Merge branch 'main' of http://1.117.67.95:3000/team/qnc-server-v3

2026-03-02 12:57:17 +08:00
parent 6db59f1dea a083fdca46
commit e8da86f1a6
45 changed files with 1788 additions and 246 deletions
--- a/app/main/api/desc/admin/admin_agent.api
+++ b/app/main/api/desc/admin/admin_agent.api
@@ -83,9 +83,9 @@ service main {
 	@handler AdminGetInviteCodeList
 	get /invite_code/list (AdminGetInviteCodeListReq) returns (AdminGetInviteCodeListResp)

-	// 平台升级代理等级（免费升级，遵守代理系统逻辑规则）
+	// 平台升级代理等级
 	@handler AdminUpgradeAgent
-	post /upgrade (AdminUpgradeAgentReq) returns (AdminUpgradeAgentResp)
+	post /upgrade/agent (AdminUpgradeAgentReq) returns (AdminUpgradeAgentResp)
 }

 type (
@@ -128,14 +128,6 @@ type (
 	AdminAuditAgentResp {
 		Success bool `json:"success"`
 	}
-	// 平台升级代理等级
-	AdminUpgradeAgentReq {
-		AgentId string `json:"agent_id"` // 代理ID
-		ToLevel int64  `json:"to_level"` // 目标等级：2=黄金，3=钻石
-	}
-	AdminUpgradeAgentResp {
-		Success bool `json:"success"`
-	}
 	// 推广链接分页查询
 	AdminGetAgentLinkListReq {
 		Page           int64   `form:"page"` // 页码
@@ -165,6 +157,7 @@ type (
 		AgentId       *string `form:"agent_id,optional"` // 代理ID（可选）
 		OrderId       *string `form:"order_id,optional"` // 订单ID（可选）
 		ProcessStatus *int64  `form:"process_status,optional"` // 处理状态（可选）
+		OrderStatus   *string `form:"order_status,optional"` // 订单状态（可选）：pending-待支付，paid-已支付，refunded-已退款，closed-已关闭，failed-支付失败
 	}
 	AgentOrderListItem {
 		Id              string  `json:"id"` // 主键
@@ -177,7 +170,8 @@ type (
 		ActualBasePrice float64 `json:"actual_base_price"` // 实际底价
 		PriceCost       float64 `json:"price_cost"` // 提价成本
 		AgentProfit     float64 `json:"agent_profit"` // 代理收益
-		ProcessStatus   int64   `json:"process_status"` // 处理状态
+		ProcessStatus   int64   `json:"process_status"` // 处理状态（保留用于筛选，前端不显示）
+		OrderStatus     string  `json:"order_status"` // 订单状态：pending-待支付，paid-已支付，refunded-已退款，closed-已关闭，failed-支付失败
 		CreateTime      string  `json:"create_time"` // 创建时间
 	}
 	AdminGetAgentOrderListResp {
@@ -212,6 +206,7 @@ type (
 		AgentId       *string `form:"agent_id,optional"` // 代理ID（可选）
 		SourceAgentId *string `form:"source_agent_id,optional"` // 来源代理ID（可选）
 		RebateType    *int64  `form:"rebate_type,optional"` // 返佣类型（可选）
+		Status        *int64  `form:"status,optional"` // 状态（可选）：1=已发放，2=已冻结，3=已取消（已退款）
 	}
 	AgentRebateListItem {
 		Id            string  `json:"id"` // 主键
@@ -220,6 +215,7 @@ type (
 		OrderId       string  `json:"order_id"` // 订单ID
 		RebateType    int64   `json:"rebate_type"` // 返佣类型
 		Amount        float64 `json:"amount"` // 金额
+		Status        int64   `json:"status"` // 状态：1=已发放，2=已冻结，3=已取消（已退款）
 		CreateTime    string  `json:"create_time"` // 创建时间
 	}
 	AdminGetAgentRebateListResp {
@@ -258,17 +254,20 @@ type (
 		WithdrawNo *string `form:"withdraw_no,optional"` // 提现单号（可选）
 	}
 	AgentWithdrawalListItem {
-		Id           string  `json:"id"` // 主键
-		AgentId      string  `json:"agent_id"` // 代理ID
-		WithdrawNo   string  `json:"withdraw_no"` // 提现单号
-		Amount       float64 `json:"amount"` // 金额
-		TaxAmount    float64 `json:"tax_amount"` // 税费金额
-		ActualAmount float64 `json:"actual_amount"` // 实际到账金额
-		Status       int64   `json:"status"` // 状态
-		PayeeAccount string  `json:"payee_account"` // 收款账户
-		PayeeName    string  `json:"payee_name"` // 收款人姓名
-		Remark       string  `json:"remark"` // 备注
-		CreateTime   string  `json:"create_time"` // 创建时间
+		Id              string  `json:"id"` // 主键
+		AgentId         string  `json:"agent_id"` // 代理ID
+		WithdrawNo      string  `json:"withdraw_no"` // 提现单号
+		Amount          float64 `json:"amount"` // 金额
+		TaxAmount       float64 `json:"tax_amount"` // 税费金额
+		ActualAmount    float64 `json:"actual_amount"` // 实际到账金额
+		Status          int64   `json:"status"` // 状态
+		WithdrawalType  int64   `json:"withdrawal_type"` // 提现方式：1=支付宝，2=银行卡
+		PayeeAccount    string  `json:"payee_account"` // 收款账户（支付宝账号或银行卡号）
+		PayeeName       string  `json:"payee_name"` // 收款人姓名
+		BankCardNo      string  `json:"bank_card_no"` // 银行卡号（银行卡提现时使用）
+		BankName        string  `json:"bank_name"` // 开户行名称（银行卡提现时使用）
+		Remark          string  `json:"remark"` // 备注
+		CreateTime      string  `json:"create_time"` // 创建时间
 	}
 	AdminGetAgentWithdrawalListResp {
 		Total int64                     `json:"total"` // 总数
@@ -434,5 +433,13 @@ type (
 		Total int64                `json:"total"` // 总数
 		Items []InviteCodeListItem `json:"items"` // 列表数据
 	}
+	// 平台升级代理等级
+	AdminUpgradeAgentReq {
+		AgentId  string `json:"agent_id"`  // 代理ID
+		ToLevel  int64  `json:"to_level"`  // 目标等级：2=黄金，3=钻石
+	}
+	AdminUpgradeAgentResp {
+		Success bool `json:"success"` // 是否成功
+	}
 )

--- a/app/main/api/desc/admin/order.api
+++ b/app/main/api/desc/admin/order.api
@@ -79,6 +79,7 @@ type (
 		CreateTime         string  `json:"create_time"` // 创建时间
 		PayTime            string  `json:"pay_time"` // 支付时间
 		RefundTime         string  `json:"refund_time"` // 退款时间
+		UpdateTime         string  `json:"update_time"` // 更新时间
 		IsAgentOrder       bool    `json:"is_agent_order"` // 是否是代理订单
 		AgentProcessStatus string  `json:"agent_process_status"` // 代理事务处理状态：not_agent-非代理订单，success-处理成功，failed-处理失败，pending-待处理
 	}
--- a/app/main/api/desc/front/agent.api
+++ b/app/main/api/desc/front/agent.api
@@ -1,5 +1,7 @@
 syntax = "v1"

+import "product.api"
+
 info (
 	title:   "代理服务"
 	desc:    "新代理系统接口"
@@ -121,6 +123,14 @@ type (
 	GetInviteLinkResp {
 		InviteLink string `json:"invite_link"` // 邀请链接
 	}
+	// 生成邀请海报请求
+	GenerateInvitePosterReq {
+		InviteLink string `form:"invite_link"` // 邀请链接（用于生成二维码）
+	}
+	// 生成邀请海报响应
+	GenerateInvitePosterResp {
+		PosterUrl string `json:"poster_url"` // 海报图片URL（base64编码的data URL）
+	}
 	// 获取代理等级特权信息
 	GetLevelPrivilegeResp {
 		Levels                 []LevelPrivilegeItem `json:"levels"`
@@ -224,6 +234,10 @@ service main {
 	@handler ApplyWithdrawal
 	post /withdrawal/apply (ApplyWithdrawalReq) returns (ApplyWithdrawalResp)

+	// 获取上次提现信息（用于前端预填）
+	@handler GetLastWithdrawalInfo
+	get /withdrawal/last_info (GetLastWithdrawalInfoReq) returns (GetLastWithdrawalInfoResp)
+
 	// 实名认证
 	@handler RealNameAuth
 	post /real_name (RealNameAuthReq) returns (RealNameAuthResp)
@@ -244,6 +258,10 @@ service main {
 	@handler GetInviteLink
 	get /invite_link (GetInviteLinkReq) returns (GetInviteLinkResp)

+	// 生成邀请海报（带二维码的图片）
+	@handler GenerateInvitePoster
+	get /invite/poster (GenerateInvitePosterReq) returns (GenerateInvitePosterResp)
+
 	// 获取代理等级特权信息
 	@handler GetLevelPrivilege
 	get /level/privilege returns (GetLevelPrivilegeResp)
@@ -277,6 +295,32 @@ service main {
 	// 检查订单是否属于当前代理推广
 	@handler CheckOrderAgent
 	get /order/agent (CheckOrderAgentReq) returns (CheckOrderAgentResp)
+
+	// ============================================
+	// 用户模块白名单相关接口
+	// ============================================
+	@handler GetWhitelistFeatures
+	get /whitelist/features (GetWhitelistFeaturesReq) returns (GetWhitelistFeaturesResp)
+
+	// 创建白名单订单
+	@handler CreateWhitelistOrder
+	post /whitelist/order/create (CreateWhitelistOrderReq) returns (CreateWhitelistOrderResp)
+
+	// 获取用户白名单列表
+	@handler GetWhitelistList
+	get /whitelist/list (GetWhitelistListReq) returns (GetWhitelistListResp)
+
+	// 检查模块是否已下架（用于显示下架按钮状态）
+	@handler CheckFeatureWhitelistStatus
+	get /whitelist/check (CheckFeatureWhitelistStatusReq) returns (CheckFeatureWhitelistStatusResp)
+
+	// 下架单个模块（创建订单并支付）
+	@handler OfflineFeature
+	post /whitelist/offline (OfflineFeatureReq) returns (OfflineFeatureResp)
+
+	// 检查订单是否属于当前代理推广
+	@handler CheckOrderAgent
+	get /order/agent (CheckOrderAgentReq) returns (CheckOrderAgentResp)
 }

 type (
@@ -439,28 +483,30 @@ type (
 		LevelName         string  `json:"level_name"` // 等级名称
 		Mobile            string  `json:"mobile"` // 手机号
 		CreateTime        string  `json:"create_time"` // 加入团队时间
-		TotalRebateAmount float64 `json:"total_rebate_amount"` // 返佣给我的总金额
-		TodayRebateAmount float64 `json:"today_rebate_amount"` // 返佣给我的今日金额
-		TodayInvites      int64   `json:"today_invites"` // 邀请加入团队的今日人数
-		MonthInvites      int64   `json:"month_invites"` // 邀请加入团队的本月人数
-		TotalInvites      int64   `json:"total_invites"` // 邀请加入团队的总人数
 		TodayQueries      int64   `json:"today_queries"` // 当日查询量
 		MonthQueries      int64   `json:"month_queries"` // 本月查询量
 		TotalQueries      int64   `json:"total_queries"` // 总查询量
+		TotalRebateAmount float64 `json:"total_rebate_amount"` // 返佣给我的总金额
+		TodayRebateAmount float64 `json:"today_rebate_amount"` // 返佣给我的今日金额
+		TotalInvites      int64   `json:"total_invites"` // 邀请加入团队的总人数
+		TodayInvites      int64   `json:"today_invites"` // 邀请加入团队的今日人数
+		MonthInvites      int64   `json:"month_invites"` // 邀请加入团队的本月人数
 		IsDirect          bool    `json:"is_direct"` // 是否直接下级
 	}
 	// 收益信息
 	GetRevenueInfoResp {
-		Balance         float64 `json:"balance"` // 可用余额
-		FrozenBalance   float64 `json:"frozen_balance"` // 冻结余额
-		TotalEarnings   float64 `json:"total_earnings"` // 累计收益（钱包总收益）
-		WithdrawnAmount float64 `json:"withdrawn_amount"` // 累计提现
-		CommissionTotal float64 `json:"commission_total"` // 佣金累计总收益（推广订单获得的佣金）
-		CommissionToday float64 `json:"commission_today"` // 佣金今日收益
-		CommissionMonth float64 `json:"commission_month"` // 佣金本月收益
-		RebateTotal     float64 `json:"rebate_total"` // 返佣累计总收益（包括推广返佣和升级返佣）
-		RebateToday     float64 `json:"rebate_today"` // 返佣今日收益
-		RebateMonth     float64 `json:"rebate_month"` // 返佣本月收益
+		Balance          float64 `json:"balance"` // 可用余额
+		FrozenBalance    float64 `json:"frozen_balance"` // 冻结余额
+		TotalEarnings    float64 `json:"total_earnings"` // 累计收益（钱包总收益）
+		WithdrawnAmount  float64 `json:"withdrawn_amount"` // 累计提现
+		CommissionTotal  float64 `json:"commission_total"` // 佣金累计总收益（推广订单获得的佣金）
+		CommissionToday  float64 `json:"commission_today"` // 佣金今日收益
+		CommissionMonth  float64 `json:"commission_month"` // 佣金本月收益
+		RebateTotal      float64 `json:"rebate_total"` // 返佣累计总收益（包括推广返佣和升级返佣）
+		RebateToday      float64 `json:"rebate_today"` // 返佣今日收益
+		RebateMonth      float64 `json:"rebate_month"` // 返佣本月收益
+		AlipayMonthQuota float64 `json:"alipay_month_quota"` // 支付宝每月提现总额度
+		AlipayMonthUsed  float64 `json:"alipay_month_used"` // 本月已使用的支付宝提现额度
 	}
 	// 佣金记录
 	GetCommissionListReq {
@@ -499,6 +545,7 @@ type (
 		OrderNo           string  `json:"order_no"` // 订单号
 		RebateType        int64   `json:"rebate_type"` // 返佣类型：1=直接上级，2=钻石上级，3=黄金上级
 		Amount            float64 `json:"amount"` // 返佣金额
+		Status            int64   `json:"status"` // 状态：1=已发放，2=已冻结，3=已取消（已退款）
 		CreateTime        string  `json:"create_time"` // 创建时间
 	}
 	// 升级返佣记录
@@ -565,28 +612,46 @@ type (
 		Total int64            `json:"total"` // 总数
 		List  []WithdrawalItem `json:"list"` // 列表
 	}
+	// 提现记录
 	WithdrawalItem {
-		Id           string  `json:"id"` // 记录ID
-		WithdrawalNo string  `json:"withdrawal_no"` // 提现单号
-		Amount       float64 `json:"amount"` // 提现金额
-		TaxAmount    float64 `json:"tax_amount"` // 税费金额
-		ActualAmount float64 `json:"actual_amount"` // 实际到账金额
-		Status       int64   `json:"status"` // 状态：1=待审核，2=审核通过，3=审核拒绝，4=提现中，5=提现成功，6=提现失败
-		PayeeAccount string  `json:"payee_account"` // 收款账户
-		PayeeName    string  `json:"payee_name"` // 收款人姓名
-		Remark       string  `json:"remark"` // 备注
-		CreateTime   string  `json:"create_time"` // 创建时间
+		Id             string  `json:"id"` // 记录ID
+		WithdrawalNo   string  `json:"withdrawal_no"` // 提现单号
+		Amount         float64 `json:"amount"` // 提现金额
+		TaxAmount      float64 `json:"tax_amount"` // 税费金额
+		ActualAmount   float64 `json:"actual_amount"` // 实际到账金额
+		Status         int64   `json:"status"` // 状态：1=待审核，2=审核通过，3=审核拒绝，4=提现中，5=提现成功，6=提现失败
+		WithdrawalType int64   `json:"withdrawal_type"` // 提现方式：1=支付宝，2=银行卡
+		PayeeAccount   string  `json:"payee_account"` // 收款账户（支付宝账号或银行卡号）
+		PayeeName      string  `json:"payee_name"` // 收款人姓名
+		BankCardNo     string  `json:"bank_card_no"` // 银行卡号（银行卡提现时填写）
+		BankName       string  `json:"bank_name"` // 开户行名称（银行卡提现时填写）
+		Remark         string  `json:"remark"` // 备注
+		CreateTime     string  `json:"create_time"` // 创建时间
 	}
 	// 申请提现
 	ApplyWithdrawalReq {
-		Amount       float64 `json:"amount"` // 提现金额
-		PayeeAccount string  `json:"payee_account"` // 收款账户
-		PayeeName    string  `json:"payee_name"` // 收款人姓名
+		Amount         float64 `json:"amount"` // 提现金额
+		WithdrawalType int64   `json:"withdrawal_type"` // 提现方式：1=支付宝，2=银行卡
+		PayeeAccount   string  `json:"payee_account"` // 收款账户（支付宝账号或银行卡号）
+		PayeeName      string  `json:"payee_name"` // 收款人姓名
+		BankCardNo     string  `json:"bank_card_no,optional"` // 银行卡号（银行卡提现必填）
+		BankName       string  `json:"bank_name,optional"` // 开户行名称（银行卡提现必填）
 	}
 	ApplyWithdrawalResp {
 		WithdrawalId string `json:"withdrawal_id"` // 提现记录ID
 		WithdrawalNo string `json:"withdrawal_no"` // 提现单号
 	}
+	// 获取上次提现信息（用于前端预填）
+	GetLastWithdrawalInfoReq {
+		WithdrawalType int64 `form:"withdrawal_type"` // 提现方式：1=支付宝，2=银行卡
+	}
+	GetLastWithdrawalInfoResp {
+		WithdrawalType int64  `json:"withdrawal_type"` // 提现方式
+		PayeeAccount   string `json:"payee_account"` // 收款账户（支付宝账号或银行卡号）
+		PayeeName      string `json:"payee_name"` // 收款人姓名
+		BankCardNo     string `json:"bank_card_no"` // 银行卡号
+		BankName       string `json:"bank_name"` // 开户行名称
+	}
 	// 实名认证
 	RealNameAuthReq {
 		Name   string `json:"name"` // 姓名
@@ -607,13 +672,13 @@ type (
 		List  []PromotionQueryItem `json:"list"` // 列表
 	}
 	PromotionQueryItem {
-		Id          string  `json:"id"` // 查询ID
-		OrderId     string  `json:"order_id"` // 订单ID
-		ProductName string  `json:"product_name"` // 产品名称
-		CreateTime  string  `json:"create_time"` // 创建时间
-		QueryState  string  `json:"query_state"` // 查询状态
+		Id          string                 `json:"id"` // 查询ID
+		OrderId     string                 `json:"order_id"` // 订单ID
+		ProductName string                 `json:"product_name"` // 产品名称
+		CreateTime  string                 `json:"create_time"` // 创建时间
+		QueryState  string                 `json:"query_state"` // 查询状态
 		Params      map[string]interface{} `json:"params,optional"` // 查询参数（已脱敏）
-		Price       float64 `json:"price"` // 查询价格
+		Price       float64                `json:"price"` // 查询价格
 	}
 	// ============================================
 	// 用户模块白名单相关类型
--- a/app/main/api/desc/front/pay.api
+++ b/app/main/api/desc/front/pay.api
@@ -47,6 +47,7 @@ type (
 		Id        string `json:"id"`
 		PayMethod string `json:"pay_method"` // 支付方式: wechat, alipay, appleiap, test(仅开发环境), test_empty(仅开发环境-空报告模式)
 		PayType   string `json:"pay_type" validate:"required,oneof=query agent_vip agent_upgrade"`
+		Code      string `json:"code,optional"` // 微信小程序/H5授权码，用于自动绑定微信账号（当用户未绑定微信时）
 	}
 	PaymentResp {
 		PrepayData interface{} `json:"prepay_data"`
--- a/app/main/api/desc/front/user.api
+++ b/app/main/api/desc/front/user.api
@@ -156,8 +156,26 @@ service main {

 type (
 	sendSmsReq {
-		Mobile     string `json:"mobile" validate:"required,mobile"`
-		ActionType string `json:"actionType" validate:"required,oneof=login register query agentApply realName bindMobile"`
+		Mobile            string `json:"mobile" validate:"required,mobile"`
+		ActionType        string `json:"actionType" validate:"required,oneof=login register query agentApply realName bindMobile"`
+		CaptchaVerifyParam string `json:"captchaVerifyParam,optional"`
+	}
+)
+
+//============================> captcha v1 <============================
+@server (
+	prefix: api/v1
+	group:  captcha
+)
+service main {
+	@doc "get encrypted scene id for aliyun captcha"
+	@handler getEncryptedSceneId
+	post /captcha/encryptedSceneId returns (GetEncryptedSceneIdResp)
+}
+
+type (
+	GetEncryptedSceneIdResp {
+		EncryptedSceneId string `json:"encryptedSceneId"`
 	}
 )

--- a/app/main/api/etc/main.dev.yaml
+++ b/app/main/api/etc/main.dev.yaml
@@ -18,6 +18,12 @@ VerifyCode:
    SignName: "天远查"
    TemplateCode: "SMS_302641455"
    ValidTime: 300
+Captcha:
+    AccessKeyID: "LTAI5tKGB3TVJbMHSoZN3yr9"
+    AccessKeySecret: "OCQ30GWp4yENMjmfOAaagksE18bp65"
+    EndpointURL: "captcha.cn-shanghai.aliyuncs.com"
+    SceneID: "wynt39to"
+    EKey: ""
 Encrypt:
    SecretKey: "ff83609b2b24fc73196aac3d3dfb874f"
 WestConfig:
@@ -67,10 +73,8 @@ WechatH5:
    AppID: "wx442ee1ac1ee75917"
    AppSecret: "c80474909db42f63913b7a307b3bee17"
 WechatMini:
-    AppID: "wx781abb66b3368963" # 小程序的AppID
-    AppSecret: "c7d02cdb0fc23c35c93187af9243b00d" # 小程序的AppSecret
-    TycAppID: "wxe74617f3dd56c196"
-    TycAppSecret: "c8207e54aef5689b2a7c1f91ed7ae8a0"
+    AppID: "wx5bacc94add2da981" # 小程序的AppID
+    AppSecret: "48a2c1e8ff1b7d4c0ff82fbefa64d2d0" # 小程序的AppSecret
 Query:
    ShareLinkExpire: 604800 # 7天 = 7 * 24 * 60 * 60 = 604800秒
 AdminConfig:
--- a/app/main/api/etc/main.yaml
+++ b/app/main/api/etc/main.yaml
@@ -19,6 +19,12 @@ VerifyCode:
    SignName: "海南海宇大数据"
    TemplateCode: "SMS_302641455"
    ValidTime: 300
+Captcha:
+    AccessKeyID: "LTAI5tKGB3TVJbMHSoZN3yr9"
+    AccessKeySecret: "OCQ30GWp4yENMjmfOAaagksE18bp65"
+    EndpointURL: "captcha.cn-shanghai.aliyuncs.com"
+    SceneID: "wynt39to"
+    EKey: ""
 Encrypt:
    SecretKey: "ff83609b2b24fc73196aac3d3dfb874f"
 Alipay:
--- a/app/main/api/internal/config/config.go
+++ b/app/main/api/internal/config/config.go
@@ -11,6 +11,7 @@ type Config struct {
 	CacheRedis    cache.CacheConf
 	JwtAuth       JwtAuth // JWT 鉴权相关配置
 	VerifyCode    VerifyCode
+	Captcha       CaptchaConfig // 阿里云验证码配置
 	Encrypt       Encrypt
 	Alipay        AlipayConfig
 	Wxpay         WxpayConfig
@@ -40,6 +41,15 @@ type VerifyCode struct {
 	TemplateCode    string
 	ValidTime       int
 }
+
+type CaptchaConfig struct {
+	AccessKeyID     string
+	AccessKeySecret string
+	EndpointURL     string
+	SceneID         string
+	EKey            string // 加密模式用的 ekey（Base64）
+}
+
 type Encrypt struct {
 	SecretKey string
 }
--- a/app/main/api/internal/handler/agent/generateinviteposterhandler.go
+++ b/app/main/api/internal/handler/agent/generateinviteposterhandler.go
@@ -0,0 +1,33 @@
+// Code scaffolded by goctl. Safe to edit.
+// goctl 1.9.2
+
+package agent
+
+import (
+	"net/http"
+
+	"qnc-server/app/main/api/internal/logic/agent"
+	"qnc-server/app/main/api/internal/svc"
+	"qnc-server/app/main/api/internal/types"
+	"qnc-server/common/result"
+	"qnc-server/pkg/lzkit/validator"
+
+	"github.com/zeromicro/go-zero/rest/httpx"
+)
+
+func GenerateInvitePosterHandler(svcCtx *svc.ServiceContext) http.HandlerFunc {
+	return func(w http.ResponseWriter, r *http.Request) {
+		var req types.GenerateInvitePosterReq
+		if err := httpx.Parse(r, &req); err != nil {
+			result.ParamErrorResult(r, w, err)
+			return
+		}
+		if err := validator.Validate(req); err != nil {
+			result.ParamValidateErrorResult(r, w, err)
+			return
+		}
+		l := agent.NewGenerateInvitePosterLogic(r.Context(), svcCtx)
+		resp, err := l.GenerateInvitePoster(&req)
+		result.HttpResult(r, w, resp, err)
+	}
+}
--- a/app/main/api/internal/handler/agent/getlastwithdrawalinfohandler.go
+++ b/app/main/api/internal/handler/agent/getlastwithdrawalinfohandler.go
@@ -0,0 +1,30 @@
+package agent
+
+import (
+	"net/http"
+
+	"qnc-server/app/main/api/internal/logic/agent"
+	"qnc-server/app/main/api/internal/svc"
+	"qnc-server/app/main/api/internal/types"
+	"qnc-server/common/result"
+	"qnc-server/pkg/lzkit/validator"
+
+	"github.com/zeromicro/go-zero/rest/httpx"
+)
+
+func GetLastWithdrawalInfoHandler(svcCtx *svc.ServiceContext) http.HandlerFunc {
+	return func(w http.ResponseWriter, r *http.Request) {
+		var req types.GetLastWithdrawalInfoReq
+		if err := httpx.Parse(r, &req); err != nil {
+			result.ParamErrorResult(r, w, err)
+			return
+		}
+		if err := validator.Validate(req); err != nil {
+			result.ParamValidateErrorResult(r, w, err)
+			return
+		}
+		l := agent.NewGetLastWithdrawalInfoLogic(r.Context(), svcCtx)
+		resp, err := l.GetLastWithdrawalInfo(&req)
+		result.HttpResult(r, w, resp, err)
+	}
+}
--- a/app/main/api/internal/handler/auth/sendsmshandler.go
+++ b/app/main/api/internal/handler/auth/sendsmshandler.go
@@ -23,8 +23,27 @@ func SendSmsHandler(svcCtx *svc.ServiceContext) http.HandlerFunc {
 			result.ParamValidateErrorResult(r, w, err)
 			return
 		}
+		// 获取客户端真实 IP
+		clientIP := getClientIP(r)
+		// 获取 User-Agent 用于判断微信环境
+		userAgent := r.Header.Get("User-Agent")
 		l := auth.NewSendSmsLogic(r.Context(), svcCtx)
-		err := l.SendSms(&req)
+		err := l.SendSms(&req, clientIP, userAgent)
 		result.HttpResult(r, w, nil, err)
 	}
 }
+
+// getClientIP 获取客户端真实 IP
+func getClientIP(r *http.Request) string {
+	// 优先从 X-Forwarded-For 获取
+	if xff := r.Header.Get("X-Forwarded-For"); xff != "" {
+		// X-Forwarded-For 可能包含多个 IP，取第一个
+		return xff
+	}
+	// 其次从 X-Real-IP 获取
+	if xri := r.Header.Get("X-Real-IP"); xri != "" {
+		return xri
+	}
+	// 最后使用 RemoteAddr
+	return r.RemoteAddr
+}
--- a/app/main/api/internal/handler/captcha/getencryptedsceneidhandler.go
+++ b/app/main/api/internal/handler/captcha/getencryptedsceneidhandler.go
@@ -0,0 +1,21 @@
+package captcha
+
+import (
+	"net/http"
+
+	"github.com/zeromicro/go-zero/rest/httpx"
+	"qnc-server/app/main/api/internal/logic/captcha"
+	"qnc-server/app/main/api/internal/svc"
+)
+
+func GetEncryptedSceneIdHandler(svcCtx *svc.ServiceContext) http.HandlerFunc {
+	return func(w http.ResponseWriter, r *http.Request) {
+		l := captcha.NewGetEncryptedSceneIdLogic(r.Context(), svcCtx)
+		resp, err := l.GetEncryptedSceneId()
+		if err != nil {
+			httpx.ErrorCtx(r.Context(), w, err)
+		} else {
+			httpx.OkJsonCtx(r.Context(), w, resp)
+		}
+	}
+}
--- a/app/main/api/internal/handler/routes.go
+++ b/app/main/api/internal/handler/routes.go
@@ -22,6 +22,7 @@ import (
 	app "qnc-server/app/main/api/internal/handler/app"
 	auth "qnc-server/app/main/api/internal/handler/auth"
 	authorization "qnc-server/app/main/api/internal/handler/authorization"
+	captcha "qnc-server/app/main/api/internal/handler/captcha"
 	notification "qnc-server/app/main/api/internal/handler/notification"
 	pay "qnc-server/app/main/api/internal/handler/pay"
 	product "qnc-server/app/main/api/internal/handler/product"
@@ -104,7 +105,7 @@ func RegisterHandlers(server *rest.Server, serverCtx *svc.ServiceContext) {
 				},
 				{
 					Method:  http.MethodPost,
-					Path:    "/upgrade",
+					Path:    "/upgrade/agent",
 					Handler: admin_agent.AdminUpgradeAgentHandler(serverCtx),
 				},
 				{
@@ -661,6 +662,11 @@ func RegisterHandlers(server *rest.Server, serverCtx *svc.ServiceContext) {
 					Path:    "/info",
 					Handler: agent.GetAgentInfoHandler(serverCtx),
 				},
+				{
+					Method:  http.MethodGet,
+					Path:    "/invite/poster",
+					Handler: agent.GenerateInvitePosterHandler(serverCtx),
+				},
 				{
 					Method:  http.MethodPost,
 					Path:    "/invite_code/delete",
@@ -786,6 +792,11 @@ func RegisterHandlers(server *rest.Server, serverCtx *svc.ServiceContext) {
 					Path:    "/withdrawal/apply",
 					Handler: agent.ApplyWithdrawalHandler(serverCtx),
 				},
+				{
+					Method:  http.MethodGet,
+					Path:    "/withdrawal/last_info",
+					Handler: agent.GetLastWithdrawalInfoHandler(serverCtx),
+				},
 				{
 					Method:  http.MethodGet,
 					Path:    "/withdrawal/list",
@@ -862,6 +873,18 @@ func RegisterHandlers(server *rest.Server, serverCtx *svc.ServiceContext) {
 		rest.WithPrefix("/api/v1"),
 	)

+	server.AddRoutes(
+		[]rest.Route{
+			{
+				// get encrypted scene id for aliyun captcha
+				Method:  http.MethodPost,
+				Path:    "/captcha/encryptedSceneId",
+				Handler: captcha.GetEncryptedSceneIdHandler(serverCtx),
+			},
+		},
+		rest.WithPrefix("/api/v1"),
+	)
+
 	server.AddRoutes(
 		[]rest.Route{
 			{
--- a/app/main/api/internal/logic/admin_agent/adminauditwithdrawallogic.go
+++ b/app/main/api/internal/logic/admin_agent/adminauditwithdrawallogic.go
@@ -4,10 +4,10 @@ import (
 	"context"
 	"database/sql"
 	"fmt"
-	"time"
-	"qnc-server/common/globalkey"
+	"os"
 	"qnc-server/common/xerr"
 	"qnc-server/pkg/lzkit/lzUtils"
+	"time"

 	"github.com/pkg/errors"
 	"github.com/zeromicro/go-zero/core/stores/sqlx"
@@ -32,6 +32,13 @@ func NewAdminAuditWithdrawalLogic(ctx context.Context, svcCtx *svc.ServiceContex
 	}
 }

+// parseFloat 解析配置中的浮点数
+func (l *AdminAuditWithdrawalLogic) parseFloat(s string) (float64, error) {
+	var result float64
+	_, err := fmt.Sscanf(s, "%f", &result)
+	return result, err
+}
+
 func (l *AdminAuditWithdrawalLogic) AdminAuditWithdrawal(req *types.AdminAuditWithdrawalReq) (resp *types.AdminAuditWithdrawalResp, err error) {
 	// 1. 查询提现记录
 	withdrawal, err := l.svcCtx.AgentWithdrawalModel.FindOne(l.ctx, req.WithdrawalId)
@@ -46,39 +53,126 @@ func (l *AdminAuditWithdrawalLogic) AdminAuditWithdrawal(req *types.AdminAuditWi

 	// 4. 使用事务处理审核
 	err = l.svcCtx.AgentWithdrawalModel.Trans(l.ctx, func(transCtx context.Context, session sqlx.Session) error {
-		if req.Status == 2 { // 审核通过
-			// 4.1 更新提现记录状态为提现中
-			withdrawal.Status = 4 // 提现中
-			withdrawal.Remark = sql.NullString{String: req.Remark, Valid: true}
-			if err := l.svcCtx.AgentWithdrawalModel.UpdateWithVersion(transCtx, session, withdrawal); err != nil {
-				return errors.Wrapf(err, "更新提现记录失败")
-			}
+		switch req.Status {
+		case 2: // 审核通过
+			// 4.1 根据提现方式处理
+			switch withdrawal.WithdrawalType {
+			case 1:
+				// 支付宝提现：审核通过前再次校验月度额度，避免一次性通过多笔超限
+				now := time.Now()
+				monthStart := time.Date(now.Year(), now.Month(), 1, 0, 0, 0, 0, now.Location())
+				nextMonthStart := monthStart.AddDate(0, 1, 0)

-			// 4.2 调用支付宝转账接口
-			outBizNo := withdrawal.WithdrawNo
-			transferResp, err := l.svcCtx.AlipayService.AliTransfer(transCtx, withdrawal.PayeeAccount, withdrawal.PayeeName, withdrawal.ActualAmount, "代理提现", outBizNo)
-			if err != nil {
-				// 转账失败，更新状态为失败
-				withdrawal.Status = 6 // 提现失败
-				withdrawal.Remark = sql.NullString{String: fmt.Sprintf("转账失败: %v", err), Valid: true}
-				l.svcCtx.AgentWithdrawalModel.UpdateWithVersion(transCtx, session, withdrawal)
-
-				// 解冻余额
-				wallet, err := l.svcCtx.AgentWalletModel.FindOneByAgentId(transCtx, withdrawal.AgentId)
-				if err == nil {
-					wallet.FrozenBalance -= withdrawal.Amount
-					wallet.Balance += withdrawal.Amount
-					l.svcCtx.AgentWalletModel.UpdateWithVersion(transCtx, session, wallet)
+				// 获取支付宝月度额度配置（默认 800 元）
+				alipayQuota := 800.0
+				if cfg, cfgErr := l.svcCtx.AgentConfigModel.FindOneByConfigKey(transCtx, "alipay_month_quota"); cfgErr == nil {
+					if parsed, parseErr := l.parseFloat(cfg.ConfigValue); parseErr == nil && parsed > 0 {
+						alipayQuota = parsed
+					}
 				}

-				return errors.Wrapf(err, "支付宝转账失败")
-			}
+				// 统计本月已成功的支付宝提现金额（status=5）
+				withdrawBuilder := l.svcCtx.AgentWithdrawalModel.SelectBuilder().
+					Where("agent_id = ? AND withdrawal_type = ? AND status = ? AND create_time >= ? AND create_time < ?",
+						withdrawal.AgentId, 1, 5, monthStart, nextMonthStart)
+				usedAmount, sumErr := l.svcCtx.AgentWithdrawalModel.FindSum(transCtx, withdrawBuilder, "amount")
+				if sumErr != nil {
+					return errors.Wrapf(sumErr, "查询本月支付宝提现额度使用情况失败")
+				}

-			// 4.3 根据转账结果更新状态
-			switch transferResp.Status {
-			case "SUCCESS":
-				// 转账成功
+				if usedAmount+withdrawal.Amount > alipayQuota {
+					// 超出额度，不允许通过，保持待审核状态并提示原因
+					withdrawal.Status = 1
+					withdrawal.Remark = sql.NullString{
+						String: fmt.Sprintf("超过本月支付宝提现额度（限额：%.2f 元，已用：%.2f 元），请使用银行卡提现或调整金额", alipayQuota, usedAmount),
+						Valid:  true,
+					}
+					if err := l.svcCtx.AgentWithdrawalModel.UpdateWithVersion(transCtx, session, withdrawal); err != nil {
+						return errors.Wrapf(err, "更新提现记录失败")
+					}
+					return errors.Wrapf(xerr.NewErrMsg("超过本月支付宝提现额度，无法通过该笔提现"), "")
+				}
+
+				// 支付宝提现：开发环境下做模拟，不调用真实支付宝转账
+				mockTransferStatus := "SUCCESS"
+				var transferResp struct {
+					Status  string
+					SubCode string
+				}
+
+				if os.Getenv("ENV") == "development" {
+					transferResp.Status = mockTransferStatus
+					logx.Infof("【DEV】模拟支付宝转账成功，withdrawNo=%s, amount=%.2f, payee=%s",
+						withdrawal.WithdrawNo, withdrawal.ActualAmount, withdrawal.PayeeAccount)
+				} else {
+					// 生产环境：同步调用支付宝转账接口
+					outBizNo := withdrawal.WithdrawNo
+					resp, err := l.svcCtx.AlipayService.AliTransfer(transCtx, withdrawal.PayeeAccount, withdrawal.PayeeName, withdrawal.ActualAmount, "代理提现", outBizNo)
+					if err != nil {
+						// 调用失败：保持状态为待审核（1），只记录备注，方便管理员重试
+						withdrawal.Status = 1 // 待审核
+						withdrawal.Remark = sql.NullString{String: fmt.Sprintf("支付宝转账调用失败: %v", err), Valid: true}
+						_ = l.svcCtx.AgentWithdrawalModel.UpdateWithVersion(transCtx, session, withdrawal)
+
+						return errors.Wrapf(err, "支付宝转账失败")
+					}
+					transferResp.Status = resp.Status
+					transferResp.SubCode = resp.SubCode
+				}
+
+				// 4.2 根据转账结果更新状态
+				switch transferResp.Status {
+				case "SUCCESS":
+					// 转账成功
+					withdrawal.Status = 5 // 提现成功
+					if err := l.svcCtx.AgentWithdrawalModel.UpdateWithVersion(transCtx, session, withdrawal); err != nil {
+						return errors.Wrapf(err, "更新提现记录失败")
+					}
+
+					// 更新钱包（解冻并扣除）
+					wallet, err := l.svcCtx.AgentWalletModel.FindOneByAgentId(transCtx, withdrawal.AgentId)
+					if err != nil {
+						return errors.Wrapf(err, "查询钱包失败")
+					}
+					wallet.FrozenBalance -= withdrawal.Amount
+					wallet.WithdrawnAmount += withdrawal.Amount
+					if err := l.svcCtx.AgentWalletModel.UpdateWithVersion(transCtx, session, wallet); err != nil {
+						return errors.Wrapf(err, "更新钱包失败")
+					}
+
+					// 更新扣税记录状态
+					taxBuilder := l.svcCtx.AgentWithdrawalTaxModel.SelectBuilder().
+						Where("withdrawal_id = ?", withdrawal.Id)
+					taxRecords, err := l.svcCtx.AgentWithdrawalTaxModel.FindAll(transCtx, taxBuilder, "")
+					if err == nil && len(taxRecords) > 0 {
+						taxRecord := taxRecords[0]
+						taxRecord.TaxStatus = 2 // 已扣税
+						taxRecord.TaxTime = lzUtils.TimeToNullTime(time.Now())
+						l.svcCtx.AgentWithdrawalTaxModel.UpdateWithVersion(transCtx, session, taxRecord)
+					}
+
+				case "FAIL":
+					// 转账失败：保持待审核状态，方便人工处理或重试
+					withdrawal.Status = 1 // 待审核
+					errorMsg := l.mapAlipayError(transferResp.SubCode)
+					withdrawal.Remark = sql.NullString{String: errorMsg, Valid: true}
+					if err := l.svcCtx.AgentWithdrawalModel.UpdateWithVersion(transCtx, session, withdrawal); err != nil {
+						return errors.Wrapf(err, "更新提现记录失败")
+					}
+
+				case "DEALING":
+					// 处理中：同样保持待审核状态（1），由管理员后续确认
+					withdrawal.Status = 1
+					withdrawal.Remark = sql.NullString{String: "支付宝处理中，请稍后重试或联系平台", Valid: true}
+					if err := l.svcCtx.AgentWithdrawalModel.UpdateWithVersion(transCtx, session, withdrawal); err != nil {
+						return errors.Wrapf(err, "更新提现记录失败")
+					}
+				}
+
+			case 2:
+				// 银行卡提现：审核通过即视为提现成功（线下已/将立即打款）
 				withdrawal.Status = 5 // 提现成功
+				withdrawal.Remark = sql.NullString{String: req.Remark, Valid: true}
 				if err := l.svcCtx.AgentWithdrawalModel.UpdateWithVersion(transCtx, session, withdrawal); err != nil {
 					return errors.Wrapf(err, "更新提现记录失败")
 				}
@@ -96,7 +190,7 @@ func (l *AdminAuditWithdrawalLogic) AdminAuditWithdrawal(req *types.AdminAuditWi

 				// 更新扣税记录状态
 				taxBuilder := l.svcCtx.AgentWithdrawalTaxModel.SelectBuilder().
-					Where("withdrawal_id = ? AND del_state = ?", withdrawal.Id, globalkey.DelStateNo)
+					Where("withdrawal_id = ?", withdrawal.Id)
 				taxRecords, err := l.svcCtx.AgentWithdrawalTaxModel.FindAll(transCtx, taxBuilder, "")
 				if err == nil && len(taxRecords) > 0 {
 					taxRecord := taxRecords[0]
@@ -104,30 +198,9 @@ func (l *AdminAuditWithdrawalLogic) AdminAuditWithdrawal(req *types.AdminAuditWi
 					taxRecord.TaxTime = lzUtils.TimeToNullTime(time.Now())
 					l.svcCtx.AgentWithdrawalTaxModel.UpdateWithVersion(transCtx, session, taxRecord)
 				}
-
-			case "FAIL":
-				// 转账失败
-				withdrawal.Status = 6 // 提现失败
-				errorMsg := l.mapAlipayError(transferResp.SubCode)
-				withdrawal.Remark = sql.NullString{String: errorMsg, Valid: true}
-				if err := l.svcCtx.AgentWithdrawalModel.UpdateWithVersion(transCtx, session, withdrawal); err != nil {
-					return errors.Wrapf(err, "更新提现记录失败")
-				}
-
-				// 解冻余额
-				wallet, err := l.svcCtx.AgentWalletModel.FindOneByAgentId(transCtx, withdrawal.AgentId)
-				if err == nil {
-					wallet.FrozenBalance -= withdrawal.Amount
-					wallet.Balance += withdrawal.Amount
-					l.svcCtx.AgentWalletModel.UpdateWithVersion(transCtx, session, wallet)
-				}
-
-			case "DEALING":
-				// 处理中，保持提现中状态，后续通过轮询更新
-				// 状态已经是4（提现中），无需更新
 			}

-		} else if req.Status == 3 { // 审核拒绝
+		case 3: // 审核拒绝
 			// 4.1 更新提现记录状态为拒绝
 			withdrawal.Status = 3 // 审核拒绝
 			withdrawal.Remark = sql.NullString{String: req.Remark, Valid: true}
--- a/app/main/api/internal/logic/admin_agent/admingetagentwithdrawallistlogic.go
+++ b/app/main/api/internal/logic/admin_agent/admingetagentwithdrawallistlogic.go
@@ -49,6 +49,17 @@ func (l *AdminGetAgentWithdrawalListLogic) AdminGetAgentWithdrawalList(req *type
 			item.Remark = v.Remark.String
 		}
 		item.CreateTime = v.CreateTime.Format("2006-01-02 15:04:05")
+
+		// 如果是银行卡提现，填充银行卡信息
+		if v.WithdrawalType == 2 {
+			if v.BankCardNo.Valid {
+				item.BankCardNo = v.BankCardNo.String
+			}
+			if v.BankName.Valid {
+				item.BankName = v.BankName.String
+			}
+		}
+
 		items = append(items, item)
 	}
 	resp = &types.AdminGetAgentWithdrawalListResp{
--- a/app/main/api/internal/logic/admin_order/admingetorderlistlogic.go
+++ b/app/main/api/internal/logic/admin_order/admingetorderlistlogic.go
@@ -86,7 +86,7 @@ func (l *AdminGetOrderListLogic) AdminGetOrderList(req *types.AdminGetOrderListR
 		return nil
 	}, func() error {
 		var err error
-		orders, err = l.svcCtx.OrderModel.FindPageListByPage(l.ctx, builder, req.Page, req.PageSize, "id DESC")
+		orders, err = l.svcCtx.OrderModel.FindPageListByPage(l.ctx, builder, req.Page, req.PageSize, "update_time DESC")
 		if err != nil {
 			return errors.Wrapf(xerr.NewErrCode(xerr.DB_ERROR), "AdminGetOrderList, 查询订单列表失败 err: %v", err)
 		}
@@ -264,6 +264,7 @@ func (l *AdminGetOrderListLogic) AdminGetOrderList(req *types.AdminGetOrderListR
 			Status:          order.Status,
 			CreateTime:      order.CreateTime.Format("2006-01-02 15:04:05"),
 			QueryState:      queryStateMap[order.Id],
+			UpdateTime:      order.UpdateTime.Format("2006-01-02 15:04:05"),
 		}
 		if order.PayTime.Valid {
 			item.PayTime = order.PayTime.Time.Format("2006-01-02 15:04:05")
--- a/app/main/api/internal/logic/agent/applywithdrawallogic.go
+++ b/app/main/api/internal/logic/agent/applywithdrawallogic.go
@@ -3,12 +3,11 @@ package agent
 import (
 	"context"
 	"fmt"
-	"time"
 	"qnc-server/app/main/model"
 	"qnc-server/common/ctxdata"
-	"qnc-server/common/globalkey"
 	"qnc-server/common/xerr"
 	"qnc-server/pkg/lzkit/lzUtils"
+	"time"

 	"github.com/google/uuid"
 	"github.com/pkg/errors"
@@ -62,53 +61,138 @@ func (l *ApplyWithdrawalLogic) ApplyWithdrawal(req *types.ApplyWithdrawalReq) (r
 		return nil, errors.Wrapf(xerr.NewErrMsg("请先完成实名认证"), "")
 	}

-	// 3. 验证提现金额
+	// 3. 验证提现方式
+	if req.WithdrawalType != 1 && req.WithdrawalType != 2 {
+		return nil, errors.Wrapf(xerr.NewErrMsg("提现方式无效"), "")
+	}
+
+	// 4. 验证提现信息
+	if req.WithdrawalType == 1 {
+		// 支付宝提现：验证支付宝账号和姓名
+		if req.PayeeAccount == "" {
+			return nil, errors.Wrapf(xerr.NewErrMsg("请输入支付宝账号"), "")
+		}
+		if req.PayeeName == "" {
+			return nil, errors.Wrapf(xerr.NewErrMsg("请输入收款人姓名"), "")
+		}
+	} else if req.WithdrawalType == 2 {
+		// 银行卡提现：验证银行卡号、开户行和姓名
+		if req.BankCardNo == "" {
+			return nil, errors.Wrapf(xerr.NewErrMsg("请输入银行卡号"), "")
+		}
+		if req.BankName == "" {
+			return nil, errors.Wrapf(xerr.NewErrMsg("请输入开户行名称"), "")
+		}
+		if req.PayeeName == "" {
+			return nil, errors.Wrapf(xerr.NewErrMsg("请输入收款人姓名"), "")
+		}
+	}
+
+	// 5. 验证提现金额
 	if req.Amount <= 0 {
 		return nil, errors.Wrapf(xerr.NewErrMsg("提现金额必须大于0"), "")
 	}

-	// 4. 获取钱包信息
+	// 6. 获取钱包信息
 	wallet, err := l.svcCtx.AgentWalletModel.FindOneByAgentId(l.ctx, agent.Id)
 	if err != nil {
 		return nil, errors.Wrapf(xerr.NewErrCode(xerr.DB_ERROR), "查询钱包失败, %v", err)
 	}

-	// 5. 验证余额
+	// 7. 验证余额（包括检查是否为负数）
+	if wallet.Balance < 0 {
+		return nil, errors.Wrapf(xerr.NewErrMsg(fmt.Sprintf("账户存在欠款，请先补足欠款后再申请提现，当前余额：%.2f", wallet.Balance)), "")
+	}
 	if wallet.Balance < req.Amount {
 		return nil, errors.Wrapf(xerr.NewErrMsg(fmt.Sprintf("余额不足，当前余额：%.2f", wallet.Balance)), "")
 	}

-	// 6. 计算税费
+	// 8. 支付宝月度提现额度校验（仅针对支付宝提现）
+	if req.WithdrawalType == 1 {
+		now := time.Now()
+		monthStart := time.Date(now.Year(), now.Month(), 1, 0, 0, 0, 0, now.Location())
+		nextMonthStart := monthStart.AddDate(0, 1, 0)
+
+		// 8.1 获取支付宝月度额度配置（默认 800 元）
+		alipayQuota := 800.0
+		if cfg, cfgErr := l.svcCtx.AgentConfigModel.FindOneByConfigKey(l.ctx, "alipay_month_quota"); cfgErr == nil {
+			if parsed, parseErr := l.parseFloat(cfg.ConfigValue); parseErr == nil && parsed > 0 {
+				alipayQuota = parsed
+			}
+		}
+
+		// 8.2 统计本月已申请/成功的支付宝提现金额（status IN (1,5)），避免多次申请占用超额
+		withdrawBuilder := l.svcCtx.AgentWithdrawalModel.SelectBuilder().
+			Where("agent_id = ? AND withdrawal_type = ? AND status IN (1,5) AND create_time >= ? AND create_time < ?",
+				agent.Id, 1, monthStart, nextMonthStart)
+		usedAmount, sumErr := l.svcCtx.AgentWithdrawalModel.FindSum(l.ctx, withdrawBuilder, "amount")
+		if sumErr != nil {
+			return nil, errors.Wrapf(sumErr, "查询本月支付宝提现额度使用情况失败")
+		}
+
+		remainQuota := alipayQuota - usedAmount
+		if remainQuota <= 0 {
+			return nil, errors.Wrapf(
+				xerr.NewErrMsg(fmt.Sprintf("本月支付宝提现额度已用完（额度：%.2f 元），请使用银行卡提现", alipayQuota)),
+				"",
+			)
+		}
+
+		if req.Amount > remainQuota {
+			return nil, errors.Wrapf(
+				xerr.NewErrMsg(fmt.Sprintf("本月支付宝最高可提现 %.2f 元，请调整提现金额或使用银行卡提现", remainQuota)),
+				"",
+			)
+		}
+	}
+
+	// 9. 计算税费
 	yearMonth := int64(time.Now().Year()*100 + int(time.Now().Month()))
 	taxInfo, err := l.calculateTax(l.ctx, agent.Id, req.Amount, yearMonth)
 	if err != nil {
 		return nil, errors.Wrapf(err, "计算税费失败")
 	}

-	// 7. 生成提现单号
-	withdrawNo := fmt.Sprintf("WD%d%d", time.Now().Unix(), agent.Id)
+	// 10. 生成提现单号（WD开头 + GenerateOutTradeNo生成的订单号，确保总长度不超过32个字符）
+	orderNo := l.svcCtx.AlipayService.GenerateOutTradeNo()
+	withdrawNo := "WD" + orderNo
+	// 确保总长度不超过32个字符
+	if len(withdrawNo) > 32 {
+		withdrawNo = withdrawNo[:32]
+	}

-	// 8. 使用事务处理提现申请
+	// 11. 使用事务处理提现申请
 	var withdrawalId string
 	err = l.svcCtx.AgentWalletModel.Trans(l.ctx, func(transCtx context.Context, session sqlx.Session) error {
-		// 8.1 冻结余额
+		// 11.1 冻结余额
 		wallet.FrozenBalance += req.Amount
 		wallet.Balance -= req.Amount
 		if err := l.svcCtx.AgentWalletModel.UpdateWithVersion(transCtx, session, wallet); err != nil {
 			return errors.Wrapf(err, "冻结余额失败")
 		}

-		// 8.2 创建提现记录
+		// 11.2 创建提现记录
 		withdrawal := &model.AgentWithdrawal{
-			Id:           uuid.New().String(),
-			AgentId:      agent.Id,
-			WithdrawNo:   withdrawNo,
-			PayeeAccount: req.PayeeAccount,
-			PayeeName:    req.PayeeName,
-			Amount:       req.Amount,
-			ActualAmount: taxInfo.ActualAmount,
-			TaxAmount:    taxInfo.TaxAmount,
-			Status:       1, // 处理中（待审核）
+			Id:             uuid.New().String(),
+			AgentId:        agent.Id,
+			WithdrawNo:     withdrawNo,
+			WithdrawalType: req.WithdrawalType,
+			PayeeAccount:   req.PayeeAccount,
+			PayeeName:      req.PayeeName,
+			Amount:         req.Amount,
+			ActualAmount:   taxInfo.ActualAmount,
+			TaxAmount:      taxInfo.TaxAmount,
+			Status:         1, // 待审核
+		}
+
+		// 如果是银行卡提现，设置银行卡相关字段
+		if req.WithdrawalType == 2 {
+			withdrawal.BankCardNo = lzUtils.StringToNullString(req.BankCardNo)
+			withdrawal.BankName = lzUtils.StringToNullString(req.BankName)
+			// 银行卡提现时，payee_account 可以存储银行卡号（便于查询），也可以留空
+			if req.PayeeAccount == "" {
+				withdrawal.PayeeAccount = req.BankCardNo
+			}
 		}

 		_, err := l.svcCtx.AgentWithdrawalModel.Insert(transCtx, session, withdrawal)
@@ -117,7 +201,7 @@ func (l *ApplyWithdrawalLogic) ApplyWithdrawal(req *types.ApplyWithdrawalReq) (r
 		}
 		withdrawalId = withdrawal.Id

-		// 8.3 创建扣税记录
+		// 11.3 创建扣税记录
 		taxRecord := &model.AgentWithdrawalTax{
 			AgentId:          agent.Id,
 			WithdrawalId:     withdrawalId,
@@ -167,8 +251,10 @@ func (l *ApplyWithdrawalLogic) calculateTax(ctx context.Context, agentId string,
 	}

 	// 查询本月已提现金额
+	// 注意：FindAll 方法会自动添加 del_state = ? 条件，所以这里不需要手动添加
+	// 这里对 year_month 使用反引号包裹，避免与某些数据库版本/SQL 模式下的关键字冲突
 	builder := l.svcCtx.AgentWithdrawalTaxModel.SelectBuilder().
-		Where("agent_id = ? AND year_month = ? AND del_state = ?", agentId, yearMonth, globalkey.DelStateNo)
+		Where("agent_id = ? AND `year_month` = ?", agentId, yearMonth)
 	taxRecords, err := l.svcCtx.AgentWithdrawalTaxModel.FindAll(ctx, builder, "")
 	if err != nil {
 		return nil, errors.Wrapf(err, "查询月度提现记录失败")
--- a/app/main/api/internal/logic/agent/checkfeaturewhiteliststatuslogic.go
+++ b/app/main/api/internal/logic/agent/checkfeaturewhiteliststatuslogic.go
@@ -4,12 +4,13 @@ import (
 	"context"
 	"strings"

-	"github.com/pkg/errors"
-	"github.com/zeromicro/go-zero/core/logx"
 	"qnc-server/app/main/api/internal/svc"
 	"qnc-server/app/main/api/internal/types"
 	"qnc-server/app/main/model"
 	"qnc-server/common/xerr"
+
+	"github.com/pkg/errors"
+	"github.com/zeromicro/go-zero/core/logx"
 )

 type CheckFeatureWhitelistStatusLogic struct {
--- a/app/main/api/internal/logic/agent/checkorderagentlogic.go
+++ b/app/main/api/internal/logic/agent/checkorderagentlogic.go
@@ -3,13 +3,14 @@ package agent
 import (
 	"context"

-	"github.com/pkg/errors"
-	"github.com/zeromicro/go-zero/core/logx"
 	"qnc-server/app/main/api/internal/svc"
 	"qnc-server/app/main/api/internal/types"
 	"qnc-server/app/main/model"
 	"qnc-server/common/ctxdata"
 	"qnc-server/common/xerr"
+
+	"github.com/pkg/errors"
+	"github.com/zeromicro/go-zero/core/logx"
 )

 type CheckOrderAgentLogic struct {
--- a/app/main/api/internal/logic/agent/createwhitelistorderlogic.go
+++ b/app/main/api/internal/logic/agent/createwhitelistorderlogic.go
@@ -4,15 +4,16 @@ import (
 	"context"
 	"fmt"

-	"github.com/google/uuid"
-	"github.com/pkg/errors"
-	"github.com/zeromicro/go-zero/core/logx"
-	"github.com/zeromicro/go-zero/core/stores/sqlx"
 	"qnc-server/app/main/api/internal/svc"
 	"qnc-server/app/main/api/internal/types"
 	"qnc-server/app/main/model"
 	"qnc-server/common/ctxdata"
 	"qnc-server/common/xerr"
+
+	"github.com/google/uuid"
+	"github.com/pkg/errors"
+	"github.com/zeromicro/go-zero/core/logx"
+	"github.com/zeromicro/go-zero/core/stores/sqlx"
 )

 type CreateWhitelistOrderLogic struct {
--- a/app/main/api/internal/logic/agent/generateinviteposterlogic.go
+++ b/app/main/api/internal/logic/agent/generateinviteposterlogic.go
@@ -0,0 +1,52 @@
+// Code scaffolded by goctl. Safe to edit.
+// goctl 1.9.2
+
+package agent
+
+import (
+	"context"
+	"encoding/base64"
+	"fmt"
+
+	"qnc-server/app/main/api/internal/svc"
+	"qnc-server/app/main/api/internal/types"
+	"qnc-server/common/xerr"
+
+	"github.com/pkg/errors"
+	"github.com/zeromicro/go-zero/core/logx"
+)
+
+type GenerateInvitePosterLogic struct {
+	logx.Logger
+	ctx    context.Context
+	svcCtx *svc.ServiceContext
+}
+
+func NewGenerateInvitePosterLogic(ctx context.Context, svcCtx *svc.ServiceContext) *GenerateInvitePosterLogic {
+	return &GenerateInvitePosterLogic{
+		Logger: logx.WithContext(ctx),
+		ctx:    ctx,
+		svcCtx: svcCtx,
+	}
+}
+
+func (l *GenerateInvitePosterLogic) GenerateInvitePoster(req *types.GenerateInvitePosterReq) (resp *types.GenerateInvitePosterResp, err error) {
+	if req.InviteLink == "" {
+		return nil, errors.Wrapf(xerr.NewErrMsg("邀请链接不能为空"), "")
+	}
+
+	// 调用ImageService生成海报
+	imageData, mimeType, err := l.svcCtx.ImageService.ProcessImageWithQRCode("invitation", req.InviteLink)
+	if err != nil {
+		l.Errorf("生成邀请海报失败: %v", err)
+		return nil, errors.Wrapf(xerr.NewErrCode(xerr.SERVER_COMMON_ERROR), "生成海报失败: %v", err)
+	}
+
+	// 将图片数据转换为base64编码的data URL
+	base64Data := base64.StdEncoding.EncodeToString(imageData)
+	posterUrl := fmt.Sprintf("data:%s;base64,%s", mimeType, base64Data)
+
+	return &types.GenerateInvitePosterResp{
+		PosterUrl: posterUrl,
+	}, nil
+}
--- a/app/main/api/internal/logic/agent/getinvitelinklogic.go
+++ b/app/main/api/internal/logic/agent/getinvitelinklogic.go
@@ -4,15 +4,15 @@ import (
 	"context"
 	"database/sql"
 	"fmt"
-	"strconv"
-	"strings"
-	"time"
 	"qnc-server/app/main/model"
 	"qnc-server/common/ctxdata"
 	"qnc-server/common/globalkey"
 	"qnc-server/common/tool"
 	"qnc-server/common/xerr"
 	"qnc-server/pkg/lzkit/crypto"
+	"strconv"
+	"strings"
+	"time"

 	"github.com/pkg/errors"

@@ -124,7 +124,18 @@ func (l *GetInviteLinkLogic) createInviteShortLink(inviteCodeId string, inviteCo
 	// 先查询是否已存在短链
 	existingShortLink, err := l.svcCtx.AgentShortLinkModel.FindOneByInviteCodeIdTypeDelState(l.ctx, sql.NullString{String: inviteCodeId, Valid: inviteCodeId != ""}, 2, globalkey.DelStateNo)
 	if err == nil && existingShortLink != nil {
-		// 已存在短链，直接返回
+		// 已存在短链，检查 target_path 是否需要更新
+		if existingShortLink.TargetPath != targetPath {
+			// target_path 已变化，更新短链记录
+			oldTargetPath := existingShortLink.TargetPath
+			existingShortLink.TargetPath = targetPath
+			if updateErr := l.svcCtx.AgentShortLinkModel.UpdateWithVersion(l.ctx, nil, existingShortLink); updateErr != nil {
+				l.Errorf("更新短链 target_path 失败: %v", updateErr)
+				// 即使更新失败，也返回旧短链，避免影响用户体验
+			} else {
+				l.Infof("短链 target_path 已更新: shortCode=%s, old=%s, new=%s", existingShortLink.ShortCode, oldTargetPath, targetPath)
+			}
+		}
 		return fmt.Sprintf("%s/s/%s", promotionConfig.PromotionDomain, existingShortLink.ShortCode), nil
 	}

@@ -136,6 +147,18 @@ func (l *GetInviteLinkLogic) createInviteShortLink(inviteCodeId string, inviteCo
 	if inviteCodeId == "" && inviteCode != "" {
 		existingByCode, err2 := l.svcCtx.AgentShortLinkModel.FindOneByInviteCodeTypeDelState(l.ctx, sql.NullString{String: inviteCode, Valid: true}, 2, globalkey.DelStateNo)
 		if err2 == nil && existingByCode != nil {
+			// 已存在短链，检查 target_path 是否需要更新
+			if existingByCode.TargetPath != targetPath {
+				// target_path 已变化，更新短链记录
+				oldTargetPath := existingByCode.TargetPath
+				existingByCode.TargetPath = targetPath
+				if updateErr := l.svcCtx.AgentShortLinkModel.UpdateWithVersion(l.ctx, nil, existingByCode); updateErr != nil {
+					l.Errorf("更新短链 target_path 失败: %v", updateErr)
+					// 即使更新失败，也返回旧短链，避免影响用户体验
+				} else {
+					l.Infof("短链 target_path 已更新: shortCode=%s, old=%s, new=%s", existingByCode.ShortCode, oldTargetPath, targetPath)
+				}
+			}
 			return fmt.Sprintf("%s/s/%s", promotionConfig.PromotionDomain, existingByCode.ShortCode), nil
 		}
 		if err2 != nil && !errors.Is(err2, model.ErrNotFound) {
--- a/app/main/api/internal/logic/agent/getlastwithdrawalinfologic.go
+++ b/app/main/api/internal/logic/agent/getlastwithdrawalinfologic.go
@@ -0,0 +1,95 @@
+package agent
+
+import (
+	"context"
+	"qnc-server/app/main/model"
+	"qnc-server/common/ctxdata"
+	"qnc-server/common/xerr"
+
+	"github.com/pkg/errors"
+
+	"qnc-server/app/main/api/internal/svc"
+	"qnc-server/app/main/api/internal/types"
+
+	"github.com/zeromicro/go-zero/core/logx"
+)
+
+type GetLastWithdrawalInfoLogic struct {
+	logx.Logger
+	ctx    context.Context
+	svcCtx *svc.ServiceContext
+}
+
+func NewGetLastWithdrawalInfoLogic(ctx context.Context, svcCtx *svc.ServiceContext) *GetLastWithdrawalInfoLogic {
+	return &GetLastWithdrawalInfoLogic{
+		Logger: logx.WithContext(ctx),
+		ctx:    ctx,
+		svcCtx: svcCtx,
+	}
+}
+
+func (l *GetLastWithdrawalInfoLogic) GetLastWithdrawalInfo(req *types.GetLastWithdrawalInfoReq) (resp *types.GetLastWithdrawalInfoResp, err error) {
+	userID, err := ctxdata.GetUidFromCtx(l.ctx)
+	if err != nil {
+		return nil, errors.Wrapf(xerr.NewErrCode(xerr.SERVER_COMMON_ERROR), "获取用户信息失败, %v", err)
+	}
+
+	// 1. 获取代理信息
+	agent, err := l.svcCtx.AgentModel.FindOneByUserId(l.ctx, userID)
+	if err != nil {
+		if errors.Is(err, model.ErrNotFound) {
+			return nil, errors.Wrapf(xerr.NewErrMsg("您不是代理"), "")
+		}
+		return nil, errors.Wrapf(xerr.NewErrCode(xerr.DB_ERROR), "查询代理信息失败, %v", err)
+	}
+
+	// 2. 验证提现方式
+	if req.WithdrawalType != 1 && req.WithdrawalType != 2 {
+		return nil, errors.Wrapf(xerr.NewErrMsg("提现方式无效"), "")
+	}
+
+	// 3. 查询该代理最近一次该类型的提现记录
+	// 注意：FindAll 方法会自动添加 del_state = ? 条件，所以这里不需要手动添加
+	builder := l.svcCtx.AgentWithdrawalModel.SelectBuilder().
+		Where("agent_id = ? AND withdrawal_type = ?", agent.Id, req.WithdrawalType).
+		OrderBy("create_time DESC").
+		Limit(1)
+
+	withdrawals, err := l.svcCtx.AgentWithdrawalModel.FindAll(l.ctx, builder, "")
+	if err != nil {
+		return nil, errors.Wrapf(xerr.NewErrCode(xerr.DB_ERROR), "查询上次提现记录失败, %v", err)
+	}
+
+	// 4. 如果没有找到记录，返回空信息
+	if len(withdrawals) == 0 {
+		return &types.GetLastWithdrawalInfoResp{
+			WithdrawalType: req.WithdrawalType,
+			PayeeAccount:   "",
+			PayeeName:      "",
+			BankCardNo:     "",
+			BankName:       "",
+		}, nil
+	}
+
+	// 5. 组装响应
+	lastWithdrawal := withdrawals[0]
+	resp = &types.GetLastWithdrawalInfoResp{
+		WithdrawalType: lastWithdrawal.WithdrawalType,
+		PayeeAccount:   lastWithdrawal.PayeeAccount,
+		PayeeName:      lastWithdrawal.PayeeName,
+		BankCardNo:     "",
+		BankName:       "",
+	}
+
+	// 如果是银行卡提现，填充银行卡信息
+	if lastWithdrawal.WithdrawalType == 2 {
+		if lastWithdrawal.BankCardNo.Valid {
+			resp.BankCardNo = lastWithdrawal.BankCardNo.String
+		}
+		if lastWithdrawal.BankName.Valid {
+			resp.BankName = lastWithdrawal.BankName.String
+		}
+	}
+
+	return resp, nil
+}
--- a/app/main/api/internal/logic/agent/getwhitelistfeatureslogic.go
+++ b/app/main/api/internal/logic/agent/getwhitelistfeatureslogic.go
@@ -3,11 +3,12 @@ package agent
 import (
 	"context"

-	"github.com/zeromicro/go-zero/core/logx"
 	"qnc-server/app/main/api/internal/svc"
 	"qnc-server/app/main/api/internal/types"
 	"qnc-server/common/xerr"

+	"github.com/zeromicro/go-zero/core/logx"
+
 	"github.com/pkg/errors"
 )

--- a/app/main/api/internal/logic/agent/getwhitelistlistlogic.go
+++ b/app/main/api/internal/logic/agent/getwhitelistlistlogic.go
@@ -3,12 +3,13 @@ package agent
 import (
 	"context"

-	"github.com/pkg/errors"
-	"github.com/zeromicro/go-zero/core/logx"
 	"qnc-server/app/main/api/internal/svc"
 	"qnc-server/app/main/api/internal/types"
 	"qnc-server/common/ctxdata"
 	"qnc-server/common/xerr"
+
+	"github.com/pkg/errors"
+	"github.com/zeromicro/go-zero/core/logx"
 )

 type GetWhitelistListLogic struct {
--- a/app/main/api/internal/logic/agent/getwithdrawallistlogic.go
+++ b/app/main/api/internal/logic/agent/getwithdrawallistlogic.go
@@ -81,18 +81,31 @@ func (l *GetWithdrawalListLogic) GetWithdrawalList(req *types.GetWithdrawalListR
 			remark = withdrawal.Remark.String
 		}

-		list = append(list, types.WithdrawalItem{
-			Id:           withdrawal.Id,
-			WithdrawalNo: withdrawal.WithdrawNo,
-			Amount:       withdrawal.Amount,
-			TaxAmount:    withdrawal.TaxAmount,
-			ActualAmount: withdrawal.ActualAmount,
-			Status:       withdrawal.Status,
-			PayeeAccount: withdrawal.PayeeAccount,
-			PayeeName:    withdrawal.PayeeName,
-			Remark:       remark,
-			CreateTime:   withdrawal.CreateTime.Format("2006-01-02 15:04:05"),
-		})
+		item := types.WithdrawalItem{
+			Id:             withdrawal.Id,
+			WithdrawalNo:   withdrawal.WithdrawNo,
+			WithdrawalType: withdrawal.WithdrawalType,
+			Amount:         withdrawal.Amount,
+			TaxAmount:      withdrawal.TaxAmount,
+			ActualAmount:   withdrawal.ActualAmount,
+			Status:         withdrawal.Status,
+			PayeeAccount:   withdrawal.PayeeAccount,
+			PayeeName:      withdrawal.PayeeName,
+			Remark:         remark,
+			CreateTime:     withdrawal.CreateTime.Format("2006-01-02 15:04:05"),
+		}
+
+		// 如果是银行卡提现，填充银行卡信息
+		if withdrawal.WithdrawalType == 2 {
+			if withdrawal.BankCardNo.Valid {
+				item.BankCardNo = withdrawal.BankCardNo.String
+			}
+			if withdrawal.BankName.Valid {
+				item.BankName = withdrawal.BankName.String
+			}
+		}
+
+		list = append(list, item)
 	}

 	return &types.GetWithdrawalListResp{
--- a/app/main/api/internal/logic/agent/offlinefeaturelogic.go
+++ b/app/main/api/internal/logic/agent/offlinefeaturelogic.go
@@ -4,12 +4,13 @@ import (
 	"context"
 	"encoding/json"

-	"github.com/pkg/errors"
-	"github.com/zeromicro/go-zero/core/logx"
 	"qnc-server/app/main/api/internal/svc"
 	"qnc-server/app/main/api/internal/types"
 	"qnc-server/common/ctxdata"
 	"qnc-server/common/xerr"
+
+	"github.com/pkg/errors"
+	"github.com/zeromicro/go-zero/core/logx"
 )

 type OfflineFeatureLogic struct {
--- a/app/main/api/internal/logic/agent/registerbyinvitecodelogic.go
+++ b/app/main/api/internal/logic/agent/registerbyinvitecodelogic.go
@@ -5,13 +5,13 @@ import (
 	"database/sql"
 	"fmt"
 	"os"
-	"strconv"
-	"time"
 	"qnc-server/app/main/model"
 	"qnc-server/common/ctxdata"
 	"qnc-server/common/globalkey"
 	"qnc-server/common/xerr"
 	"qnc-server/pkg/lzkit/crypto"
+	"strconv"
+	"time"

 	"github.com/google/uuid"
 	"github.com/pkg/errors"
--- a/app/main/api/internal/logic/auth/sendsmslogic.go
+++ b/app/main/api/internal/logic/auth/sendsmslogic.go
@@ -2,10 +2,11 @@ package auth

 import (
 	"context"
-	"qnc-server/common/xerr"
-	"qnc-server/pkg/lzkit/crypto"
 	"fmt"
 	"math/rand"
+	"qnc-server/common/xerr"
+	"qnc-server/pkg/captcha"
+	"qnc-server/pkg/lzkit/crypto"
 	"time"

 	"github.com/pkg/errors"
@@ -34,13 +35,58 @@ func NewSendSmsLogic(ctx context.Context, svcCtx *svc.ServiceContext) *SendSmsLo
 	}
 }

-func (l *SendSmsLogic) SendSms(req *types.SendSmsReq) error {
+func (l *SendSmsLogic) SendSms(req *types.SendSmsReq, clientIP string, userAgent string) error {
 	secretKey := l.svcCtx.Config.Encrypt.SecretKey
 	encryptedMobile, err := crypto.EncryptMobile(req.Mobile, secretKey)
-	if err != nil {
-		return errors.Wrapf(xerr.NewErrCode(xerr.SERVER_COMMON_ERROR), "短信发送, 加密手机号失败: %v", err)
+    if err != nil {
+        return errors.Wrapf(xerr.NewErrCode(xerr.SERVER_COMMON_ERROR), "短信发送, 加密手机号失败: %v", err)
+    }
+
+    // 1. 滑块验证码校验（可选，支持微信环境跳过验证）
+    cfg := l.svcCtx.Config.Captcha
+    captchaResult := captcha.VerifyOptionalWithUserAgent(captcha.Config{
+        AccessKeyID:     cfg.AccessKeyID,
+        AccessKeySecret: cfg.AccessKeySecret,
+        EndpointURL:     cfg.EndpointURL,
+        SceneID:         cfg.SceneID,
+    }, req.CaptchaVerifyParam, userAgent)
+
+    if captchaResult.VerifyErr != nil {
+        return captchaResult.VerifyErr
+    }
+
+	// 2. 防刷策略
+	if captchaResult.Skipped {
+		// 没有滑块验证码，使用更严格的限流策略
+		// 2.1 IP 限流：同一 IP 每小时最多发送 10 次
+		ipLimitKey := fmt.Sprintf("ip_limit:%s", clientIP)
+		ipCount, err := l.svcCtx.Redis.Incr(ipLimitKey)
+		if err != nil {
+			return errors.Wrapf(xerr.NewErrCode(xerr.SERVER_COMMON_ERROR), "短信发送, 读取IP限流缓存失败: %v", err)
+		}
+		if ipCount == 1 {
+			// 第一次访问，设置 1 小时过期
+			l.svcCtx.Redis.Expire(ipLimitKey, 3600)
+		}
+		if ipCount > 10 {
+			return errors.Wrapf(xerr.NewErrMsg("请求过于频繁，请稍后再试"), "短信发送, IP限流: %s, count: %d", clientIP, ipCount)
+		}
+
+		// 2.2 手机号限流：同一手机号每小时最多发送 5 次（无滑块时更严格）
+		hourLimitKey := fmt.Sprintf("hour_limit:%s:%s", req.ActionType, encryptedMobile)
+		hourCount, err := l.svcCtx.Redis.Incr(hourLimitKey)
+		if err != nil {
+			return errors.Wrapf(xerr.NewErrCode(xerr.SERVER_COMMON_ERROR), "短信发送, 读取小时限流缓存失败: %v", err)
+		}
+		if hourCount == 1 {
+			l.svcCtx.Redis.Expire(hourLimitKey, 3600)
+		}
+		if hourCount > 5 {
+			return errors.Wrapf(xerr.NewErrMsg("该手机号请求过于频繁，请稍后再试"), "短信发送, 手机号小时限流: %s, count: %d", encryptedMobile, hourCount)
+		}
 	}
-	// 检查手机号是否在一分钟内已发送过验证码
+
+	// 3. 检查手机号是否在一分钟内已发送过验证码（通用）
 	limitCodeKey := fmt.Sprintf("limit:%s:%s", req.ActionType, encryptedMobile)
 	exists, err := l.svcCtx.Redis.Exists(limitCodeKey)
 	if err != nil {
@@ -48,7 +94,6 @@ func (l *SendSmsLogic) SendSms(req *types.SendSmsReq) error {
 	}

 	if exists {
-		// 如果 Redis 中已经存在标记，说明在 1 分钟内请求过，返回错误
 		return errors.Wrapf(xerr.NewErrMsg("一分钟内不能重复发送验证码"), "短信发送, 手机号1分钟内重复请求发送验证码: %s", encryptedMobile)
 	}

--- a/app/main/api/internal/logic/captcha/getencryptedsceneidlogic.go
+++ b/app/main/api/internal/logic/captcha/getencryptedsceneidlogic.go
@@ -0,0 +1,37 @@
+package captcha
+
+import (
+	"context"
+
+	"qnc-server/app/main/api/internal/svc"
+	"qnc-server/app/main/api/internal/types"
+	"qnc-server/pkg/captcha"
+
+	"github.com/zeromicro/go-zero/core/logx"
+)
+
+type GetEncryptedSceneIdLogic struct {
+	logx.Logger
+	ctx    context.Context
+	svcCtx *svc.ServiceContext
+}
+
+func NewGetEncryptedSceneIdLogic(ctx context.Context, svcCtx *svc.ServiceContext) *GetEncryptedSceneIdLogic {
+	return &GetEncryptedSceneIdLogic{
+		Logger: logx.WithContext(ctx),
+		ctx:    ctx,
+		svcCtx: svcCtx,
+	}
+}
+
+func (l *GetEncryptedSceneIdLogic) GetEncryptedSceneId() (*types.GetEncryptedSceneIdResp, error) {
+	cfg := l.svcCtx.Config.Captcha
+	encrypted, err := captcha.GenerateEncryptedSceneID(cfg.SceneID, cfg.EKey, 3600)
+	if err != nil {
+		l.Errorf("generate encrypted scene id error: %+v", err)
+		return nil, err
+	}
+	return &types.GetEncryptedSceneIdResp{
+		EncryptedSceneId: encrypted,
+	}, nil
+}
--- a/app/main/api/internal/logic/pay/paymentlogic.go
+++ b/app/main/api/internal/logic/pay/paymentlogic.go
@@ -6,15 +6,15 @@ import (
 	"encoding/json"
 	"fmt"
 	"os"
-	"strconv"
-	"strings"
-	"time"
 	"qnc-server/app/main/api/internal/svc"
 	"qnc-server/app/main/api/internal/types"
 	"qnc-server/app/main/model"
 	"qnc-server/common/ctxdata"
 	"qnc-server/common/xerr"
 	"qnc-server/pkg/lzkit/lzUtils"
+	"strconv"
+	"strings"
+	"time"

 	"github.com/google/uuid"
 	"github.com/pkg/errors"
@@ -35,6 +35,9 @@ type PaymentTypeResp struct {
 	orderID     string // 订单ID，用于开发环境测试支付模式
 }

+// enableDevTestPayment 测试支付功能开关，设置为 true 以启用测试支付功能
+const enableDevTestPayment = false
+
 func NewPaymentLogic(ctx context.Context, svcCtx *svc.ServiceContext) *PaymentLogic {
 	return &PaymentLogic{
 		Logger: logx.WithContext(ctx),
@@ -50,8 +53,8 @@ func (l *PaymentLogic) Payment(req *types.PaymentReq) (resp *types.PaymentResp,

 	// 检查是否为开发环境的测试支付模式
 	env := os.Getenv("ENV")
-	isDevTestPayment := env == "development" && (req.PayMethod == "test" || req.PayMethod == "test_empty")
-	isEmptyReportMode := env == "development" && req.PayMethod == "test_empty"
+	isDevTestPayment := enableDevTestPayment && env == "development" && (req.PayMethod == "test" || req.PayMethod == "test_empty")
+	isEmptyReportMode := enableDevTestPayment && env == "development" && req.PayMethod == "test_empty"

 	l.svcCtx.OrderModel.Trans(l.ctx, func(ctx context.Context, session sqlx.Session) error {
 		switch req.PayType {
@@ -95,7 +98,7 @@ func (l *PaymentLogic) Payment(req *types.PaymentReq) (resp *types.PaymentResp,
 		// 正常支付流程
 		var createOrderErr error
 		if req.PayMethod == "wechat" {
-			prepayData, createOrderErr = l.svcCtx.WechatPayService.CreateWechatOrder(l.ctx, paymentTypeResp.amount, paymentTypeResp.description, paymentTypeResp.outTradeNo)
+			prepayData, createOrderErr = l.svcCtx.WechatPayService.CreateWechatOrder(l.ctx, paymentTypeResp.amount, paymentTypeResp.description, paymentTypeResp.outTradeNo, req.Code)
 		} else if req.PayMethod == "alipay" {
 			prepayData, createOrderErr = l.svcCtx.AlipayService.CreateAlipayOrder(l.ctx, paymentTypeResp.amount, paymentTypeResp.description, paymentTypeResp.outTradeNo)
 		} else if req.PayMethod == "appleiap" {
--- a/app/main/api/internal/logic/user/wxminiauthlogic.go
+++ b/app/main/api/internal/logic/user/wxminiauthlogic.go
@@ -118,7 +118,37 @@ func (l *WxMiniAuthLogic) GetSessionKey(code string) (*SessionKeyResp, error) {

 	// 检查微信返回的错误码
 	if sessionKeyResp.ErrCode != 0 {
-		return nil, errors.Wrapf(xerr.NewErrCode(xerr.SERVER_COMMON_ERROR),
+		// 针对不同的微信错误码返回更明确的错误信息
+		var errMsg string
+		switch sessionKeyResp.ErrCode {
+		case 40029:
+			// code 无效（已使用、已过期或格式错误）
+			errMsg = "微信授权码无效或已过期，请重新打开小程序"
+			l.Errorf("微信code无效: errcode=%d, errmsg=%s, code前6位=%s",
+				sessionKeyResp.ErrCode, sessionKeyResp.ErrMsg,
+				func() string {
+					if len(code) > 6 {
+						return code[:6] + "..."
+					}
+					return code
+				}())
+		case 40013:
+			// 无效的 AppID
+			errMsg = "小程序配置错误，请联系管理员"
+			l.Errorf("微信AppID无效: errcode=%d, errmsg=%s", sessionKeyResp.ErrCode, sessionKeyResp.ErrMsg)
+		case 40125:
+			// 无效的 AppSecret
+			errMsg = "小程序配置错误，请联系管理员"
+			l.Errorf("微信AppSecret无效: errcode=%d, errmsg=%s", sessionKeyResp.ErrCode, sessionKeyResp.ErrMsg)
+		case 45011:
+			// 频率限制
+			errMsg = "请求过于频繁，请稍后再试"
+			l.Errorf("微信API频率限制: errcode=%d, errmsg=%s", sessionKeyResp.ErrCode, sessionKeyResp.ErrMsg)
+		default:
+			errMsg = fmt.Sprintf("微信授权失败: %s", sessionKeyResp.ErrMsg)
+			l.Errorf("微信接口返回错误: errcode=%d, errmsg=%s", sessionKeyResp.ErrCode, sessionKeyResp.ErrMsg)
+		}
+		return nil, errors.Wrapf(xerr.NewErrMsg(errMsg),
 			"微信接口返回错误: errcode=%d, errmsg=%s",
 			sessionKeyResp.ErrCode, sessionKeyResp.ErrMsg)
 	}
--- a/app/main/api/internal/service/alipayService.go
+++ b/app/main/api/internal/service/alipayService.go
@@ -6,12 +6,12 @@ import (
 	"encoding/hex"
 	"fmt"
 	"net/http"
-	"strconv"
-	"sync/atomic"
-	"time"
 	"qnc-server/app/main/api/internal/config"
 	"qnc-server/app/main/model"
 	"qnc-server/pkg/lzkit/lzUtils"
+	"strconv"
+	"sync/atomic"
+	"time"

 	"github.com/smartwalle/alipay/v3"
 )
--- a/app/main/api/internal/service/wechatpayService.go
+++ b/app/main/api/internal/service/wechatpayService.go
@@ -2,15 +2,19 @@ package service

 import (
 	"context"
+	"encoding/json"
+	"errors"
 	"fmt"
+	"io"
 	"net/http"
-	"strconv"
-	"time"
 	"qnc-server/app/main/api/internal/config"
 	"qnc-server/app/main/model"
 	"qnc-server/common/ctxdata"
 	"qnc-server/pkg/lzkit/lzUtils"
+	"strconv"
+	"time"

+	"github.com/google/uuid"
 	"github.com/wechatpay-apiv3/wechatpay-go/core"
 	"github.com/wechatpay-apiv3/wechatpay-go/core/auth/verifiers"
 	"github.com/wechatpay-apiv3/wechatpay-go/core/downloader"
@@ -251,9 +255,16 @@ func (w *WechatPayService) CreateWechatH5Order(ctx context.Context, amount float
 }

 // CreateWechatOrder 创建微信支付订单（集成 APP、H5、小程序）
-func (w *WechatPayService) CreateWechatOrder(ctx context.Context, amount float64, description string, outTradeNo string) (interface{}, error) {
-	// 根据 ctx 中的 platform 判断平台
-	platform := ctx.Value("platform").(string)
+func (w *WechatPayService) CreateWechatOrder(ctx context.Context, amount float64, description string, outTradeNo string, code string) (interface{}, error) {
+	// 根据 ctx 中的 platform 判断平台（请求头 X-Platform: wxmini / wxh5 / app）
+	platformValue := ctx.Value("platform")
+	if platformValue == nil {
+		return "", fmt.Errorf("平台信息不存在，请检查请求头 X-Platform")
+	}
+	platform, ok := platformValue.(string)
+	if !ok {
+		return "", fmt.Errorf("平台信息格式错误")
+	}

 	var prepayData interface{}
 	var err error
@@ -266,7 +277,30 @@ func (w *WechatPayService) CreateWechatOrder(ctx context.Context, amount float64
 		}
 		userAuthModel, findAuthModelErr := w.userAuthModel.FindOneByUserIdAuthType(ctx, userID, model.UserAuthTypeWxMiniOpenID)
 		if findAuthModelErr != nil {
-			return "", findAuthModelErr
+			if errors.Is(findAuthModelErr, model.ErrNotFound) {
+				// 用户未绑定微信，尝试通过 code 自动绑定
+				if code == "" {
+					return "", fmt.Errorf("用户未绑定微信小程序账号，请先完成微信登录或提供授权码")
+				}
+				// 通过 code 获取 OpenID
+				openid, getOpenidErr := w.getWechatMiniOpenID(ctx, code)
+				if getOpenidErr != nil {
+					return "", fmt.Errorf("获取微信小程序OpenID失败: %v", getOpenidErr)
+				}
+				// 自动绑定微信账号
+				bindErr := w.bindWechatAuth(ctx, userID, model.UserAuthTypeWxMiniOpenID, openid)
+				if bindErr != nil {
+					return "", fmt.Errorf("绑定微信小程序账号失败: %v", bindErr)
+				}
+				// 重新查询绑定后的认证信息
+				userAuthModel, findAuthModelErr = w.userAuthModel.FindOneByUserIdAuthType(ctx, userID, model.UserAuthTypeWxMiniOpenID)
+				if findAuthModelErr != nil {
+					return "", fmt.Errorf("查询绑定后的微信认证信息失败: %v", findAuthModelErr)
+				}
+				logx.Infof("用户 %s 已自动绑定微信小程序账号，OpenID: %s", userID, openid)
+			} else {
+				return "", fmt.Errorf("查询用户微信认证信息失败: %v", findAuthModelErr)
+			}
 		}
 		prepayData, err = w.CreateWechatMiniProgramOrder(ctx, amount, description, outTradeNo, userAuthModel.AuthKey)
 		if err != nil {
@@ -279,7 +313,30 @@ func (w *WechatPayService) CreateWechatOrder(ctx context.Context, amount float64
 		}
 		userAuthModel, findAuthModelErr := w.userAuthModel.FindOneByUserIdAuthType(ctx, userID, model.UserAuthTypeWxh5OpenID)
 		if findAuthModelErr != nil {
-			return "", findAuthModelErr
+			if errors.Is(findAuthModelErr, model.ErrNotFound) {
+				// 用户未绑定微信，尝试通过 code 自动绑定
+				if code == "" {
+					return "", fmt.Errorf("用户未绑定微信H5账号，请先完成微信登录或提供授权码")
+				}
+				// 通过 code 获取 OpenID
+				openid, getOpenidErr := w.getWechatH5OpenID(ctx, code)
+				if getOpenidErr != nil {
+					return "", fmt.Errorf("获取微信H5 OpenID失败: %v", getOpenidErr)
+				}
+				// 自动绑定微信账号
+				bindErr := w.bindWechatAuth(ctx, userID, model.UserAuthTypeWxh5OpenID, openid)
+				if bindErr != nil {
+					return "", fmt.Errorf("绑定微信H5账号失败: %v", bindErr)
+				}
+				// 重新查询绑定后的认证信息
+				userAuthModel, findAuthModelErr = w.userAuthModel.FindOneByUserIdAuthType(ctx, userID, model.UserAuthTypeWxh5OpenID)
+				if findAuthModelErr != nil {
+					return "", fmt.Errorf("查询绑定后的微信认证信息失败: %v", findAuthModelErr)
+				}
+				logx.Infof("用户 %s 已自动绑定微信H5账号，OpenID: %s", userID, openid)
+			} else {
+				return "", fmt.Errorf("查询用户微信认证信息失败: %v", findAuthModelErr)
+			}
 		}
 		prepayData, err = w.CreateWechatH5Order(ctx, amount, description, outTradeNo, userAuthModel.AuthKey)
 		if err != nil {
@@ -384,3 +441,112 @@ func (w *WechatPayService) GenerateOutTradeNo() string {

 	return combined
 }
+
+// getWechatMiniOpenID 通过 code 获取微信小程序 OpenID
+func (w *WechatPayService) getWechatMiniOpenID(ctx context.Context, code string) (string, error) {
+	appID := w.config.WechatMini.AppID
+	appSecret := w.config.WechatMini.AppSecret
+	url := fmt.Sprintf("https://api.weixin.qq.com/sns/jscode2session?appid=%s&secret=%s&js_code=%s&grant_type=authorization_code", appID, appSecret, code)
+
+	resp, err := http.Get(url)
+	if err != nil {
+		return "", fmt.Errorf("请求微信API失败: %v", err)
+	}
+	defer resp.Body.Close()
+
+	body, err := io.ReadAll(resp.Body)
+	if err != nil {
+		return "", fmt.Errorf("读取响应失败: %v", err)
+	}
+
+	var data struct {
+		Openid  string `json:"openid"`
+		ErrCode int    `json:"errcode,omitempty"`
+		ErrMsg  string `json:"errmsg,omitempty"`
+	}
+
+	if err := json.Unmarshal(body, &data); err != nil {
+		return "", fmt.Errorf("解析响应失败: %v", err)
+	}
+
+	if data.ErrCode != 0 {
+		return "", fmt.Errorf("微信API返回错误: errcode=%d, errmsg=%s", data.ErrCode, data.ErrMsg)
+	}
+
+	if data.Openid == "" {
+		return "", fmt.Errorf("openid为空")
+	}
+
+	return data.Openid, nil
+}
+
+// getWechatH5OpenID 通过 code 获取微信H5 OpenID
+func (w *WechatPayService) getWechatH5OpenID(ctx context.Context, code string) (string, error) {
+	appID := w.config.WechatH5.AppID
+	appSecret := w.config.WechatH5.AppSecret
+	url := fmt.Sprintf("https://api.weixin.qq.com/sns/oauth2/access_token?appid=%s&secret=%s&code=%s&grant_type=authorization_code", appID, appSecret, code)
+
+	resp, err := http.Get(url)
+	if err != nil {
+		return "", fmt.Errorf("请求微信API失败: %v", err)
+	}
+	defer resp.Body.Close()
+
+	body, err := io.ReadAll(resp.Body)
+	if err != nil {
+		return "", fmt.Errorf("读取响应失败: %v", err)
+	}
+
+	var data struct {
+		Openid  string `json:"openid"`
+		ErrCode int    `json:"errcode,omitempty"`
+		ErrMsg  string `json:"errmsg,omitempty"`
+	}
+
+	if err := json.Unmarshal(body, &data); err != nil {
+		return "", fmt.Errorf("解析响应失败: %v", err)
+	}
+
+	if data.ErrCode != 0 {
+		return "", fmt.Errorf("微信API返回错误: errcode=%d, errmsg=%s", data.ErrCode, data.ErrMsg)
+	}
+
+	if data.Openid == "" {
+		return "", fmt.Errorf("openid为空")
+	}
+
+	return data.Openid, nil
+}
+
+// bindWechatAuth 绑定微信认证信息到用户账号
+func (w *WechatPayService) bindWechatAuth(ctx context.Context, userID string, authType string, openid string) error {
+	// 检查该 OpenID 是否已被其他用户绑定
+	existingAuth, err := w.userAuthModel.FindOneByAuthTypeAuthKey(ctx, authType, openid)
+	if err != nil && !errors.Is(err, model.ErrNotFound) {
+		return fmt.Errorf("查询认证信息失败: %v", err)
+	}
+
+	if existingAuth != nil {
+		// 如果 OpenID 已被其他用户绑定，检查是否是当前用户
+		if existingAuth.UserId != userID {
+			return fmt.Errorf("该微信账号已被其他用户绑定")
+		}
+		// 如果已经是当前用户绑定的，直接返回成功
+		return nil
+	}
+
+	// 创建新的认证记录
+	userAuth := &model.UserAuth{
+		Id:       uuid.NewString(),
+		UserId:   userID,
+		AuthType: authType,
+		AuthKey:  openid,
+	}
+
+	_, err = w.userAuthModel.Insert(ctx, nil, userAuth)
+	if err != nil {
+		return fmt.Errorf("创建认证记录失败: %v", err)
+	}
+
+	return nil
+}
--- a/app/main/api/internal/types/types.go
+++ b/app/main/api/internal/types/types.go
@@ -38,6 +38,25 @@ type AdminAuditAgentResp struct {
 	Success bool `json:"success"`
 }

+type AdminAssignRoleApiReq struct {
+	RoleId string   `json:"role_id"`
+	ApiIds []string `json:"api_ids"`
+}
+
+type AdminAssignRoleApiResp struct {
+	Success bool `json:"success"`
+}
+
+type AdminAuditAgentReq struct {
+	AuditId     int64  `json:"audit_id"`     // 审核记录ID
+	Status      int64  `json:"status"`       // 审核状态：1=通过，2=拒绝
+	AuditReason string `json:"audit_reason"` // 审核原因（拒绝时必填）
+}
+
+type AdminAuditAgentResp struct {
+	Success bool `json:"success"`
+}
+
 type AdminAuditRealNameReq struct {
 	RealNameId  int64  `json:"real_name_id"` // 实名认证记录ID
 	Status      int64  `json:"status"`       // 审核状态：2=通过，3=拒绝
@@ -1000,6 +1019,22 @@ type AgentApplyResp struct {
 	AgentCode    int64  `json:"agent_code"`
 }

+type AgentApplyReq struct {
+	Region     string `json:"region,optional"`
+	Mobile     string `json:"mobile"`
+	Code       string `json:"code"`
+	Referrer   string `json:"referrer"`
+	InviteCode string `json:"invite_code,optional"`
+	AgentCode  int64  `json:"agent_code,optional"`
+}
+
+type AgentApplyResp struct {
+	AccessToken  string `json:"accessToken"`
+	AccessExpire int64  `json:"accessExpire"`
+	RefreshAfter int64  `json:"refreshAfter"`
+	AgentCode    int64  `json:"agent_code"`
+}
+
 type AgentCommissionListItem struct {
 	Id          string  `json:"id"`           // 主键
 	AgentId     string  `json:"agent_id"`     // 代理ID
@@ -1033,6 +1068,29 @@ type AgentInfoResp struct {
 	AgentCode    int64  `json:"agent_code"`
 }

+type AgentGeneratingLinkReq struct {
+	ProductId  string  `json:"product_id"`           // 产品ID
+	SetPrice   float64 `json:"set_price"`            // 设定价格
+	TargetPath string  `json:"target_path,optional"` // 目标地址（可选，默认为推广报告页面）
+}
+
+type AgentGeneratingLinkResp struct {
+	LinkIdentifier string `json:"link_identifier"` // 推广链接标识
+	FullLink       string `json:"full_link"`       // 完整短链URL
+}
+
+type AgentInfoResp struct {
+	AgentId      string `json:"agent_id"`
+	Level        int64  `json:"level"`
+	LevelName    string `json:"level_name"`
+	Region       string `json:"region"`
+	Mobile       string `json:"mobile"`
+	WechatId     string `json:"wechat_id"`
+	TeamLeaderId string `json:"team_leader_id"`
+	IsRealName   bool   `json:"is_real_name"`
+	AgentCode    int64  `json:"agent_code"`
+}
+
 type AgentLinkListItem struct {
 	Id              string  `json:"id"`                // 主键
 	AgentId         string  `json:"agent_id"`          // 代理ID
@@ -1073,7 +1131,8 @@ type AgentOrderListItem struct {
 	ActualBasePrice float64 `json:"actual_base_price"` // 实际底价
 	PriceCost       float64 `json:"price_cost"`        // 提价成本
 	AgentProfit     float64 `json:"agent_profit"`      // 代理收益
-	ProcessStatus   int64   `json:"process_status"`    // 处理状态
+	ProcessStatus   int64   `json:"process_status"`    // 处理状态（保留用于筛选，前端不显示）
+	OrderStatus     string  `json:"order_status"`      // 订单状态：pending-待支付，paid-已支付，refunded-已退款，closed-已关闭，failed-支付失败
 	CreateTime      string  `json:"create_time"`       // 创建时间
 }

@@ -1093,6 +1152,10 @@ type AgentProductConfigResp struct {
 	List []ProductConfigItem `json:"list"`
 }

+type AgentProductConfigResp struct {
+	List []ProductConfigItem `json:"list"`
+}
+
 type AgentRealNameListItem struct {
 	Id         string `json:"id"`          // 主键
 	AgentId    string `json:"agent_id"`    // 代理ID
@@ -1111,6 +1174,7 @@ type AgentRebateListItem struct {
 	OrderId       string  `json:"order_id"`        // 订单ID
 	RebateType    int64   `json:"rebate_type"`     // 返佣类型
 	Amount        float64 `json:"amount"`          // 金额
+	Status        int64   `json:"status"`          // 状态：1=已发放，2=已冻结，3=已取消（已退款）
 	CreateTime    string  `json:"create_time"`     // 创建时间
 }

@@ -1310,6 +1374,75 @@ type DeleteRoleResp struct {
 	Success bool `json:"success"` // 是否成功
 }

+type ConversionRateResp struct {
+	MyConversionRate          ConversionRateData `json:"my_conversion_rate"`          // 我的转化率
+	SubordinateConversionRate ConversionRateData `json:"subordinate_conversion_rate"` // 我的下级转化率
+}
+
+type CreateMenuReq struct {
+	Pid       string                 `json:"pid,optional"`              // 父菜单ID
+	Name      string                 `json:"name"`                      // 路由名称
+	Path      string                 `json:"path,optional"`             // 路由路径
+	Component string                 `json:"component,optional"`        // 组件路径
+	Redirect  string                 `json:"redirect,optional"`         // 重定向路径
+	Meta      map[string]interface{} `json:"meta"`                      // 路由元数据
+	Status    int64                  `json:"status,optional,default=1"` // 状态：0-禁用，1-启用
+	Type      string                 `json:"type"`                      // 类型
+	Sort      int64                  `json:"sort,optional"`             // 排序
+}
+
+type CreateMenuResp struct {
+	Id string `json:"id"` // 菜单ID
+}
+
+type CreateRoleReq struct {
+	RoleName    string   `json:"role_name"`        // 角色名称
+	RoleCode    string   `json:"role_code"`        // 角色编码
+	Description string   `json:"description"`      // 角色描述
+	Status      int64    `json:"status,default=1"` // 状态：0-禁用，1-启用
+	Sort        int64    `json:"sort,default=0"`   // 排序
+	MenuIds     []string `json:"menu_ids"`         // 关联的菜单ID列表
+}
+
+type CreateRoleResp struct {
+	Id string `json:"id"` // 角色ID
+}
+
+type CreateWhitelistOrderReq struct {
+	IdCard     string   `json:"id_card"`           // 身份证号（查询对象标识）
+	FeatureIds []string `json:"feature_ids"`       // 要屏蔽的feature ID列表
+	OrderId    string   `json:"order_id,optional"` // 关联的查询订单ID（可选）
+}
+
+type CreateWhitelistOrderResp struct {
+	OrderId     string  `json:"order_id"`     // 订单ID
+	OrderNo     string  `json:"order_no"`     // 订单号
+	TotalAmount float64 `json:"total_amount"` // 总金额
+}
+
+type DeleteInviteCodeReq struct {
+	Id string `json:"id"` // 邀请码ID
+}
+
+type DeleteInviteCodeResp struct {
+}
+
+type DeleteMenuReq struct {
+	Id string `path:"id"` // 菜单ID
+}
+
+type DeleteMenuResp struct {
+	Success bool `json:"success"` // 是否成功
+}
+
+type DeleteRoleReq struct {
+	Id string `path:"id"` // 角色ID
+}
+
+type DeleteRoleResp struct {
+	Success bool `json:"success"` // 是否成功
+}
+
 type DirectParentRebateConfig struct {
 	Diamond float64 `json:"diamond"` // 直接上级是钻石的返佣金额（6元）
 	Gold    float64 `json:"gold"`    // 直接上级是黄金的返佣金额（3元）
@@ -1325,6 +1458,15 @@ type DownloadAuthorizationDocumentResp struct {
 	FileUrl  string `json:"fileUrl"`  // 文件访问URL
 }

+type DownloadAuthorizationDocumentReq struct {
+	DocumentId string `json:"documentId" validate:"required"` // 授权书ID
+}
+
+type DownloadAuthorizationDocumentResp struct {
+	FileName string `json:"fileName"` // 文件名
+	FileUrl  string `json:"fileUrl"`  // 文件访问URL
+}
+
 type Feature struct {
 	ID    string `json:"id"`     // 功能ID
 	ApiID string `json:"api_id"` // API标识
@@ -1744,6 +1886,32 @@ type MobileCodeLoginResp struct {
 	RefreshAfter int64  `json:"refreshAfter"`
 }

+type MenuListItem struct {
+	Id         string                 `json:"id"`         // 菜单ID
+	Pid        string                 `json:"pid"`        // 父菜单ID
+	Name       string                 `json:"name"`       // 路由名称
+	Path       string                 `json:"path"`       // 路由路径
+	Component  string                 `json:"component"`  // 组件路径
+	Redirect   string                 `json:"redirect"`   // 重定向路径
+	Meta       map[string]interface{} `json:"meta"`       // 路由元数据
+	Status     int64                  `json:"status"`     // 状态：0-禁用，1-启用
+	Type       string                 `json:"type"`       // 类型
+	Sort       int64                  `json:"sort"`       // 排序
+	CreateTime string                 `json:"createTime"` // 创建时间
+	Children   []MenuListItem         `json:"children"`   // 子菜单
+}
+
+type MobileCodeLoginReq struct {
+	Mobile string `json:"mobile"`
+	Code   string `json:"code" validate:"required"`
+}
+
+type MobileCodeLoginResp struct {
+	AccessToken  string `json:"accessToken"`
+	AccessExpire int64  `json:"accessExpire"`
+	RefreshAfter int64  `json:"refreshAfter"`
+}
+
 type Notification struct {
 	Title            string `json:"title"`            // 通知标题
 	Content          string `json:"content"`          // 通知内容 (富文本)
@@ -1801,6 +1969,7 @@ type OrderListItem struct {
 	CreateTime         string  `json:"create_time"`          // 创建时间
 	PayTime            string  `json:"pay_time"`             // 支付时间
 	RefundTime         string  `json:"refund_time"`          // 退款时间
+	UpdateTime         string  `json:"update_time"`          // 更新时间
 	IsAgentOrder       bool    `json:"is_agent_order"`       // 是否是代理订单
 	AgentProcessStatus string  `json:"agent_process_status"` // 代理事务处理状态：not_agent-非代理订单，success-处理成功，failed-处理失败，pending-待处理
 }
@@ -1894,6 +2063,10 @@ type ProductResponse struct {
 	Product
 }

+type ProductResponse struct {
+	Product
+}
+
 type PromotionQueryItem struct {
 	Id          string                 `json:"id"`              // 查询ID
 	OrderId     string                 `json:"order_id"`        // 订单ID
@@ -1971,6 +2144,27 @@ type QueryGenerateShareLinkResp struct {
 	ShareLink string `json:"share_link"`
 }

+type QueryDetailByOrderIdReq struct {
+	OrderId string `path:"order_id"`
+}
+
+type QueryDetailByOrderNoReq struct {
+	OrderNo string `path:"order_no"`
+}
+
+type QueryExampleReq struct {
+	Feature string `form:"feature"`
+}
+
+type QueryGenerateShareLinkReq struct {
+	OrderId *string `json:"order_id,optional"`
+	OrderNo *string `json:"order_no,optional"`
+}
+
+type QueryGenerateShareLinkResp struct {
+	ShareLink string `json:"share_link"`
+}
+
 type QueryItem struct {
 	Feature interface{} `json:"feature"`
 	Data    interface{} `json:"data"` // 这里可以是 map 或 具体的 struct
@@ -1997,6 +2191,27 @@ type QueryProvisionalOrderResp struct {
 	Product Product `json:"product"`
 }

+type QueryListReq struct {
+	Page     int64 `form:"page"`      // 页码
+	PageSize int64 `form:"page_size"` // 每页数据量
+}
+
+type QueryListResp struct {
+	Total int64   `json:"total"` // 总记录数
+	List  []Query `json:"list"`  // 查询列表
+}
+
+type QueryProvisionalOrderReq struct {
+	Id string `path:"id"`
+}
+
+type QueryProvisionalOrderResp struct {
+	Name    string  `json:"name"`
+	IdCard  string  `json:"id_card"`
+	Mobile  string  `json:"mobile"`
+	Product Product `json:"product"`
+}
+
 type QueryReq struct {
 	Data string `json:"data" validate:"required"`
 }
@@ -2052,6 +2267,53 @@ type RealNameAuthResp struct {
 	Status string `json:"status"` // 状态：pending=待审核，approved=已通过，rejected=已拒绝
 }

+type QueryRetryReq struct {
+	Id string `path:"id"`
+}
+
+type QueryRetryResp struct {
+	Query
+}
+
+type QueryServiceReq struct {
+	Product         string `path:"product"`
+	Data            string `json:"data" validate:"required"`
+	AgentIdentifier string `json:"agent_identifier,optional"`
+	App             bool   `json:"app,optional"`
+}
+
+type QueryServiceResp struct {
+	Id           string `json:"id"`
+	AccessToken  string `json:"accessToken"`
+	AccessExpire int64  `json:"accessExpire"`
+	RefreshAfter int64  `json:"refreshAfter"`
+}
+
+type QueryShareDetailReq struct {
+	Id string `path:"id"`
+}
+
+type QuerySingleTestReq struct {
+	Params map[string]interface{} `json:"params"`
+	Api    string                 `json:"api"`
+}
+
+type QuerySingleTestResp struct {
+	Data interface{} `json:"data"`
+	Api  string      `json:"api"`
+}
+
+type RealNameAuthReq struct {
+	Name   string `json:"name"`    // 姓名
+	IdCard string `json:"id_card"` // 身份证号
+	Mobile string `json:"mobile"`  // 手机号
+	Code   string `json:"code"`    // 验证码
+}
+
+type RealNameAuthResp struct {
+	Status string `json:"status"` // 状态：pending=待审核，approved=已通过，rejected=已拒绝
+}
+
 type RebateItem struct {
 	Id                string  `json:"id"`                  // 记录ID
 	SourceAgentId     string  `json:"source_agent_id"`     // 来源代理ID
@@ -2061,6 +2323,7 @@ type RebateItem struct {
 	OrderNo           string  `json:"order_no"`            // 订单号
 	RebateType        int64   `json:"rebate_type"`         // 返佣类型：1=直接上级，2=钻石上级，3=黄金上级
 	Amount            float64 `json:"amount"`              // 返佣金额
+	Status            int64   `json:"status"`              // 状态：1=已发放，2=已冻结，3=已取消（已退款）
 	CreateTime        string  `json:"create_time"`         // 创建时间
 }

@@ -2090,6 +2353,26 @@ type RegisterByInviteCodeResp struct {
 	AgentCode    int64  `json:"agent_code"`
 }

+type RegisterByInviteCodeReq struct {
+	Referrer   string `json:"referrer"`
+	InviteCode string `json:"invite_code,optional"`
+	AgentCode  int64  `json:"agent_code,optional"`
+	Mobile     string `json:"mobile"`
+	Code       string `json:"code"`
+	Region     string `json:"region,optional"`
+	WechatId   string `json:"wechat_id,optional"`
+}
+
+type RegisterByInviteCodeResp struct {
+	AccessToken  string `json:"accessToken"`
+	AccessExpire int64  `json:"accessExpire"`
+	RefreshAfter int64  `json:"refreshAfter"`
+	AgentId      string `json:"agent_id"`   // 代理ID
+	Level        int64  `json:"level"`      // 代理等级
+	LevelName    string `json:"level_name"` // 等级名称
+	AgentCode    int64  `json:"agent_code"`
+}
+
 type RoleListItem struct {
 	Id          string   `json:"id"`          // 角色ID
 	RoleName    string   `json:"role_name"`   // 角色名称
@@ -2104,6 +2387,9 @@ type RoleListItem struct {
 type ShortLinkRedirectResp struct {
 }

+type ShortLinkRedirectResp struct {
+}
+
 type SubordinateItem struct {
 	AgentId     string  `json:"agent_id"`     // 代理ID
 	Level       int64   `json:"level"`        // 等级
@@ -2120,14 +2406,14 @@ type TeamMemberItem struct {
 	LevelName         string  `json:"level_name"`          // 等级名称
 	Mobile            string  `json:"mobile"`              // 手机号
 	CreateTime        string  `json:"create_time"`         // 加入团队时间
-	TotalRebateAmount float64 `json:"total_rebate_amount"` // 返佣给我的总金额
-	TodayRebateAmount float64 `json:"today_rebate_amount"` // 返佣给我的今日金额
-	TodayInvites      int64   `json:"today_invites"`       // 邀请加入团队的今日人数
-	MonthInvites      int64   `json:"month_invites"`       // 邀请加入团队的本月人数
-	TotalInvites      int64   `json:"total_invites"`       // 邀请加入团队的总人数
 	TodayQueries      int64   `json:"today_queries"`       // 当日查询量
 	MonthQueries      int64   `json:"month_queries"`       // 本月查询量
 	TotalQueries      int64   `json:"total_queries"`       // 总查询量
+	TotalRebateAmount float64 `json:"total_rebate_amount"` // 返佣给我的总金额
+	TodayRebateAmount float64 `json:"today_rebate_amount"` // 返佣给我的今日金额
+	TotalInvites      int64   `json:"total_invites"`       // 邀请加入团队的总人数
+	TodayInvites      int64   `json:"today_invites"`       // 邀请加入团队的今日人数
+	MonthInvites      int64   `json:"month_invites"`       // 邀请加入团队的本月人数
 	IsDirect          bool    `json:"is_direct"`           // 是否直接下级
 }

@@ -2194,6 +2480,57 @@ type UpdateRoleResp struct {
 	Success bool `json:"success"` // 是否成功
 }

+type TeamStatisticsResp struct {
+	TotalCount      int64 `json:"total_count"`       // 团队总人数（不包括自己）
+	DirectCount     int64 `json:"direct_count"`      // 直接下级数量
+	IndirectCount   int64 `json:"indirect_count"`    // 间接下级数量
+	GoldCount       int64 `json:"gold_count"`        // 黄金代理数量
+	NormalCount     int64 `json:"normal_count"`      // 普通代理数量
+	TodayNewMembers int64 `json:"today_new_members"` // 今日新增成员
+	MonthNewMembers int64 `json:"month_new_members"` // 本月新增成员
+}
+
+type UpdateMenuReq struct {
+	Id        string                 `path:"id"`                 // 菜单ID
+	Pid       *string                `json:"pid,optional"`       // 父菜单ID
+	Name      string                 `json:"name"`               // 路由名称
+	Path      string                 `json:"path,optional"`      // 路由路径
+	Component string                 `json:"component,optional"` // 组件路径
+	Redirect  string                 `json:"redirect,optional"`  // 重定向路径
+	Meta      map[string]interface{} `json:"meta"`               // 路由元数据
+	Status    int64                  `json:"status,optional"`    // 状态：0-禁用，1-启用
+	Type      string                 `json:"type"`               // 类型
+	Sort      int64                  `json:"sort,optional"`      // 排序
+}
+
+type UpdateMenuResp struct {
+	Success bool `json:"success"` // 是否成功
+}
+
+type UpdateQueryDataReq struct {
+	Id        string `json:"id"`         // 查询ID
+	QueryData string `json:"query_data"` // 查询数据(未加密的JSON)
+}
+
+type UpdateQueryDataResp struct {
+	Id        string `json:"id"`
+	UpdatedAt string `json:"updated_at"` // 更新时间
+}
+
+type UpdateRoleReq struct {
+	Id          string   `path:"id"`                   // 角色ID
+	RoleName    *string  `json:"role_name,optional"`   // 角色名称
+	RoleCode    *string  `json:"role_code,optional"`   // 角色编码
+	Description *string  `json:"description,optional"` // 角色描述
+	Status      *int64   `json:"status,optional"`      // 状态：0-禁用，1-启用
+	Sort        *int64   `json:"sort,optional"`        // 排序
+	MenuIds     []string `json:"menu_ids,optional"`    // 关联的菜单ID列表
+}
+
+type UpdateRoleResp struct {
+	Success bool `json:"success"` // 是否成功
+}
+
 type UpgradeFeeConfig struct {
 	NormalToGold    float64 `json:"normal_to_gold"`    // 普通→黄金：199
 	NormalToDiamond float64 `json:"normal_to_diamond"` // 普通→钻石：980
@@ -2236,6 +2573,15 @@ type UpgradeSubordinateResp struct {
 	Success bool `json:"success"`
 }

+type UpgradeSubordinateReq struct {
+	SubordinateId string `json:"subordinate_id"` // 下级代理ID
+	ToLevel       int64  `json:"to_level"`       // 目标等级（只能是2=黄金）
+}
+
+type UpgradeSubordinateResp struct {
+	Success bool `json:"success"`
+}
+
 type User struct {
 	Id       string `json:"id"`
 	Mobile   string `json:"mobile"`
@@ -2286,6 +2632,49 @@ type WhitelistItem struct {
 	CreateTime   string  `json:"create_time"`    // 创建时间
 }

+type UserInfoResp struct {
+	UserInfo User `json:"userInfo"`
+}
+
+type WXH5AuthReq struct {
+	Code string `json:"code"`
+}
+
+type WXH5AuthResp struct {
+	AccessToken  string `json:"accessToken"`
+	AccessExpire int64  `json:"accessExpire"`
+	RefreshAfter int64  `json:"refreshAfter"`
+}
+
+type WXMiniAuthReq struct {
+	Code string `json:"code"`
+}
+
+type WXMiniAuthResp struct {
+	AccessToken  string `json:"accessToken"`
+	AccessExpire int64  `json:"accessExpire"`
+	RefreshAfter int64  `json:"refreshAfter"`
+}
+
+type WhitelistFeatureItem struct {
+	FeatureId      string  `json:"feature_id"`      // Feature的UUID
+	FeatureApiId   string  `json:"feature_api_id"`  // Feature的API标识
+	FeatureName    string  `json:"feature_name"`    // Feature的名称
+	WhitelistPrice float64 `json:"whitelist_price"` // 屏蔽价格（单位：元）
+}
+
+type WhitelistItem struct {
+	Id           string  `json:"id"`             // 白名单记录ID
+	IdCard       string  `json:"id_card"`        // 身份证号
+	FeatureId    string  `json:"feature_id"`     // Feature的UUID
+	FeatureApiId string  `json:"feature_api_id"` // Feature的API标识
+	FeatureName  string  `json:"feature_name"`   // Feature的名称
+	Amount       float64 `json:"amount"`         // 费用
+	Status       int64   `json:"status"`         // 状态：1=生效，2=已失效
+	StatusText   string  `json:"status_text"`    // 状态文本
+	CreateTime   string  `json:"create_time"`    // 创建时间
+}
+
 type WithdrawalItem struct {
 	Id           string  `json:"id"`            // 记录ID
 	WithdrawalNo string  `json:"withdrawal_no"` // 提现单号