLES.md) 中的示例
-
-## 🏗️ 项目结构
-
-```
-openclaw-backend/
-├── src/main/java/com/openclaw/
-│   ├── controller/          # 7 个 Controller
-│   ├── service/             # 7 个 Service 接口 + 7 个实现
-│   ├── repository/          # 13 个 Repository
-│   ├── entity/              # 13 个 Entity
-│   ├── dto/                 # 8 个 DTO
-│   ├── vo/                  # 10 个 VO
-│   ├── config/              # 6 个配置类
-│   ├── exception/           # 异常处理
-│   ├── interceptor/         # 拦截器
-│   ├── util/                # 工具类
-│   ├── constant/            # 常量定义
-│   └── OpenclawApplication.java
-├── src/main/resources/
-│   ├── application.yml      # 应用配置
-│   ├── db/
-│   │   └── init.sql         # 数据库初始化脚本
-│   └── logback-spring.xml   # 日志配置
-├── pom.xml                  # Maven 配置
-├── README.md                # 本文件
-├── DEVELOPMENT_SUMMARY.md   # 项目总结
-├── DEVELOPMENT_PROGRESS.md  # 开发进度表
-├── QUICK_START.md           # 快速参考
-└── API_EXAMPLES.md          # API 示例
-```
-
-## 📊 模块概览
-
-### 1. 用户服务 (User)
-- 用户注册、登录、登出
-- 个人信息管理
-- 密码修改和重置
-- 短信验证码
-
-**API 端点**: 8 个
-
-### 2. Skill 服务 (Skill)
-- Skill 列表查询（支持分页/筛选/排序）
-- Skill 详情查询
-- Skill 上传
-- Skill 评价
-
-**API 端点**: 4 个
-
-### 3. 积分服务 (Points)
-- 积分余额查询
-- 积分流水查询
-- 每日签到
-- 积分冻结/解冻
-
-**API 端点**: 3 个
-
-### 4. 订单服务 (Order)
-- 订单创建
-- 订单查询
-- 订单支付
-- 订单取消
-- 退款申请
-
-**API 端点**: 5 个
-
-### 5. 支付服务 (Payment)
-- 充值发起
-- 支付记录查询
-- 充值状态查询
-- 支付回调处理
-
-**API 端点**: 4 个
-
-### 6. 邀请服务 (Invite)
-- 邀请码获取
-- 邀请码绑定
-- 邀请记录查询
-- 邀请统计
-
-**API 端点**: 4 个
-
-## 🔐 认证方式
-
-所有需要认证的 API 都需要在请求头中添加 JWT Token:
-
-```
-Authorization: Bearer <token>
-```
-
-### 获取 Token
-1. 调用 `/api/v1/users/login` 获取 Token
-2. 在响应中获取 `data.token`
-3. 在后续请求的 `Authorization` 头中使用
-
-## 📝 API 响应格式
-
-### 成功响应
-```json
-{
-  "code": 200,
-  "message": "success",
-  "data": { ... },
-  "timestamp": 1710604800000
-}
-```
-
-### 错误响应
-```json
-{
-  "code": 1001,
-  "message": "用户不存在",
-  "data": null,
-  "timestamp": 1710604800000
-}
-```
-
-## 🛠️ 开发指南
-
-### 添加新的 API 端点
-
-按照分层架构：
-
-1. **定义 Entity**
-```java
-@Data
-@TableName("table_name")
-public class MyEntity extends BaseEntity {
-    // 字段定义
-}
-```
-
-2. **定义 Repository**
-```java
-public interface MyRepository extends BaseMapper<MyEntity> {
-    // 自定义查询方法
-}
-```
-
-3. **定义 Service**
-```java
-public interface MyService {
-    // 业务方法
-}
-
-@Service
-@RequiredArgsConstructor
-public class MyServiceImpl implements MyService {
-    // 实现
-}
-```
-
-4. **定义 Controller**
-```java
-@RestController
-@RequestMapping("/api/v1/my")
-@RequiredArgsConstructor
-public class MyController {
-    // API 端点
-}
-```
-
-### 处理业务异常
-
-```java
-throw new BusinessException(ErrorCode.USER_NOT_FOUND);
-```
-
-### 获取当前用户
-
-```java
-Long userId = UserContext.getUserId();
-```
-
-## 🧪 测试
-
-### 使用 curl 测试 API
-
-```bash
-# 用户登录
-curl -X POST http://localhost:8080/api/v1/users/login \
-  -H "Content-Type: application/json" \
-  -d '{
-    "phone": "13800138000",
-    "password": "password123"
-  }'
-
-# 获取个人信息
-curl -X GET http://localhost:8080/api/v1/users/profile \
-  -H "Authorization: Bearer <token>"
-```
-
-更多示例请参考 [API_EXAMPLES.md](./API_EXAMPLES.md)
-
-## 📦 依赖管理
-
-主要依赖版本：
-- Spring Boot: 3.2.0
-- MyBatis Plus: 3.5.7
-- MySQL Connector: 8.x
-- Redis: Lettuce
-- JWT: 0.11.5
-- Lombok: Latest
-
-## 🚨 生产环境检查清单
-
-- [ ] 修改 JWT secret key
-- [ ] 修改数据库密码
-- [ ] 修改 Redis 密码
-- [ ] 配置 HTTPS
-- [ ] 启用 SQL 日志
-- [ ] 配置日志输出路径
-- [ ] 集成支付 SDK（微信、支付宝）
-- [ ] 配置短信服务
-- [ ] 配置文件存储（腾讯云 COS）
-- [ ] 配置监控告警
-- [ ] 进行压力测试
-- [ ] 进行安全审计
-
-## 📞 常见问题
-
-### Q: 如何修改数据库连接？
-A: 编辑 `application.yml` 中的 `spring.datasource` 配置
-
-### Q: 如何修改 JWT 过期时间？
-A: 编辑 `application.yml` 中的 `jwt.expire-ms` 配置
-
-### Q: 如何添加新的积分规则？
-A: 在 `points_rules` 表中插入新记录
-
-### Q: 如何处理支付回调？
-A: 实现 `PaymentService` 中的回调方法
-
-## 🔗 相关资源
-
-- [Spring Boot 官方文档](https://spring.io/projects/spring-boot)
-- [MyBatis Plus 官方文档](https://baomidou.com/)
-- [MySQL 官方文档](https://dev.mysql.com/doc/)
-- [Redis 官方文档](https://redis.io/documentation)
-
-## 📄 许可证
-
-本项目采用 MIT 许可证
-
-## 👥 贡献者
-
-- AI Assistant
-
-## 📅 更新日志
-
-### v1.0.0 (2026-03-17)
-- ✅ 完成 7 大核心模块开发
-- ✅ 完成 86 个 Java 文件
-- ✅ 完成 15 个数据库表设计
-- ✅ 完成全局异常处理
-- ✅ 完成 JWT 认证系统
-- ✅ 完成积分系统
-- ✅ 完成邀请系统
-- ✅ 完成订单与支付流程
-
-## 📞 技术支持
-
-如有问题，请检查：
-1. 数据库连接是否正常
-2. Redis 连接是否正常
-3. 应用日志是否有错误
-4. 请求参数是否正确
-5. Token 是否过期
+| [API_EXAMPLES.md](./API_EXAMPLES.md) | API 测试示例（curl 命令） |
 
 ---
 
-**项目版本**: v1.0.0
-**完成日期**: 2026-03-17
-**开发者**: AI Assistant
-**最后更新**: 2026-03-17
+**最后更新**: 2026-03-21
+
+**近期更新**:
+- 会员等级体系：普通→白银→金卡→钻石 4 级，成长值自动增长（签到/购买/充值/评价/邀请），签到倍率+积分折扣权益，管理员手动调整，安全审计修复（权限控制/原子更新/输入校验/审计日志）
+- 积分过期 + 冻结机制：一年有效期、批次追踪（signIn/refund/adminAdjust）、活动冻结/解冻/消费、每日凌晨2点定时过期清理

openclaw-backend/openclaw-backend/pom.xml

@@ -134,6 +134,13 @@
             <version>3.1.880</version>
         </dependency>
 
+        <!-- 腾讯云 COS 对象存储 SDK -->
+        <dependency>
+            <groupId>com.qcloud</groupId>
+            <artifactId>cos_api</artifactId>
+            <version>5.6.227</version>
+        </dependency>
+
         <!-- 微信支付 V3 SDK -->
         <dependency>
             <groupId>com.github.wechatpay-apiv3</groupId>
@@ -141,13 +148,6 @@
             <version>0.2.12</version>
         </dependency>
 
-        <!-- 支付宝 SDK -->
-        <dependency>
-            <groupId>com.alipay.sdk</groupId>
-            <artifactId>alipay-sdk-java</artifactId>
-            <version>4.38.0.ALL</version>
-        </dependency>
-
         <!-- Testing -->
         <dependency>
             <groupId>org.springframework.boot</groupId>

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/annotation/RequiresPermission.java

@@ -0,0 +1,16 @@
+package com.openclaw.annotation;
+
+import java.lang.annotation.*;
+
+/**
+ * 细粒度权限注解，标注在 Controller 方法或类上。
+ * value 指定所需的权限编码，满足其一即可访问。
+ * 示例: @RequiresPermission("user:ban")
+ */
+@Target({ElementType.METHOD, ElementType.TYPE})
+@Retention(RetentionPolicy.RUNTIME)
+@Documented
+public @interface RequiresPermission {
+    /** 所需权限编码列表，满足其一即可 */
+    String[] value();
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/common/mq/consumer/InviteEventConsumer.java

@@ -2,6 +2,8 @@ package com.openclaw.common.mq.consumer;
 
 import com.openclaw.common.event.InviteBindEvent;
 import com.openclaw.common.mq.MQConstants;
+import com.openclaw.module.invite.entity.InviteRecord;
+import com.openclaw.module.invite.repository.InviteRecordRepository;
 import com.openclaw.module.invite.service.InviteService;
 import com.rabbitmq.client.Channel;
 import lombok.RequiredArgsConstructor;
@@ -16,6 +18,7 @@ import org.springframework.stereotype.Component;
 public class InviteEventConsumer {
 
     private final InviteService inviteService;
+    private final InviteRecordRepository inviteRecordRepo;
 
     /**
      * 邀请绑定成功 → 异步发放邀请人/被邀请人积分
@@ -30,13 +33,21 @@ public class InviteEventConsumer {
             // 发放邀请人积分
             if (event.getInviterPoints() != null && event.getInviterPoints() > 0) {
                 inviteService.addPointsDirectly(event.getInviterId(), event.getInviterPoints(),
-                        "INVITE", event.getInviteRecordId(), "邀请好友奖励");
+                        "invite", event.getInviteRecordId(), "邀请好友奖励");
             }
 
             // 发放被邀请人积分
             if (event.getInviteePoints() != null && event.getInviteePoints() > 0) {
                 inviteService.addPointsDirectly(event.getInviteeId(), event.getInviteePoints(),
-                        "INVITED", event.getInviteRecordId(), "受邀注册奖励");
+                        "invited", event.getInviteRecordId(), "受邀注册奖励");
+            }
+
+            // 标记奖励已发放
+            InviteRecord record = inviteRecordRepo.selectById(event.getInviteRecordId());
+            if (record != null) {
+                record.setRewardGiven(true);
+                record.setRewardedAt(java.time.LocalDateTime.now());
+                inviteRecordRepo.updateById(record);
             }
 
             channel.basicAck(tag, false);

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/common/mq/consumer/OrderEventConsumer.java

@@ -1,9 +1,14 @@
 package com.openclaw.common.mq.consumer;
 
+import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
 import com.openclaw.common.event.OrderPaidEvent;
 import com.openclaw.common.event.OrderTimeoutEvent;
 import com.openclaw.common.mq.MQConstants;
+import com.openclaw.module.order.entity.Order;
+import com.openclaw.module.order.entity.OrderItem;
+import com.openclaw.module.order.repository.OrderItemRepository;
 import com.openclaw.module.order.service.OrderService;
+import com.openclaw.module.points.service.PointsService;
 import com.openclaw.module.skill.service.SkillService;
 import com.rabbitmq.client.Channel;
 import lombok.RequiredArgsConstructor;
@@ -12,6 +17,8 @@ import org.springframework.amqp.core.Message;
 import org.springframework.amqp.rabbit.annotation.RabbitListener;
 import org.springframework.stereotype.Component;
 
+import java.util.List;
+
 @Slf4j
 @Component
 @RequiredArgsConstructor
@@ -19,6 +26,9 @@ public class OrderEventConsumer {
 
     private final OrderService orderService;
     private final SkillService skillService;
+    private final PointsService pointsService;
+    private final OrderItemRepository orderItemRepo;
+    private final com.openclaw.module.order.repository.OrderRepository orderRepo;
 
     /**
      * 订单支付成功 → 发放Skill访问权限
@@ -28,8 +38,24 @@ public class OrderEventConsumer {
         long tag = message.getMessageProperties().getDeliveryTag();
         try {
             log.info("[MQ] 订单支付成功: orderId={}, userId={}", event.getOrderId(), event.getUserId());
-            // 发放Skill访问权限（由业务层实现具体逻辑）
-            skillService.grantAccess(event.getUserId(), null, event.getOrderId(), "PURCHASE");
+            // 查询订单项，为每个Skill发放访问权限
+            List<OrderItem> items = orderItemRepo.selectList(
+                new LambdaQueryWrapper<OrderItem>().eq(OrderItem::getOrderId, event.getOrderId()));
+            for (OrderItem item : items) {
+                skillService.grantAccess(event.getUserId(), item.getSkillId(), event.getOrderId(), "paid");
+            }
+            // 消费冻结积分（frozen → consumed）
+            Order order = orderRepo.selectById(event.getOrderId());
+            if (order != null && order.getPointsUsed() != null && order.getPointsUsed() > 0) {
+                pointsService.consumeFrozenPoints(event.getUserId(), order.getPointsUsed(), event.getOrderId());
+                log.info("[MQ] 冻结积分已消费: orderId={}, points={}", event.getOrderId(), order.getPointsUsed());
+            }
+            // 订单状态从 paid → completed
+            if (order != null && "paid".equals(order.getStatus())) {
+                order.setStatus("completed");
+                orderRepo.updateById(order);
+                log.info("[MQ] 订单已完成: orderId={}", event.getOrderId());
+            }
             channel.basicAck(tag, false);
         } catch (Exception e) {
             log.error("[MQ] 处理订单支付失败: orderId={}", event.getOrderId(), e);
@@ -57,15 +83,15 @@ public class OrderEventConsumer {
      * 订单取消 → 解冻积分
      */
     @RabbitListener(queues = MQConstants.QUEUE_ORDER_CANCELLED)
-    public void handleOrderCancelled(OrderPaidEvent event, Message message, Channel channel) throws Exception {
+    public void handleOrderCancelled(String orderNo, Message message, Channel channel) throws Exception {
         long tag = message.getMessageProperties().getDeliveryTag();
         try {
-            log.info("[MQ] 订单取消: orderId={}, userId={}", event.getOrderId(), event.getUserId());
+            log.info("[MQ] 订单取消: orderNo={}", orderNo);
             // 解冻积分逻辑由 OrderServiceImpl.cancelOrder 内部已处理
-            // 这里可处理额外的异步通知逻辑
+            // 这里可处理额外的异步通知逻辑（如通知用户）
             channel.basicAck(tag, false);
         } catch (Exception e) {
-            log.error("[MQ] 处理订单取消失败: orderId={}", event.getOrderId(), e);
+            log.error("[MQ] 处理订单取消失败: orderNo={}", orderNo, e);
             channel.basicNack(tag, false, false);
         }
     }

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/common/mq/consumer/PaymentEventConsumer.java

@@ -1,8 +1,16 @@
 package com.openclaw.common.mq.consumer;
 
+import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
 import com.openclaw.common.event.RechargePaidEvent;
 import com.openclaw.common.event.RefundApprovedEvent;
 import com.openclaw.common.mq.MQConstants;
+import com.openclaw.module.order.entity.Order;
+import com.openclaw.module.order.entity.OrderRefund;
+import com.openclaw.module.order.repository.OrderRefundRepository;
+import com.openclaw.module.order.repository.OrderRepository;
+import com.openclaw.module.payment.entity.RechargeOrder;
+import com.openclaw.module.payment.repository.RechargeOrderRepository;
+import com.openclaw.module.payment.service.WechatPayService;
 import com.openclaw.module.points.service.PointsService;
 import com.rabbitmq.client.Channel;
 import lombok.RequiredArgsConstructor;
@@ -10,6 +18,9 @@ import lombok.extern.slf4j.Slf4j;
 import org.springframework.amqp.core.Message;
 import org.springframework.amqp.rabbit.annotation.RabbitListener;
 import org.springframework.stereotype.Component;
+import org.springframework.transaction.annotation.Transactional;
+
+import java.time.LocalDateTime;
 
 @Slf4j
 @Component
@@ -17,6 +28,10 @@ import org.springframework.stereotype.Component;
 public class PaymentEventConsumer {
 
     private final PointsService pointsService;
+    private final RechargeOrderRepository rechargeOrderRepo;
+    private final OrderRefundRepository refundRepo;
+    private final OrderRepository orderRepo;
+    private final WechatPayService wechatPayService;
 
     /**
      * 充值支付成功 → 发放积分
@@ -27,8 +42,8 @@ public class PaymentEventConsumer {
         try {
             log.info("[MQ] 充值成功: userId={}, amount={}, points={}",
                     event.getUserId(), event.getAmount(), event.getTotalPoints());
-            // 发放充值积分
-            pointsService.earnPoints(event.getUserId(), "RECHARGE", event.getRechargeOrderId(), "RECHARGE_ORDER");
+            // 发放充值积分（直接按 totalPoints 发放，不走 rules 表）
+            pointsService.addRechargePoints(event.getUserId(), event.getTotalPoints(), event.getRechargeOrderId());
             channel.basicAck(tag, false);
         } catch (Exception e) {
             log.error("[MQ] 处理充值积分发放失败: rechargeOrderId={}", event.getRechargeOrderId(), e);
@@ -40,34 +55,72 @@ public class PaymentEventConsumer {
      * 充值超时 → 关闭充值订单
      */
     @RabbitListener(queues = MQConstants.QUEUE_RECHARGE_TIMEOUT)
-    public void handleRechargeTimeout(RechargePaidEvent event, Message message, Channel channel) throws Exception {
+    public void handleRechargeTimeout(String rechargeOrderNo, Message message, Channel channel) throws Exception {
         long tag = message.getMessageProperties().getDeliveryTag();
         try {
-            log.info("[MQ] 充值超时: rechargeOrderId={}, userId={}", event.getRechargeOrderId(), event.getUserId());
-            // TODO: 更新充值订单状态为超时关闭
+            log.info("[MQ] 充值超时: rechargeOrderNo={}", rechargeOrderNo);
+            RechargeOrder recharge = rechargeOrderRepo.selectOne(
+                new LambdaQueryWrapper<RechargeOrder>().eq(RechargeOrder::getOrderNo, rechargeOrderNo));
+            if (recharge != null && "pending".equals(recharge.getStatus())) {
+                recharge.setStatus("cancelled");
+                rechargeOrderRepo.updateById(recharge);
+                log.info("[MQ] 充值订单已超时关闭: rechargeOrderNo={}", rechargeOrderNo);
+            }
             channel.basicAck(tag, false);
         } catch (Exception e) {
-            log.error("[MQ] 处理充值超时失败: rechargeOrderId={}", event.getRechargeOrderId(), e);
+            log.error("[MQ] 处理充值超时失败: rechargeOrderNo={}", rechargeOrderNo, e);
             channel.basicNack(tag, false, false);
         }
     }
 
     /**
-     * 退款审批通过 → 退还积分
+     * 退款审批通过 → 执行现金退款 + 退还积分 + 更新状态为 completed
      */
     @RabbitListener(queues = MQConstants.QUEUE_REFUND_APPROVED)
+    @Transactional
     public void handleRefundApproved(RefundApprovedEvent event, Message message, Channel channel) throws Exception {
         long tag = message.getMessageProperties().getDeliveryTag();
         try {
             log.info("[MQ] 退款审批通过: refundId={}, orderId={}, userId={}",
                     event.getRefundId(), event.getOrderId(), event.getUserId());
-            // 退还积分
-            if (event.getRefundPoints() != null && event.getRefundPoints() > 0) {
-                pointsService.earnPoints(event.getUserId(), "REFUND", event.getOrderId(), "ORDER");
+
+            OrderRefund refund = refundRepo.selectById(event.getRefundId());
+            if (refund == null) {
+                log.error("[MQ] 退款单不存在: refundId={}", event.getRefundId());
+                channel.basicAck(tag, false);
+                return;
             }
+
+            // 1. 现金退款（微信退款API / 模拟退款）
+            if (event.getRefundAmount() != null && event.getRefundAmount().signum() > 0) {
+                Order order = orderRepo.selectById(event.getOrderId());
+                String outTradeNo = order != null ? order.getOrderNo() : "UNKNOWN";
+                boolean cashRefundOk = wechatPayService.createRefund(
+                    outTradeNo, refund.getRefundNo(),
+                    event.getRefundAmount(), order != null ? order.getTotalAmount() : event.getRefundAmount());
+                if (!cashRefundOk) {
+                    log.error("[MQ] 现金退款失败，将重试: refundId={}", event.getRefundId());
+                    channel.basicNack(tag, false, true);
+                    return;
+                }
+                log.info("[MQ] 现金退款成功: refundId={}, amount={}", event.getRefundId(), event.getRefundAmount());
+            }
+
+            // 2. 退还积分
+            if (event.getRefundPoints() != null && event.getRefundPoints() > 0) {
+                pointsService.refundPoints(event.getUserId(), event.getRefundPoints(), event.getOrderId());
+                log.info("[MQ] 积分退还成功: refundId={}, points={}", event.getRefundId(), event.getRefundPoints());
+            }
+
+            // 3. 更新退款单状态为 completed
+            refund.setStatus("completed");
+            refund.setCompletedAt(LocalDateTime.now());
+            refundRepo.updateById(refund);
+
+            log.info("[MQ] 退款全部完成: refundId={}, orderId={}", event.getRefundId(), event.getOrderId());
             channel.basicAck(tag, false);
         } catch (Exception e) {
-            log.error("[MQ] 处理退款积分退还失败: refundId={}", event.getRefundId(), e);
+            log.error("[MQ] 处理退款失败: refundId={}", event.getRefundId(), e);
             channel.basicNack(tag, false, false);
         }
     }
@@ -76,14 +129,14 @@ public class PaymentEventConsumer {
      * 退款超时提醒 → 通知管理员
      */
     @RabbitListener(queues = MQConstants.QUEUE_REFUND_TIMEOUT_REMIND)
-    public void handleRefundTimeout(RefundApprovedEvent event, Message message, Channel channel) throws Exception {
+    public void handleRefundTimeout(String refundIdStr, Message message, Channel channel) throws Exception {
         long tag = message.getMessageProperties().getDeliveryTag();
         try {
-            log.warn("[MQ] 退款超时提醒: refundId={}, orderId={}", event.getRefundId(), event.getOrderId());
-            // TODO: 发送告警通知给管理员
+            log.warn("[MQ] 退款超时提醒: refundId={}", refundIdStr);
+            // TODO: 发送告警通知给管理员（邮件/短信/站内信）
             channel.basicAck(tag, false);
         } catch (Exception e) {
-            log.error("[MQ] 处理退款超时提醒失败: refundId={}", event.getRefundId(), e);
+            log.error("[MQ] 处理退款超时提醒失败: refundId={}", refundIdStr, e);
             channel.basicNack(tag, false, false);
         }
     }

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/common/mq/consumer/UserEventConsumer.java

@@ -35,7 +35,7 @@ public class UserEventConsumer {
             inviteService.generateInviteCode(event.getUserId());
 
             // 3. 发放注册积分
-            pointsService.earnPoints(event.getUserId(), "REGISTER", event.getUserId(), "USER");
+            pointsService.earnPoints(event.getUserId(), "register", event.getUserId(), "user");
 
             // 4. 处理邀请绑定（如果有邀请码）
             if (event.getInviteCode() != null && !event.getInviteCode().isEmpty()) {

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/config/CosConfig.java

@@ -0,0 +1,46 @@
+package com.openclaw.config;
+
+import com.qcloud.cos.COSClient;
+import com.qcloud.cos.ClientConfig;
+import com.qcloud.cos.auth.BasicCOSCredentials;
+import com.qcloud.cos.auth.COSCredentials;
+import com.qcloud.cos.http.HttpProtocol;
+import com.qcloud.cos.region.Region;
+import lombok.Getter;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+
+@Configuration
+@Getter
+public class CosConfig {
+
+    @Value("${tencent.cos.secret-id:}")
+    private String secretId;
+
+    @Value("${tencent.cos.secret-key:}")
+    private String secretKey;
+
+    @Value("${tencent.cos.region:ap-guangzhou}")
+    private String region;
+
+    @Value("${tencent.cos.bucket:}")
+    private String bucket;
+
+    @Value("${tencent.cos.base-url:}")
+    private String baseUrl;
+
+    @Value("${tencent.cos.enabled:false}")
+    private boolean enabled;
+
+    @Bean
+    public COSClient cosClient() {
+        if (!enabled || secretId.isEmpty() || secretKey.isEmpty()) {
+            return null;
+        }
+        COSCredentials cred = new BasicCOSCredentials(secretId, secretKey);
+        ClientConfig clientConfig = new ClientConfig(new Region(region));
+        clientConfig.setHttpProtocol(HttpProtocol.https);
+        return new COSClient(cred, clientConfig);
+    }
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/config/OpenApiConfig.java

@@ -0,0 +1,34 @@
+package com.openclaw.config;
+
+import io.swagger.v3.oas.models.OpenAPI;
+import io.swagger.v3.oas.models.info.Contact;
+import io.swagger.v3.oas.models.info.Info;
+import io.swagger.v3.oas.models.security.SecurityRequirement;
+import io.swagger.v3.oas.models.security.SecurityScheme;
+import io.swagger.v3.oas.models.Components;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+
+@Configuration
+public class OpenApiConfig {
+
+    @Bean
+    public OpenAPI openAPI() {
+        return new OpenAPI()
+            .info(new Info()
+                .title("OpenClaw Skills Platform API")
+                .description("数字员工交易平台后端接口文档")
+                .version("1.0.0")
+                .contact(new Contact()
+                    .name("OpenClaw Team")
+                    .email("dev@openclaw.com")))
+            .addSecurityItem(new SecurityRequirement().addList("Bearer Token"))
+            .components(new Components()
+                .addSecuritySchemes("Bearer Token",
+                    new SecurityScheme()
+                        .type(SecurityScheme.Type.HTTP)
+                        .scheme("bearer")
+                        .bearerFormat("JWT")
+                        .description("JWT 认证令牌，登录后获取")));
+    }
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/config/RabbitMQConfig.java

@@ -4,6 +4,7 @@ import com.openclaw.common.mq.MQConstants;
 import org.springframework.amqp.core.*;
 import org.springframework.amqp.rabbit.connection.ConnectionFactory;
 import org.springframework.amqp.rabbit.core.RabbitTemplate;
+import org.springframework.amqp.support.converter.DefaultJackson2JavaTypeMapper;
 import org.springframework.amqp.support.converter.Jackson2JsonMessageConverter;
 import org.springframework.amqp.support.converter.MessageConverter;
 import org.springframework.context.annotation.Bean;
@@ -16,7 +17,11 @@ public class RabbitMQConfig {
     // ==================== 消息转换器 ====================
     @Bean
     public MessageConverter jsonMessageConverter() {
-        return new Jackson2JsonMessageConverter();
+        Jackson2JsonMessageConverter converter = new Jackson2JsonMessageConverter();
+        DefaultJackson2JavaTypeMapper typeMapper = new DefaultJackson2JavaTypeMapper();
+        typeMapper.setTrustedPackages("com.openclaw.common.event", "java.util", "java.lang");
+        converter.setJavaTypeMapper(typeMapper);
+        return converter;
     }
 
     @Bean

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/config/RechargeConfig.java

@@ -7,7 +7,7 @@ import java.math.BigDecimal;
 import java.util.List;
 
 @Data
-@Component
+@Component("rootRechargeConfig")
 @ConfigurationProperties(prefix = "recharge")
 public class RechargeConfig {
 

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/config/WebMvcConfig.java

@@ -1,20 +1,35 @@
 package com.openclaw.config;
 
 import com.openclaw.interceptor.AuthInterceptor;
+import com.openclaw.interceptor.OptionalAuthInterceptor;
 import com.openclaw.interceptor.PermissionCheckInterceptor;
 import com.openclaw.interceptor.RoleCheckInterceptor;
 import lombok.RequiredArgsConstructor;
+import org.springframework.beans.factory.annotation.Value;
 import org.springframework.context.annotation.Configuration;
 import org.springframework.web.servlet.config.annotation.*;
 
+import java.nio.file.Paths;
+
 @Configuration
 @RequiredArgsConstructor
 public class WebMvcConfig implements WebMvcConfigurer {
 
+    private final OptionalAuthInterceptor optionalAuthInterceptor;
     private final AuthInterceptor authInterceptor;
     private final RoleCheckInterceptor roleCheckInterceptor;
     private final PermissionCheckInterceptor permissionCheckInterceptor;
 
+    @Value("${upload.path:./uploads}")
+    private String uploadPath;
+
+    @Override
+    public void addResourceHandlers(ResourceHandlerRegistry registry) {
+        String absolutePath = Paths.get(uploadPath).toAbsolutePath().normalize().toUri().toString();
+        registry.addResourceHandler("/uploads/**")
+                .addResourceLocations(absolutePath);
+    }
+
     @Override
     public void addCorsMappings(CorsRegistry registry) {
         registry.addMapping("/api/**")
@@ -23,10 +38,19 @@ public class WebMvcConfig implements WebMvcConfigurer {
             .allowedHeaders("*")
             .allowCredentials(true)
             .maxAge(3600);
+        registry.addMapping("/uploads/**")
+            .allowedOriginPatterns("http://localhost:*", "https://*.openclaw.com")
+            .allowedMethods("GET")
+            .maxAge(3600);
     }
 
     @Override
     public void addInterceptors(InterceptorRegistry registry) {
+        // 可选认证：公开接口中尝试提取用户身份（不阻断请求）
+        registry.addInterceptor(optionalAuthInterceptor)
+            .addPathPatterns("/api/**")
+            .order(0);
+
         registry.addInterceptor(authInterceptor)
             .addPathPatterns("/api/**")
             .excludePathPatterns(
@@ -47,7 +71,11 @@ public class WebMvcConfig implements WebMvcConfigurer {
                 "/api/v1/stats/**",        // 首页统计数据（公开）
                 "/api/v1/admin/login",     // 管理员登录
                 "/api/v1/banners/active",  // 公开Banner
-                "/api/v1/announcements/active" // 公开公告
+                "/api/v1/announcements/active", // 公开公告
+                "/api/v1/config/**",       // 系统配置（充值档位、积分规则）
+                "/api/v1/share/**",        // 分享JS-SDK配置（公开）
+                "/api/v1/activities",      // 活动列表（公开）
+                "/api/v1/activities/*"     // 活动详情（公开）
             );
 
         // 角色权限拦截器，在认证之后执行

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/constant/ErrorCode.java

@@ -27,14 +27,52 @@ public interface ErrorCode {
     BusinessError ORDER_NOT_FOUND      = new BusinessError(4001, "订单不存在");
     BusinessError ORDER_STATUS_ERROR   = new BusinessError(4002, "订单状态异常");
 
+    BusinessError LOGIN_ATTEMPTS_EXCEEDED = new BusinessError(1008, "登录失败次数过多，请15分钟后再试");
+    BusinessError SMS_IP_LIMIT_EXCEEDED   = new BusinessError(1009, "该IP短信发送次数已达上限");
+    BusinessError CHANGE_PHONE_TICKET_INVALID = new BusinessError(1010, "换号凭证无效或已过期，请重新验证原手机号");
+
+    // 短信模块 1xxx（续）
+    BusinessError SMS_SEND_FAILED         = new BusinessError(1006, "短信发送失败");
+    BusinessError SMS_SEND_TOO_FREQUENT   = new BusinessError(1007, "短信发送过于频繁，请稍后再试");
+
     // 支付模块 5xxx
-    BusinessError PAYMENT_FAILED       = new BusinessError(5001, "支付失败");
-    BusinessError RECHARGE_NOT_FOUND   = new BusinessError(5002, "充值订单不存在");
+    BusinessError PAYMENT_FAILED          = new BusinessError(5001, "支付失败");
+    BusinessError RECHARGE_NOT_FOUND      = new BusinessError(5002, "充值订单不存在");
+    BusinessError PAYMENT_SIGNATURE_ERROR = new BusinessError(5003, "支付签名验证失败");
+    BusinessError PAYMENT_CALLBACK_ERROR  = new BusinessError(5004, "支付回调处理异常");
+    BusinessError PAYMENT_NOT_ENABLED     = new BusinessError(5005, "该支付方式未启用");
 
     // 邀请模块 6xxx
     BusinessError INVITE_CODE_INVALID     = new BusinessError(6001, "邀请码无效");
     BusinessError INVITE_SELF_NOT_ALLOWED = new BusinessError(6002, "不能邀请自己");
     BusinessError INVITE_CODE_EXHAUSTED   = new BusinessError(6003, "邀请码已达使用上限");
 
+    // 微信登录模块 7xxx
+    BusinessError WECHAT_NOT_ENABLED        = new BusinessError(7001, "微信登录未启用");
+    BusinessError WECHAT_AUTH_FAILED        = new BusinessError(7002, "微信授权失败");
+    BusinessError WECHAT_STATE_INVALID      = new BusinessError(7003, "微信登录状态无效或已过期");
+    BusinessError WECHAT_ALREADY_BOUND      = new BusinessError(7004, "该微信已绑定其他账号");
+    BusinessError WECHAT_BIND_TICKET_INVALID = new BusinessError(7005, "绑定凭证无效或已过期");
+    BusinessError WECHAT_NOT_BOUND          = new BusinessError(7006, "该账号未绑定微信");
+    BusinessError WECHAT_USER_AUTH_EXISTS   = new BusinessError(7007, "该账号已绑定微信");
+
+    // 促销模块 9xxx
+    BusinessError PROMOTION_NOT_FOUND       = new BusinessError(9001, "促销活动不存在");
+    BusinessError PROMOTION_STATUS_ERROR    = new BusinessError(9002, "促销活动状态异常");
+    BusinessError PROMOTION_EXPIRED         = new BusinessError(9003, "促销活动已结束");
+    BusinessError PROMOTION_NOT_STARTED     = new BusinessError(9004, "促销活动未开始");
+    BusinessError PROMOTION_SOLD_OUT        = new BusinessError(9005, "促销活动已售罄");
+    BusinessError PROMOTION_USER_LIMIT      = new BusinessError(9006, "已达该活动限购次数");
+    BusinessError PROMOTION_SKILL_NOT_FOUND = new BusinessError(9007, "促销商品不存在");
+    BusinessError PROMOTION_STOCK_NOT_ENOUGH = new BusinessError(9008, "促销库存不足");
+
+    // 优惠券模块 8xxx
+    BusinessError COUPON_NOT_AVAILABLE      = new BusinessError(8001, "优惠券不存在或未上架");
+    BusinessError COUPON_RECEIVE_LIMIT      = new BusinessError(8002, "已达领取上限");
+    BusinessError COUPON_EXHAUSTED          = new BusinessError(8003, "优惠券已领完");
+    BusinessError COUPON_ALREADY_USED       = new BusinessError(8004, "优惠券已使用或已过期");
+    BusinessError COUPON_TEMPLATE_NOT_FOUND = new BusinessError(8005, "优惠券模板不存在");
+    BusinessError COUPON_NOT_USABLE         = new BusinessError(8006, "优惠券不可用");
+
     record BusinessError(int code, String message) {}
 }

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/exception/GlobalExceptionHandler.java

@@ -6,6 +6,7 @@ import lombok.extern.slf4j.Slf4j;
 import org.springframework.dao.DataIntegrityViolationException;
 import org.springframework.dao.DuplicateKeyException;
 import org.springframework.http.HttpStatus;
+import org.springframework.http.ResponseEntity;
 import org.springframework.http.converter.HttpMessageNotReadableException;
 import org.springframework.security.access.AccessDeniedException;
 import org.springframework.validation.FieldError;
@@ -30,10 +31,14 @@ public class GlobalExceptionHandler {
      * BusinessException 以及后续新增的子类都会被此方法拦截。
      */
     @ExceptionHandler(BaseException.class)
-    @ResponseStatus(HttpStatus.OK)
-    public Result<?> handleBaseException(BaseException e, HttpServletRequest request) {
+    public ResponseEntity<Result<?>> handleBaseException(BaseException e, HttpServletRequest request) {
         log.warn("[业务异常] URI={}, code={}, msg={}", request.getRequestURI(), e.getCode(), e.getMsg());
-        return Result.fail(e.getCode(), e.getMsg());
+        HttpStatus httpStatus = switch (e.getCode()) {
+            case 401 -> HttpStatus.UNAUTHORIZED;
+            case 403 -> HttpStatus.FORBIDDEN;
+            default  -> HttpStatus.OK;
+        };
+        return ResponseEntity.status(httpStatus).body(Result.fail(e.getCode(), e.getMsg()));
     }
 
     // ==================== Spring MVC 参数校验异常 ====================

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/interceptor/OptionalAuthInterceptor.java

@@ -0,0 +1,45 @@
+package com.openclaw.interceptor;
+
+import com.openclaw.util.JwtUtil;
+import com.openclaw.util.UserContext;
+import jakarta.servlet.http.*;
+import lombok.RequiredArgsConstructor;
+import org.springframework.stereotype.Component;
+import org.springframework.web.servlet.HandlerInterceptor;
+
+/**
+ * 可选认证拦截器：如果请求携带有效 Token，则设置 UserContext；
+ * 如果没有 Token 或 Token 无效，则静默跳过，不阻断请求。
+ * 用于公开接口中需要可选用户身份的场景（如 Skill 详情页的 owned 字段）。
+ */
+@Component
+@RequiredArgsConstructor
+public class OptionalAuthInterceptor implements HandlerInterceptor {
+
+    private final JwtUtil jwtUtil;
+
+    @Override
+    public boolean preHandle(HttpServletRequest req,
+                             HttpServletResponse res,
+                             Object handler) {
+        String auth = req.getHeader("Authorization");
+        if (auth != null && auth.startsWith("Bearer ")) {
+            try {
+                String token  = auth.substring(7);
+                Long   userId = jwtUtil.getUserId(token);
+                String role   = jwtUtil.getRole(token);
+                UserContext.set(userId, role);
+            } catch (Exception ignored) {
+                // Token 无效时静默跳过，不阻断请求
+            }
+        }
+        return true;
+    }
+
+    @Override
+    public void afterCompletion(HttpServletRequest req, HttpServletResponse res,
+                                Object handler, Exception ex) {
+        // 兜底清理，防止 ThreadLocal 泄漏
+        UserContext.clear();
+    }
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/interceptor/PermissionCheckInterceptor.java

@@ -0,0 +1,57 @@
+package com.openclaw.interceptor;
+
+import com.openclaw.annotation.RequiresPermission;
+import com.openclaw.constant.ErrorCode;
+import com.openclaw.exception.BusinessException;
+import com.openclaw.module.rbac.service.RbacService;
+import com.openclaw.util.UserContext;
+import jakarta.servlet.http.*;
+import lombok.RequiredArgsConstructor;
+import org.springframework.stereotype.Component;
+import org.springframework.web.method.HandlerMethod;
+import org.springframework.web.servlet.HandlerInterceptor;
+
+import java.util.Arrays;
+import java.util.Set;
+
+/**
+ * 细粒度权限校验拦截器。
+ * 在 AuthInterceptor / RoleCheckInterceptor 之后执行，
+ * 根据 @RequiresPermission 注解检查当前用户是否拥有所需权限。
+ * super_admin 角色自动拥有所有权限。
+ */
+@Component
+@RequiredArgsConstructor
+public class PermissionCheckInterceptor implements HandlerInterceptor {
+
+    private final RbacService rbacService;
+
+    @Override
+    public boolean preHandle(HttpServletRequest req, HttpServletResponse res, Object handler) {
+        if (!(handler instanceof HandlerMethod method)) return true;
+
+        RequiresPermission anno = method.getMethodAnnotation(RequiresPermission.class);
+        if (anno == null) {
+            anno = method.getBeanType().getAnnotation(RequiresPermission.class);
+        }
+        if (anno == null) return true;
+
+        Long userId = UserContext.getUserId();
+        if (userId == null) {
+            throw new BusinessException(ErrorCode.UNAUTHORIZED);
+        }
+
+        String currentRole = UserContext.getRole();
+        // super_admin 拥有所有权限，直接放行
+        if ("super_admin".equals(currentRole)) return true;
+
+        Set<String> userPerms = rbacService.getUserPermissions(userId);
+        String[] required = anno.value();
+
+        boolean hasAny = Arrays.stream(required).anyMatch(userPerms::contains);
+        if (!hasAny) {
+            throw new BusinessException(ErrorCode.FORBIDDEN);
+        }
+        return true;
+    }
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/activity/controller/ActivityController.java

@@ -0,0 +1,27 @@
+package com.openclaw.module.activity.controller;
+
+import com.openclaw.common.Result;
+import com.openclaw.module.activity.service.ActivityService;
+import com.openclaw.module.activity.vo.ActivityVO;
+import lombok.RequiredArgsConstructor;
+import org.springframework.web.bind.annotation.*;
+
+import java.util.List;
+
+@RestController
+@RequestMapping("/api/v1/activities")
+@RequiredArgsConstructor
+public class ActivityController {
+
+    private final ActivityService activityService;
+
+    @GetMapping("/active")
+    public Result<List<ActivityVO>> getActiveActivities() {
+        return Result.ok(activityService.getActiveActivities());
+    }
+
+    @GetMapping("/{id}")
+    public Result<ActivityVO> detail(@PathVariable Long id) {
+        return Result.ok(activityService.getActivityPublic(id));
+    }
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/activity/controller/AdminActivityController.java

@@ -0,0 +1,57 @@
+package com.openclaw.module.activity.controller;
+
+import com.baomidou.mybatisplus.core.metadata.IPage;
+import com.openclaw.common.Result;
+import com.openclaw.module.activity.dto.ActivityCreateDTO;
+import com.openclaw.module.activity.dto.ActivityUpdateDTO;
+import com.openclaw.module.activity.service.ActivityService;
+import com.openclaw.module.activity.vo.ActivityVO;
+import jakarta.validation.Valid;
+import com.openclaw.annotation.RequiresRole;
+import lombok.RequiredArgsConstructor;
+import org.springframework.web.bind.annotation.*;
+
+@RestController
+@RequestMapping("/api/v1/admin/activities")
+@RequiresRole({"admin", "super_admin"})
+@RequiredArgsConstructor
+public class AdminActivityController {
+
+    private final ActivityService activityService;
+
+    @GetMapping
+    public Result<IPage<ActivityVO>> list(
+            @RequestParam(required = false) String status,
+            @RequestParam(required = false) String keyword,
+            @RequestParam(defaultValue = "1") int pageNum,
+            @RequestParam(defaultValue = "20") int pageSize) {
+        return Result.ok(activityService.listActivities(status, keyword, pageNum, pageSize));
+    }
+
+    @GetMapping("/{id}")
+    public Result<ActivityVO> detail(@PathVariable Long id) {
+        return Result.ok(activityService.getActivity(id));
+    }
+
+    @PostMapping
+    public Result<ActivityVO> create(@Valid @RequestBody ActivityCreateDTO dto) {
+        return Result.ok(activityService.createActivity(dto));
+    }
+
+    @PutMapping("/{id}")
+    public Result<ActivityVO> update(@PathVariable Long id, @Valid @RequestBody ActivityUpdateDTO dto) {
+        return Result.ok(activityService.updateActivity(id, dto));
+    }
+
+    @DeleteMapping("/{id}")
+    public Result<Void> delete(@PathVariable Long id) {
+        activityService.deleteActivity(id);
+        return Result.ok();
+    }
+
+    @PostMapping("/{id}/status")
+    public Result<Void> changeStatus(@PathVariable Long id, @RequestParam String status) {
+        activityService.changeStatus(id, status);
+        return Result.ok();
+    }
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/activity/dto/ActivityCreateDTO.java

@@ -0,0 +1,30 @@
+package com.openclaw.module.activity.dto;
+
+import lombok.Data;
+
+import jakarta.validation.constraints.NotBlank;
+import jakarta.validation.constraints.NotNull;
+import jakarta.validation.constraints.Size;
+import java.time.LocalDateTime;
+
+@Data
+public class ActivityCreateDTO {
+    @NotBlank(message = "活动标题不能为空")
+    @Size(max = 100)
+    private String title;
+    @Size(max = 200)
+    private String subtitle;
+    @Size(max = 500)
+    private String coverImage;
+    @Size(max = 10000)
+    private String content;
+    @Size(max = 20)
+    private String linkType;
+    @Size(max = 500)
+    private String linkValue;
+    @NotNull(message = "开始时间不能为空")
+    private LocalDateTime startTime;
+    @NotNull(message = "结束时间不能为空")
+    private LocalDateTime endTime;
+    private Integer sortOrder;
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/activity/dto/ActivityUpdateDTO.java

@@ -0,0 +1,25 @@
+package com.openclaw.module.activity.dto;
+
+import lombok.Data;
+
+import jakarta.validation.constraints.Size;
+import java.time.LocalDateTime;
+
+@Data
+public class ActivityUpdateDTO {
+    @Size(max = 100)
+    private String title;
+    @Size(max = 200)
+    private String subtitle;
+    @Size(max = 500)
+    private String coverImage;
+    @Size(max = 10000)
+    private String content;
+    @Size(max = 20)
+    private String linkType;
+    @Size(max = 500)
+    private String linkValue;
+    private LocalDateTime startTime;
+    private LocalDateTime endTime;
+    private Integer sortOrder;
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/activity/entity/Activity.java

@@ -0,0 +1,27 @@
+package com.openclaw.module.activity.entity;
+
+import com.baomidou.mybatisplus.annotation.IdType;
+import com.baomidou.mybatisplus.annotation.TableId;
+import com.baomidou.mybatisplus.annotation.TableName;
+import lombok.Data;
+
+import java.time.LocalDateTime;
+
+@Data
+@TableName("activity")
+public class Activity {
+    @TableId(type = IdType.AUTO)
+    private Long id;
+    private String title;
+    private String subtitle;
+    private String coverImage;
+    private String content;
+    private String linkType;
+    private String linkValue;
+    private LocalDateTime startTime;
+    private LocalDateTime endTime;
+    private String status;
+    private Integer sortOrder;
+    private LocalDateTime createdAt;
+    private LocalDateTime updatedAt;
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/activity/repository/ActivityRepository.java

@@ -0,0 +1,9 @@
+package com.openclaw.module.activity.repository;
+
+import com.baomidou.mybatisplus.core.mapper.BaseMapper;
+import com.openclaw.module.activity.entity.Activity;
+import org.apache.ibatis.annotations.Mapper;
+
+@Mapper
+public interface ActivityRepository extends BaseMapper<Activity> {
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/activity/service/ActivityService.java

@@ -0,0 +1,32 @@
+package com.openclaw.module.activity.service;
+
+import com.baomidou.mybatisplus.core.metadata.IPage;
+import com.openclaw.module.activity.dto.ActivityCreateDTO;
+import com.openclaw.module.activity.dto.ActivityUpdateDTO;
+import com.openclaw.module.activity.vo.ActivityVO;
+
+import java.util.List;
+
+public interface ActivityService {
+
+    // ===== 管理端 =====
+    IPage<ActivityVO> listActivities(String status, String keyword, int page, int size);
+
+    ActivityVO getActivity(Long id);
+
+    ActivityVO createActivity(ActivityCreateDTO dto);
+
+    ActivityVO updateActivity(Long id, ActivityUpdateDTO dto);
+
+    void deleteActivity(Long id);
+
+    void changeStatus(Long id, String status);
+
+    // ===== 用户端 =====
+    List<ActivityVO> getActiveActivities();
+
+    ActivityVO getActivityPublic(Long id);
+
+    // ===== 定时任务 =====
+    void autoEndExpiredActivities();
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/activity/service/impl/ActivityServiceImpl.java

@@ -0,0 +1,190 @@
+package com.openclaw.module.activity.service.impl;
+
+import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
+import com.baomidou.mybatisplus.core.conditions.update.LambdaUpdateWrapper;
+import com.baomidou.mybatisplus.core.metadata.IPage;
+import com.baomidou.mybatisplus.extension.plugins.pagination.Page;
+import com.openclaw.module.activity.dto.ActivityCreateDTO;
+import com.openclaw.module.activity.dto.ActivityUpdateDTO;
+import com.openclaw.module.activity.entity.Activity;
+import com.openclaw.module.activity.repository.ActivityRepository;
+import com.openclaw.module.activity.service.ActivityService;
+import com.openclaw.module.activity.vo.ActivityVO;
+import lombok.RequiredArgsConstructor;
+import org.springframework.scheduling.annotation.Scheduled;
+import org.springframework.stereotype.Service;
+import org.springframework.transaction.annotation.Transactional;
+import org.springframework.util.StringUtils;
+
+import com.openclaw.exception.BusinessException;
+
+import java.time.LocalDateTime;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.Set;
+import java.util.stream.Collectors;
+
+@Service
+@RequiredArgsConstructor
+public class ActivityServiceImpl implements ActivityService {
+
+    private final ActivityRepository activityRepository;
+
+    private static final Map<String, String> STATUS_LABELS = new HashMap<>();
+    private static final Set<String> VALID_STATUSES = Set.of("draft", "active", "ended", "disabled");
+    static {
+        STATUS_LABELS.put("draft", "草稿");
+        STATUS_LABELS.put("active", "进行中");
+        STATUS_LABELS.put("ended", "已结束");
+        STATUS_LABELS.put("disabled", "已禁用");
+    }
+
+    // ===== 管理端 =====
+
+    @Override
+    public IPage<ActivityVO> listActivities(String status, String keyword, int page, int size) {
+        size = Math.min(size, 100);
+        LambdaQueryWrapper<Activity> wrapper = new LambdaQueryWrapper<>();
+        if (StringUtils.hasText(status)) {
+            wrapper.eq(Activity::getStatus, status);
+        }
+        if (StringUtils.hasText(keyword)) {
+            wrapper.and(w -> w.like(Activity::getTitle, keyword).or().like(Activity::getSubtitle, keyword));
+        }
+        wrapper.orderByDesc(Activity::getSortOrder).orderByDesc(Activity::getCreatedAt);
+
+        IPage<Activity> result = activityRepository.selectPage(new Page<>(page, size), wrapper);
+        return result.convert(this::toVO);
+    }
+
+    @Override
+    public ActivityVO getActivity(Long id) {
+        Activity activity = activityRepository.selectById(id);
+        if (activity == null) {
+            throw new BusinessException(404, "活动不存在");
+        }
+        return toVO(activity);
+    }
+
+    @Override
+    @Transactional
+    public ActivityVO createActivity(ActivityCreateDTO dto) {
+        Activity activity = new Activity();
+        activity.setTitle(dto.getTitle());
+        activity.setSubtitle(dto.getSubtitle());
+        activity.setCoverImage(dto.getCoverImage());
+        activity.setContent(dto.getContent());
+        activity.setLinkType(dto.getLinkType() != null ? dto.getLinkType() : "none");
+        activity.setLinkValue(dto.getLinkValue());
+        activity.setStartTime(dto.getStartTime());
+        activity.setEndTime(dto.getEndTime());
+        activity.setStatus("draft");
+        activity.setSortOrder(dto.getSortOrder() != null ? dto.getSortOrder() : 0);
+        activity.setCreatedAt(LocalDateTime.now());
+        activity.setUpdatedAt(LocalDateTime.now());
+        activityRepository.insert(activity);
+        return toVO(activity);
+    }
+
+    @Override
+    @Transactional
+    public ActivityVO updateActivity(Long id, ActivityUpdateDTO dto) {
+        Activity activity = activityRepository.selectById(id);
+        if (activity == null) {
+            throw new BusinessException(404, "活动不存在");
+        }
+        if (dto.getTitle() != null) activity.setTitle(dto.getTitle());
+        if (dto.getSubtitle() != null) activity.setSubtitle(dto.getSubtitle());
+        if (dto.getCoverImage() != null) activity.setCoverImage(dto.getCoverImage());
+        if (dto.getContent() != null) activity.setContent(dto.getContent());
+        if (dto.getLinkType() != null) activity.setLinkType(dto.getLinkType());
+        if (dto.getLinkValue() != null) activity.setLinkValue(dto.getLinkValue());
+        if (dto.getStartTime() != null) activity.setStartTime(dto.getStartTime());
+        if (dto.getEndTime() != null) activity.setEndTime(dto.getEndTime());
+        if (dto.getSortOrder() != null) activity.setSortOrder(dto.getSortOrder());
+        activity.setUpdatedAt(LocalDateTime.now());
+        activityRepository.updateById(activity);
+        return toVO(activity);
+    }
+
+    @Override
+    @Transactional
+    public void deleteActivity(Long id) {
+        activityRepository.deleteById(id);
+    }
+
+    @Override
+    @Transactional
+    public void changeStatus(Long id, String status) {
+        if (!VALID_STATUSES.contains(status)) {
+            throw new BusinessException(400, "无效的状态值: " + status);
+        }
+        Activity activity = activityRepository.selectById(id);
+        if (activity == null) {
+            throw new BusinessException(404, "活动不存在");
+        }
+        activity.setStatus(status);
+        activity.setUpdatedAt(LocalDateTime.now());
+        activityRepository.updateById(activity);
+    }
+
+    // ===== 用户端 =====
+
+    @Override
+    public List<ActivityVO> getActiveActivities() {
+        LocalDateTime now = LocalDateTime.now();
+        LambdaQueryWrapper<Activity> wrapper = new LambdaQueryWrapper<>();
+        wrapper.eq(Activity::getStatus, "active")
+                .le(Activity::getStartTime, now)
+                .ge(Activity::getEndTime, now)
+                .orderByDesc(Activity::getSortOrder);
+        return activityRepository.selectList(wrapper).stream()
+                .map(this::toVO)
+                .collect(Collectors.toList());
+    }
+
+    @Override
+    public ActivityVO getActivityPublic(Long id) {
+        Activity activity = activityRepository.selectById(id);
+        if (activity == null || !"active".equals(activity.getStatus())) {
+            throw new BusinessException(404, "活动不存在");
+        }
+        return toVO(activity);
+    }
+
+    // ===== 定时任务 =====
+
+    @Override
+    @Scheduled(cron = "0 * * * * ?")
+    @Transactional
+    public void autoEndExpiredActivities() {
+        LocalDateTime now = LocalDateTime.now();
+        LambdaUpdateWrapper<Activity> wrapper = new LambdaUpdateWrapper<>();
+        wrapper.eq(Activity::getStatus, "active")
+                .lt(Activity::getEndTime, now)
+                .set(Activity::getStatus, "ended")
+                .set(Activity::getUpdatedAt, now);
+        activityRepository.update(null, wrapper);
+    }
+
+    // ===== 私有方法 =====
+
+    private ActivityVO toVO(Activity activity) {
+        ActivityVO vo = new ActivityVO();
+        vo.setId(activity.getId());
+        vo.setTitle(activity.getTitle());
+        vo.setSubtitle(activity.getSubtitle());
+        vo.setCoverImage(activity.getCoverImage());
+        vo.setContent(activity.getContent());
+        vo.setLinkType(activity.getLinkType());
+        vo.setLinkValue(activity.getLinkValue());
+        vo.setStartTime(activity.getStartTime());
+        vo.setEndTime(activity.getEndTime());
+        vo.setStatus(activity.getStatus());
+        vo.setStatusLabel(STATUS_LABELS.getOrDefault(activity.getStatus(), "未知"));
+        vo.setSortOrder(activity.getSortOrder());
+        vo.setCreatedAt(activity.getCreatedAt());
+        return vo;
+    }
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/activity/vo/ActivityVO.java

@@ -0,0 +1,22 @@
+package com.openclaw.module.activity.vo;
+
+import lombok.Data;
+
+import java.time.LocalDateTime;
+
+@Data
+public class ActivityVO {
+    private Long id;
+    private String title;
+    private String subtitle;
+    private String coverImage;
+    private String content;
+    private String linkType;
+    private String linkValue;
+    private LocalDateTime startTime;
+    private LocalDateTime endTime;
+    private String status;
+    private String statusLabel;
+    private Integer sortOrder;
+    private LocalDateTime createdAt;
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/admin/controller/AdminController.java

@@ -8,6 +8,11 @@ import com.openclaw.module.admin.dto.AdminLoginDTO;
 import com.openclaw.module.admin.dto.AdminSkillCreateDTO;
 import com.openclaw.module.admin.service.AdminService;
 import com.openclaw.module.admin.vo.*;
+import com.openclaw.module.customization.entity.CustomizationRequest;
+import com.openclaw.module.customization.service.CustomizationRequestService;
+import com.openclaw.module.developer.entity.DeveloperApplication;
+import com.openclaw.module.developer.service.DeveloperApplicationService;
+import com.openclaw.util.UserContext;
 import jakarta.validation.Valid;
 import lombok.RequiredArgsConstructor;
 import org.springframework.web.bind.annotation.*;
@@ -18,6 +23,8 @@ import org.springframework.web.bind.annotation.*;
 public class AdminController {
 
     private final AdminService adminService;
+    private final CustomizationRequestService customizationRequestService;
+    private final DeveloperApplicationService developerApplicationService;
 
     // ==================== 登录（无需权限） ====================
 
@@ -42,6 +49,12 @@ public class AdminController {
         return Result.ok(adminService.getDashboardStats());
     }
 
+    @GetMapping("/dashboard/trends")
+    @RequiresRole("super_admin")
+    public Result<TrendDataVO> getTrends(@RequestParam(defaultValue = "30") int days) {
+        return Result.ok(adminService.getTrendData(days));
+    }
+
     // ==================== 用户管理 ====================
 
     @GetMapping("/users")
@@ -135,9 +148,8 @@ public class AdminController {
     @RequiresRole("super_admin")
     @OpLog(module = "skill", action = "create", description = "后台创建Skill", targetType = "skill")
     public Result<AdminSkillVO> createSkill(
-            @RequestAttribute("userId") Long adminUserId,
             @Valid @RequestBody AdminSkillCreateDTO dto) {
-        return Result.ok(adminService.createSkill(adminUserId, dto));
+        return Result.ok(adminService.createSkill(UserContext.getUserId(), dto));
     }
 
     // ==================== 订单管理 ====================
@@ -174,7 +186,7 @@ public class AdminController {
     @RequiresRole("super_admin")
     @OpLog(module = "order", action = "approve", description = "审批退款", targetType = "refund")
     public Result<Void> approveRefund(@PathVariable Long refundId) {
-        adminService.approveRefund(refundId);
+        adminService.approveRefund(refundId, UserContext.getUserId());
         return Result.ok();
     }
 
@@ -182,7 +194,7 @@ public class AdminController {
     @RequiresRole("super_admin")
     @OpLog(module = "order", action = "reject", description = "拒绝退款", targetType = "refund")
     public Result<Void> rejectRefund(@PathVariable Long refundId, @RequestParam String rejectReason) {
-        adminService.rejectRefund(refundId, rejectReason);
+        adminService.rejectRefund(refundId, rejectReason, UserContext.getUserId());
         return Result.ok();
     }
 
@@ -228,4 +240,50 @@ public class AdminController {
         adminService.adjustPoints(userId, amount, reason);
         return Result.ok();
     }
+
+    // ==================== 定制需求管理 ====================
+
+    @GetMapping("/customizations")
+    @RequiresRole("super_admin")
+    public Result<IPage<CustomizationRequest>> listCustomizations(
+            @RequestParam(required = false) String keyword,
+            @RequestParam(required = false) String status,
+            @RequestParam(defaultValue = "1") int pageNum,
+            @RequestParam(defaultValue = "10") int pageSize) {
+        return Result.ok(customizationRequestService.listRequests(keyword, status, pageNum, pageSize));
+    }
+
+    @PostMapping("/customizations/{id}/status")
+    @RequiresRole("super_admin")
+    @OpLog(module = "customization", action = "update", description = "更新定制需求状态", targetType = "customization")
+    public Result<Void> updateCustomizationStatus(
+            @PathVariable Long id,
+            @RequestParam String status,
+            @RequestParam(required = false) String contactNotes) {
+        customizationRequestService.updateStatus(id, status, contactNotes);
+        return Result.ok();
+    }
+
+    // ==================== 开发者申请管理 ====================
+
+    @GetMapping("/developers")
+    @RequiresRole("super_admin")
+    public Result<IPage<DeveloperApplication>> listDeveloperApplications(
+            @RequestParam(required = false) String keyword,
+            @RequestParam(required = false) String status,
+            @RequestParam(defaultValue = "1") int pageNum,
+            @RequestParam(defaultValue = "10") int pageSize) {
+        return Result.ok(developerApplicationService.listApplications(keyword, status, pageNum, pageSize));
+    }
+
+    @PostMapping("/developers/{id}/review")
+    @RequiresRole("super_admin")
+    @OpLog(module = "developer", action = "review", description = "审核开发者申请", targetType = "developer")
+    public Result<Void> reviewDeveloperApplication(
+            @PathVariable Long id,
+            @RequestParam String status,
+            @RequestParam(required = false) String rejectReason) {
+        developerApplicationService.reviewApplication(id, status, rejectReason, UserContext.getUserId());
+        return Result.ok();
+    }
 }

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/admin/dto/AdminLoginDTO.java

@@ -0,0 +1,12 @@
+package com.openclaw.module.admin.dto;
+
+import jakarta.validation.constraints.NotBlank;
+import lombok.Data;
+
+@Data
+public class AdminLoginDTO {
+    @NotBlank(message = "用户名不能为空")
+    private String username;
+    @NotBlank(message = "密码不能为空")
+    private String password;
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/admin/dto/AdminSkillCreateDTO.java

@@ -0,0 +1,23 @@
+package com.openclaw.module.admin.dto;
+
+import jakarta.validation.constraints.*;
+import lombok.Data;
+import java.math.BigDecimal;
+
+@Data
+public class AdminSkillCreateDTO {
+    @NotBlank(message = "Skill名称不能为空")
+    private String name;
+
+    private String description;
+    private String coverImageUrl;
+
+    @NotNull(message = "分类不能为空")
+    private Integer categoryId;
+
+    private BigDecimal price = BigDecimal.ZERO;
+    private Boolean isFree = false;
+    private String version;
+    private String fileUrl;
+    private Long fileSize;
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/admin/service/AdminService.java

@@ -0,0 +1,47 @@
+package com.openclaw.module.admin.service;
+
+import com.baomidou.mybatisplus.core.metadata.IPage;
+import com.openclaw.module.admin.dto.AdminLoginDTO;
+import com.openclaw.module.admin.dto.AdminSkillCreateDTO;
+import com.openclaw.module.admin.vo.*;
+
+public interface AdminService {
+
+    AdminLoginVO login(AdminLoginDTO dto);
+
+    DashboardStatsVO getDashboardStats();
+
+    TrendDataVO getTrendData(int days);
+
+    // 用户管理
+    IPage<AdminUserVO> listUsers(String keyword, String status, String role, int pageNum, int pageSize);
+    AdminUserVO getUserDetail(Long userId);
+    void banUser(Long userId, String reason);
+    void unbanUser(Long userId);
+    void changeUserRole(Long userId, String role);
+
+    // Skill管理
+    IPage<AdminSkillVO> listSkills(String keyword, String status, Integer categoryId, int pageNum, int pageSize);
+    AdminSkillVO getSkillDetail(Long skillId);
+    void auditSkill(Long skillId, String action, String rejectReason);
+    void offlineSkill(Long skillId);
+    void toggleFeatured(Long skillId);
+    AdminSkillVO createSkill(Long adminUserId, AdminSkillCreateDTO dto);
+
+    // 订单管理
+    IPage<AdminOrderVO> listOrders(String keyword, String status, int pageNum, int pageSize);
+    AdminOrderVO getOrderDetail(Long orderId);
+
+    // 退款审核
+    IPage<AdminRefundVO> listRefunds(String keyword, String status, int pageNum, int pageSize);
+    void approveRefund(Long refundId, Long operatorId);
+    void rejectRefund(Long refundId, String rejectReason, Long operatorId);
+
+    // 评论管理
+    IPage<AdminCommentVO> listComments(String keyword, Long skillId, int pageNum, int pageSize);
+    void deleteComment(Long commentId);
+
+    // 积分管理
+    IPage<AdminPointsRecordVO> listPointsRecords(Long userId, String pointsType, int pageNum, int pageSize);
+    void adjustPoints(Long userId, int amount, String reason);
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/admin/service/impl/AdminServiceImpl.java

@@ -42,12 +42,16 @@ import org.springframework.transaction.annotation.Transactional;
 import org.springframework.transaction.support.TransactionSynchronization;
 import org.springframework.transaction.support.TransactionSynchronizationManager;
 import com.openclaw.common.compensation.CompensationService;
+import com.openclaw.module.notification.service.NotificationService;
 
 import java.math.BigDecimal;
 import java.time.LocalDate;
 import java.time.LocalDateTime;
 import java.time.LocalTime;
+import java.util.ArrayList;
+import java.util.HashMap;
 import java.util.List;
+import java.util.Map;
 import java.util.stream.Collectors;
 
 @Slf4j
@@ -69,6 +73,7 @@ public class AdminServiceImpl implements AdminService {
     private final JwtUtil jwtUtil;
     private final PasswordEncoder passwordEncoder;
     private final CompensationService compensationService;
+    private final NotificationService notificationService;
 
     @Override
     public AdminLoginVO login(AdminLoginDTO dto) {
@@ -120,6 +125,68 @@ public class AdminServiceImpl implements AdminService {
         return vo;
     }
 
+    @Override
+    public TrendDataVO getTrendData(int days) {
+        if (days <= 0 || days > 90) days = 30;
+        TrendDataVO vo = new TrendDataVO();
+        List<String> dates = new ArrayList<>();
+        List<Long> userCounts = new ArrayList<>();
+        List<Long> orderCounts = new ArrayList<>();
+        List<BigDecimal> revenueCounts = new ArrayList<>();
+
+        LocalDate today = LocalDate.now();
+        LocalDate startDate = today.minusDays(days - 1);
+        LocalDateTime startDateTime = startDate.atStartOfDay();
+
+        // 3 条 GROUP BY 查询代替 N*3 次循环查询
+        Map<String, Long> userMap = toCountMap(userRepo.countByDateSince(startDateTime));
+        Map<String, Long> orderMap = toCountMap(orderRepo.countByDateSince(startDateTime));
+        Map<String, BigDecimal> revenueMap = toAmountMap(orderRepo.revenueByDateSince(startDateTime));
+
+        for (int i = 0; i < days; i++) {
+            LocalDate date = startDate.plusDays(i);
+            String key = date.toString();
+            dates.add(key);
+            userCounts.add(userMap.getOrDefault(key, 0L));
+            orderCounts.add(orderMap.getOrDefault(key, 0L));
+            revenueCounts.add(revenueMap.getOrDefault(key, BigDecimal.ZERO));
+        }
+
+        vo.setDates(dates);
+        vo.setUserCounts(userCounts);
+        vo.setOrderCounts(orderCounts);
+        vo.setRevenueCounts(revenueCounts);
+        return vo;
+    }
+
+    private Map<String, Long> toCountMap(List<Map<String, Object>> rows) {
+        Map<String, Long> map = new HashMap<>();
+        if (rows != null) {
+            for (Map<String, Object> row : rows) {
+                Object dt = row.get("dt");
+                Object cnt = row.get("cnt");
+                if (dt != null && cnt != null) {
+                    map.put(dt.toString(), ((Number) cnt).longValue());
+                }
+            }
+        }
+        return map;
+    }
+
+    private Map<String, BigDecimal> toAmountMap(List<Map<String, Object>> rows) {
+        Map<String, BigDecimal> map = new HashMap<>();
+        if (rows != null) {
+            for (Map<String, Object> row : rows) {
+                Object dt = row.get("dt");
+                Object amt = row.get("amt");
+                if (dt != null && amt != null) {
+                    map.put(dt.toString(), amt instanceof BigDecimal ? (BigDecimal) amt : new BigDecimal(amt.toString()));
+                }
+            }
+        }
+        return map;
+    }
+
     // ==================== 用户管理 ====================
 
     @Override
@@ -223,6 +290,18 @@ public class AdminServiceImpl implements AdminService {
         }
         skillRepo.updateById(skill);
         log.info("[Admin] 审核Skill: skillId={}, action={}", skillId, action);
+        // 站内通知Skill作者
+        try {
+            if ("approve".equals(action)) {
+                notificationService.createNotification(skill.getCreatorId(), "system", "Skill审核通过",
+                    "您的Skill「" + skill.getName() + "」已通过审核，现已上架", String.valueOf(skillId));
+            } else {
+                notificationService.createNotification(skill.getCreatorId(), "system", "Skill审核未通过",
+                    "您的Skill「" + skill.getName() + "」未通过审核" + (rejectReason != null ? "：" + rejectReason : ""), String.valueOf(skillId));
+            }
+        } catch (Exception e) {
+            log.warn("[通知] Skill审核通知发送失败: skillId={}", skillId, e);
+        }
     }
 
     @Override
@@ -521,6 +600,16 @@ public class AdminServiceImpl implements AdminService {
                     compensationService.createMqTask("mq_refund_approved", "refund_" + logRefundId,
                         MQConstants.EXCHANGE_TOPIC, MQConstants.RK_REFUND_APPROVED, event);
                 }
+                // 发送站内通知
+                try {
+                    Long notifyUserId = event.getUserId();
+                    if (notifyUserId != null) {
+                        notificationService.createNotification(notifyUserId, "order", "退款已处理",
+                            "您的退款申请已通过，退款金额将原路退回", String.valueOf(logRefundId));
+                    }
+                } catch (Exception ex) {
+                    log.warn("[通知] 退款通过通知发送失败: refundId={}", logRefundId, ex);
+                }
             }
         });
     }
@@ -551,6 +640,15 @@ public class AdminServiceImpl implements AdminService {
             orderRepo.updateById(order);
         }
         log.info("[Admin] 退款已拒绝: refundId={}, reason={}, operatorId={}", refundId, rejectReason, operatorId);
+        // 站内通知用户退款被拒绝
+        try {
+            if (order != null) {
+                notificationService.createNotification(order.getUserId(), "order", "退款申请被拒绝",
+                    "您的退款申请已被拒绝" + (rejectReason != null ? "：" + rejectReason : ""), String.valueOf(refundId));
+            }
+        } catch (Exception e) {
+            log.warn("[通知] 退款拒绝通知发送失败: refundId={}", refundId, e);
+        }
     }
 
     private AdminRefundVO toAdminRefundVO(OrderRefund refund) {

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/admin/vo/AdminCommentVO.java

@@ -0,0 +1,19 @@
+package com.openclaw.module.admin.vo;
+
+import lombok.Data;
+import java.time.LocalDateTime;
+
+@Data
+public class AdminCommentVO {
+    private Long id;
+    private Long skillId;
+    private String skillName;
+    private Long userId;
+    private String userNickname;
+    private Integer rating;
+    private String content;
+    private String images;
+    private Integer helpfulCount;
+    private String status;
+    private LocalDateTime createdAt;
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/admin/vo/AdminLoginVO.java

@@ -0,0 +1,10 @@
+package com.openclaw.module.admin.vo;
+
+import lombok.Data;
+
+@Data
+public class AdminLoginVO {
+    private String token;
+    private String username;
+    private String role;
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/admin/vo/AdminOrderVO.java

@@ -0,0 +1,24 @@
+package com.openclaw.module.admin.vo;
+
+import com.openclaw.module.order.vo.OrderItemVO;
+import lombok.Data;
+import java.math.BigDecimal;
+import java.time.LocalDateTime;
+import java.util.List;
+
+@Data
+public class AdminOrderVO {
+    private Long id;
+    private String orderNo;
+    private Long userId;
+    private String userNickname;
+    private BigDecimal totalAmount;
+    private BigDecimal cashAmount;
+    private Integer pointsUsed;
+    private String status;
+    private String statusLabel;
+    private String paymentMethod;
+    private LocalDateTime createdAt;
+    private LocalDateTime paidAt;
+    private List<OrderItemVO> items;
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/admin/vo/AdminPointsRecordVO.java

@@ -0,0 +1,17 @@
+package com.openclaw.module.admin.vo;
+
+import lombok.Data;
+import java.time.LocalDateTime;
+
+@Data
+public class AdminPointsRecordVO {
+    private Long id;
+    private Long userId;
+    private String userNickname;
+    private String pointsType;
+    private String source;
+    private Integer amount;
+    private Integer balance;
+    private String description;
+    private LocalDateTime createdAt;
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/admin/vo/AdminRefundVO.java

@@ -0,0 +1,24 @@
+package com.openclaw.module.admin.vo;
+
+import lombok.Data;
+import java.math.BigDecimal;
+import java.time.LocalDateTime;
+
+@Data
+public class AdminRefundVO {
+    private Long id;
+    private Long orderId;
+    private String orderNo;
+    private String refundNo;
+    private BigDecimal refundAmount;
+    private Integer refundPoints;
+    private String reason;
+    private String status;
+    private String rejectReason;
+    private Long operatorId;
+    private LocalDateTime processedAt;
+    private LocalDateTime createdAt;
+    // 关联信息
+    private Long userId;
+    private String userNickname;
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/admin/vo/AdminSkillVO.java

@@ -0,0 +1,28 @@
+package com.openclaw.module.admin.vo;
+
+import lombok.Data;
+import java.math.BigDecimal;
+import java.time.LocalDateTime;
+
+@Data
+public class AdminSkillVO {
+    private Long id;
+    private String name;
+    private String description;
+    private String coverImageUrl;
+    private Integer categoryId;
+    private String categoryName;
+    private BigDecimal price;
+    private Boolean isFree;
+    private String status;
+    private String rejectReason;
+    private Integer downloadCount;
+    private BigDecimal rating;
+    private Integer ratingCount;
+    private String version;
+    private String creatorNickname;
+    private Long creatorId;
+    private Boolean isFeatured;
+    private LocalDateTime createdAt;
+    private LocalDateTime auditedAt;
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/admin/vo/AdminUserVO.java

@@ -0,0 +1,20 @@
+package com.openclaw.module.admin.vo;
+
+import lombok.Data;
+import java.time.LocalDateTime;
+
+@Data
+public class AdminUserVO {
+    private Long id;
+    private String phone;
+    private String nickname;
+    private String avatarUrl;
+    private String role;
+    private String status;
+    private String memberLevel;
+    private Integer growthValue;
+    private Integer availablePoints;
+    private String banReason;
+    private LocalDateTime createdAt;
+    private LocalDateTime updatedAt;
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/admin/vo/DashboardStatsVO.java

@@ -0,0 +1,19 @@
+package com.openclaw.module.admin.vo;
+
+import lombok.Data;
+import java.math.BigDecimal;
+
+@Data
+public class DashboardStatsVO {
+    private Long totalUsers;
+    private Long activeUsers;
+    private Long totalSkills;
+    private Long activeSkills;
+    private Long totalOrders;
+    private Long completedOrders;
+    private BigDecimal totalRevenue;
+    private Long totalPointsIssued;
+    private Long totalPointsConsumed;
+    private Long todayNewUsers;
+    private Long todayOrders;
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/admin/vo/TrendDataVO.java

@@ -0,0 +1,13 @@
+package com.openclaw.module.admin.vo;
+
+import lombok.Data;
+import java.math.BigDecimal;
+import java.util.List;
+
+@Data
+public class TrendDataVO {
+    private List<String> dates;
+    private List<Long> userCounts;
+    private List<Long> orderCounts;
+    private List<BigDecimal> revenueCounts;
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/common/controller/ConfigController.java

@@ -0,0 +1,52 @@
+package com.openclaw.module.common.controller;
+
+import com.openclaw.common.Result;
+import com.openclaw.module.payment.config.RechargeConfig;
+import com.openclaw.module.points.entity.PointsRule;
+import com.openclaw.module.points.repository.PointsRuleRepository;
+import lombok.RequiredArgsConstructor;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.stream.Collectors;
+
+@RestController
+@RequestMapping("/api/v1/config")
+@RequiredArgsConstructor
+public class ConfigController {
+
+    private final RechargeConfig rechargeConfig;
+    private final PointsRuleRepository pointsRuleRepository;
+
+    /** 获取充值档位（公开接口，无需登录） */
+    @GetMapping("/recharge-tiers")
+    public Result<List<Map<String, Object>>> getRechargeTiers() {
+        List<Map<String, Object>> tiers = rechargeConfig.getTiers().stream()
+                .map(t -> {
+                    Map<String, Object> m = new HashMap<>();
+                    m.put("amount", t.getAmount().intValue());
+                    m.put("bonus", t.getBonusPoints());
+                    return m;
+                })
+                .collect(Collectors.toList());
+        return Result.ok(tiers);
+    }
+
+    /** 获取积分规则（公开接口，无需登录） */
+    @GetMapping("/point-rules")
+    public Result<Map<String, Object>> getPointRules() {
+        List<PointsRule> rules = pointsRuleRepository.selectList(
+                new com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper<PointsRule>()
+                        .eq(PointsRule::getEnabled, true)
+        );
+        Map<String, Object> ruleMap = new HashMap<>();
+        for (PointsRule rule : rules) {
+            ruleMap.put(rule.getSource(), rule.getPointsAmount());
+        }
+        return Result.ok(ruleMap);
+    }
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/common/controller/FileUploadController.java

@@ -2,8 +2,14 @@ package com.openclaw.module.common.controller;
 
 import com.openclaw.annotation.RequiresRole;
 import com.openclaw.common.Result;
+import com.openclaw.config.CosConfig;
 import com.openclaw.util.UserContext;
+import com.qcloud.cos.COSClient;
+import com.qcloud.cos.model.ObjectMetadata;
+import com.qcloud.cos.model.PutObjectRequest;
+import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
+import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.beans.factory.annotation.Value;
 import org.springframework.web.bind.annotation.*;
 import org.springframework.web.multipart.MultipartFile;
@@ -21,29 +27,65 @@ import java.util.UUID;
 @RestController
 @RequestMapping("/api/v1/upload")
 @RequiresRole("user")
+@RequiredArgsConstructor
 public class FileUploadController {
 
+    private final CosConfig cosConfig;
+
+    @Autowired(required = false)
+    private COSClient cosClient;
+
     @Value("${upload.path:./uploads}")
     private String uploadPath;
 
     @Value("${upload.base-url:http://localhost:8080/uploads}")
     private String baseUrl;
 
-    /** 允许的文件扩展名白名单 */
-    private static final Set<String> ALLOWED_EXTENSIONS = Set.of(
+    /** 允许的图片/PDF扩展名 */
+    private static final Set<String> IMAGE_EXTENSIONS = Set.of(
         ".jpg", ".jpeg", ".png", ".gif", ".webp", ".bmp", ".pdf"
     );
 
-    /** 允许的MIME类型白名单 */
-    private static final Set<String> ALLOWED_MIME_TYPES = Set.of(
+    /** 允许的简历扩展名 */
+    private static final Set<String> RESUME_EXTENSIONS = Set.of(
+        ".pdf", ".doc", ".docx"
+    );
+
+    /** 允许的视频扩展名 */
+    private static final Set<String> VIDEO_EXTENSIONS = Set.of(
+        ".mp4", ".mov", ".avi", ".webm", ".mkv"
+    );
+
+    /** 允许的图片/PDF MIME类型 */
+    private static final Set<String> IMAGE_MIME_TYPES = Set.of(
         "image/jpeg", "image/png", "image/gif", "image/webp", "image/bmp", "application/pdf"
     );
 
+    /** 允许的简历MIME类型 */
+    private static final Set<String> RESUME_MIME_TYPES = Set.of(
+        "application/pdf",
+        "application/msword",
+        "application/vnd.openxmlformats-officedocument.wordprocessingml.document"
+    );
+
+    /** 允许的视频MIME类型 */
+    private static final Set<String> VIDEO_MIME_TYPES = Set.of(
+        "video/mp4", "video/quicktime", "video/x-msvideo", "video/webm", "video/x-matroska"
+    );
+
     /** 允许的上传类型（防止路径遍历） */
     private static final Set<String> ALLOWED_UPLOAD_TYPES = Set.of(
-        "avatar", "skill", "review", "invoice", "refund", "banner", "announcement"
+        "avatar", "skill", "review", "invoice", "refund", "banner", "announcement",
+        "resume", "video"
     );
 
+    /** 简历最大5MB */
+    private static final long RESUME_MAX_SIZE = 5 * 1024 * 1024;
+    /** 视频最大100MB */
+    private static final long VIDEO_MAX_SIZE = 100 * 1024 * 1024;
+    /** 图片最大5MB */
+    private static final long IMAGE_MAX_SIZE = 5 * 1024 * 1024;
+
     /**
      * 上传头像
      */
@@ -73,9 +115,36 @@ public class FileUploadController {
             return Result.fail(400, "不支持的上传类型: " + type);
         }
 
-        // 限制文件大小 (5MB)
-        if (file.getSize() > 5 * 1024 * 1024) {
-            return Result.fail(400, "文件大小不能超过5MB");
+        // 根据类型获取允许的扩展名、MIME类型和大小限制
+        Set<String> allowedExts;
+        Set<String> allowedMimes;
+        long maxSize;
+        String extTip;
+
+        switch (type) {
+            case "resume" -> {
+                allowedExts = RESUME_EXTENSIONS;
+                allowedMimes = RESUME_MIME_TYPES;
+                maxSize = RESUME_MAX_SIZE;
+                extTip = "pdf/doc/docx";
+            }
+            case "video" -> {
+                allowedExts = VIDEO_EXTENSIONS;
+                allowedMimes = VIDEO_MIME_TYPES;
+                maxSize = VIDEO_MAX_SIZE;
+                extTip = "mp4/mov/avi/webm/mkv";
+            }
+            default -> {
+                allowedExts = IMAGE_EXTENSIONS;
+                allowedMimes = IMAGE_MIME_TYPES;
+                maxSize = IMAGE_MAX_SIZE;
+                extTip = "jpg/jpeg/png/gif/webp/bmp/pdf";
+            }
+        }
+
+        // 限制文件大小
+        if (file.getSize() > maxSize) {
+            return Result.fail(400, "文件大小不能超过" + (maxSize / 1024 / 1024) + "MB");
         }
 
         // 校验文件扩展名
@@ -84,23 +153,24 @@ public class FileUploadController {
         if (originalName != null && originalName.contains(".")) {
             ext = originalName.substring(originalName.lastIndexOf(".")).toLowerCase();
         }
-        if (ext.isEmpty() || !ALLOWED_EXTENSIONS.contains(ext)) {
-            return Result.fail(400, "不支持的文件类型，仅允许: jpg/jpeg/png/gif/webp/bmp/pdf");
+        if (ext.isEmpty() || !allowedExts.contains(ext)) {
+            return Result.fail(400, "不支持的文件类型，仅允许: " + extTip);
         }
 
         // 校验MIME类型
         String contentType = file.getContentType();
-        if (contentType == null || !ALLOWED_MIME_TYPES.contains(contentType.toLowerCase())) {
+        if (contentType == null || !allowedMimes.contains(contentType.toLowerCase())) {
             return Result.fail(400, "文件MIME类型不合法");
         }
 
         String storedName = UUID.randomUUID().toString() + ext;
-        Path dir = Paths.get(uploadPath, type);
-        Files.createDirectories(dir);
-        Path filePath = dir.resolve(storedName);
-        file.transferTo(filePath.toFile());
+        String fileUrl;
 
-        String fileUrl = baseUrl + "/" + type + "/" + storedName;
+        if (cosConfig.isEnabled() && cosClient != null) {
+            fileUrl = uploadToCos(file, type, storedName, contentType);
+        } else {
+            fileUrl = uploadToLocal(file, type, storedName);
+        }
 
         Map<String, String> result = new HashMap<>();
         result.put("url", fileUrl);
@@ -109,4 +179,28 @@ public class FileUploadController {
         log.info("文件上传成功: type={}, userId={}, url={}", type, userId, fileUrl);
         return Result.ok(result);
     }
+
+    private String uploadToCos(MultipartFile file, String type, String storedName, String contentType) throws IOException {
+        String cosKey = "uploads/" + type + "/" + storedName;
+
+        ObjectMetadata metadata = new ObjectMetadata();
+        metadata.setContentLength(file.getSize());
+        metadata.setContentType(contentType);
+
+        PutObjectRequest putRequest = new PutObjectRequest(
+            cosConfig.getBucket(), cosKey, file.getInputStream(), metadata
+        );
+        cosClient.putObject(putRequest);
+
+        log.info("COS上传成功: key={}", cosKey);
+        return cosConfig.getBaseUrl() + "/" + cosKey;
+    }
+
+    private String uploadToLocal(MultipartFile file, String type, String storedName) throws IOException {
+        Path dir = Paths.get(uploadPath, type);
+        Files.createDirectories(dir);
+        Path filePath = dir.resolve(storedName);
+        file.transferTo(filePath.toFile());
+        return baseUrl + "/" + type + "/" + storedName;
+    }
 }

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/common/controller/StatsController.java

@@ -0,0 +1,35 @@
+package com.openclaw.module.common.controller;
+
+import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper;
+import com.openclaw.common.Result;
+import com.openclaw.module.order.repository.OrderRepository;
+import com.openclaw.module.skill.repository.SkillRepository;
+import com.openclaw.module.user.repository.UserRepository;
+import lombok.RequiredArgsConstructor;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+import java.util.HashMap;
+import java.util.Map;
+
+@RestController
+@RequestMapping("/api/v1/stats")
+@RequiredArgsConstructor
+public class StatsController {
+
+    private final UserRepository userRepository;
+    private final SkillRepository skillRepository;
+    private final OrderRepository orderRepository;
+
+    @GetMapping("/home")
+    public Result<Map<String, Long>> getHomeStats() {
+        Map<String, Long> stats = new HashMap<>();
+        stats.put("totalSkills", skillRepository.selectCount(
+                new QueryWrapper<com.openclaw.module.skill.entity.Skill>().eq("status", "approved")));
+        stats.put("totalUsers", userRepository.selectCount(null));
+        stats.put("totalDownloads", orderRepository.selectCount(
+                new QueryWrapper<com.openclaw.module.order.entity.Order>().in("status", "paid", "completed")));
+        return Result.ok(stats);
+    }
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/community/controller/AdminCommunityController.java

@@ -0,0 +1,102 @@
+package com.openclaw.module.community.controller;
+
+import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
+import com.baomidou.mybatisplus.core.metadata.IPage;
+import com.baomidou.mybatisplus.extension.plugins.pagination.Page;
+import com.openclaw.annotation.RequiresRole;
+import com.openclaw.common.Result;
+import com.openclaw.module.community.entity.CommunityJoinRequest;
+import com.openclaw.module.community.repository.CommunityJoinRequestRepository;
+import com.openclaw.module.coupon.dto.CouponIssueDTO;
+import com.openclaw.module.coupon.service.CouponService;
+import com.openclaw.util.UserContext;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.web.bind.annotation.*;
+
+import java.time.LocalDateTime;
+import java.util.List;
+import java.util.Map;
+
+@Slf4j
+@RestController
+@RequestMapping("/api/v1/admin/community")
+@RequiresRole({"admin", "super_admin"})
+@RequiredArgsConstructor
+public class AdminCommunityController {
+
+    private final CommunityJoinRequestRepository requestRepo;
+    private final CouponService couponService;
+
+    /** 社群申请列表(分页+状态筛选) */
+    @GetMapping("/requests")
+    public Result<IPage<CommunityJoinRequest>> listRequests(
+            @RequestParam(required = false) String status,
+            @RequestParam(defaultValue = "1") int pageNum,
+            @RequestParam(defaultValue = "10") int pageSize) {
+        LambdaQueryWrapper<CommunityJoinRequest> wrapper = new LambdaQueryWrapper<>();
+        if (status != null && !status.isEmpty()) {
+            wrapper.eq(CommunityJoinRequest::getStatus, status);
+        }
+        wrapper.orderByDesc(CommunityJoinRequest::getCreatedAt);
+        IPage<CommunityJoinRequest> page = requestRepo.selectPage(new Page<>(pageNum, pageSize), wrapper);
+        return Result.ok(page);
+    }
+
+    /** 审核通过并发券 */
+    @PostMapping("/requests/{id}/approve")
+    public Result<Map<String, Object>> approve(
+            @PathVariable Long id,
+            @RequestParam Long templateId,
+            @RequestParam(required = false) String remark) {
+        CommunityJoinRequest req = requestRepo.selectById(id);
+        if (req == null) {
+            return Result.fail(404, "申请不存在");
+        }
+        if (!"pending".equals(req.getStatus())) {
+            return Result.fail(400, "该申请已处理");
+        }
+
+        // 发券
+        CouponIssueDTO issueDTO = new CouponIssueDTO();
+        issueDTO.setTemplateId(templateId);
+        issueDTO.setUserIds(List.of(req.getUserId()));
+        int issued = couponService.issueCoupons(issueDTO);
+
+        // 更新申请状态
+        req.setStatus("approved");
+        req.setCouponTemplateId(templateId);
+        req.setAdminRemark(remark);
+        req.setReviewedBy(UserContext.getUserId());
+        req.setReviewedAt(LocalDateTime.now());
+        req.setUpdatedAt(LocalDateTime.now());
+        requestRepo.updateById(req);
+
+        log.info("[社群审核] 通过申请 id={}, userId={}, 发券模板={}, 发券数={}", id, req.getUserId(), templateId, issued);
+        return Result.ok(Map.of("issued", issued));
+    }
+
+    /** 审核拒绝 */
+    @PostMapping("/requests/{id}/reject")
+    public Result<Void> reject(
+            @PathVariable Long id,
+            @RequestParam(required = false) String remark) {
+        CommunityJoinRequest req = requestRepo.selectById(id);
+        if (req == null) {
+            return Result.fail(404, "申请不存在");
+        }
+        if (!"pending".equals(req.getStatus())) {
+            return Result.fail(400, "该申请已处理");
+        }
+
+        req.setStatus("rejected");
+        req.setAdminRemark(remark);
+        req.setReviewedBy(UserContext.getUserId());
+        req.setReviewedAt(LocalDateTime.now());
+        req.setUpdatedAt(LocalDateTime.now());
+        requestRepo.updateById(req);
+
+        log.info("[社群审核] 拒绝申请 id={}, userId={}", id, req.getUserId());
+        return Result.ok(null);
+    }
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/community/controller/CommunityController.java

@@ -0,0 +1,80 @@
+package com.openclaw.module.community.controller;
+
+import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
+import com.openclaw.common.Result;
+import com.openclaw.module.community.entity.CommunityJoinRequest;
+import com.openclaw.module.community.repository.CommunityJoinRequestRepository;
+import com.openclaw.util.UserContext;
+import lombok.RequiredArgsConstructor;
+import org.springframework.web.bind.annotation.*;
+
+import java.time.LocalDateTime;
+import java.util.Map;
+
+@RestController
+@RequestMapping("/api/v1/community")
+@RequiredArgsConstructor
+public class CommunityController {
+
+    private final CommunityJoinRequestRepository requestRepo;
+
+    /** 提交加入社群申请 */
+    @PostMapping("/join")
+    public Result<Map<String, Object>> applyJoin() {
+        Long userId = UserContext.getUserId();
+
+        // 检查是否已有待审核或已通过的申请
+        Long count = requestRepo.selectCount(
+            new LambdaQueryWrapper<CommunityJoinRequest>()
+                .eq(CommunityJoinRequest::getUserId, userId)
+                .in(CommunityJoinRequest::getStatus, "pending", "approved")
+        );
+        if (count > 0) {
+            // 查最新一条
+            CommunityJoinRequest existing = requestRepo.selectOne(
+                new LambdaQueryWrapper<CommunityJoinRequest>()
+                    .eq(CommunityJoinRequest::getUserId, userId)
+                    .in(CommunityJoinRequest::getStatus, "pending", "approved")
+                    .orderByDesc(CommunityJoinRequest::getCreatedAt)
+                    .last("LIMIT 1")
+            );
+            if (existing != null && "approved".equals(existing.getStatus())) {
+                return Result.fail(400, "您已通过社群审核");
+            }
+            return Result.fail(400, "您已提交申请，请等待管理员审核");
+        }
+
+        CommunityJoinRequest request = new CommunityJoinRequest();
+        request.setUserId(userId);
+        request.setStatus("pending");
+        request.setCreatedAt(LocalDateTime.now());
+        request.setUpdatedAt(LocalDateTime.now());
+        requestRepo.insert(request);
+
+        return Result.ok(Map.of("id", request.getId(), "status", "pending"));
+    }
+
+    /** 查询我的社群申请状态 */
+    @GetMapping("/join/status")
+    public Result<Map<String, Object>> getJoinStatus() {
+        Long userId = UserContext.getUserId();
+
+        CommunityJoinRequest req = requestRepo.selectOne(
+            new LambdaQueryWrapper<CommunityJoinRequest>()
+                .eq(CommunityJoinRequest::getUserId, userId)
+                .orderByDesc(CommunityJoinRequest::getCreatedAt)
+                .last("LIMIT 1")
+        );
+
+        if (req == null) {
+            return Result.ok(Map.of("status", "none"));
+        }
+
+        return Result.ok(Map.of(
+            "id", req.getId(),
+            "status", req.getStatus(),
+            "adminRemark", req.getAdminRemark() != null ? req.getAdminRemark() : "",
+            "createdAt", req.getCreatedAt().toString()
+        ));
+    }
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/community/entity/CommunityJoinRequest.java

@@ -0,0 +1,21 @@
+package com.openclaw.module.community.entity;
+
+import com.baomidou.mybatisplus.annotation.*;
+import lombok.Data;
+import java.time.LocalDateTime;
+
+@Data
+@TableName("community_join_requests")
+public class CommunityJoinRequest {
+    @TableId(type = IdType.AUTO)
+    private Long id;
+    private Long userId;
+    private String status;           // pending / approved / rejected
+    private Long couponTemplateId;   // 审核通过时下发的券模板ID
+    private Long couponId;           // 实际下发的用户券ID
+    private String adminRemark;
+    private Long reviewedBy;
+    private LocalDateTime reviewedAt;
+    private LocalDateTime createdAt;
+    private LocalDateTime updatedAt;
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/community/repository/CommunityJoinRequestRepository.java

@@ -0,0 +1,9 @@
+package com.openclaw.module.community.repository;
+
+import com.baomidou.mybatisplus.core.mapper.BaseMapper;
+import com.openclaw.module.community.entity.CommunityJoinRequest;
+import org.apache.ibatis.annotations.Mapper;
+
+@Mapper
+public interface CommunityJoinRequestRepository extends BaseMapper<CommunityJoinRequest> {
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/content/controller/AnnouncementController.java

@@ -0,0 +1,68 @@
+package com.openclaw.module.content.controller;
+
+import com.baomidou.mybatisplus.core.metadata.IPage;
+import com.openclaw.annotation.RequiresRole;
+import com.openclaw.common.Result;
+import com.openclaw.module.content.dto.AnnouncementCreateDTO;
+import com.openclaw.module.content.dto.AnnouncementUpdateDTO;
+import com.openclaw.module.content.service.AnnouncementService;
+import com.openclaw.module.content.vo.AnnouncementVO;
+import com.openclaw.util.UserContext;
+import jakarta.validation.Valid;
+import lombok.RequiredArgsConstructor;
+import org.springframework.web.bind.annotation.*;
+
+import java.util.List;
+
+@RestController
+@RequiredArgsConstructor
+public class AnnouncementController {
+
+    private final AnnouncementService announcementService;
+
+    // ==================== 公开接口 ====================
+
+    @GetMapping("/api/v1/announcements/active")
+    public Result<List<AnnouncementVO>> getActiveAnnouncements() {
+        return Result.ok(announcementService.getActiveAnnouncements());
+    }
+
+    // ==================== 管理后台接口 ====================
+
+    @GetMapping("/api/v1/admin/announcements")
+    @RequiresRole({"admin", "super_admin"})
+    public Result<IPage<AnnouncementVO>> listAnnouncements(
+            @RequestParam(required = false) String keyword,
+            @RequestParam(required = false) Boolean enabled,
+            @RequestParam(defaultValue = "1") int pageNum,
+            @RequestParam(defaultValue = "10") int pageSize) {
+        return Result.ok(announcementService.list(keyword, enabled, pageNum, pageSize));
+    }
+
+    @GetMapping("/api/v1/admin/announcements/{id}")
+    @RequiresRole({"admin", "super_admin"})
+    public Result<AnnouncementVO> getAnnouncement(@PathVariable Long id) {
+        return Result.ok(announcementService.getById(id));
+    }
+
+    @PostMapping("/api/v1/admin/announcements")
+    @RequiresRole({"admin", "super_admin"})
+    public Result<AnnouncementVO> createAnnouncement(@Valid @RequestBody AnnouncementCreateDTO dto) {
+        return Result.ok(announcementService.create(dto, UserContext.getUserId()));
+    }
+
+    @PutMapping("/api/v1/admin/announcements/{id}")
+    @RequiresRole({"admin", "super_admin"})
+    public Result<AnnouncementVO> updateAnnouncement(
+            @PathVariable Long id,
+            @Valid @RequestBody AnnouncementUpdateDTO dto) {
+        return Result.ok(announcementService.update(id, dto));
+    }
+
+    @DeleteMapping("/api/v1/admin/announcements/{id}")
+    @RequiresRole({"admin", "super_admin"})
+    public Result<Void> deleteAnnouncement(@PathVariable Long id) {
+        announcementService.delete(id);
+        return Result.ok();
+    }
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/content/controller/BannerController.java

@@ -0,0 +1,68 @@
+package com.openclaw.module.content.controller;
+
+import com.baomidou.mybatisplus.core.metadata.IPage;
+import com.openclaw.annotation.RequiresRole;
+import com.openclaw.common.Result;
+import com.openclaw.module.content.dto.BannerCreateDTO;
+import com.openclaw.module.content.dto.BannerUpdateDTO;
+import com.openclaw.module.content.service.BannerService;
+import com.openclaw.module.content.vo.BannerVO;
+import com.openclaw.util.UserContext;
+import jakarta.validation.Valid;
+import lombok.RequiredArgsConstructor;
+import org.springframework.web.bind.annotation.*;
+
+import java.util.List;
+
+@RestController
+@RequiredArgsConstructor
+public class BannerController {
+
+    private final BannerService bannerService;
+
+    // ==================== 公开接口 ====================
+
+    @GetMapping("/api/v1/banners/active")
+    public Result<List<BannerVO>> getActiveBanners() {
+        return Result.ok(bannerService.getActiveBanners());
+    }
+
+    // ==================== 管理后台接口 ====================
+
+    @GetMapping("/api/v1/admin/banners")
+    @RequiresRole({"admin", "super_admin"})
+    public Result<IPage<BannerVO>> listBanners(
+            @RequestParam(required = false) String keyword,
+            @RequestParam(required = false) Boolean enabled,
+            @RequestParam(defaultValue = "1") int pageNum,
+            @RequestParam(defaultValue = "10") int pageSize) {
+        return Result.ok(bannerService.list(keyword, enabled, pageNum, pageSize));
+    }
+
+    @GetMapping("/api/v1/admin/banners/{id}")
+    @RequiresRole({"admin", "super_admin"})
+    public Result<BannerVO> getBanner(@PathVariable Long id) {
+        return Result.ok(bannerService.getById(id));
+    }
+
+    @PostMapping("/api/v1/admin/banners")
+    @RequiresRole({"admin", "super_admin"})
+    public Result<BannerVO> createBanner(@Valid @RequestBody BannerCreateDTO dto) {
+        return Result.ok(bannerService.create(dto, UserContext.getUserId()));
+    }
+
+    @PutMapping("/api/v1/admin/banners/{id}")
+    @RequiresRole({"admin", "super_admin"})
+    public Result<BannerVO> updateBanner(
+            @PathVariable Long id,
+            @Valid @RequestBody BannerUpdateDTO dto) {
+        return Result.ok(bannerService.update(id, dto));
+    }
+
+    @DeleteMapping("/api/v1/admin/banners/{id}")
+    @RequiresRole({"admin", "super_admin"})
+    public Result<Void> deleteBanner(@PathVariable Long id) {
+        bannerService.delete(id);
+        return Result.ok();
+    }
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/content/dto/AnnouncementCreateDTO.java

@@ -0,0 +1,19 @@
+package com.openclaw.module.content.dto;
+
+import jakarta.validation.constraints.*;
+import lombok.Data;
+
+@Data
+public class AnnouncementCreateDTO {
+    @NotBlank(message = "标题不能为空")
+    private String title;
+    @NotBlank(message = "内容不能为空")
+    private String content;
+    @Pattern(regexp = "info|warning|success|error", message = "公告类型只能是 info/warning/success/error")
+    private String type;          // info/warning/success/error
+    private Boolean pinned;
+    private Boolean enabled;
+    private Integer sortOrder;
+    private String startTime;
+    private String endTime;
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/content/dto/AnnouncementUpdateDTO.java

@@ -0,0 +1,15 @@
+package com.openclaw.module.content.dto;
+
+import lombok.Data;
+
+@Data
+public class AnnouncementUpdateDTO {
+    private String title;
+    private String content;
+    private String type;
+    private Boolean pinned;
+    private Boolean enabled;
+    private Integer sortOrder;
+    private String startTime;
+    private String endTime;
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/content/dto/BannerCreateDTO.java

@@ -0,0 +1,22 @@
+package com.openclaw.module.content.dto;
+
+import jakarta.validation.constraints.*;
+import lombok.Data;
+
+@Data
+public class BannerCreateDTO {
+    @NotBlank(message = "标题不能为空")
+    private String title;
+    @NotBlank(message = "图片URL不能为空")
+    @Pattern(regexp = "https?://.*", message = "图片URL格式不正确")
+    private String imageUrl;
+    @Pattern(regexp = "(https?://.*)?", message = "链接URL格式不正确")
+    private String linkUrl;
+    @Pattern(regexp = "skill|url|none", message = "链接类型只能是 skill/url/none")
+    private String linkType;       // skill / url / none
+    private Long linkTargetId;
+    private Integer sortOrder;
+    private Boolean enabled;
+    private String startTime;
+    private String endTime;
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/content/dto/BannerUpdateDTO.java

@@ -0,0 +1,16 @@
+package com.openclaw.module.content.dto;
+
+import lombok.Data;
+
+@Data
+public class BannerUpdateDTO {
+    private String title;
+    private String imageUrl;
+    private String linkUrl;
+    private String linkType;
+    private Long linkTargetId;
+    private Integer sortOrder;
+    private Boolean enabled;
+    private String startTime;
+    private String endTime;
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/content/entity/Announcement.java

@@ -0,0 +1,25 @@
+package com.openclaw.module.content.entity;
+
+import com.baomidou.mybatisplus.annotation.*;
+import lombok.Data;
+import java.time.LocalDateTime;
+
+@Data
+@TableName("announcements")
+public class Announcement {
+    @TableId(type = IdType.AUTO)
+    private Long id;
+    private String title;
+    private String content;
+    private String type;          // info/warning/success/error
+    private Boolean pinned;
+    private Boolean enabled;
+    private Integer sortOrder;
+    private LocalDateTime startTime;
+    private LocalDateTime endTime;
+    private Long creatorId;
+    private LocalDateTime createdAt;
+    private LocalDateTime updatedAt;
+    @TableLogic(value = "0", delval = "1")
+    private Integer deleted;
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/content/entity/Banner.java

@@ -0,0 +1,26 @@
+package com.openclaw.module.content.entity;
+
+import com.baomidou.mybatisplus.annotation.*;
+import lombok.Data;
+import java.time.LocalDateTime;
+
+@Data
+@TableName("banners")
+public class Banner {
+    @TableId(type = IdType.AUTO)
+    private Long id;
+    private String title;
+    private String imageUrl;
+    private String linkUrl;
+    private String linkType;       // skill / url / none
+    private Long linkTargetId;     // skill id (when linkType=skill)
+    private Integer sortOrder;
+    private Boolean enabled;
+    private LocalDateTime startTime;
+    private LocalDateTime endTime;
+    private Long creatorId;
+    private LocalDateTime createdAt;
+    private LocalDateTime updatedAt;
+    @TableLogic(value = "0", delval = "1")
+    private Integer deleted;
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/content/repository/AnnouncementRepository.java

@@ -0,0 +1,9 @@
+package com.openclaw.module.content.repository;
+
+import com.baomidou.mybatisplus.core.mapper.BaseMapper;
+import com.openclaw.module.content.entity.Announcement;
+import org.apache.ibatis.annotations.Mapper;
+
+@Mapper
+public interface AnnouncementRepository extends BaseMapper<Announcement> {
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/content/repository/BannerRepository.java

@@ -0,0 +1,9 @@
+package com.openclaw.module.content.repository;
+
+import com.baomidou.mybatisplus.core.mapper.BaseMapper;
+import com.openclaw.module.content.entity.Banner;
+import org.apache.ibatis.annotations.Mapper;
+
+@Mapper
+public interface BannerRepository extends BaseMapper<Banner> {
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/content/service/AnnouncementService.java

@@ -0,0 +1,17 @@
+package com.openclaw.module.content.service;
+
+import com.baomidou.mybatisplus.core.metadata.IPage;
+import com.openclaw.module.content.dto.AnnouncementCreateDTO;
+import com.openclaw.module.content.dto.AnnouncementUpdateDTO;
+import com.openclaw.module.content.vo.AnnouncementVO;
+
+import java.util.List;
+
+public interface AnnouncementService {
+    AnnouncementVO create(AnnouncementCreateDTO dto, Long creatorId);
+    AnnouncementVO update(Long id, AnnouncementUpdateDTO dto);
+    void delete(Long id);
+    AnnouncementVO getById(Long id);
+    IPage<AnnouncementVO> list(String keyword, Boolean enabled, int pageNum, int pageSize);
+    List<AnnouncementVO> getActiveAnnouncements();
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/content/service/BannerService.java

@@ -0,0 +1,17 @@
+package com.openclaw.module.content.service;
+
+import com.baomidou.mybatisplus.core.metadata.IPage;
+import com.openclaw.module.content.dto.BannerCreateDTO;
+import com.openclaw.module.content.dto.BannerUpdateDTO;
+import com.openclaw.module.content.vo.BannerVO;
+
+import java.util.List;
+
+public interface BannerService {
+    BannerVO create(BannerCreateDTO dto, Long creatorId);
+    BannerVO update(Long id, BannerUpdateDTO dto);
+    void delete(Long id);
+    BannerVO getById(Long id);
+    IPage<BannerVO> list(String keyword, Boolean enabled, int pageNum, int pageSize);
+    List<BannerVO> getActiveBanners();
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/content/service/impl/AnnouncementServiceImpl.java

@@ -0,0 +1,139 @@
+package com.openclaw.module.content.service.impl;
+
+import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
+import com.baomidou.mybatisplus.core.metadata.IPage;
+import com.baomidou.mybatisplus.extension.plugins.pagination.Page;
+import com.openclaw.constant.ErrorCode;
+import com.openclaw.exception.BusinessException;
+import com.openclaw.module.content.dto.AnnouncementCreateDTO;
+import com.openclaw.module.content.dto.AnnouncementUpdateDTO;
+import com.openclaw.module.content.entity.Announcement;
+import com.openclaw.module.content.repository.AnnouncementRepository;
+import com.openclaw.module.content.service.AnnouncementService;
+import com.openclaw.module.content.vo.AnnouncementVO;
+import lombok.RequiredArgsConstructor;
+import org.springframework.beans.BeanUtils;
+import org.springframework.stereotype.Service;
+import org.springframework.util.StringUtils;
+
+import java.time.LocalDateTime;
+import java.time.format.DateTimeFormatter;
+import java.time.format.DateTimeParseException;
+import java.util.List;
+import java.util.stream.Collectors;
+
+@Service
+@RequiredArgsConstructor
+public class AnnouncementServiceImpl implements AnnouncementService {
+
+    private final AnnouncementRepository announcementRepository;
+    private static final DateTimeFormatter DTF = DateTimeFormatter.ofPattern("yyyy-MM-dd HH:mm:ss");
+
+    @Override
+    public AnnouncementVO create(AnnouncementCreateDTO dto, Long creatorId) {
+        Announcement announcement = new Announcement();
+        announcement.setTitle(dto.getTitle());
+        announcement.setContent(dto.getContent());
+        announcement.setType(dto.getType() != null ? dto.getType() : "info");
+        announcement.setPinned(dto.getPinned() != null ? dto.getPinned() : false);
+        announcement.setEnabled(dto.getEnabled() != null ? dto.getEnabled() : true);
+        announcement.setSortOrder(dto.getSortOrder() != null ? dto.getSortOrder() : 0);
+        if (StringUtils.hasText(dto.getStartTime())) {
+            announcement.setStartTime(parseDateTime(dto.getStartTime(), "开始时间"));
+        }
+        if (StringUtils.hasText(dto.getEndTime())) {
+            announcement.setEndTime(parseDateTime(dto.getEndTime(), "结束时间"));
+        }
+        announcement.setCreatorId(creatorId);
+        announcement.setCreatedAt(LocalDateTime.now());
+        announcement.setUpdatedAt(LocalDateTime.now());
+        announcement.setDeleted(0);
+        announcementRepository.insert(announcement);
+        return toVO(announcement);
+    }
+
+    @Override
+    public AnnouncementVO update(Long id, AnnouncementUpdateDTO dto) {
+        Announcement announcement = announcementRepository.selectById(id);
+        if (announcement == null) {
+            throw new RuntimeException("公告不存在");
+        }
+        if (dto.getTitle() != null) announcement.setTitle(dto.getTitle());
+        if (dto.getContent() != null) announcement.setContent(dto.getContent());
+        if (dto.getType() != null) announcement.setType(dto.getType());
+        if (dto.getPinned() != null) announcement.setPinned(dto.getPinned());
+        if (dto.getEnabled() != null) announcement.setEnabled(dto.getEnabled());
+        if (dto.getSortOrder() != null) announcement.setSortOrder(dto.getSortOrder());
+        if (StringUtils.hasText(dto.getStartTime())) {
+            announcement.setStartTime(parseDateTime(dto.getStartTime(), "开始时间"));
+        }
+        if (StringUtils.hasText(dto.getEndTime())) {
+            announcement.setEndTime(parseDateTime(dto.getEndTime(), "结束时间"));
+        }
+        announcement.setUpdatedAt(LocalDateTime.now());
+        announcementRepository.updateById(announcement);
+        return toVO(announcement);
+    }
+
+    @Override
+    public void delete(Long id) {
+        Announcement announcement = announcementRepository.selectById(id);
+        if (announcement == null) {
+            throw new RuntimeException("公告不存在");
+        }
+        announcementRepository.deleteById(id);
+    }
+
+    @Override
+    public AnnouncementVO getById(Long id) {
+        Announcement announcement = announcementRepository.selectById(id);
+        if (announcement == null) {
+            throw new RuntimeException("公告不存在");
+        }
+        return toVO(announcement);
+    }
+
+    @Override
+    public IPage<AnnouncementVO> list(String keyword, Boolean enabled, int pageNum, int pageSize) {
+        LambdaQueryWrapper<Announcement> wrapper = new LambdaQueryWrapper<>();
+        if (StringUtils.hasText(keyword)) {
+            wrapper.like(Announcement::getTitle, keyword);
+        }
+        if (enabled != null) {
+            wrapper.eq(Announcement::getEnabled, enabled);
+        }
+        wrapper.orderByDesc(Announcement::getPinned)
+               .orderByAsc(Announcement::getSortOrder)
+               .orderByDesc(Announcement::getCreatedAt);
+        IPage<Announcement> page = announcementRepository.selectPage(new Page<>(pageNum, pageSize), wrapper);
+        return page.convert(this::toVO);
+    }
+
+    @Override
+    public List<AnnouncementVO> getActiveAnnouncements() {
+        LocalDateTime now = LocalDateTime.now();
+        LambdaQueryWrapper<Announcement> wrapper = new LambdaQueryWrapper<>();
+        wrapper.eq(Announcement::getEnabled, true)
+               .and(w -> w.isNull(Announcement::getStartTime).or().le(Announcement::getStartTime, now))
+               .and(w -> w.isNull(Announcement::getEndTime).or().ge(Announcement::getEndTime, now))
+               .orderByDesc(Announcement::getPinned)
+               .orderByAsc(Announcement::getSortOrder);
+        return announcementRepository.selectList(wrapper).stream()
+                .map(this::toVO)
+                .collect(Collectors.toList());
+    }
+
+    private LocalDateTime parseDateTime(String value, String fieldName) {
+        try {
+            return LocalDateTime.parse(value, DTF);
+        } catch (DateTimeParseException e) {
+            throw new BusinessException(ErrorCode.PARAM_ERROR.code(), fieldName + "格式错误，正确格式为 yyyy-MM-dd HH:mm:ss");
+        }
+    }
+
+    private AnnouncementVO toVO(Announcement announcement) {
+        AnnouncementVO vo = new AnnouncementVO();
+        BeanUtils.copyProperties(announcement, vo);
+        return vo;
+    }
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/content/service/impl/BannerServiceImpl.java

@@ -0,0 +1,138 @@
+package com.openclaw.module.content.service.impl;
+
+import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
+import com.baomidou.mybatisplus.core.metadata.IPage;
+import com.baomidou.mybatisplus.extension.plugins.pagination.Page;
+import com.openclaw.constant.ErrorCode;
+import com.openclaw.exception.BusinessException;
+import com.openclaw.module.content.dto.BannerCreateDTO;
+import com.openclaw.module.content.dto.BannerUpdateDTO;
+import com.openclaw.module.content.entity.Banner;
+import com.openclaw.module.content.repository.BannerRepository;
+import com.openclaw.module.content.service.BannerService;
+import com.openclaw.module.content.vo.BannerVO;
+import lombok.RequiredArgsConstructor;
+import org.springframework.beans.BeanUtils;
+import org.springframework.stereotype.Service;
+import org.springframework.util.StringUtils;
+
+import java.time.LocalDateTime;
+import java.time.format.DateTimeFormatter;
+import java.time.format.DateTimeParseException;
+import java.util.List;
+import java.util.stream.Collectors;
+
+@Service
+@RequiredArgsConstructor
+public class BannerServiceImpl implements BannerService {
+
+    private final BannerRepository bannerRepository;
+    private static final DateTimeFormatter DTF = DateTimeFormatter.ofPattern("yyyy-MM-dd HH:mm:ss");
+
+    @Override
+    public BannerVO create(BannerCreateDTO dto, Long creatorId) {
+        Banner banner = new Banner();
+        banner.setTitle(dto.getTitle());
+        banner.setImageUrl(dto.getImageUrl());
+        banner.setLinkUrl(dto.getLinkUrl());
+        banner.setLinkType(dto.getLinkType() != null ? dto.getLinkType() : "none");
+        banner.setLinkTargetId(dto.getLinkTargetId());
+        banner.setSortOrder(dto.getSortOrder() != null ? dto.getSortOrder() : 0);
+        banner.setEnabled(dto.getEnabled() != null ? dto.getEnabled() : true);
+        if (StringUtils.hasText(dto.getStartTime())) {
+            banner.setStartTime(parseDateTime(dto.getStartTime(), "开始时间"));
+        }
+        if (StringUtils.hasText(dto.getEndTime())) {
+            banner.setEndTime(parseDateTime(dto.getEndTime(), "结束时间"));
+        }
+        banner.setCreatorId(creatorId);
+        banner.setCreatedAt(LocalDateTime.now());
+        banner.setUpdatedAt(LocalDateTime.now());
+        banner.setDeleted(0);
+        bannerRepository.insert(banner);
+        return toVO(banner);
+    }
+
+    @Override
+    public BannerVO update(Long id, BannerUpdateDTO dto) {
+        Banner banner = bannerRepository.selectById(id);
+        if (banner == null) {
+            throw new RuntimeException("Banner不存在");
+        }
+        if (dto.getTitle() != null) banner.setTitle(dto.getTitle());
+        if (dto.getImageUrl() != null) banner.setImageUrl(dto.getImageUrl());
+        if (dto.getLinkUrl() != null) banner.setLinkUrl(dto.getLinkUrl());
+        if (dto.getLinkType() != null) banner.setLinkType(dto.getLinkType());
+        if (dto.getLinkTargetId() != null) banner.setLinkTargetId(dto.getLinkTargetId());
+        if (dto.getSortOrder() != null) banner.setSortOrder(dto.getSortOrder());
+        if (dto.getEnabled() != null) banner.setEnabled(dto.getEnabled());
+        if (StringUtils.hasText(dto.getStartTime())) {
+            banner.setStartTime(parseDateTime(dto.getStartTime(), "开始时间"));
+        }
+        if (StringUtils.hasText(dto.getEndTime())) {
+            banner.setEndTime(parseDateTime(dto.getEndTime(), "结束时间"));
+        }
+        banner.setUpdatedAt(LocalDateTime.now());
+        bannerRepository.updateById(banner);
+        return toVO(banner);
+    }
+
+    @Override
+    public void delete(Long id) {
+        Banner banner = bannerRepository.selectById(id);
+        if (banner == null) {
+            throw new RuntimeException("Banner不存在");
+        }
+        bannerRepository.deleteById(id);
+    }
+
+    @Override
+    public BannerVO getById(Long id) {
+        Banner banner = bannerRepository.selectById(id);
+        if (banner == null) {
+            throw new RuntimeException("Banner不存在");
+        }
+        return toVO(banner);
+    }
+
+    @Override
+    public IPage<BannerVO> list(String keyword, Boolean enabled, int pageNum, int pageSize) {
+        LambdaQueryWrapper<Banner> wrapper = new LambdaQueryWrapper<>();
+        if (StringUtils.hasText(keyword)) {
+            wrapper.like(Banner::getTitle, keyword);
+        }
+        if (enabled != null) {
+            wrapper.eq(Banner::getEnabled, enabled);
+        }
+        wrapper.orderByAsc(Banner::getSortOrder).orderByDesc(Banner::getCreatedAt);
+        IPage<Banner> page = bannerRepository.selectPage(new Page<>(pageNum, pageSize), wrapper);
+        return page.convert(this::toVO);
+    }
+
+    @Override
+    public List<BannerVO> getActiveBanners() {
+        LocalDateTime now = LocalDateTime.now();
+        LambdaQueryWrapper<Banner> wrapper = new LambdaQueryWrapper<>();
+        wrapper.eq(Banner::getEnabled, true)
+               .and(w -> w.isNull(Banner::getStartTime).or().le(Banner::getStartTime, now))
+               .and(w -> w.isNull(Banner::getEndTime).or().ge(Banner::getEndTime, now))
+               .orderByAsc(Banner::getSortOrder);
+        return bannerRepository.selectList(wrapper).stream()
+                .map(this::toVO)
+                .collect(Collectors.toList());
+    }
+
+    private LocalDateTime parseDateTime(String value, String fieldName) {
+        try {
+            return LocalDateTime.parse(value, DTF);
+        } catch (DateTimeParseException e) {
+            throw new BusinessException(ErrorCode.PARAM_ERROR.code(), fieldName + "格式错误，正确格式为 yyyy-MM-dd HH:mm:ss");
+        }
+    }
+
+    private BannerVO toVO(Banner banner) {
+        BannerVO vo = new BannerVO();
+        BeanUtils.copyProperties(banner, vo);
+        return vo;
+    }
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/content/vo/AnnouncementVO.java

@@ -0,0 +1,20 @@
+package com.openclaw.module.content.vo;
+
+import lombok.Data;
+import java.time.LocalDateTime;
+
+@Data
+public class AnnouncementVO {
+    private Long id;
+    private String title;
+    private String content;
+    private String type;
+    private Boolean pinned;
+    private Boolean enabled;
+    private Integer sortOrder;
+    private LocalDateTime startTime;
+    private LocalDateTime endTime;
+    private Long creatorId;
+    private LocalDateTime createdAt;
+    private LocalDateTime updatedAt;
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/content/vo/BannerVO.java

@@ -0,0 +1,20 @@
+package com.openclaw.module.content.vo;
+
+import lombok.Data;
+import java.time.LocalDateTime;
+
+@Data
+public class BannerVO {
+    private Long id;
+    private String title;
+    private String imageUrl;
+    private String linkUrl;
+    private String linkType;
+    private Long linkTargetId;
+    private Integer sortOrder;
+    private Boolean enabled;
+    private LocalDateTime startTime;
+    private LocalDateTime endTime;
+    private LocalDateTime createdAt;
+    private LocalDateTime updatedAt;
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/coupon/controller/AdminCouponController.java

@@ -0,0 +1,72 @@
+package com.openclaw.module.coupon.controller;
+
+import com.baomidou.mybatisplus.core.metadata.IPage;
+import com.openclaw.annotation.RequiresRole;
+import com.openclaw.common.Result;
+import com.openclaw.module.coupon.dto.CouponIssueDTO;
+import com.openclaw.module.coupon.dto.CouponTemplateCreateDTO;
+import com.openclaw.module.coupon.dto.CouponTemplateUpdateDTO;
+import com.openclaw.module.coupon.service.CouponService;
+import com.openclaw.module.coupon.vo.CouponTemplateVO;
+import jakarta.validation.Valid;
+import lombok.RequiredArgsConstructor;
+import org.springframework.web.bind.annotation.*;
+
+@RestController
+@RequestMapping("/api/v1/admin/coupons")
+@RequiresRole({"admin", "super_admin"})
+@RequiredArgsConstructor
+public class AdminCouponController {
+
+    private final CouponService couponService;
+
+    /** 创建优惠券模板 */
+    @PostMapping("/templates")
+    public Result<CouponTemplateVO> createTemplate(@Valid @RequestBody CouponTemplateCreateDTO dto) {
+        return Result.ok(couponService.createTemplate(dto));
+    }
+
+    /** 更新优惠券模板 */
+    @PutMapping("/templates/{id}")
+    public Result<CouponTemplateVO> updateTemplate(@PathVariable Long id,
+                                                    @RequestBody CouponTemplateUpdateDTO dto) {
+        return Result.ok(couponService.updateTemplate(id, dto));
+    }
+
+    /** 优惠券模板列表(分页) */
+    @GetMapping("/templates")
+    public Result<IPage<CouponTemplateVO>> listTemplates(
+            @RequestParam(required = false) String status,
+            @RequestParam(required = false) String couponType,
+            @RequestParam(required = false) String keyword,
+            @RequestParam(defaultValue = "1") int pageNum,
+            @RequestParam(defaultValue = "10") int pageSize) {
+        pageSize = Math.min(pageSize, 100);
+        return Result.ok(couponService.listTemplates(status, couponType, keyword, pageNum, pageSize));
+    }
+
+    /** 优惠券模板详情 */
+    @GetMapping("/templates/{id}")
+    public Result<CouponTemplateVO> getTemplate(@PathVariable Long id) {
+        return Result.ok(couponService.getTemplate(id));
+    }
+
+    /** 上架/暂停 */
+    @PutMapping("/templates/{id}/status")
+    public Result<Void> changeStatus(@PathVariable Long id, @RequestParam String status) {
+        couponService.changeTemplateStatus(id, status);
+        return Result.ok(null);
+    }
+
+    /** 手动发券 */
+    @PostMapping("/issue")
+    public Result<Integer> issueCoupons(@Valid @RequestBody CouponIssueDTO dto) {
+        return Result.ok(couponService.issueCoupons(dto));
+    }
+
+    /** 单券统计 */
+    @GetMapping("/templates/{id}/stats")
+    public Result<CouponTemplateVO> getTemplateStats(@PathVariable Long id) {
+        return Result.ok(couponService.getTemplateStats(id));
+    }
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/coupon/controller/CouponController.java

@@ -0,0 +1,66 @@
+package com.openclaw.module.coupon.controller;
+
+import com.baomidou.mybatisplus.core.metadata.IPage;
+import com.openclaw.common.Result;
+import com.openclaw.module.coupon.service.CouponService;
+import com.openclaw.module.coupon.vo.CouponCalcResultVO;
+import com.openclaw.module.coupon.vo.CouponTemplateVO;
+import com.openclaw.module.coupon.vo.UserCouponVO;
+import jakarta.servlet.http.HttpServletRequest;
+import lombok.RequiredArgsConstructor;
+import org.springframework.web.bind.annotation.*;
+
+import java.math.BigDecimal;
+import java.util.List;
+
+@RestController
+@RequestMapping("/api/v1/coupons")
+@RequiredArgsConstructor
+public class CouponController {
+
+    private final CouponService couponService;
+
+    /** 可领取的优惠券列表 */
+    @GetMapping("/available")
+    public Result<List<CouponTemplateVO>> getAvailableTemplates(HttpServletRequest request) {
+        Long userId = (Long) request.getAttribute("userId");
+        return Result.ok(couponService.getAvailableTemplates(userId));
+    }
+
+    /** 领取优惠券 */
+    @PostMapping("/receive/{templateId}")
+    public Result<UserCouponVO> receiveCoupon(HttpServletRequest request,
+                                               @PathVariable Long templateId) {
+        Long userId = (Long) request.getAttribute("userId");
+        return Result.ok(couponService.receiveCoupon(userId, templateId));
+    }
+
+    /** 我的优惠券列表 */
+    @GetMapping("/mine")
+    public Result<IPage<UserCouponVO>> getMyCoupons(HttpServletRequest request,
+                                                     @RequestParam(required = false) String status,
+                                                     @RequestParam(defaultValue = "1") int pageNum,
+                                                     @RequestParam(defaultValue = "10") int pageSize) {
+        Long userId = (Long) request.getAttribute("userId");
+        pageSize = Math.min(pageSize, 50);
+        return Result.ok(couponService.getMyCoupons(userId, status, pageNum, pageSize));
+    }
+
+    /** 下单时查询可用优惠券 */
+    @GetMapping("/usable")
+    public Result<List<UserCouponVO>> getUsableCoupons(HttpServletRequest request,
+                                                        @RequestParam List<Long> skillIds,
+                                                        @RequestParam BigDecimal orderAmount) {
+        Long userId = (Long) request.getAttribute("userId");
+        return Result.ok(couponService.getUsableCoupons(userId, skillIds, orderAmount));
+    }
+
+    /** 计算优惠券抵扣金额(预览) */
+    @GetMapping("/calc")
+    public Result<CouponCalcResultVO> calcDiscount(HttpServletRequest request,
+                                                    @RequestParam Long couponId,
+                                                    @RequestParam BigDecimal orderAmount) {
+        Long userId = (Long) request.getAttribute("userId");
+        return Result.ok(couponService.calcDiscount(userId, couponId, orderAmount));
+    }
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/coupon/dto/CouponIssueDTO.java

@@ -0,0 +1,17 @@
+package com.openclaw.module.coupon.dto;
+
+import jakarta.validation.constraints.NotNull;
+import jakarta.validation.constraints.Size;
+import lombok.Data;
+
+import java.util.List;
+
+@Data
+public class CouponIssueDTO {
+    @NotNull(message = "券模板ID不能为空")
+    private Long templateId;
+
+    @NotNull(message = "用户ID列表不能为空")
+    @Size(min = 1, max = 500, message = "用户ID列表长度须在1-500之间")
+    private List<Long> userIds;
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/coupon/dto/CouponTemplateCreateDTO.java

@@ -0,0 +1,37 @@
+package com.openclaw.module.coupon.dto;
+
+import jakarta.validation.constraints.NotBlank;
+import jakarta.validation.constraints.NotNull;
+import lombok.Data;
+
+import java.math.BigDecimal;
+import java.time.LocalDateTime;
+
+@Data
+public class CouponTemplateCreateDTO {
+    @NotBlank(message = "券名称不能为空")
+    private String name;
+
+    @NotBlank(message = "券类型不能为空")
+    private String couponType;          // full_reduce / discount / fixed
+
+    private BigDecimal thresholdAmount; // 使用门槛(0=无门槛)
+    private BigDecimal discountAmount;  // 满减/立减金额
+    private BigDecimal discountRate;    // 折扣率(0.80=8折)
+    private BigDecimal maxDiscountAmount; // 折扣券最大优惠
+
+    private String scopeType;           // all / category / skill
+    private String scopeIds;            // JSON数组
+
+    @NotNull(message = "发行总量不能为空")
+    private Integer totalCount;         // -1=不限
+    private Integer perUserLimit = 1;
+
+    @NotBlank(message = "有效期类型不能为空")
+    private String validType;           // fixed / relative
+    private LocalDateTime validStart;
+    private LocalDateTime validEnd;
+    private Integer validDays;
+
+    private String description;
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/coupon/dto/CouponTemplateUpdateDTO.java

@@ -0,0 +1,25 @@
+package com.openclaw.module.coupon.dto;
+
+import lombok.Data;
+
+import java.math.BigDecimal;
+import java.time.LocalDateTime;
+
+@Data
+public class CouponTemplateUpdateDTO {
+    private String name;
+    private String couponType;
+    private BigDecimal thresholdAmount;
+    private BigDecimal discountAmount;
+    private BigDecimal discountRate;
+    private BigDecimal maxDiscountAmount;
+    private String scopeType;
+    private String scopeIds;
+    private Integer totalCount;
+    private Integer perUserLimit;
+    private String validType;
+    private LocalDateTime validStart;
+    private LocalDateTime validEnd;
+    private Integer validDays;
+    private String description;
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/coupon/entity/CouponTemplate.java

@@ -0,0 +1,41 @@
+package com.openclaw.module.coupon.entity;
+
+import com.baomidou.mybatisplus.annotation.IdType;
+import com.baomidou.mybatisplus.annotation.TableId;
+import com.baomidou.mybatisplus.annotation.TableName;
+import lombok.Data;
+
+import java.math.BigDecimal;
+import java.time.LocalDateTime;
+
+@Data
+@TableName("coupon_templates")
+public class CouponTemplate {
+    @TableId(type = IdType.AUTO)
+    private Long id;
+    private String name;
+    private String couponType;          // full_reduce / discount / fixed
+
+    private BigDecimal thresholdAmount; // 使用门槛金额(0=无门槛)
+    private BigDecimal discountAmount;  // 满减/立减金额
+    private BigDecimal discountRate;    // 折扣率(0.80=8折)
+    private BigDecimal maxDiscountAmount; // 折扣券最大优惠金额
+
+    private String scopeType;           // all / category / skill
+    private String scopeIds;            // JSON: 适用的分类ID或SkillID数组
+
+    private Integer totalCount;         // 发行总量(-1=不限)
+    private Integer issuedCount;        // 已发放数量
+    private Integer perUserLimit;       // 每人限领张数
+
+    private String validType;           // fixed / relative
+    private LocalDateTime validStart;   // fixed模式: 生效开始时间
+    private LocalDateTime validEnd;     // fixed模式: 生效结束时间
+    private Integer validDays;          // relative模式: 领取后N天有效
+
+    private String status;              // draft / active / paused / expired / exhausted
+    private String description;         // 使用说明
+
+    private LocalDateTime createdAt;
+    private LocalDateTime updatedAt;
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/coupon/entity/UserCoupon.java

@@ -0,0 +1,40 @@
+package com.openclaw.module.coupon.entity;
+
+import com.baomidou.mybatisplus.annotation.IdType;
+import com.baomidou.mybatisplus.annotation.TableId;
+import com.baomidou.mybatisplus.annotation.TableName;
+import lombok.Data;
+
+import java.math.BigDecimal;
+import java.time.LocalDateTime;
+
+@Data
+@TableName("user_coupons")
+public class UserCoupon {
+    @TableId(type = IdType.AUTO)
+    private Long id;
+    private Long userId;
+    private Long templateId;
+    private String couponCode;
+
+    private String status;              // unused / used / expired / returned
+
+    // 快照字段（领券时从模板复制，下单时直接读取，避免回查模板）
+    private String couponType;
+    private BigDecimal thresholdAmount;
+    private BigDecimal discountAmount;
+    private BigDecimal discountRate;
+    private BigDecimal maxDiscountAmount;
+    private String scopeType;
+    private String scopeIds;            // JSON
+
+    private LocalDateTime validStart;
+    private LocalDateTime validEnd;
+
+    private Long usedOrderId;
+    private LocalDateTime usedAt;
+
+    private LocalDateTime receivedAt;
+    private LocalDateTime createdAt;
+    private LocalDateTime updatedAt;
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/coupon/repository/CouponTemplateRepository.java

@@ -0,0 +1,16 @@
+package com.openclaw.module.coupon.repository;
+
+import com.baomidou.mybatisplus.core.mapper.BaseMapper;
+import com.openclaw.module.coupon.entity.CouponTemplate;
+import org.apache.ibatis.annotations.Mapper;
+import org.apache.ibatis.annotations.Param;
+import org.apache.ibatis.annotations.Update;
+
+@Mapper
+public interface CouponTemplateRepository extends BaseMapper<CouponTemplate> {
+
+    /** 原子递增已发放数量，返回受影响行数(0=库存不足或状态不对) */
+    @Update("UPDATE coupon_templates SET issued_count = issued_count + 1, updated_at = NOW() " +
+            "WHERE id = #{id} AND status = 'active' AND (total_count = -1 OR issued_count < total_count)")
+    int incrementIssuedCount(@Param("id") Long id);
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/coupon/repository/UserCouponRepository.java

@@ -0,0 +1,31 @@
+package com.openclaw.module.coupon.repository;
+
+import com.baomidou.mybatisplus.core.mapper.BaseMapper;
+import com.openclaw.module.coupon.entity.UserCoupon;
+import org.apache.ibatis.annotations.Mapper;
+import org.apache.ibatis.annotations.Param;
+import org.apache.ibatis.annotations.Select;
+import org.apache.ibatis.annotations.Update;
+
+@Mapper
+public interface UserCouponRepository extends BaseMapper<UserCoupon> {
+
+    /** 悲观锁查询用户对某模板的已领数量(防并发超领) */
+    @Select("SELECT COUNT(*) FROM user_coupons WHERE user_id = #{userId} AND template_id = #{templateId} FOR UPDATE")
+    long countByUserAndTemplateForUpdate(@Param("userId") Long userId, @Param("templateId") Long templateId);
+
+    /** CAS核销优惠券: unused→used，返回受影响行数(0=已使用或已过期) */
+    @Update("UPDATE user_coupons SET status = 'used', used_order_id = #{orderId}, used_at = NOW(), updated_at = NOW() " +
+            "WHERE id = #{id} AND status = 'unused' AND valid_end > NOW()")
+    int casUse(@Param("id") Long id, @Param("orderId") Long orderId);
+
+    /** 退回优惠券: used→returned */
+    @Update("UPDATE user_coupons SET status = 'returned', used_order_id = NULL, used_at = NULL, updated_at = NOW() " +
+            "WHERE id = #{id} AND status = 'used'")
+    int casReturn(@Param("id") Long id);
+
+    /** 批量过期: unused→expired (分批执行) */
+    @Update("UPDATE user_coupons SET status = 'expired', updated_at = NOW() " +
+            "WHERE status = 'unused' AND valid_end < NOW() LIMIT #{batchSize}")
+    int batchExpire(@Param("batchSize") int batchSize);
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/coupon/service/CouponService.java

@@ -0,0 +1,66 @@
+package com.openclaw.module.coupon.service;
+
+import com.baomidou.mybatisplus.core.metadata.IPage;
+import com.openclaw.module.coupon.dto.CouponIssueDTO;
+import com.openclaw.module.coupon.dto.CouponTemplateCreateDTO;
+import com.openclaw.module.coupon.dto.CouponTemplateUpdateDTO;
+import com.openclaw.module.coupon.vo.CouponCalcResultVO;
+import com.openclaw.module.coupon.vo.CouponTemplateVO;
+import com.openclaw.module.coupon.vo.UserCouponVO;
+
+import java.math.BigDecimal;
+import java.util.List;
+
+public interface CouponService {
+
+    // ===== 用户端 =====
+
+    /** 可领取的券列表(当前用户视角，含已领状态) */
+    List<CouponTemplateVO> getAvailableTemplates(Long userId);
+
+    /** 用户领券 */
+    UserCouponVO receiveCoupon(Long userId, Long templateId);
+
+    /** 我的优惠券(分状态) */
+    IPage<UserCouponVO> getMyCoupons(Long userId, String status, int pageNum, int pageSize);
+
+    /** 下单时查询可用券(匹配指定SkillID) */
+    List<UserCouponVO> getUsableCoupons(Long userId, List<Long> skillIds, BigDecimal orderAmount);
+
+    /** 计算优惠金额(含所有权校验) */
+    CouponCalcResultVO calcDiscount(Long userId, Long couponId, BigDecimal orderAmount);
+
+    /** 核销优惠券(下单时调用, 含所有权校验) */
+    void useCoupon(Long userId, Long couponId, Long orderId);
+
+    /** 退回优惠券(取消/退款时调用) */
+    void returnCoupon(Long couponId);
+
+    // ===== 管理端 =====
+
+    /** 创建券模板 */
+    CouponTemplateVO createTemplate(CouponTemplateCreateDTO dto);
+
+    /** 更新券模板 */
+    CouponTemplateVO updateTemplate(Long id, CouponTemplateUpdateDTO dto);
+
+    /** 券模板列表(分页+筛选) */
+    IPage<CouponTemplateVO> listTemplates(String status, String couponType, String keyword, int pageNum, int pageSize);
+
+    /** 券模板详情 */
+    CouponTemplateVO getTemplate(Long id);
+
+    /** 上架/暂停/下架 */
+    void changeTemplateStatus(Long id, String status);
+
+    /** 手动发券给指定用户 */
+    int issueCoupons(CouponIssueDTO dto);
+
+    /** 单券统计 */
+    CouponTemplateVO getTemplateStats(Long id);
+
+    // ===== 定时任务 =====
+
+    /** 批量过期未使用的券 */
+    int batchExpireCoupons();
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/coupon/service/impl/CouponServiceImpl.java

@@ -0,0 +1,577 @@
+package com.openclaw.module.coupon.service.impl;
+
+import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
+import com.baomidou.mybatisplus.core.metadata.IPage;
+import com.baomidou.mybatisplus.extension.plugins.pagination.Page;
+import com.openclaw.constant.ErrorCode;
+import com.openclaw.exception.BusinessException;
+import com.openclaw.module.coupon.dto.CouponIssueDTO;
+import com.openclaw.module.coupon.dto.CouponTemplateCreateDTO;
+import com.openclaw.module.coupon.dto.CouponTemplateUpdateDTO;
+import com.openclaw.module.coupon.entity.CouponTemplate;
+import com.openclaw.module.coupon.entity.UserCoupon;
+import com.openclaw.module.coupon.repository.CouponTemplateRepository;
+import com.openclaw.module.coupon.repository.UserCouponRepository;
+import com.openclaw.module.coupon.service.CouponService;
+import com.openclaw.module.notification.service.NotificationService;
+import com.openclaw.module.coupon.vo.CouponCalcResultVO;
+import com.openclaw.module.coupon.vo.CouponTemplateVO;
+import com.openclaw.module.coupon.vo.UserCouponVO;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.stereotype.Service;
+import org.springframework.transaction.annotation.Transactional;
+import org.springframework.util.StringUtils;
+
+import java.math.BigDecimal;
+import java.math.RoundingMode;
+import java.time.LocalDateTime;
+import java.util.List;
+import java.util.UUID;
+import java.util.stream.Collectors;
+
+@Slf4j
+@Service
+@RequiredArgsConstructor
+public class CouponServiceImpl implements CouponService {
+
+    private final CouponTemplateRepository templateRepo;
+    private final UserCouponRepository userCouponRepo;
+    private final NotificationService notificationService;
+
+    // ==================== 用户端 ====================
+
+    @Override
+    public List<CouponTemplateVO> getAvailableTemplates(Long userId) {
+        LambdaQueryWrapper<CouponTemplate> qw = new LambdaQueryWrapper<CouponTemplate>()
+                .eq(CouponTemplate::getStatus, "active")
+                .orderByDesc(CouponTemplate::getCreatedAt);
+        List<CouponTemplate> templates = templateRepo.selectList(qw);
+
+        return templates.stream().map(t -> {
+            CouponTemplateVO vo = toTemplateVO(t);
+            if (userId != null) {
+                long count = userCouponRepo.selectCount(
+                        new LambdaQueryWrapper<UserCoupon>()
+                                .eq(UserCoupon::getUserId, userId)
+                                .eq(UserCoupon::getTemplateId, t.getId()));
+                vo.setUserReceivedCount((int) count);
+                vo.setReceived(count >= t.getPerUserLimit());
+            }
+            int remain = t.getTotalCount() == -1 ? -1 : t.getTotalCount() - t.getIssuedCount();
+            vo.setRemainCount(remain);
+            return vo;
+        }).collect(Collectors.toList());
+    }
+
+    @Override
+    @Transactional
+    public UserCouponVO receiveCoupon(Long userId, Long templateId) {
+        CouponTemplate template = templateRepo.selectById(templateId);
+        if (template == null || !"active".equals(template.getStatus())) {
+            throw new BusinessException(ErrorCode.COUPON_NOT_AVAILABLE);
+        }
+
+        // 校验用户领取上限(悲观锁防并发超领)
+        long userCount = userCouponRepo.countByUserAndTemplateForUpdate(userId, templateId);
+        if (userCount >= template.getPerUserLimit()) {
+            throw new BusinessException(ErrorCode.COUPON_RECEIVE_LIMIT);
+        }
+
+        // 原子扣减库存(DB层CAS)
+        if (template.getTotalCount() != -1) {
+            int rows = templateRepo.incrementIssuedCount(templateId);
+            if (rows == 0) {
+                throw new BusinessException(ErrorCode.COUPON_EXHAUSTED);
+            }
+        }
+
+        // 计算有效期
+        LocalDateTime validStart;
+        LocalDateTime validEnd;
+        if ("relative".equals(template.getValidType())) {
+            validStart = LocalDateTime.now();
+            validEnd = validStart.plusDays(template.getValidDays());
+        } else {
+            validStart = template.getValidStart();
+            validEnd = template.getValidEnd();
+        }
+
+        // 生成券码并插入
+        UserCoupon coupon = new UserCoupon();
+        coupon.setUserId(userId);
+        coupon.setTemplateId(templateId);
+        coupon.setCouponCode(generateCouponCode());
+        coupon.setStatus("unused");
+        // 快照券规则
+        coupon.setCouponType(template.getCouponType());
+        coupon.setThresholdAmount(template.getThresholdAmount());
+        coupon.setDiscountAmount(template.getDiscountAmount());
+        coupon.setDiscountRate(template.getDiscountRate());
+        coupon.setMaxDiscountAmount(template.getMaxDiscountAmount());
+        coupon.setScopeType(template.getScopeType());
+        coupon.setScopeIds(template.getScopeIds());
+        coupon.setValidStart(validStart);
+        coupon.setValidEnd(validEnd);
+        coupon.setReceivedAt(LocalDateTime.now());
+
+        userCouponRepo.insert(coupon);
+        log.info("用户[{}]领取优惠券[{}], 券码[{}]", userId, templateId, coupon.getCouponCode());
+        // 站内通知
+        try {
+            notificationService.createNotification(userId, "system", "优惠券到账",
+                "您获得一张优惠券「" + template.getName() + "」", String.valueOf(templateId));
+        } catch (Exception e) {
+            log.warn("[通知] 优惠券通知发送失败: userId={}", userId, e);
+        }
+
+        return toUserCouponVO(coupon, template.getName());
+    }
+
+    @Override
+    public IPage<UserCouponVO> getMyCoupons(Long userId, String status, int pageNum, int pageSize) {
+        LambdaQueryWrapper<UserCoupon> qw = new LambdaQueryWrapper<UserCoupon>()
+                .eq(UserCoupon::getUserId, userId)
+                .orderByDesc(UserCoupon::getCreatedAt);
+
+        if (StringUtils.hasText(status)) {
+            qw.eq(UserCoupon::getStatus, status);
+        }
+
+        IPage<UserCoupon> page = userCouponRepo.selectPage(new Page<>(pageNum, pageSize), qw);
+        return page.convert(uc -> {
+            CouponTemplate template = templateRepo.selectById(uc.getTemplateId());
+            String name = template != null ? template.getName() : "未知券";
+            return toUserCouponVO(uc, name);
+        });
+    }
+
+    @Override
+    public List<UserCouponVO> getUsableCoupons(Long userId, List<Long> skillIds, BigDecimal orderAmount) {
+        LocalDateTime now = LocalDateTime.now();
+        LambdaQueryWrapper<UserCoupon> qw = new LambdaQueryWrapper<UserCoupon>()
+                .eq(UserCoupon::getUserId, userId)
+                .eq(UserCoupon::getStatus, "unused")
+                .le(UserCoupon::getValidStart, now)
+                .ge(UserCoupon::getValidEnd, now)
+                .orderByDesc(UserCoupon::getDiscountAmount);
+
+        List<UserCoupon> coupons = userCouponRepo.selectList(qw);
+
+        return coupons.stream()
+                .filter(c -> isCouponApplicable(c, skillIds, orderAmount))
+                .map(c -> {
+                    CouponTemplate template = templateRepo.selectById(c.getTemplateId());
+                    String name = template != null ? template.getName() : "未知券";
+                    return toUserCouponVO(c, name);
+                })
+                .collect(Collectors.toList());
+    }
+
+    @Override
+    public CouponCalcResultVO calcDiscount(Long userId, Long couponId, BigDecimal orderAmount) {
+        CouponCalcResultVO result = new CouponCalcResultVO();
+        result.setCouponId(couponId);
+
+        UserCoupon coupon = userCouponRepo.selectById(couponId);
+        if (coupon == null || !coupon.getUserId().equals(userId)) {
+            result.setApplicable(false);
+            result.setReason("优惠券不存在");
+            result.setCouponDeductAmount(BigDecimal.ZERO);
+            return result;
+        }
+        if (!"unused".equals(coupon.getStatus())) {
+            result.setApplicable(false);
+            result.setReason("优惠券不存在或已使用");
+            result.setCouponDeductAmount(BigDecimal.ZERO);
+            return result;
+        }
+
+        LocalDateTime now = LocalDateTime.now();
+        if (now.isBefore(coupon.getValidStart()) || now.isAfter(coupon.getValidEnd())) {
+            result.setApplicable(false);
+            result.setReason("优惠券不在有效期内");
+            result.setCouponDeductAmount(BigDecimal.ZERO);
+            return result;
+        }
+
+        // 检查门槛
+        if (orderAmount.compareTo(coupon.getThresholdAmount()) < 0) {
+            result.setApplicable(false);
+            result.setReason("订单金额未达到使用门槛（满" + coupon.getThresholdAmount() + "可用）");
+            result.setCouponDeductAmount(BigDecimal.ZERO);
+            return result;
+        }
+
+        BigDecimal deduct = calculateDeductAmount(coupon, orderAmount);
+        CouponTemplate template = templateRepo.selectById(coupon.getTemplateId());
+
+        result.setApplicable(true);
+        result.setCouponName(template != null ? template.getName() : "优惠券");
+        result.setCouponType(coupon.getCouponType());
+        result.setCouponDeductAmount(deduct);
+        return result;
+    }
+
+    @Override
+    @Transactional
+    public void useCoupon(Long userId, Long couponId, Long orderId) {
+        UserCoupon coupon = userCouponRepo.selectById(couponId);
+        if (coupon == null || !coupon.getUserId().equals(userId)) {
+            throw new BusinessException(ErrorCode.COUPON_NOT_AVAILABLE);
+        }
+        int rows = userCouponRepo.casUse(couponId, orderId);
+        if (rows == 0) {
+            throw new BusinessException(ErrorCode.COUPON_ALREADY_USED);
+        }
+        log.info("优惠券[{}]已核销, 订单[{}]", couponId, orderId);
+    }
+
+    @Override
+    @Transactional
+    public void returnCoupon(Long couponId) {
+        int rows = userCouponRepo.casReturn(couponId);
+        if (rows > 0) {
+            log.info("优惠券[{}]已退回(returned状态)", couponId);
+        } else {
+            log.warn("优惠券[{}]退回失败(当前状态非used或券不存在), 需人工排查", couponId);
+        }
+    }
+
+    // ==================== 管理端 ====================
+
+    @Override
+    @Transactional
+    public CouponTemplateVO createTemplate(CouponTemplateCreateDTO dto) {
+        validateTemplateDTO(dto);
+
+        CouponTemplate t = new CouponTemplate();
+        t.setName(dto.getName());
+        t.setCouponType(dto.getCouponType());
+        t.setThresholdAmount(dto.getThresholdAmount() != null ? dto.getThresholdAmount() : BigDecimal.ZERO);
+        t.setDiscountAmount(dto.getDiscountAmount() != null ? dto.getDiscountAmount() : BigDecimal.ZERO);
+        t.setDiscountRate(dto.getDiscountRate() != null ? dto.getDiscountRate() : BigDecimal.ONE);
+        t.setMaxDiscountAmount(dto.getMaxDiscountAmount());
+        t.setScopeType(dto.getScopeType() != null ? dto.getScopeType() : "all");
+        t.setScopeIds(dto.getScopeIds());
+        t.setTotalCount(dto.getTotalCount());
+        t.setIssuedCount(0);
+        t.setPerUserLimit(dto.getPerUserLimit() != null ? dto.getPerUserLimit() : 1);
+        t.setValidType(dto.getValidType());
+        t.setValidStart(dto.getValidStart());
+        t.setValidEnd(dto.getValidEnd());
+        t.setValidDays(dto.getValidDays());
+        t.setStatus("draft");
+        t.setDescription(dto.getDescription());
+
+        templateRepo.insert(t);
+        log.info("创建优惠券模板[{}]: {}", t.getId(), t.getName());
+        return toTemplateVO(t);
+    }
+
+    @Override
+    @Transactional
+    public CouponTemplateVO updateTemplate(Long id, CouponTemplateUpdateDTO dto) {
+        CouponTemplate t = templateRepo.selectById(id);
+        if (t == null) {
+            throw new BusinessException(ErrorCode.COUPON_TEMPLATE_NOT_FOUND);
+        }
+
+        if (dto.getName() != null) t.setName(dto.getName());
+        if (dto.getCouponType() != null) t.setCouponType(dto.getCouponType());
+        if (dto.getThresholdAmount() != null) t.setThresholdAmount(dto.getThresholdAmount());
+        if (dto.getDiscountAmount() != null) t.setDiscountAmount(dto.getDiscountAmount());
+        if (dto.getDiscountRate() != null) t.setDiscountRate(dto.getDiscountRate());
+        if (dto.getMaxDiscountAmount() != null) t.setMaxDiscountAmount(dto.getMaxDiscountAmount());
+        if (dto.getScopeType() != null) t.setScopeType(dto.getScopeType());
+        if (dto.getScopeIds() != null) t.setScopeIds(dto.getScopeIds());
+        if (dto.getTotalCount() != null) t.setTotalCount(dto.getTotalCount());
+        if (dto.getPerUserLimit() != null) t.setPerUserLimit(dto.getPerUserLimit());
+        if (dto.getValidType() != null) t.setValidType(dto.getValidType());
+        if (dto.getValidStart() != null) t.setValidStart(dto.getValidStart());
+        if (dto.getValidEnd() != null) t.setValidEnd(dto.getValidEnd());
+        if (dto.getValidDays() != null) t.setValidDays(dto.getValidDays());
+        if (dto.getDescription() != null) t.setDescription(dto.getDescription());
+
+        templateRepo.updateById(t);
+        return toTemplateVO(t);
+    }
+
+    @Override
+    public IPage<CouponTemplateVO> listTemplates(String status, String couponType, String keyword,
+                                                   int pageNum, int pageSize) {
+        LambdaQueryWrapper<CouponTemplate> qw = new LambdaQueryWrapper<CouponTemplate>()
+                .eq(StringUtils.hasText(status), CouponTemplate::getStatus, status)
+                .eq(StringUtils.hasText(couponType), CouponTemplate::getCouponType, couponType)
+                .like(StringUtils.hasText(keyword), CouponTemplate::getName, keyword)
+                .orderByDesc(CouponTemplate::getCreatedAt);
+
+        IPage<CouponTemplate> page = templateRepo.selectPage(new Page<>(pageNum, pageSize), qw);
+        return page.convert(this::toTemplateVO);
+    }
+
+    @Override
+    public CouponTemplateVO getTemplate(Long id) {
+        CouponTemplate t = templateRepo.selectById(id);
+        if (t == null) {
+            throw new BusinessException(ErrorCode.COUPON_TEMPLATE_NOT_FOUND);
+        }
+        return toTemplateVO(t);
+    }
+
+    @Override
+    @Transactional
+    public void changeTemplateStatus(Long id, String status) {
+        CouponTemplate t = templateRepo.selectById(id);
+        if (t == null) {
+            throw new BusinessException(ErrorCode.COUPON_TEMPLATE_NOT_FOUND);
+        }
+
+        // 状态流转校验
+        switch (status) {
+            case "active":
+                if (!"draft".equals(t.getStatus()) && !"paused".equals(t.getStatus())) {
+                    throw new BusinessException(400, "只有草稿或暂停状态的券可以上架");
+                }
+                break;
+            case "paused":
+                if (!"active".equals(t.getStatus())) {
+                    throw new BusinessException(400, "只有上架状态的券可以暂停");
+                }
+                break;
+            case "expired":
+                if (!"active".equals(t.getStatus()) && !"paused".equals(t.getStatus())) {
+                    throw new BusinessException(400, "只有上架或暂停状态的券可以手动过期");
+                }
+                break;
+            default:
+                throw new BusinessException(ErrorCode.PARAM_ERROR);
+        }
+
+        t.setStatus(status);
+        templateRepo.updateById(t);
+        log.info("优惠券模板[{}]状态变更为[{}]", id, status);
+    }
+
+    @Override
+    @Transactional
+    public int issueCoupons(CouponIssueDTO dto) {
+        CouponTemplate template = templateRepo.selectById(dto.getTemplateId());
+        if (template == null) {
+            throw new BusinessException(ErrorCode.COUPON_TEMPLATE_NOT_FOUND);
+        }
+
+        int issued = 0;
+        for (Long userId : dto.getUserIds()) {
+            try {
+                receiveCoupon(userId, dto.getTemplateId());
+                issued++;
+            } catch (BusinessException e) {
+                log.warn("手动发券给用户[{}]失败: {}", userId, e.getMessage());
+            }
+        }
+        return issued;
+    }
+
+    @Override
+    public CouponTemplateVO getTemplateStats(Long id) {
+        CouponTemplateVO vo = getTemplate(id);
+
+        // 计算剩余数量
+        int total = vo.getTotalCount();
+        int issued = vo.getIssuedCount();
+        vo.setRemainCount(total == -1 ? -1 : total - issued);
+        return vo;
+    }
+
+    // ==================== 定时任务 ====================
+
+    @Override
+    @Transactional
+    public int batchExpireCoupons() {
+        int totalExpired = 0;
+        int batch;
+        do {
+            batch = userCouponRepo.batchExpire(1000);
+            totalExpired += batch;
+        } while (batch == 1000);
+
+        if (totalExpired > 0) {
+            log.info("批量过期优惠券: {}张", totalExpired);
+        }
+        return totalExpired;
+    }
+
+    // ==================== 内部方法 ====================
+
+    /** 计算优惠券抵扣金额 */
+    private BigDecimal calculateDeductAmount(UserCoupon coupon, BigDecimal orderAmount) {
+        BigDecimal deduct;
+        switch (coupon.getCouponType()) {
+            case "full_reduce":
+                // 满减: 订单金额 >= 门槛 → 减 discountAmount
+                deduct = coupon.getDiscountAmount();
+                break;
+            case "discount":
+                // 折扣: orderAmount * (1 - discountRate)，不超过 maxDiscountAmount
+                deduct = orderAmount.multiply(BigDecimal.ONE.subtract(coupon.getDiscountRate()))
+                        .setScale(2, RoundingMode.HALF_UP);
+                if (coupon.getMaxDiscountAmount() != null
+                        && deduct.compareTo(coupon.getMaxDiscountAmount()) > 0) {
+                    deduct = coupon.getMaxDiscountAmount();
+                }
+                break;
+            case "fixed":
+                // 立减
+                deduct = coupon.getDiscountAmount();
+                break;
+            default:
+                deduct = BigDecimal.ZERO;
+        }
+        // 抵扣不能超过订单金额
+        if (deduct.compareTo(orderAmount) > 0) {
+            deduct = orderAmount;
+        }
+        return deduct;
+    }
+
+    /** 判断券是否适用(scope匹配 + 门槛) */
+    private boolean isCouponApplicable(UserCoupon coupon, List<Long> skillIds, BigDecimal orderAmount) {
+        // 门槛校验
+        if (orderAmount.compareTo(coupon.getThresholdAmount()) < 0) {
+            return false;
+        }
+        // scope校验
+        if ("all".equals(coupon.getScopeType())) {
+            return true;
+        }
+        // TODO: 对于 category/skill scope，解析 scopeIds JSON 并匹配 skillIds
+        // 当前简化处理：非all类型暂时都通过
+        return true;
+    }
+
+    /** 生成券码: 8位大写字母+数字 */
+    private String generateCouponCode() {
+        return UUID.randomUUID().toString().replace("-", "").substring(0, 12).toUpperCase();
+    }
+
+    /** 校验创建DTO */
+    private void validateTemplateDTO(CouponTemplateCreateDTO dto) {
+        switch (dto.getCouponType()) {
+            case "full_reduce":
+            case "fixed":
+                if (dto.getDiscountAmount() == null || dto.getDiscountAmount().compareTo(BigDecimal.ZERO) <= 0) {
+                    throw new BusinessException(400, "满减/立减券必须设置优惠金额");
+                }
+                break;
+            case "discount":
+                if (dto.getDiscountRate() == null
+                        || dto.getDiscountRate().compareTo(BigDecimal.ZERO) <= 0
+                        || dto.getDiscountRate().compareTo(BigDecimal.ONE) >= 0) {
+                    throw new BusinessException(400, "折扣率必须在0~1之间(如0.8=8折)");
+                }
+                break;
+            default:
+                throw new BusinessException(400, "不支持的券类型");
+        }
+
+        if ("fixed".equals(dto.getValidType())) {
+            if (dto.getValidStart() == null || dto.getValidEnd() == null) {
+                throw new BusinessException(400, "固定时段券必须设置开始和结束时间");
+            }
+        } else if ("relative".equals(dto.getValidType())) {
+            if (dto.getValidDays() == null || dto.getValidDays() <= 0) {
+                throw new BusinessException(400, "相对有效期券必须设置有效天数");
+            }
+        }
+    }
+
+    // ==================== VO转换 ====================
+
+    private CouponTemplateVO toTemplateVO(CouponTemplate t) {
+        CouponTemplateVO vo = new CouponTemplateVO();
+        vo.setId(t.getId());
+        vo.setName(t.getName());
+        vo.setCouponType(t.getCouponType());
+        vo.setCouponTypeLabel(couponTypeLabel(t.getCouponType()));
+        vo.setThresholdAmount(t.getThresholdAmount());
+        vo.setDiscountAmount(t.getDiscountAmount());
+        vo.setDiscountRate(t.getDiscountRate());
+        vo.setMaxDiscountAmount(t.getMaxDiscountAmount());
+        vo.setScopeType(t.getScopeType());
+        vo.setScopeIds(t.getScopeIds());
+        vo.setTotalCount(t.getTotalCount());
+        vo.setIssuedCount(t.getIssuedCount());
+        vo.setPerUserLimit(t.getPerUserLimit());
+        vo.setValidType(t.getValidType());
+        vo.setValidStart(t.getValidStart());
+        vo.setValidEnd(t.getValidEnd());
+        vo.setValidDays(t.getValidDays());
+        vo.setStatus(t.getStatus());
+        vo.setStatusLabel(statusLabel(t.getStatus()));
+        vo.setDescription(t.getDescription());
+        vo.setCreatedAt(t.getCreatedAt());
+        return vo;
+    }
+
+    private UserCouponVO toUserCouponVO(UserCoupon c, String templateName) {
+        UserCouponVO vo = new UserCouponVO();
+        vo.setId(c.getId());
+        vo.setTemplateId(c.getTemplateId());
+        vo.setCouponCode(c.getCouponCode());
+        vo.setStatus(c.getStatus());
+        vo.setStatusLabel(userCouponStatusLabel(c.getStatus()));
+        vo.setName(templateName);
+        vo.setCouponType(c.getCouponType());
+        vo.setCouponTypeLabel(couponTypeLabel(c.getCouponType()));
+        vo.setThresholdAmount(c.getThresholdAmount());
+        vo.setDiscountAmount(c.getDiscountAmount());
+        vo.setDiscountRate(c.getDiscountRate());
+        vo.setMaxDiscountAmount(c.getMaxDiscountAmount());
+        vo.setScopeType(c.getScopeType());
+        vo.setDescription(null);
+        vo.setValidStart(c.getValidStart());
+        vo.setValidEnd(c.getValidEnd());
+        vo.setExpired(c.getValidEnd() != null && c.getValidEnd().isBefore(LocalDateTime.now()));
+        vo.setExpiringSoon(c.getValidEnd() != null
+                && c.getValidEnd().isAfter(LocalDateTime.now())
+                && c.getValidEnd().isBefore(LocalDateTime.now().plusDays(3)));
+        vo.setUsedOrderId(c.getUsedOrderId());
+        vo.setUsedAt(c.getUsedAt());
+        vo.setReceivedAt(c.getReceivedAt());
+        return vo;
+    }
+
+    private String couponTypeLabel(String type) {
+        if (type == null) return "";
+        return switch (type) {
+            case "full_reduce" -> "满减券";
+            case "discount" -> "折扣券";
+            case "fixed" -> "立减券";
+            default -> type;
+        };
+    }
+
+    private String statusLabel(String status) {
+        if (status == null) return "";
+        return switch (status) {
+            case "draft" -> "草稿";
+            case "active" -> "进行中";
+            case "paused" -> "已暂停";
+            case "expired" -> "已过期";
+            case "exhausted" -> "已领完";
+            default -> status;
+        };
+    }
+
+    private String userCouponStatusLabel(String status) {
+        if (status == null) return "";
+        return switch (status) {
+            case "unused" -> "未使用";
+            case "used" -> "已使用";
+            case "expired" -> "已过期";
+            case "returned" -> "已退回";
+            default -> status;
+        };
+    }
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/coupon/task/CouponExpireTask.java

@@ -0,0 +1,28 @@
+package com.openclaw.module.coupon.task;
+
+import com.openclaw.module.coupon.service.CouponService;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.scheduling.annotation.Scheduled;
+import org.springframework.stereotype.Component;
+
+@Slf4j
+@Component
+@RequiredArgsConstructor
+public class CouponExpireTask {
+
+    private final CouponService couponService;
+
+    /** 每小时执行一次: 批量过期已超时的未使用优惠券 */
+    @Scheduled(cron = "0 0 * * * ?")
+    public void expireCoupons() {
+        try {
+            int count = couponService.batchExpireCoupons();
+            if (count > 0) {
+                log.info("[CouponExpireTask] 本次过期优惠券: {}张", count);
+            }
+        } catch (Exception e) {
+            log.error("[CouponExpireTask] 执行失败", e);
+        }
+    }
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/coupon/vo/CouponCalcResultVO.java

@@ -0,0 +1,15 @@
+package com.openclaw.module.coupon.vo;
+
+import lombok.Data;
+
+import java.math.BigDecimal;
+
+@Data
+public class CouponCalcResultVO {
+    private Long couponId;
+    private String couponName;
+    private String couponType;
+    private BigDecimal couponDeductAmount;  // 优惠券抵扣金额
+    private Boolean applicable;             // 是否可用
+    private String reason;                  // 不可用原因
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/coupon/vo/CouponTemplateVO.java

@@ -0,0 +1,41 @@
+package com.openclaw.module.coupon.vo;
+
+import lombok.Data;
+
+import java.math.BigDecimal;
+import java.time.LocalDateTime;
+
+@Data
+public class CouponTemplateVO {
+    private Long id;
+    private String name;
+    private String couponType;
+    private String couponTypeLabel;
+
+    private BigDecimal thresholdAmount;
+    private BigDecimal discountAmount;
+    private BigDecimal discountRate;
+    private BigDecimal maxDiscountAmount;
+
+    private String scopeType;
+    private String scopeIds;
+
+    private Integer totalCount;
+    private Integer issuedCount;
+    private Integer perUserLimit;
+    private Integer remainCount;        // 剩余可领数量
+
+    private String validType;
+    private LocalDateTime validStart;
+    private LocalDateTime validEnd;
+    private Integer validDays;
+
+    private String status;
+    private String statusLabel;
+    private String description;
+
+    private Boolean received;           // 当前用户是否已领(用户端用)
+    private Integer userReceivedCount;  // 当前用户已领张数
+
+    private LocalDateTime createdAt;
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/coupon/vo/UserCouponVO.java

@@ -0,0 +1,37 @@
+package com.openclaw.module.coupon.vo;
+
+import lombok.Data;
+
+import java.math.BigDecimal;
+import java.time.LocalDateTime;
+
+@Data
+public class UserCouponVO {
+    private Long id;
+    private Long templateId;
+    private String couponCode;
+    private String status;
+    private String statusLabel;
+
+    // 券规则
+    private String name;                // 从模板冗余或join查询
+    private String couponType;
+    private String couponTypeLabel;
+    private BigDecimal thresholdAmount;
+    private BigDecimal discountAmount;
+    private BigDecimal discountRate;
+    private BigDecimal maxDiscountAmount;
+    private String scopeType;
+    private String description;
+
+    // 有效期
+    private LocalDateTime validStart;
+    private LocalDateTime validEnd;
+    private Boolean expired;            // 是否已过期(前端判断样式用)
+    private Boolean expiringSoon;       // 即将过期(3天内)
+
+    // 使用记录
+    private Long usedOrderId;
+    private LocalDateTime usedAt;
+    private LocalDateTime receivedAt;
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/customization/dto/CustomizationRequestDTO.java

@@ -0,0 +1,13 @@
+package com.openclaw.module.customization.dto;
+
+import lombok.Data;
+
+@Data
+public class CustomizationRequestDTO {
+    private String name;
+    private String contact;
+    private String company;
+    private String industry;
+    private String scenario;
+    private String budget;
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/customization/entity/CustomizationRequest.java

@@ -0,0 +1,30 @@
+package com.openclaw.module.customization.entity;
+
+import com.baomidou.mybatisplus.annotation.*;
+import lombok.Data;
+import java.math.BigDecimal;
+import java.time.LocalDateTime;
+
+@Data
+@TableName("customization_requests")
+public class CustomizationRequest {
+    @TableId(type = IdType.AUTO)
+    private Long id;
+    private Long userId;       // NULL=游客
+    private String name;
+    private String contact;
+    private String company;
+    private String industry;
+    private String scenario;
+    private String budget;
+    private String status;     // pending / contacted / quoted / accepted / rejected / completed
+    private Long assignedTo;
+    private BigDecimal quoteAmount;
+    private String quoteNotes;
+    private String contactNotes;
+    private LocalDateTime completedAt;
+    private LocalDateTime createdAt;
+    private LocalDateTime updatedAt;
+    @TableLogic(value = "0", delval = "1")
+    private Integer deleted;
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/customization/repository/CustomizationRequestRepository.java

@@ -0,0 +1,9 @@
+package com.openclaw.module.customization.repository;
+
+import com.baomidou.mybatisplus.core.mapper.BaseMapper;
+import com.openclaw.module.customization.entity.CustomizationRequest;
+import org.apache.ibatis.annotations.Mapper;
+
+@Mapper
+public interface CustomizationRequestRepository extends BaseMapper<CustomizationRequest> {
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/customization/service/CustomizationRequestService.java

@@ -0,0 +1,22 @@
+package com.openclaw.module.customization.service;
+
+import com.baomidou.mybatisplus.core.metadata.IPage;
+import com.openclaw.module.customization.dto.CustomizationRequestDTO;
+import com.openclaw.module.customization.entity.CustomizationRequest;
+
+public interface CustomizationRequestService {
+    /**
+     * 提交定制需求
+     */
+    void submitRequest(Long userId, CustomizationRequestDTO dto);
+
+    /**
+     * 管理端：分页查询定制需求
+     */
+    IPage<CustomizationRequest> listRequests(String keyword, String status, int pageNum, int pageSize);
+
+    /**
+     * 管理端：更新定制需求状态
+     */
+    void updateStatus(Long id, String status, String contactNotes);
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/customization/service/impl/CustomizationRequestServiceImpl.java

@@ -0,0 +1,95 @@
+package com.openclaw.module.customization.service.impl;
+
+import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
+import com.baomidou.mybatisplus.core.metadata.IPage;
+import com.baomidou.mybatisplus.extension.plugins.pagination.Page;
+import com.openclaw.exception.BusinessException;
+import com.openclaw.module.customization.dto.CustomizationRequestDTO;
+import com.openclaw.module.customization.entity.CustomizationRequest;
+import com.openclaw.module.customization.repository.CustomizationRequestRepository;
+import com.openclaw.module.customization.service.CustomizationRequestService;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.stereotype.Service;
+import org.springframework.util.StringUtils;
+
+import java.util.Set;
+
+@Slf4j
+@Service
+@RequiredArgsConstructor
+public class CustomizationRequestServiceImpl implements CustomizationRequestService {
+
+    private static final Set<String> ALLOWED_STATUSES = Set.of(
+            "pending", "contacted", "quoted", "accepted", "rejected", "completed"
+    );
+
+    private final CustomizationRequestRepository repository;
+
+    @Override
+    public void submitRequest(Long userId, CustomizationRequestDTO dto) {
+        CustomizationRequest request = new CustomizationRequest();
+        request.setUserId(userId);
+        request.setName(dto.getName());
+        request.setContact(dto.getContact());
+        request.setCompany(dto.getCompany());
+        request.setIndustry(dto.getIndustry());
+        request.setScenario(dto.getScenario());
+        request.setBudget(dto.getBudget() != null ? dto.getBudget() : "待定");
+        request.setStatus("pending");
+
+        repository.insert(request);
+        log.info("定制需求提交成功，ID: {}, 用户ID: {}", request.getId(), userId);
+    }
+
+    @Override
+    public IPage<CustomizationRequest> listRequests(String keyword, String status, int pageNum, int pageSize) {
+        LambdaQueryWrapper<CustomizationRequest> wrapper = new LambdaQueryWrapper<>();
+        if (StringUtils.hasText(keyword)) {
+            wrapper.and(w -> w.like(CustomizationRequest::getName, keyword)
+                    .or().like(CustomizationRequest::getCompany, keyword)
+                    .or().like(CustomizationRequest::getContact, keyword));
+        }
+        if (StringUtils.hasText(status)) {
+            wrapper.eq(CustomizationRequest::getStatus, status);
+        }
+        wrapper.orderByDesc(CustomizationRequest::getCreatedAt);
+        return repository.selectPage(new Page<>(pageNum, pageSize), wrapper);
+    }
+
+    @Override
+    public void updateStatus(Long id, String status, String contactNotes) {
+        CustomizationRequest request = repository.selectById(id);
+        if (request == null) {
+            throw new BusinessException(404, "定制需求不存在");
+        }
+
+        String normalizedStatus = normalizeStatus(status);
+        boolean statusChanged = !normalizedStatus.equals(request.getStatus());
+        boolean notesChanged = StringUtils.hasText(contactNotes)
+                && !contactNotes.equals(request.getContactNotes());
+
+        if (!statusChanged && !notesChanged) {
+            return;
+        }
+
+        request.setStatus(normalizedStatus);
+        if (StringUtils.hasText(contactNotes)) {
+            request.setContactNotes(contactNotes);
+        }
+        repository.updateById(request);
+        log.info("定制需求状态更新，ID: {}, 新状态: {}", id, normalizedStatus);
+    }
+
+    private String normalizeStatus(String status) {
+        if (!StringUtils.hasText(status)) {
+            throw new BusinessException(400, "状态不能为空");
+        }
+
+        String normalizedStatus = "cancelled".equals(status) ? "rejected" : status;
+        if (!ALLOWED_STATUSES.contains(normalizedStatus)) {
+            throw new BusinessException(400, "不支持的定制需求状态: " + status);
+        }
+        return normalizedStatus;
+    }
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/developer/controller/DeveloperController.java

@@ -0,0 +1,35 @@
+package com.openclaw.module.developer.controller;
+
+import com.openclaw.common.Result;
+import com.openclaw.module.developer.dto.DeveloperApplicationDTO;
+import com.openclaw.module.developer.service.DeveloperApplicationService;
+import com.openclaw.util.UserContext;
+import lombok.RequiredArgsConstructor;
+import org.springframework.web.bind.annotation.*;
+
+@RestController
+@RequestMapping("/api/v1/developer")
+@RequiredArgsConstructor
+public class DeveloperController {
+
+    private final DeveloperApplicationService applicationService;
+
+    /**
+     * 提交开发者申请
+     */
+    @PostMapping("/application")
+    public Result<Void> submitApplication(@RequestBody DeveloperApplicationDTO dto) {
+        Long userId = UserContext.getUserId();
+        applicationService.submitApplication(userId, dto);
+        return Result.ok();
+    }
+
+    /**
+     * 查询我的申请状态
+     */
+    @GetMapping("/application")
+    public Result<?> getMyApplication() {
+        Long userId = UserContext.getUserId();
+        return Result.ok(applicationService.getByUserId(userId));
+    }
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/developer/dto/DeveloperApplicationDTO.java

@@ -0,0 +1,50 @@
+package com.openclaw.module.developer.dto;
+
+import lombok.Data;
+import jakarta.validation.constraints.*;
+import org.hibernate.validator.constraints.URL;
+
+import java.util.List;
+
+@Data
+public class DeveloperApplicationDTO {
+    @NotBlank(message = "请输入真实姓名")
+    private String realName;
+
+    @NotBlank(message = "请输入手机号")
+    @Pattern(regexp = "^1[3-9]\\d{9}$", message = "请输入正确的手机号")
+    private String phone;
+
+    @NotBlank(message = "请输入邮箱")
+    @Email(message = "请输入正确的邮箱格式")
+    private String email;
+
+    @NotBlank(message = "请输入所在城市")
+    private String city;
+
+    @NotEmpty(message = "请选择技术栈")
+    private List<String> techStack;
+
+    @NotBlank(message = "请选择工作年限")
+    private String experience;
+
+    @NotEmpty(message = "请选择擅长领域")
+    private List<String> expertise;
+
+    @NotBlank(message = "请输入个人简介")
+    @Size(min = 50, message = "个人简介至少50个字符")
+    private String bio;
+
+    @NotBlank(message = "请输入简历网盘链接")
+    @URL(message = "请输入正确的链接格式")
+    private String resumeUrl;
+
+    @NotBlank(message = "请输入Skill演示视频链接")
+    @URL(message = "请输入正确的链接格式")
+    private String demoVideoUrl;
+
+    private String portfolioUrl;
+
+    @NotBlank(message = "请选择期望收益")
+    private String expectedIncome;
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/developer/entity/DeveloperApplication.java

@@ -0,0 +1,35 @@
+package com.openclaw.module.developer.entity;
+
+import com.baomidou.mybatisplus.annotation.*;
+import lombok.Data;
+import java.time.LocalDateTime;
+
+@Data
+@TableName("developer_applications")
+public class DeveloperApplication {
+    @TableId(type = IdType.AUTO)
+    private Long id;
+    private Long userId;
+    private String realName;
+    private String phone;
+    private String email;
+    private String city;
+    private String techStack;    // JSON array string
+    private String experience;
+    private String expertise;    // JSON array string
+    private String bio;
+    private String resumeUrl;
+    private String demoVideoUrl;
+    private String portfolioUrl;
+    private String expectedIncome;
+    private String status;       // pending / approved / rejected / interview
+    private String rejectReason;
+    private Long reviewerId;
+    private LocalDateTime reviewedAt;
+    private LocalDateTime interviewTime;
+    private String interviewNotes;
+    private LocalDateTime createdAt;
+    private LocalDateTime updatedAt;
+    @TableLogic(value = "0", delval = "1")
+    private Integer deleted;
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/developer/repository/DeveloperApplicationRepository.java

@@ -0,0 +1,9 @@
+package com.openclaw.module.developer.repository;
+
+import com.baomidou.mybatisplus.core.mapper.BaseMapper;
+import com.openclaw.module.developer.entity.DeveloperApplication;
+import org.apache.ibatis.annotations.Mapper;
+
+@Mapper
+public interface DeveloperApplicationRepository extends BaseMapper<DeveloperApplication> {
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/developer/service/DeveloperApplicationService.java

@@ -0,0 +1,27 @@
+package com.openclaw.module.developer.service;
+
+import com.baomidou.mybatisplus.core.metadata.IPage;
+import com.openclaw.module.developer.dto.DeveloperApplicationDTO;
+import com.openclaw.module.developer.entity.DeveloperApplication;
+
+public interface DeveloperApplicationService {
+    /**
+     * 提交开发者申请
+     */
+    void submitApplication(Long userId, DeveloperApplicationDTO dto);
+
+    /**
+     * 根据用户ID查询申请状态
+     */
+    DeveloperApplication getByUserId(Long userId);
+
+    /**
+     * 管理端：分页查询开发者申请
+     */
+    IPage<DeveloperApplication> listApplications(String keyword, String status, int pageNum, int pageSize);
+
+    /**
+     * 管理端：审核开发者申请
+     */
+    void reviewApplication(Long id, String status, String rejectReason, Long reviewerId);
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/developer/service/impl/DeveloperApplicationServiceImpl.java

@@ -0,0 +1,102 @@
+package com.openclaw.module.developer.service.impl;
+
+import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
+import com.baomidou.mybatisplus.core.metadata.IPage;
+import com.baomidou.mybatisplus.extension.plugins.pagination.Page;
+import com.fasterxml.jackson.core.JsonProcessingException;
+import com.fasterxml.jackson.databind.ObjectMapper;
+import com.openclaw.module.developer.dto.DeveloperApplicationDTO;
+import com.openclaw.module.developer.entity.DeveloperApplication;
+import com.openclaw.module.developer.repository.DeveloperApplicationRepository;
+import com.openclaw.module.developer.service.DeveloperApplicationService;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.stereotype.Service;
+
+import java.time.LocalDateTime;
+
+@Slf4j
+@Service
+@RequiredArgsConstructor
+public class DeveloperApplicationServiceImpl implements DeveloperApplicationService {
+
+    private final DeveloperApplicationRepository repository;
+    private final ObjectMapper objectMapper;
+
+    @Override
+    public void submitApplication(Long userId, DeveloperApplicationDTO dto) {
+        // 检查是否已有申请
+        DeveloperApplication existing = repository.selectOne(
+            new LambdaQueryWrapper<DeveloperApplication>()
+                .eq(DeveloperApplication::getUserId, userId)
+        );
+        
+        if (existing != null) {
+            throw new RuntimeException("您已经提交过申请，请勿重复提交");
+        }
+
+        DeveloperApplication application = new DeveloperApplication();
+        application.setUserId(userId);
+        application.setRealName(dto.getRealName());
+        application.setPhone(dto.getPhone());
+        application.setEmail(dto.getEmail());
+        application.setCity(dto.getCity());
+        application.setExperience(dto.getExperience());
+        application.setBio(dto.getBio());
+        application.setResumeUrl(dto.getResumeUrl());
+        application.setDemoVideoUrl(dto.getDemoVideoUrl());
+        application.setPortfolioUrl(dto.getPortfolioUrl());
+        application.setExpectedIncome(dto.getExpectedIncome());
+        application.setStatus("pending");
+        
+        try {
+            application.setTechStack(objectMapper.writeValueAsString(dto.getTechStack()));
+            application.setExpertise(objectMapper.writeValueAsString(dto.getExpertise()));
+        } catch (JsonProcessingException e) {
+            log.error("JSON序列化失败", e);
+            throw new RuntimeException("数据格式错误");
+        }
+
+        repository.insert(application);
+        log.info("开发者申请提交成功，用户ID: {}, 申请ID: {}", userId, application.getId());
+    }
+
+    @Override
+    public DeveloperApplication getByUserId(Long userId) {
+        return repository.selectOne(
+            new LambdaQueryWrapper<DeveloperApplication>()
+                .eq(DeveloperApplication::getUserId, userId)
+        );
+    }
+
+    @Override
+    public IPage<DeveloperApplication> listApplications(String keyword, String status, int pageNum, int pageSize) {
+        LambdaQueryWrapper<DeveloperApplication> wrapper = new LambdaQueryWrapper<>();
+        if (keyword != null && !keyword.isBlank()) {
+            wrapper.and(w -> w.like(DeveloperApplication::getRealName, keyword)
+                    .or().like(DeveloperApplication::getPhone, keyword)
+                    .or().like(DeveloperApplication::getEmail, keyword));
+        }
+        if (status != null && !status.isBlank()) {
+            wrapper.eq(DeveloperApplication::getStatus, status);
+        }
+        wrapper.orderByDesc(DeveloperApplication::getCreatedAt);
+        return repository.selectPage(new Page<>(pageNum, pageSize), wrapper);
+    }
+
+    @Override
+    public void reviewApplication(Long id, String status, String rejectReason, Long reviewerId) {
+        DeveloperApplication application = repository.selectById(id);
+        if (application == null) {
+            throw new RuntimeException("开发者申请不存在");
+        }
+        application.setStatus(status);
+        application.setReviewerId(reviewerId);
+        application.setReviewedAt(LocalDateTime.now());
+        if ("rejected".equals(status) && rejectReason != null) {
+            application.setRejectReason(rejectReason);
+        }
+        repository.updateById(application);
+        log.info("开发者申请审核完成，ID: {}, 状态: {}", id, status);
+    }
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/feedback/controller/FeedbackController.java

@@ -0,0 +1,76 @@
+package com.openclaw.module.feedback.controller;
+
+import com.baomidou.mybatisplus.core.metadata.IPage;
+import com.openclaw.annotation.RequiresRole;
+import com.openclaw.common.Result;
+import com.openclaw.module.feedback.dto.FeedbackCreateDTO;
+import com.openclaw.module.feedback.dto.FeedbackReplyDTO;
+import com.openclaw.module.feedback.service.FeedbackService;
+import com.openclaw.module.feedback.vo.FeedbackVO;
+import com.openclaw.util.UserContext;
+import jakarta.validation.Valid;
+import lombok.RequiredArgsConstructor;
+import org.springframework.web.bind.annotation.*;
+
+@RestController
+@RequiredArgsConstructor
+public class FeedbackController {
+
+    private final FeedbackService feedbackService;
+
+    // ==================== 用户接口 ====================
+
+    @PostMapping("/api/v1/feedback")
+    public Result<FeedbackVO> submit(@Valid @RequestBody FeedbackCreateDTO dto) {
+        return Result.ok(feedbackService.submit(dto, UserContext.getUserId()));
+    }
+
+    @GetMapping("/api/v1/feedback")
+    public Result<IPage<FeedbackVO>> myFeedback(
+            @RequestParam(defaultValue = "1") int pageNum,
+            @RequestParam(defaultValue = "10") int pageSize) {
+        return Result.ok(feedbackService.listByUser(UserContext.getUserId(), pageNum, pageSize));
+    }
+
+    @GetMapping("/api/v1/feedback/{id}")
+    public Result<FeedbackVO> getFeedback(@PathVariable Long id) {
+        return Result.ok(feedbackService.getByIdForUser(id, UserContext.getUserId()));
+    }
+
+    // ==================== 管理后台接口 ====================
+
+    @GetMapping("/api/v1/admin/feedback")
+    @RequiresRole({"admin", "super_admin"})
+    public Result<IPage<FeedbackVO>> listFeedback(
+            @RequestParam(required = false) String keyword,
+            @RequestParam(required = false) String status,
+            @RequestParam(required = false) String type,
+            @RequestParam(defaultValue = "1") int pageNum,
+            @RequestParam(defaultValue = "10") int pageSize) {
+        return Result.ok(feedbackService.listAll(keyword, status, type, pageNum, pageSize));
+    }
+
+    @GetMapping("/api/v1/admin/feedback/{id}")
+    @RequiresRole({"admin", "super_admin"})
+    public Result<FeedbackVO> getFeedbackAdmin(@PathVariable Long id) {
+        return Result.ok(feedbackService.getById(id));
+    }
+
+    @PostMapping("/api/v1/admin/feedback/{id}/reply")
+    @RequiresRole({"admin", "super_admin"})
+    public Result<Void> replyFeedback(
+            @PathVariable Long id,
+            @Valid @RequestBody FeedbackReplyDTO dto) {
+        feedbackService.reply(id, dto);
+        return Result.ok(null);
+    }
+
+    @PostMapping("/api/v1/admin/feedback/{id}/status")
+    @RequiresRole({"admin", "super_admin"})
+    public Result<Void> changeStatus(
+            @PathVariable Long id,
+            @RequestParam String status) {
+        feedbackService.changeStatus(id, status);
+        return Result.ok(null);
+    }
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/feedback/dto/FeedbackCreateDTO.java

@@ -0,0 +1,23 @@
+package com.openclaw.module.feedback.dto;
+
+import jakarta.validation.constraints.NotBlank;
+import jakarta.validation.constraints.Size;
+import lombok.Data;
+import java.util.List;
+
+@Data
+public class FeedbackCreateDTO {
+    @NotBlank(message = "反馈类型不能为空")
+    private String type;
+
+    @NotBlank(message = "标题不能为空")
+    @Size(max = 200, message = "标题不能超过200字")
+    private String title;
+
+    @NotBlank(message = "内容不能为空")
+    private String content;
+
+    private List<String> images;
+
+    private String contact;
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/feedback/dto/FeedbackReplyDTO.java

@@ -0,0 +1,12 @@
+package com.openclaw.module.feedback.dto;
+
+import jakarta.validation.constraints.NotBlank;
+import lombok.Data;
+
+@Data
+public class FeedbackReplyDTO {
+    @NotBlank(message = "回复内容不能为空")
+    private String reply;
+
+    private String status;  // 可选：同时变更状态
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/feedback/entity/Feedback.java

@@ -0,0 +1,23 @@
+package com.openclaw.module.feedback.entity;
+
+import com.baomidou.mybatisplus.annotation.*;
+import lombok.Data;
+import java.time.LocalDateTime;
+
+@Data
+@TableName("feedback")
+public class Feedback {
+    @TableId(type = IdType.AUTO)
+    private Long id;
+    private Long userId;
+    private String type;           // bug/suggestion/complaint/other
+    private String title;
+    private String content;
+    private String images;         // JSON数组：["url1","url2"]
+    private String contact;
+    private String status;         // pending/processing/resolved/closed
+    private String adminReply;
+    private LocalDateTime repliedAt;
+    private LocalDateTime createdAt;
+    private LocalDateTime updatedAt;
+}

openclaw-backend/openclaw-backend/src/main/java/com/openclaw/module/feedback/repository/FeedbackRepository.java

@@ -0,0 +1,9 @@
+package com.openclaw.module.feedback.repository;
+
+import com.baomidou.mybatisplus.core.mapper.BaseMapper;
+import com.openclaw.module.feedback.entity.Feedback;
+import org.apache.ibatis.annotations.Mapper;
+
+@Mapper
+public interface FeedbackRepository extends BaseMapper<Feedback> {
+}