migration: preserve startup accounts and system slice

AGENTS.md

@@ -0,0 +1,23 @@
+# 小白复盘仓库执行约束
+
+本文件对仓库内所有后续编码任务生效。任何智能体在修改文件前必须完整读取：
+
+1. `docs/migration/原版保真迁移总纲.md`
+2. `docs/migration/保真迁移状态.json`
+3. `docs/migration/next失败冻结记录.md`
+4. 与本次功能有关的原版源码、页面和测试
+
+## 不可违反
+
+- 当前根目录原版是唯一功能、视觉、交互、动画和计算基线。
+- `next/`是失败冻结实现，禁止部署、继续开发或作为新迁移代码来源。
+- 后续迁移是原代码保真式整理，不是重写、重新设计或更换技术栈。
+- 不得根据规格说明书重新实现已经存在的功能；规格书只用于盘点，冲突必须交给用户裁决。
+- 不得改变用户可观察行为。源码可以移动、拆分和调整引用，但输出必须等价。
+- 不确定是否有用的代码默认保留。没有引用扫描、运行证据和新旧对比，不得删除。
+- 每次只处理一个完整纵向功能切片，并同步更新迁移账本和状态文件。
+- 每个切片必须具有原版基线、新版结果、API/数据库对比、页面与交互对比及Git回档点。
+- 不以新实现自身测试通过、目录更整齐或代码行数减少证明迁移成功。
+- 未经用户人工确认，不得宣称视觉等价、完成迁移、切换Docker/NAS或删除原版。
+
+如果任务要求与以上约束冲突，停止迁移并向用户说明冲突，不自行选择新产品行为。

app/.dockerignore

@@ -0,0 +1,19 @@
+.git
+.gitignore
+.codex
+.env
+.env.*
+!.env.example
+__pycache__/
+*.py[cod]
+*.log
+data/cache/
+data/private-mentor-skills/
+data/*.db
+data/*.db-shm
+data/*.db-wal
+tests/
+Dockerfile*
+compose*.yml
+compose*.yaml
+DOCKER_DEPLOY.md

app/.env.example

@@ -0,0 +1,21 @@
+# Generated automatically when omitted. Back it up together with the database.
+APP_ENCRYPTION_KEY=
+
+# Initial shared market-data credential. After first launch it is encrypted into
+# the system settings; all accounts use the same backend market snapshot.
+TUSHARE_TOKEN=your_tushare_token_here
+
+# Optional iFinD HTTP credential. The backend exchanges it for a short-lived
+# access token and never exposes either token to browsers.
+IFIND_REFRESH_TOKEN=your_ifind_refresh_token_here
+
+# Initial platform member models (OpenAI-compatible). After first launch these
+# are encrypted into system settings and used only by admins and active members.
+LLM_PRIMARY_BASE_URL=https://api.openai.com/v1
+LLM_PRIMARY_MODEL=your_primary_model
+LLM_PRIMARY_API_KEY=your_primary_api_key
+
+# Optional fallback model. It is used only when the primary model fails.
+LLM_FALLBACK_BASE_URL=https://api.openai.com/v1
+LLM_FALLBACK_MODEL=your_fallback_model
+LLM_FALLBACK_API_KEY=your_fallback_api_key

app/.gitignore

@@ -0,0 +1,25 @@
+.env
+.env.*
+!.env.example
+__pycache__/
+data/cache/
+data/private-mentor-skills/
+data/*.db
+data/*.db-shm
+data/*.db-wal
+data/backups/
+data/*.bak
+data/*.backup
+*.log
+*.pyc
+.coverage
+htmlcov/
+.pytest_cache/
+test-results/
+playwright-report/
+node_modules/
+next/.venv/
+next/data/
+next/frontend/dist/
+next/frontend/.vite/
+next/frontend/coverage/

app/ARCHITECTURE.md

@@ -0,0 +1,40 @@
+# Architecture
+
+The normative governance contract is documented in
+`docs/governance/architecture-standard.md`. This file describes the currently deployed
+shape; the standard defines the target boundaries and the rules applied during migration.
+
+The application intentionally keeps a small deployment footprint: one Python process, one
+SQLite database, and a build-free browser client. The internal boundaries are nevertheless
+explicit so new features do not bypass account isolation or data-quality rules.
+
+## Backend boundaries
+
+- `server.py`: application services and HTTP request/response wiring.
+- `api_access.py`: the single authorization policy for authenticated, member, and admin APIs.
+- `app_config.py`: runtime paths, local environment loading, and shared input validation.
+- `database.py`: SQLite schema, migrations, and persistence operations.
+- `tushare_client.py` and `realtime_aggregator.py`: external market-data adapters.
+- `sentiment_engine.py`, `screener.py`, and `heaven_engine.py`: deterministic domain logic.
+- `mentor_agent.py`, `heaven_agent.py`, and `llm_strategy.py`: bounded LLM adapters.
+
+## Data ownership
+
+Public market snapshots, stock factors, built-in strategies, limit-up reasons, seat aliases,
+and sector-element mappings are shared. Only administrators can modify shared knowledge.
+
+Watchlists, review notes, custom strategies, screener runs, mentor conversations, birth data,
+alerts, trading journals, and assistant conversations are owned by a user ID and must be
+queried with that ID. LLM features additionally require active membership.
+
+## Data integrity
+
+Production reads never synthesize market prices. A failed live request may use the latest real
+snapshot at or before the requested date. When no real snapshot exists, the API reports that
+the data is unavailable. Demo builders remain test fixtures only.
+
+## Change contract
+
+New endpoints must be added to `api_access.required_role` when they need member or admin
+access. New user-owned tables must include `user_id`, an ownership index, and cross-account
+tests. API payload compatibility is protected by the Python and Playwright suites.

app/DOCKER_DEPLOY.md

@@ -0,0 +1,257 @@
+# 小白复盘局域网 Docker 部署
+
+本文以 Linux 服务器为目标，容器内外均使用 `8765` 端口，宿主机监听
+`0.0.0.0:8765`。局域网用户通过 `http://服务器局域网IP:8765` 访问。
+
+## 1. 部署结构
+
+```text
+局域网浏览器
+    |
+    v
+服务器 0.0.0.0:8765
+    |
+    v
+xiaobai-review 容器 :8765
+    |-- /app              只读应用代码
+    `-- /app/data         宿主机 ./data 持久化挂载
+```
+
+账号、加密后的公共数据 Token、平台模型 API Key、生辰资料、行情快照和复盘数据均在
+`data/review.db`。解密密钥来自 `.env` 中的 `APP_ENCRYPTION_KEY`。数据库与
+密钥必须成对备份，任意一个丢失都无法恢复账号内的加密资料。
+
+管理员私有的问师 Skill 保存在宿主机 `data/private-mentor-skills/`。该目录随 `data`
+挂载进入容器，但被 Git 与 Docker 构建上下文排除，不会进入 Gitea 或镜像。私有 Skill
+只对管理员账号返回和开放调用，也会随本指南的 `data` 备份一起保存。
+
+首个注册账号自动成为管理员。管理员在“系统管理”中配置全站共享行情、后台刷新、平台会员模型及手动会员；普通用户的“账号设置”用于个人资料、会员状态、修改密码和切换账号。后台行情更新不会主动刷新任何浏览器页面。
+
+## 2. 服务器要求
+
+- 64 位 Linux 服务器；
+- Docker Engine 24 或更新版本；
+- Docker Compose v2，命令形式为 `docker compose`；
+- 服务器可以访问 Tushare、已配置的 LLM 和实时聚合数据源；
+- 局域网内没有其他服务占用 TCP `8765`。
+
+验证 Docker：
+
+```bash
+docker --version
+docker compose version
+```
+
+## 3. 迁移现有数据
+
+迁移前先停止当前 Windows 上的 `8765` 服务，避免复制过程中 SQLite 继续写入。
+然后在 `webapp` 目录执行一次 WAL 检查点：
+
+```powershell
+python -c "import sqlite3; c=sqlite3.connect('data/review.db'); print(c.execute('PRAGMA wal_checkpoint(TRUNCATE)').fetchone()); c.close()"
+```
+
+结果第一项应为 `0`。必须迁移以下内容：
+
+```text
+webapp/data/
+webapp/.env
+webapp/Dockerfile
+webapp/compose.yaml
+webapp/其余程序文件
+```
+
+不要重新生成 `APP_ENCRYPTION_KEY`。部署已有数据库时，目标服务器 `.env` 中的
+值必须与原服务器完全一致。
+
+可以在项目目录生成迁移包：
+
+```powershell
+tar --exclude='__pycache__' --exclude='*.log' --exclude='data/cache' -czf xiaobai-review.tar.gz -C webapp .
+scp .\xiaobai-review.tar.gz 用户名@服务器IP:/tmp/
+```
+
+迁移包包含数据库和密钥，传输完成后应及时删除两端的压缩包。
+
+## 4. 首次启动
+
+在 Linux 服务器执行：
+
+```bash
+sudo mkdir -p /opt/xiaobai-review
+sudo chown "$USER":"$USER" /opt/xiaobai-review
+tar -xzf /tmp/xiaobai-review.tar.gz -C /opt/xiaobai-review
+cd /opt/xiaobai-review
+chmod 600 .env
+sudo chown -R 10001:10001 data
+docker compose config
+docker compose build --pull
+docker compose up -d
+```
+
+镜像使用 UID/GID `10001` 的非 root 用户运行，因此宿主机 `data` 目录必须允许
+该用户写入。不要把整个应用目录设为可写。
+
+检查运行状态：
+
+```bash
+docker compose ps
+docker compose logs --tail=100 xiaobai-review
+curl http://127.0.0.1:8765/api/health
+docker inspect --format '{{.State.Health.Status}}' xiaobai-review
+```
+
+健康接口应返回类似内容：
+
+```json
+{"ok": true, "storage": "sqlite", "account_required": true}
+```
+
+随后在局域网电脑访问：
+
+```text
+http://服务器局域网IP:8765
+```
+
+## 5. 防火墙
+
+Compose 已明确绑定 `0.0.0.0:8765`。服务器防火墙建议只允许实际局域网网段，
+不要在路由器上把该端口映射到公网。
+
+Ubuntu/UFW 示例，假设局域网为 `192.168.1.0/24`：
+
+```bash
+sudo ufw allow from 192.168.1.0/24 to any port 8765 proto tcp
+sudo ufw status
+```
+
+如果服务器位于其他网段，应替换为实际 CIDR。访问失败时同时检查云服务器安全组、
+虚拟化平台防火墙和宿主机防火墙。
+
+## 6. 日常管理
+
+查看日志：
+
+```bash
+cd /opt/xiaobai-review
+docker compose logs -f --tail=100 xiaobai-review
+```
+
+重启：
+
+```bash
+docker compose restart xiaobai-review
+```
+
+停止：
+
+```bash
+docker compose down
+```
+
+### 使用 Gitea 更新程序（推荐）
+
+代码仓库为：
+
+```text
+http://192.168.200.36:3200/leefer/xiaobaifupan.git
+```
+
+首次在服务器部署代码时，可以直接克隆到目标目录：
+
+```bash
+sudo mkdir -p /opt/xiaobai-review
+sudo chown "$USER":"$USER" /opt/xiaobai-review
+git clone http://192.168.200.36:3200/leefer/xiaobaifupan.git /opt/xiaobai-review
+cd /opt/xiaobai-review
+```
+
+私有仓库会提示输入 Gitea 用户名和密码或访问令牌。不要把密码写入仓库 URL、
+`compose.yaml` 或脚本。然后把原 `.env` 与 `data/` 放回该目录；这两项已被 Git
+忽略，后续拉取代码不会覆盖数据库与密钥。
+
+如需部署管理员私有问师，通过 NAS 文件管理器将本地
+`data/private-mentor-skills/` 复制到服务器项目的同名 `data` 目录，并保持目录仅由
+部署账号和容器运行用户读取。该内容不会通过 Gitea 同步。
+
+每次更新前先创建 SQLite 一致性备份，再拉取并重建容器：
+
+```bash
+cd /opt/xiaobai-review
+docker compose exec -T xiaobai-review python -c "import sqlite3; s=sqlite3.connect('/app/data/review.db'); d=sqlite3.connect('/app/data/review-before-update.db'); s.backup(d); d.close(); s.close()"
+git pull --ff-only origin main
+docker compose up -d --build
+docker compose ps
+curl --fail http://127.0.0.1:8765/api/health
+```
+
+`docker compose up -d --build` 会原地替换应用容器，不删除宿主机的 `data` 目录。
+数据库迁移会在新容器启动时自动执行。若 `git pull --ff-only` 提示本地代码有修改，
+先用 `git status` 查明原因，不要用强制重置覆盖 `.env` 或 `data`。
+
+### 不使用 Git 时更新
+
+重新上传代码后执行：
+
+```bash
+docker compose down
+docker compose build --pull
+docker compose up -d
+```
+
+`docker compose down` 不会删除宿主机的 `data` 目录。不要使用带有手工删除
+`data` 目录的清理命令。
+
+## 7. 备份与恢复
+
+最稳妥的备份方式是短暂停服后同时备份数据库目录和密钥：
+
+```bash
+cd /opt/xiaobai-review
+docker compose stop xiaobai-review
+tar -czf "xiaobai-backup-$(date +%Y%m%d-%H%M%S).tar.gz" data .env
+docker compose start xiaobai-review
+```
+
+恢复时先停止容器，再恢复 `data` 和与其配套的 `.env`，修复权限后启动：
+
+```bash
+docker compose down
+sudo chown -R 10001:10001 data
+chmod 600 .env
+docker compose up -d
+```
+
+## 8. 常见问题
+
+### 容器反复重启
+
+```bash
+docker compose logs --tail=200 xiaobai-review
+```
+
+优先检查 `.env` 是否存在、`APP_ENCRYPTION_KEY` 是否为空，以及 `data` 是否可写。
+
+### 提示账号加密数据无法解密
+
+目标服务器使用了错误的 `APP_ENCRYPTION_KEY`。停止容器并恢复与数据库配套的
+原始 `.env`，不要通过重置密钥绕过该错误。
+
+### SQLite 显示只读或无法打开
+
+```bash
+sudo chown -R 10001:10001 /opt/xiaobai-review/data
+sudo chmod -R u+rwX /opt/xiaobai-review/data
+docker compose restart xiaobai-review
+```
+
+### 本机健康检查正常但其他电脑无法访问
+
+确认 `docker compose ps` 显示 `0.0.0.0:8765->8765/tcp`，然后检查服务器防火墙和
+客户端到服务器的网络路由。
+
+## 9. 安全边界
+
+当前部署使用局域网 HTTP，账号密码和会话只适合可信内网使用。不要直接将
+`8765` 暴露到互联网。以后需要公网访问时，应在容器前增加 Caddy 或 Nginx，
+启用 HTTPS，并限制可信来源。

app/Dockerfile

@@ -0,0 +1,36 @@
+FROM python:3.12-slim-bookworm
+
+ARG APP_UID=10001
+ARG APP_GID=10001
+
+ENV PYTHONDONTWRITEBYTECODE=1 \
+    PYTHONUNBUFFERED=1 \
+    PYTHONUTF8=1 \
+    PIP_DISABLE_PIP_VERSION_CHECK=1 \
+    TZ=Asia/Shanghai
+
+WORKDIR /app
+
+RUN apt-get update \
+    && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
+        ca-certificates \
+        tzdata \
+    && groupadd --gid "${APP_GID}" xiaobai \
+    && useradd --uid "${APP_UID}" --gid "${APP_GID}" --create-home --shell /usr/sbin/nologin xiaobai \
+    && rm -rf /var/lib/apt/lists/*
+
+COPY requirements.txt ./
+RUN python -m pip install --no-cache-dir -r requirements.txt
+
+COPY --chown=xiaobai:xiaobai . .
+RUN mkdir -p /app/data && chown -R xiaobai:xiaobai /app/data
+
+USER xiaobai
+
+EXPOSE 8765
+STOPSIGNAL SIGINT
+
+HEALTHCHECK --interval=30s --timeout=5s --start-period=20s --retries=3 \
+    CMD ["python", "-c", "import urllib.request; urllib.request.urlopen('http://127.0.0.1:8765/api/health', timeout=4).read()"]
+
+CMD ["python", "-u", "server.py", "--host", "0.0.0.0", "--port", "8765"]

app/README.md

@@ -0,0 +1,66 @@
+# 小白复盘 Web
+
+一个面向 A 股盘后复盘的本地 Web 工作台。后端使用 Python 访问 Tushare Pro，前端不依赖构建工具。
+
+当前包含集合竞价、涨停池、炸板池、跌停板、昨日涨停、涨停表现、市场天梯、板块轮动、题材库、人气热榜、龙虎榜和个人复盘工作区。交易日快照与同步记录保存在本地 SQLite 数据库 `data/review.db`。
+
+集合竞价中心采用盘前生命周期：9:15 前显示预告，9:15–9:25 明确等待最终竞价，9:25–9:30 自动读取并重试最终竞价筛选，9:30 后停止更新并冻结为复盘归档。当前 Tushare 只提供 9:25 最终竞价快照，不将其表述为动态虚拟撮合行情。
+
+第三阶段加入了机构席位、席位别名、个股复权日 K、资金流、自选股、涨停原因修订、个股笔记、每日复盘和历史数据回补。
+
+股票代码在桌面端悬停后会显示分时与日 K 快速预览，默认优先展示日 K；移动端点击代码后从底部打开预览面板。股票详情以及板块、题材、指数详情均可在日 K 与最新分时之间切换。日 K 复用个股详情缓存；分时使用隔离的东方财富分钟图表源和短时内存缓存，只负责展示，不写入主行情、不参与情绪、选股或问天计算。图表源不可用时界面会明确显示“分时不可用”，不会使用日 K 数据模拟分时走势。
+
+智能选股模块包含 45 日全市场因子库、六阶段市场识别、七套内置策略、受控公式 DSL、自然语言策略编译、候选排名和滚动回测。竞价涨幅、竞价成交额、竞价换手率与竞价量比随因子数据一并同步，可用于自定义公式和历史回测。首次使用需在页面点击“同步因子数据”。未配置 LLM 时使用本地策略模板；配置兼容 API 后自动切换为主模型编译，主模型失败时自动使用辅助模型，两者均支持独立连通性测试。
+
+每次选股结果会自动进入五交易日持续跟踪，展示 T+1 开盘/收盘、T+3、T+5、最大涨幅与最大回撤。提醒中心支持手工日期提醒，并在策略首日反馈和五日跟踪完成时生成账号私有的站内提醒。
+
+问师模块会读取当前复盘、近十日市场情绪、涨跌停、昨日反馈、板块轮动、市场阶段、龙虎榜和指定个股数据，再按选中的游资思维 Skill 进行单师对话。对话记录按账号、老师和交易日期保存在服务端；主模型不可用时自动切换辅助模型。
+
+新增公开问师角色时，在 `游资skills` 下增加一个包含 `SKILL.md` 的独立目录，并在 `游资skills/mentor_catalog.json` 中登记素材等级与结构质检。管理员私有角色放在 `data/private-mentor-skills`，该目录不进入 Git 或 Docker 镜像，且只会出现在管理员的问师列表中。系统会从 Skill 的 frontmatter、一级标题、核心模型和引用语中自动生成角色信息，无需修改注册代码。
+
+问天模块包含三个相互独立的部分：观势以市场数据生成三才六爻，用于观察“势”，行情缺失或自动取象明显偏差时可显式手动校准六爻，人工结果与自动来源严格区分；观气依据干支、精确节气、五运六气及客主加临关系观察“运”，行业五行仅作传统取象归类；观心通过30秒静心、六次三枚铜钱起卦、察念和解卦完成一次不输入问题的问心仪式。卦象、干支、节气与气机关系均由本地确定性程序计算，LLM只负责解释，不参与起卦或改动结果。
+
+问天模块使用项目本地的 `lunar-python` 计算历法，并使用 `data/iching_zh.json` 中的固定六十四卦、卦辞和爻辞。第三方授权见 `THIRD_PARTY_NOTICES.md`。
+
+“我的复盘”包含结构化手工交易日志，可记录方向、价格、数量、仓位、盈亏、逻辑、执行、情绪和标签，不接券商也不自动下单。顶部“复盘助手”以流式方式读取市场统计、策略跟踪、提醒、个人复盘和交易日志；对话按账号保存，只提供分析和条件化计划。
+
+## 启动
+
+```powershell
+cd webapp
+python -m pip install -r requirements.txt
+python server.py
+```
+
+浏览器打开 `http://127.0.0.1:8765`，首次使用先注册账号。首个账号自动成为管理员，后续账号默认为普通用户。主行情不再回退演示数据：盘前、非交易日或临时取数失败时沿用最近真实收盘快照；没有任何真实快照时提示等待管理员完成首次同步。
+
+局域网 Docker 部署使用 `Dockerfile` 与 `compose.yaml`，完整的迁移、持久化、
+防火墙、备份和恢复步骤见 [DOCKER_DEPLOY.md](DOCKER_DEPLOY.md)。
+
+账号密码使用 scrypt 哈希；公共 Tushare Token、平台模型密钥以及原始生辰资料均使用 `APP_ENCRYPTION_KEY` 加密后保存在 SQLite。公共数据和平台模型归系统所有，生辰资料仍按账号隔离。普通用户不配置 LLM，只有管理员授权的有效会员可以使用平台模型。请将 `.env` 与数据库一起备份，丢失加密密钥后无法恢复这些资料。
+
+## 系统与账号配置
+
+管理员通过页面右上角“系统管理”保存公共 Tushare Token、平台主/辅助模型、会员每日额度和后台刷新开关。所有用户读取同一份 SQLite 行情快照，不再分别配置行情 Token。已有个人凭据中的 Tushare Token 会在升级时迁移到系统配置并从个人凭据移除。
+
+```text
+TUSHARE_TOKEN=你的Token
+```
+
+`.env` 中的 Tushare 和平台 LLM 配置只用于初始化系统配置，密钥不会返回到浏览器。后台刷新只在交易时段更新 SQLite 快照，不会主动刷新或重绘用户页面；用户点击页面“刷新”时读取最新快照。管理员也可点“后台刷新”立即启动一次后台同步，当前页面仍保持不变。
+
+普通用户在“账号设置”中维护个人资料、查看会员状态和修改密码，不配置个人 LLM。有效会员自动使用平台模型；管理员可在“系统管理”中手动开通、续期、停用会员。平台模型受管理员设置的每日调用次数限制，管理员账号始终可用。
+
+Tushare 各接口有独立积分权限。程序优先使用 `limit_list_d` 获取涨跌停明细；该接口不可用时，会尝试通过日线和每日涨跌停价格推算。
+
+## 隔离实时聚合验证
+
+`realtime_aggregator.py` 用于验证东方财富、同花顺和选股宝网页数据源。它不写入 SQLite 主行情快照，也不参与情绪评分或智能选股；当 Tushare 实时指数权限不可用时，观势会使用东方财富三大指数和板块外显，并继续使用 Tushare 的板块成分内核与个股数据。
+
+登录后可调用：
+
+```text
+GET /api/realtime-aggregate/health?sector=元器件
+```
+
+返回内容包括东方财富三大指数及板块快照、指数时间差、同花顺和选股宝可用性、每个来源的耗时与错误。盘中指数时间差不超过15秒，收盘后不超过120秒。`ready=true` 仅表示本次验证满足聚合层约束，不代表这些网页内部接口具有长期稳定性或商业使用授权。

app/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,79 @@
+# Third-Party Notices
+
+## lunar-python
+
+Source: https://github.com/6tail/lunar-python  
+Copyright (c) 2020 6tail
+
+MIT License
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+## Lucide
+
+The local browser icon bundle at `static/vendor/lucide.min.js` is Lucide
+version 0.468.0.
+
+Source: https://github.com/lucide-icons/lucide
+
+ISC License
+
+Copyright (c) for portions of Lucide are held by Cole Bemis 2013-2022 as part
+of Feather (MIT). All other copyright (c) for Lucide are held by Lucide
+Contributors 2022.
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+PERFORMANCE OF THIS SOFTWARE.
+
+## ichingpy classic text data
+
+The fixed Chinese hexagram, judgement and line text data in
+`data/iching_zh.json` is derived from the MIT-licensed ichingpy project.
+
+Source: https://github.com/JinyangWang27/ichingpy  
+Copyright (c) 2024 Jinyang Wang
+
+MIT License
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

app/advanced_strategies.py

@@ -0,0 +1,486 @@
+from __future__ import annotations
+
+from typing import Any
+
+
+def _meta(
+    category: str,
+    quality: str,
+    frequency: str,
+    risk: str,
+    data_group: str,
+    history_days: int,
+    backtest_days: int,
+    take_profit: float,
+    stop_loss: float,
+    **extra: Any,
+) -> dict[str, Any]:
+    return {
+        "library": "curated",
+        "category": category,
+        "quality": quality,
+        "frequency": frequency,
+        "risk": risk,
+        "data_group": data_group,
+        "history_days": history_days,
+        "backtest_days": backtest_days,
+        "take_profit": take_profit,
+        "stop_loss": stop_loss,
+        **extra,
+    }
+
+
+ADVANCED_CURATED_STRATEGIES = [
+    {
+        "name": "中期动量·强者恒强",
+        "description": "用60日至5日前的中期动量识别持续强势，同时剔除当日无法正常成交的涨停标的。",
+        "regimes": ["repair", "fermentation", "climax", "divergence"],
+        "formula": {
+            "meta": _meta("动量反转", "A-", "每周", "中", "历史行情", 80, 10, 8, -5),
+            "universe": {"exclude_st": True, "listed_days_min": 180},
+            "filters": [
+                {"field": "close", "op": "between", "value": [3, 100]},
+                {"field": "momentum_60_5_rank", "op": ">=", "value": 0.90},
+                {"field": "is_limit_up_today", "op": "==", "value": 0},
+            ],
+            "score": [
+                {"field": "momentum_60_5", "weight": 0.55, "direction": "desc"},
+                {"field": "relative_strength", "weight": 0.25, "direction": "desc"},
+                {"field": "amount_billion", "weight": 0.20, "direction": "desc"},
+            ],
+            "limit": 25,
+            "min_score": 0.50,
+        },
+    },
+    {
+        "name": "强者回调",
+        "description": "在中期强势股池中寻找回踩20日线、短期超卖且近20日无跌停的牛回头候选。",
+        "regimes": ["repair", "fermentation", "divergence"],
+        "formula": {
+            "meta": _meta("动量反转", "A-", "每日", "中", "历史行情", 80, 10, 8, -5),
+            "universe": {"exclude_st": True, "listed_days_min": 180},
+            "filters": [
+                {"field": "momentum_60_5_rank", "op": ">=", "value": 0.70},
+                {"field": "return_5d_rank", "op": "<=", "value": 0.20},
+                {"field": "above_ma20", "op": "==", "value": 1},
+                {"field": "rsi_6", "op": "<=", "value": 30},
+                {"field": "no_limit_down_20d", "op": "==", "value": 1},
+            ],
+            "score": [
+                {"field": "momentum_60_5", "weight": 0.42, "direction": "desc"},
+                {"field": "return_5d", "weight": 0.33, "direction": "asc"},
+                {"field": "amount_billion", "weight": 0.25, "direction": "desc"},
+            ],
+            "limit": 20,
+            "min_score": 0.48,
+        },
+    },
+    {
+        "name": "超跌反转",
+        "description": "筛选短期极端回撤、充分换手但尚未形成长期单边下跌的修复候选。",
+        "regimes": ["ice", "repair"],
+        "formula": {
+            "meta": _meta("动量反转", "B+", "每日", "高", "行情与财务", 80, 5, 8, -5),
+            "universe": {"exclude_st": True, "listed_days_min": 180},
+            "filters": [
+                {"field": "return_5d_rank", "op": "<=", "value": 0.05},
+                {"field": "turnover_5d", "op": ">=", "value": 30},
+                {"field": "return_60d", "op": ">=", "value": -40},
+                {"field": "financial_risk", "op": "==", "value": 0},
+                {"field": "is_limit_down_today", "op": "==", "value": 0},
+            ],
+            "score": [
+                {"field": "return_5d", "weight": 0.45, "direction": "asc"},
+                {"field": "turnover_5d", "weight": 0.30, "direction": "desc"},
+                {"field": "amount_billion", "weight": 0.25, "direction": "desc"},
+            ],
+            "limit": 10,
+            "min_score": 0.50,
+        },
+    },
+    {
+        "name": "相对强度新高",
+        "description": "以个股相对沪深300的强度线识别弱市领涨和结构性抱团标的。",
+        "regimes": ["ice", "repair", "fermentation", "divergence"],
+        "formula": {
+            "meta": _meta("动量反转", "A", "每周", "中", "行情与指数", 130, 20, 12, -7, requires_benchmark=True),
+            "universe": {"exclude_st": True, "listed_days_min": 250},
+            "filters": [
+                {"field": "amount_billion", "op": ">=", "value": 1},
+                {"field": "rs_high_120", "op": "==", "value": 1},
+                {"field": "excess_return_60d", "op": ">=", "value": 10},
+                {"field": "ma60_slope", "op": ">", "value": 0},
+            ],
+            "score": [
+                {"field": "excess_return_60d", "weight": 0.50, "direction": "desc"},
+                {"field": "ma60_slope", "weight": 0.25, "direction": "desc"},
+                {"field": "amount_billion", "weight": 0.25, "direction": "desc"},
+            ],
+            "limit": 20,
+            "min_score": 0.52,
+        },
+    },
+    {
+        "name": "均线多头排列",
+        "description": "使用5、10、20、60日均线多头结构、20日线斜率和250日位置确认趋势。",
+        "regimes": ["repair", "fermentation", "climax", "divergence"],
+        "formula": {
+            "meta": _meta("趋势追踪", "A-", "每周", "中低", "历史行情", 260, 20, 12, -7),
+            "universe": {"exclude_st": True, "listed_days_min": 365},
+            "filters": [
+                {"field": "ma_bull_alignment", "op": "==", "value": 1},
+                {"field": "ma20_slope_5d", "op": ">", "value": 0},
+                {"field": "drawdown_from_high_250", "op": "<=", "value": 20},
+            ],
+            "score": [
+                {"field": "ma20_slope_5d", "weight": 0.38, "direction": "desc"},
+                {"field": "drawdown_from_high_250", "weight": 0.32, "direction": "asc"},
+                {"field": "relative_strength", "weight": 0.30, "direction": "desc"},
+            ],
+            "limit": 30,
+            "min_score": 0.50,
+        },
+    },
+    {
+        "name": "唐奇安通道突破",
+        "description": "收盘突破前20日高点，并以突破幅度、量能和突破前振幅过滤假突破。",
+        "regimes": ["repair", "fermentation", "divergence"],
+        "formula": {
+            "meta": _meta("趋势追踪", "A-", "每日", "中", "历史行情", 80, 20, 12, -7),
+            "universe": {"exclude_st": True, "listed_days_min": 180},
+            "filters": [
+                {"field": "donchian_breakout_pct", "op": ">=", "value": 2},
+                {"field": "volume_ratio_5d", "op": ">=", "value": 1.8},
+                {"field": "range_20d", "op": "<=", "value": 35},
+            ],
+            "score": [
+                {"field": "volume_ratio_5d", "weight": 0.40, "direction": "desc"},
+                {"field": "donchian_breakout_pct", "weight": 0.35, "direction": "desc"},
+                {"field": "range_20d", "weight": 0.25, "direction": "asc"},
+            ],
+            "limit": 15,
+            "min_score": 0.52,
+        },
+    },
+    {
+        "name": "周线趋势·日线买点",
+        "description": "周线MACD位于多头区间，日线金叉或回踩20日线收阳时确认多周期共振。",
+        "regimes": ["repair", "fermentation", "divergence"],
+        "formula": {
+            "meta": _meta("趋势追踪", "A", "每周", "中低", "多周期行情", 180, 20, 12, -7),
+            "universe": {"exclude_st": True, "listed_days_min": 365},
+            "filters": [
+                {"field": "weekly_trend_signal", "op": "==", "value": 1},
+                {"field": "daily_buy_trigger", "op": "==", "value": 1},
+                {"field": "weekly_amount_trend", "op": "==", "value": 1},
+            ],
+            "score": [
+                {"field": "ma20_slope_5d", "weight": 0.35, "direction": "desc"},
+                {"field": "relative_strength", "weight": 0.35, "direction": "desc"},
+                {"field": "amount_billion", "weight": 0.30, "direction": "desc"},
+            ],
+            "limit": 20,
+            "min_score": 0.52,
+        },
+    },
+]
+
+ADVANCED_CURATED_STRATEGIES.extend(
+    [
+        {
+            "name": "空间板",
+            "description": "识别当日新晋市场最高板，并要求所属方向具备足够的涨停支撑。",
+            "regimes": ["repair", "fermentation"],
+            "formula": {
+                "meta": _meta("连板接力", "B+", "每日", "很高", "涨停结构", 80, 3, 8, -6),
+                "universe": {"exclude_st": True, "listed_days_min": 120},
+                "filters": [
+                    {"field": "is_market_height", "op": "==", "value": 1},
+                    {"field": "new_space_board", "op": "==", "value": 1},
+                    {"field": "sector_limit_count", "op": ">=", "value": 3},
+                ],
+                "score": [
+                    {"field": "limit_streak", "weight": 0.50, "direction": "desc"},
+                    {"field": "sector_limit_count", "weight": 0.30, "direction": "desc"},
+                    {"field": "amount_billion", "weight": 0.20, "direction": "desc"},
+                ],
+                "limit": 5,
+                "min_score": 0.45,
+            },
+        },
+        {
+            "name": "龙头首阴",
+            "description": "筛选三板以上强势股断板后的首次缩量阴线，并结合板块强度观察承接质量。",
+            "regimes": ["fermentation", "climax"],
+            "formula": {
+                "meta": _meta("低吸反核", "B", "每日", "很高", "涨停结构", 80, 5, 8, -6),
+                "universe": {"exclude_st": True, "listed_days_min": 120},
+                "filters": [
+                    {"field": "max_continuous_board_10d", "op": ">=", "value": 3},
+                    {"field": "dragon_first_yin", "op": "==", "value": 1},
+                    {"field": "yin_day_pct", "op": ">=", "value": -7},
+                    {"field": "vol_vs_previous", "op": "<=", "value": 0.8},
+                ],
+                "score": [
+                    {"field": "max_continuous_board_10d", "weight": 0.45, "direction": "desc"},
+                    {"field": "vol_vs_previous", "weight": 0.30, "direction": "asc"},
+                    {"field": "sector_strength", "weight": 0.25, "direction": "desc"},
+                ],
+                "limit": 5,
+                "min_score": 0.48,
+            },
+        },
+        {
+            "name": "断板反包",
+            "description": "连板断板后1至3日内，以涨停收复断板高点和量能确认N字反包。",
+            "regimes": ["repair", "fermentation"],
+            "formula": {
+                "meta": _meta("低吸反核", "B+", "每日", "高", "涨停结构", 80, 3, 8, -6),
+                "universe": {"exclude_st": True, "listed_days_min": 120},
+                "filters": [
+                    {"field": "broken_reversal", "op": "==", "value": 1},
+                    {"field": "days_since_broken", "op": "between", "value": [1, 3]},
+                    {"field": "close_above_broken_high", "op": "==", "value": 1},
+                    {"field": "vol_vs_broken_day", "op": ">=", "value": 1},
+                ],
+                "score": [
+                    {"field": "days_since_broken", "weight": 0.35, "direction": "asc"},
+                    {"field": "vol_vs_broken_day", "weight": 0.35, "direction": "desc"},
+                    {"field": "sector_strength", "weight": 0.30, "direction": "desc"},
+                ],
+                "limit": 5,
+                "min_score": 0.46,
+            },
+        },
+        {
+            "name": "核按钮反核",
+            "description": "近5日强势股盘中深水急杀后收回，并以长下影和非放量结构确认承接。",
+            "regimes": ["repair", "fermentation"],
+            "formula": {
+                "meta": _meta("低吸反核", "B+", "每日", "很高", "历史行情", 80, 5, 8, -6),
+                "universe": {"exclude_st": True, "listed_days_min": 120},
+                "filters": [
+                    {"field": "recent_limit_up_5d", "op": ">=", "value": 1},
+                    {"field": "intraday_min_pct", "op": "<=", "value": -7},
+                    {"field": "pct_chg", "op": ">=", "value": -3},
+                    {"field": "lower_shadow_ratio", "op": ">=", "value": 2},
+                    {"field": "vol_vs_previous", "op": "<=", "value": 1.1},
+                ],
+                "score": [
+                    {"field": "lower_shadow_ratio", "weight": 0.42, "direction": "desc"},
+                    {"field": "intraday_min_pct", "weight": 0.30, "direction": "asc"},
+                    {"field": "sector_strength", "weight": 0.28, "direction": "desc"},
+                ],
+                "limit": 5,
+                "min_score": 0.48,
+            },
+        },
+    ]
+)
+
+ADVANCED_CURATED_STRATEGIES.extend(
+    [
+        {
+            "name": "景气-趋势-拥挤三维行业打分",
+            "description": "以行业财务景气、价格趋势和交易拥挤度合成行业得分，再选取行业内动量与成交承载靠前的公司。",
+            "regimes": ["ice", "repair", "fermentation", "climax", "divergence", "retreat"],
+            "formula": {
+                "meta": _meta(
+                    "行业轮动", "A-", "双周", "中", "行业、财务与交易拥挤", 80, 20, 12, -7,
+                    requires_fundamental=True,
+                ),
+                "universe": {"exclude_st": True, "listed_days_min": 180},
+                "filters": [
+                    {"field": "sector_composite_score", "op": ">=", "value": 0.58},
+                    {"field": "sector_crowding_rank", "op": "<=", "value": 0.90},
+                    {"field": "sector_stock_momentum_rank", "op": ">=", "value": 0.50},
+                    {"field": "amount_billion", "op": ">=", "value": 1},
+                ],
+                "score": [
+                    {"field": "sector_composite_score", "weight": 0.55, "direction": "desc"},
+                    {"field": "sector_stock_momentum_rank", "weight": 0.25, "direction": "desc"},
+                    {"field": "sector_crowding_rank", "weight": 0.20, "direction": "asc"},
+                ],
+                "limit": 12,
+                "min_score": 0.50,
+            },
+        },
+        {
+            "name": "大小盘/成长价值风格切换(元策略)",
+            "description": "比较大小盘与成长价值组合近20日相对表现，动态选择当前占优风格中的匹配标的。",
+            "regimes": ["ice", "repair", "fermentation", "climax", "divergence", "retreat"],
+            "formula": {
+                "meta": _meta(
+                    "元策略", "A-", "每周", "中低", "行情、估值与财务", 80, 20, 12, -7,
+                    requires_fundamental=True, requires_valuation=True,
+                ),
+                "universe": {"exclude_st": True, "listed_days_min": 250},
+                "filters": [
+                    {"field": "style_fit_score", "op": ">=", "value": 0.65},
+                    {"field": "amount_billion", "op": ">=", "value": 1},
+                ],
+                "score": [
+                    {"field": "style_fit_score", "weight": 0.70, "direction": "desc"},
+                    {"field": "relative_strength", "weight": 0.30, "direction": "desc"},
+                ],
+                "limit": 20,
+                "min_score": 0.52,
+            },
+        },
+        {
+            "name": "业绩超预期漂移(SUE/PEAD)",
+            "description": "以业绩预告和业绩快报的同报告期差异识别超预期事件，并限定在公告后的首个交易窗口。",
+            "regimes": ["ice", "repair", "fermentation", "climax", "divergence", "retreat"],
+            "formula": {
+                "meta": _meta(
+                    "业绩事件", "A-", "事件驱动", "中", "业绩预告与快报", 80, 20, 12, -7,
+                    requires_earnings_events=True,
+                ),
+                "universe": {"exclude_st": True, "listed_days_min": 180},
+                "filters": [
+                    {"field": "earnings_surprise_pct", "op": ">=", "value": 10},
+                    {"field": "revenue_yoy", "op": ">", "value": 0},
+                    {"field": "earnings_event_quality", "op": "==", "value": 1},
+                    {"field": "earnings_days_since_announce", "op": "between", "value": [1, 5]},
+                ],
+                "score": [
+                    {"field": "earnings_surprise_pct", "weight": 0.60, "direction": "desc"},
+                    {"field": "relative_strength", "weight": 0.25, "direction": "desc"},
+                    {"field": "amount_billion", "weight": 0.15, "direction": "desc"},
+                ],
+                "limit": 15,
+                "min_score": 0.50,
+            },
+        },
+        {
+            "name": "多因子综合打分(IC动态加权)",
+            "description": "将价值、成长、质量、动量和交易情绪标准化，并按近期横截面有效性动态合成综合分。",
+            "regimes": ["ice", "repair", "fermentation", "climax", "divergence", "retreat"],
+            "formula": {
+                "meta": _meta(
+                    "多因子", "A-", "每周", "中", "行情、估值与财务", 260, 20, 12, -7,
+                    requires_fundamental=True, requires_valuation=True,
+                ),
+                "universe": {"exclude_st": True, "listed_days_min": 250},
+                "filters": [
+                    {"field": "multi_factor_composite", "op": ">=", "value": 0.65},
+                    {"field": "financial_risk", "op": "==", "value": 0},
+                    {"field": "amount_billion", "op": ">=", "value": 1},
+                ],
+                "score": [
+                    {"field": "multi_factor_composite", "weight": 0.75, "direction": "desc"},
+                    {"field": "relative_strength", "weight": 0.15, "direction": "desc"},
+                    {"field": "amount_billion", "weight": 0.10, "direction": "desc"},
+                ],
+                "limit": 30,
+                "min_score": 0.55,
+            },
+        },
+        {
+            "name": "热度突增潜伏(另类数据)",
+            "description": "从同花顺和东方财富人气榜中寻找排名快速跃升、但价格尚未明显兑现的观察候选。",
+            "regimes": ["ice", "repair", "fermentation", "climax", "divergence", "retreat"],
+            "formula": {
+                "meta": _meta(
+                    "热度观察", "B+", "每日", "高", "人气榜与行情", 80, 10, 10, -7,
+                    requires_popularity=True, backtestable=False,
+                ),
+                "universe": {"exclude_st": True, "listed_days_min": 120},
+                "filters": [
+                    {"field": "popularity_score", "op": ">=", "value": 15},
+                    {"field": "return_10d", "op": "<=", "value": 5},
+                    {"field": "recent_limit_up_5d", "op": "==", "value": 0},
+                    {"field": "amount_billion", "op": ">=", "value": 0.5},
+                ],
+                "score": [
+                    {"field": "popularity_score", "weight": 0.50, "direction": "desc"},
+                    {"field": "popularity_rank_change", "weight": 0.25, "direction": "desc"},
+                    {"field": "popularity_dual_source", "weight": 0.10, "direction": "desc"},
+                    {"field": "amount_billion", "weight": 0.15, "direction": "desc"},
+                ],
+                "limit": 10,
+                "min_score": 0.48,
+            },
+        },
+        {
+            "name": "机构榜溢价",
+            "description": "筛选龙虎榜机构专用席位低位净买入的公司，并以席位数量和成交承载确认信号。",
+            "regimes": ["ice", "repair", "fermentation", "climax", "divergence", "retreat"],
+            "formula": {
+                "meta": _meta(
+                    "资金席位", "B+", "每日", "中高", "龙虎榜机构席位", 80, 10, 10, -7,
+                    requires_institutions=True,
+                ),
+                "universe": {"exclude_st": True, "listed_days_min": 180},
+                "filters": [
+                    {"field": "institution_net_buy_million", "op": ">=", "value": 30},
+                    {"field": "institution_seat_count", "op": ">=", "value": 1},
+                    {"field": "return_60d", "op": "<=", "value": 30},
+                    {"field": "previous_limit_streak", "op": "<=", "value": 2},
+                ],
+                "score": [
+                    {"field": "institution_net_buy_million", "weight": 0.55, "direction": "desc"},
+                    {"field": "institution_seat_count", "weight": 0.15, "direction": "desc"},
+                    {"field": "relative_position_60", "weight": 0.20, "direction": "asc"},
+                    {"field": "amount_billion", "weight": 0.10, "direction": "desc"},
+                ],
+                "limit": 10,
+                "min_score": 0.48,
+            },
+        },
+    ]
+)
+
+ADVANCED_CURATED_STRATEGIES.extend(
+    [
+        {
+            "name": "行业动量轮动",
+            "description": "选择20日涨幅居前的行业，并在行业内部保留趋势与成交承载更强的前排公司。",
+            "regimes": ["ice", "repair", "fermentation", "climax", "divergence", "retreat"],
+            "formula": {
+                "meta": _meta("行业轮动", "A-", "双周", "中", "行业与历史行情", 80, 20, 12, -7),
+                "universe": {"exclude_st": True, "listed_days_min": 180},
+                "filters": [
+                    {"field": "sector_momentum_rank", "op": ">=", "value": 0.90},
+                    {"field": "sector_stock_momentum_rank", "op": ">=", "value": 0.80},
+                    {"field": "amount_billion", "op": ">=", "value": 1},
+                ],
+                "score": [
+                    {"field": "sector_return_20d", "weight": 0.38, "direction": "desc"},
+                    {"field": "return_20d", "weight": 0.32, "direction": "desc"},
+                    {"field": "total_mv_billion", "weight": 0.18, "direction": "desc"},
+                    {"field": "amount_billion", "weight": 0.12, "direction": "desc"},
+                ],
+                "limit": 12,
+                "min_score": 0.48,
+            },
+        },
+        {
+            "name": "主力资金行业流入",
+            "description": "寻找近5日主力资金持续净流入、行业涨幅尚未充分兑现的板块前排。",
+            "regimes": ["ice", "repair", "fermentation", "climax", "divergence", "retreat"],
+            "formula": {
+                "meta": _meta(
+                    "行业轮动", "B+", "每周", "中高", "行业与资金流", 80, 10, 10, -7,
+                    requires_moneyflow_history=True,
+                ),
+                "universe": {"exclude_st": True, "listed_days_min": 180},
+                "filters": [
+                    {"field": "sector_flow_rank", "op": ">=", "value": 0.85},
+                    {"field": "sector_net_flow_5d_million", "op": ">", "value": 0},
+                    {"field": "sector_return_5d", "op": "<=", "value": 8},
+                    {"field": "flow_to_circ_mv_5d", "op": ">", "value": 0},
+                    {"field": "amount_billion", "op": ">=", "value": 1},
+                ],
+                "score": [
+                    {"field": "flow_to_circ_mv_5d", "weight": 0.42, "direction": "desc"},
+                    {"field": "sector_net_flow_5d_million", "weight": 0.30, "direction": "desc"},
+                    {"field": "sector_return_5d", "weight": 0.16, "direction": "asc"},
+                    {"field": "amount_billion", "weight": 0.12, "direction": "desc"},
+                ],
+                "limit": 15,
+                "min_score": 0.48,
+            },
+        },
+    ]
+)

app/alert_service.py

@@ -0,0 +1,3 @@
+from backend.features.alerts.service import AlertService
+
+__all__ = ["AlertService"]

app/api_access.py

@@ -0,0 +1,15 @@
+from __future__ import annotations
+
+from backend.http import AccessRole, ApiRouteRegistry
+
+
+ROUTES = ApiRouteRegistry.load()
+
+
+def required_role(method: str, path: str) -> AccessRole:
+    """Compatibility access lookup backed by the authoritative route registry."""
+    route = ROUTES.resolve(method, path)
+    return route.access if route else "authenticated"
+
+
+__all__ = ["ROUTES", "AccessRole", "required_role"]

app/app_config.py

@@ -0,0 +1,3 @@
+"""Compatibility imports for code that still uses the original configuration module."""
+
+from backend.bootstrap.config import *  # noqa: F401,F403

app/assistant_agent.py

@@ -0,0 +1,91 @@
+from __future__ import annotations
+
+import json
+import urllib.error
+import urllib.request
+from collections.abc import Iterator
+from typing import Any
+
+from llm_stream import OpenAIStreamAccumulator
+
+
+class ReviewAssistantError(RuntimeError):
+    pass
+
+
+def stream_review_assistant(
+    context: dict[str, Any],
+    question: str,
+    history: list[dict[str, str]],
+    api_key: str,
+    base_url: str,
+    model: str,
+    timeout: int = 120,
+) -> Iterator[str]:
+    if not api_key or not model:
+        raise ReviewAssistantError("智能解读服务尚未配置。")
+    messages = [{"role": "system", "content": _system_prompt(context)}]
+    messages.extend(history[-12:])
+    messages.append({"role": "user", "content": question})
+    request = urllib.request.Request(
+        f"{base_url.rstrip('/')}/chat/completions",
+        data=json.dumps(
+            {"model": model, "messages": messages, "stream": True}, ensure_ascii=False
+        ).encode("utf-8"),
+        headers={
+            "Content-Type": "application/json",
+            "Authorization": f"Bearer {api_key}",
+            "User-Agent": "XiaobaiReviewWeb/1.0",
+            "Accept": "text/event-stream",
+        },
+        method="POST",
+    )
+    try:
+        with urllib.request.urlopen(request, timeout=timeout) as response:
+            yielded = False
+            accumulator = OpenAIStreamAccumulator()
+            for raw_line in response:
+                line = raw_line.decode("utf-8", errors="replace").strip()
+                if not line or line.startswith(":"):
+                    continue
+                if line.startswith("data:"):
+                    line = line[5:].strip()
+                if line == "[DONE]":
+                    break
+                try:
+                    payload = json.loads(line)
+                except json.JSONDecodeError:
+                    continue
+                choices = payload.get("choices") or []
+                if not choices:
+                    continue
+                choice = choices[0] or {}
+                content = accumulator.feed(choice)
+                if content:
+                    yielded = True
+                    yield str(content)
+            if not yielded:
+                raise ReviewAssistantError("智能解读未返回有效内容。")
+    except urllib.error.HTTPError as exc:
+        raise ReviewAssistantError(f"智能解读服务暂不可用（{exc.code}）。") from exc
+    except (urllib.error.URLError, TimeoutError, OSError) as exc:
+        raise ReviewAssistantError("智能解读连接中断，请稍后重试。") from exc
+
+
+def _system_prompt(context: dict[str, Any]) -> str:
+    context_json = json.dumps(context, ensure_ascii=False, separators=(",", ":"))
+    return f"""
+你是“小白复盘”的统一复盘助手。你负责把网页中已经存在的市场统计、策略跟踪、提醒、复盘笔记和手工交易日志连接起来，帮助用户复盘和形成下一步观察计划。
+
+最高优先级规则：
+1. 只能使用下方“网页复盘数据”，数据缺失就明确说明，不得补造行情、交易或胜率。
+2. 不自动下单，不声称已执行任何操作，不修改策略、提醒、笔记或交易日志。
+3. 不承诺收益，不给无条件买卖指令。建议必须写成条件、失效条件和风险边界。
+4. 区分市场事实、用户记录和你的推断。引用数字时写明数据日期。
+5. 优先结合用户自己的策略跟踪与交易日志寻找可验证的重复模式；样本不足时明确标注。
+6. 使用中文，先直接回答，再给数据依据和下一步观察。避免空泛口号，不展示模型、接口或内部工程信息。
+7. 控制在 800 个中文字符以内，除非用户明确要求展开。
+
+网页复盘数据：
+{context_json}
+""".strip()

app/backend/__init__.py

@@ -0,0 +1 @@
+"""Application packages introduced by architecture governance."""

app/backend/bootstrap/__init__.py

@@ -0,0 +1,23 @@
+__all__ = [
+    "ApplicationContainer",
+    "RuntimeSettings",
+    "build_application_container",
+    "load_runtime_settings",
+    "main",
+]
+
+
+def __getattr__(name: str):
+    if name in {"ApplicationContainer", "build_application_container"}:
+        from . import container
+
+        return getattr(container, name)
+    if name in {"RuntimeSettings", "load_runtime_settings"}:
+        from . import settings
+
+        return getattr(settings, name)
+    if name == "main":
+        from .runtime import main
+
+        return main
+    raise AttributeError(name)

app/backend/bootstrap/config.py

@@ -0,0 +1,129 @@
+from __future__ import annotations
+
+import calendar
+import os
+import re
+from datetime import date, datetime, timedelta, timezone
+from pathlib import Path
+from typing import Any
+
+
+APP_DIR = Path(__file__).resolve().parents[2]
+STATIC_DIR = APP_DIR / "static"
+DATA_DIR = APP_DIR / "data"
+ENV_FILE = APP_DIR / ".env"
+MENTOR_SKILLS_DIR = APP_DIR / "游资skills"
+PRIVATE_MENTOR_SKILLS_DIR = DATA_DIR / "private-mentor-skills"
+TOKEN_PATTERN = re.compile(r"^[A-Za-z0-9_-]{20,128}$")
+USERNAME_PATTERN = re.compile(r"^[A-Za-z0-9_\-\u4e00-\u9fff]{3,30}$")
+SESSION_COOKIE = "xiaobai_session"
+SESSION_MAX_AGE = 30 * 24 * 60 * 60
+
+
+def load_local_env() -> None:
+    if not ENV_FILE.exists():
+        return
+    for raw_line in ENV_FILE.read_text(encoding="utf-8").splitlines():
+        line = raw_line.strip()
+        if not line or line.startswith("#") or "=" not in line:
+            continue
+        key, value = line.split("=", 1)
+        os.environ.setdefault(key.strip(), value.strip().strip('"').strip("'"))
+
+
+def save_local_env(updates: dict[str, str]) -> None:
+    values: dict[str, str] = {}
+    if ENV_FILE.exists():
+        for raw_line in ENV_FILE.read_text(encoding="utf-8").splitlines():
+            if "=" in raw_line and not raw_line.lstrip().startswith("#"):
+                key, value = raw_line.split("=", 1)
+                values[key.strip()] = value.strip().strip('"').strip("'")
+    values.update(updates)
+    ENV_FILE.write_text(
+        "".join(f"{key}={value}\n" for key, value in values.items()),
+        encoding="utf-8",
+    )
+
+
+def remove_local_env(keys: set[str]) -> None:
+    if not ENV_FILE.exists():
+        return
+    kept = []
+    for raw_line in ENV_FILE.read_text(encoding="utf-8").splitlines():
+        if "=" in raw_line and not raw_line.lstrip().startswith("#"):
+            key = raw_line.split("=", 1)[0].strip()
+            if key in keys:
+                continue
+        kept.append(raw_line)
+    ENV_FILE.write_text("".join(f"{line}\n" for line in kept), encoding="utf-8")
+    for key in keys:
+        os.environ.pop(key, None)
+
+
+def normalize_date(value: str) -> str:
+    compact = value.replace("-", "").strip()
+    try:
+        parsed = datetime.strptime(compact, "%Y%m%d")
+    except ValueError as exc:
+        raise ValueError("日期格式应为 YYYY-MM-DD。") from exc
+    if parsed.date() > date.today():
+        raise ValueError("不能查询未来日期。")
+    return parsed.strftime("%Y%m%d")
+
+
+def validate_stock_code(value: str) -> str:
+    code = value.strip()
+    if not re.fullmatch(r"\d{6}", code):
+        raise ValueError("股票代码应为 6 位数字。")
+    return code
+
+
+def tushare_code(code: str) -> str:
+    if code.startswith(("4", "8", "9")):
+        suffix = "BJ"
+    elif code.startswith("6"):
+        suffix = "SH"
+    else:
+        suffix = "SZ"
+    return f"{code}.{suffix}"
+
+
+def validate_text(value: Any, label: str, maximum: int, required: bool = False) -> str:
+    text = str(value or "").strip()
+    if required and not text:
+        raise ValueError(f"{label}不能为空。")
+    if len(text) > maximum:
+        raise ValueError(f"{label}不能超过 {maximum} 个字符。")
+    return text
+
+
+def parse_iso_datetime(value: Any) -> datetime | None:
+    text = str(value or "").strip()
+    if not text:
+        return None
+    try:
+        parsed = datetime.fromisoformat(text)
+    except ValueError:
+        return None
+    return parsed.replace(tzinfo=timezone.utc) if parsed.tzinfo is None else parsed.astimezone(timezone.utc)
+
+
+def membership_boundary(value: Any, end: bool) -> str | None:
+    text = str(value or "").strip()
+    if not text:
+        return None
+    try:
+        day = datetime.strptime(text, "%Y-%m-%d").replace(tzinfo=timezone.utc)
+    except ValueError as exc:
+        raise ValueError("会员日期格式应为 YYYY-MM-DD。") from exc
+    if end:
+        day += timedelta(days=1)
+    return day.isoformat(timespec="seconds")
+
+
+def add_months(value: datetime, months: int) -> datetime:
+    month_index = value.year * 12 + value.month - 1 + months
+    year, zero_based_month = divmod(month_index, 12)
+    month = zero_based_month + 1
+    day = min(value.day, calendar.monthrange(year, month)[1])
+    return value.replace(year=year, month=month, day=day)

app/backend/bootstrap/container.py

@@ -0,0 +1,60 @@
+from __future__ import annotations
+
+from dataclasses import dataclass
+from pathlib import Path
+from collections.abc import Callable
+
+from backend.data import DataGateway, build_data_gateway
+from backend.database.repositories import RepositoryBundle, build_repository_bundle
+from backend.features.alerts import AlertService
+from backend.features.review import TradeJournalService
+from backend.features.screener import StrategyTrackingService
+from backend.jobs import InProcessJobRunner, JobRegistry, SQLiteJobRunRepository
+from chart_data_provider import MarketChartClient
+from database import ReviewDatabase
+from ifind_client import IfindHttpClient
+from mentor_agent import MentorSkillRegistry
+from realtime_aggregator import WebRealtimeAggregator
+from screener import ScreenerEngine
+
+
+@dataclass(frozen=True)
+class ApplicationContainer:
+    database: ReviewDatabase
+    repositories: RepositoryBundle
+    data_gateway: DataGateway
+    ifind: IfindHttpClient
+    screener: ScreenerEngine
+    strategy_tracking: StrategyTrackingService
+    alert_service: AlertService
+    trade_journal: TradeJournalService
+    mentor_skills: MentorSkillRegistry
+    realtime_aggregator: WebRealtimeAggregator
+    chart_data: MarketChartClient
+    jobs: InProcessJobRunner
+
+
+def build_application_container(
+    database: ReviewDatabase,
+    credentials: dict[str, object],
+    mentor_skills_dir: Path,
+    private_mentor_skills_dir: Path,
+    tushare_token_supplier: Callable[[], str] | None = None,
+) -> ApplicationContainer:
+    data_gateway = build_data_gateway(credentials, tushare_token_supplier)
+    repositories = build_repository_bundle(database)
+    jobs = InProcessJobRunner(JobRegistry.load(), SQLiteJobRunRepository(database))
+    return ApplicationContainer(
+        database=database,
+        repositories=repositories,
+        data_gateway=data_gateway,
+        ifind=data_gateway.ifind,
+        screener=ScreenerEngine(database),
+        strategy_tracking=StrategyTrackingService(repositories.strategy_tracking),
+        alert_service=AlertService(repositories.alerts),
+        trade_journal=TradeJournalService(repositories.trades),
+        mentor_skills=MentorSkillRegistry(mentor_skills_dir, private_mentor_skills_dir),
+        realtime_aggregator=data_gateway.realtime_observer,
+        chart_data=data_gateway.chart_data,
+        jobs=jobs,
+    )

app/backend/bootstrap/runtime.py

@@ -0,0 +1,27 @@
+from __future__ import annotations
+
+import argparse
+from http.server import ThreadingHTTPServer
+from typing import Any
+
+
+def main(handler_class: type[Any] | None = None, service: Any | None = None) -> None:
+    if handler_class is None or service is None:
+        from backend.application import RequestHandler, SERVICE
+
+        handler_class = handler_class or RequestHandler
+        service = service or SERVICE
+    parser = argparse.ArgumentParser(description="Xiaobai stock review web application")
+    parser.add_argument("--host", default="127.0.0.1")
+    parser.add_argument("--port", type=int, default=8765)
+    args = parser.parse_args()
+    server = ThreadingHTTPServer((args.host, args.port), handler_class)
+    print(f"Xiaobai Review Web is running at http://{args.host}:{args.port}")
+    print("Press Ctrl+C to stop.")
+    try:
+        server.serve_forever()
+    except KeyboardInterrupt:
+        pass
+    finally:
+        service._background_stop.set()
+        server.server_close()

app/backend/bootstrap/settings.py

@@ -0,0 +1,55 @@
+from __future__ import annotations
+
+import os
+from dataclasses import dataclass
+from typing import Mapping
+
+from backend.bootstrap.config import load_local_env, save_local_env
+from backend.features.accounts.security import SecretVault
+
+
+def environment_credentials(environment: Mapping[str, str]) -> dict[str, str]:
+    return {
+        "tushare_token": str(environment.get("TUSHARE_TOKEN") or "").strip(),
+        "ifind_refresh_token": str(environment.get("IFIND_REFRESH_TOKEN") or "").strip(),
+        "ifind_access_token": str(environment.get("IFIND_ACCESS_TOKEN") or "").strip(),
+        "platform_llm_primary_api_key": str(
+            environment.get("LLM_PRIMARY_API_KEY") or environment.get("LLM_API_KEY") or ""
+        ).strip(),
+        "platform_llm_primary_base_url": str(
+            environment.get("LLM_PRIMARY_BASE_URL")
+            or environment.get("LLM_BASE_URL")
+            or "https://api.openai.com/v1"
+        ).strip(),
+        "platform_llm_primary_model": str(
+            environment.get("LLM_PRIMARY_MODEL") or environment.get("LLM_MODEL") or ""
+        ).strip(),
+        "platform_llm_fallback_api_key": str(
+            environment.get("LLM_FALLBACK_API_KEY") or ""
+        ).strip(),
+        "platform_llm_fallback_base_url": str(
+            environment.get("LLM_FALLBACK_BASE_URL") or ""
+        ).strip(),
+        "platform_llm_fallback_model": str(
+            environment.get("LLM_FALLBACK_MODEL") or ""
+        ).strip(),
+    }
+
+
+@dataclass(frozen=True)
+class RuntimeSettings:
+    encryption_key: str
+    initial_credentials: dict[str, str]
+
+
+def load_runtime_settings() -> RuntimeSettings:
+    load_local_env()
+    encryption_key = os.environ.get("APP_ENCRYPTION_KEY", "").strip()
+    if not encryption_key:
+        encryption_key = SecretVault.generate_key()
+        save_local_env({"APP_ENCRYPTION_KEY": encryption_key})
+        os.environ["APP_ENCRYPTION_KEY"] = encryption_key
+    return RuntimeSettings(
+        encryption_key=encryption_key,
+        initial_credentials=environment_credentials(os.environ),
+    )

app/backend/data/__init__.py

@@ -0,0 +1,14 @@
+from .gateway import DataGateway, build_data_gateway
+from .policy import DataPolicyError, DataSourcePolicy
+from .quality import DataQualityError, DataQualityGate, QualityEvidence, QualityReport
+
+__all__ = [
+    "DataGateway",
+    "DataPolicyError",
+    "DataQualityError",
+    "DataQualityGate",
+    "DataSourcePolicy",
+    "QualityEvidence",
+    "QualityReport",
+    "build_data_gateway",
+]

app/backend/data/contracts.py

@@ -0,0 +1,29 @@
+from __future__ import annotations
+
+from dataclasses import dataclass
+from typing import Literal
+
+
+DataUsage = Literal["display", "calculation"]
+
+
+@dataclass(frozen=True)
+class ProviderContract:
+    id: str
+    provider_class: str
+    calculation_allowed: bool
+
+
+@dataclass(frozen=True)
+class DatasetContract:
+    id: str
+    entity: str
+    frequency: str
+    primary: str
+    fallbacks: tuple[str, ...]
+    usage: str
+    fields: tuple[str, ...]
+
+    @property
+    def providers(self) -> tuple[str, ...]:
+        return (self.primary, *self.fallbacks)

app/backend/data/gateway.py

@@ -0,0 +1,83 @@
+from __future__ import annotations
+
+from collections.abc import Callable
+from dataclasses import dataclass
+from datetime import datetime
+
+from backend.data.contracts import DataUsage
+from backend.data.policy import DataSourcePolicy
+from backend.data.providers import IfindProvider, TushareProvider
+from backend.data.quality import DataQualityGate, QualityEvidence, QualityReport
+from chart_data_provider import EastmoneyChartClient, MarketChartClient
+from ifind_client import IfindHttpClient
+from realtime_aggregator import WebRealtimeAggregator
+from tushare_client import TushareClient
+
+
+@dataclass(frozen=True)
+class DataGateway:
+    policy: DataSourcePolicy
+    quality: DataQualityGate
+    tushare_provider: TushareProvider
+    ifind_provider: IfindProvider
+    chart_data: MarketChartClient
+    realtime_observer: WebRealtimeAggregator
+
+    @property
+    def ifind(self) -> IfindHttpClient:
+        return self.ifind_provider.client
+
+    def tushare(
+        self,
+        dataset_id: str = "",
+        usage: DataUsage = "calculation",
+    ) -> TushareClient:
+        if dataset_id:
+            self.policy.assert_allowed(dataset_id, "tushare", usage)
+        return self.tushare_provider.client()
+
+    def assert_source(self, dataset_id: str, provider_id: str, usage: DataUsage) -> None:
+        self.policy.assert_allowed(dataset_id, provider_id, usage)
+
+    def provider_chain(self, dataset_id: str, usage: DataUsage) -> tuple[str, ...]:
+        dataset = self.policy.dataset(dataset_id)
+        allowed = []
+        for provider_id in dataset.providers:
+            try:
+                self.policy.assert_allowed(dataset_id, provider_id, usage)
+            except Exception:
+                continue
+            allowed.append(provider_id)
+        if not allowed:
+            raise RuntimeError(f"No permitted provider for {dataset_id} ({usage})")
+        return tuple(allowed)
+
+    def require_quality(
+        self,
+        evidence: QualityEvidence,
+        usage: DataUsage,
+        as_of: str | datetime | None = None,
+    ) -> QualityReport:
+        return self.quality.require(evidence, usage, as_of)
+
+
+def build_data_gateway(
+    credentials: dict[str, object],
+    tushare_token_supplier: Callable[[], str] | None = None,
+) -> DataGateway:
+    ifind = IfindHttpClient(
+        str(credentials.get("ifind_refresh_token") or ""),
+        str(credentials.get("ifind_access_token") or ""),
+    )
+    token_supplier = tushare_token_supplier or (
+        lambda: str(credentials.get("tushare_token") or "")
+    )
+    policy = DataSourcePolicy.load()
+    return DataGateway(
+        policy=policy,
+        quality=DataQualityGate.load(policy),
+        tushare_provider=TushareProvider(token_supplier),
+        ifind_provider=IfindProvider(ifind),
+        chart_data=MarketChartClient(ifind, EastmoneyChartClient()),
+        realtime_observer=WebRealtimeAggregator(),
+    )

app/backend/data/policy.py

@@ -0,0 +1,77 @@
+from __future__ import annotations
+
+import json
+from pathlib import Path
+
+from backend.bootstrap.config import APP_DIR
+from backend.data.contracts import DataUsage, DatasetContract, ProviderContract
+
+
+class DataPolicyError(RuntimeError):
+    pass
+
+
+class DataSourcePolicy:
+    def __init__(
+        self,
+        providers: dict[str, ProviderContract],
+        datasets: dict[str, DatasetContract],
+    ) -> None:
+        self.providers = dict(providers)
+        self.datasets = dict(datasets)
+
+    @classmethod
+    def load(cls, path: Path | None = None) -> "DataSourcePolicy":
+        config_path = path or APP_DIR / "config" / "data-fields.config.json"
+        payload = json.loads(config_path.read_text(encoding="utf-8"))
+        providers = {
+            provider_id: ProviderContract(
+                id=provider_id,
+                provider_class=str(item["class"]),
+                calculation_allowed=bool(item["calculation_allowed"]),
+            )
+            for provider_id, item in payload["providers"].items()
+        }
+        datasets = {
+            item["id"]: DatasetContract(
+                id=str(item["id"]),
+                entity=str(item["entity"]),
+                frequency=str(item["frequency"]),
+                primary=str(item["primary"]),
+                fallbacks=tuple(str(value) for value in item.get("fallbacks", [])),
+                usage=str(item["usage"]),
+                fields=tuple(str(value) for value in item.get("fields", [])),
+            )
+            for item in payload["datasets"]
+        }
+        return cls(providers, datasets)
+
+    def dataset(self, dataset_id: str) -> DatasetContract:
+        try:
+            return self.datasets[dataset_id]
+        except KeyError as exc:
+            raise DataPolicyError(f"Unregistered dataset: {dataset_id}") from exc
+
+    def assert_allowed(
+        self,
+        dataset_id: str,
+        provider_id: str,
+        usage: DataUsage,
+    ) -> DatasetContract:
+        dataset = self.dataset(dataset_id)
+        if dataset.usage == "blocked":
+            raise DataPolicyError(f"Dataset is blocked: {dataset_id}")
+        if provider_id not in dataset.providers:
+            raise DataPolicyError(
+                f"Provider {provider_id} is not registered for dataset {dataset_id}"
+            )
+        try:
+            provider = self.providers[provider_id]
+        except KeyError as exc:
+            raise DataPolicyError(f"Unregistered provider: {provider_id}") from exc
+        if usage == "calculation":
+            if dataset.usage != "calculation" or not provider.calculation_allowed:
+                raise DataPolicyError(
+                    f"Provider {provider_id} cannot calculate dataset {dataset_id}"
+                )
+        return dataset

app/backend/data/providers/__init__.py

@@ -0,0 +1,4 @@
+from .ifind import IfindProvider
+from .tushare import TushareProvider
+
+__all__ = ["IfindProvider", "TushareProvider"]

app/backend/data/providers/ifind.py

@@ -0,0 +1,11 @@
+from __future__ import annotations
+
+from ifind_client import IfindHttpClient
+
+
+class IfindProvider:
+    def __init__(self, client: IfindHttpClient) -> None:
+        self.client = client
+
+    def set_credentials(self, refresh_token: str, access_token: str = "") -> None:
+        self.client.set_credentials(refresh_token, access_token)

app/backend/data/providers/tushare.py

@@ -0,0 +1,18 @@
+from __future__ import annotations
+
+from collections.abc import Callable
+
+from tushare_client import TushareClient
+
+
+class TushareProvider:
+    def __init__(
+        self,
+        token_supplier: Callable[[], str],
+        client_factory: Callable[[str], TushareClient] = TushareClient,
+    ) -> None:
+        self._token_supplier = token_supplier
+        self._client_factory = client_factory
+
+    def client(self) -> TushareClient:
+        return self._client_factory(str(self._token_supplier() or "").strip())

app/backend/data/quality.py

@@ -0,0 +1,202 @@
+from __future__ import annotations
+
+import json
+from dataclasses import dataclass
+from datetime import date, datetime, time, timedelta, timezone
+from pathlib import Path
+from typing import Any
+from zoneinfo import ZoneInfo, ZoneInfoNotFoundError
+
+from backend.bootstrap.config import APP_DIR
+from backend.data.contracts import DataUsage
+from backend.data.policy import DataPolicyError, DataSourcePolicy
+
+
+class DataQualityError(RuntimeError):
+    pass
+
+
+def market_timezone(name: str = "Asia/Shanghai"):
+    try:
+        return ZoneInfo(name)
+    except ZoneInfoNotFoundError:
+        if name != "Asia/Shanghai":
+            raise
+        return timezone(timedelta(hours=8), name)
+
+
+@dataclass(frozen=True)
+class QualityEvidence:
+    dataset_id: str
+    provider_id: str
+    data_time: str | datetime
+    observed_at: str | datetime
+    actual_count: int | None = None
+    expected_count: int | None = None
+    units: dict[str, str] | None = None
+    adjustment: str = ""
+    available_at: str | datetime | None = None
+
+
+@dataclass(frozen=True)
+class QualityReport:
+    accepted: bool
+    dataset_id: str
+    provider_id: str
+    usage: DataUsage
+    coverage_ratio: float | None
+    age_seconds: float
+    issues: tuple[str, ...]
+
+    def as_dict(self) -> dict[str, Any]:
+        return {
+            "accepted": self.accepted,
+            "dataset_id": self.dataset_id,
+            "provider_id": self.provider_id,
+            "usage": self.usage,
+            "coverage_ratio": self.coverage_ratio,
+            "age_seconds": round(self.age_seconds, 3),
+            "issues": list(self.issues),
+        }
+
+
+class DataQualityGate:
+    def __init__(
+        self,
+        source_policy: DataSourcePolicy,
+        payload: dict[str, Any],
+    ) -> None:
+        self.source_policy = source_policy
+        self.timezone = market_timezone(
+            str(payload.get("timezone") or "Asia/Shanghai")
+        )
+        self.defaults = dict(payload.get("defaults") or {})
+        self.unit_profiles = dict(payload.get("unit_profiles") or {})
+        self.rules = dict(payload.get("datasets") or {})
+
+    @classmethod
+    def load(
+        cls,
+        source_policy: DataSourcePolicy,
+        path: Path | None = None,
+    ) -> "DataQualityGate":
+        config_path = path or APP_DIR / "config" / "data-quality.config.json"
+        payload = json.loads(config_path.read_text(encoding="utf-8"))
+        return cls(source_policy, payload)
+
+    def evaluate(
+        self,
+        evidence: QualityEvidence,
+        usage: DataUsage,
+        as_of: str | datetime | None = None,
+    ) -> QualityReport:
+        issues: list[str] = []
+        try:
+            self.source_policy.assert_allowed(
+                evidence.dataset_id, evidence.provider_id, usage
+            )
+        except DataPolicyError as exc:
+            issues.append(str(exc))
+
+        rule = self.rules.get(evidence.dataset_id)
+        if rule is None:
+            issues.append(f"Missing quality rule: {evidence.dataset_id}")
+            rule = {}
+        if rule.get("blocked"):
+            issues.append(f"Dataset quality is blocked: {evidence.dataset_id}")
+
+        reference = self._datetime(as_of or datetime.now(self.timezone))
+        data_time = self._datetime(evidence.data_time)
+        observed_at = self._datetime(evidence.observed_at)
+        tolerance = float(
+            (self.defaults.get(usage) or {}).get("future_tolerance_seconds") or 0
+        )
+        if data_time > reference + timedelta(seconds=tolerance):
+            issues.append("Data time is later than the evaluation time")
+        if observed_at > reference + timedelta(seconds=tolerance):
+            issues.append("Observation time is later than the evaluation time")
+        if observed_at < data_time:
+            issues.append("Observation time precedes data time")
+
+        age_seconds = max(0.0, (reference - data_time).total_seconds())
+        freshness = rule.get("freshness_seconds")
+        if freshness is not None and age_seconds > float(freshness):
+            issues.append(
+                f"Data is stale: {age_seconds:.1f}s exceeds {float(freshness):.1f}s"
+            )
+
+        coverage_ratio: float | None = None
+        if evidence.expected_count is not None:
+            if evidence.expected_count <= 0:
+                issues.append("Expected count must be positive")
+            elif evidence.actual_count is None or evidence.actual_count < 0:
+                issues.append("Actual count is missing or invalid")
+            else:
+                coverage_ratio = min(1.0, evidence.actual_count / evidence.expected_count)
+                minimum = float(rule.get("min_coverage_ratio") or 0)
+                if coverage_ratio < minimum:
+                    issues.append(
+                        f"Coverage {coverage_ratio:.3f} is below {minimum:.3f}"
+                    )
+
+        required_adjustment = str(rule.get("adjustment") or "")
+        if required_adjustment and evidence.adjustment != required_adjustment:
+            issues.append(
+                f"Adjustment {evidence.adjustment or 'missing'} does not match {required_adjustment}"
+            )
+
+        profile_id = str(rule.get("unit_profile") or "none")
+        required_units = dict(self.unit_profiles.get(profile_id) or {})
+        supplied_units = evidence.units or {}
+        for field, expected_unit in required_units.items():
+            actual_unit = supplied_units.get(field)
+            if actual_unit != expected_unit:
+                issues.append(
+                    f"Unit for {field} is {actual_unit or 'missing'}, expected {expected_unit}"
+                )
+
+        if rule.get("point_in_time") == "announcement_date" and usage == "calculation":
+            if evidence.available_at is None:
+                issues.append("Point-in-time availability is missing")
+            elif self._datetime(evidence.available_at) > reference:
+                issues.append("Point-in-time data was not available at evaluation time")
+
+        return QualityReport(
+            accepted=not issues,
+            dataset_id=evidence.dataset_id,
+            provider_id=evidence.provider_id,
+            usage=usage,
+            coverage_ratio=coverage_ratio,
+            age_seconds=age_seconds,
+            issues=tuple(issues),
+        )
+
+    def require(
+        self,
+        evidence: QualityEvidence,
+        usage: DataUsage,
+        as_of: str | datetime | None = None,
+    ) -> QualityReport:
+        report = self.evaluate(evidence, usage, as_of)
+        if not report.accepted:
+            raise DataQualityError("; ".join(report.issues))
+        return report
+
+    def _datetime(self, value: str | datetime) -> datetime:
+        if isinstance(value, datetime):
+            parsed = value
+        else:
+            text = str(value or "").strip()
+            if not text:
+                raise DataQualityError("Quality evidence timestamp is missing")
+            try:
+                parsed = datetime.fromisoformat(text)
+            except ValueError:
+                try:
+                    day = date.fromisoformat(text)
+                except ValueError as exc:
+                    raise DataQualityError(f"Invalid quality timestamp: {text}") from exc
+                parsed = datetime.combine(day, time.min)
+        if parsed.tzinfo is None:
+            return parsed.replace(tzinfo=self.timezone)
+        return parsed.astimezone(self.timezone)

app/backend/database/__init__.py

@@ -0,0 +1,11 @@
+from .connection import ManagedConnection, SQLiteConnectionFactory
+from .migrations import MIGRATIONS, Migration, MigrationError, MigrationRunner
+
+__all__ = [
+    "MIGRATIONS",
+    "ManagedConnection",
+    "Migration",
+    "MigrationError",
+    "MigrationRunner",
+    "SQLiteConnectionFactory",
+]

app/backend/database/connection.py

@@ -0,0 +1,33 @@
+from __future__ import annotations
+
+import sqlite3
+from dataclasses import dataclass
+from pathlib import Path
+
+
+class ManagedConnection(sqlite3.Connection):
+    """Commit or roll back, then release the SQLite handle on context exit."""
+
+    def __exit__(self, exc_type, exc_value, traceback):
+        try:
+            return super().__exit__(exc_type, exc_value, traceback)
+        finally:
+            self.close()
+
+
+@dataclass(frozen=True)
+class SQLiteConnectionFactory:
+    path: Path
+    timeout_seconds: float = 20
+
+    def connect(self) -> sqlite3.Connection:
+        connection = sqlite3.connect(
+            self.path,
+            timeout=self.timeout_seconds,
+            factory=ManagedConnection,
+        )
+        connection.row_factory = sqlite3.Row
+        connection.execute("PRAGMA journal_mode=WAL")
+        connection.execute("PRAGMA foreign_keys=ON")
+        connection.execute("PRAGMA busy_timeout=20000")
+        return connection

app/backend/database/migrations/__init__.py

@@ -0,0 +1,8 @@
+from .m0001_adopt_legacy import MIGRATION as M0001_ADOPT_LEGACY
+from .m0002_job_runs import MIGRATION as M0002_JOB_RUNS
+from .m0003_llm_audit import MIGRATION as M0003_LLM_AUDIT
+from .runner import Migration, MigrationError, MigrationRunner
+
+MIGRATIONS = (M0001_ADOPT_LEGACY, M0002_JOB_RUNS, M0003_LLM_AUDIT)
+
+__all__ = ["MIGRATIONS", "Migration", "MigrationError", "MigrationRunner"]

app/backend/database/migrations/m0001_adopt_legacy.py

@@ -0,0 +1,42 @@
+from __future__ import annotations
+
+import sqlite3
+
+from backend.database.migrations.runner import Migration, MigrationError
+
+
+REQUIRED_TABLES = frozenset(
+    {
+        "users",
+        "user_sessions",
+        "dashboard_snapshots",
+        "watchlist",
+        "review_notes",
+        "stock_master",
+        "daily_bars",
+        "screener_runs",
+        "mentor_messages",
+        "trade_entries",
+        "heaven_readings",
+    }
+)
+
+
+def adopt_legacy_schema(connection: sqlite3.Connection) -> None:
+    tables = {
+        str(row["name"])
+        for row in connection.execute(
+            "SELECT name FROM sqlite_master WHERE type = 'table'"
+        )
+    }
+    missing = sorted(REQUIRED_TABLES - tables)
+    if missing:
+        raise MigrationError(f"Legacy schema is incomplete: {', '.join(missing)}")
+
+
+MIGRATION = Migration(
+    version="0001",
+    name="adopt_legacy_schema",
+    action=adopt_legacy_schema,
+    signature="required-tables:v1:" + ",".join(sorted(REQUIRED_TABLES)),
+)

app/backend/database/migrations/m0002_job_runs.py

@@ -0,0 +1,47 @@
+from __future__ import annotations
+
+import sqlite3
+
+from backend.database.migrations.runner import Migration
+
+
+def create_job_runs(connection: sqlite3.Connection) -> None:
+    connection.execute(
+        """
+        CREATE TABLE IF NOT EXISTS job_runs (
+            id INTEGER PRIMARY KEY AUTOINCREMENT,
+            job_id TEXT NOT NULL,
+            idempotency_key TEXT NOT NULL,
+            status TEXT NOT NULL,
+            attempt INTEGER NOT NULL DEFAULT 1,
+            started_at TEXT NOT NULL,
+            finished_at TEXT,
+            elapsed_ms INTEGER NOT NULL DEFAULT 0,
+            error_code TEXT NOT NULL DEFAULT '',
+            message TEXT NOT NULL DEFAULT '',
+            output_version TEXT NOT NULL DEFAULT '',
+            metadata TEXT NOT NULL DEFAULT '{}',
+            UNIQUE(job_id, idempotency_key, attempt)
+        )
+        """
+    )
+    connection.execute(
+        """
+        CREATE INDEX IF NOT EXISTS idx_job_runs_job_started
+        ON job_runs(job_id, started_at DESC, id DESC)
+        """
+    )
+    connection.execute(
+        """
+        CREATE INDEX IF NOT EXISTS idx_job_runs_status
+        ON job_runs(status, started_at DESC, id DESC)
+        """
+    )
+
+
+MIGRATION = Migration(
+    version="0002",
+    name="create_job_runs",
+    action=create_job_runs,
+    signature="job-runs:v1:id,job,key,status,attempt,times,elapsed,error,output,metadata",
+)

app/backend/database/migrations/m0003_llm_audit.py

@@ -0,0 +1,32 @@
+from __future__ import annotations
+
+import sqlite3
+
+from backend.database.migrations.runner import Migration
+
+
+def extend_llm_audit(connection: sqlite3.Connection) -> None:
+    columns = {
+        str(row["name"])
+        for row in connection.execute("PRAGMA table_info(llm_usage)")
+    }
+    additions = (
+        ("role", "TEXT NOT NULL DEFAULT ''"),
+        ("prompt_version", "TEXT NOT NULL DEFAULT ''"),
+        ("error_code", "TEXT NOT NULL DEFAULT ''"),
+        ("input_tokens", "INTEGER NOT NULL DEFAULT 0"),
+        ("output_tokens", "INTEGER NOT NULL DEFAULT 0"),
+    )
+    for name, declaration in additions:
+        if name not in columns:
+            connection.execute(
+                f"ALTER TABLE llm_usage ADD COLUMN {name} {declaration}"
+            )
+
+
+MIGRATION = Migration(
+    version="0003",
+    name="extend_llm_audit",
+    action=extend_llm_audit,
+    signature="llm-audit:v1:role,prompt-version,error-code,input-tokens,output-tokens",
+)

app/backend/database/migrations/runner.py

@@ -0,0 +1,98 @@
+from __future__ import annotations
+
+import hashlib
+import sqlite3
+from collections.abc import Callable, Iterable
+from dataclasses import dataclass
+from datetime import datetime, timezone
+
+
+MigrationAction = Callable[[sqlite3.Connection], None]
+
+
+class MigrationError(RuntimeError):
+    pass
+
+
+@dataclass(frozen=True)
+class Migration:
+    version: str
+    name: str
+    action: MigrationAction
+    signature: str
+
+    @property
+    def checksum(self) -> str:
+        return hashlib.sha256(self.signature.encode("utf-8")).hexdigest()
+
+
+class MigrationRunner:
+    def apply(
+        self,
+        connection: sqlite3.Connection,
+        migrations: Iterable[Migration],
+    ) -> tuple[str, ...]:
+        ordered = sorted(migrations, key=lambda item: item.version)
+        versions = [item.version for item in ordered]
+        if versions != sorted(set(versions)):
+            raise MigrationError("Migration versions must be unique and ordered")
+        self._ensure_ledger(connection)
+        applied = {
+            str(row["version"]): str(row["checksum"])
+            for row in connection.execute(
+                "SELECT version, checksum FROM schema_migrations ORDER BY version"
+            )
+        }
+        known = set(versions)
+        unknown = sorted(set(applied) - known)
+        if unknown:
+            raise MigrationError(f"Database contains unknown migrations: {', '.join(unknown)}")
+
+        completed: list[str] = []
+        for migration in ordered:
+            existing = applied.get(migration.version)
+            if existing:
+                if existing != migration.checksum:
+                    raise MigrationError(
+                        f"Migration checksum changed: {migration.version} {migration.name}"
+                    )
+                continue
+            savepoint = f"migration_{migration.version.replace('-', '_')}"
+            connection.execute(f"SAVEPOINT {savepoint}")
+            try:
+                migration.action(connection)
+                connection.execute(
+                    """
+                    INSERT INTO schema_migrations
+                        (version, name, checksum, applied_at)
+                    VALUES (?, ?, ?, ?)
+                    """,
+                    (
+                        migration.version,
+                        migration.name,
+                        migration.checksum,
+                        datetime.now(timezone.utc).isoformat(),
+                    ),
+                )
+                connection.execute(f"RELEASE SAVEPOINT {savepoint}")
+            except Exception as exc:
+                connection.execute(f"ROLLBACK TO SAVEPOINT {savepoint}")
+                connection.execute(f"RELEASE SAVEPOINT {savepoint}")
+                raise MigrationError(
+                    f"Migration failed: {migration.version} {migration.name}"
+                ) from exc
+            completed.append(migration.version)
+        return tuple(completed)
+
+    @staticmethod
+    def _ensure_ledger(connection: sqlite3.Connection) -> None:
+        connection.execute(
+            """
+            CREATE TABLE IF NOT EXISTS schema_migrations (
+                version TEXT PRIMARY KEY,
+                name TEXT NOT NULL,
+                checksum TEXT NOT NULL,
+                applied_at TEXT NOT NULL
+            )
+            """
+        )

app/backend/database/repositories/__init__.py

@@ -0,0 +1,21 @@
+from .ports import AlertRepository, StrategyTrackingRepository, TradeJournalRepository
+from .sqlite import (
+    RepositoryBundle,
+    SQLiteAlertRepository,
+    SQLiteStrategyTrackingRepository,
+    SQLiteTradeJournalRepository,
+    build_repository_bundle,
+    require_user_id,
+)
+
+__all__ = [
+    "AlertRepository",
+    "RepositoryBundle",
+    "SQLiteAlertRepository",
+    "SQLiteStrategyTrackingRepository",
+    "SQLiteTradeJournalRepository",
+    "StrategyTrackingRepository",
+    "TradeJournalRepository",
+    "build_repository_bundle",
+    "require_user_id",
+]

app/backend/database/repositories/ports.py

@@ -0,0 +1,52 @@
+from __future__ import annotations
+
+from typing import Any, Protocol
+
+
+class AlertRepository(Protocol):
+    def save_alert(
+        self, user_id: int, kind: str, title: str, content: str,
+        available_date: str, code: str, dedupe_key: str,
+    ) -> int: ...
+
+    def list_alerts(
+        self, user_id: int, as_of: str, unread_only: bool = False, limit: int = 100,
+    ) -> list[dict[str, Any]]: ...
+
+    def count_unread_alerts(self, user_id: int, as_of: str) -> int: ...
+
+    def mark_alert_read(self, user_id: int, alert_id: int) -> bool: ...
+
+    def mark_all_alerts_read(self, user_id: int, as_of: str) -> int: ...
+
+    def delete_alert(self, user_id: int, alert_id: int) -> bool: ...
+
+
+class TradeJournalRepository(Protocol):
+    def save_trade_entry(self, *args: Any, **kwargs: Any) -> int: ...
+
+    def list_trade_entries(
+        self, user_id: int, start_date: str = "", end_date: str = "",
+        code: str = "", limit: int = 300,
+    ) -> list[dict[str, Any]]: ...
+
+    def delete_trade_entry(self, user_id: int, trade_id: int) -> bool: ...
+
+
+class StrategyTrackingRepository(Protocol):
+    def save_strategy_tracks(
+        self, user_id: int, run_id: int, selection_date: str,
+        strategy_name: str, candidates: list[dict[str, Any]],
+    ) -> int: ...
+
+    def get_screener_run(self, user_id: int, run_id: int) -> dict[str, Any] | None: ...
+
+    def delete_strategy_track(self, user_id: int, track_id: int) -> bool: ...
+
+    def list_strategy_tracks(
+        self, user_id: int, limit_batches: int = 12,
+    ) -> list[dict[str, Any]]: ...
+
+    def load_tracking_bars(
+        self, targets: list[tuple[str, str]], limit: int = 5,
+    ) -> dict[tuple[str, str], list[dict[str, Any]]]: ...

app/backend/database/repositories/sqlite.py

@@ -0,0 +1,108 @@
+from __future__ import annotations
+
+from dataclasses import dataclass
+from typing import Any
+
+from database import ReviewDatabase
+
+
+def require_user_id(value: int) -> int:
+    user_id = int(value)
+    if user_id <= 0:
+        raise ValueError("A positive account owner is required")
+    return user_id
+
+
+@dataclass(frozen=True)
+class SQLiteAlertRepository:
+    database: ReviewDatabase
+
+    def save_alert(self, user_id: int, *args: Any, **kwargs: Any) -> int:
+        return self.database.save_alert(require_user_id(user_id), *args, **kwargs)
+
+    def list_alerts(
+        self, user_id: int, as_of: str, unread_only: bool = False, limit: int = 100,
+    ) -> list[dict[str, Any]]:
+        return self.database.list_alerts(
+            require_user_id(user_id), as_of, unread_only, limit
+        )
+
+    def count_unread_alerts(self, user_id: int, as_of: str) -> int:
+        return self.database.count_unread_alerts(require_user_id(user_id), as_of)
+
+    def mark_alert_read(self, user_id: int, alert_id: int) -> bool:
+        return self.database.mark_alert_read(require_user_id(user_id), alert_id)
+
+    def mark_all_alerts_read(self, user_id: int, as_of: str) -> int:
+        return self.database.mark_all_alerts_read(require_user_id(user_id), as_of)
+
+    def delete_alert(self, user_id: int, alert_id: int) -> bool:
+        return self.database.delete_alert(require_user_id(user_id), alert_id)
+
+
+@dataclass(frozen=True)
+class SQLiteTradeJournalRepository:
+    database: ReviewDatabase
+
+    def save_trade_entry(self, user_id: int, *args: Any, **kwargs: Any) -> int:
+        return self.database.save_trade_entry(require_user_id(user_id), *args, **kwargs)
+
+    def list_trade_entries(
+        self, user_id: int, start_date: str = "", end_date: str = "",
+        code: str = "", limit: int = 300,
+    ) -> list[dict[str, Any]]:
+        return self.database.list_trade_entries(
+            require_user_id(user_id), start_date, end_date, code, limit
+        )
+
+    def delete_trade_entry(self, user_id: int, trade_id: int) -> bool:
+        return self.database.delete_trade_entry(require_user_id(user_id), trade_id)
+
+
+@dataclass(frozen=True)
+class SQLiteStrategyTrackingRepository:
+    database: ReviewDatabase
+
+    def save_strategy_tracks(
+        self, user_id: int, run_id: int, selection_date: str,
+        strategy_name: str, candidates: list[dict[str, Any]],
+    ) -> int:
+        return self.database.save_strategy_tracks(
+            require_user_id(user_id), run_id, selection_date, strategy_name, candidates
+        )
+
+    def get_screener_run(self, user_id: int, run_id: int) -> dict[str, Any] | None:
+        owner_id = int(user_id)
+        if owner_id < 0:
+            raise ValueError("Account owner cannot be negative")
+        return self.database.get_screener_run(owner_id, run_id)
+
+    def delete_strategy_track(self, user_id: int, track_id: int) -> bool:
+        return self.database.delete_strategy_track(require_user_id(user_id), track_id)
+
+    def list_strategy_tracks(
+        self, user_id: int, limit_batches: int = 12,
+    ) -> list[dict[str, Any]]:
+        return self.database.list_strategy_tracks(
+            require_user_id(user_id), limit_batches
+        )
+
+    def load_tracking_bars(
+        self, targets: list[tuple[str, str]], limit: int = 5,
+    ) -> dict[tuple[str, str], list[dict[str, Any]]]:
+        return self.database.load_tracking_bars(targets, limit)
+
+
+@dataclass(frozen=True)
+class RepositoryBundle:
+    alerts: SQLiteAlertRepository
+    trades: SQLiteTradeJournalRepository
+    strategy_tracking: SQLiteStrategyTrackingRepository
+
+
+def build_repository_bundle(database: ReviewDatabase) -> RepositoryBundle:
+    return RepositoryBundle(
+        alerts=SQLiteAlertRepository(database),
+        trades=SQLiteTradeJournalRepository(database),
+        strategy_tracking=SQLiteStrategyTrackingRepository(database),
+    )

app/backend/features/__init__.py

@@ -0,0 +1 @@
+"""Feature-owned application services."""

app/backend/features/accounts/__init__.py

@@ -0,0 +1,24 @@
+__all__ = [
+    "AccountHttpMixin",
+    "AccountService",
+    "SecretVault",
+    "hash_password",
+    "token_hash",
+    "verify_password",
+]
+
+
+def __getattr__(name: str):
+    if name == "AccountHttpMixin":
+        from .http import AccountHttpMixin
+
+        return AccountHttpMixin
+    if name == "AccountService":
+        from .service import AccountService
+
+        return AccountService
+    if name in {"SecretVault", "hash_password", "token_hash", "verify_password"}:
+        from . import security
+
+        return getattr(security, name)
+    raise AttributeError(name)

app/backend/features/accounts/http.py

@@ -0,0 +1,110 @@
+from __future__ import annotations
+
+import json
+from http import HTTPStatus
+
+
+class AccountHttpMixin:
+    def auth_register(self) -> None:
+        try:
+            body = self.read_json_body()
+            result = self.application_service.register_account(
+                str(body.get("username") or ""),
+                str(body.get("password") or ""),
+            )
+            self.send_json(
+                {
+                    "ok": True,
+                    "authenticated": True,
+                    "user": result["user"],
+                    "csrf_token": result["csrf_token"],
+                },
+                HTTPStatus.CREATED,
+                {"Set-Cookie": self.session_cookie(result["session_token"])},
+            )
+        except (ValueError, json.JSONDecodeError) as exc:
+            self.send_json({"error": str(exc)}, HTTPStatus.BAD_REQUEST)
+
+    def auth_login(self) -> None:
+        try:
+            body = self.read_json_body()
+            result = self.application_service.login_account(
+                str(body.get("username") or ""),
+                str(body.get("password") or ""),
+            )
+            self.send_json(
+                {
+                    "ok": True,
+                    "authenticated": True,
+                    "user": result["user"],
+                    "csrf_token": result["csrf_token"],
+                },
+                headers={"Set-Cookie": self.session_cookie(result["session_token"])},
+            )
+        except (ValueError, json.JSONDecodeError) as exc:
+            self.send_json({"error": str(exc)}, HTTPStatus.UNAUTHORIZED)
+
+    def auth_me(self) -> None:
+        service = self.application_service
+        if not self.require_auth(send_error=False):
+            self.send_json(
+                {
+                    "ok": True,
+                    "authenticated": False,
+                    "registration_required": service.database.count_users() == 0,
+                }
+            )
+            return
+        self.send_json(
+            {
+                "ok": True,
+                "authenticated": True,
+                "user": {
+                    "id": int(self.auth_user["id"]),
+                    "username": str(self.auth_user["username"]),
+                    "role": str(self.auth_user.get("role") or "user"),
+                    "membership": service.membership(),
+                },
+                "csrf_token": str(self.auth_user["csrf_token"]),
+            }
+        )
+
+    def auth_logout(self) -> None:
+        raw_token = self.session_token()
+        if raw_token:
+            from backend.features.accounts.security import token_hash
+
+            self.application_service.database.delete_session(token_hash(raw_token))
+        self.send_json(
+            {"ok": True},
+            headers={"Set-Cookie": self.session_cookie("", clear=True)},
+        )
+
+    def save_birth_profile(self) -> None:
+        try:
+            body = self.read_json_body()
+            personal = self.application_service.save_birth_profile(body)
+            self.send_json({"ok": True, "personal": personal})
+        except (ValueError, json.JSONDecodeError) as exc:
+            self.send_json({"error": str(exc)}, HTTPStatus.BAD_REQUEST)
+
+    def change_password(self) -> None:
+        try:
+            body = self.read_json_body()
+            current = str(body.get("current_password") or "")
+            new = str(body.get("new_password") or "")
+            confirmation = str(body.get("confirm_password") or "")
+            if new != confirmation:
+                raise ValueError("两次输入的新密码不一致。")
+            self.application_service.change_password(current, new)
+            self.send_json({"ok": True})
+        except (ValueError, json.JSONDecodeError) as exc:
+            self.send_json({"error": str(exc)}, HTTPStatus.BAD_REQUEST)
+
+    def save_membership(self) -> None:
+        try:
+            service = self.application_service
+            service.update_membership(self.read_json_body())
+            self.send_json({"ok": True, "users": service.admin_users()})
+        except (ValueError, json.JSONDecodeError) as exc:
+            self.send_json({"error": str(exc)}, HTTPStatus.BAD_REQUEST)

app/backend/features/accounts/repository.py

@@ -0,0 +1,236 @@
+from __future__ import annotations
+
+import sqlite3
+from datetime import datetime, timezone
+from typing import Any
+
+
+class AccountRepositoryMixin:
+    """Original SQLite account persistence methods, moved without query changes."""
+
+    def count_users(self) -> int:
+        with self.connect() as connection:
+            row = connection.execute("SELECT COUNT(*) AS total FROM users").fetchone()
+        return int(row["total"] if row else 0)
+
+    def first_user_id(self) -> int:
+        with self.connect() as connection:
+            row = connection.execute("SELECT MIN(id) AS id FROM users").fetchone()
+        return int(row["id"] or 0) if row else 0
+
+    def create_user(
+        self,
+        username: str,
+        password_salt: str,
+        password_hash: str,
+    ) -> dict[str, Any]:
+        now = datetime.now(timezone.utc).isoformat(timespec="seconds")
+        try:
+            with self.connect() as connection:
+                role = "admin" if int(connection.execute("SELECT COUNT(*) FROM users").fetchone()[0]) == 0 else "user"
+                cursor = connection.execute(
+                    """
+                    INSERT INTO users
+                        (username, password_salt, password_hash, role, created_at, updated_at)
+                    VALUES (?, ?, ?, ?, ?, ?)
+                    """,
+                    (username, password_salt, password_hash, role, now, now),
+                )
+                user_id = int(cursor.lastrowid)
+        except sqlite3.IntegrityError as exc:
+            raise ValueError("该账号名已被使用。") from exc
+        return {"id": user_id, "username": username, "role": role, "created_at": now}
+
+    def user_by_username(self, username: str) -> dict[str, Any] | None:
+        with self.connect() as connection:
+            row = connection.execute(
+                """
+                SELECT id, username, password_salt, password_hash, role, llm_mode,
+                       membership_status, membership_plan, membership_starts_at,
+                       membership_expires_at, created_at
+                FROM users WHERE username = ? COLLATE NOCASE
+                """,
+                (username,),
+            ).fetchone()
+        return dict(row) if row else None
+
+    def user_password(self, user_id: int) -> dict[str, str] | None:
+        with self.connect() as connection:
+            row = connection.execute(
+                "SELECT password_salt, password_hash FROM users WHERE id = ?",
+                (user_id,),
+            ).fetchone()
+        return dict(row) if row else None
+
+    def update_user_password(self, user_id: int, password_salt: str, password_hash: str) -> bool:
+        now = datetime.now(timezone.utc).isoformat(timespec="seconds")
+        with self.connect() as connection:
+            cursor = connection.execute(
+                "UPDATE users SET password_salt = ?, password_hash = ?, updated_at = ? WHERE id = ?",
+                (password_salt, password_hash, now, user_id),
+            )
+        return cursor.rowcount > 0
+
+    def delete_user(self, user_id: int) -> bool:
+        with self.connect() as connection:
+            cursor = connection.execute("DELETE FROM users WHERE id = ?", (user_id,))
+            return cursor.rowcount > 0
+
+    def create_session(
+        self,
+        session_hash: str,
+        user_id: int,
+        csrf_token: str,
+        expires_at: str,
+    ) -> None:
+        now = datetime.now(timezone.utc).isoformat(timespec="seconds")
+        with self.connect() as connection:
+            connection.execute("DELETE FROM user_sessions WHERE expires_at <= ?", (now,))
+            connection.execute(
+                """
+                INSERT INTO user_sessions
+                    (token_hash, user_id, csrf_token, expires_at, created_at, last_seen_at)
+                VALUES (?, ?, ?, ?, ?, ?)
+                """,
+                (session_hash, user_id, csrf_token, expires_at, now, now),
+            )
+
+    def session_user(self, session_hash: str) -> dict[str, Any] | None:
+        now = datetime.now(timezone.utc).isoformat(timespec="seconds")
+        with self.connect() as connection:
+            row = connection.execute(
+                """
+                SELECT u.id, u.username, u.role, u.llm_mode, u.membership_status,
+                       u.membership_plan, u.membership_starts_at, u.membership_expires_at,
+                       u.created_at, s.csrf_token, s.expires_at
+                FROM user_sessions AS s
+                JOIN users AS u ON u.id = s.user_id
+                WHERE s.token_hash = ? AND s.expires_at > ?
+                """,
+                (session_hash, now),
+            ).fetchone()
+            if row:
+                connection.execute(
+                    "UPDATE user_sessions SET last_seen_at = ? WHERE token_hash = ?",
+                    (now, session_hash),
+                )
+        return dict(row) if row else None
+
+    def delete_session(self, session_hash: str) -> bool:
+        with self.connect() as connection:
+            cursor = connection.execute(
+                "DELETE FROM user_sessions WHERE token_hash = ?",
+                (session_hash,),
+            )
+            return cursor.rowcount > 0
+
+    def get_user_credentials(self, user_id: int) -> str:
+        with self.connect() as connection:
+            row = connection.execute(
+                "SELECT encrypted_payload FROM user_credentials WHERE user_id = ?",
+                (user_id,),
+            ).fetchone()
+        return str(row["encrypted_payload"]) if row else ""
+
+    def save_user_credentials(self, user_id: int, encrypted_payload: str) -> None:
+        now = datetime.now(timezone.utc).isoformat(timespec="seconds")
+        with self.connect() as connection:
+            connection.execute(
+                """
+                INSERT INTO user_credentials (user_id, encrypted_payload, updated_at)
+                VALUES (?, ?, ?)
+                ON CONFLICT(user_id) DO UPDATE SET
+                    encrypted_payload = excluded.encrypted_payload,
+                    updated_at = excluded.updated_at
+                """,
+                (user_id, encrypted_payload, now),
+            )
+
+    def list_user_credentials(self) -> list[dict[str, Any]]:
+        with self.connect() as connection:
+            rows = connection.execute(
+                "SELECT user_id, encrypted_payload FROM user_credentials ORDER BY user_id"
+            ).fetchall()
+        return [dict(row) for row in rows]
+
+    def user_access(self, user_id: int) -> dict[str, Any] | None:
+        with self.connect() as connection:
+            row = connection.execute(
+                """
+                SELECT id, username, role, llm_mode, membership_status, membership_plan,
+                       membership_starts_at, membership_expires_at, created_at
+                FROM users WHERE id = ?
+                """,
+                (user_id,),
+            ).fetchone()
+        return dict(row) if row else None
+
+    def list_users(self) -> list[dict[str, Any]]:
+        with self.connect() as connection:
+            rows = connection.execute(
+                """
+                SELECT id, username, role, llm_mode, membership_status, membership_plan,
+                       membership_starts_at, membership_expires_at, created_at
+                FROM users ORDER BY id
+                """
+            ).fetchall()
+        return [dict(row) for row in rows]
+
+    def update_user_llm_mode(self, user_id: int, mode: str) -> None:
+        now = datetime.now(timezone.utc).isoformat(timespec="seconds")
+        with self.connect() as connection:
+            connection.execute(
+                "UPDATE users SET llm_mode = ?, updated_at = ? WHERE id = ?",
+                (mode, now, user_id),
+            )
+
+    def update_membership(
+        self,
+        user_id: int,
+        status: str,
+        plan: str,
+        starts_at: str | None,
+        expires_at: str | None,
+    ) -> bool:
+        now = datetime.now(timezone.utc).isoformat(timespec="seconds")
+        with self.connect() as connection:
+            cursor = connection.execute(
+                """
+                UPDATE users
+                SET membership_status = ?, membership_plan = ?,
+                    membership_starts_at = ?, membership_expires_at = ?, updated_at = ?
+                WHERE id = ?
+                """,
+                (status, plan, starts_at, expires_at, now, user_id),
+            )
+        return cursor.rowcount > 0
+
+    def get_user_birth_profile(self, user_id: int) -> str:
+        with self.connect() as connection:
+            row = connection.execute(
+                "SELECT encrypted_payload FROM user_birth_profiles WHERE user_id = ?",
+                (user_id,),
+            ).fetchone()
+        return str(row["encrypted_payload"]) if row else ""
+
+    def save_user_birth_profile(self, user_id: int, encrypted_payload: str) -> None:
+        now = datetime.now(timezone.utc).isoformat(timespec="seconds")
+        with self.connect() as connection:
+            connection.execute(
+                """
+                INSERT INTO user_birth_profiles (user_id, encrypted_payload, updated_at)
+                VALUES (?, ?, ?)
+                ON CONFLICT(user_id) DO UPDATE SET
+                    encrypted_payload = excluded.encrypted_payload,
+                    updated_at = excluded.updated_at
+                """,
+                (user_id, encrypted_payload, now),
+            )
+
+    def delete_user_birth_profile(self, user_id: int) -> bool:
+        with self.connect() as connection:
+            cursor = connection.execute(
+                "DELETE FROM user_birth_profiles WHERE user_id = ?",
+                (user_id,),
+            )
+            return cursor.rowcount > 0

app/backend/features/accounts/security.py

@@ -0,0 +1,71 @@
+from __future__ import annotations
+
+import base64
+import hashlib
+import hmac
+import json
+import os
+from typing import Any
+
+from cryptography.fernet import Fernet, InvalidToken
+
+
+PASSWORD_SCRYPT_N = 2**14
+PASSWORD_SCRYPT_R = 8
+PASSWORD_SCRYPT_P = 1
+
+
+class SecretVault:
+    def __init__(self, key: str) -> None:
+        try:
+            self._fernet = Fernet(key.encode("ascii"))
+        except (ValueError, TypeError) as exc:
+            raise ValueError("APP_ENCRYPTION_KEY 格式无效。") from exc
+
+    @staticmethod
+    def generate_key() -> str:
+        return Fernet.generate_key().decode("ascii")
+
+    def encrypt_json(self, payload: dict[str, Any]) -> str:
+        raw = json.dumps(payload, ensure_ascii=False, separators=(",", ":")).encode("utf-8")
+        return self._fernet.encrypt(raw).decode("ascii")
+
+    def decrypt_json(self, token: str) -> dict[str, Any]:
+        if not token:
+            return {}
+        try:
+            payload = json.loads(self._fernet.decrypt(token.encode("ascii")).decode("utf-8"))
+        except (InvalidToken, UnicodeDecodeError, json.JSONDecodeError) as exc:
+            raise ValueError("账号加密数据无法解密，请检查 APP_ENCRYPTION_KEY。") from exc
+        if not isinstance(payload, dict):
+            raise ValueError("账号加密数据格式无效。")
+        return payload
+
+
+def hash_password(password: str, salt: bytes | None = None) -> tuple[str, str]:
+    raw_salt = salt or os.urandom(16)
+    digest = hashlib.scrypt(
+        password.encode("utf-8"),
+        salt=raw_salt,
+        n=PASSWORD_SCRYPT_N,
+        r=PASSWORD_SCRYPT_R,
+        p=PASSWORD_SCRYPT_P,
+        dklen=32,
+    )
+    return (
+        base64.urlsafe_b64encode(raw_salt).decode("ascii"),
+        base64.urlsafe_b64encode(digest).decode("ascii"),
+    )
+
+
+def verify_password(password: str, salt_text: str, expected_hash: str) -> bool:
+    try:
+        salt = base64.urlsafe_b64decode(salt_text.encode("ascii"))
+        _, actual_hash = hash_password(password, salt)
+    except (ValueError, TypeError):
+        return False
+    return hmac.compare_digest(actual_hash, expected_hash)
+
+
+def token_hash(token: str) -> str:
+    return hashlib.sha256(token.encode("utf-8")).hexdigest()

app/backend/features/accounts/service.py

@@ -0,0 +1,256 @@
+from __future__ import annotations
+
+import secrets
+import threading
+from collections.abc import Callable
+from datetime import date, datetime, timedelta, timezone
+from typing import Any
+
+from backend.bootstrap.config import (
+    SESSION_MAX_AGE,
+    USERNAME_PATTERN,
+    add_months,
+    normalize_date,
+    parse_iso_datetime,
+)
+from backend.features.accounts.security import (
+    SecretVault,
+    hash_password,
+    token_hash,
+    verify_password,
+)
+
+
+class AccountService:
+    """Preserved account, session, membership and birth-profile behavior."""
+
+    def __init__(
+        self,
+        database: Any,
+        vault: SecretVault,
+        current_user_supplier: Callable[[], int],
+        access_supplier: Callable[[], dict[str, Any]],
+        bind_user: Callable[[int], None],
+        personal_field_builder: Callable[..., dict[str, Any]],
+        auth_lock: threading.Lock,
+    ) -> None:
+        self.database = database
+        self.vault = vault
+        self.current_user_supplier = current_user_supplier
+        self.access_supplier = access_supplier
+        self.bind_user = bind_user
+        self.personal_field_builder = personal_field_builder
+        self.auth_lock = auth_lock
+
+    @property
+    def current_user_id(self) -> int:
+        return int(self.current_user_supplier())
+
+    @staticmethod
+    def membership_for_access(access: dict[str, Any]) -> dict[str, Any]:
+        now = datetime.now(timezone.utc)
+        starts = parse_iso_datetime(access.get("membership_starts_at"))
+        expires = parse_iso_datetime(access.get("membership_expires_at"))
+        subscribed = (
+            access.get("membership_status") == "active"
+            and (not starts or starts <= now)
+            and (not expires or expires > now)
+        )
+        is_admin = str(access.get("role")) == "admin"
+        active = is_admin or subscribed
+        remaining_seconds = None
+        if expires:
+            remaining_seconds = max(0, int((expires - now).total_seconds()))
+        return {
+            "active": active,
+            "subscribed": subscribed,
+            "status": "active" if subscribed else str(access.get("membership_status") or "inactive"),
+            "plan": str(access.get("membership_plan") or ""),
+            "starts_at": str(access.get("membership_starts_at") or ""),
+            "expires_at": str(access.get("membership_expires_at") or ""),
+            "is_admin": is_admin,
+            "remaining_seconds": remaining_seconds,
+            "remaining_days": None if remaining_seconds is None else (remaining_seconds + 86399) // 86400,
+        }
+
+    def membership(self) -> dict[str, Any]:
+        access = self.access_supplier() or self.database.user_access(self.current_user_id) or {}
+        return self.membership_for_access(access)
+
+    def register(self, username: str, password: str) -> dict[str, Any]:
+        username = username.strip()
+        self.validate_input(username, password)
+        with self.auth_lock:
+            salt, password_digest = hash_password(password)
+            user = self.database.create_user(username, salt, password_digest)
+        return self.create_session(user)
+
+    def login(self, username: str, password: str) -> dict[str, Any]:
+        username = username.strip()
+        if not username or not password:
+            raise ValueError("账号名和密码不能为空。")
+        user = self.database.user_by_username(username)
+        if not user or not verify_password(
+            password,
+            str(user.get("password_salt") or ""),
+            str(user.get("password_hash") or ""),
+        ):
+            raise ValueError("账号名或密码不正确。")
+        return self.create_session(user)
+
+    def change_password(self, current_password: str, new_password: str) -> None:
+        current_password = str(current_password or "")
+        access = self.database.user_access(self.current_user_id)
+        self.validate_input(str(access["username"]), new_password)
+        credentials = self.database.user_password(self.current_user_id)
+        if not credentials or not verify_password(
+            current_password,
+            str(credentials.get("password_salt") or ""),
+            str(credentials.get("password_hash") or ""),
+        ):
+            raise ValueError("当前密码不正确。")
+        salt, digest = hash_password(new_password)
+        if not self.database.update_user_password(self.current_user_id, salt, digest):
+            raise ValueError("账号不存在。")
+
+    def create_session(self, user: dict[str, Any]) -> dict[str, Any]:
+        session_token = secrets.token_urlsafe(32)
+        csrf_token = secrets.token_urlsafe(24)
+        expires = datetime.now(timezone.utc) + timedelta(seconds=SESSION_MAX_AGE)
+        self.database.create_session(
+            token_hash(session_token),
+            int(user["id"]),
+            csrf_token,
+            expires.isoformat(timespec="seconds"),
+        )
+        self.bind_user(int(user["id"]))
+        access = self.database.user_access(int(user["id"])) or {}
+        return {
+            "user": {
+                "id": int(user["id"]),
+                "username": str(user["username"]),
+                "role": str(access.get("role") or "user"),
+                "membership": self.membership(),
+            },
+            "session_token": session_token,
+            "csrf_token": csrf_token,
+        }
+
+    @staticmethod
+    def validate_input(username: str, password: str) -> None:
+        if not USERNAME_PATTERN.fullmatch(username):
+            raise ValueError("账号名应为 3 至 30 位中文、字母、数字、下划线或连字符。")
+        if len(password) < 8 or len(password) > 128:
+            raise ValueError("密码长度应为 8 至 128 位。")
+        if password.isalpha() or password.isdigit():
+            raise ValueError("密码应同时包含字母、数字或符号中的至少两类。")
+
+    def save_birth_profile(self, payload: dict[str, Any]) -> dict[str, Any]:
+        birth_datetime = str(payload.get("birth_datetime") or "").strip()
+        gender = str(payload.get("gender") or "unspecified").strip()
+        current_date = normalize_date(str(payload.get("trade_date") or date.today().isoformat()))
+        personal = self.personal_field_builder(birth_datetime, gender, current_date)
+        encrypted = self.vault.encrypt_json(
+            {"birth_datetime": birth_datetime, "gender": gender}
+        )
+        self.database.save_user_birth_profile(self.current_user_id, encrypted)
+        return self.public_personal_profile(personal)
+
+    def stored_birth_profile(self) -> dict[str, str] | None:
+        encrypted = self.database.get_user_birth_profile(self.current_user_id)
+        if not encrypted:
+            return None
+        payload = self.vault.decrypt_json(encrypted)
+        birth_datetime = str(payload.get("birth_datetime") or "").strip()
+        if not birth_datetime:
+            return None
+        return {
+            "birth_datetime": birth_datetime,
+            "gender": str(payload.get("gender") or "unspecified"),
+        }
+
+    def personal_field(
+        self,
+        current_date: str,
+        current_field: dict[str, Any],
+        public: bool = False,
+    ) -> dict[str, Any] | None:
+        stored = self.stored_birth_profile()
+        if not stored:
+            return None
+        personal = self.personal_field_builder(
+            stored["birth_datetime"],
+            stored["gender"],
+            current_date,
+            current_field,
+        )
+        if public:
+            return self.public_personal_profile(personal)
+        personal.pop("birth", None)
+        return personal
+
+    @staticmethod
+    def public_personal_profile(personal: dict[str, Any]) -> dict[str, Any]:
+        allowed = {
+            "day_master",
+            "ten_god_tendency",
+            "element_balance",
+            "balance_tendency",
+            "current",
+            "notice",
+        }
+        return {key: value for key, value in personal.items() if key in allowed}
+
+    def update_membership(self, payload: dict[str, Any]) -> None:
+        try:
+            user_id = int(payload.get("user_id"))
+        except (TypeError, ValueError) as exc:
+            raise ValueError("会员账号不正确。") from exc
+        status = str(payload.get("status") or "inactive")
+        if status not in {"active", "inactive", "suspended"}:
+            raise ValueError("会员状态不正确。")
+        access = self.database.user_access(user_id)
+        if not access:
+            raise ValueError("用户不存在。")
+        starts_at = None
+        expires_at = None
+        plan = ""
+        if status == "active":
+            duration = str(payload.get("duration") or "").strip()
+            durations = {
+                "1_month": (1, "1个月"),
+                "3_months": (3, "3个月"),
+                "12_months": (12, "12个月"),
+                "3_years": (36, "3年"),
+                "permanent": (0, "永久"),
+            }
+            if duration not in durations:
+                raise ValueError("请选择会员开通时长。")
+            now = datetime.now(timezone.utc)
+            existing_start = parse_iso_datetime(access.get("membership_starts_at"))
+            existing_expiry = parse_iso_datetime(access.get("membership_expires_at"))
+            starts = existing_start if existing_start and existing_start <= now else now
+            months, plan = durations[duration]
+            starts_at = starts.isoformat(timespec="seconds")
+            if months:
+                renewal_base = existing_expiry if existing_expiry and existing_expiry > now else now
+                expires_at = add_months(renewal_base, months).isoformat(timespec="seconds")
+        if not self.database.update_membership(
+            user_id, status, plan, starts_at, expires_at
+        ):
+            raise ValueError("用户不存在。")
+
+    def admin_users(
+        self, usage_supplier: Callable[[int], int]
+    ) -> list[dict[str, Any]]:
+        rows = []
+        for user in self.database.list_users():
+            membership = self.membership_for_access(user)
+            used = usage_supplier(int(user["id"])) if membership["active"] else 0
+            rows.append({
+                **user,
+                "membership_active": membership["active"],
+                "membership_subscribed": membership["subscribed"],
+                "used_today": used,
+            })
+        return rows

app/backend/features/alerts/__init__.py

@@ -0,0 +1,3 @@
+from .service import AlertService
+
+__all__ = ["AlertService"]

app/backend/features/alerts/service.py

@@ -0,0 +1,95 @@
+from __future__ import annotations
+
+import secrets
+from datetime import date, datetime
+from typing import Any
+
+from backend.bootstrap.config import validate_text
+from backend.database.repositories import AlertRepository
+
+
+class AlertService:
+    def __init__(self, repository: AlertRepository) -> None:
+        self.repository = repository
+
+    def create_manual(self, user_id: int, payload: dict[str, Any]) -> int:
+        title = validate_text(payload.get("title"), "提醒标题", 80, required=True)
+        content = validate_text(payload.get("content"), "提醒内容", 500)
+        code = validate_text(payload.get("code"), "股票代码", 12)
+        available_date = self.calendar_date(
+            str(payload.get("remind_date") or date.today().isoformat())
+        )
+        return self.repository.save_alert(
+            user_id=user_id,
+            kind="manual",
+            title=title,
+            content=content,
+            available_date=available_date,
+            code=code,
+            dedupe_key=f"manual:{secrets.token_hex(12)}",
+        )
+
+    def sync_strategy_tracking(self, user_id: int, tracking: dict[str, Any]) -> int:
+        synced = 0
+        today = date.today().strftime("%Y%m%d")
+        for batch in tracking.get("batches") or []:
+            items = batch.get("items") or []
+            summary = batch.get("summary") or {}
+            if not items:
+                continue
+            run_id = int(batch.get("run_id") or 0)
+            strategy_name = str(batch.get("strategy_name") or "选股策略")
+            observed = int(summary.get("observed") or 0)
+            completed = int(summary.get("completed") or 0)
+            if observed:
+                win_rate = summary.get("t1_win_rate")
+                suffix = f"，当前红盘率 {win_rate:.1f}%" if win_rate is not None else ""
+                self.repository.save_alert(
+                    user_id, "strategy_t1", f"{strategy_name} 已有 T+1 反馈",
+                    f"{observed}/{len(items)} 只标的已有首日表现{suffix}。",
+                    today, "", f"strategy:{run_id}:t1",
+                )
+                synced += 1
+            if completed == len(items):
+                average = summary.get("average_t5")
+                suffix = f"，平均收益 {average:+.2f}%" if average is not None else ""
+                self.repository.save_alert(
+                    user_id, "strategy_t5", f"{strategy_name} 五日跟踪完成",
+                    f"本批 {len(items)} 只标的已完成 T+5 跟踪{suffix}。",
+                    today, "", f"strategy:{run_id}:t5",
+                )
+                synced += 1
+        return synced
+
+    def list_alerts(
+        self, user_id: int, status: str = "all", as_of: str = ""
+    ) -> dict[str, Any]:
+        if status not in {"all", "unread"}:
+            raise ValueError("提醒筛选不支持。")
+        compact_date = self.calendar_date(as_of or date.today().isoformat())
+        items = self.repository.list_alerts(user_id, compact_date, status == "unread")
+        for item in items:
+            item["due"] = str(item.get("available_date") or "") <= compact_date
+        return {
+            "items": items,
+            "unread_count": self.repository.count_unread_alerts(user_id, compact_date),
+            "as_of": compact_date,
+        }
+
+    def mark_read(self, user_id: int, alert_id: int) -> bool:
+        return self.repository.mark_alert_read(user_id, alert_id)
+
+    def mark_all_read(self, user_id: int, as_of: str) -> int:
+        return self.repository.mark_all_alerts_read(user_id, as_of)
+
+    def delete(self, user_id: int, alert_id: int) -> bool:
+        return self.repository.delete_alert(user_id, alert_id)
+
+    @staticmethod
+    def calendar_date(value: str) -> str:
+        compact = value.replace("-", "").strip()
+        try:
+            parsed = datetime.strptime(compact, "%Y%m%d")
+        except ValueError as exc:
+            raise ValueError("提醒日期格式应为 YYYY-MM-DD。") from exc
+        return parsed.strftime("%Y%m%d")

app/backend/features/review/__init__.py

@@ -0,0 +1,3 @@
+from .trade_journal import EMOTIONS, TRADE_ACTIONS, TradeJournalService
+
+__all__ = ["EMOTIONS", "TRADE_ACTIONS", "TradeJournalService"]

app/backend/features/review/trade_journal.py

@@ -0,0 +1,100 @@
+from __future__ import annotations
+
+import json
+from datetime import date
+from typing import Any
+
+from backend.bootstrap.config import normalize_date, validate_stock_code, validate_text
+from backend.database.repositories import TradeJournalRepository
+
+
+TRADE_ACTIONS = {"buy": "买入", "sell": "卖出", "trim": "减仓", "add": "加仓", "watch": "观察"}
+EMOTIONS = {"calm": "平静", "confident": "笃定", "hesitant": "犹豫", "anxious": "焦虑", "impulsive": "冲动"}
+
+
+class TradeJournalService:
+    def __init__(self, repository: TradeJournalRepository) -> None:
+        self.repository = repository
+
+    def save(self, user_id: int, payload: dict[str, Any]) -> int:
+        trade_id = int(payload.get("id") or 0)
+        trade_date = normalize_date(str(payload.get("trade_date") or date.today().isoformat()))
+        code = validate_stock_code(str(payload.get("code") or ""))
+        name = validate_text(payload.get("name"), "股票名称", 40, required=True)
+        action = str(payload.get("action") or "")
+        if action not in TRADE_ACTIONS:
+            raise ValueError("交易动作不支持。")
+        emotion = str(payload.get("emotion") or "calm")
+        if emotion not in EMOTIONS:
+            raise ValueError("交易情绪不支持。")
+        price = self._number(payload.get("price"), "成交价格", 0, 1000000, required=True)
+        quantity = int(self._number(payload.get("quantity"), "成交数量", 0, 100000000))
+        position_pct = self._number(payload.get("position_pct"), "仓位", 0, 100)
+        pnl_amount = self._optional_number(payload.get("pnl_amount"), "盈亏金额", -1e12, 1e12)
+        pnl_pct = self._optional_number(payload.get("pnl_pct"), "盈亏比例", -1000, 10000)
+        thesis = validate_text(payload.get("thesis"), "交易逻辑", 2000)
+        execution = validate_text(payload.get("execution"), "执行复核", 2000)
+        raw_tags = payload.get("tags") or []
+        if isinstance(raw_tags, str):
+            raw_tags = [item.strip() for item in raw_tags.replace("，", ",").split(",")]
+        if not isinstance(raw_tags, list):
+            raise ValueError("交易标签格式不正确。")
+        tags = [validate_text(item, "交易标签", 20) for item in raw_tags if str(item).strip()][:8]
+        return self.repository.save_trade_entry(
+            user_id, trade_date, code, name, action, price, quantity, position_pct,
+            pnl_amount, pnl_pct, thesis, execution, emotion, tags, trade_id or None,
+        )
+
+    def list_entries(
+        self, user_id: int, start_date: str = "", end_date: str = "", code: str = ""
+    ) -> dict[str, Any]:
+        start = normalize_date(start_date) if start_date else ""
+        end = normalize_date(end_date) if end_date else date.today().strftime("%Y%m%d")
+        if start and start > end:
+            raise ValueError("开始日期不能晚于结束日期。")
+        code = validate_stock_code(code) if code else ""
+        items = self.repository.list_trade_entries(user_id, start, end, code)
+        for item in items:
+            item["tags"] = json.loads(item.get("tags") or "[]")
+            item["action_label"] = TRADE_ACTIONS.get(item["action"], item["action"])
+            item["emotion_label"] = EMOTIONS.get(item["emotion"], item["emotion"])
+        realized = [item for item in items if item.get("pnl_pct") is not None]
+        return {"items": items, "summary": self._summary(items, realized)}
+
+    def delete(self, user_id: int, trade_id: int) -> bool:
+        return self.repository.delete_trade_entry(user_id, trade_id)
+
+    @staticmethod
+    def _summary(items: list[dict[str, Any]], realized: list[dict[str, Any]]) -> dict[str, Any]:
+        pnl_amounts = [float(item["pnl_amount"]) for item in realized if item.get("pnl_amount") is not None]
+        positions = [float(item["position_pct"]) for item in items if float(item.get("position_pct") or 0) > 0]
+        wins = sum(float(item.get("pnl_pct") or 0) > 0 for item in realized)
+        return {
+            "total": len(items),
+            "realized": len(realized),
+            "win_rate": round(wins / len(realized) * 100, 1) if realized else None,
+            "pnl_amount": round(sum(pnl_amounts), 2) if pnl_amounts else None,
+            "average_position": round(sum(positions) / len(positions), 1) if positions else None,
+        }
+
+    @staticmethod
+    def _number(value: Any, label: str, minimum: float, maximum: float, required: bool = False) -> float:
+        if value in (None, ""):
+            if required:
+                raise ValueError(f"{label}不能为空。")
+            return 0.0
+        try:
+            parsed = float(value)
+        except (TypeError, ValueError) as exc:
+            raise ValueError(f"{label}格式不正确。") from exc
+        if parsed < minimum or parsed > maximum:
+            raise ValueError(f"{label}超出允许范围。")
+        return parsed
+
+    @classmethod
+    def _optional_number(
+        cls, value: Any, label: str, minimum: float, maximum: float
+    ) -> float | None:
+        if value in (None, ""):
+            return None
+        return cls._number(value, label, minimum, maximum, required=True)

app/backend/features/screener/__init__.py

@@ -0,0 +1,3 @@
+from .tracking import StrategyTrackingService
+
+__all__ = ["StrategyTrackingService"]

app/backend/features/screener/tracking.py

@@ -0,0 +1,134 @@
+from __future__ import annotations
+
+from typing import Any
+
+from backend.database.repositories import StrategyTrackingRepository
+
+
+class StrategyTrackingService:
+    def __init__(self, repository: StrategyTrackingRepository) -> None:
+        self.repository = repository
+
+    def record_run(
+        self,
+        user_id: int,
+        run_id: int,
+        selection_date: str,
+        strategy_name: str,
+        candidates: list[dict[str, Any]],
+    ) -> int:
+        return self.repository.save_strategy_tracks(
+            user_id, run_id, selection_date, strategy_name, candidates
+        )
+
+    def add_candidate(self, user_id: int, run_id: int, code: str) -> dict[str, Any]:
+        run = self.repository.get_screener_run(user_id, run_id)
+        if not run:
+            run = self.repository.get_screener_run(0, run_id)
+        if not run:
+            raise ValueError("选股结果不存在或不属于当前账号。")
+        normalized_code = str(code or "").strip().split(".")[0]
+        candidate = next(
+            (
+                item for item in run.get("candidates", [])
+                if str(item.get("code") or item.get("ts_code") or "").split(".")[0]
+                == normalized_code
+            ),
+            None,
+        )
+        if not candidate:
+            raise ValueError("该股票不在本次选股结果中。")
+        added = self.record_run(
+            user_id,
+            run_id,
+            str(run.get("meta", {}).get("trade_date") or ""),
+            str(run.get("strategy_name") or "未命名策略"),
+            [candidate],
+        )
+        return {"added": added, "tracking": self.list_tracking(user_id)}
+
+    def remove_candidate(self, user_id: int, track_id: int) -> dict[str, Any]:
+        deleted = self.repository.delete_strategy_track(user_id, track_id)
+        return {"deleted": deleted, "tracking": self.list_tracking(user_id)}
+
+    def list_tracking(self, user_id: int, limit_batches: int = 12) -> dict[str, Any]:
+        tracks = self.repository.list_strategy_tracks(user_id, limit_batches)
+        if not tracks:
+            return {"batches": [], "summary": self._summary([])}
+
+        bars = self.repository.load_tracking_bars(
+            [(item["ts_code"], item["selection_date"]) for item in tracks], 5
+        )
+        batches: dict[int, dict[str, Any]] = {}
+        all_items: list[dict[str, Any]] = []
+        for track in tracks:
+            key = (track["ts_code"], track["selection_date"])
+            metrics = self.calculate_metrics(float(track["entry_price"]), bars.get(key, []))
+            item = {
+                "id": track["id"],
+                "code": track["code"],
+                "name": track["name"],
+                "sector": track["sector"],
+                "entry_price": round(float(track["entry_price"]), 2),
+                **metrics,
+            }
+            all_items.append(item)
+            batch = batches.setdefault(
+                int(track["run_id"]),
+                {
+                    "run_id": int(track["run_id"]),
+                    "selection_date": track["selection_date"],
+                    "strategy_name": track["strategy_name"],
+                    "items": [],
+                },
+            )
+            batch["items"].append(item)
+
+        ordered = list(batches.values())
+        for batch in ordered:
+            batch["summary"] = self._summary(batch["items"])
+        return {"batches": ordered, "summary": self._summary(all_items)}
+
+    @staticmethod
+    def calculate_metrics(entry_price: float, bars: list[dict[str, Any]]) -> dict[str, Any]:
+        valid = [row for row in bars[:5] if float(row.get("close") or 0) > 0]
+        if entry_price <= 0 or not valid:
+            return {
+                "observed_days": 0,
+                "status": "等待 T+1",
+                "t1_open": None,
+                "t1_close": None,
+                "t3_close": None,
+                "t5_close": None,
+                "max_gain": None,
+                "max_drawdown": None,
+            }
+
+        def change(price: Any) -> float:
+            return round((float(price or 0) / entry_price - 1) * 100, 2)
+
+        observed = len(valid)
+        return {
+            "observed_days": observed,
+            "status": "已完成" if observed >= 5 else f"跟踪中 {observed}/5",
+            "t1_open": change(valid[0]["open"]),
+            "t1_close": change(valid[0]["close"]),
+            "t3_close": change(valid[2]["close"]) if observed >= 3 else None,
+            "t5_close": change(valid[4]["close"]) if observed >= 5 else None,
+            "max_gain": max(change(row["high"]) for row in valid),
+            "max_drawdown": min(change(row["low"]) for row in valid),
+        }
+
+    @staticmethod
+    def _summary(items: list[dict[str, Any]]) -> dict[str, Any]:
+        completed = [item for item in items if item.get("t5_close") is not None]
+        t1 = [float(item["t1_close"]) for item in items if item.get("t1_close") is not None]
+        t5 = [float(item["t5_close"]) for item in completed]
+        return {
+            "total": len(items),
+            "observed": len(t1),
+            "completed": len(completed),
+            "t1_win_rate": round(sum(value > 0 for value in t1) / len(t1) * 100, 1) if t1 else None,
+            "t5_win_rate": round(sum(value > 0 for value in t5) / len(t5) * 100, 1) if t5 else None,
+            "average_t5": round(sum(t5) / len(t5), 2) if t5 else None,
+        }

app/backend/features/system/__init__.py

@@ -0,0 +1,3 @@
+from .http import SystemHttpMixin
+
+__all__ = ["SystemHttpMixin"]

app/backend/features/system/http.py

@@ -0,0 +1,41 @@
+from __future__ import annotations
+
+import json
+from datetime import date
+from http import HTTPStatus
+
+
+class SystemHttpMixin:
+    def save_system_settings(self) -> None:
+        try:
+            result = self.application_service.save_system_settings(self.read_json_body())
+            self.send_json({"ok": True, **result})
+        except (ValueError, json.JSONDecodeError) as exc:
+            self.send_json({"error": str(exc)}, HTTPStatus.BAD_REQUEST)
+
+    def test_system_llm_settings(self) -> None:
+        try:
+            body = self.read_json_body()
+            result = self.application_service.test_system_llm_profile(
+                str(body.get("model_id") or ""), body.get("profile") or {}
+            )
+            self.send_json({"ok": True, "result": result})
+        except (ValueError, json.JSONDecodeError) as exc:
+            self.send_json({"error": str(exc)}, HTTPStatus.BAD_REQUEST)
+
+    def start_background_refresh(self) -> None:
+        try:
+            body = self.read_json_body(allow_empty=True)
+            started = self.application_service.request_background_sync(
+                str(body.get("trade_date") or date.today().isoformat())
+            )
+            self.send_json(
+                {
+                    "ok": True,
+                    "started": started,
+                    "message": "后台刷新已开始" if started else "已有后台刷新任务正在运行",
+                },
+                HTTPStatus.ACCEPTED,
+            )
+        except (ValueError, json.JSONDecodeError) as exc:
+            self.send_json({"error": str(exc)}, HTTPStatus.BAD_REQUEST)

app/backend/features/system/repository.py

@@ -0,0 +1,29 @@
+from __future__ import annotations
+
+from datetime import datetime, timezone
+
+
+class SystemSettingsRepositoryMixin:
+    """Original encrypted system-setting persistence methods."""
+
+    def get_system_setting(self, key: str) -> str:
+        with self.connect() as connection:
+            row = connection.execute(
+                "SELECT encrypted_payload FROM system_settings WHERE setting_key = ?",
+                (key,),
+            ).fetchone()
+        return str(row["encrypted_payload"]) if row else ""
+
+    def save_system_setting(self, key: str, encrypted_payload: str) -> None:
+        now = datetime.now(timezone.utc).isoformat(timespec="seconds")
+        with self.connect() as connection:
+            connection.execute(
+                """
+                INSERT INTO system_settings (setting_key, encrypted_payload, updated_at)
+                VALUES (?, ?, ?)
+                ON CONFLICT(setting_key) DO UPDATE SET
+                    encrypted_payload = excluded.encrypted_payload,
+                    updated_at = excluded.updated_at
+                """,
+                (key, encrypted_payload, now),
+            )

app/backend/http/__init__.py

@@ -0,0 +1,9 @@
+from .context import correlation_id
+from .errors import normalize_error_payload
+from .handler import HttpTransportMixin
+from .router import AccessRole, ApiRoute, ApiRouteRegistry, RouteRegistryError
+
+__all__ = [
+    "AccessRole", "ApiRoute", "ApiRouteRegistry", "RouteRegistryError",
+    "HttpTransportMixin", "correlation_id", "normalize_error_payload",
+]

app/backend/http/context.py

@@ -0,0 +1,12 @@
+from __future__ import annotations
+
+import re
+import uuid
+
+
+REQUEST_ID_PATTERN = re.compile(r"[A-Za-z0-9._-]{8,80}")
+
+
+def correlation_id(supplied: str = "") -> str:
+    value = str(supplied or "").strip()
+    return value if REQUEST_ID_PATTERN.fullmatch(value) else uuid.uuid4().hex

app/backend/http/errors.py

@@ -0,0 +1,31 @@
+from __future__ import annotations
+
+from http import HTTPStatus
+from typing import Any
+
+
+STATUS_CODES = {
+    HTTPStatus.BAD_REQUEST: "bad_request",
+    HTTPStatus.UNAUTHORIZED: "authentication_required",
+    HTTPStatus.FORBIDDEN: "access_denied",
+    HTTPStatus.NOT_FOUND: "not_found",
+    HTTPStatus.CONFLICT: "conflict",
+    HTTPStatus.INTERNAL_SERVER_ERROR: "internal_error",
+    HTTPStatus.SERVICE_UNAVAILABLE: "service_unavailable",
+}
+
+
+def normalize_error_payload(
+    payload: dict[str, Any], status: int | HTTPStatus, request_id: str,
+) -> dict[str, Any]:
+    if "error" not in payload:
+        return payload
+    status_value = HTTPStatus(int(status))
+    message = str(payload.get("message") or payload.get("error") or status_value.phrase)
+    return {
+        **payload,
+        "error": message,
+        "code": str(payload.get("code") or STATUS_CODES.get(status_value) or "request_failed"),
+        "message": message,
+        "request_id": request_id,
+    }

app/backend/http/handler.py

@@ -0,0 +1,146 @@
+from __future__ import annotations
+
+import json
+import mimetypes
+import secrets
+from http import HTTPStatus
+from http.cookies import SimpleCookie
+from typing import Any
+from urllib.parse import unquote
+
+from backend.bootstrap.config import SESSION_COOKIE, SESSION_MAX_AGE, STATIC_DIR
+from backend.features.accounts.security import token_hash
+from backend.http.context import correlation_id
+from backend.http.errors import normalize_error_payload
+
+
+class HttpTransportMixin:
+    """Original HTTP transport, static-file, session and access behavior."""
+
+    application_service: Any
+    route_registry: Any
+
+    def session_token(self) -> str:
+        cookie = SimpleCookie()
+        try:
+            cookie.load(self.headers.get("Cookie", ""))
+        except Exception:
+            return ""
+        morsel = cookie.get(SESSION_COOKIE)
+        return morsel.value if morsel else ""
+
+    def require_auth(self, send_error: bool = True) -> bool:
+        raw_token = self.session_token()
+        service = self.application_service
+        user = service.database.session_user(token_hash(raw_token)) if raw_token else None
+        if not user:
+            if send_error:
+                self.send_json({"error": "请先登录。"}, HTTPStatus.UNAUTHORIZED)
+            return False
+        self.auth_user = user
+        service.bind_user(int(user["id"]))
+        return True
+
+    def require_csrf(self) -> bool:
+        supplied = self.headers.get("X-CSRF-Token", "")
+        expected = str(getattr(self, "auth_user", {}).get("csrf_token") or "")
+        if not supplied or not secrets.compare_digest(supplied, expected):
+            self.send_json({"error": "请求校验失败，请刷新页面后重试。"}, HTTPStatus.FORBIDDEN)
+            return False
+        return True
+
+    def require_admin(self) -> bool:
+        if str(getattr(self, "auth_user", {}).get("role") or "user") != "admin":
+            self.send_json({"error": "需要管理员权限。"}, HTTPStatus.FORBIDDEN)
+            return False
+        return True
+
+    def require_member(self) -> bool:
+        if self.application_service.membership()["active"]:
+            return True
+        self.send_json(
+            {"error": "该功能仅对有效会员开放，请联系管理员开通会员。", "code": "membership_required"},
+            HTTPStatus.FORBIDDEN,
+        )
+        return False
+
+    def require_access(self, method: str, path: str) -> bool:
+        route = self.route_registry.resolve(method, path)
+        if route is None:
+            self.send_json({"error": "Not found"}, HTTPStatus.NOT_FOUND)
+            return False
+        role = route.access
+        if role == "public":
+            return True
+        if role == "admin":
+            return self.require_admin()
+        if role == "member":
+            return self.require_member()
+        return True
+
+    def session_cookie(self, value: str, clear: bool = False) -> str:
+        max_age = 0 if clear else SESSION_MAX_AGE
+        cookie = (
+            f"{SESSION_COOKIE}={value}; Path=/; HttpOnly; SameSite=Lax; Max-Age={max_age}"
+        )
+        if self.headers.get("X-Forwarded-Proto", "").lower() == "https":
+            cookie += "; Secure"
+        return cookie
+
+    def read_json_body(self, allow_empty: bool = False) -> dict[str, Any]:
+        length = int(self.headers.get("Content-Length", "0"))
+        if length == 0 and allow_empty:
+            return {}
+        if length <= 0 or length > 65536:
+            raise ValueError("请求内容为空或过大。")
+        return json.loads(self.rfile.read(length).decode("utf-8"))
+
+    def serve_static(self, request_path: str) -> None:
+        relative = unquote(request_path).lstrip("/") or "index.html"
+        candidate = (STATIC_DIR / relative).resolve()
+        try:
+            candidate.relative_to(STATIC_DIR.resolve())
+        except ValueError:
+            self.send_error(HTTPStatus.FORBIDDEN)
+            return
+        if not candidate.is_file():
+            candidate = STATIC_DIR / "index.html"
+        try:
+            content = candidate.read_bytes()
+        except OSError:
+            self.send_error(HTTPStatus.NOT_FOUND)
+            return
+        content_type = mimetypes.guess_type(candidate.name)[0] or "application/octet-stream"
+        if content_type.startswith("text/") or content_type in {"application/javascript", "application/json"}:
+            content_type += "; charset=utf-8"
+        self.send_response(HTTPStatus.OK)
+        self.send_header("Content-Type", content_type)
+        self.send_header("Content-Length", str(len(content)))
+        self.send_header("Cache-Control", "no-cache")
+        self.end_headers()
+        self.wfile.write(content)
+
+    def send_json(
+        self,
+        payload: dict[str, Any],
+        status: HTTPStatus = HTTPStatus.OK,
+        headers: dict[str, str] | None = None,
+    ) -> None:
+        request_id = getattr(self, "_correlation_id", "")
+        if not request_id:
+            request_id = correlation_id(self.headers.get("X-Request-ID", ""))
+            self._correlation_id = request_id
+        payload = normalize_error_payload(payload, status, request_id)
+        content = json.dumps(payload, ensure_ascii=False).encode("utf-8")
+        self.send_response(status)
+        self.send_header("Content-Type", "application/json; charset=utf-8")
+        self.send_header("Content-Length", str(len(content)))
+        self.send_header("Cache-Control", "no-store")
+        self.send_header("X-Request-ID", request_id)
+        for name, value in (headers or {}).items():
+            self.send_header(name, value)
+        self.end_headers()
+        self.wfile.write(content)
+
+    def log_message(self, format_string: str, *args: Any) -> None:
+        print(f"[{self.log_date_time_string()}] {format_string % args}")

app/backend/http/router.py

@@ -0,0 +1,78 @@
+from __future__ import annotations
+
+import json
+import re
+from dataclasses import dataclass
+from pathlib import Path
+from typing import Literal, cast
+
+from backend.bootstrap.config import APP_DIR
+
+
+AccessRole = Literal["public", "authenticated", "member", "admin"]
+MatchType = Literal["exact", "regex"]
+
+
+class RouteRegistryError(RuntimeError):
+    pass
+
+
+@dataclass(frozen=True)
+class ApiRoute:
+    method: str
+    path: str
+    match: MatchType
+    feature: str
+    access: AccessRole
+
+    def matches(self, method: str, path: str) -> bool:
+        if self.method != method.upper():
+            return False
+        return self.path == path if self.match == "exact" else re.fullmatch(self.path, path) is not None
+
+
+class ApiRouteRegistry:
+    def __init__(self, routes: tuple[ApiRoute, ...]) -> None:
+        self.routes = routes
+        self._exact: dict[tuple[str, str], ApiRoute] = {}
+        regex_routes: list[ApiRoute] = []
+        seen: set[tuple[str, str]] = set()
+        for route in routes:
+            key = (route.method, route.path)
+            if key in seen:
+                raise RouteRegistryError(f"Duplicate API route: {route.method} {route.path}")
+            seen.add(key)
+            if route.match == "exact":
+                self._exact[key] = route
+            else:
+                try:
+                    re.compile(route.path)
+                except re.error as exc:
+                    raise RouteRegistryError(f"Invalid API route regex: {route.path}") from exc
+                regex_routes.append(route)
+        self._regex = tuple(regex_routes)
+
+    @classmethod
+    def load(cls, path: Path | None = None) -> "ApiRouteRegistry":
+        config_path = path or APP_DIR / "config" / "api.config.json"
+        payload = json.loads(config_path.read_text(encoding="utf-8"))
+        routes = tuple(
+            ApiRoute(
+                method=str(item["method"]).upper(),
+                path=str(item["path"]),
+                match=cast(MatchType, str(item["match"])),
+                feature=str(item["feature"]),
+                access=cast(AccessRole, str(item["access"])),
+            )
+            for item in payload.get("routes") or []
+        )
+        if not routes:
+            raise RouteRegistryError("API route registry is empty")
+        return cls(routes)
+
+    def resolve(self, method: str, path: str) -> ApiRoute | None:
+        normalized = method.upper()
+        exact = self._exact.get((normalized, path))
+        if exact:
+            return exact
+        return next((route for route in self._regex if route.matches(normalized, path)), None)

app/backend/jobs/__init__.py

@@ -0,0 +1,5 @@
+from .registry import JobDefinition, JobRegistry
+from .repository import SQLiteJobRunRepository
+from .runner import InProcessJobRunner
+
+__all__ = ["InProcessJobRunner", "JobDefinition", "JobRegistry", "SQLiteJobRunRepository"]

app/backend/jobs/registry.py

@@ -0,0 +1,54 @@
+from __future__ import annotations
+
+import json
+from dataclasses import dataclass
+from pathlib import Path
+
+from backend.bootstrap.config import APP_DIR
+
+
+@dataclass(frozen=True)
+class JobDefinition:
+    job_id: str
+    schedule: str
+    input_date_policy: str
+    dependencies: tuple[str, ...]
+    lock_key: str
+    timeout_seconds: int
+    max_attempts: int
+    output_version: str
+
+
+class JobRegistry:
+    def __init__(self, definitions: tuple[JobDefinition, ...]) -> None:
+        self.definitions = definitions
+        self._by_id = {item.job_id: item for item in definitions}
+        if len(self._by_id) != len(definitions):
+            raise ValueError("Background job IDs must be unique")
+
+    @classmethod
+    def load(cls, path: Path | None = None) -> "JobRegistry":
+        config_path = path or APP_DIR / "config" / "jobs.config.json"
+        payload = json.loads(config_path.read_text(encoding="utf-8"))
+        definitions = tuple(
+            JobDefinition(
+                job_id=str(item["id"]),
+                schedule=str(item["schedule"]),
+                input_date_policy=str(item["input_date_policy"]),
+                dependencies=tuple(str(value) for value in item.get("dependencies") or []),
+                lock_key=str(item["lock_key"]),
+                timeout_seconds=max(1, int(item["timeout_seconds"])),
+                max_attempts=max(1, int(item["max_attempts"])),
+                output_version=str(item["output_version"]),
+            )
+            for item in payload.get("jobs") or []
+        )
+        if not definitions:
+            raise ValueError("Background job registry is empty")
+        return cls(definitions)
+
+    def get(self, job_id: str) -> JobDefinition:
+        try:
+            return self._by_id[job_id]
+        except KeyError as exc:
+            raise ValueError(f"Background job is not registered: {job_id}") from exc

app/backend/jobs/repository.py

@@ -0,0 +1,88 @@
+from __future__ import annotations
+
+import json
+from dataclasses import dataclass
+from datetime import datetime
+from typing import Any
+
+from database import ReviewDatabase
+
+
+@dataclass(frozen=True)
+class SQLiteJobRunRepository:
+    database: ReviewDatabase
+
+    def completed(self, job_id: str, idempotency_key: str) -> bool:
+        with self.database.connect() as connection:
+            row = connection.execute(
+                """
+                SELECT 1 FROM job_runs
+                WHERE job_id = ? AND idempotency_key = ? AND status = 'success'
+                LIMIT 1
+                """,
+                (job_id, idempotency_key),
+            ).fetchone()
+        return row is not None
+
+    def start(
+        self, job_id: str, idempotency_key: str, output_version: str,
+        metadata: dict[str, Any] | None = None,
+    ) -> int:
+        now = datetime.now().astimezone().isoformat(timespec="seconds")
+        with self.database.connect() as connection:
+            row = connection.execute(
+                """
+                SELECT COALESCE(MAX(attempt), 0) + 1 AS attempt FROM job_runs
+                WHERE job_id = ? AND idempotency_key = ?
+                """,
+                (job_id, idempotency_key),
+            ).fetchone()
+            cursor = connection.execute(
+                """
+                INSERT INTO job_runs
+                    (job_id, idempotency_key, status, attempt, started_at,
+                     output_version, metadata)
+                VALUES (?, ?, 'running', ?, ?, ?, ?)
+                """,
+                (
+                    job_id, idempotency_key, int(row["attempt"]), now,
+                    output_version,
+                    json.dumps(metadata or {}, ensure_ascii=False, separators=(",", ":")),
+                ),
+            )
+            connection.execute(
+                """
+                DELETE FROM job_runs
+                WHERE id < (SELECT COALESCE(MAX(id), 0) - 20000 FROM job_runs)
+                  AND status != 'running'
+                """
+            )
+            return int(cursor.lastrowid)
+
+    def finish(
+        self, run_id: int, status: str, elapsed_ms: int,
+        error_code: str = "", message: str = "",
+    ) -> None:
+        now = datetime.now().astimezone().isoformat(timespec="seconds")
+        with self.database.connect() as connection:
+            connection.execute(
+                """
+                UPDATE job_runs
+                SET status = ?, finished_at = ?, elapsed_ms = ?,
+                    error_code = ?, message = ?
+                WHERE id = ?
+                """,
+                (status, now, elapsed_ms, error_code, message[:1000], int(run_id)),
+            )
+
+    def recent(self, limit: int = 20) -> list[dict[str, Any]]:
+        with self.database.connect() as connection:
+            rows = connection.execute(
+                """
+                SELECT id, job_id, idempotency_key, status, attempt, started_at,
+                       finished_at, elapsed_ms, error_code, message, output_version
+                FROM job_runs ORDER BY id DESC LIMIT ?
+                """,
+                (max(1, min(100, int(limit))),),
+            ).fetchall()
+        return [dict(row) for row in rows]

app/backend/jobs/runner.py

@@ -0,0 +1,118 @@
+from __future__ import annotations
+
+import threading
+import time
+from collections.abc import Callable
+from typing import Any
+
+from backend.jobs.registry import JobRegistry
+from backend.jobs.repository import SQLiteJobRunRepository
+
+
+JobAction = Callable[[], Any]
+
+
+class InProcessJobRunner:
+    def __init__(self, registry: JobRegistry, repository: SQLiteJobRunRepository) -> None:
+        self.registry = registry
+        self.repository = repository
+        self._locks: dict[str, threading.Lock] = {}
+        self._locks_guard = threading.Lock()
+
+    def submit(
+        self, job_id: str, idempotency_key: str, action: JobAction,
+        metadata: dict[str, Any] | None = None,
+    ) -> bool:
+        definition = self.registry.get(job_id)
+        if self.repository.completed(job_id, idempotency_key):
+            return False
+        lock = self._lock(definition.lock_key)
+        if not lock.acquire(blocking=False):
+            return False
+        thread = threading.Thread(
+            target=self._execute_locked,
+            args=(job_id, idempotency_key, action, metadata, lock),
+            name=f"job-{job_id}-{idempotency_key}"[:80],
+            daemon=True,
+        )
+        thread.start()
+        return True
+
+    def run_inline(
+        self, job_id: str, idempotency_key: str, action: JobAction,
+        metadata: dict[str, Any] | None = None,
+    ) -> bool:
+        definition = self.registry.get(job_id)
+        if self.repository.completed(job_id, idempotency_key):
+            return False
+        lock = self._lock(definition.lock_key)
+        if not lock.acquire(blocking=False):
+            return False
+        self._execute_locked(job_id, idempotency_key, action, metadata, lock)
+        return True
+
+    def start_scheduler(
+        self, callback: Callable[[], None], stop_event: threading.Event,
+        interval_seconds: float, initial_delay_seconds: float = 0,
+    ) -> threading.Thread:
+        def schedule_loop() -> None:
+            if stop_event.wait(initial_delay_seconds):
+                return
+            while not stop_event.is_set():
+                try:
+                    callback()
+                except Exception:
+                    # Submitted jobs persist their own failures; the scheduler must stay alive.
+                    pass
+                stop_event.wait(interval_seconds)
+
+        thread = threading.Thread(
+            target=schedule_loop,
+            name="background-job-scheduler",
+            daemon=True,
+        )
+        thread.start()
+        return thread
+
+    def wait_for_idle(self, timeout_seconds: float = 5) -> bool:
+        deadline = time.monotonic() + max(0, timeout_seconds)
+        while time.monotonic() <= deadline:
+            with self._locks_guard:
+                busy = any(lock.locked() for lock in self._locks.values())
+            if not busy:
+                return True
+            time.sleep(0.01)
+        return False
+
+    def _execute_locked(
+        self, job_id: str, idempotency_key: str, action: JobAction,
+        metadata: dict[str, Any] | None, lock: threading.Lock,
+    ) -> None:
+        definition = self.registry.get(job_id)
+        try:
+            for attempt in range(1, definition.max_attempts + 1):
+                run_id = self.repository.start(
+                    job_id, idempotency_key, definition.output_version, metadata
+                )
+                started = time.perf_counter()
+                try:
+                    result = action()
+                    if isinstance(result, dict) and result.get("status") == "failed":
+                        raise RuntimeError(str(result.get("error") or "Job reported failure"))
+                    elapsed_ms = round((time.perf_counter() - started) * 1000)
+                    self.repository.finish(run_id, "success", elapsed_ms)
+                    return
+                except Exception as exc:
+                    elapsed_ms = round((time.perf_counter() - started) * 1000)
+                    self.repository.finish(
+                        run_id, "failed", elapsed_ms,
+                        type(exc).__name__, str(exc),
+                    )
+                    if attempt >= definition.max_attempts:
+                        return
+        finally:
+            lock.release()
+
+    def _lock(self, lock_key: str) -> threading.Lock:
+        with self._locks_guard:
+            return self._locks.setdefault(lock_key, threading.Lock())

app/backend/llm/__init__.py

@@ -0,0 +1,15 @@
+from .gateway import (
+    LLMGateway,
+    LLMGatewayError,
+    LLMResult,
+    LLMStreamEvent,
+    ModelProfile,
+)
+
+__all__ = [
+    "LLMGateway",
+    "LLMGatewayError",
+    "LLMResult",
+    "LLMStreamEvent",
+    "ModelProfile",
+]

app/backend/llm/gateway.py

@@ -0,0 +1,254 @@
+from __future__ import annotations
+
+import time
+from collections.abc import Callable, Iterator
+from dataclasses import dataclass
+from datetime import datetime, timezone
+from typing import Any, Generic, TypeVar
+
+
+T = TypeVar("T")
+
+
+class LLMGatewayError(ValueError):
+    """Stable application error that does not expose provider details."""
+
+    def __init__(self, message: str, code: str = "unavailable") -> None:
+        super().__init__(message)
+        self.code = code
+
+
+@dataclass(frozen=True)
+class ModelProfile:
+    role: str
+    api_key: str
+    base_url: str
+    model: str
+
+    @property
+    def configured(self) -> bool:
+        return bool(self.api_key and self.base_url and self.model)
+
+
+@dataclass(frozen=True)
+class LLMResult(Generic[T]):
+    value: T
+    source: str
+    role: str
+    model: str
+    latency_ms: int
+
+
+@dataclass(frozen=True)
+class LLMStreamEvent(Generic[T]):
+    kind: str
+    value: T | None = None
+    source: str = ""
+    role: str = ""
+    model: str = ""
+    latency_ms: int = 0
+
+
+class LLMGateway:
+    """Single policy boundary for access, model fallback, and call auditing."""
+
+    def __init__(
+        self,
+        *,
+        database: Any,
+        user_id_supplier: Callable[[], int],
+        membership_supplier: Callable[[], dict[str, Any]],
+        settings_supplier: Callable[[], dict[str, Any]],
+        profile_supplier: Callable[[], dict[str, Any]],
+    ) -> None:
+        self.database = database
+        self.user_id_supplier = user_id_supplier
+        self.membership_supplier = membership_supplier
+        self.settings_supplier = settings_supplier
+        self.profile_supplier = profile_supplier
+
+    def ensure_access(self, feature: str) -> tuple[str, tuple[ModelProfile, ...]]:
+        del feature  # Reserved for future feature-specific policy.
+        membership = self.membership_supplier()
+        profile = self.profile_supplier()
+        source = str(profile.get("source") or "none")
+        profiles = self._model_profiles(profile)
+        if source == "none" or not profiles:
+            raise LLMGatewayError("智能功能尚未配置，请联系管理员。", "not_configured")
+        if source == "platform":
+            settings = self.settings_supplier()
+            limit = max(1, int(settings.get("member_daily_limit") or 50))
+            if not membership.get("active"):
+                raise LLMGatewayError("开通会员后可使用智能功能。", "membership_required")
+            if self._usage_today(source) >= limit:
+                raise LLMGatewayError(
+                    f"今日会员模型额度已用完（{limit} 次）。", "quota_exhausted"
+                )
+        return source, profiles
+
+    def call(
+        self,
+        feature: str,
+        prompt_version: str,
+        invoke: Callable[[ModelProfile], T],
+        error_types: tuple[type[BaseException], ...],
+    ) -> LLMResult[T]:
+        source, profiles = self.ensure_access(feature)
+        started = time.perf_counter()
+        last_error: BaseException | None = None
+        for profile in profiles:
+            try:
+                value = invoke(profile)
+            except error_types as exc:
+                last_error = exc
+                continue
+            latency_ms = round((time.perf_counter() - started) * 1000)
+            self.audit(
+                feature, source, profile, "success", latency_ms, prompt_version
+            )
+            return LLMResult(
+                value=value,
+                source=source,
+                role=profile.role,
+                model=profile.model,
+                latency_ms=latency_ms,
+            )
+        failed = profiles[-1]
+        latency_ms = round((time.perf_counter() - started) * 1000)
+        self.audit(
+            feature,
+            source,
+            failed,
+            "failed",
+            latency_ms,
+            prompt_version,
+            self._error_code(last_error),
+        )
+        raise LLMGatewayError("智能解读服务暂不可用，请稍后重试。") from last_error
+
+    @staticmethod
+    def probe(profile: dict[str, Any], invoke: Callable[[ModelProfile], T]) -> T:
+        """Route an explicit administrator connection test through the gateway boundary."""
+        model = ModelProfile(
+            role="probe",
+            api_key=str(profile.get("api_key") or ""),
+            base_url=str(profile.get("base_url") or ""),
+            model=str(profile.get("model") or ""),
+        )
+        return invoke(model)
+
+    def stream(
+        self,
+        feature: str,
+        prompt_version: str,
+        invoke: Callable[[ModelProfile], Iterator[T]],
+        error_types: tuple[type[BaseException], ...],
+    ) -> Iterator[LLMStreamEvent[T]]:
+        source, profiles = self.ensure_access(feature)
+        started = time.perf_counter()
+        last_error: BaseException | None = None
+        for profile in profiles:
+            try:
+                upstream = iter(invoke(profile))
+                first = next(upstream)
+            except (*error_types, StopIteration) as exc:
+                last_error = exc
+                continue
+            yield LLMStreamEvent(kind="delta", value=first)
+            try:
+                for chunk in upstream:
+                    yield LLMStreamEvent(kind="delta", value=chunk)
+            except error_types as exc:
+                latency_ms = round((time.perf_counter() - started) * 1000)
+                self.audit(
+                    feature,
+                    source,
+                    profile,
+                    "failed",
+                    latency_ms,
+                    prompt_version,
+                    self._error_code(exc),
+                )
+                raise LLMGatewayError(
+                    "智能解读连接中断，请稍后重试。"
+                ) from exc
+            latency_ms = round((time.perf_counter() - started) * 1000)
+            self.audit(
+                feature, source, profile, "success", latency_ms, prompt_version
+            )
+            yield LLMStreamEvent(
+                kind="complete",
+                source=source,
+                role=profile.role,
+                model=profile.model,
+                latency_ms=latency_ms,
+            )
+            return
+        failed = profiles[-1]
+        latency_ms = round((time.perf_counter() - started) * 1000)
+        self.audit(
+            feature,
+            source,
+            failed,
+            "failed",
+            latency_ms,
+            prompt_version,
+            self._error_code(last_error),
+        )
+        raise LLMGatewayError("智能解读服务暂不可用，请稍后重试。") from last_error
+
+    def audit(
+        self,
+        feature: str,
+        source: str,
+        profile: ModelProfile,
+        status: str,
+        latency_ms: int,
+        prompt_version: str,
+        error_code: str = "",
+        input_tokens: int = 0,
+        output_tokens: int = 0,
+    ) -> None:
+        self.database.record_llm_usage(
+            self.user_id_supplier(),
+            feature,
+            source,
+            profile.model,
+            status,
+            latency_ms,
+            role=profile.role,
+            prompt_version=prompt_version,
+            error_code=error_code,
+            input_tokens=input_tokens,
+            output_tokens=output_tokens,
+        )
+
+    def _usage_today(self, source: str) -> int:
+        now = datetime.now().astimezone()
+        start = now.replace(
+            hour=0, minute=0, second=0, microsecond=0
+        ).astimezone(timezone.utc)
+        return self.database.count_llm_usage_since(
+            self.user_id_supplier(), source, start.isoformat(timespec="seconds")
+        )
+
+    @staticmethod
+    def _model_profiles(profile: dict[str, Any]) -> tuple[ModelProfile, ...]:
+        result = []
+        for role in ("primary", "fallback"):
+            item = profile.get(role) or {}
+            candidate = ModelProfile(
+                role=role,
+                api_key=str(item.get("api_key") or ""),
+                base_url=str(item.get("base_url") or ""),
+                model=str(item.get("model") or ""),
+            )
+            if candidate.configured:
+                result.append(candidate)
+        return tuple(result)
+
+    @staticmethod
+    def _error_code(error: BaseException | None) -> str:
+        if error is None:
+            return "empty_response"
+        return type(error).__name__[:80]

app/chart_data_provider.py

@@ -0,0 +1,497 @@
+from __future__ import annotations
+
+import http.client
+import json
+import re
+import time
+import urllib.error
+import urllib.parse
+import urllib.request
+from dataclasses import dataclass
+from datetime import datetime, time as dt_time, timedelta
+from threading import Lock
+from typing import Any, ClassVar
+
+from ifind_client import IfindError, IfindHttpClient
+
+
+class ChartDataError(RuntimeError):
+    pass
+
+
+TRENDS_URL = "https://push2delay.eastmoney.com/api/qt/stock/trends2/get"
+BOARD_LIST_URL = "https://push2delay.eastmoney.com/api/qt/clist/get"
+BROWSER_USER_AGENT = (
+    "Mozilla/5.0 (Windows NT 10.0; Win64; x64) "
+    "AppleWebKit/537.36 (KHTML, like Gecko) "
+    "Chrome/138.0.0.0 Safari/537.36"
+)
+INDEX_SECIDS = {
+    "000001.SH": "1.000001",
+    "399001.SZ": "0.399001",
+    "399006.SZ": "0.399006",
+}
+
+
+class MarketChartClient:
+    """Prefer iFinD for display charts and retain Eastmoney as a last resort."""
+
+    def __init__(self, ifind: IfindHttpClient, fallback: "EastmoneyChartClient") -> None:
+        self.ifind = ifind
+        self.fallback = fallback
+
+    def stock_intraday(self, code: str) -> dict[str, Any]:
+        normalized = str(code or "").strip()
+        if not re.fullmatch(r"\d{6}", normalized):
+            raise ChartDataError("Invalid stock code")
+        ifind_code = _stock_market_code(normalized)
+        try:
+            return self._ifind_intraday(ifind_code, "stock", normalized)
+        except (IfindError, ChartDataError):
+            return self.fallback.stock_intraday(normalized)
+
+    def stock_daily(self, code: str, end_date: str, limit: int = 90) -> list[dict[str, Any]]:
+        normalized = str(code or "").strip()
+        if not re.fullmatch(r"\d{6}", normalized):
+            raise ChartDataError("Invalid stock code")
+        return self._ifind_daily(_stock_market_code(normalized), end_date, limit)
+
+    def index_daily(self, identifier: str, end_date: str, limit: int = 90) -> list[dict[str, Any]]:
+        normalized = str(identifier or "").strip().upper()
+        if normalized not in INDEX_SECIDS:
+            raise ChartDataError("Unsupported index")
+        return self._ifind_daily(normalized, end_date, limit)
+
+    def board_daily(self, identifier: str, end_date: str, limit: int = 90) -> list[dict[str, Any]]:
+        normalized = str(identifier or "").strip().upper()
+        if not normalized:
+            raise ChartDataError("Invalid board code")
+        return self._ifind_daily(normalized, end_date, limit)
+
+    def index_intraday(self, identifier: str) -> dict[str, Any]:
+        normalized = str(identifier or "").strip().upper()
+        if normalized not in INDEX_SECIDS:
+            raise ChartDataError("Unsupported index")
+        try:
+            return self._ifind_intraday(normalized, "index", normalized)
+        except (IfindError, ChartDataError):
+            return self.fallback.index_intraday(normalized)
+
+    def board_intraday(self, identifier: str, name: str = "") -> dict[str, Any]:
+        normalized = str(identifier or "").strip().upper()
+        try:
+            return self._ifind_intraday(normalized, "board", normalized, name)
+        except (IfindError, ChartDataError):
+            return self.fallback.board_intraday(normalized, name)
+
+    def _ifind_intraday(
+        self,
+        ifind_code: str,
+        entity_type: str,
+        identifier: str,
+        name: str = "",
+    ) -> dict[str, Any]:
+        if not self.ifind.configured:
+            raise ChartDataError("iFinD is not configured")
+        now = datetime.now().astimezone()
+        rows: list[dict[str, Any]] = []
+        for offset in range(0, 8):
+            candidate = now.date() - timedelta(days=offset)
+            if candidate.weekday() >= 5:
+                continue
+            display_date = candidate.isoformat()
+            rows = self.ifind.intraday(
+                ifind_code,
+                f"{display_date} 09:30:00",
+                f"{display_date} 15:00:00",
+                cache_ttl=20 if offset == 0 else 6 * 60 * 60,
+            )
+            if rows:
+                break
+        points = [point for row in rows if (point := _ifind_point(row))]
+        if not points:
+            raise ChartDataError("No iFinD intraday chart data returned")
+        latest_date = points[-1]["date"]
+        points = [point for point in points if point["date"] == latest_date]
+        previous_close = self._previous_close(ifind_code, latest_date, points[0]["open"])
+        return {
+            "entity_type": entity_type,
+            "identifier": identifier,
+            "name": name,
+            "code": identifier,
+            "trade_date": latest_date,
+            "previous_close": previous_close,
+            "points": points,
+            "source": "ifind",
+        }
+
+    def _ifind_daily(
+        self, ifind_code: str, end_date: str, limit: int
+    ) -> list[dict[str, Any]]:
+        if not self.ifind.configured:
+            raise ChartDataError("iFinD is not configured")
+        compact_end = str(end_date or "").replace("-", "")
+        if not re.fullmatch(r"\d{8}", compact_end):
+            raise ChartDataError("Invalid chart end date")
+        end = datetime.strptime(compact_end, "%Y%m%d")
+        start = (end - timedelta(days=max(190, limit * 3))).strftime("%Y%m%d")
+        try:
+            rows = self.ifind.history(
+                ifind_code,
+                ["open", "high", "low", "close", "volume", "amount"],
+                start,
+                compact_end,
+                cache_ttl=300,
+            )
+        except IfindError as exc:
+            raise ChartDataError("No iFinD daily chart data returned") from exc
+        normalized = []
+        for row in rows:
+            stamp = str(row.get("time") or "").strip()
+            trade_date = stamp[:10]
+            close = _number(row.get("close"))
+            if not re.fullmatch(r"\d{4}-\d{2}-\d{2}", trade_date) or close <= 0:
+                continue
+            normalized.append(
+                {
+                    "trade_date": trade_date,
+                    "open": _number(row.get("open")),
+                    "high": _number(row.get("high")),
+                    "low": _number(row.get("low")),
+                    "close": close,
+                    "volume": _number(row.get("volume")),
+                    "amount_billion": _number(row.get("amount")) / 100_000_000,
+                }
+            )
+        normalized.sort(key=lambda row: row["trade_date"])
+        for index, row in enumerate(normalized):
+            previous = normalized[index - 1]["close"] if index > 0 else 0
+            row["change"] = round((row["close"] / previous - 1) * 100, 4) if previous else 0.0
+
+        market_now = datetime.now().astimezone()
+        today = market_now.strftime("%Y%m%d")
+        market_open = (
+            market_now.weekday() < 5
+            and market_now.time().replace(tzinfo=None) >= dt_time(9, 30)
+        )
+        today_display = market_now.date().isoformat()
+        if normalized and normalized[-1]["trade_date"] == today_display:
+            current_bar = normalized[-1]
+            current_bar_is_valid = (
+                current_bar["open"] > 0
+                and current_bar["high"] >= max(current_bar["open"], current_bar["close"])
+                and 0 < current_bar["low"] <= min(current_bar["open"], current_bar["close"])
+                and (current_bar["volume"] > 0 or current_bar["amount_billion"] > 0)
+            )
+            if not market_open or not current_bar_is_valid:
+                normalized.pop()
+        if compact_end == today and market_open:
+            try:
+                quote_rows = self.ifind.real_time(
+                    ifind_code,
+                    ["open", "high", "low", "latest", "preClose", "volume", "amount"],
+                    cache_ttl=10,
+                )
+                quote = quote_rows[0] if quote_rows else {}
+                latest = _number(quote.get("latest"))
+                previous = _number(quote.get("preClose"))
+                open_price = _number(quote.get("open"))
+                high = _number(quote.get("high"))
+                low = _number(quote.get("low"))
+                volume = _number(quote.get("volume"))
+                amount = _number(quote.get("amount"))
+                quote_date = str(quote.get("time") or "")[:10].replace("-", "")
+                quote_is_current = not quote_date or quote_date == today
+                has_market_activity = volume > 0 or amount > 0
+                if (
+                    latest > 0
+                    and open_price > 0
+                    and high >= max(open_price, latest)
+                    and 0 < low <= min(open_price, latest)
+                    and has_market_activity
+                    and quote_is_current
+                ):
+                    realtime = {
+                        "trade_date": end.strftime("%Y-%m-%d"),
+                        "open": open_price,
+                        "high": high,
+                        "low": low,
+                        "close": latest,
+                        "change": round((latest / previous - 1) * 100, 4) if previous else 0.0,
+                        "volume": volume,
+                        "amount_billion": amount / 100_000_000,
+                        "realtime": True,
+                    }
+                    if normalized and normalized[-1]["trade_date"] == realtime["trade_date"]:
+                        normalized[-1] = realtime
+                    else:
+                        normalized.append(realtime)
+            except IfindError:
+                pass
+        if not normalized:
+            raise ChartDataError("No iFinD daily chart data returned")
+        return normalized[-max(20, min(180, int(limit))):]
+
+    def _previous_close(self, code: str, trade_date: str, fallback: float) -> float:
+        today = datetime.now().astimezone().date().isoformat()
+        if trade_date == today:
+            try:
+                quote = self.ifind.real_time(code, ["preClose"], cache_ttl=20)
+                value = _number((quote[0] if quote else {}).get("preClose"))
+                if value > 0:
+                    return value
+            except IfindError:
+                pass
+        end = datetime.strptime(trade_date, "%Y-%m-%d")
+        try:
+            rows = self.ifind.history(
+                code,
+                ["close"],
+                (end - timedelta(days=12)).strftime("%Y%m%d"),
+                end.strftime("%Y%m%d"),
+                cache_ttl=6 * 60 * 60,
+            )
+            closes = [_number(row.get("close")) for row in rows if _number(row.get("close")) > 0]
+            if len(closes) >= 2:
+                return closes[-2]
+        except IfindError:
+            pass
+        return fallback
+
+
+@dataclass
+class EastmoneyChartClient:
+    """Isolated display-only minute chart source.
+
+    The returned data must not be used by market snapshots, scoring, screening,
+    or divination. Its only consumer is a chart-rendering endpoint.
+    """
+
+    timeout: int = 6
+    cache_ttl_seconds: int = 20
+    retry_attempts: int = 2
+    _cache: ClassVar[dict[str, dict[str, Any]]] = {}
+    _cache_lock: ClassVar[Lock] = Lock()
+    _board_catalog: ClassVar[dict[str, dict[str, str]]] = {}
+    _board_catalog_at: ClassVar[float] = 0.0
+    _board_catalog_lock: ClassVar[Lock] = Lock()
+
+    def stock_intraday(self, code: str) -> dict[str, Any]:
+        normalized = str(code or "").strip()
+        if not re.fullmatch(r"\d{6}", normalized):
+            raise ChartDataError("Invalid stock code")
+        market = "1" if normalized.startswith(("5", "6", "9")) else "0"
+        return self._intraday(f"{market}.{normalized}", "stock", normalized)
+
+    def index_intraday(self, identifier: str) -> dict[str, Any]:
+        normalized = str(identifier or "").strip().upper()
+        secid = INDEX_SECIDS.get(normalized)
+        if not secid:
+            raise ChartDataError("Unsupported index")
+        return self._intraday(secid, "index", normalized)
+
+    def board_intraday(self, identifier: str, name: str = "") -> dict[str, Any]:
+        normalized = str(identifier or "").strip().upper()
+        if re.fullmatch(r"BK\d{4}", normalized):
+            board_code = normalized
+        else:
+            board_code = self._resolve_board_code(name or identifier)
+        return self._intraday(f"90.{board_code}", "board", board_code)
+
+    def _intraday(self, secid: str, entity_type: str, identifier: str) -> dict[str, Any]:
+        cache_key = f"{entity_type}:{identifier}"
+        cached = self._get_cached(cache_key)
+        if cached is not None:
+            return cached
+
+        payload = self._request_json(
+            TRENDS_URL,
+            {
+                "secid": secid,
+                "fields1": "f1,f2,f3,f4,f5,f6,f7,f8,f9,f10,f11,f12,f13",
+                "fields2": "f51,f52,f53,f54,f55,f56,f57,f58",
+                "iscr": "0",
+                "ndays": "1",
+            },
+            "https://quote.eastmoney.com/",
+        )
+        data = payload.get("data") or {}
+        points = [point for raw in data.get("trends") or [] if (point := _parse_trend(raw))]
+        if not points:
+            raise ChartDataError("No intraday chart data returned")
+
+        result = {
+            "entity_type": entity_type,
+            "identifier": identifier,
+            "name": str(data.get("name") or ""),
+            "code": str(data.get("code") or identifier),
+            "trade_date": points[-1]["date"],
+            "previous_close": _number(data.get("preClose")),
+            "points": points,
+        }
+        with self._cache_lock:
+            self._cache[cache_key] = {"created_at": time.time(), "payload": result}
+        return result
+
+    def _get_cached(self, cache_key: str) -> dict[str, Any] | None:
+        with self._cache_lock:
+            cached = self._cache.get(cache_key)
+        if not cached:
+            return None
+        if time.time() - float(cached.get("created_at") or 0) > self.cache_ttl_seconds:
+            with self._cache_lock:
+                self._cache.pop(cache_key, None)
+            return None
+        return dict(cached["payload"])
+
+    def _resolve_board_code(self, name: str) -> str:
+        normalized = _normalize_name(name)
+        if not normalized:
+            raise ChartDataError("Board name is required")
+        catalog = self._load_board_catalog()
+        item = catalog.get(normalized)
+        if not item:
+            raise ChartDataError("No matching chart board")
+        return item["code"]
+
+    def _load_board_catalog(self) -> dict[str, dict[str, str]]:
+        now = time.time()
+        with self._board_catalog_lock:
+            if self._board_catalog and now - self._board_catalog_at < 6 * 60 * 60:
+                return dict(self._board_catalog)
+
+        rows: list[dict[str, Any]] = []
+        for board_type in ("1", "2", "3"):
+            for page in range(1, 6):
+                payload = self._request_json(
+                    BOARD_LIST_URL,
+                    {
+                        "pn": str(page),
+                        "pz": "100",
+                        "po": "1",
+                        "np": "1",
+                        "fltt": "2",
+                        "invt": "2",
+                        "fid": "f3",
+                        "fs": f"m:90+t:{board_type}",
+                        "fields": "f12,f14",
+                    },
+                    "https://quote.eastmoney.com/center/boardlist.html",
+                )
+                page_rows = (payload.get("data") or {}).get("diff") or []
+                rows.extend(page_rows)
+                if len(page_rows) < 100:
+                    break
+
+        catalog: dict[str, dict[str, str]] = {}
+        for row in rows:
+            code = str(row.get("f12") or "").strip().upper()
+            board_name = str(row.get("f14") or "").strip()
+            if re.fullmatch(r"BK\d{4}", code) and board_name:
+                catalog.setdefault(_normalize_name(board_name), {"code": code, "name": board_name})
+        if not catalog:
+            raise ChartDataError("Board chart directory is unavailable")
+        with self._board_catalog_lock:
+            type(self)._board_catalog = catalog
+            type(self)._board_catalog_at = now
+        return dict(catalog)
+
+    def _request_json(
+        self, url: str, params: dict[str, str], referer: str
+    ) -> dict[str, Any]:
+        request_url = f"{url}?{urllib.parse.urlencode(params)}"
+        last_error: Exception | None = None
+        for attempt in range(max(1, int(self.retry_attempts))):
+            request = urllib.request.Request(
+                request_url,
+                headers={
+                    "Accept": "application/json,text/plain,*/*",
+                    "Connection": "close",
+                    "Referer": referer,
+                    "User-Agent": BROWSER_USER_AGENT,
+                },
+            )
+            try:
+                with urllib.request.urlopen(request, timeout=self.timeout) as response:
+                    payload = json.loads(response.read().decode("utf-8"))
+                if not isinstance(payload, dict):
+                    raise ChartDataError("Invalid intraday chart response")
+                return payload
+            except (
+                urllib.error.URLError,
+                TimeoutError,
+                ConnectionError,
+                OSError,
+                http.client.HTTPException,
+                json.JSONDecodeError,
+                ChartDataError,
+            ) as exc:
+                last_error = exc
+                if attempt + 1 < self.retry_attempts:
+                    time.sleep(0.12)
+        raise ChartDataError("Intraday chart request failed") from last_error
+
+
+def _parse_trend(raw: Any) -> dict[str, Any] | None:
+    fields = str(raw or "").split(",")
+    if len(fields) < 8 or " " not in fields[0]:
+        return None
+    stamp = fields[0].strip()
+    trade_date, trade_time = stamp.split(" ", 1)
+    close = _number(fields[2])
+    if close <= 0:
+        return None
+    return {
+        "date": trade_date,
+        "time": trade_time[:5],
+        "open": _number(fields[1]),
+        "close": close,
+        "high": _number(fields[3]),
+        "low": _number(fields[4]),
+        "volume": _number(fields[5]),
+        "amount": _number(fields[6]),
+        "average": _number(fields[7]),
+    }
+
+
+def _ifind_point(row: dict[str, Any]) -> dict[str, Any] | None:
+    stamp = str(row.get("time") or "").strip()
+    if " " not in stamp:
+        return None
+    trade_date, trade_time = stamp.split(" ", 1)
+    close = _number(row.get("close"))
+    if close <= 0:
+        return None
+    return {
+        "date": trade_date,
+        "time": trade_time[:5],
+        "open": _number(row.get("open")),
+        "close": close,
+        "high": _number(row.get("high")),
+        "low": _number(row.get("low")),
+        "volume": _number(row.get("volume")),
+        "amount": _number(row.get("amount")),
+        "average": _number(row.get("avgPrice")),
+    }
+
+
+def _stock_market_code(code: str) -> str:
+    if code.startswith(("4", "8", "9")):
+        suffix = "BJ"
+    elif code.startswith("6"):
+        suffix = "SH"
+    else:
+        suffix = "SZ"
+    return f"{code}.{suffix}"
+
+
+def _number(value: Any) -> float:
+    try:
+        return float(value or 0)
+    except (TypeError, ValueError):
+        return 0.0
+
+
+def _normalize_name(value: Any) -> str:
+    normalized = re.sub(r"[\s·・（）()\-_/]", "", str(value or "")).casefold()
+    return re.sub(r"(?:概念|行业|[ⅠⅡⅢ])$", "", normalized)

app/compose.yaml

@@ -0,0 +1,34 @@
+services:
+  xiaobai-review:
+    build:
+      context: .
+      dockerfile: Dockerfile
+    image: xiaobai-review:latest
+    container_name: xiaobai-review
+    ports:
+      - "0.0.0.0:8765:8765/tcp"
+    env_file:
+      - ./.env
+    environment:
+      APP_ENCRYPTION_KEY: "${APP_ENCRYPTION_KEY:?APP_ENCRYPTION_KEY must be set in .env}"
+      TZ: Asia/Shanghai
+      PYTHONUTF8: "1"
+    volumes:
+      - type: bind
+        source: ./data
+        target: /app/data
+    restart: unless-stopped
+    init: true
+    read_only: true
+    tmpfs:
+      - /tmp:size=64m,mode=1777
+    security_opt:
+      - no-new-privileges:true
+    cap_drop:
+      - ALL
+    stop_grace_period: 30s
+    logging:
+      driver: json-file
+      options:
+        max-size: "10m"
+        max-file: "3"

app/config/README.md

@@ -0,0 +1,26 @@
+# Governance Registries
+
+These registries describe the approved product surface during architecture migration.
+
+- `pages.config.json`: primary page identity, navigation group, access expectation, scrolling,
+  and mobile composition policy.
+- `features.config.json`: feature ownership, backend access class, data scope, and availability.
+- `api.config.json`: transitional inventory of current routes, generated from `server.py` and
+  assigned to a feature owner.
+- `data-fields.config.json`: canonical data products, provider eligibility, intended use, and
+  known blocked datasets.
+- `data-quality.config.json`: freshness, coverage, units, adjustment, point-in-time, and
+  fail-closed rules for every canonical data product.
+- `jobs.config.json`: background schedules, dependencies, lock keys, retry policy, timeouts,
+  and output versions.
+
+During Stage 04 these files are contract inputs, not runtime replacements. Backend access in
+`api_access.py` remains authoritative until the HTTP governance phase switches it atomically.
+Frontend visibility remains a presentation concern and never grants backend access.
+
+Regenerate the transitional API inventory after a route change:
+
+```shell
+python tools/build_api_registry.py
+python tools/build_api_registry.py --check
+```

app/config/api.config.json

@@ -0,0 +1,524 @@
+{
+  "schema_version": 1,
+  "generated_from": "server.py",
+  "routes": [
+    {
+      "method": "DELETE",
+      "path": "/api/account/birth-profile",
+      "match": "exact",
+      "feature": "account",
+      "access": "authenticated"
+    },
+    {
+      "method": "POST",
+      "path": "/api/account/birth-profile",
+      "match": "exact",
+      "feature": "account",
+      "access": "authenticated"
+    },
+    {
+      "method": "POST",
+      "path": "/api/account/password",
+      "match": "exact",
+      "feature": "account",
+      "access": "authenticated"
+    },
+    {
+      "method": "GET",
+      "path": "/api/account/status",
+      "match": "exact",
+      "feature": "account",
+      "access": "authenticated"
+    },
+    {
+      "method": "POST",
+      "path": "/api/admin/membership",
+      "match": "exact",
+      "feature": "admin",
+      "access": "admin"
+    },
+    {
+      "method": "POST",
+      "path": "/api/admin/refresh",
+      "match": "exact",
+      "feature": "admin",
+      "access": "admin"
+    },
+    {
+      "method": "GET",
+      "path": "/api/admin/settings",
+      "match": "exact",
+      "feature": "admin",
+      "access": "admin"
+    },
+    {
+      "method": "POST",
+      "path": "/api/admin/settings",
+      "match": "exact",
+      "feature": "admin",
+      "access": "admin"
+    },
+    {
+      "method": "POST",
+      "path": "/api/admin/settings/test",
+      "match": "exact",
+      "feature": "admin",
+      "access": "admin"
+    },
+    {
+      "method": "GET",
+      "path": "/api/alerts",
+      "match": "exact",
+      "feature": "alerts",
+      "access": "authenticated"
+    },
+    {
+      "method": "POST",
+      "path": "/api/alerts",
+      "match": "exact",
+      "feature": "alerts",
+      "access": "authenticated"
+    },
+    {
+      "method": "DELETE",
+      "path": "/api/alerts/(\\d+)",
+      "match": "regex",
+      "feature": "alerts",
+      "access": "authenticated"
+    },
+    {
+      "method": "POST",
+      "path": "/api/alerts/(\\d+)/read",
+      "match": "regex",
+      "feature": "alerts",
+      "access": "authenticated"
+    },
+    {
+      "method": "POST",
+      "path": "/api/alerts/read-all",
+      "match": "exact",
+      "feature": "alerts",
+      "access": "authenticated"
+    },
+    {
+      "method": "POST",
+      "path": "/api/assistant/chat",
+      "match": "exact",
+      "feature": "review",
+      "access": "member"
+    },
+    {
+      "method": "DELETE",
+      "path": "/api/assistant/messages",
+      "match": "exact",
+      "feature": "review",
+      "access": "member"
+    },
+    {
+      "method": "GET",
+      "path": "/api/assistant/messages",
+      "match": "exact",
+      "feature": "review",
+      "access": "member"
+    },
+    {
+      "method": "GET",
+      "path": "/api/auction",
+      "match": "exact",
+      "feature": "auction",
+      "access": "authenticated"
+    },
+    {
+      "method": "POST",
+      "path": "/api/auth/login",
+      "match": "exact",
+      "feature": "auth",
+      "access": "public"
+    },
+    {
+      "method": "POST",
+      "path": "/api/auth/logout",
+      "match": "exact",
+      "feature": "auth",
+      "access": "authenticated"
+    },
+    {
+      "method": "GET",
+      "path": "/api/auth/me",
+      "match": "exact",
+      "feature": "auth",
+      "access": "authenticated"
+    },
+    {
+      "method": "POST",
+      "path": "/api/auth/register",
+      "match": "exact",
+      "feature": "auth",
+      "access": "public"
+    },
+    {
+      "method": "POST",
+      "path": "/api/backfill",
+      "match": "exact",
+      "feature": "admin",
+      "access": "admin"
+    },
+    {
+      "method": "GET",
+      "path": "/api/chart/intraday",
+      "match": "exact",
+      "feature": "charts",
+      "access": "authenticated"
+    },
+    {
+      "method": "GET",
+      "path": "/api/dashboard",
+      "match": "exact",
+      "feature": "market",
+      "access": "authenticated"
+    },
+    {
+      "method": "GET",
+      "path": "/api/dragon-tiger",
+      "match": "exact",
+      "feature": "dragon_tiger",
+      "access": "authenticated"
+    },
+    {
+      "method": "GET",
+      "path": "/api/dragon-tiger/profiles",
+      "match": "exact",
+      "feature": "dragon_tiger",
+      "access": "authenticated"
+    },
+    {
+      "method": "GET",
+      "path": "/api/health",
+      "match": "exact",
+      "feature": "health",
+      "access": "public"
+    },
+    {
+      "method": "POST",
+      "path": "/api/heaven/hexagram",
+      "match": "exact",
+      "feature": "heaven",
+      "access": "member"
+    },
+    {
+      "method": "POST",
+      "path": "/api/heaven/interpret",
+      "match": "exact",
+      "feature": "heaven",
+      "access": "member"
+    },
+    {
+      "method": "POST",
+      "path": "/api/heaven/personal",
+      "match": "exact",
+      "feature": "heaven",
+      "access": "member"
+    },
+    {
+      "method": "GET",
+      "path": "/api/heaven/readings",
+      "match": "exact",
+      "feature": "heaven",
+      "access": "member"
+    },
+    {
+      "method": "DELETE",
+      "path": "/api/heaven/readings/(\\d+)",
+      "match": "regex",
+      "feature": "heaven",
+      "access": "member"
+    },
+    {
+      "method": "POST",
+      "path": "/api/heaven/sector-phases",
+      "match": "exact",
+      "feature": "heaven",
+      "access": "admin"
+    },
+    {
+      "method": "DELETE",
+      "path": "/api/heaven/sector-phases/(.+)",
+      "match": "regex",
+      "feature": "heaven",
+      "access": "admin"
+    },
+    {
+      "method": "GET",
+      "path": "/api/heaven/setup",
+      "match": "exact",
+      "feature": "heaven",
+      "access": "member"
+    },
+    {
+      "method": "POST",
+      "path": "/api/mentors/chat",
+      "match": "exact",
+      "feature": "mentor",
+      "access": "member"
+    },
+    {
+      "method": "DELETE",
+      "path": "/api/mentors/messages",
+      "match": "exact",
+      "feature": "mentor",
+      "access": "member"
+    },
+    {
+      "method": "GET",
+      "path": "/api/mentors/messages",
+      "match": "exact",
+      "feature": "mentor",
+      "access": "member"
+    },
+    {
+      "method": "POST",
+      "path": "/api/mentors/preferences",
+      "match": "exact",
+      "feature": "mentor",
+      "access": "member"
+    },
+    {
+      "method": "GET",
+      "path": "/api/mentors/setup",
+      "match": "exact",
+      "feature": "mentor",
+      "access": "member"
+    },
+    {
+      "method": "GET",
+      "path": "/api/notes",
+      "match": "exact",
+      "feature": "review",
+      "access": "authenticated"
+    },
+    {
+      "method": "POST",
+      "path": "/api/notes",
+      "match": "exact",
+      "feature": "review",
+      "access": "authenticated"
+    },
+    {
+      "method": "DELETE",
+      "path": "/api/notes/(\\d+)",
+      "match": "regex",
+      "feature": "review",
+      "access": "authenticated"
+    },
+    {
+      "method": "GET",
+      "path": "/api/popularity",
+      "match": "exact",
+      "feature": "popularity",
+      "access": "authenticated"
+    },
+    {
+      "method": "GET",
+      "path": "/api/realtime-aggregate/health",
+      "match": "exact",
+      "feature": "market",
+      "access": "authenticated"
+    },
+    {
+      "method": "POST",
+      "path": "/api/reasons",
+      "match": "exact",
+      "feature": "admin",
+      "access": "admin"
+    },
+    {
+      "method": "GET",
+      "path": "/api/rotation/history",
+      "match": "exact",
+      "feature": "rotation",
+      "access": "authenticated"
+    },
+    {
+      "method": "GET",
+      "path": "/api/rotation/members",
+      "match": "exact",
+      "feature": "rotation",
+      "access": "authenticated"
+    },
+    {
+      "method": "POST",
+      "path": "/api/screener/compile",
+      "match": "exact",
+      "feature": "screener",
+      "access": "member"
+    },
+    {
+      "method": "POST",
+      "path": "/api/screener/run",
+      "match": "exact",
+      "feature": "screener",
+      "access": "member"
+    },
+    {
+      "method": "GET",
+      "path": "/api/screener/setup",
+      "match": "exact",
+      "feature": "screener",
+      "access": "member"
+    },
+    {
+      "method": "POST",
+      "path": "/api/screener/strategies",
+      "match": "exact",
+      "feature": "screener",
+      "access": "member"
+    },
+    {
+      "method": "DELETE",
+      "path": "/api/screener/strategies/(\\d+)",
+      "match": "regex",
+      "feature": "screener",
+      "access": "member"
+    },
+    {
+      "method": "POST",
+      "path": "/api/screener/sync",
+      "match": "exact",
+      "feature": "screener",
+      "access": "member"
+    },
+    {
+      "method": "GET",
+      "path": "/api/screener/tracking",
+      "match": "exact",
+      "feature": "screener",
+      "access": "member"
+    },
+    {
+      "method": "POST",
+      "path": "/api/screener/tracking",
+      "match": "exact",
+      "feature": "screener",
+      "access": "member"
+    },
+    {
+      "method": "DELETE",
+      "path": "/api/screener/tracking/(\\d+)",
+      "match": "regex",
+      "feature": "screener",
+      "access": "member"
+    },
+    {
+      "method": "POST",
+      "path": "/api/screener/tracking/refresh",
+      "match": "exact",
+      "feature": "screener",
+      "access": "member"
+    },
+    {
+      "method": "GET",
+      "path": "/api/search",
+      "match": "exact",
+      "feature": "search",
+      "access": "authenticated"
+    },
+    {
+      "method": "GET",
+      "path": "/api/search/detail",
+      "match": "exact",
+      "feature": "search",
+      "access": "authenticated"
+    },
+    {
+      "method": "GET",
+      "path": "/api/seat-aliases",
+      "match": "exact",
+      "feature": "admin",
+      "access": "authenticated"
+    },
+    {
+      "method": "POST",
+      "path": "/api/seat-aliases",
+      "match": "exact",
+      "feature": "admin",
+      "access": "admin"
+    },
+    {
+      "method": "GET",
+      "path": "/api/sentiment/history",
+      "match": "exact",
+      "feature": "sentiment",
+      "access": "authenticated"
+    },
+    {
+      "method": "GET",
+      "path": "/api/stock/(\\d{6})",
+      "match": "regex",
+      "feature": "market",
+      "access": "authenticated"
+    },
+    {
+      "method": "GET",
+      "path": "/api/stock/(\\d{6})/preview",
+      "match": "regex",
+      "feature": "market",
+      "access": "authenticated"
+    },
+    {
+      "method": "GET",
+      "path": "/api/themes",
+      "match": "exact",
+      "feature": "themes",
+      "access": "authenticated"
+    },
+    {
+      "method": "GET",
+      "path": "/api/themes/detail",
+      "match": "exact",
+      "feature": "themes",
+      "access": "authenticated"
+    },
+    {
+      "method": "GET",
+      "path": "/api/trades",
+      "match": "exact",
+      "feature": "review",
+      "access": "authenticated"
+    },
+    {
+      "method": "POST",
+      "path": "/api/trades",
+      "match": "exact",
+      "feature": "review",
+      "access": "authenticated"
+    },
+    {
+      "method": "DELETE",
+      "path": "/api/trades/(\\d+)",
+      "match": "regex",
+      "feature": "review",
+      "access": "authenticated"
+    },
+    {
+      "method": "GET",
+      "path": "/api/watchlist",
+      "match": "exact",
+      "feature": "review",
+      "access": "authenticated"
+    },
+    {
+      "method": "POST",
+      "path": "/api/watchlist",
+      "match": "exact",
+      "feature": "review",
+      "access": "authenticated"
+    },
+    {
+      "method": "DELETE",
+      "path": "/api/watchlist/(\\d{6})",
+      "match": "regex",
+      "feature": "review",
+      "access": "authenticated"
+    }
+  ]
+}

app/config/data-fields.config.json

@@ -0,0 +1,31 @@
+{
+  "schema_version": 1,
+  "providers": {
+    "tushare": {"class": "licensed", "calculation_allowed": true},
+    "ifind": {"class": "licensed", "calculation_allowed": true},
+    "eastmoney": {"class": "public_web", "calculation_allowed": false},
+    "tencent": {"class": "public_web", "calculation_allowed": false},
+    "local": {"class": "derived", "calculation_allowed": true},
+    "unresolved": {"class": "missing", "calculation_allowed": false}
+  },
+  "datasets": [
+    {"id": "market.trade_calendar", "entity": "market", "frequency": "daily", "primary": "tushare", "fallbacks": [], "usage": "calculation", "fields": ["trade_date", "is_open", "previous_open_date"]},
+    {"id": "market.stock_master", "entity": "stock", "frequency": "event", "primary": "tushare", "fallbacks": [], "usage": "calculation", "fields": ["ts_code", "name", "industry", "market", "list_date"]},
+    {"id": "market.stock_daily", "entity": "stock", "frequency": "daily", "primary": "tushare", "fallbacks": [], "usage": "calculation", "adjustment": "current-unadjusted", "fields": ["open", "high", "low", "close", "pct_chg", "volume_shares", "amount_yuan"]},
+    {"id": "market.daily_valuation", "entity": "stock", "frequency": "daily", "primary": "tushare", "fallbacks": [], "usage": "calculation", "fields": ["turnover_rate_pct", "volume_ratio", "total_mv_10k_yuan", "circ_mv_10k_yuan", "pe_ttm", "pb", "ps_ttm", "dv_ttm_pct"]},
+    {"id": "market.fundamentals", "entity": "stock", "frequency": "quarterly", "primary": "tushare", "fallbacks": [], "usage": "calculation", "point_in_time": "announcement_date", "fields": ["roe_pct", "roa_pct", "roic_pct", "gross_margin_pct", "net_profit_yoy_pct", "revenue_yoy_pct", "operating_cashflow_quality"]},
+    {"id": "market.moneyflow", "entity": "stock", "frequency": "daily", "primary": "tushare", "fallbacks": [], "usage": "calculation", "fields": ["small_net_yuan", "medium_net_yuan", "large_net_yuan", "extra_large_net_yuan", "total_net_yuan"]},
+    {"id": "market.industry_sw", "entity": "industry", "frequency": "daily", "primary": "tushare", "fallbacks": [], "usage": "calculation", "fields": ["industry_code", "industry_name", "level", "members", "pct_chg", "turnover_rate_pct"]},
+    {"id": "market.limit_events", "entity": "stock", "frequency": "daily", "primary": "tushare", "fallbacks": [], "usage": "calculation", "fields": ["limit_type", "first_time", "last_time", "open_times", "limit_reason", "consecutive_boards"]},
+    {"id": "market.auction_close", "entity": "stock", "frequency": "daily", "primary": "tushare", "fallbacks": [], "usage": "calculation", "fields": ["price", "volume_shares", "amount_yuan", "pre_close", "turnover_rate_pct", "volume_ratio", "float_share"]},
+    {"id": "market.auction_dynamic", "entity": "stock", "frequency": "snapshot", "primary": "ifind", "fallbacks": [], "usage": "calculation", "freshness_seconds": 10, "fields": ["quote_time", "price", "pct_chg", "volume_shares", "amount_yuan"]},
+    {"id": "market.popularity", "entity": "stock", "frequency": "daily", "primary": "tushare", "fallbacks": [], "usage": "calculation", "fields": ["ths_rank", "dc_rank", "rank_change", "dual_source"]},
+    {"id": "market.dragon_tiger", "entity": "stock", "frequency": "daily", "primary": "tushare", "fallbacks": [], "usage": "calculation", "fields": ["seat_name", "buy_yuan", "sell_yuan", "net_buy_yuan", "side", "reason"]},
+    {"id": "chart.stock_daily", "entity": "stock", "frequency": "daily", "primary": "ifind", "fallbacks": [], "usage": "display", "adjustment": "forward1", "fields": ["open", "high", "low", "close", "volume_shares", "amount_yuan"]},
+    {"id": "chart.intraday", "entity": "stock_or_index_or_board", "frequency": "minute", "primary": "ifind", "fallbacks": ["eastmoney"], "usage": "display", "fields": ["quote_time", "open", "high", "low", "close", "avg_price", "volume_shares", "amount_yuan"]},
+    {"id": "observation.realtime_indices", "entity": "index", "frequency": "snapshot", "primary": "eastmoney", "fallbacks": ["tencent"], "usage": "display", "fields": ["quote_time", "price", "pct_chg", "amount_yuan"]},
+    {"id": "derived.sentiment", "entity": "market", "frequency": "daily", "primary": "local", "fallbacks": [], "usage": "calculation", "fields": ["temperature", "stage", "direction", "confidence", "component_scores"]},
+    {"id": "research.consensus", "entity": "stock", "frequency": "event", "primary": "unresolved", "fallbacks": [], "usage": "blocked", "fields": ["consensus_profit", "forecast_revision", "rating_change", "target_price", "report_count"]},
+    {"id": "market.level2", "entity": "stock", "frequency": "tick", "primary": "unresolved", "fallbacks": [], "usage": "blocked", "fields": ["order_queue", "unmatched_orders", "tick_trades", "tick_orders", "open_board_depth"]}
+  ]
+}

app/config/data-quality.config.json

@@ -0,0 +1,45 @@
+{
+  "schema_version": 1,
+  "timezone": "Asia/Shanghai",
+  "defaults": {
+    "calculation": {"missing_policy": "fail_closed", "provenance_required": true, "future_tolerance_seconds": 5},
+    "display": {"missing_policy": "unavailable", "provenance_required": true, "future_tolerance_seconds": 5}
+  },
+  "unit_profiles": {
+    "none": {},
+    "calendar": {"trade_date": "date", "is_open": "boolean", "previous_open_date": "date"},
+    "master": {"list_date": "date"},
+    "daily_ohlcv": {"open": "CNY/share", "high": "CNY/share", "low": "CNY/share", "close": "CNY/share", "pct_chg": "percent", "volume_shares": "share", "amount_yuan": "CNY"},
+    "valuation": {"turnover_rate_pct": "percent", "volume_ratio": "ratio", "total_mv_10k_yuan": "10k CNY", "circ_mv_10k_yuan": "10k CNY", "pe_ttm": "ratio", "pb": "ratio", "ps_ttm": "ratio", "dv_ttm_pct": "percent"},
+    "fundamental": {"roe_pct": "percent", "roa_pct": "percent", "roic_pct": "percent", "gross_margin_pct": "percent", "net_profit_yoy_pct": "percent", "revenue_yoy_pct": "percent", "operating_cashflow_quality": "ratio"},
+    "moneyflow": {"small_net_yuan": "CNY", "medium_net_yuan": "CNY", "large_net_yuan": "CNY", "extra_large_net_yuan": "CNY", "total_net_yuan": "CNY"},
+    "industry": {"pct_chg": "percent", "turnover_rate_pct": "percent"},
+    "limit_event": {"first_time": "datetime", "last_time": "datetime", "open_times": "count", "consecutive_boards": "count"},
+    "auction": {"price": "CNY/share", "volume_shares": "share", "amount_yuan": "CNY", "pre_close": "CNY/share", "turnover_rate_pct": "percent", "volume_ratio": "ratio", "float_share": "share"},
+    "popularity": {"ths_rank": "rank", "dc_rank": "rank", "rank_change": "rank", "dual_source": "boolean"},
+    "dragon_tiger": {"buy_yuan": "CNY", "sell_yuan": "CNY", "net_buy_yuan": "CNY"},
+    "intraday": {"quote_time": "datetime", "open": "CNY/share", "high": "CNY/share", "low": "CNY/share", "close": "CNY/share", "avg_price": "CNY/share", "volume_shares": "share", "amount_yuan": "CNY"},
+    "realtime_index": {"quote_time": "datetime", "price": "CNY", "pct_chg": "percent", "amount_yuan": "CNY"},
+    "sentiment": {"temperature": "score", "confidence": "percent"}
+  },
+  "datasets": {
+    "market.trade_calendar": {"unit_profile": "calendar", "min_coverage_ratio": 1.0},
+    "market.stock_master": {"unit_profile": "master", "min_coverage_ratio": 0.98},
+    "market.stock_daily": {"unit_profile": "daily_ohlcv", "min_coverage_ratio": 0.98, "adjustment": "current-unadjusted"},
+    "market.daily_valuation": {"unit_profile": "valuation", "min_coverage_ratio": 0.95},
+    "market.fundamentals": {"unit_profile": "fundamental", "min_coverage_ratio": 0.90, "point_in_time": "announcement_date"},
+    "market.moneyflow": {"unit_profile": "moneyflow", "min_coverage_ratio": 0.90},
+    "market.industry_sw": {"unit_profile": "industry", "min_coverage_ratio": 0.95},
+    "market.limit_events": {"unit_profile": "limit_event", "min_coverage_ratio": 1.0},
+    "market.auction_close": {"unit_profile": "auction", "min_coverage_ratio": 0.90},
+    "market.auction_dynamic": {"unit_profile": "auction", "min_coverage_ratio": 0.80, "freshness_seconds": 10},
+    "market.popularity": {"unit_profile": "popularity", "min_coverage_ratio": 0.95},
+    "market.dragon_tiger": {"unit_profile": "dragon_tiger", "min_coverage_ratio": 0.95},
+    "chart.stock_daily": {"unit_profile": "daily_ohlcv", "min_coverage_ratio": 1.0, "adjustment": "forward1"},
+    "chart.intraday": {"unit_profile": "intraday", "min_coverage_ratio": 1.0, "freshness_seconds": 30},
+    "observation.realtime_indices": {"unit_profile": "realtime_index", "min_coverage_ratio": 1.0, "freshness_seconds": 90},
+    "derived.sentiment": {"unit_profile": "sentiment", "min_coverage_ratio": 1.0},
+    "research.consensus": {"unit_profile": "none", "min_coverage_ratio": 0.0, "blocked": true},
+    "market.level2": {"unit_profile": "none", "min_coverage_ratio": 0.0, "blocked": true}
+  }
+}

app/config/features.config.json

@@ -0,0 +1,26 @@
+{
+  "schema_version": 1,
+  "roles": ["public", "authenticated", "member", "admin"],
+  "features": [
+    {"id": "health", "title": "健康检查", "access": "public", "data_scope": "system", "enabled": true},
+    {"id": "auth", "title": "账户认证", "access": "public", "data_scope": "user", "enabled": true},
+    {"id": "account", "title": "账户设置", "access": "authenticated", "data_scope": "user", "enabled": true},
+    {"id": "admin", "title": "系统管理", "access": "admin", "data_scope": "system", "enabled": true},
+    {"id": "market", "title": "市场总览", "access": "authenticated", "data_scope": "shared", "enabled": true},
+    {"id": "sentiment", "title": "情绪周期", "access": "authenticated", "data_scope": "shared", "enabled": true},
+    {"id": "pools", "title": "市场股池", "access": "authenticated", "data_scope": "shared", "enabled": true},
+    {"id": "ladder", "title": "市场天梯", "access": "authenticated", "data_scope": "shared", "enabled": true},
+    {"id": "rotation", "title": "板块轮动", "access": "authenticated", "data_scope": "shared", "enabled": true},
+    {"id": "auction", "title": "集合竞价", "access": "authenticated", "data_scope": "shared", "enabled": true},
+    {"id": "themes", "title": "题材库", "access": "authenticated", "data_scope": "shared", "enabled": true},
+    {"id": "popularity", "title": "人气热榜", "access": "authenticated", "data_scope": "shared", "enabled": true},
+    {"id": "dragon_tiger", "title": "龙虎榜", "access": "authenticated", "data_scope": "shared", "enabled": true},
+    {"id": "search", "title": "全局搜索", "access": "authenticated", "data_scope": "shared", "enabled": true},
+    {"id": "charts", "title": "行情图表", "access": "authenticated", "data_scope": "shared", "enabled": true},
+    {"id": "screener", "title": "智能选股", "access": "member", "data_scope": "mixed", "daily_llm_quota": true, "enabled": true},
+    {"id": "mentor", "title": "问师", "access": "member", "data_scope": "user", "daily_llm_quota": true, "enabled": true},
+    {"id": "heaven", "title": "问天", "access": "member", "data_scope": "user", "daily_llm_quota": true, "enabled": true},
+    {"id": "review", "title": "我的复盘", "access": "authenticated", "data_scope": "user", "enabled": true},
+    {"id": "alerts", "title": "提醒中心", "access": "authenticated", "data_scope": "user", "enabled": true}
+  ]
+}

app/config/jobs.config.json

@@ -0,0 +1,35 @@
+{
+  "schema_version": 1,
+  "jobs": [
+    {
+      "id": "market.refresh",
+      "schedule": "realtime polling or administrator request",
+      "input_date_policy": "requested trade date",
+      "dependencies": ["market provider", "database"],
+      "lock_key": "market-refresh",
+      "timeout_seconds": 120,
+      "max_attempts": 1,
+      "output_version": "dashboard-v1"
+    },
+    {
+      "id": "screener.automatic",
+      "schedule": "trading day after 15:10 Asia/Shanghai",
+      "input_date_policy": "current completed trade date",
+      "dependencies": ["market.refresh", "factor data", "database"],
+      "lock_key": "automatic-screener",
+      "timeout_seconds": 900,
+      "max_attempts": 1,
+      "output_version": "screener-library-v8"
+    },
+    {
+      "id": "market.ifind-event-enrichment",
+      "schedule": "on demand after market close",
+      "input_date_policy": "completed trade date",
+      "dependencies": ["ifind", "database"],
+      "lock_key": "ifind-event-enrichment",
+      "timeout_seconds": 180,
+      "max_attempts": 1,
+      "output_version": "ifind-event-v1"
+    }
+  ]
+}

app/config/pages.config.json

@@ -0,0 +1,21 @@
+{
+  "schema_version": 1,
+  "pages": [
+    {"id": "sentimentCycleView", "title": "情绪周期", "feature": "sentiment", "group": "market", "access": "authenticated", "desktop_scroll": "page", "mobile_layout": "dedicated", "default": true},
+    {"id": "limitPool", "title": "涨停池", "feature": "pools", "group": "market", "access": "authenticated", "desktop_scroll": "page", "mobile_layout": "dedicated", "default": false},
+    {"id": "brokenView", "title": "炸板池", "feature": "pools", "group": "market", "access": "authenticated", "desktop_scroll": "page", "mobile_layout": "dedicated", "default": false},
+    {"id": "downView", "title": "跌停板", "feature": "pools", "group": "market", "access": "authenticated", "desktop_scroll": "page", "mobile_layout": "dedicated", "default": false},
+    {"id": "yesterdayView", "title": "昨日涨停", "feature": "pools", "group": "market", "access": "authenticated", "desktop_scroll": "page", "mobile_layout": "dedicated", "default": false},
+    {"id": "performanceView", "title": "涨停表现", "feature": "pools", "group": "market", "access": "authenticated", "desktop_scroll": "page", "mobile_layout": "dedicated", "default": false},
+    {"id": "ladderView", "title": "市场天梯", "feature": "ladder", "group": "market", "access": "authenticated", "desktop_scroll": "page", "mobile_layout": "dedicated", "default": false},
+    {"id": "rotationView", "title": "板块轮动", "feature": "rotation", "group": "market", "access": "authenticated", "desktop_scroll": "page", "mobile_layout": "dedicated", "default": false},
+    {"id": "auctionView", "title": "集合竞价", "feature": "auction", "group": "market", "access": "authenticated", "desktop_scroll": "page", "mobile_layout": "dedicated", "default": false},
+    {"id": "themeLibraryView", "title": "题材库", "feature": "themes", "group": "market", "access": "authenticated", "desktop_scroll": "page", "mobile_layout": "dedicated", "default": false},
+    {"id": "popularityView", "title": "人气热榜", "feature": "popularity", "group": "market", "access": "authenticated", "desktop_scroll": "page", "mobile_layout": "dedicated", "default": false},
+    {"id": "dragonView", "title": "龙虎榜", "feature": "dragon_tiger", "group": "market", "access": "authenticated", "desktop_scroll": "page", "mobile_layout": "dedicated", "default": false},
+    {"id": "screenerView", "title": "智能选股", "feature": "screener", "group": "intelligence", "access": "member", "desktop_scroll": "page", "mobile_layout": "dedicated", "default": false},
+    {"id": "mentorView", "title": "问师", "feature": "mentor", "group": "intelligence", "access": "member", "desktop_scroll": "page", "mobile_layout": "dedicated", "default": false},
+    {"id": "heavenView", "title": "问天", "feature": "heaven", "group": "intelligence", "access": "member", "desktop_scroll": "page", "mobile_layout": "dedicated", "default": false},
+    {"id": "reviewWorkspaceView", "title": "我的复盘", "feature": "review", "group": "personal", "access": "authenticated", "desktop_scroll": "page", "mobile_layout": "dedicated", "default": false}
+  ]
+}

app/demo_data.py

@@ -0,0 +1,406 @@
+from __future__ import annotations
+
+from collections import Counter
+import math
+from datetime import datetime, timedelta
+from typing import Any
+
+from sentiment_engine import apply_sentiment_to_dashboard
+
+
+DEMO_LIMITS = [
+    ("600664", "哈药股份", 4.94, 10.02, "医药", "创新药+医药流通", "09:25:00", "09:25:00", 0, 5, 11.78, 14.65, 26458),
+    ("603580", "艾艾精工", 40.84, 9.99, "机器人", "实控人变更+机器人", "09:25:01", "09:25:01", 0, 3, 0.11, 0.53, 27190),
+    ("600785", "新华百货", 9.32, 10.04, "零售", "新零售+股权转让", "10:32:33", "10:32:33", 2, 2, 9.57, 29.44, 4285),
+    ("002739", "万达电影", 10.32, 10.02, "文化传媒", "影视院线+AI视频", "09:30:33", "09:30:33", 0, 2, 3.95, 217.94, 25014),
+    ("000504", "南华生物", 9.36, 9.99, "医药", "细胞医疗+中报预增", "09:39:18", "09:39:18", 1, 2, 8.73, 30.89, 1962),
+    ("000676", "智度股份", 6.22, 10.09, "端侧AI", "AI营销+端侧AI", "09:46:45", "09:46:45", 0, 2, 6.61, 78.36, 10368),
+    ("600162", "香江控股", 2.78, 9.88, "房地产", "房地产+地产链", "09:30:57", "09:30:57", 1, 2, 10.56, 90.86, 4540),
+    ("002365", "永安药业", 13.18, 10.02, "医药", "医药+宠物经济", "09:33:24", "09:33:24", 0, 2, 10.52, 38.84, 8277),
+    ("000566", "海南海药", 5.67, 10.10, "脑机接口", "创新药+脑机接口", "11:01:12", "11:03:48", 2, 2, 22.75, 73.56, 8769),
+    ("002632", "道明光学", 9.63, 10.06, "端侧AI", "AI手机+反光材料", "09:25:00", "09:25:00", 0, 1, 2.63, 60.15, 13417),
+    ("000892", "欢瑞世纪", 3.87, 9.94, "文化传媒", "短剧+AI应用", "09:34:57", "09:34:57", 0, 1, 10.80, 37.96, 5635),
+    ("603496", "恒为科技", 25.08, 10.00, "云计算", "算力+华为", "09:58:12", "10:46:30", 1, 1, 7.65, 80.31, 16611),
+    ("603327", "福蓉科技", 8.57, 10.01, "端侧AI", "AI手机+消费电子", "09:30:02", "09:30:02", 0, 1, 7.02, 77.84, 7784),
+    ("300968", "格林精密", 10.24, 20.00, "端侧AI", "折叠屏+AI眼镜", "09:36:33", "09:36:33", 0, 1, 20.06, 48.23, 7850),
+    ("002045", "国光电器", 8.34, 10.03, "消费电子", "音响电声+AI眼镜", "09:37:45", "09:37:45", 0, 1, 7.11, 66.04, 4517),
+    ("600203", "福日电子", 11.92, 9.96, "消费电子", "华为产业链+机器人", "09:45:03", "09:45:03", 0, 1, 12.04, 105.50, 10554),
+    ("002881", "美格智能", 39.05, 10.00, "端侧AI", "物理AI+算力模组", "10:07:42", "10:07:42", 0, 1, 14.32, 128.20, 4299),
+]
+
+
+DEMO_BROKEN = [
+    ("002141", "贤丰控股", 5.91, 5.35, "PCB板", "PCB板+资产重组", "09:37:03", "14:56:24", 3, 18.95, 61.05),
+    ("002432", "九安医疗", 72.00, 7.48, "医药", "业绩增长+AI应用", "10:53:00", "14:09:45", 5, 14.13, 335.00),
+    ("002980", "华盛昌", 107.37, 5.12, "光通信", "光通信+仪器仪表", "09:59:18", "14:38:36", 1, 17.94, 108.75),
+    ("603725", "天安新材", 14.08, 7.40, "机器人", "机器人+新材料", "09:36:34", "14:37:19", 5, 13.58, 42.92),
+    ("603127", "昭衍新药", 53.25, 5.20, "医药", "创新药+CRO", "10:35:49", "10:46:55", 2, 19.56, 335.66),
+    ("002261", "拓维信息", 29.95, 6.47, "云计算", "算力+华为", "10:48:15", "10:53:54", 3, 12.04, 343.26),
+    ("603893", "瑞芯微", 222.24, 5.58, "国产芯片", "国产芯片+端侧AI", "09:55:26", "13:31:14", 1, 7.60, 939.80),
+    ("603103", "横店影视", 14.94, 5.21, "文化传媒", "影视院线+暑期档", "13:01:06", "13:01:51", 1, 2.79, 94.75),
+]
+
+
+DEMO_DOWN = [
+    ("603683", "晶华新材", 25.56, -10.00, "新材料", "高位股风险释放", 4.41, 173.67, 1),
+    ("603928", "兴业股份", 12.34, -9.99, "化工", "连续上涨后补跌", 11.96, 42.04, 4),
+    ("000988", "华工科技", 130.69, -10.00, "光通信", "高位成交放大", 6.28, 1313.42, 1),
+    ("603137", "恒尚节能", 32.05, -10.00, "建筑", "昨日涨停断板", 1.48, 58.63, 1),
+    ("603115", "海星股份", 81.06, -10.00, "有色金属", "板块退潮", 3.02, 196.08, 1),
+    ("605376", "博迁新材", 166.02, -10.00, "新材料", "资金兑现", 5.35, 434.31, 1),
+    ("003020", "立方制药", 19.72, -10.00, "医药", "医药分化", 22.88, 45.00, 1),
+    ("605255", "天普股份", 78.47, -10.00, "汽车零部件", "连板失败", 2.12, 105.21, 1),
+    ("002123", "梦网科技", 7.68, -9.96, "通信", "板块调整", 1.39, 61.86, 2),
+    ("603713", "密尔克卫", 64.80, -10.00, "物流", "业绩预期调整", 3.99, 103.43, 1),
+]
+
+
+def _stock_rows() -> list[dict[str, Any]]:
+    return [
+        {
+            "code": code,
+            "ts_code": code,
+            "name": name,
+            "price": price,
+            "change": change,
+            "sector": sector,
+            "reason": reason,
+            "first_time": first_time,
+            "last_time": last_time,
+            "open_times": open_times,
+            "streak": streak,
+            "turnover_rate": turnover,
+            "amount_billion": amount,
+            "seal_amount_million": seal,
+            "float_mv_billion": round(amount * 3.2, 1),
+            "status": "涨停",
+        }
+        for code, name, price, change, sector, reason, first_time, last_time,
+        open_times, streak, turnover, amount, seal in DEMO_LIMITS
+    ]
+
+
+def _broken_rows() -> list[dict[str, Any]]:
+    return [
+        {
+            "code": code,
+            "ts_code": code,
+            "name": name,
+            "price": price,
+            "change": change,
+            "sector": sector,
+            "reason": reason,
+            "first_time": first_time,
+            "last_time": last_time,
+            "open_times": open_times,
+            "streak": 1,
+            "turnover_rate": turnover,
+            "amount_billion": amount,
+            "seal_amount_million": 0,
+            "float_mv_billion": round(amount * 3.5, 1),
+            "status": "炸板",
+        }
+        for code, name, price, change, sector, reason, first_time, last_time,
+        open_times, turnover, amount in DEMO_BROKEN
+    ]
+
+
+def _down_rows() -> list[dict[str, Any]]:
+    return [
+        {
+            "code": code,
+            "ts_code": code,
+            "name": name,
+            "price": price,
+            "change": change,
+            "sector": sector,
+            "reason": reason,
+            "first_time": "--",
+            "last_time": "--",
+            "open_times": 0,
+            "streak": streak,
+            "turnover_rate": turnover,
+            "amount_billion": amount,
+            "seal_amount_million": 0,
+            "float_mv_billion": round(amount * 4.1, 1),
+            "status": "跌停",
+        }
+        for code, name, price, change, sector, reason, turnover, amount, streak in DEMO_DOWN
+    ]
+
+
+def _ladders(rows: list[dict[str, Any]]) -> list[dict[str, Any]]:
+    result = []
+    for level in sorted({row["streak"] for row in rows}, reverse=True):
+        stocks = [row for row in rows if row["streak"] == level]
+        result.append(
+            {
+                "level": level,
+                "label": "首板" if level == 1 else f"{level}板",
+                "count": len(stocks),
+                "stocks": stocks,
+            }
+        )
+    return result
+
+
+def _sectors(rows: list[dict[str, Any]]) -> list[dict[str, Any]]:
+    counts = Counter(row["sector"] for row in rows)
+    result = []
+    for name, count in counts.most_common():
+        stocks = [row for row in rows if row["sector"] == name]
+        result.append(
+            {
+                "name": name,
+                "count": count,
+                "strength": min(99, 48 + count * 9 + max(row["streak"] for row in stocks) * 4),
+                "amount_billion": round(sum(row["amount_billion"] for row in stocks), 1),
+                "leader": max(stocks, key=lambda row: (row["streak"], row["amount_billion"]))["name"],
+                "change": round(sum(row["change"] for row in stocks) / count, 2),
+                "max_streak": max(row["streak"] for row in stocks),
+            }
+        )
+    return result
+
+
+def _yesterday_rows(current: list[dict[str, Any]]) -> list[dict[str, Any]]:
+    current_map = {row["code"]: row for row in current}
+    definitions = [
+        ("600664", "哈药股份", 4, 10.02, "晋级"),
+        ("603580", "艾艾精工", 2, 9.99, "晋级"),
+        ("600785", "新华百货", 1, 10.04, "晋级"),
+        ("002739", "万达电影", 1, 10.02, "晋级"),
+        ("000504", "南华生物", 1, 9.99, "晋级"),
+        ("000676", "智度股份", 1, 10.09, "晋级"),
+        ("603127", "昭衍新药", 1, 5.20, "炸板"),
+        ("002432", "九安医疗", 2, 7.48, "炸板"),
+        ("001388", "信通电子", 3, -5.33, "断板"),
+        ("605255", "天普股份", 2, -10.00, "跌停"),
+        ("600403", "大有能源", 1, -6.75, "断板"),
+        ("002185", "华天科技", 1, -10.00, "跌停"),
+        ("600829", "人民同泰", 1, 2.30, "断板"),
+        ("600844", "金煤科技", 1, 1.18, "断板"),
+    ]
+    rows = []
+    for code, name, prior_streak, current_change, outcome in definitions:
+        current_row = current_map.get(code, {})
+        rows.append(
+            {
+                "code": code,
+                "name": name,
+                "prior_streak": prior_streak,
+                "current_streak": current_row.get("streak", 0),
+                "current_change": current_change,
+                "current_price": current_row.get("price", 0),
+                "sector": current_row.get("sector", "其他"),
+                "reason": current_row.get("reason", "昨日涨停股表现跟踪"),
+                "outcome": outcome,
+            }
+        )
+    return rows
+
+
+def _performance(rows: list[dict[str, Any]]) -> list[dict[str, Any]]:
+    result = []
+    for level in sorted({row["prior_streak"] for row in rows}, reverse=True):
+        group = [row for row in rows if row["prior_streak"] == level]
+        advanced = sum(row["outcome"] == "晋级" for row in group)
+        positive = sum(row["current_change"] > 0 for row in group)
+        result.append(
+            {
+                "level": level,
+                "label": "昨日首板" if level == 1 else f"昨日{level}板",
+                "count": len(group),
+                "advanced": advanced,
+                "advance_rate": round(advanced / len(group) * 100, 1),
+                "positive_rate": round(positive / len(group) * 100, 1),
+                "average_change": round(sum(row["current_change"] for row in group) / len(group), 2),
+            }
+        )
+    return result
+
+
+def _rotation(sectors: list[dict[str, Any]]) -> list[dict[str, Any]]:
+    previous_counts = {
+        "端侧AI": 7,
+        "医药": 5,
+        "文化传媒": 1,
+        "消费电子": 1,
+        "机器人": 3,
+        "房地产": 2,
+        "零售": 0,
+        "云计算": 2,
+        "脑机接口": 1,
+    }
+    result = []
+    for index, sector in enumerate(sectors, start=1):
+        previous = previous_counts.get(sector["name"], 0)
+        delta = sector["count"] - previous
+        result.append(
+            {
+                **sector,
+                "rank": index,
+                "previous_count": previous,
+                "delta": delta,
+                "trend": "升温" if delta > 0 else "降温" if delta < 0 else "持平",
+            }
+        )
+    return result
+
+
+def build_demo_dashboard(trade_date: str, notice: str = "") -> dict[str, Any]:
+    limits = _stock_rows()
+    broken = _broken_rows()
+    down_limits = _down_rows()
+    ladders = _ladders(limits)
+    sectors = _sectors(limits)
+    yesterday = _yesterday_rows(limits)
+    dashboard = {
+        "meta": {
+            "trade_date": f"{trade_date[:4]}-{trade_date[4:6]}-{trade_date[6:8]}",
+            "previous_trade_date": "2026-07-16",
+            "source": "demo",
+            "updated_at": datetime.now().astimezone().isoformat(timespec="seconds"),
+            "notice": notice or "当前展示演示数据，配置 Tushare Token 后可读取真实行情。",
+        },
+        "overview": {
+            "up_count": 2344,
+            "down_count": 2695,
+            "flat_count": 33,
+            "limit_up_count": 41,
+            "limit_down_count": 3,
+            "broken_count": 25,
+            "amount_billion": 24035.6,
+            "seal_rate": 62.1,
+        },
+        "limits": limits,
+        "broken": broken,
+        "down_limits": down_limits,
+        "yesterday_limits": yesterday,
+        "limit_performance": _performance(yesterday),
+        "ladders": ladders,
+        "sectors": sectors,
+        "sector_rotation": _rotation(sectors),
+    }
+    return apply_sentiment_to_dashboard(dashboard)
+
+
+def build_demo_dragon_tiger(trade_date: str, notice: str = "") -> dict[str, Any]:
+    stocks = _stock_rows()[:10]
+    seat_names = [
+        "机构专用",
+        "沪股通专用",
+        "深股通专用",
+        "中信证券股份有限公司上海分公司",
+        "国泰海通证券股份有限公司南京太平南路证券营业部",
+    ]
+    rows = []
+    for index, stock in enumerate(stocks):
+        buy = round(86.5 - index * 6.3, 2)
+        sell = round(22.8 + index * 3.1, 2)
+        net = round(buy - sell, 2)
+        institutions = [
+            {
+                "seat_name": seat_names[index % len(seat_names)],
+                "buy_million": buy,
+                "sell_million": sell,
+                "net_buy_million": net,
+            },
+            {
+                "seat_name": seat_names[(index + 2) % len(seat_names)],
+                "buy_million": round(buy * 0.42, 2),
+                "sell_million": round(sell * 0.65, 2),
+                "net_buy_million": round(buy * 0.42 - sell * 0.65, 2),
+            },
+        ]
+        rows.append(
+            {
+                "code": stock["code"],
+                "ts_code": stock["code"] + (".SH" if stock["code"].startswith("6") else ".SZ"),
+                "name": stock["name"],
+                "price": stock["price"],
+                "change": stock["change"],
+                "turnover_rate": stock["turnover_rate"],
+                "amount_billion": stock["amount_billion"],
+                "buy_million": buy,
+                "sell_million": sell,
+                "net_buy_million": net,
+                "net_rate": round(net / max(buy + sell, 1) * 100, 2),
+                "reason": "日涨幅偏离值达到7%" if index % 2 == 0 else "连续三个交易日涨幅偏离值累计达到20%",
+                "institutions": institutions,
+            }
+        )
+    return {
+        "meta": {
+            "trade_date": f"{trade_date[:4]}-{trade_date[4:6]}-{trade_date[6:8]}",
+            "source": "demo",
+            "updated_at": datetime.now().astimezone().isoformat(timespec="seconds"),
+            "notice": notice or "龙虎榜当前展示演示数据。",
+        },
+        "summary": {
+            "stock_count": len(rows),
+            "institution_count": sum(len(row["institutions"]) for row in rows),
+            "net_buy_million": round(sum(row["net_buy_million"] for row in rows), 2),
+            "positive_count": sum(row["net_buy_million"] > 0 for row in rows),
+        },
+        "rows": rows,
+    }
+
+
+def build_demo_stock_detail(
+    code: str,
+    trade_date: str,
+    name: str = "示例股票",
+    industry: str = "其他",
+    notice: str = "",
+) -> dict[str, Any]:
+    end = datetime.strptime(trade_date, "%Y%m%d")
+    seed = sum(ord(character) for character in code)
+    base = 8 + seed % 45
+    prices = []
+    close = float(base)
+    for index in range(90):
+        day = end - timedelta(days=(89 - index))
+        drift = math.sin((index + seed) / 6) * 0.018 + 0.002
+        open_price = close * (1 + math.sin(index * 1.7) * 0.006)
+        close = max(1, close * (1 + drift))
+        high = max(open_price, close) * (1.012 + (index % 3) * 0.002)
+        low = min(open_price, close) * (0.988 - (index % 2) * 0.002)
+        prices.append(
+            {
+                "trade_date": day.strftime("%Y-%m-%d"),
+                "open": round(open_price, 2),
+                "high": round(high, 2),
+                "low": round(low, 2),
+                "close": round(close, 2),
+                "change": round((close / open_price - 1) * 100, 2),
+                "volume": 180000 + (index % 11) * 26000 + seed * 10,
+                "amount_billion": round(1.8 + (index % 9) * 0.36, 2),
+            }
+        )
+    return {
+        "meta": {
+            "trade_date": f"{trade_date[:4]}-{trade_date[4:6]}-{trade_date[6:8]}",
+            "source": "demo",
+            "updated_at": datetime.now().astimezone().isoformat(timespec="seconds"),
+            "notice": notice or "个股详情当前展示演示数据。",
+        },
+        "stock": {
+            "code": code,
+            "ts_code": code + (".SH" if code.startswith("6") else ".SZ"),
+            "name": name,
+            "industry": industry,
+            "area": "--",
+            "market": "主板",
+            "list_date": "--",
+            "price": prices[-1]["close"],
+            "change": prices[-1]["change"],
+        },
+        "prices": prices,
+        "moneyflow": {
+            "net_million": 18.62,
+            "large_million": 31.48,
+            "medium_million": -4.12,
+            "small_million": -8.74,
+        },
+    }

app/heaven_agent.py

@@ -0,0 +1,118 @@
+from __future__ import annotations
+
+import json
+import time
+import urllib.error
+import urllib.request
+from typing import Any
+
+
+class HeavenAgentError(RuntimeError):
+    pass
+
+
+def interpret_heaven(
+    mode: str,
+    context: dict[str, Any],
+    api_key: str,
+    base_url: str,
+    model: str,
+    timeout: int = 90,
+) -> dict[str, Any]:
+    if mode not in {"trend", "fortune", "heart"}:
+        raise HeavenAgentError("不支持的问天解读模式。")
+    if not api_key or not model:
+        raise HeavenAgentError("LLM API Key 或模型尚未配置。")
+    system_prompt = _system_prompt(mode)
+    payload = json.dumps(
+        {
+            "model": model,
+            "messages": [
+                {"role": "system", "content": system_prompt},
+                {
+                    "role": "user",
+                    "content": json.dumps(context, ensure_ascii=False, separators=(",", ":")),
+                },
+            ],
+            "stream": False,
+        },
+        ensure_ascii=False,
+    ).encode("utf-8")
+    request = urllib.request.Request(
+        f"{base_url.rstrip('/')}/chat/completions",
+        data=payload,
+        headers={
+            "Content-Type": "application/json",
+            "Authorization": f"Bearer {api_key}",
+            "User-Agent": "XiaobaiReviewWeb/0.7",
+        },
+        method="POST",
+    )
+    started = time.perf_counter()
+    try:
+        with urllib.request.urlopen(request, timeout=timeout) as response:
+            result = json.loads(response.read().decode("utf-8"))
+        answer = str(result["choices"][0]["message"]["content"]).strip()
+        if not answer:
+            raise KeyError("empty response")
+    except urllib.error.HTTPError as exc:
+        raise HeavenAgentError(_http_error_message(exc)) from exc
+    except (urllib.error.URLError, TimeoutError, json.JSONDecodeError, KeyError, IndexError) as exc:
+        raise HeavenAgentError(f"问天模型调用失败：{exc}") from exc
+    return {
+        "answer": answer,
+        "model": model,
+        "latency_ms": round((time.perf_counter() - started) * 1000),
+    }
+
+
+def _system_prompt(mode: str) -> str:
+    common = """
+你是“小白复盘”的问天解读器。所有历法、卦象、爻位和市场指标已经由确定性程序计算，你只能解释提供的数据，不得改卦、改爻、改干支或编造行情。
+问天属于传统文化与娱乐化观察，不是预测模型，不承诺应验，不输出无条件买卖指令，不用神秘话术制造确定性。
+使用中文，先给核心判断，再解释结构。引用市场数字时标明数据日期。输出纯文本，可使用简短标题。
+""".strip()
+    if mode == "trend":
+        return common + """
+
+当前任务是“观势·解势”。六爻从初爻到上爻依次是个股内核、个股外显、板块内核、板块外显、指数内核、指数外显；初二为地、三四为人、五上为天。
+行情数据只负责生成六爻，本次解势必须以卦象本身为主，不得根据指数涨跌、板块强弱、涨停家数、成交量或个股表现直接推演方向。context中不会提供这些数字，也不会提供爻位对应的市场角色。
+先解释本卦卦名的核心义、上下卦组合及大象；再只解释实际动爻所代表的转折，并说明本卦如何走向之卦；最后可把这一组卦势翻译成克制的市场语言。
+重点是“本卦为当下之势，动爻为变化关节，之卦为所趋之势”。不要说明某一动爻对应指数、板块或个股，也不要输出“一看指数、二看涨停家数”一类行情观察条件。
+全文控制在300至450个中文字符，最多四小段。卦理约占九成，市场翻译最多一句，只能落到节制、等待、守信、辨伪等行为态度，不得据此预测市场下一阶段、涨跌方向或动能变化。不直接荐股，不使用Markdown表格。
+不要使用“必然、确定、必涨、必跌、后续将、进入某阶段”等断语；天机只点出势的性质与变化关系，不替用户宣布结果。
+""".strip()
+    if mode == "fortune":
+        return common + """
+
+当前任务是“观气·解运”。严格区分五运、六气、节气、月令和日干，不把丙午简单解释为火年。
+严格服从five_phase_field.framework提供的确定性结构，不自行重新计算五行：年纲由中运与司天在泉构成；岁半以前司天为主、在泉为辅，岁半以后在泉为主、司天为辅；当前六气层以客气加临主气为核心；日辰只负责触发。节气只用于定位当前六气阶段，不得再次叠加为独立力量。
+重点解释framework.relations中的客主同气、客生主、主生客、客克主或主克客，以及客胜为从、主胜为逆、司天在泉同位、天符岁会等已经判定的关系。不得把司天、在泉、主气、客气视为彼此独立的证据重复计权，也不得自行增删传统格局。
+首要解释当日气场容易放大参与者的哪些情绪、判断偏差和操作冲动，例如急躁、恐惧、迟疑、追涨、过早止损或路径依赖；再给出一至两个调节动作。
+如有personal_profile，结合其日主、十神、五行平衡倾向说明当日对该用户主观状态的影响，但不得把简化平衡倾向说成唯一喜用神，也不得复述或猜测出生日期。
+不得引用市场上涨下跌家数、涨跌停数量、成交额、板块强度或个股表现来证明气场。industry_affinity只是五行行业取象示例，不是行情旁证；行业契合度最多在末尾用一句话说明，不得写“当日共振”或暗示相关行业必然涨跌。
+全文控制在420至600个中文字符，按“三层气机、人的状态、操作偏向、个人影响（如有）、制衡动作”组织，标题必须写“三层气机”。明确这些是传统历法框架下的观察语言，不宣称气候或五行直接导致股价。
+""".strip()
+    return common + """
+
+当前任务是“观心·解卦”。用户的问题始终只在心中，没有输入给你，因此你不能猜测问题内容，也不能替用户作具体决定。
+全文控制在180至350个中文字符。只写一句卦意；一小段动爻与之卦；最后三句极短的问心句。
+不要重述六条爻辞，不猜用户未说出口的问题，不以吉凶二字替代思考，不给出股票涨跌预测。语气安静、克制，越短越有余味。
+""".strip()
+
+
+def _http_error_message(exc: urllib.error.HTTPError) -> str:
+    detail = ""
+    try:
+        payload = json.loads(exc.read().decode("utf-8", errors="replace"))
+        error = payload.get("error")
+        if isinstance(error, dict):
+            detail = str(error.get("message") or error.get("code") or "")
+        elif error:
+            detail = str(error)
+        elif payload.get("message"):
+            detail = str(payload["message"])
+    except (json.JSONDecodeError, OSError):
+        detail = ""
+    suffix = f"：{detail[:300]}" if detail else ""
+    return f"问天模型调用失败（HTTP {exc.code}）{suffix}"

app/ifind_client.py

@@ -0,0 +1,385 @@
+from __future__ import annotations
+
+import copy
+import json
+import threading
+import time
+import urllib.error
+import urllib.request
+from datetime import datetime, timedelta
+from typing import Any
+
+
+class IfindError(RuntimeError):
+    pass
+
+
+class IfindHttpClient:
+    BASE_URL = "https://quantapi.51ifind.com/api/v1"
+    AUTH_ENDPOINT = "get_access_token"
+    AUTH_ERROR_CODES = {-1302, -1303, -1304, -4302, -4303}
+
+    def __init__(
+        self,
+        refresh_token: str = "",
+        access_token: str = "",
+        timeout: int = 15,
+    ) -> None:
+        self.timeout = max(3, int(timeout))
+        self._refresh_token = str(refresh_token or "").strip()
+        self._access_token = str(access_token or "").strip()
+        self._access_expires_at: datetime | None = None
+        self._token_lock = threading.Lock()
+        self._cache_lock = threading.Lock()
+        self._cache: dict[str, dict[str, Any]] = {}
+
+    @property
+    def configured(self) -> bool:
+        return bool(self._refresh_token or self._access_token)
+
+    def set_credentials(self, refresh_token: str, access_token: str = "") -> None:
+        refresh_token = str(refresh_token or "").strip()
+        access_token = str(access_token or "").strip()
+        with self._token_lock:
+            refresh_changed = refresh_token != self._refresh_token
+            self._refresh_token = refresh_token
+            if access_token or refresh_changed:
+                self._access_token = access_token
+                self._access_expires_at = None
+        if refresh_changed:
+            with self._cache_lock:
+                self._cache.clear()
+
+    def status(self) -> dict[str, Any]:
+        return {
+            "configured": self.configured,
+            "access_ready": bool(self._access_token),
+            "access_expires_at": (
+                self._access_expires_at.isoformat(timespec="seconds")
+                if self._access_expires_at
+                else ""
+            ),
+        }
+
+    def test_connection(self) -> dict[str, Any]:
+        payload = self.real_time(
+            "000001.SH",
+            ["open", "high", "low", "latest", "preClose"],
+            cache_ttl=0,
+        )
+        return {
+            "ok": bool(payload),
+            "sample_time": str(payload[0].get("time") or "") if payload else "",
+        }
+
+    def real_time(
+        self,
+        codes: str | list[str],
+        indicators: list[str],
+        cache_ttl: int = 10,
+    ) -> list[dict[str, Any]]:
+        code_text = self._codes(codes)
+        payload = self._request(
+            "real_time_quotation",
+            {"codes": code_text, "indicators": ",".join(indicators)},
+            cache_key=f"rq:{code_text}:{','.join(indicators)}",
+            cache_ttl=cache_ttl,
+        )
+        return self._table_rows(payload)
+
+    def history(
+        self,
+        codes: str | list[str],
+        indicators: list[str],
+        start_date: str,
+        end_date: str,
+        cache_ttl: int = 300,
+    ) -> list[dict[str, Any]]:
+        code_text = self._codes(codes)
+        payload = self._request(
+            "cmd_history_quotation",
+            {
+                "codes": code_text,
+                "indicators": ",".join(indicators),
+                "startdate": self._display_date(start_date),
+                "enddate": self._display_date(end_date),
+                "functionpara": {"CPS": "forward1", "Fill": "Omit"},
+            },
+            cache_key=f"hq:{code_text}:{start_date}:{end_date}:{','.join(indicators)}",
+            cache_ttl=cache_ttl,
+        )
+        return self._table_rows(payload)
+
+    def intraday(
+        self,
+        code: str,
+        start_time: str,
+        end_time: str,
+        cache_ttl: int = 20,
+    ) -> list[dict[str, Any]]:
+        indicators = ["open", "high", "low", "close", "volume", "amount", "avgPrice"]
+        payload = self._request(
+            "high_frequency",
+            {
+                "codes": self._codes(code),
+                "indicators": ",".join(indicators),
+                "starttime": start_time,
+                "endtime": end_time,
+                "functionpara": {
+                    "CPS": "forward1",
+                    "Fill": "Previous",
+                    "Timeformat": "LocalTime",
+                    "Interval": "1",
+                    "Limitstart": "09:30:00",
+                    "Limitend": "15:00:00",
+                },
+            },
+            cache_key=f"hf:{code}:{start_time}:{end_time}",
+            cache_ttl=cache_ttl,
+        )
+        return self._table_rows(payload)
+
+    def snapshots(
+        self,
+        codes: str | list[str],
+        indicators: list[str],
+        start_time: str,
+        end_time: str,
+        cache_ttl: int = 8,
+    ) -> list[dict[str, Any]]:
+        code_text = self._codes(codes)
+        payload = self._request(
+            "snap_shot",
+            {
+                "codes": code_text,
+                "indicators": ",".join(indicators),
+                "starttime": start_time,
+                "endtime": end_time,
+            },
+            cache_key=f"ss:{code_text}:{start_time}:{end_time}:{','.join(indicators)}",
+            cache_ttl=cache_ttl,
+        )
+        return self._table_rows(payload)
+
+    def wencai(self, query: str, search_type: str = "stock", cache_ttl: int = 300) -> list[dict[str, Any]]:
+        normalized = " ".join(str(query or "").split())
+        if not normalized:
+            raise IfindError("问财查询不能为空。")
+        payload = self._request(
+            "smart_stock_picking",
+            {"searchstring": normalized, "searchtype": search_type},
+            cache_key=f"wc:{search_type}:{normalized}",
+            cache_ttl=cache_ttl,
+        )
+        return self._table_rows(payload)
+
+    def report_query(
+        self,
+        codes: str | list[str],
+        begin_date: str,
+        end_date: str,
+        cache_ttl: int = 300,
+    ) -> list[dict[str, Any]]:
+        code_text = self._codes(codes)
+        payload = self._request(
+            "report_query",
+            {
+                "codes": code_text,
+                "beginrDate": self._display_date(begin_date),
+                "endrDate": self._display_date(end_date),
+                "outputpara": (
+                    "reportDate:Y,thscode:Y,secName:Y,ctime:Y,"
+                    "reportTitle:Y,pdfURL:Y,seq:Y"
+                ),
+            },
+            cache_key=f"report:{code_text}:{begin_date}:{end_date}",
+            cache_ttl=cache_ttl,
+        )
+        return self._table_rows(payload)
+
+    def _request(
+        self,
+        endpoint: str,
+        body: dict[str, Any],
+        cache_key: str = "",
+        cache_ttl: int = 0,
+    ) -> dict[str, Any]:
+        if not self.configured:
+            raise IfindError("iFinD 尚未配置。")
+        if cache_key and cache_ttl > 0:
+            cached = self._cached(cache_key, cache_ttl)
+            if cached is not None:
+                return cached
+
+        payload = self._post(endpoint, body, self._ensure_access_token())
+        if self._is_auth_error(payload) and self._refresh_token:
+            self._invalidate_access_token()
+            payload = self._post(endpoint, body, self._ensure_access_token(force=True))
+        self._validate_payload(payload)
+        if cache_key and cache_ttl > 0:
+            with self._cache_lock:
+                self._cache[cache_key] = {
+                    "created_at": time.time(),
+                    "payload": copy.deepcopy(payload),
+                }
+        return payload
+
+    def _ensure_access_token(self, force: bool = False) -> str:
+        with self._token_lock:
+            now = datetime.now().astimezone().replace(tzinfo=None)
+            token_valid = bool(self._access_token) and (
+                self._access_expires_at is None
+                or self._access_expires_at > now + timedelta(minutes=2)
+            )
+            if token_valid and not force:
+                return self._access_token
+            if not self._refresh_token:
+                if self._access_token:
+                    return self._access_token
+                raise IfindError("iFinD Refresh Token 尚未配置。")
+            payload = self._post(self.AUTH_ENDPOINT, {}, "", self._refresh_token)
+            self._validate_payload(payload)
+            data = payload.get("data") or {}
+            token = str(data.get("access_token") or "").strip()
+            if not token:
+                raise IfindError("iFinD 未返回 Access Token。")
+            expires_at = self._parse_datetime(data.get("expired_time"))
+            self._access_token = token
+            self._access_expires_at = expires_at
+            return token
+
+    def _post(
+        self,
+        endpoint: str,
+        body: dict[str, Any],
+        access_token: str,
+        refresh_token: str = "",
+    ) -> dict[str, Any]:
+        headers = {
+            "Accept": "application/json",
+            "Content-Type": "application/json",
+            "User-Agent": "XiaobaiReviewWeb/1.0",
+            "ifindlang": "cn",
+        }
+        if access_token:
+            headers["access_token"] = access_token
+        if refresh_token:
+            headers["refresh_token"] = refresh_token
+        request = urllib.request.Request(
+            f"{self.BASE_URL}/{endpoint}",
+            data=json.dumps(body, ensure_ascii=False, separators=(",", ":")).encode("utf-8"),
+            headers=headers,
+            method="POST",
+        )
+        try:
+            with urllib.request.urlopen(request, timeout=self.timeout) as response:
+                payload = json.loads(response.read().decode("utf-8"))
+        except urllib.error.HTTPError as exc:
+            detail = ""
+            try:
+                detail_payload = json.loads(exc.read().decode("utf-8", errors="replace"))
+                detail = str(detail_payload.get("errmsg") or detail_payload.get("message") or "")
+            except (json.JSONDecodeError, OSError):
+                pass
+            raise IfindError(f"iFinD HTTP {exc.code}{f'：{detail[:160]}' if detail else ''}") from exc
+        except (urllib.error.URLError, TimeoutError, OSError, json.JSONDecodeError) as exc:
+            raise IfindError("iFinD 数据请求失败。") from exc
+        if not isinstance(payload, dict):
+            raise IfindError("iFinD 返回格式不正确。")
+        return payload
+
+    def _cached(self, key: str, ttl: int) -> dict[str, Any] | None:
+        with self._cache_lock:
+            cached = self._cache.get(key)
+            if not cached:
+                return None
+            if time.time() - float(cached.get("created_at") or 0) > ttl:
+                self._cache.pop(key, None)
+                return None
+            return copy.deepcopy(cached["payload"])
+
+    def _invalidate_access_token(self) -> None:
+        with self._token_lock:
+            self._access_token = ""
+            self._access_expires_at = None
+
+    @classmethod
+    def _validate_payload(cls, payload: dict[str, Any]) -> None:
+        try:
+            error_code = int(payload.get("errorcode") or 0)
+        except (TypeError, ValueError):
+            error_code = -1
+        if error_code != 0:
+            message = str(payload.get("errmsg") or "未知错误")
+            raise IfindError(f"iFinD 返回错误：{message[:200]}")
+
+    @classmethod
+    def _is_auth_error(cls, payload: dict[str, Any]) -> bool:
+        try:
+            error_code = int(payload.get("errorcode") or 0)
+        except (TypeError, ValueError):
+            error_code = 0
+        message = str(payload.get("errmsg") or "").casefold()
+        return error_code in cls.AUTH_ERROR_CODES or "token" in message or "鉴权" in message
+
+    @staticmethod
+    def _table_rows(payload: dict[str, Any]) -> list[dict[str, Any]]:
+        tables = payload.get("tables") or []
+        if isinstance(tables, dict):
+            tables = [tables]
+        rows: list[dict[str, Any]] = []
+        for block in tables if isinstance(tables, list) else []:
+            if not isinstance(block, dict):
+                continue
+            table = block.get("table") or {}
+            if not isinstance(table, dict):
+                continue
+            times = block.get("time") or []
+            codes = block.get("thscode") or block.get("thscodes") or []
+            if isinstance(codes, str):
+                codes = [codes]
+            lengths = [len(value) for value in table.values() if isinstance(value, list)]
+            row_count = max(lengths or [len(times) if isinstance(times, list) else 0, 1 if table else 0])
+            for index in range(row_count):
+                row: dict[str, Any] = {}
+                if isinstance(times, list) and index < len(times):
+                    row["time"] = times[index]
+                if codes:
+                    row["thscode"] = codes[index] if index < len(codes) else codes[0]
+                for field, values in table.items():
+                    if isinstance(values, list):
+                        row[field] = values[index] if index < len(values) else None
+                    elif index == 0:
+                        row[field] = values
+                rows.append(row)
+        return rows
+
+    @staticmethod
+    def _codes(codes: str | list[str]) -> str:
+        if isinstance(codes, list):
+            values = [str(code or "").strip().upper() for code in codes]
+        else:
+            values = [part.strip().upper() for part in str(codes or "").split(",")]
+        values = [value for value in values if value]
+        if not values:
+            raise IfindError("iFinD 证券代码不能为空。")
+        if len(values) > 100:
+            raise IfindError("iFinD 单次证券代码过多。")
+        return ",".join(values)
+
+    @staticmethod
+    def _display_date(value: str) -> str:
+        compact = str(value or "").replace("-", "")
+        if len(compact) != 8 or not compact.isdigit():
+            raise IfindError("iFinD 日期格式不正确。")
+        return f"{compact[:4]}-{compact[4:6]}-{compact[6:]}"
+
+    @staticmethod
+    def _parse_datetime(value: Any) -> datetime | None:
+        text = str(value or "").strip()
+        if not text:
+            return None
+        try:
+            return datetime.fromisoformat(text)
+        except ValueError:
+            return None

app/llm_strategy.py

@@ -0,0 +1,146 @@
+from __future__ import annotations
+
+import json
+import time
+import urllib.error
+import urllib.request
+from typing import Any
+
+from screener import FACTOR_FIELDS, REGIMES
+
+
+class LLMCompilerError(RuntimeError):
+    pass
+
+
+def test_llm_connection(
+    api_key: str,
+    base_url: str,
+    model: str,
+    timeout: int = 30,
+) -> dict[str, Any]:
+    if not api_key or not model:
+        raise LLMCompilerError("API Key 或模型未配置。")
+    endpoint = f"{base_url.rstrip('/')}/chat/completions"
+    payload = json.dumps(
+        {
+            "model": model,
+            "messages": [{"role": "user", "content": "只回复 OK"}],
+            "stream": False,
+        },
+        ensure_ascii=False,
+    ).encode("utf-8")
+    request = urllib.request.Request(
+        endpoint,
+        data=payload,
+        headers={
+            "Content-Type": "application/json",
+            "Authorization": f"Bearer {api_key}",
+            "User-Agent": "XiaobaiReviewWeb/0.5",
+        },
+        method="POST",
+    )
+    started = time.perf_counter()
+    try:
+        with urllib.request.urlopen(request, timeout=timeout) as response:
+            result = json.loads(response.read().decode("utf-8"))
+        reply = str(result["choices"][0]["message"]["content"]).strip()
+    except urllib.error.HTTPError as exc:
+        raise LLMCompilerError(_http_error_message(exc)) from exc
+    except (urllib.error.URLError, TimeoutError, json.JSONDecodeError, KeyError, IndexError) as exc:
+        raise LLMCompilerError(f"模型连接测试失败：{exc}") from exc
+    return {
+        "ok": True,
+        "model": model,
+        "reply": reply[:100],
+        "latency_ms": round((time.perf_counter() - started) * 1000),
+    }
+
+
+def compile_strategy_with_llm(
+    prompt: str,
+    regime: str,
+    api_key: str,
+    base_url: str,
+    model: str,
+    timeout: int = 45,
+) -> dict[str, Any]:
+    if not api_key or not model:
+        raise LLMCompilerError("尚未配置 LLM API Key 或模型。")
+    endpoint = f"{base_url.rstrip('/')}/chat/completions"
+    schema = {
+        "name": "策略名称",
+        "description": "策略说明",
+        "regimes": [regime],
+        "formula": {
+            "universe": {"exclude_st": True, "listed_days_min": 120},
+            "filters": [{"field": "return_5d", "op": ">=", "value": 0}],
+            "score": [{"field": "sector_strength", "weight": 0.3, "direction": "desc"}],
+            "limit": 15,
+            "min_score": 0.55,
+        },
+    }
+    system_prompt = (
+        "你是A股量化策略编译器。只输出JSON对象，不输出Markdown。"
+        "不得生成Python、SQL、网络请求或未提供的因子。"
+        f"当前市场阶段为{REGIMES.get(regime, regime)}。"
+        f"可用因子为：{json.dumps(FACTOR_FIELDS, ensure_ascii=False)}。"
+        "运算符只能使用 >, >=, <, <=, ==, !=, between, in。"
+        "score权重均大于0且不超过1，direction只能是asc或desc。"
+        "退潮和冰点策略必须提高门槛并允许结果为空。"
+        f"严格遵循以下结构：{json.dumps(schema, ensure_ascii=False)}"
+    )
+    payload = json.dumps(
+        {
+            "model": model,
+            "messages": [
+                {"role": "system", "content": system_prompt},
+                {"role": "user", "content": prompt[:3000]},
+            ],
+            "stream": False,
+        },
+        ensure_ascii=False,
+    ).encode("utf-8")
+    request = urllib.request.Request(
+        endpoint,
+        data=payload,
+        headers={
+            "Content-Type": "application/json",
+            "Authorization": f"Bearer {api_key}",
+            "User-Agent": "XiaobaiReviewWeb/0.4",
+        },
+        method="POST",
+    )
+    try:
+        with urllib.request.urlopen(request, timeout=timeout) as response:
+            result = json.loads(response.read().decode("utf-8"))
+        content = result["choices"][0]["message"]["content"].strip()
+        if content.startswith("```"):
+            content = content.strip("`")
+            if content.startswith("json"):
+                content = content[4:].strip()
+        compiled = json.loads(content)
+    except urllib.error.HTTPError as exc:
+        raise LLMCompilerError(_http_error_message(exc).replace("模型连接测试", "LLM 策略编译")) from exc
+    except (urllib.error.URLError, TimeoutError, json.JSONDecodeError, KeyError, IndexError) as exc:
+        raise LLMCompilerError(f"LLM 策略编译失败：{exc}") from exc
+    compiled["compiler"] = "llm"
+    compiled["model"] = model
+    return compiled
+
+
+def _http_error_message(exc: urllib.error.HTTPError) -> str:
+    detail = ""
+    try:
+        payload = json.loads(exc.read().decode("utf-8", errors="replace"))
+        error = payload.get("error")
+        if isinstance(error, dict):
+            detail = str(error.get("message") or error.get("code") or "")
+        elif error:
+            detail = str(error)
+        elif payload.get("message"):
+            detail = str(payload["message"])
+    except (json.JSONDecodeError, OSError):
+        detail = ""
+    suffix = f"：{detail[:300]}" if detail else ""
+    return f"模型连接测试失败（HTTP {exc.code}）{suffix}"

app/llm_stream.py

@@ -0,0 +1,40 @@
+from __future__ import annotations
+
+from typing import Any
+
+
+class OpenAIStreamAccumulator:
+    """Normalize incremental deltas and provider-specific full-message snapshots."""
+
+    def __init__(self) -> None:
+        self.text = ""
+        self.saw_delta = False
+
+    def feed(self, choice: dict[str, Any]) -> str:
+        delta = choice.get("delta")
+        if isinstance(delta, dict) and delta.get("content") is not None:
+            chunk = str(delta.get("content") or "")
+            if chunk:
+                self.saw_delta = True
+                self.text += chunk
+            return chunk
+
+        message = choice.get("message")
+        if not isinstance(message, dict) or message.get("content") is None:
+            return ""
+        snapshot = str(message.get("content") or "")
+        if not snapshot:
+            return ""
+        if not self.text:
+            self.text = snapshot
+            return snapshot
+        if snapshot == self.text or self.text.startswith(snapshot):
+            return ""
+        if snapshot.startswith(self.text):
+            suffix = snapshot[len(self.text):]
+            self.text = snapshot
+            return suffix
+        if self.saw_delta:
+            # A final full snapshot cannot safely replace chunks already delivered.
+            return ""
+        return ""

app/mentor_agent.py

@@ -0,0 +1,317 @@
+from __future__ import annotations
+
+import json
+import re
+import time
+import urllib.error
+import urllib.request
+from collections.abc import Iterator
+from dataclasses import dataclass
+from pathlib import Path
+from typing import Any
+
+from llm_stream import OpenAIStreamAccumulator
+
+
+class MentorAgentError(RuntimeError):
+    pass
+
+
+@dataclass(frozen=True)
+class MentorSkill:
+    skill_id: str
+    name: str
+    description: str
+    tagline: str
+    focus: tuple[str, ...]
+    content: str
+    path: Path
+    evidence_grade: str = ""
+    evidence_label: str = ""
+    evidence_note: str = ""
+    quality_score: int | None = None
+    quality_total: int | None = None
+    validation_status: str = ""
+    is_private: bool = False
+
+    def public(self) -> dict[str, Any]:
+        return {
+            "id": self.skill_id,
+            "name": self.name,
+            "description": self.description,
+            "tagline": self.tagline,
+            "focus": list(self.focus),
+            "evidence": {
+                "grade": self.evidence_grade,
+                "label": self.evidence_label,
+                "note": self.evidence_note,
+            },
+            "quality": {
+                "score": self.quality_score,
+                "total": self.quality_total,
+                "status": self.validation_status,
+            },
+            "private": self.is_private,
+        }
+
+
+class MentorSkillRegistry:
+    def __init__(self, root: Path, private_root: Path | None = None) -> None:
+        self.root = root
+        self.private_root = private_root
+
+    def list_skills(self, include_private: bool = False) -> list[MentorSkill]:
+        skills = []
+        seen_ids: set[str] = set()
+        roots = [(self.root, False)]
+        if include_private and self.private_root:
+            roots.append((self.private_root, True))
+        for root, is_private in roots:
+            if not root.is_dir():
+                continue
+            catalog = self._read_catalog(root)
+            for directory in sorted(root.iterdir(), key=lambda item: item.name):
+                skill_file = directory / "SKILL.md"
+                if not directory.is_dir() or not skill_file.is_file():
+                    continue
+                skill = self._read_skill(skill_file, catalog, is_private)
+                if skill.skill_id in seen_ids:
+                    continue
+                seen_ids.add(skill.skill_id)
+                skills.append(skill)
+        return skills
+
+    def get_skill(self, skill_id: str, include_private: bool = False) -> MentorSkill:
+        for skill in self.list_skills(include_private=include_private):
+            if skill.skill_id == skill_id:
+                return skill
+        raise ValueError("问师角色不存在或对应 Skill 无法读取。")
+
+    @staticmethod
+    def _read_catalog(root: Path) -> dict[str, Any]:
+        path = root / "mentor_catalog.json"
+        if not path.is_file():
+            return {}
+        try:
+            payload = json.loads(path.read_text(encoding="utf-8"))
+        except (OSError, json.JSONDecodeError) as exc:
+            raise ValueError(f"问师目录元数据无法读取：{path}") from exc
+        mentors = payload.get("mentors", payload) if isinstance(payload, dict) else {}
+        if not isinstance(mentors, dict):
+            raise ValueError(f"问师目录元数据格式错误：{path}")
+        return mentors
+
+    @staticmethod
+    def _read_skill(path: Path, catalog: dict[str, Any], is_private: bool) -> MentorSkill:
+        if path.stat().st_size > 200_000:
+            raise ValueError(f"Skill 文件过大：{path.parent.name}")
+        content = path.read_text(encoding="utf-8")
+        metadata = _parse_frontmatter(content)
+        raw_id = metadata.get("name") or path.parent.name
+        skill_id = re.sub(r"[^A-Za-z0-9_-]+", "-", raw_id).strip("-").lower()
+        if not skill_id:
+            raise ValueError(f"Skill 缺少有效名称：{path.parent.name}")
+
+        heading_match = re.search(r"^#\s+(.+?)(?:\s*[·|]\s*.+)?$", content, re.MULTILINE)
+        display_name = heading_match.group(1).strip() if heading_match else path.parent.name
+        display_name = display_name.removesuffix("-perspective").strip()
+        description_block = metadata.get("description", "")
+        purpose_match = re.search(r"用途[：:]\s*([^\n]+)", description_block)
+        description = purpose_match.group(1).strip() if purpose_match else _first_sentence(description_block)
+        tagline_match = re.search(r'^>\s*["“](.+?)["”]\s*$', content, re.MULTILINE)
+        tagline = tagline_match.group(1).strip() if tagline_match else ""
+        focus = tuple(
+            item.strip()
+            for item in re.findall(r"^###\s+模型\d+[：:]\s*(.+)$", content, re.MULTILINE)[:4]
+        )
+        catalog_item = catalog.get(skill_id, {})
+        if not isinstance(catalog_item, dict):
+            catalog_item = {}
+        evidence = catalog_item.get("evidence", {})
+        quality = catalog_item.get("quality", {})
+        if not isinstance(evidence, dict):
+            evidence = {}
+        if not isinstance(quality, dict):
+            quality = {}
+
+        def optional_int(value: Any) -> int | None:
+            return int(value) if isinstance(value, int) and not isinstance(value, bool) else None
+
+        return MentorSkill(
+            skill_id=skill_id,
+            name=display_name,
+            description=description,
+            tagline=tagline,
+            focus=focus,
+            content=content,
+            path=path,
+            evidence_grade=str(evidence.get("grade") or "").upper(),
+            evidence_label=str(evidence.get("label") or ""),
+            evidence_note=str(evidence.get("note") or ""),
+            quality_score=optional_int(quality.get("score")),
+            quality_total=optional_int(quality.get("total")),
+            validation_status=str(quality.get("status") or ""),
+            is_private=is_private,
+        )
+
+
+def chat_with_mentor(
+    skill: MentorSkill,
+    market_context: dict[str, Any],
+    question: str,
+    history: list[dict[str, str]],
+    api_key: str,
+    base_url: str,
+    model: str,
+    timeout: int = 90,
+) -> dict[str, Any]:
+    started = time.perf_counter()
+    answer = "".join(
+        stream_with_mentor(
+            skill, market_context, question, history, api_key, base_url, model, timeout
+        )
+    ).strip()
+    return {
+        "answer": answer,
+        "model": model,
+        "latency_ms": round((time.perf_counter() - started) * 1000),
+    }
+
+
+def stream_with_mentor(
+    skill: MentorSkill,
+    market_context: dict[str, Any],
+    question: str,
+    history: list[dict[str, str]],
+    api_key: str,
+    base_url: str,
+    model: str,
+    timeout: int = 90,
+) -> Iterator[str]:
+    if not api_key or not model:
+        raise MentorAgentError("LLM API Key 或模型尚未配置。")
+
+    system_prompt = _build_system_prompt(skill, market_context)
+    messages = [{"role": "system", "content": system_prompt}]
+    messages.extend(history[-10:])
+    messages.append({"role": "user", "content": question})
+    payload = json.dumps(
+        {"model": model, "messages": messages, "stream": True},
+        ensure_ascii=False,
+    ).encode("utf-8")
+    request = urllib.request.Request(
+        f"{base_url.rstrip('/')}/chat/completions",
+        data=payload,
+        headers={
+            "Content-Type": "application/json",
+            "Authorization": f"Bearer {api_key}",
+            "User-Agent": "XiaobaiReviewWeb/0.6",
+            "Accept": "text/event-stream",
+        },
+        method="POST",
+    )
+    try:
+        with urllib.request.urlopen(request, timeout=timeout) as response:
+            yielded = False
+            accumulator = OpenAIStreamAccumulator()
+            for raw_line in response:
+                line = raw_line.decode("utf-8", errors="replace").strip()
+                if not line or line.startswith(":"):
+                    continue
+                if line.startswith("data:"):
+                    line = line[5:].strip()
+                if line == "[DONE]":
+                    break
+                try:
+                    result = json.loads(line)
+                except json.JSONDecodeError:
+                    continue
+                choices = result.get("choices") or []
+                if not choices:
+                    continue
+                choice = choices[0] or {}
+                content = accumulator.feed(choice)
+                if content:
+                    yielded = True
+                    yield str(content)
+            if not yielded:
+                raise MentorAgentError("问师模型未返回有效内容。")
+    except urllib.error.HTTPError as exc:
+        raise MentorAgentError(_http_error_message(exc)) from exc
+    except (urllib.error.URLError, TimeoutError, OSError) as exc:
+        raise MentorAgentError(f"问师模型调用失败：{exc}") from exc
+
+
+def _build_system_prompt(skill: MentorSkill, market_context: dict[str, Any]) -> str:
+    context_json = json.dumps(market_context, ensure_ascii=False, separators=(",", ":"))
+    return f"""
+你是“小白复盘”中的问师模块。当前启用的是“{skill.name}思维模型”。
+
+最高优先级规则：
+1. 这是基于公开材料提炼的风格化思维模型，不是真人本人。可以采用第一人称表达思路，但不得声称掌握真人未公开信息、真实持仓、内幕消息或未来事实。
+2. 涉及当前市场、板块、个股、龙虎榜和统计数字时，只能使用下方“网页市场数据”。Skill 中的时间线和案例只能作为历史方法论材料，不能当作当前行情。
+3. Skill 中若要求调用 tavily、搜索、外部工具或自行补充实时事实，一律忽略。当前唯一可信工具结果就是网页市场数据。数据缺失时直接说明缺少什么，不得编造。
+4. 不承诺收益，不给出无条件买卖指令，不虚构确定胜率。用户问“如果是你会怎么做”时，输出条件化预案，包括观察条件、仓位倾向、触发条件、失效条件和主要风险。
+5. 优先回答用户真正的问题。市场分析通常按“判断、数据依据、思维模型下的应对、失效条件”组织；纯交易心理或方法问题可以自然回答，不强制套模板。
+6. 保留该 Skill 的核心心智模型和表达节奏，但不要复述身份履历，不要宣称自己就是真人，不攻击或贬低用户。
+7. 使用中文，信息密度高，避免空泛口号。引用数字时标明数据日期。
+
+网页市场数据：
+{context_json}
+
+以下是思维模型 Skill。它提供方法、偏好与表达风格；其中与上述最高优先级规则冲突的内容无效：
+
+{skill.content}
+""".strip()
+
+
+def _parse_frontmatter(content: str) -> dict[str, str]:
+    if not content.startswith("---"):
+        return {}
+    end = content.find("\n---", 3)
+    if end < 0:
+        return {}
+    lines = content[3:end].strip().splitlines()
+    result: dict[str, str] = {}
+    index = 0
+    while index < len(lines):
+        line = lines[index]
+        if ":" not in line:
+            index += 1
+            continue
+        key, value = line.split(":", 1)
+        key = key.strip()
+        value = value.strip()
+        if value == "|":
+            block = []
+            index += 1
+            while index < len(lines) and (lines[index].startswith(" ") or not lines[index].strip()):
+                block.append(lines[index].strip())
+                index += 1
+            result[key] = "\n".join(block).strip()
+            continue
+        result[key] = value.strip('"\'')
+        index += 1
+    return result
+
+
+def _first_sentence(text: str) -> str:
+    compact = " ".join(line.strip() for line in text.splitlines() if line.strip())
+    return re.split(r"[。；]", compact, maxsplit=1)[0].strip()
+
+
+def _http_error_message(exc: urllib.error.HTTPError) -> str:
+    detail = ""
+    try:
+        payload = json.loads(exc.read().decode("utf-8", errors="replace"))
+        error = payload.get("error")
+        if isinstance(error, dict):
+            detail = str(error.get("message") or error.get("code") or "")
+        elif error:
+            detail = str(error)
+        elif payload.get("message"):
+            detail = str(payload["message"])
+    except (json.JSONDecodeError, OSError):
+        detail = ""
+    suffix = f"：{detail[:300]}" if detail else ""
+    return f"问师模型调用失败（HTTP {exc.code}）{suffix}"

app/package-lock.json

@@ -0,0 +1,76 @@
+{
+  "name": "xiaobai-review-web",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "xiaobai-review-web",
+      "devDependencies": {
+        "@playwright/test": "^1.54.1"
+      }
+    },
+    "node_modules/@playwright/test": {
+      "version": "1.61.1",
+      "resolved": "https://registry.npmjs.org/@playwright/test/-/test-1.61.1.tgz",
+      "integrity": "sha512-8nKv6+0RJSL9FE4jYOEGXnPeM/Hg12qZpmqzZjRh3qM0Y7c3z1mrOTfFLids72RDQYVh9WpLEfR5WdpNX4fkig==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "playwright": "1.61.1"
+      },
+      "bin": {
+        "playwright": "cli.js"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/fsevents": {
+      "version": "2.3.2",
+      "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.2.tgz",
+      "integrity": "sha512-xiqMQR4xAeHTuB9uWm+fFRcIOgKBMiOBP+eXiyT7jsgVCq1bkVygt00oASowB7EdtpOHaaPgKt812P9ab+DDKA==",
+      "dev": true,
+      "hasInstallScript": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^8.16.0 || ^10.6.0 || >=11.0.0"
+      }
+    },
+    "node_modules/playwright": {
+      "version": "1.61.1",
+      "resolved": "https://registry.npmjs.org/playwright/-/playwright-1.61.1.tgz",
+      "integrity": "sha512-DWnY5o3YbLWK4GovuAVwpqL+1VwGNdUGrRr++8j8PtQQzvAVZUIMjKQ90fY689sEJZJBbZVw1rXaOKSTitkzPQ==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "playwright-core": "1.61.1"
+      },
+      "bin": {
+        "playwright": "cli.js"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "optionalDependencies": {
+        "fsevents": "2.3.2"
+      }
+    },
+    "node_modules/playwright-core": {
+      "version": "1.61.1",
+      "resolved": "https://registry.npmjs.org/playwright-core/-/playwright-core-1.61.1.tgz",
+      "integrity": "sha512-h7Qlt6m4REp25qvIdvbDtVmD4LqVXfpRxhORv9L0jzETM05p4fuPJ3dKyuSXQxDSbXnmS79HAgi9589lGSpLkg==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "bin": {
+        "playwright-core": "cli.js"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    }
+  }
+}

app/package.json

@@ -0,0 +1,10 @@
+{
+  "name": "xiaobai-review-web",
+  "private": true,
+  "scripts": {
+    "test:e2e": "playwright test"
+  },
+  "devDependencies": {
+    "@playwright/test": "^1.54.1"
+  }
+}

app/playwright.config.js

@@ -0,0 +1,21 @@
+const { defineConfig } = require("@playwright/test");
+
+module.exports = defineConfig({
+  testDir: "./tests/e2e",
+  timeout: 30_000,
+  fullyParallel: false,
+  reporter: "line",
+  use: {
+    baseURL: "http://127.0.0.1:8876",
+    channel: "msedge",
+    headless: true,
+    screenshot: "only-on-failure",
+    trace: "retain-on-failure",
+  },
+  webServer: {
+    command: "python -m http.server 8876 --bind 127.0.0.1 --directory static",
+    url: "http://127.0.0.1:8876/index.html",
+    reuseExistingServer: true,
+    timeout: 15_000,
+  },
+});

app/realtime_aggregator.py

@@ -0,0 +1,426 @@
+from __future__ import annotations
+
+import copy
+import http.client
+import json
+import time
+import urllib.error
+import urllib.parse
+import urllib.request
+from concurrent.futures import ThreadPoolExecutor
+from dataclasses import dataclass
+from datetime import datetime
+from threading import Lock
+from typing import Any, ClassVar
+
+
+class RealtimeAggregateError(RuntimeError):
+    pass
+
+
+EASTMONEY_INDEX_URL = "https://push2.eastmoney.com/api/qt/ulist.np/get"
+EASTMONEY_SECTOR_URL = "https://push2.eastmoney.com/api/qt/clist/get"
+TENCENT_INDEX_URL = "https://qt.gtimg.cn/q=sh000001,sz399001,sz399006"
+THS_LIMIT_URL = "https://data.10jqka.com.cn/dataapi/limit_up/limit_up_pool"
+XGB_POOL_URL = "https://flash-api.xuangubao.cn/api/pool/detail"
+BROWSER_USER_AGENT = (
+    "Mozilla/5.0 (Windows NT 10.0; Win64; x64) "
+    "AppleWebKit/537.36 (KHTML, like Gecko) "
+    "Chrome/138.0.0.0 Safari/537.36"
+)
+
+
+@dataclass
+class WebRealtimeAggregator:
+    timeout: int = 8
+    retry_attempts: int = 3
+    retry_delay_seconds: float = 0.2
+    response_cache_ttl_seconds: int = 90
+    _sector_cache: ClassVar[dict[str, Any]] = {}
+    _sector_cache_lock: ClassVar[Lock] = Lock()
+    _response_cache: ClassVar[dict[str, dict[str, Any]]] = {}
+    _response_cache_lock: ClassVar[Lock] = Lock()
+
+    def health_snapshot(self, sector: str = "") -> dict[str, Any]:
+        started = time.perf_counter()
+        sources: dict[str, dict[str, Any]] = {}
+        indices: list[dict[str, Any]] = []
+        sector_payload: dict[str, Any] | None = None
+
+        indices, sources["eastmoney_indices"] = self._capture(self.eastmoney_indices)
+        if sector.strip():
+            sector_payload, sources["eastmoney_sector"] = self._capture(
+                lambda: self.eastmoney_sector(sector)
+            )
+        ths_observation, sources["ths_limit_pool"] = self._capture(self.ths_limit_pool)
+        xgb_observation, sources["xgb_limit_pool"] = self._capture(self.xgb_limit_pool)
+
+        index_times = [int(item.get("quote_time_epoch") or 0) for item in indices or []]
+        now = datetime.now().astimezone()
+        max_skew = 120 if now.hour >= 15 else 15
+        index_consistent = bool(index_times) and max(index_times) - min(index_times) <= max_skew
+        ready = (
+            bool(indices)
+            and len(indices) == 3
+            and index_consistent
+            and (not sector.strip() or bool(sector_payload))
+        )
+        return {
+            "ready": ready,
+            "isolated": True,
+            "generated_at": datetime.now().astimezone().isoformat(timespec="seconds"),
+            "elapsed_ms": round((time.perf_counter() - started) * 1000),
+            "indices": indices or [],
+            "index_consistent": index_consistent,
+            "sector": sector_payload,
+            "sources": sources,
+            "observations": {
+                "ths_limit_pool": ths_observation,
+                "xgb_limit_pool": xgb_observation,
+            },
+            "policy": {
+                "integration": "heaven_realtime_fallback",
+                "max_index_time_skew_seconds": max_skew,
+                "notice": "聚合源仅作为盘中观势的实时指数与板块外显，主行情快照仍由Tushare维护。",
+            },
+        }
+
+    def eastmoney_indices(self) -> list[dict[str, Any]]:
+        try:
+            payload = self._get_json(
+                EASTMONEY_INDEX_URL,
+                {
+                    "secids": "1.000001,0.399001,0.399006",
+                    "fltt": "2",
+                    "invt": "2",
+                    "fields": "f12,f14,f2,f3,f4,f15,f16,f17,f18,f6,f124",
+                },
+                referer="https://quote.eastmoney.com/",
+            )
+        except RealtimeAggregateError:
+            return self.tencent_indices()
+        cache_meta = payload.get("_aggregate_cache") or {}
+        rows = list((payload.get("data") or {}).get("diff") or [])
+        result = []
+        for row in rows:
+            code = str(row.get("f12") or "")
+            if code not in {"000001", "399001", "399006"}:
+                continue
+            epoch = int(_number(row.get("f124")))
+            result.append(
+                {
+                    "code": code,
+                    "name": row.get("f14") or code,
+                    "price": _number(row.get("f2")),
+                    "change": _number(row.get("f3")),
+                    "change_amount": _number(row.get("f4")),
+                    "open": _number(row.get("f17")),
+                    "high": _number(row.get("f15")),
+                    "low": _number(row.get("f16")),
+                    "previous_close": _number(row.get("f18")),
+                    "amount_billion": round(_number(row.get("f6")) / 100000000, 2),
+                    "quote_time_epoch": epoch,
+                    "quote_time": (
+                        datetime.fromtimestamp(epoch).astimezone().isoformat(timespec="seconds")
+                        if epoch else ""
+                    ),
+                    "source": (
+                        "eastmoney_push2_cache" if cache_meta else "eastmoney_push2"
+                    ),
+                    "cache_age_seconds": cache_meta.get("age_seconds", 0),
+                }
+            )
+        if len(result) != 3:
+            raise RealtimeAggregateError(f"Eastmoney returned {len(result)}/3 indices")
+        return result
+
+    def tencent_indices(self) -> list[dict[str, Any]]:
+        raw, cache_age = self._get_text(
+            TENCENT_INDEX_URL,
+            referer="https://gu.qq.com/",
+            encoding="gb18030",
+        )
+        result = []
+        for line in raw.splitlines():
+            if '="' not in line:
+                continue
+            fields = line.split('="', 1)[1].rsplit('";', 1)[0].split("~")
+            if len(fields) < 38:
+                continue
+            code = fields[2]
+            if code not in {"000001", "399001", "399006"}:
+                continue
+            try:
+                quote_time = datetime.strptime(fields[30], "%Y%m%d%H%M%S").astimezone()
+            except ValueError as exc:
+                raise RealtimeAggregateError(
+                    f"Tencent returned invalid quote time for {code}"
+                ) from exc
+            result.append(
+                {
+                    "code": code,
+                    "name": fields[1] or code,
+                    "price": _number(fields[3]),
+                    "change": _number(fields[32]),
+                    "change_amount": _number(fields[31]),
+                    "open": _number(fields[5]),
+                    "high": _number(fields[33]),
+                    "low": _number(fields[34]),
+                    "previous_close": _number(fields[4]),
+                    "amount_billion": round(_number(fields[37]) / 10000, 2),
+                    "quote_time_epoch": int(quote_time.timestamp()),
+                    "quote_time": quote_time.isoformat(timespec="seconds"),
+                    "source": "tencent_qt_cache" if cache_age else "tencent_qt",
+                    "cache_age_seconds": cache_age,
+                }
+            )
+        if len(result) != 3:
+            raise RealtimeAggregateError(f"Tencent returned {len(result)}/3 indices")
+        return result
+
+    def eastmoney_sector(self, query: str) -> dict[str, Any]:
+        target = _normalize_sector(query)
+        candidates = self._eastmoney_sector_catalog()
+        matched = _match_sector(candidates, target)
+        if not matched:
+            raise RealtimeAggregateError(f"Eastmoney sector not found: {query}")
+        epoch = int(_number(matched.get("f124")))
+        return {
+            "code": matched.get("f12") or "",
+            "name": matched.get("f14") or query,
+            "price": _number(matched.get("f2")),
+            "change": _number(matched.get("f3")),
+            "change_amount": _number(matched.get("f4")),
+            "turnover_rate": _number(matched.get("f8")),
+            "up_count": int(_number(matched.get("f104"))),
+            "down_count": int(_number(matched.get("f105"))),
+            "leader": matched.get("f128") or "--",
+            "leader_code": matched.get("f140") or "",
+            "leading_pct": _number(matched.get("f136")),
+            "quote_time_epoch": epoch,
+            "quote_time": (
+                datetime.fromtimestamp(epoch).astimezone().isoformat(timespec="seconds")
+                if epoch else ""
+            ),
+            "source": "eastmoney_push2",
+            "match_query": query,
+        }
+
+    def _eastmoney_sector_catalog(self) -> list[dict[str, Any]]:
+        now = time.time()
+        with self._sector_cache_lock:
+            cached = self._sector_cache.get("eastmoney")
+        if cached and now - float(cached.get("created_at") or 0) < 600:
+            return list(cached.get("rows") or [])
+
+        def load_page(page: int) -> list[dict[str, Any]]:
+            payload = self._get_json(
+                EASTMONEY_SECTOR_URL,
+                {
+                    "pn": str(page),
+                    "pz": "100",
+                    "po": "1",
+                    "np": "1",
+                    "fltt": "2",
+                    "invt": "2",
+                    "fid": "f3",
+                    "fs": "m:90+t:2",
+                    "fields": "f12,f14,f2,f3,f4,f8,f104,f105,f128,f136,f140,f124",
+                },
+                referer="https://quote.eastmoney.com/center/boardlist.html",
+            )
+            return list((payload.get("data") or {}).get("diff") or [])
+
+        with ThreadPoolExecutor(max_workers=5) as executor:
+            pages = list(executor.map(load_page, range(1, 6)))
+        rows = [row for page in pages for row in page]
+        if not rows:
+            raise RealtimeAggregateError("Eastmoney sector catalog is empty")
+        with self._sector_cache_lock:
+            self._sector_cache["eastmoney"] = {"created_at": now, "rows": rows}
+        return rows
+
+    def ths_limit_pool(self) -> dict[str, Any]:
+        payload = self._get_json(
+            THS_LIMIT_URL,
+            {"page": "1", "limit": "3", "field": "199112"},
+            referer="https://data.10jqka.com.cn/limit_up/",
+        )
+        data = payload.get("data") or payload
+        return {
+            "available": True,
+            "keys": sorted(str(key) for key in data.keys()) if isinstance(data, dict) else [],
+            "source": "ths_web_dataapi",
+        }
+
+    def xgb_limit_pool(self) -> dict[str, Any]:
+        payload = self._get_json(
+            XGB_POOL_URL,
+            {"pool_name": "limit_up"},
+            referer="https://xuangubao.cn/",
+        )
+        data = payload.get("data") or {}
+        rows = data if isinstance(data, list) else data.get("pool") or data.get("list") or []
+        return {
+            "available": True,
+            "count": len(rows) if isinstance(rows, list) else 0,
+            "source": "xuangubao_web_api",
+        }
+
+    def _capture(self, operation):
+        started = time.perf_counter()
+        try:
+            value = operation()
+            return value, {
+                "ok": True,
+                "elapsed_ms": round((time.perf_counter() - started) * 1000),
+                "error": "",
+            }
+        except Exception as exc:
+            return None, {
+                "ok": False,
+                "elapsed_ms": round((time.perf_counter() - started) * 1000),
+                "error": str(exc)[:500],
+            }
+
+    def _get_json(
+        self,
+        url: str,
+        params: dict[str, str],
+        referer: str,
+    ) -> dict[str, Any]:
+        request_url = f"{url}?{urllib.parse.urlencode(params)}"
+        last_error: Exception | None = None
+        attempts = max(1, int(self.retry_attempts))
+        for attempt in range(attempts):
+            request = urllib.request.Request(
+                request_url,
+                headers={
+                    "Accept": "application/json,text/plain,*/*",
+                    "Connection": "close",
+                    "Referer": referer,
+                    "User-Agent": BROWSER_USER_AGENT,
+                },
+            )
+            try:
+                with urllib.request.urlopen(request, timeout=self.timeout) as response:
+                    content_type = response.headers.get("Content-Type", "")
+                    raw = response.read().decode("utf-8", errors="replace")
+                if "json" not in content_type.lower() and not raw.lstrip().startswith(("{", "[")):
+                    raise RealtimeAggregateError(
+                        f"non-JSON response: {raw[:120].strip()}"
+                    )
+                payload = json.loads(raw)
+                if not isinstance(payload, dict):
+                    raise RealtimeAggregateError("unexpected response shape")
+                if payload.get("rc") not in (None, 0):
+                    raise RealtimeAggregateError(f"provider rc={payload.get('rc')}")
+                with self._response_cache_lock:
+                    self._response_cache[request_url] = {
+                        "created_at": time.time(),
+                        "payload": copy.deepcopy(payload),
+                    }
+                return payload
+            except (
+                urllib.error.URLError,
+                TimeoutError,
+                ConnectionError,
+                OSError,
+                http.client.HTTPException,
+                json.JSONDecodeError,
+                RealtimeAggregateError,
+            ) as exc:
+                last_error = exc
+                if attempt + 1 < attempts and self.retry_delay_seconds > 0:
+                    time.sleep(self.retry_delay_seconds * (attempt + 1))
+
+        now = time.time()
+        with self._response_cache_lock:
+            cached = self._response_cache.get(request_url)
+        cache_age = now - float((cached or {}).get("created_at") or 0)
+        if cached and cache_age <= self.response_cache_ttl_seconds:
+            payload = copy.deepcopy(cached.get("payload") or {})
+            payload["_aggregate_cache"] = {"age_seconds": round(cache_age, 1)}
+            return payload
+        raise RealtimeAggregateError(f"request failed after {attempts} attempts: {last_error}") from last_error
+
+    def _get_text(
+        self,
+        request_url: str,
+        referer: str,
+        encoding: str = "utf-8",
+    ) -> tuple[str, float]:
+        cache_key = f"text:{request_url}"
+        last_error: Exception | None = None
+        attempts = max(1, int(self.retry_attempts))
+        for attempt in range(attempts):
+            request = urllib.request.Request(
+                request_url,
+                headers={
+                    "Accept": "text/plain,*/*",
+                    "Connection": "close",
+                    "Referer": referer,
+                    "User-Agent": BROWSER_USER_AGENT,
+                },
+            )
+            try:
+                with urllib.request.urlopen(request, timeout=self.timeout) as response:
+                    raw = response.read().decode(encoding, errors="replace")
+                if not raw.strip():
+                    raise RealtimeAggregateError("empty text response")
+                with self._response_cache_lock:
+                    self._response_cache[cache_key] = {
+                        "created_at": time.time(),
+                        "payload": raw,
+                    }
+                return raw, 0
+            except (
+                urllib.error.URLError,
+                TimeoutError,
+                ConnectionError,
+                OSError,
+                http.client.HTTPException,
+                RealtimeAggregateError,
+            ) as exc:
+                last_error = exc
+                if attempt + 1 < attempts and self.retry_delay_seconds > 0:
+                    time.sleep(self.retry_delay_seconds * (attempt + 1))
+
+        now = time.time()
+        with self._response_cache_lock:
+            cached = self._response_cache.get(cache_key)
+        cache_age = now - float((cached or {}).get("created_at") or 0)
+        if cached and cache_age <= self.response_cache_ttl_seconds:
+            return str(cached.get("payload") or ""), round(cache_age, 1)
+        raise RealtimeAggregateError(
+            f"text request failed after {attempts} attempts: {last_error}"
+        ) from last_error
+
+
+def _normalize_sector(value: Any) -> str:
+    text = str(value or "").strip().replace(" ", "")
+    for suffix in ("板块", "概念", "行业", "Ⅱ", "Ⅲ", "(A股)", "（A股）"):
+        text = text.replace(suffix, "")
+    aliases = {"元器件": "元件", "电子元器件": "元件"}
+    return aliases.get(text, text)
+
+
+def _match_sector(rows: list[dict[str, Any]], target: str) -> dict[str, Any] | None:
+    exact = [row for row in rows if _normalize_sector(row.get("f14")) == target]
+    if exact:
+        return min(exact, key=lambda row: len(str(row.get("f14") or "")))
+    fuzzy = [
+        row for row in rows
+        if target and (
+            target in _normalize_sector(row.get("f14"))
+            or _normalize_sector(row.get("f14")) in target
+        )
+    ]
+    return min(fuzzy, key=lambda row: len(_normalize_sector(row.get("f14")))) if fuzzy else None
+
+
+def _number(value: Any, default: float = 0.0) -> float:
+    try:
+        return float(value)
+    except (TypeError, ValueError):
+        return default

app/requirements.txt

@@ -0,0 +1 @@
+cryptography==49.0.0

app/security.py

@@ -0,0 +1,3 @@
+"""Compatibility imports for the preserved account security API."""
+
+from backend.features.accounts.security import *  # noqa: F401,F403

app/sentiment_engine.py

@@ -0,0 +1,496 @@
+from __future__ import annotations
+
+from copy import deepcopy
+from statistics import mean, median
+from typing import Any
+
+
+COMPONENT_WEIGHTS = {
+    "breadth": 20,
+    "limit_ecology": 25,
+    "profit_effect": 30,
+    "ladder_structure": 15,
+    "liquidity": 10,
+}
+
+SENTIMENT_ENGINE_VERSION = 2
+
+
+def _number(value: Any, default: float = 0.0) -> float:
+    try:
+        number = float(value)
+        return number if number == number else default
+    except (TypeError, ValueError):
+        return default
+
+
+def _clamp(value: float, lower: float = 0.0, upper: float = 100.0) -> float:
+    return min(upper, max(lower, value))
+
+
+def _linear(value: float, low: float, high: float) -> float:
+    if high <= low:
+        return 50.0
+    return _clamp((value - low) / (high - low) * 100)
+
+
+def _percentile(value: float, history: list[float]) -> float:
+    if not history:
+        return 50.0
+    below = sum(item < value for item in history)
+    equal = sum(item == value for item in history)
+    return _clamp((below + equal * 0.5) / len(history) * 100)
+
+
+def _adaptive_score(value: float, fixed: float, history: list[float]) -> float:
+    if len(history) < 20:
+        return fixed
+    return fixed * 0.25 + _percentile(value, history[-250:]) * 0.75
+
+
+def _trade_date(payload: dict[str, Any]) -> str:
+    meta = payload.get("meta") or {}
+    return str(meta.get("trade_date") or payload.get("_snapshot_date") or "").replace("-", "")
+
+
+def _deduplicate_snapshots(snapshots: list[dict[str, Any]]) -> list[dict[str, Any]]:
+    by_trade_date: dict[str, dict[str, Any]] = {}
+    for payload in snapshots:
+        trade_date = _trade_date(payload)
+        if trade_date:
+            by_trade_date[trade_date] = payload
+    return [by_trade_date[key] for key in sorted(by_trade_date)]
+
+
+def _snapshot_stats(payload: dict[str, Any]) -> dict[str, Any]:
+    overview = payload.get("overview") or {}
+    meta = payload.get("meta") or {}
+    limits = list(payload.get("limits") or [])
+    broken = list(payload.get("broken") or [])
+    down_limits = list(payload.get("down_limits") or [])
+    yesterday = list(payload.get("yesterday_limits") or [])
+
+    limit_up = len(limits) if limits else int(_number(overview.get("limit_up_count")))
+    broken_count = len(broken) if broken else int(_number(overview.get("broken_count")))
+    limit_down = len(down_limits) if down_limits else int(_number(overview.get("limit_down_count")))
+    streaks = [max(1, int(_number(row.get("streak"), 1))) for row in limits]
+    first_board = sum(streak == 1 for streak in streaks)
+    second_board = sum(streak == 2 for streak in streaks)
+    three_plus = sum(streak >= 3 for streak in streaks)
+    max_height = max(streaks, default=0)
+    present_levels = set(streaks)
+    ladder_completeness = (
+        sum(level in present_levels for level in range(1, max_height + 1)) / max_height * 100
+        if max_height else 0.0
+    )
+
+    up_count = int(_number(overview.get("up_count")))
+    down_count = int(_number(overview.get("down_count")))
+    flat_count = int(_number(overview.get("flat_count")))
+    active_count = up_count + down_count
+    breadth_ratio = up_count / max(active_count, 1) * 100
+    seal_rate = _number(overview.get("seal_rate"))
+    if not seal_rate and limit_up + broken_count:
+        seal_rate = limit_up / (limit_up + broken_count) * 100
+
+    previous_limit_count = len(yesterday)
+    previous_positive_count = sum(_number(row.get("current_change")) > 0 for row in yesterday)
+    previous_positive_rate = previous_positive_count / max(previous_limit_count, 1) * 100
+    advanced_count = sum(row.get("outcome") == "晋级" for row in yesterday)
+    advance_rate = advanced_count / max(previous_limit_count, 1) * 100
+    average_previous_change = (
+        mean(_number(row.get("current_change")) for row in yesterday) if yesterday else 0.0
+    )
+    median_previous_change = (
+        median(_number(row.get("current_change")) for row in yesterday) if yesterday else 0.0
+    )
+    severe_loss_count = sum(_number(row.get("current_change")) <= -5 for row in yesterday)
+    severe_loss_rate = severe_loss_count / max(previous_limit_count, 1) * 100
+    previous_down_count = sum(row.get("outcome") == "跌停" for row in yesterday)
+    high_previous = [row for row in yesterday if int(_number(row.get("prior_streak"), 1)) >= 2]
+    high_positive_rate = (
+        sum(_number(row.get("current_change")) > 0 for row in high_previous)
+        / max(len(high_previous), 1)
+        * 100
+    )
+
+    amount_billion = _number(overview.get("amount_billion"))
+    limit_amount_billion = sum(_number(row.get("amount_billion")) for row in limits)
+    return {
+        "trade_date": _trade_date(payload),
+        "previous_trade_date": str(meta.get("previous_trade_date") or "").replace("-", ""),
+        "up_count": up_count,
+        "down_count": down_count,
+        "flat_count": flat_count,
+        "breadth_ratio": round(breadth_ratio, 1),
+        "limit_up_count": limit_up,
+        "first_board_count": first_board,
+        "second_board_count": second_board,
+        "three_plus_count": three_plus,
+        "max_height": max_height,
+        "ladder_completeness": round(ladder_completeness, 1),
+        "broken_count": broken_count,
+        "limit_down_count": limit_down,
+        "seal_rate": round(seal_rate, 1),
+        "previous_limit_count": previous_limit_count,
+        "previous_positive_count": previous_positive_count,
+        "previous_positive_rate": round(previous_positive_rate, 1),
+        "advance_rate": round(advance_rate, 1),
+        "average_previous_change": round(average_previous_change, 2),
+        "median_previous_change": round(median_previous_change, 2),
+        "severe_loss_count": severe_loss_count,
+        "severe_loss_rate": round(severe_loss_rate, 1),
+        "previous_down_count": previous_down_count,
+        "high_positive_rate": round(high_positive_rate, 1),
+        "amount_billion": round(amount_billion, 1),
+        "limit_amount_billion": round(limit_amount_billion, 2),
+    }
+
+
+def _sentiment_label(score: float) -> str:
+    if score >= 80:
+        return "情绪高涨"
+    if score >= 60:
+        return "情绪偏强"
+    if score >= 40:
+        return "情绪中性"
+    if score >= 20:
+        return "情绪偏弱"
+    return "情绪冰点"
+
+
+def _phase_signal(score: float, momentum: float, profit_score: float) -> str:
+    if score < 25:
+        return "修复" if momentum > 3 else "冰点"
+    if score < 45:
+        return "修复" if momentum > 3 else "退潮"
+    if score >= 80:
+        return "高潮" if momentum >= -2 and profit_score >= 60 else "分化"
+    if score >= 65:
+        return "分化" if momentum < -3 or profit_score < 50 else "发酵"
+    if momentum < -5:
+        return "退潮"
+    return "发酵" if momentum >= 0 and profit_score >= 45 else "分化"
+
+
+def _confirmed_phase(
+    previous: dict[str, Any] | None,
+    score: float,
+    day_change: float,
+    systemic_health: float,
+    profit_score: float,
+    ecology_score: float,
+    phase_signal: str,
+    extreme_ice: bool,
+    fermentation_signal_count: int,
+) -> tuple[str, str]:
+    if previous is None:
+        return phase_signal, "首个连续交易日，采用原始阶段信号"
+    previous_phase = str(previous.get("phase") or phase_signal)
+    if extreme_ice:
+        return "冰点", "市场宽度与跌停数量触发极端冰点"
+
+    recovery = day_change >= 6 and score >= 25 and systemic_health >= 24
+    fermentation_confirmed = fermentation_signal_count >= 2
+    climax_ready = (
+        score >= 80
+        and profit_score >= 60
+        and systemic_health >= 60
+        and ecology_score >= 70
+    )
+
+    if previous_phase == "冰点":
+        return ("修复", "冰点后首次有效回升") if recovery else ("冰点", "冰点尚未形成有效修复")
+
+    if previous_phase == "退潮":
+        if score < 25:
+            return "冰点", "退潮继续下探至冰点区间"
+        return ("修复", "退潮后出现有效回升") if recovery else ("退潮", "退潮尚未形成有效修复")
+
+    if previous_phase == "修复":
+        if score < 25:
+            return "冰点", "修复失败并重新跌入冰点区间"
+        if day_change <= -6 and score < 45:
+            return "退潮", "修复失败且温度显著回落"
+        if fermentation_confirmed:
+            return "发酵", "发酵条件连续两个交易日成立"
+        return "修复", "修复延续，等待发酵确认"
+
+    if previous_phase == "发酵":
+        if score < 25:
+            return "冰点", "发酵阶段出现极端情绪坍塌"
+        if score < 45 and (day_change < 0 or systemic_health < 35):
+            return "退潮", "发酵阶段温度与系统健康度同步转弱"
+        if climax_ready:
+            return "高潮", "温度、赚钱效应与涨停生态共同达到高潮条件"
+        if phase_signal in {"分化", "退潮"} or day_change <= -6:
+            return "分化", "发酵阶段出现降温或赚钱效应弱化"
+        return "发酵", "发酵状态延续"
+
+    if previous_phase == "高潮":
+        if score < 25:
+            return "冰点", "高潮后出现极端情绪坍塌"
+        if climax_ready:
+            return "高潮", "高潮条件继续成立"
+        if score < 45 or systemic_health < 30:
+            return "退潮", "高潮后风险快速释放"
+        return "分化", "高潮条件消退，进入分化"
+
+    if previous_phase == "分化":
+        if score < 25:
+            return "冰点", "分化继续恶化至冰点区间"
+        if score < 45 or systemic_health < 30:
+            return "退潮", "分化后温度或系统健康度继续下降"
+        if fermentation_confirmed:
+            return "发酵", "分化转强条件连续两个交易日成立"
+        return "分化", "分化延续，等待方向确认"
+
+    return phase_signal, "采用原始阶段信号"
+
+
+def build_sentiment_history(snapshots: list[dict[str, Any]]) -> list[dict[str, Any]]:
+    payloads = _deduplicate_snapshots(snapshots)
+    raw_rows = [_snapshot_stats(payload) for payload in payloads]
+    results: list[dict[str, Any]] = []
+
+    for index, stats in enumerate(raw_rows):
+        previous = raw_rows[:index]
+        limit_history = [float(row["limit_up_count"]) for row in previous]
+        down_limit_history = [float(row["limit_down_count"]) for row in previous]
+        height_history = [float(row["max_height"]) for row in previous]
+        three_plus_history = [float(row["three_plus_count"]) for row in previous]
+        amount_history = [float(row["amount_billion"]) for row in previous[-20:] if row["amount_billion"]]
+
+        breadth_score = _clamp(float(stats["breadth_ratio"]))
+        limit_strength = _adaptive_score(
+            float(stats["limit_up_count"]),
+            _linear(float(stats["limit_up_count"]), 10, 100),
+            limit_history,
+        )
+        down_relief = 100 - _adaptive_score(
+            float(stats["limit_down_count"]),
+            _linear(float(stats["limit_down_count"]), 0, 50),
+            down_limit_history,
+        )
+        seal_quality = _linear(float(stats["seal_rate"]), 35, 90)
+        systemic_health = breadth_score * 0.60 + down_relief * 0.40
+        systemic_gate = 1.0 if systemic_health >= 35 else 0.35 + systemic_health / 35 * 0.65
+        ecology_base_score = limit_strength * 0.35 + seal_quality * 0.35 + down_relief * 0.30
+        # Systemic risk is applied once to the final temperature. Reapplying it here
+        # would count market breadth and limit-down pressure twice.
+        limit_ecology_score = ecology_base_score
+
+        if stats["previous_limit_count"]:
+            positive_score = float(stats["previous_positive_rate"])
+            average_change_score = _clamp(50 + float(stats["average_previous_change"]) * 6)
+            median_change_score = _clamp(50 + float(stats["median_previous_change"]) * 7)
+            advance_score = _clamp(float(stats["advance_rate"]) * 2.5)
+            severe_loss_safety = _clamp(100 - float(stats["severe_loss_rate"]) * 3)
+            down_safety = _clamp(100 - float(stats["previous_down_count"]) / stats["previous_limit_count"] * 700)
+            tail_safety_score = severe_loss_safety * 0.70 + down_safety * 0.30
+            profit_effect_score = (
+                positive_score * 0.30
+                + median_change_score * 0.25
+                + average_change_score * 0.10
+                + advance_score * 0.20
+                + tail_safety_score * 0.15
+            )
+        else:
+            profit_effect_score = 50.0
+
+        max_height_score = _adaptive_score(
+            float(stats["max_height"]),
+            _linear(float(stats["max_height"]), 1, 7),
+            height_history,
+        )
+        continuation_rate = (
+            (float(stats["second_board_count"]) + float(stats["three_plus_count"]))
+            / max(float(stats["limit_up_count"]), 1)
+            * 100
+        )
+        three_plus_density = float(stats["three_plus_count"]) / max(float(stats["limit_up_count"]), 1) * 100
+        three_plus_score = _adaptive_score(
+            float(stats["three_plus_count"]),
+            _clamp(three_plus_density * 5),
+            three_plus_history,
+        )
+        ladder_structure_score = (
+            max_height_score * 0.30
+            + _clamp(continuation_rate * 3) * 0.25
+            + three_plus_score * 0.25
+            + float(stats["ladder_completeness"]) * 0.20
+        )
+
+        amount_baseline = mean(amount_history) if amount_history else float(stats["amount_billion"] or 1)
+        amount_ratio = float(stats["amount_billion"]) / max(amount_baseline, 1)
+        amount_score = _clamp(50 + (amount_ratio - 1) * 100)
+        limit_amount_share = float(stats["limit_amount_billion"]) / max(float(stats["amount_billion"]), 1) * 100
+        liquidity_score = amount_score * 0.70 + _clamp(limit_amount_share * 20) * 0.30
+
+        component_scores = {
+            "breadth": breadth_score,
+            "limit_ecology": limit_ecology_score,
+            "profit_effect": profit_effect_score,
+            "ladder_structure": ladder_structure_score,
+            "liquidity": liquidity_score,
+        }
+        raw_score = sum(component_scores[key] * weight / 100 for key, weight in COMPONENT_WEIGHTS.items())
+        score = round(
+            raw_score * systemic_gate
+        )
+        extreme_ice = float(stats["breadth_ratio"]) <= 15 and float(stats["limit_down_count"]) >= 100
+        if extreme_ice:
+            score = min(score, 15)
+        elif float(stats["breadth_ratio"]) <= 25 and float(stats["limit_down_count"]) >= 50:
+            score = min(score, 24)
+        previous_scores: list[float] = []
+        expected_date = str(stats.get("previous_trade_date") or "")
+        for prior_result in reversed(results):
+            if not expected_date or str(prior_result.get("trade_date") or "") != expected_date:
+                break
+            previous_scores.append(float(prior_result["score"]))
+            expected_date = str(prior_result.get("previous_trade_date") or "")
+            if len(previous_scores) == 3:
+                break
+        momentum = score - mean(previous_scores) if previous_scores else 0.0
+        direction = "升温" if momentum > 3 else "降温" if momentum < -3 else "持平"
+        normalization = "历史百分位" if len(previous) >= 20 else "固定锚点"
+        previous_result = (
+            results[-1]
+            if results and str(stats.get("previous_trade_date") or "") == str(results[-1].get("trade_date") or "")
+            else None
+        )
+        day_change = score - float(previous_result["score"]) if previous_result else 0.0
+        ema_score = round(
+            score if not previous_result
+            else score * 0.5 + float(previous_result.get("ema_score", previous_result["score"])) * 0.5,
+            1,
+        )
+        phase_signal = _phase_signal(score, momentum, profit_effect_score)
+        fermentation_ready = (
+            phase_signal == "发酵"
+            and score >= 45
+            and profit_effect_score >= 45
+            and systemic_health >= 35
+            and not extreme_ice
+        )
+        previous_fermentation_count = int(previous_result.get("fermentation_signal_count") or 0) if previous_result else 0
+        fermentation_signal_count = previous_fermentation_count + 1 if fermentation_ready else 0
+        phase, transition_reason = _confirmed_phase(
+            previous_result,
+            score,
+            day_change,
+            systemic_health,
+            profit_effect_score,
+            limit_ecology_score,
+            phase_signal,
+            extreme_ice,
+            fermentation_signal_count,
+        )
+        previous_phase = str(previous_result.get("phase") or "") if previous_result else ""
+        if phase not in {"修复", "分化"}:
+            fermentation_signal_count = 0
+        elif phase == "分化" and previous_phase != "分化":
+            fermentation_signal_count = 0
+
+        components = {
+            "breadth": {
+                "label": "市场宽度",
+                "score": round(breadth_score, 1),
+                "weight": COMPONENT_WEIGHTS["breadth"],
+                "summary": f"上涨占比 {stats['breadth_ratio']:.1f}%",
+            },
+            "limit_ecology": {
+                "label": "涨停生态",
+                "score": round(limit_ecology_score, 1),
+                "weight": COMPONENT_WEIGHTS["limit_ecology"],
+                "summary": (
+                    f"涨停 {stats['limit_up_count']} · 跌停 {stats['limit_down_count']} · "
+                    f"封板 {stats['seal_rate']:.1f}%"
+                ),
+            },
+            "profit_effect": {
+                "label": "赚钱效应",
+                "score": round(profit_effect_score, 1),
+                "weight": COMPONENT_WEIGHTS["profit_effect"],
+                "summary": (
+                    f"昨涨停红盘 {stats['previous_positive_rate']:.1f}% · "
+                    f"中位 {stats['median_previous_change']:+.2f}% · "
+                    f"重亏 {stats['severe_loss_rate']:.1f}%"
+                    if stats["previous_limit_count"] else "缺少前一交易日样本"
+                ),
+            },
+            "ladder_structure": {
+                "label": "连板结构",
+                "score": round(ladder_structure_score, 1),
+                "weight": COMPONENT_WEIGHTS["ladder_structure"],
+                "summary": f"最高 {stats['max_height']} 板 · 三板以上 {stats['three_plus_count']} 家",
+            },
+            "liquidity": {
+                "label": "成交活跃度",
+                "score": round(liquidity_score, 1),
+                "weight": COMPONENT_WEIGHTS["liquidity"],
+                "summary": f"成交 {stats['amount_billion']:.1f} 亿 · 均值比 {amount_ratio:.2f}",
+            },
+        }
+        results.append(
+            {
+                **stats,
+                "score": score,
+                "ema_score": ema_score,
+                "label": _sentiment_label(score),
+                "phase": phase,
+                "phase_signal": phase_signal,
+                "transition_reason": transition_reason,
+                "fermentation_signal_count": fermentation_signal_count,
+                "day_change": round(day_change, 1),
+                "direction": direction,
+                "momentum": round(momentum, 1),
+                "normalization": "250日历史百分位" if len(previous) >= 20 else normalization,
+                "history_days": len(previous) + 1,
+                "systemic_health": round(systemic_health, 1),
+                "risk_multiplier": round(systemic_gate, 3),
+                "components": components,
+            }
+        )
+    return results
+
+
+def latest_contiguous_history(series: list[dict[str, Any]]) -> list[dict[str, Any]]:
+    if not series:
+        return []
+    contiguous = [series[-1]]
+    for row in reversed(series[:-1]):
+        expected_previous = str(contiguous[0].get("previous_trade_date") or "")
+        if not expected_previous or expected_previous != str(row.get("trade_date") or ""):
+            break
+        contiguous.insert(0, row)
+    return contiguous
+
+
+def apply_sentiment_to_dashboard(
+    dashboard: dict[str, Any],
+    historical_snapshots: list[dict[str, Any]] | None = None,
+) -> dict[str, Any]:
+    result = deepcopy(dashboard)
+    history = list(historical_snapshots or [])
+    history.append(result)
+    series = build_sentiment_history(history)
+    target_date = _trade_date(result)
+    sentiment = next((row for row in reversed(series) if row["trade_date"] == target_date), None)
+    if not sentiment:
+        return result
+    overview = dict(result.get("overview") or {})
+    overview.update(
+        {
+            "sentiment_score": sentiment["score"],
+            "sentiment_trend_score": sentiment["ema_score"],
+            "sentiment_label": sentiment["label"],
+            "sentiment_phase": sentiment["phase"],
+            "sentiment_direction": sentiment["direction"],
+            "sentiment_components": sentiment["components"],
+            "sentiment_engine_version": SENTIMENT_ENGINE_VERSION,
+        }
+    )
+    result["overview"] = overview
+    return result

app/server.py

@@ -0,0 +1,25 @@
+"""Compatibility entry point for the preserved application runtime.
+
+The implementation lives under ``backend``; this module keeps the original command and
+import surface stable while migration proceeds feature by feature.
+"""
+
+from backend.application import (
+    DashboardService,
+    RequestHandler,
+    SERVICE,
+    automatic_screener_jobs,
+)
+from backend.bootstrap.runtime import main
+
+__all__ = [
+    "DashboardService",
+    "RequestHandler",
+    "SERVICE",
+    "automatic_screener_jobs",
+    "main",
+]
+
+
+if __name__ == "__main__":
+    main()

app/static/heaven-loading-v2.js

@@ -0,0 +1,723 @@
+(function exposeHeavenLoading(global) {
+  "use strict";
+
+  // Theme palettes share the original animation geometry and timing.
+  const LOADING_PALETTES = {
+    dark: {
+      paper: "#05060d",
+      paperCenter: "#10142a",
+      paperMiddle: "#0b0e1e",
+      nodeText: "#f7e3b4",
+      ink: "#e6c37a",
+      inkBright: "#f7e3b4",
+      gold: "#e6c37a",
+      goldBright: "#f7e3b4",
+      cinnabar: "#d8564a",
+      dim: "rgba(216,205,180,0.55)",
+      particles: ["#e6c37a", "#d8564a", "#6d7fa8"],
+    },
+    light: {
+      paper: "#eef1f4",
+      paperCenter: "#fffefa",
+      paperMiddle: "#f4f2eb",
+      nodeText: "#493a20",
+      ink: "#8a641d",
+      inkBright: "#624612",
+      gold: "#946b1d",
+      goldBright: "#765315",
+      cinnabar: "#b94f46",
+      dim: "rgba(52,58,67,0.62)",
+      particles: ["#946b1d", "#b94f46", "#73859c"],
+    },
+  };
+  let PAPER;
+  let PAPER_CENTER;
+  let PAPER_MIDDLE;
+  let NODE_TEXT;
+  let INK;
+  let INK_BRIGHT;
+  let GOLD;
+  let GOLD_BRIGHT;
+  let CINNABAR;
+  let DIM;
+  let PARTICLE_COLORS;
+  const applyLoadingPalette = () => {
+    const theme = document.documentElement.dataset.theme === "light" ? "light" : "dark";
+    const palette = LOADING_PALETTES[theme];
+    PAPER = palette.paper;
+    PAPER_CENTER = palette.paperCenter;
+    PAPER_MIDDLE = palette.paperMiddle;
+    NODE_TEXT = palette.nodeText;
+    INK = palette.ink;
+    INK_BRIGHT = palette.inkBright;
+    GOLD = palette.gold;
+    GOLD_BRIGHT = palette.goldBright;
+    CINNABAR = palette.cinnabar;
+    DIM = palette.dim;
+    PARTICLE_COLORS = palette.particles;
+    return theme;
+  };
+  applyLoadingPalette();
+  const SERIF = '"Noto Serif SC","Songti SC","STSong","SimSun",serif';
+  const ELEMENT_COLORS = {
+    木: "#4f7a4a",
+    火: "#b3483d",
+    土: "#96702c",
+    金: "#70685b",
+    水: "#496d92",
+  };
+  const QI6 = [
+    { name: "厥阴风木", element: "木" },
+    { name: "少阴君火", element: "火" },
+    { name: "少阳相火", element: "火" },
+    { name: "太阴湿土", element: "土" },
+    { name: "阳明燥金", element: "金" },
+    { name: "太阳寒水", element: "水" },
+  ];
+  const STEP_RANGES = ["大寒 — 春分", "春分 — 小满", "小满 — 大暑", "大暑 — 秋分", "秋分 — 小雪", "小雪 — 大寒"];
+  const TRIGRAMS = [
+    { name: "乾", bits: [1, 1, 1], angle: -90 },
+    { name: "兑", bits: [1, 1, 0], angle: -135 },
+    { name: "离", bits: [1, 0, 1], angle: 180 },
+    { name: "震", bits: [1, 0, 0], angle: 135 },
+    { name: "巽", bits: [0, 1, 1], angle: -45 },
+    { name: "坎", bits: [0, 1, 0], angle: 0 },
+    { name: "艮", bits: [0, 0, 1], angle: 45 },
+    { name: "坤", bits: [0, 0, 0], angle: 90 },
+  ];
+  const SIXIANG = [
+    { name: "太阳", bits: [1, 1], dx: 0, dy: -1 },
+    { name: "少阴", bits: [1, 0], dx: 1, dy: 0 },
+    { name: "太阴", bits: [0, 0], dx: 0, dy: 1 },
+    { name: "少阳", bits: [0, 1], dx: -1, dy: 0 },
+  ];
+  const HEXAGRAM_NAMES = [
+    "坤", "剥", "比", "观", "豫", "晋", "萃", "否", "谦", "艮", "蹇", "渐", "小过", "旅", "咸", "遁",
+    "师", "蒙", "坎", "涣", "解", "未济", "困", "讼", "升", "蛊", "井", "巽", "恒", "鼎", "大过", "姤",
+    "复", "颐", "屯", "益", "震", "噬嗑", "随", "无妄", "明夷", "贲", "既济", "家人", "丰", "革", "同人", "临",
+    "损", "节", "中孚", "归妹", "睽", "兑", "履", "泰", "大畜", "需", "小畜", "大壮", "大有", "夬", "乾",
+  ];
+  const HEX_TOTAL = 12500;
+  const FORTUNE_TOTAL = 12800;
+  const HEX_STAGES = [
+    [0, 1800, "太 极", "无极而太极，动而生阳"],
+    [1800, 3300, "两 仪", "一阴一阳之谓道"],
+    [3300, 4700, "四 象", "阴阳消长，太少相生"],
+    [4700, 6800, "八 卦", "天地定位，山泽通气"],
+    [6800, 10800, "六 十 四 卦", "卦者挂也，悬物象以示人"],
+    [10800, HEX_TOTAL, "归 一", "万物负阴而抱阳，冲气以为和"],
+  ];
+  const clamp01 = (value) => Math.max(0, Math.min(1, value));
+  const smooth = (start, end, value) => {
+    const progress = clamp01((value - start) / Math.max(1, end - start));
+    return progress * progress * (3 - 2 * progress);
+  };
+  const easeOut = (value) => 1 - Math.pow(1 - clamp01(value), 3);
+  const hexBits = (index) => Array.from({ length: 6 }, (_, bit) => (index >> (5 - bit)) & 1);
+  const point = (cx, cy, radius, degrees) => {
+    const radians = degrees * Math.PI / 180;
+    return [cx + Math.cos(radians) * radius, cy + Math.sin(radians) * radius];
+  };
+
+  class HeavenLoadingCanvas {
+    constructor(canvas) {
+      this.canvas = canvas;
+      this.context = canvas.getContext("2d");
+      this.width = 0;
+      this.height = 0;
+      this.dpr = 1;
+      this.scene = "hexagram";
+      this.data = {};
+      this.startedAt = 0;
+      this.frameId = 0;
+      this.running = false;
+      this.completingAt = 0;
+      this.completionResolve = null;
+      this.completionTimer = 0;
+      this.resizeObserver = new ResizeObserver(() => this.resize());
+      this.reducedMotion = global.matchMedia("(prefers-reduced-motion: reduce)").matches;
+      this.theme = document.documentElement.dataset.theme || "dark";
+      this.stars = this.createStars(this.reducedMotion ? 48 : 150);
+    }
+
+    createStars(count) {
+      let seed = 24681357;
+      const random = () => {
+        seed = (seed * 1664525 + 1013904223) >>> 0;
+        return seed / 4294967296;
+      };
+      return Array.from({ length: count }, () => ({
+        x: random(),
+        y: random(),
+        radius: 0.3 + random() * 1.3,
+        phase: random() * Math.PI * 2,
+        speed: 0.00015 + random() * 0.0004,
+        colorIndex: Math.floor(random() * PARTICLE_COLORS.length),
+      }));
+    }
+
+    start(scene, data = {}) {
+      this.theme = applyLoadingPalette();
+      const nextScene = scene === "fortune" ? "fortune" : "hexagram";
+      if (this.running && this.scene === nextScene) {
+        this.data = data;
+        return;
+      }
+      this.stop();
+      this.scene = nextScene;
+      this.data = data;
+      this.startedAt = performance.now();
+      this.running = true;
+      this.canvas.dataset.scene = this.scene;
+      this.canvas.dataset.running = "true";
+      this.canvas.dataset.looping = "true";
+      this.resizeObserver.observe(this.canvas);
+      this.resize();
+      if (this.reducedMotion) {
+        this.draw(this.scene === "fortune" ? 10950 : 10600, performance.now());
+      } else {
+        this.frameId = requestAnimationFrame((now) => this.frame(now));
+      }
+    }
+
+    complete() {
+      if (!this.running || this.reducedMotion) {
+        this.stop();
+        return Promise.resolve();
+      }
+      if (this.completionResolve) return this.completionPromise;
+      this.completingAt = performance.now();
+      this.completionPromise = new Promise((resolve) => { this.completionResolve = resolve; });
+      this.completionTimer = global.setTimeout(() => this.stop(), 2200);
+      return this.completionPromise;
+    }
+
+    stop() {
+      if (this.frameId) cancelAnimationFrame(this.frameId);
+      this.frameId = 0;
+      this.running = false;
+      this.completingAt = 0;
+      if (this.completionTimer) global.clearTimeout(this.completionTimer);
+      this.completionTimer = 0;
+      this.resizeObserver.disconnect();
+      this.canvas.dataset.running = "false";
+      this.canvas.dataset.looping = "false";
+      if (this.completionResolve) this.completionResolve();
+      this.completionResolve = null;
+      this.completionPromise = null;
+    }
+
+    resize() {
+      const rect = this.canvas.getBoundingClientRect();
+      const width = Math.max(1, Math.round(rect.width));
+      const height = Math.max(1, Math.round(rect.height));
+      if (width === this.width && height === this.height) return;
+      this.width = width;
+      this.height = height;
+      this.dpr = Math.min(global.devicePixelRatio || 1, 2);
+      this.canvas.width = Math.round(width * this.dpr);
+      this.canvas.height = Math.round(height * this.dpr);
+      this.context.setTransform(this.dpr, 0, 0, this.dpr, 0, 0);
+      if (this.running && this.reducedMotion) {
+        this.draw(this.scene === "fortune" ? 10950 : 10600, performance.now());
+      }
+    }
+
+    frame(now) {
+      if (!this.running) return;
+      if (this.completingAt) {
+        const duration = this.scene === "fortune" ? 1800 : 1700;
+        const progress = clamp01((now - this.completingAt) / duration);
+        this.drawCompletion(progress, now);
+        if (progress >= 1) {
+          this.stop();
+          return;
+        }
+      } else {
+        const total = this.scene === "fortune" ? FORTUNE_TOTAL : HEX_TOTAL;
+        const elapsed = Math.max(0, now - this.startedAt);
+        const timeline = elapsed % total;
+        this.canvas.dataset.cycle = String(Math.floor(elapsed / total));
+        this.draw(timeline, now);
+      }
+      this.frameId = requestAnimationFrame((time) => this.frame(time));
+    }
+
+    draw(time, now) {
+      if (this.width <= 1 || this.height <= 1) return;
+      this.drawBackground(now);
+      if (this.scene === "fortune") this.drawFortune(time, now);
+      else this.drawHexagram(time, now);
+    }
+
+    drawBackground(now) {
+      const currentTheme = document.documentElement.dataset.theme || "dark";
+      if (currentTheme !== this.theme) this.theme = applyLoadingPalette();
+      const { context: ctx, width, height } = this;
+      const cx = width / 2;
+      const cy = height * 0.4;
+      const gradient = ctx.createRadialGradient(cx, cy, 0, cx, cy, Math.max(width, height) * 0.75);
+      gradient.addColorStop(0, PAPER_CENTER);
+      gradient.addColorStop(0.52, PAPER_MIDDLE);
+      gradient.addColorStop(1, PAPER);
+      ctx.fillStyle = gradient;
+      ctx.fillRect(0, 0, width, height);
+      for (const star of this.stars) {
+        const twinkle = 0.35 + 0.65 * (0.5 + 0.5 * Math.sin(star.phase + now * 0.0012));
+        const alpha = twinkle * 0.5;
+        ctx.globalAlpha = alpha;
+        ctx.fillStyle = PARTICLE_COLORS[star.colorIndex];
+        const y = ((star.y + now * star.speed) % 1) * height;
+        ctx.fillRect(star.x * width, y, star.radius, star.radius);
+      }
+      ctx.globalAlpha = 1;
+    }
+
+    label(text, x, y, size, color = INK, alpha = 1, weight = "", maxWidth) {
+      if (!text || alpha <= 0) return;
+      const ctx = this.context;
+      ctx.save();
+      ctx.globalAlpha = alpha;
+      ctx.fillStyle = color;
+      ctx.font = `${weight ? `${weight} ` : ""}${size}px ${SERIF}`;
+      ctx.textAlign = "center";
+      ctx.textBaseline = "middle";
+      if (maxWidth) ctx.fillText(text, x, y, maxWidth);
+      else ctx.fillText(text, x, y);
+      ctx.restore();
+    }
+
+    node(x, y, radius, color, alpha = 1, glow = 0) {
+      const ctx = this.context;
+      ctx.save();
+      ctx.globalAlpha = alpha;
+      ctx.fillStyle = color;
+      ctx.shadowColor = color;
+      ctx.shadowBlur = glow;
+      ctx.beginPath();
+      ctx.arc(x, y, radius, 0, Math.PI * 2);
+      ctx.fill();
+      ctx.restore();
+    }
+
+    line(x1, y1, x2, y2, color, alpha = 1, width = 1) {
+      const ctx = this.context;
+      ctx.save();
+      ctx.globalAlpha = alpha;
+      ctx.strokeStyle = color;
+      ctx.lineWidth = width;
+      ctx.beginPath();
+      ctx.moveTo(x1, y1);
+      ctx.lineTo(x2, y2);
+      ctx.stroke();
+      ctx.restore();
+    }
+
+    curvedArrow(x1, y1, x2, y2, mx, my, color, alpha) {
+      if (alpha <= 0) return;
+      const ctx = this.context;
+      ctx.save();
+      ctx.globalAlpha = alpha;
+      ctx.strokeStyle = color;
+      ctx.lineWidth = 1.2;
+      ctx.beginPath();
+      ctx.moveTo(x1, y1);
+      ctx.quadraticCurveTo(mx, my, x2, y2);
+      ctx.stroke();
+      const angle = Math.atan2(y2 - my, x2 - mx);
+      ctx.fillStyle = color;
+      ctx.beginPath();
+      ctx.moveTo(x2, y2);
+      ctx.lineTo(x2 - 7 * Math.cos(angle - 0.42), y2 - 7 * Math.sin(angle - 0.42));
+      ctx.lineTo(x2 - 7 * Math.cos(angle + 0.42), y2 - 7 * Math.sin(angle + 0.42));
+      ctx.closePath();
+      ctx.fill();
+      ctx.restore();
+    }
+
+    drawYao(cx, cy, width, lineWidth, yang, alpha, glow = 0) {
+      const ctx = this.context;
+      ctx.save();
+      ctx.globalAlpha = alpha;
+      ctx.fillStyle = INK;
+      ctx.shadowColor = GOLD;
+      ctx.shadowBlur = glow;
+      if (yang) {
+        ctx.fillRect(cx - width / 2, cy - lineWidth / 2, width, lineWidth);
+      } else {
+        const gap = width * 0.18;
+        ctx.fillRect(cx - width / 2, cy - lineWidth / 2, (width - gap) / 2, lineWidth);
+        ctx.fillRect(cx + gap / 2, cy - lineWidth / 2, (width - gap) / 2, lineWidth);
+      }
+      ctx.restore();
+    }
+
+    drawGua(cx, cy, width, lineWidth, bits, alpha, glow = 0) {
+      const gap = lineWidth * 1.7;
+      const top = cy - (bits.length - 1) * gap / 2;
+      bits.forEach((bit, index) => {
+        this.drawYao(cx, top + (bits.length - 1 - index) * gap, width, lineWidth, bit === 1, alpha, glow);
+      });
+    }
+
+    stageAlpha(time, start, end, fade = 300, hold = false) {
+      const enter = smooth(start, start + fade, time);
+      return hold ? enter : enter * (1 - smooth(end - fade, end, time));
+    }
+
+    fortuneStages() {
+      const sixQi = this.data.sixQi || {};
+      const pillar = this.data.yearPillar || "岁运";
+      const movement = this.data.movement || "中运合参";
+      const sitian = sixQi.sitian || "司天气候";
+      return [
+        [0, 2100, "五 运", "木火土金水，五运相袭，周而复始"],
+        [2100, 3900, "十 干 化 运", "甲己土 · 乙庚金 · 丙辛水 · 丁壬木 · 戊癸火"],
+        [3900, 5800, "十 二 支 化 气", "子午少阴 · 丑未太阴 · 寅申少阳 · 卯酉阳明 · 辰戌太阳 · 巳亥厥阴"],
+        [5800, 7900, "六 气 环 布", "风寒暑湿燥火，分主六步，以应岁时"],
+        [7900, 11000, "岁 运 合 参", `${pillar}年 · 中运${movement} · ${sitian}司天`],
+        [11000, FORTUNE_TOTAL, "归 一", "谨守病机，无失气宜"],
+      ];
+    }
+
+    drawFooter(time, now, total, stages, scene) {
+      const { context: ctx, width, height } = this;
+      const stage = [...stages].reverse().find((item) => time >= item[0]) || stages[0];
+      const labelAlpha = smooth(stage[0], stage[0] + 300, time)
+        * (1 - smooth(stage[1] - 250, stage[1], time));
+      this.label(stage[2], width / 2, height - 108, 19, GOLD, 0.55 + 0.45 * labelAlpha, "600");
+      this.label(stage[3], width / 2, height - 84, 12.5, DIM, (0.4 + 0.4 * labelAlpha) * (scene === "fortune" ? 0.85 : 0.8), "", width - 32);
+
+      const baseSlotWidth = 34;
+      const baseSlotHeight = 5;
+      const baseSlotGap = 12;
+      const baseTotalWidth = baseSlotWidth * 6 + baseSlotGap * 5;
+      const fit = Math.min(1, (width - 28) / baseTotalWidth);
+      const slotWidth = baseSlotWidth * fit;
+      const slotHeight = baseSlotHeight * fit;
+      const slotGap = baseSlotGap * fit;
+      const totalWidth = slotWidth * 6 + slotGap * 5;
+      const filled = Math.min(6, Math.floor(time / (total / 6)));
+      for (let index = 0; index < 6; index += 1) {
+        const x = width / 2 - totalWidth / 2 + index * (slotWidth + slotGap);
+        const y = height - 56;
+        const color = scene === "fortune" ? ELEMENT_COLORS[QI6[index].element] : GOLD;
+        ctx.save();
+        ctx.globalAlpha = 0.16;
+        ctx.strokeStyle = GOLD;
+        ctx.lineWidth = 1;
+        ctx.strokeRect(x, y, slotWidth, slotHeight);
+        ctx.restore();
+        if (index < filled) {
+          ctx.save();
+          ctx.globalAlpha = 0.9;
+          ctx.fillStyle = color;
+          ctx.shadowColor = color;
+          ctx.shadowBlur = 8;
+          ctx.fillRect(x, y, slotWidth, slotHeight);
+          ctx.restore();
+        } else if (index === filled) {
+          ctx.save();
+          ctx.globalAlpha = 0.35 + 0.3 * Math.sin(now / 200);
+          ctx.fillStyle = color;
+          const progress = (time % (total / 6)) / (total / 6);
+          ctx.fillRect(x, y, slotWidth * progress, slotHeight);
+          ctx.restore();
+        }
+      }
+      const dots = ".".repeat(1 + Math.floor(now / 450) % 3);
+      const loadingText = scene === "fortune" ? "推 演 运 气 · 加 载 中" : "推 演 天 机 · 加 载 中";
+      this.label(`${loadingText}${dots}`, width / 2, height - 32, 13, GOLD, 0.75);
+    }
+
+    drawTrigramRing(cx, cy, radius, width, lineWidth, alpha, now, entering, time) {
+      const ctx = this.context;
+      ctx.save();
+      ctx.globalAlpha = alpha * 0.13;
+      ctx.strokeStyle = GOLD;
+      ctx.beginPath();
+      ctx.arc(cx, cy, radius, 0, Math.PI * 2);
+      ctx.stroke();
+      ctx.restore();
+      const breath = 1 + 0.006 * Math.sin(now / 620);
+      TRIGRAMS.forEach((trigram, index) => {
+        const progress = entering ? easeOut((time - 4700 - index * 130) / 700) : 1;
+        if (progress <= 0) return;
+        const [x, y] = point(cx, cy, radius * breath * progress, trigram.angle);
+        this.drawGua(x, y, width, lineWidth, trigram.bits, alpha * progress, alpha * progress * 8);
+        const nameAlpha = entering ? alpha * clamp01((time - 4700 - index * 130 - 480) / 500) : alpha;
+        this.label(trigram.name, x, y + lineWidth * 5.2, 13, GOLD, nameAlpha * (0.55 + 0.2 * Math.sin(now / 700 + index)));
+      });
+    }
+
+    drawHexagram(time, now) {
+      const { width, height } = this;
+      const cx = width / 2;
+      const cy = height * 0.4;
+      const scale = Math.min(width, Math.max(1, height - 150));
+      if (time < 1800) {
+        const alpha = this.stageAlpha(time, 0, 1800);
+        this.node(cx, cy, 5.5 * (1 + 0.12 * Math.sin(now / 260)), GOLD_BRIGHT, alpha, 34);
+        for (let ring = 0; ring < 3; ring += 1) {
+          const progress = ((now / 1500) + ring / 3) % 1;
+          const ctx = this.context;
+          ctx.save();
+          ctx.globalAlpha = (1 - progress) * 0.22 * alpha;
+          ctx.strokeStyle = GOLD;
+          ctx.beginPath();
+          ctx.arc(cx, cy, 8 + progress * scale * 0.13, 0, Math.PI * 2);
+          ctx.stroke();
+          ctx.restore();
+        }
+      }
+      if (time >= 1800 && time < 3300) {
+        const alpha = this.stageAlpha(time, 1800, 3300);
+        const progress = easeOut((time - 1850) / 850);
+        const yaoWidth = scale * 0.19 * progress;
+        const yaoLine = Math.max(scale * 0.013, 5);
+        this.drawYao(cx, cy - yaoLine * 2.6, yaoWidth, yaoLine, true, alpha, 14);
+        this.drawYao(cx, cy + yaoLine * 2.6, yaoWidth, yaoLine, false, alpha, 14);
+        this.node(cx, cy, 4, GOLD_BRIGHT, alpha * (1 - progress) * 0.9);
+      }
+      if (time >= 3300 && time < 4700) {
+        const alpha = this.stageAlpha(time, 3300, 4700);
+        const distance = scale * 0.085;
+        const yaoWidth = Math.max(scale * 0.055, 28);
+        const yaoLine = Math.max(scale * 0.009, 3.5);
+        SIXIANG.forEach((symbol, index) => {
+          const progress = easeOut((time - 3330 - index * 160) / 520);
+          if (progress <= 0) return;
+          const x = cx + symbol.dx * distance;
+          const y = cy + symbol.dy * distance;
+          this.drawGua(x, y, yaoWidth * progress, yaoLine, symbol.bits, alpha * progress, 10);
+          this.label(symbol.name, x, y + yaoLine * 5.4, 12, GOLD, alpha * progress * 0.55);
+        });
+      }
+      const trigramRadius = scale * 0.215;
+      const trigramWidth = Math.max(scale * 0.052, 26);
+      const trigramLine = Math.max(scale * 0.0075, 3);
+      if (time >= 4700 && time < 6800) {
+        this.drawTrigramRing(cx, cy, trigramRadius, trigramWidth, trigramLine, this.stageAlpha(time, 4700, 6800), now, true, time);
+      }
+      if (time >= 6800 && time < 10800) {
+        const alpha = this.stageAlpha(time, 6800, 10800, 350);
+        this.drawTrigramRing(cx, cy, trigramRadius, trigramWidth * 0.85, trigramLine * 0.85, alpha * 0.42, now, false, time);
+        const ringRadius = scale * 0.365;
+        const hexWidth = Math.max(scale * 0.026, 13);
+        const hexLine = Math.max(scale * 0.0042, 1.6);
+        const count = Math.floor(clamp01((time - 7000) / 3600) * 64);
+        for (let index = 0; index < 64; index += 1) {
+          const [x, y] = point(cx, cy, ringRadius, -90 + index * 360 / 64);
+          this.node(x, y, 1.4, GOLD, alpha * 0.14);
+          if (index < count) {
+            const freshness = Math.max(0, 1 - (count - 1 - index) / 5);
+            if (freshness > 0) {
+              const ctx = this.context;
+              const gradient = ctx.createLinearGradient(cx, cy, x, y);
+              gradient.addColorStop(0, "rgba(230,195,122,0)");
+              gradient.addColorStop(1, GOLD);
+              this.line(cx, cy, x, y, gradient, alpha * freshness * 0.35);
+            }
+            this.drawGua(x, y, hexWidth, hexLine, hexBits(index), alpha * (0.55 + 0.45 * freshness), freshness * 9);
+          }
+        }
+        if (count > 0) {
+          const current = count - 1;
+          const popTime = clamp01((time - (7000 + current * 3600 / 64)) / 130);
+          const pop = 1 + 0.22 * (1 - popTime);
+          this.drawGua(cx, cy - scale * 0.028, scale * 0.085 * pop, Math.max(scale * 0.011, 4.5), hexBits(current), alpha, 16);
+          this.label(HEXAGRAM_NAMES[current], cx, cy + scale * 0.062, Math.max(20, scale * 0.042), GOLD_BRIGHT, alpha, "600");
+          this.label(`第 ${current + 1} 卦`, cx, cy + scale * 0.105, 13, GOLD, alpha * 0.55);
+        }
+      }
+      if (time >= 10800) {
+        const alpha = this.stageAlpha(time, 10800, HEX_TOTAL, 420);
+        const progress = easeOut((time - 10850) / 1150);
+        const radius = scale * 0.365 * (1 - progress);
+        for (let index = 0; index < 64 && radius >= 8; index += 1) {
+          const [x, y] = point(cx, cy, radius, -90 + index * 360 / 64);
+          this.drawGua(x, y, Math.max(scale * 0.026, 13), Math.max(scale * 0.0042, 1.6), hexBits(index), (1 - progress) * 0.7 * alpha);
+        }
+        this.node(cx, cy, 3 + progress * 6, GOLD_BRIGHT, alpha * (0.3 + 0.7 * progress), 12 + progress * 40);
+      }
+      this.drawFooter(time, now, HEX_TOTAL, HEX_STAGES, "hexagram");
+    }
+
+    drawFortune(time, now) {
+      const { width, height } = this;
+      const cx = width / 2;
+      const cy = height * 0.4;
+      const scale = Math.min(width, Math.max(1, height - 150));
+      if (time < 2100) this.drawFiveMovements(time, now, cx, cy, scale);
+      if (time >= 2100 && time < 3900) this.drawStems(time, cx, cy, scale);
+      if (time >= 3900 && time < 5800) this.drawBranches(time, cx, cy, scale);
+      if (time >= 5800 && time < 7900) this.drawSixQi(time, now, cx, cy, scale);
+      if (time >= 7900 && time < 11000) this.drawAnnualQi(time, now, cx, cy, scale);
+      if (time >= 11000) {
+        const alpha = this.stageAlpha(time, 11000, FORTUNE_TOTAL, 420);
+        const progress = easeOut((time - 11050) / 1200);
+        const radius = scale * 0.30 * (1 - progress);
+        QI6.forEach((qi, index) => {
+          const [x, y] = point(cx, cy, radius, -90 + index * 60);
+          if (radius > 8) this.node(x, y, Math.max(scale * 0.011, 6), ELEMENT_COLORS[qi.element], (1 - progress) * 0.8 * alpha, 8);
+        });
+        this.node(cx, cy, 3 + progress * 6, GOLD_BRIGHT, alpha * (0.3 + 0.7 * progress), 12 + progress * 40);
+      }
+      this.drawFooter(time, now, FORTUNE_TOTAL, this.fortuneStages(), "fortune");
+    }
+
+    drawFiveMovements(time, now, cx, cy, scale) {
+      const alpha = this.stageAlpha(time, 0, 2100);
+      const radius = scale * 0.17;
+      const nodeRadius = Math.max(scale * 0.018, 9);
+      const elements = [
+        ["木", 180], ["火", -90], ["金", 0], ["水", 90], ["土", null],
+      ];
+      const positions = {};
+      this.node(cx, cy, 5 + 1.5 * Math.sin(now / 260), GOLD_BRIGHT, alpha * (1 - easeOut((time - 200) / 800)), 30);
+      elements.forEach(([element, degrees], index) => {
+        const progress = easeOut((time - 500 - index * 170) / 500);
+        if (progress <= 0) return;
+        const x = degrees === null ? cx : cx + Math.cos(degrees * Math.PI / 180) * radius * progress;
+        const y = degrees === null ? cy : cy + Math.sin(degrees * Math.PI / 180) * radius * progress;
+        positions[element] = [x, y];
+        this.node(x, y, nodeRadius * progress, ELEMENT_COLORS[element], alpha * progress, 16);
+        this.label(element, x, y + 0.5, Math.round(nodeRadius * 1.15), NODE_TEXT, alpha * progress, "600");
+        const direction = element === "土" ? "中央土" : { 木: "东方木", 火: "南方火", 金: "西方金", 水: "北方水" }[element];
+        this.label(direction, x, y + nodeRadius + 14, 12, ELEMENT_COLORS[element], alpha * progress * 0.75);
+      });
+      const order = ["木", "火", "土", "金", "水"];
+      order.forEach((element, index) => {
+        const from = positions[element];
+        const to = positions[order[(index + 1) % order.length]];
+        if (!from || !to) return;
+        const progress = smooth(1450 + index * 130, 1700 + index * 130, time);
+        const mx = (from[0] + to[0]) / 2 + (cx - (from[0] + to[0]) / 2) * 0.25;
+        const my = (from[1] + to[1]) / 2 + (cy - (from[1] + to[1]) / 2) * 0.25;
+        this.curvedArrow(from[0], from[1], to[0], to[1], mx, my, GOLD, alpha * progress * 0.4);
+      });
+    }
+
+    drawStems(time, cx, cy, scale) {
+      const alpha = this.stageAlpha(time, 2100, 3900);
+      const stems = "甲乙丙丁戊己庚辛壬癸";
+      const movements = ["土", "金", "水", "木", "火"];
+      const radius = scale * 0.30;
+      for (let index = 0; index < 10; index += 1) {
+        const progress = smooth(2150 + index * 90, 2450 + index * 90, time);
+        if (progress <= 0) continue;
+        const [x, y] = point(cx, cy, radius, -90 + index * 36);
+        const element = movements[index % 5];
+        this.node(x, y, 3, ELEMENT_COLORS[element], alpha * progress, 8);
+        this.label(stems[index], x, y - 14, 15, ELEMENT_COLORS[element], alpha * progress, "600");
+      }
+      for (let index = 0; index < 5; index += 1) {
+        const progress = smooth(3150 + index * 110, 3450 + index * 110, time);
+        const angle = -90 + index * 36;
+        const [x1, y1] = point(cx, cy, radius, angle);
+        const [x2, y2] = point(cx, cy, radius, -90 + (index + 5) * 36);
+        this.line(x1, y1, x2, y2, ELEMENT_COLORS[movements[index]], alpha * progress * 0.45);
+        const [labelX, labelY] = point(cx, cy, scale * 0.055, angle + 90);
+        this.label(movements[index], labelX, labelY, 16, ELEMENT_COLORS[movements[index]], alpha * progress, "600");
+      }
+    }
+
+    drawBranches(time, cx, cy, scale) {
+      const alpha = this.stageAlpha(time, 3900, 5800);
+      const branches = "子丑寅卯辰巳午未申酉戌亥";
+      const qiNames = ["少阴君火", "太阴湿土", "少阳相火", "阳明燥金", "太阳寒水", "厥阴风木"];
+      const radius = scale * 0.31;
+      const branchAngle = (index) => -90 + ((index - 6 + 12) % 12) * 30;
+      for (let index = 0; index < 12; index += 1) {
+        const progress = smooth(3950 + index * 70, 4220 + index * 70, time);
+        const [x, y] = point(cx, cy, radius, branchAngle(index));
+        this.node(x, y, 2.5, GOLD, alpha * progress, 6);
+        this.label(branches[index], x, y - 13, 14, GOLD, alpha * progress * 0.9);
+      }
+      qiNames.forEach((name, index) => {
+        const progress = smooth(4900 + index * 130, 5200 + index * 130, time);
+        const [x1, y1] = point(cx, cy, radius, branchAngle(index));
+        const [x2, y2] = point(cx, cy, radius, branchAngle(index + 6));
+        const element = QI6.find((item) => item.name === name)?.element || "土";
+        this.line(x1, y1, x2, y2, ELEMENT_COLORS[element], alpha * progress * 0.4);
+        const [labelX, labelY] = point(cx, cy, radius + scale * 0.055, branchAngle(index));
+        this.label(name, labelX, labelY, 12, ELEMENT_COLORS[element], alpha * progress, "600");
+      });
+    }
+
+    drawSixQi(time, now, cx, cy, scale) {
+      const alpha = this.stageAlpha(time, 5800, 7900);
+      const radius = scale * 0.27;
+      const drift = now * 0.004;
+      const ctx = this.context;
+      ctx.save();
+      ctx.globalAlpha = alpha * 0.13;
+      ctx.strokeStyle = GOLD;
+      ctx.beginPath();
+      ctx.arc(cx, cy, radius, 0, Math.PI * 2);
+      ctx.stroke();
+      ctx.restore();
+      QI6.forEach((qi, index) => {
+        const progress = easeOut((time - 5850 - index * 180) / 550);
+        const [x, y] = point(cx, cy, radius * progress, -90 + index * 60 + drift);
+        const nodeRadius = Math.max(scale * 0.015, 8) * progress;
+        this.node(x, y, nodeRadius, ELEMENT_COLORS[qi.element], alpha * progress, 14);
+        this.label(qi.name, x, y - nodeRadius - 12, 13, ELEMENT_COLORS[qi.element], alpha * progress, "600");
+        this.label(["初之气", "二之气", "三之气", "四之气", "五之气", "终之气"][index], x, y + nodeRadius + 12, 10.5, DIM, alpha * progress * 0.9);
+      });
+      this.node(cx, cy, 4 + Math.sin(now / 300), GOLD_BRIGHT, alpha * 0.9, 24);
+    }
+
+    drawAnnualQi(time, now, cx, cy, scale) {
+      const alpha = this.stageAlpha(time, 7900, 11000, 350);
+      const sixQi = this.data.sixQi || {};
+      const pillar = this.data.yearPillar || "岁运";
+      const movement = this.data.movement || "中运合参";
+      const sitian = sixQi.sitian || "司天气候";
+      const zaiquan = sixQi.zaiquan || "在泉气化";
+      const currentStep = Math.max(1, Math.min(6, Number(sixQi.step) || 1));
+      const qiElement = (name) => QI6.find((item) => item.name === name)?.element || "土";
+      const movementElement = ["木", "火", "土", "金", "水"].find((element) => movement.includes(element)) || "土";
+      this.label("司 天", cx, cy - scale * 0.212, 11, DIM, alpha * smooth(7950, 8450, time));
+      this.label(sitian, cx, cy - scale * 0.178, 17, ELEMENT_COLORS[qiElement(sitian)], alpha * smooth(7950, 8450, time), "600");
+      this.label(zaiquan, cx, cy + scale * 0.178, 17, ELEMENT_COLORS[qiElement(zaiquan)], alpha * smooth(8200, 8700, time), "600");
+      this.label("在 泉", cx, cy + scale * 0.212, 11, DIM, alpha * smooth(8200, 8700, time));
+      this.label(pillar, cx, cy - scale * 0.012, Math.max(22, scale * 0.052), GOLD_BRIGHT, alpha * smooth(8500, 9100, time), "600");
+      this.label(`${pillar}年 · 中运${movement}`, cx, cy + scale * 0.052, 14, ELEMENT_COLORS[movementElement], alpha * smooth(8500, 9100, time), "600", scale * 0.62);
+      const radius = scale * 0.30;
+      QI6.forEach((qi, index) => {
+        const progress = smooth(9200 + index * 260, 9480 + index * 260, time);
+        const [x, y] = point(cx, cy, radius, -90 + index * 60);
+        const current = index + 1 === currentStep;
+        const pulse = current ? 0.5 + 0.5 * Math.sin(now / 230) : 0;
+        this.node(x, y, Math.max(scale * 0.011, 6) + (current ? 2.5 : 0), ELEMENT_COLORS[qi.element], alpha * progress, 12 + pulse * 14);
+        if (current) {
+          const ctx = this.context;
+          ctx.save();
+          ctx.globalAlpha = alpha * (0.35 + pulse * 0.35);
+          ctx.strokeStyle = CINNABAR;
+          ctx.lineWidth = 1.2;
+          ctx.beginPath();
+          ctx.arc(x, y, Math.max(scale * 0.02, 11) + pulse * 3, 0, Math.PI * 2);
+          ctx.stroke();
+          ctx.restore();
+          this.label("当今", x, y - Math.max(scale * 0.038, 21), 10.5, CINNABAR, alpha * progress, "600");
+        }
+        const stepName = `${index + 1 === 6 ? "终" : ["初", "二", "三", "四", "五"][index]}之气`;
+        this.label(`${stepName} · ${qi.name}`, x, y + Math.max(scale * 0.03, 17), 11.5, current ? GOLD_BRIGHT : ELEMENT_COLORS[qi.element], alpha * progress * (current ? 1 : 0.85), current ? "600" : "");
+        if (current) this.label(STEP_RANGES[index], x, y + Math.max(scale * 0.052, 33), 10, DIM, alpha * progress);
+      });
+    }
+
+    drawCompletion(progress, now) {
+      this.drawBackground(now);
+      if (this.scene === "fortune") {
+        this.drawFortune(11000 + progress * (FORTUNE_TOTAL - 11000), now);
+      } else {
+        this.drawHexagram(10800 + progress * (HEX_TOTAL - 10800), now);
+      }
+    }
+  }
+
+  global.HeavenLoadingCanvas = HeavenLoadingCanvas;
+})(window);

app/static/heaven-loading.js

@@ -0,0 +1,672 @@
+(function exposeHeavenLoading(global) {
+  "use strict";
+
+  const PAPER = "#fdfcf8";
+  const PAPER_CENTER = "#f1e8d9";
+  const NODE_TEXT = "#fffaf0";
+  const INK = "#68493d";
+  const INK_BRIGHT = "#963f37";
+  const GOLD = "#80533e";
+  const GOLD_BRIGHT = "#b64e43";
+  const CINNABAR = "#b94038";
+  const DIM = "rgba(68,57,49,0.62)";
+  const PARTICLE_COLORS = ["#a94b42", "#456b62", "#506b85"];
+  const SERIF = '"Noto Serif SC","Songti SC","STSong","SimSun",serif';
+  const ELEMENT_COLORS = {
+    木: "#4f7a4a",
+    火: "#b3483d",
+    土: "#96702c",
+    金: "#70685b",
+    水: "#496d92",
+  };
+  const QI6 = [
+    { name: "厥阴风木", element: "木" },
+    { name: "少阴君火", element: "火" },
+    { name: "少阳相火", element: "火" },
+    { name: "太阴湿土", element: "土" },
+    { name: "阳明燥金", element: "金" },
+    { name: "太阳寒水", element: "水" },
+  ];
+  const STEP_RANGES = ["大寒 — 春分", "春分 — 小满", "小满 — 大暑", "大暑 — 秋分", "秋分 — 小雪", "小雪 — 大寒"];
+  const TRIGRAMS = [
+    { name: "乾", bits: [1, 1, 1], angle: -90 },
+    { name: "兑", bits: [1, 1, 0], angle: -135 },
+    { name: "离", bits: [1, 0, 1], angle: 180 },
+    { name: "震", bits: [1, 0, 0], angle: 135 },
+    { name: "巽", bits: [0, 1, 1], angle: -45 },
+    { name: "坎", bits: [0, 1, 0], angle: 0 },
+    { name: "艮", bits: [0, 0, 1], angle: 45 },
+    { name: "坤", bits: [0, 0, 0], angle: 90 },
+  ];
+  const SIXIANG = [
+    { name: "太阳", bits: [1, 1], dx: 0, dy: -1 },
+    { name: "少阴", bits: [1, 0], dx: 1, dy: 0 },
+    { name: "太阴", bits: [0, 0], dx: 0, dy: 1 },
+    { name: "少阳", bits: [0, 1], dx: -1, dy: 0 },
+  ];
+  const HEXAGRAM_NAMES = [
+    "坤", "剥", "比", "观", "豫", "晋", "萃", "否", "谦", "艮", "蹇", "渐", "小过", "旅", "咸", "遁",
+    "师", "蒙", "坎", "涣", "解", "未济", "困", "讼", "升", "蛊", "井", "巽", "恒", "鼎", "大过", "姤",
+    "复", "颐", "屯", "益", "震", "噬嗑", "随", "无妄", "明夷", "贲", "既济", "家人", "丰", "革", "同人", "临",
+    "损", "节", "中孚", "归妹", "睽", "兑", "履", "泰", "大畜", "需", "小畜", "大壮", "大有", "夬", "乾",
+  ];
+  const HEX_TOTAL = 12500;
+  const FORTUNE_TOTAL = 12800;
+  const HEX_STAGES = [
+    [0, 1800, "太 极", "无极而太极，动而生阳"],
+    [1800, 3300, "两 仪", "一阴一阳之谓道"],
+    [3300, 4700, "四 象", "阴阳消长，太少相生"],
+    [4700, 6800, "八 卦", "天地定位，山泽通气"],
+    [6800, 10800, "六 十 四 卦", "卦者挂也，悬物象以示人"],
+    [10800, HEX_TOTAL, "归 一", "万物负阴而抱阳，冲气以为和"],
+  ];
+  const clamp01 = (value) => Math.max(0, Math.min(1, value));
+  const smooth = (start, end, value) => {
+    const progress = clamp01((value - start) / Math.max(1, end - start));
+    return progress * progress * (3 - 2 * progress);
+  };
+  const easeOut = (value) => 1 - Math.pow(1 - clamp01(value), 3);
+  const hexBits = (index) => Array.from({ length: 6 }, (_, bit) => (index >> (5 - bit)) & 1);
+  const point = (cx, cy, radius, degrees) => {
+    const radians = degrees * Math.PI / 180;
+    return [cx + Math.cos(radians) * radius, cy + Math.sin(radians) * radius];
+  };
+
+  class HeavenLoadingCanvas {
+    constructor(canvas) {
+      this.canvas = canvas;
+      this.context = canvas.getContext("2d");
+      this.width = 0;
+      this.height = 0;
+      this.dpr = 1;
+      this.scene = "hexagram";
+      this.data = {};
+      this.startedAt = 0;
+      this.frameId = 0;
+      this.running = false;
+      this.completingAt = 0;
+      this.completionResolve = null;
+      this.completionTimer = 0;
+      this.resizeObserver = new ResizeObserver(() => this.resize());
+      this.reducedMotion = global.matchMedia("(prefers-reduced-motion: reduce)").matches;
+      this.stars = this.createStars(this.reducedMotion ? 48 : 150);
+    }
+
+    createStars(count) {
+      let seed = 24681357;
+      const random = () => {
+        seed = (seed * 1664525 + 1013904223) >>> 0;
+        return seed / 4294967296;
+      };
+      return Array.from({ length: count }, () => ({
+        x: random(),
+        y: random(),
+        radius: 0.3 + random() * 1.3,
+        phase: random() * Math.PI * 2,
+        speed: 0.00015 + random() * 0.0004,
+        colorIndex: Math.floor(random() * PARTICLE_COLORS.length),
+      }));
+    }
+
+    start(scene, data = {}) {
+      const nextScene = scene === "fortune" ? "fortune" : "hexagram";
+      if (this.running && this.scene === nextScene) {
+        this.data = data;
+        return;
+      }
+      this.stop();
+      this.scene = nextScene;
+      this.data = data;
+      this.startedAt = performance.now();
+      this.running = true;
+      this.canvas.dataset.scene = this.scene;
+      this.canvas.dataset.running = "true";
+      this.canvas.dataset.looping = "true";
+      this.resizeObserver.observe(this.canvas);
+      this.resize();
+      if (this.reducedMotion) {
+        this.draw(this.scene === "fortune" ? 10950 : 10600, performance.now());
+      } else {
+        this.frameId = requestAnimationFrame((now) => this.frame(now));
+      }
+    }
+
+    complete() {
+      if (!this.running || this.reducedMotion) {
+        this.stop();
+        return Promise.resolve();
+      }
+      if (this.completionResolve) return this.completionPromise;
+      this.completingAt = performance.now();
+      this.completionPromise = new Promise((resolve) => { this.completionResolve = resolve; });
+      this.completionTimer = global.setTimeout(() => this.stop(), 2200);
+      return this.completionPromise;
+    }
+
+    stop() {
+      if (this.frameId) cancelAnimationFrame(this.frameId);
+      this.frameId = 0;
+      this.running = false;
+      this.completingAt = 0;
+      if (this.completionTimer) global.clearTimeout(this.completionTimer);
+      this.completionTimer = 0;
+      this.resizeObserver.disconnect();
+      this.canvas.dataset.running = "false";
+      this.canvas.dataset.looping = "false";
+      if (this.completionResolve) this.completionResolve();
+      this.completionResolve = null;
+      this.completionPromise = null;
+    }
+
+    resize() {
+      const rect = this.canvas.getBoundingClientRect();
+      const width = Math.max(1, Math.round(rect.width));
+      const height = Math.max(1, Math.round(rect.height));
+      if (width === this.width && height === this.height) return;
+      this.width = width;
+      this.height = height;
+      this.dpr = Math.min(global.devicePixelRatio || 1, 2);
+      this.canvas.width = Math.round(width * this.dpr);
+      this.canvas.height = Math.round(height * this.dpr);
+      this.context.setTransform(this.dpr, 0, 0, this.dpr, 0, 0);
+      if (this.running && this.reducedMotion) {
+        this.draw(this.scene === "fortune" ? 10950 : 10600, performance.now());
+      }
+    }
+
+    frame(now) {
+      if (!this.running) return;
+      if (this.completingAt) {
+        const duration = this.scene === "fortune" ? 1800 : 1700;
+        const progress = clamp01((now - this.completingAt) / duration);
+        this.drawCompletion(progress, now);
+        if (progress >= 1) {
+          this.stop();
+          return;
+        }
+      } else {
+        const total = this.scene === "fortune" ? FORTUNE_TOTAL : HEX_TOTAL;
+        const elapsed = Math.max(0, now - this.startedAt);
+        const timeline = elapsed % total;
+        this.canvas.dataset.cycle = String(Math.floor(elapsed / total));
+        this.draw(timeline, now);
+      }
+      this.frameId = requestAnimationFrame((time) => this.frame(time));
+    }
+
+    draw(time, now) {
+      if (this.width <= 1 || this.height <= 1) return;
+      this.drawBackground(now);
+      if (this.scene === "fortune") this.drawFortune(time, now);
+      else this.drawHexagram(time, now);
+    }
+
+    drawBackground(now) {
+      const { context: ctx, width, height } = this;
+      const cx = width / 2;
+      const cy = height * 0.44;
+      const gradient = ctx.createRadialGradient(cx, cy, 0, cx, cy, Math.max(width, height) * 0.75);
+      gradient.addColorStop(0, PAPER_CENTER);
+      gradient.addColorStop(0.52, "#faf7ef");
+      gradient.addColorStop(1, PAPER);
+      ctx.fillStyle = gradient;
+      ctx.fillRect(0, 0, width, height);
+      for (const star of this.stars) {
+        const twinkle = 0.35 + 0.65 * (0.5 + 0.5 * Math.sin(star.phase + now * 0.0012));
+        const alpha = twinkle * 0.5;
+        ctx.globalAlpha = alpha;
+        ctx.fillStyle = PARTICLE_COLORS[star.colorIndex];
+        const y = ((star.y + now * star.speed) % 1) * height;
+        ctx.fillRect(star.x * width, y, star.radius, star.radius);
+      }
+      ctx.globalAlpha = 1;
+    }
+
+    label(text, x, y, size, color = INK, alpha = 1, weight = "", maxWidth) {
+      if (!text || alpha <= 0) return;
+      const ctx = this.context;
+      ctx.save();
+      ctx.globalAlpha = alpha;
+      ctx.fillStyle = color;
+      ctx.font = `${weight ? `${weight} ` : ""}${size}px ${SERIF}`;
+      ctx.textAlign = "center";
+      ctx.textBaseline = "middle";
+      if (maxWidth) ctx.fillText(text, x, y, maxWidth);
+      else ctx.fillText(text, x, y);
+      ctx.restore();
+    }
+
+    node(x, y, radius, color, alpha = 1, glow = 0) {
+      const ctx = this.context;
+      ctx.save();
+      ctx.globalAlpha = alpha;
+      ctx.fillStyle = color;
+      ctx.shadowColor = color;
+      ctx.shadowBlur = glow;
+      ctx.beginPath();
+      ctx.arc(x, y, radius, 0, Math.PI * 2);
+      ctx.fill();
+      ctx.restore();
+    }
+
+    line(x1, y1, x2, y2, color, alpha = 1, width = 1) {
+      const ctx = this.context;
+      ctx.save();
+      ctx.globalAlpha = alpha;
+      ctx.strokeStyle = color;
+      ctx.lineWidth = width;
+      ctx.beginPath();
+      ctx.moveTo(x1, y1);
+      ctx.lineTo(x2, y2);
+      ctx.stroke();
+      ctx.restore();
+    }
+
+    curvedArrow(x1, y1, x2, y2, mx, my, color, alpha) {
+      if (alpha <= 0) return;
+      const ctx = this.context;
+      ctx.save();
+      ctx.globalAlpha = alpha;
+      ctx.strokeStyle = color;
+      ctx.lineWidth = 1.2;
+      ctx.beginPath();
+      ctx.moveTo(x1, y1);
+      ctx.quadraticCurveTo(mx, my, x2, y2);
+      ctx.stroke();
+      const angle = Math.atan2(y2 - my, x2 - mx);
+      ctx.fillStyle = color;
+      ctx.beginPath();
+      ctx.moveTo(x2, y2);
+      ctx.lineTo(x2 - 7 * Math.cos(angle - 0.42), y2 - 7 * Math.sin(angle - 0.42));
+      ctx.lineTo(x2 - 7 * Math.cos(angle + 0.42), y2 - 7 * Math.sin(angle + 0.42));
+      ctx.closePath();
+      ctx.fill();
+      ctx.restore();
+    }
+
+    drawYao(cx, cy, width, lineWidth, yang, alpha, glow = 0) {
+      const ctx = this.context;
+      ctx.save();
+      ctx.globalAlpha = alpha;
+      ctx.fillStyle = INK;
+      ctx.shadowColor = GOLD;
+      ctx.shadowBlur = glow;
+      if (yang) {
+        ctx.fillRect(cx - width / 2, cy - lineWidth / 2, width, lineWidth);
+      } else {
+        const gap = width * 0.18;
+        ctx.fillRect(cx - width / 2, cy - lineWidth / 2, (width - gap) / 2, lineWidth);
+        ctx.fillRect(cx + gap / 2, cy - lineWidth / 2, (width - gap) / 2, lineWidth);
+      }
+      ctx.restore();
+    }
+
+    drawGua(cx, cy, width, lineWidth, bits, alpha, glow = 0) {
+      const gap = lineWidth * 1.7;
+      const top = cy - (bits.length - 1) * gap / 2;
+      bits.forEach((bit, index) => {
+        this.drawYao(cx, top + (bits.length - 1 - index) * gap, width, lineWidth, bit === 1, alpha, glow);
+      });
+    }
+
+    stageAlpha(time, start, end, fade = 300, hold = false) {
+      const enter = smooth(start, start + fade, time);
+      return hold ? enter : enter * (1 - smooth(end - fade, end, time));
+    }
+
+    fortuneStages() {
+      const sixQi = this.data.sixQi || {};
+      const pillar = this.data.yearPillar || "岁运";
+      const movement = this.data.movement || "中运合参";
+      const sitian = sixQi.sitian || "司天气候";
+      return [
+        [0, 2100, "五 运", "木火土金水，五运相袭，周而复始"],
+        [2100, 3900, "十 干 化 运", "甲己土 · 乙庚金 · 丙辛水 · 丁壬木 · 戊癸火"],
+        [3900, 5800, "十 二 支 化 气", "子午少阴 · 丑未太阴 · 寅申少阳 · 卯酉阳明 · 辰戌太阳 · 巳亥厥阴"],
+        [5800, 7900, "六 气 环 布", "风寒暑湿燥火，分主六步，以应岁时"],
+        [7900, 11000, "岁 运 合 参", `${pillar}年 · 中运${movement} · ${sitian}司天`],
+        [11000, FORTUNE_TOTAL, "归 一", "谨守病机，无失气宜"],
+      ];
+    }
+
+    drawFooter(time, now, total, stages, scene) {
+      const { context: ctx, width, height } = this;
+      const stage = [...stages].reverse().find((item) => time >= item[0]) || stages[0];
+      const labelAlpha = smooth(stage[0], stage[0] + 300, time)
+        * (1 - smooth(stage[1] - 250, stage[1], time));
+      this.label(stage[2], width / 2, height - 108, 19, GOLD, 0.55 + 0.45 * labelAlpha, "600");
+      this.label(stage[3], width / 2, height - 84, 12.5, DIM, (0.4 + 0.4 * labelAlpha) * (scene === "fortune" ? 0.85 : 0.8), "", width - 32);
+
+      const baseSlotWidth = 34;
+      const baseSlotHeight = 5;
+      const baseSlotGap = 12;
+      const baseTotalWidth = baseSlotWidth * 6 + baseSlotGap * 5;
+      const fit = Math.min(1, (width - 28) / baseTotalWidth);
+      const slotWidth = baseSlotWidth * fit;
+      const slotHeight = baseSlotHeight * fit;
+      const slotGap = baseSlotGap * fit;
+      const totalWidth = slotWidth * 6 + slotGap * 5;
+      const filled = Math.min(6, Math.floor(time / (total / 6)));
+      for (let index = 0; index < 6; index += 1) {
+        const x = width / 2 - totalWidth / 2 + index * (slotWidth + slotGap);
+        const y = height - 56;
+        const color = scene === "fortune" ? ELEMENT_COLORS[QI6[index].element] : GOLD;
+        ctx.save();
+        ctx.globalAlpha = 0.16;
+        ctx.strokeStyle = GOLD;
+        ctx.lineWidth = 1;
+        ctx.strokeRect(x, y, slotWidth, slotHeight);
+        ctx.restore();
+        if (index < filled) {
+          ctx.save();
+          ctx.globalAlpha = 0.9;
+          ctx.fillStyle = color;
+          ctx.shadowColor = color;
+          ctx.shadowBlur = 8;
+          ctx.fillRect(x, y, slotWidth, slotHeight);
+          ctx.restore();
+        } else if (index === filled) {
+          ctx.save();
+          ctx.globalAlpha = 0.35 + 0.3 * Math.sin(now / 200);
+          ctx.fillStyle = color;
+          const progress = (time % (total / 6)) / (total / 6);
+          ctx.fillRect(x, y, slotWidth * progress, slotHeight);
+          ctx.restore();
+        }
+      }
+      const dots = ".".repeat(1 + Math.floor(now / 450) % 3);
+      const loadingText = scene === "fortune" ? "推 演 运 气 · 加 载 中" : "推 演 天 机 · 加 载 中";
+      this.label(`${loadingText}${dots}`, width / 2, height - 32, 13, GOLD, 0.75);
+    }
+
+    drawTrigramRing(cx, cy, radius, width, lineWidth, alpha, now, entering, time) {
+      const ctx = this.context;
+      ctx.save();
+      ctx.globalAlpha = alpha * 0.13;
+      ctx.strokeStyle = GOLD;
+      ctx.beginPath();
+      ctx.arc(cx, cy, radius, 0, Math.PI * 2);
+      ctx.stroke();
+      ctx.restore();
+      const breath = 1 + 0.006 * Math.sin(now / 620);
+      TRIGRAMS.forEach((trigram, index) => {
+        const progress = entering ? easeOut((time - 4700 - index * 130) / 700) : 1;
+        if (progress <= 0) return;
+        const [x, y] = point(cx, cy, radius * breath * progress, trigram.angle);
+        this.drawGua(x, y, width, lineWidth, trigram.bits, alpha * progress, alpha * progress * 8);
+        const nameAlpha = entering ? alpha * clamp01((time - 4700 - index * 130 - 480) / 500) : alpha;
+        this.label(trigram.name, x, y + lineWidth * 5.2, 13, GOLD, nameAlpha * (0.55 + 0.2 * Math.sin(now / 700 + index)));
+      });
+    }
+
+    drawHexagram(time, now) {
+      const { width, height } = this;
+      const cx = width / 2;
+      const cy = height * 0.44;
+      const scale = Math.min(width, height);
+      if (time < 1800) {
+        const alpha = this.stageAlpha(time, 0, 1800);
+        this.node(cx, cy, 5.5 * (1 + 0.12 * Math.sin(now / 260)), GOLD_BRIGHT, alpha, 34);
+        for (let ring = 0; ring < 3; ring += 1) {
+          const progress = ((now / 1500) + ring / 3) % 1;
+          const ctx = this.context;
+          ctx.save();
+          ctx.globalAlpha = (1 - progress) * 0.22 * alpha;
+          ctx.strokeStyle = GOLD;
+          ctx.beginPath();
+          ctx.arc(cx, cy, 8 + progress * scale * 0.13, 0, Math.PI * 2);
+          ctx.stroke();
+          ctx.restore();
+        }
+      }
+      if (time >= 1800 && time < 3300) {
+        const alpha = this.stageAlpha(time, 1800, 3300);
+        const progress = easeOut((time - 1850) / 850);
+        const yaoWidth = scale * 0.19 * progress;
+        const yaoLine = Math.max(scale * 0.013, 5);
+        this.drawYao(cx, cy - yaoLine * 2.6, yaoWidth, yaoLine, true, alpha, 14);
+        this.drawYao(cx, cy + yaoLine * 2.6, yaoWidth, yaoLine, false, alpha, 14);
+        this.node(cx, cy, 4, GOLD_BRIGHT, alpha * (1 - progress) * 0.9);
+      }
+      if (time >= 3300 && time < 4700) {
+        const alpha = this.stageAlpha(time, 3300, 4700);
+        const distance = scale * 0.085;
+        const yaoWidth = Math.max(scale * 0.055, 28);
+        const yaoLine = Math.max(scale * 0.009, 3.5);
+        SIXIANG.forEach((symbol, index) => {
+          const progress = easeOut((time - 3330 - index * 160) / 520);
+          if (progress <= 0) return;
+          const x = cx + symbol.dx * distance;
+          const y = cy + symbol.dy * distance;
+          this.drawGua(x, y, yaoWidth * progress, yaoLine, symbol.bits, alpha * progress, 10);
+          this.label(symbol.name, x, y + yaoLine * 5.4, 12, GOLD, alpha * progress * 0.55);
+        });
+      }
+      const trigramRadius = scale * 0.215;
+      const trigramWidth = Math.max(scale * 0.052, 26);
+      const trigramLine = Math.max(scale * 0.0075, 3);
+      if (time >= 4700 && time < 6800) {
+        this.drawTrigramRing(cx, cy, trigramRadius, trigramWidth, trigramLine, this.stageAlpha(time, 4700, 6800), now, true, time);
+      }
+      if (time >= 6800 && time < 10800) {
+        const alpha = this.stageAlpha(time, 6800, 10800, 350);
+        this.drawTrigramRing(cx, cy, trigramRadius, trigramWidth * 0.85, trigramLine * 0.85, alpha * 0.42, now, false, time);
+        const ringRadius = scale * 0.365;
+        const hexWidth = Math.max(scale * 0.026, 13);
+        const hexLine = Math.max(scale * 0.0042, 1.6);
+        const count = Math.floor(clamp01((time - 7000) / 3600) * 64);
+        for (let index = 0; index < 64; index += 1) {
+          const [x, y] = point(cx, cy, ringRadius, -90 + index * 360 / 64);
+          this.node(x, y, 1.4, GOLD, alpha * 0.14);
+          if (index < count) {
+            const freshness = Math.max(0, 1 - (count - 1 - index) / 5);
+            if (freshness > 0) {
+              const ctx = this.context;
+              const gradient = ctx.createLinearGradient(cx, cy, x, y);
+              gradient.addColorStop(0, "rgba(128,83,62,0)");
+              gradient.addColorStop(1, GOLD);
+              this.line(cx, cy, x, y, gradient, alpha * freshness * 0.35);
+            }
+            this.drawGua(x, y, hexWidth, hexLine, hexBits(index), alpha * (0.55 + 0.45 * freshness), freshness * 9);
+          }
+        }
+        if (count > 0) {
+          const current = count - 1;
+          const popTime = clamp01((time - (7000 + current * 3600 / 64)) / 130);
+          const pop = 1 + 0.22 * (1 - popTime);
+          this.drawGua(cx, cy - scale * 0.028, scale * 0.085 * pop, Math.max(scale * 0.011, 4.5), hexBits(current), alpha, 16);
+          this.label(HEXAGRAM_NAMES[current], cx, cy + scale * 0.062, Math.max(20, scale * 0.042), GOLD_BRIGHT, alpha, "600");
+          this.label(`第 ${current + 1} 卦`, cx, cy + scale * 0.105, 13, GOLD, alpha * 0.55);
+        }
+      }
+      if (time >= 10800) {
+        const alpha = this.stageAlpha(time, 10800, HEX_TOTAL, 420);
+        const progress = easeOut((time - 10850) / 1150);
+        const radius = scale * 0.365 * (1 - progress);
+        for (let index = 0; index < 64 && radius >= 8; index += 1) {
+          const [x, y] = point(cx, cy, radius, -90 + index * 360 / 64);
+          this.drawGua(x, y, Math.max(scale * 0.026, 13), Math.max(scale * 0.0042, 1.6), hexBits(index), (1 - progress) * 0.7 * alpha);
+        }
+        this.node(cx, cy, 3 + progress * 6, GOLD_BRIGHT, alpha * (0.3 + 0.7 * progress), 12 + progress * 40);
+      }
+      this.drawFooter(time, now, HEX_TOTAL, HEX_STAGES, "hexagram");
+    }
+
+    drawFortune(time, now) {
+      const { width, height } = this;
+      const cx = width / 2;
+      const cy = height * 0.44;
+      const scale = Math.min(width, height);
+      if (time < 2100) this.drawFiveMovements(time, now, cx, cy, scale);
+      if (time >= 2100 && time < 3900) this.drawStems(time, cx, cy, scale);
+      if (time >= 3900 && time < 5800) this.drawBranches(time, cx, cy, scale);
+      if (time >= 5800 && time < 7900) this.drawSixQi(time, now, cx, cy, scale);
+      if (time >= 7900 && time < 11000) this.drawAnnualQi(time, now, cx, cy, scale);
+      if (time >= 11000) {
+        const alpha = this.stageAlpha(time, 11000, FORTUNE_TOTAL, 420);
+        const progress = easeOut((time - 11050) / 1200);
+        const radius = scale * 0.30 * (1 - progress);
+        QI6.forEach((qi, index) => {
+          const [x, y] = point(cx, cy, radius, -90 + index * 60);
+          if (radius > 8) this.node(x, y, Math.max(scale * 0.011, 6), ELEMENT_COLORS[qi.element], (1 - progress) * 0.8 * alpha, 8);
+        });
+        this.node(cx, cy, 3 + progress * 6, GOLD_BRIGHT, alpha * (0.3 + 0.7 * progress), 12 + progress * 40);
+      }
+      this.drawFooter(time, now, FORTUNE_TOTAL, this.fortuneStages(), "fortune");
+    }
+
+    drawFiveMovements(time, now, cx, cy, scale) {
+      const alpha = this.stageAlpha(time, 0, 2100);
+      const radius = scale * 0.17;
+      const nodeRadius = Math.max(scale * 0.018, 9);
+      const elements = [
+        ["木", 180], ["火", -90], ["金", 0], ["水", 90], ["土", null],
+      ];
+      const positions = {};
+      this.node(cx, cy, 5 + 1.5 * Math.sin(now / 260), GOLD_BRIGHT, alpha * (1 - easeOut((time - 200) / 800)), 30);
+      elements.forEach(([element, degrees], index) => {
+        const progress = easeOut((time - 500 - index * 170) / 500);
+        if (progress <= 0) return;
+        const x = degrees === null ? cx : cx + Math.cos(degrees * Math.PI / 180) * radius * progress;
+        const y = degrees === null ? cy : cy + Math.sin(degrees * Math.PI / 180) * radius * progress;
+        positions[element] = [x, y];
+        this.node(x, y, nodeRadius * progress, ELEMENT_COLORS[element], alpha * progress, 16);
+        this.label(element, x, y + 0.5, Math.round(nodeRadius * 1.15), NODE_TEXT, alpha * progress, "600");
+        const direction = element === "土" ? "中央土" : { 木: "东方木", 火: "南方火", 金: "西方金", 水: "北方水" }[element];
+        this.label(direction, x, y + nodeRadius + 14, 12, ELEMENT_COLORS[element], alpha * progress * 0.75);
+      });
+      const order = ["木", "火", "土", "金", "水"];
+      order.forEach((element, index) => {
+        const from = positions[element];
+        const to = positions[order[(index + 1) % order.length]];
+        if (!from || !to) return;
+        const progress = smooth(1450 + index * 130, 1700 + index * 130, time);
+        const mx = (from[0] + to[0]) / 2 + (cx - (from[0] + to[0]) / 2) * 0.25;
+        const my = (from[1] + to[1]) / 2 + (cy - (from[1] + to[1]) / 2) * 0.25;
+        this.curvedArrow(from[0], from[1], to[0], to[1], mx, my, GOLD, alpha * progress * 0.4);
+      });
+    }
+
+    drawStems(time, cx, cy, scale) {
+      const alpha = this.stageAlpha(time, 2100, 3900);
+      const stems = "甲乙丙丁戊己庚辛壬癸";
+      const movements = ["土", "金", "水", "木", "火"];
+      const radius = scale * 0.30;
+      for (let index = 0; index < 10; index += 1) {
+        const progress = smooth(2150 + index * 90, 2450 + index * 90, time);
+        if (progress <= 0) continue;
+        const [x, y] = point(cx, cy, radius, -90 + index * 36);
+        const element = movements[index % 5];
+        this.node(x, y, 3, ELEMENT_COLORS[element], alpha * progress, 8);
+        this.label(stems[index], x, y - 14, 15, ELEMENT_COLORS[element], alpha * progress, "600");
+      }
+      for (let index = 0; index < 5; index += 1) {
+        const progress = smooth(3150 + index * 110, 3450 + index * 110, time);
+        const angle = -90 + index * 36;
+        const [x1, y1] = point(cx, cy, radius, angle);
+        const [x2, y2] = point(cx, cy, radius, -90 + (index + 5) * 36);
+        this.line(x1, y1, x2, y2, ELEMENT_COLORS[movements[index]], alpha * progress * 0.45);
+        const [labelX, labelY] = point(cx, cy, scale * 0.055, angle + 90);
+        this.label(movements[index], labelX, labelY, 16, ELEMENT_COLORS[movements[index]], alpha * progress, "600");
+      }
+    }
+
+    drawBranches(time, cx, cy, scale) {
+      const alpha = this.stageAlpha(time, 3900, 5800);
+      const branches = "子丑寅卯辰巳午未申酉戌亥";
+      const qiNames = ["少阴君火", "太阴湿土", "少阳相火", "阳明燥金", "太阳寒水", "厥阴风木"];
+      const radius = scale * 0.31;
+      const branchAngle = (index) => -90 + ((index - 6 + 12) % 12) * 30;
+      for (let index = 0; index < 12; index += 1) {
+        const progress = smooth(3950 + index * 70, 4220 + index * 70, time);
+        const [x, y] = point(cx, cy, radius, branchAngle(index));
+        this.node(x, y, 2.5, GOLD, alpha * progress, 6);
+        this.label(branches[index], x, y - 13, 14, GOLD, alpha * progress * 0.9);
+      }
+      qiNames.forEach((name, index) => {
+        const progress = smooth(4900 + index * 130, 5200 + index * 130, time);
+        const [x1, y1] = point(cx, cy, radius, branchAngle(index));
+        const [x2, y2] = point(cx, cy, radius, branchAngle(index + 6));
+        const element = QI6.find((item) => item.name === name)?.element || "土";
+        this.line(x1, y1, x2, y2, ELEMENT_COLORS[element], alpha * progress * 0.4);
+        const [labelX, labelY] = point(cx, cy, radius + scale * 0.055, branchAngle(index));
+        this.label(name, labelX, labelY, 12, ELEMENT_COLORS[element], alpha * progress, "600");
+      });
+    }
+
+    drawSixQi(time, now, cx, cy, scale) {
+      const alpha = this.stageAlpha(time, 5800, 7900);
+      const radius = scale * 0.27;
+      const drift = now * 0.004;
+      const ctx = this.context;
+      ctx.save();
+      ctx.globalAlpha = alpha * 0.13;
+      ctx.strokeStyle = GOLD;
+      ctx.beginPath();
+      ctx.arc(cx, cy, radius, 0, Math.PI * 2);
+      ctx.stroke();
+      ctx.restore();
+      QI6.forEach((qi, index) => {
+        const progress = easeOut((time - 5850 - index * 180) / 550);
+        const [x, y] = point(cx, cy, radius * progress, -90 + index * 60 + drift);
+        const nodeRadius = Math.max(scale * 0.015, 8) * progress;
+        this.node(x, y, nodeRadius, ELEMENT_COLORS[qi.element], alpha * progress, 14);
+        this.label(qi.name, x, y - nodeRadius - 12, 13, ELEMENT_COLORS[qi.element], alpha * progress, "600");
+        this.label(["初之气", "二之气", "三之气", "四之气", "五之气", "终之气"][index], x, y + nodeRadius + 12, 10.5, DIM, alpha * progress * 0.9);
+      });
+      this.node(cx, cy, 4 + Math.sin(now / 300), GOLD_BRIGHT, alpha * 0.9, 24);
+    }
+
+    drawAnnualQi(time, now, cx, cy, scale) {
+      const alpha = this.stageAlpha(time, 7900, 11000, 350);
+      const sixQi = this.data.sixQi || {};
+      const pillar = this.data.yearPillar || "岁运";
+      const movement = this.data.movement || "中运合参";
+      const sitian = sixQi.sitian || "司天气候";
+      const zaiquan = sixQi.zaiquan || "在泉气化";
+      const currentStep = Math.max(1, Math.min(6, Number(sixQi.step) || 1));
+      const qiElement = (name) => QI6.find((item) => item.name === name)?.element || "土";
+      const movementElement = ["木", "火", "土", "金", "水"].find((element) => movement.includes(element)) || "土";
+      this.label("司 天", cx, cy - scale * 0.212, 11, DIM, alpha * smooth(7950, 8450, time));
+      this.label(sitian, cx, cy - scale * 0.178, 17, ELEMENT_COLORS[qiElement(sitian)], alpha * smooth(7950, 8450, time), "600");
+      this.label(zaiquan, cx, cy + scale * 0.178, 17, ELEMENT_COLORS[qiElement(zaiquan)], alpha * smooth(8200, 8700, time), "600");
+      this.label("在 泉", cx, cy + scale * 0.212, 11, DIM, alpha * smooth(8200, 8700, time));
+      this.label(pillar, cx, cy - scale * 0.012, Math.max(22, scale * 0.052), GOLD_BRIGHT, alpha * smooth(8500, 9100, time), "600");
+      this.label(`${pillar}年 · 中运${movement}`, cx, cy + scale * 0.052, 14, ELEMENT_COLORS[movementElement], alpha * smooth(8500, 9100, time), "600", scale * 0.62);
+      const radius = scale * 0.30;
+      QI6.forEach((qi, index) => {
+        const progress = smooth(9200 + index * 260, 9480 + index * 260, time);
+        const [x, y] = point(cx, cy, radius, -90 + index * 60);
+        const current = index + 1 === currentStep;
+        const pulse = current ? 0.5 + 0.5 * Math.sin(now / 230) : 0;
+        this.node(x, y, Math.max(scale * 0.011, 6) + (current ? 2.5 : 0), ELEMENT_COLORS[qi.element], alpha * progress, 12 + pulse * 14);
+        if (current) {
+          const ctx = this.context;
+          ctx.save();
+          ctx.globalAlpha = alpha * (0.35 + pulse * 0.35);
+          ctx.strokeStyle = CINNABAR;
+          ctx.lineWidth = 1.2;
+          ctx.beginPath();
+          ctx.arc(x, y, Math.max(scale * 0.02, 11) + pulse * 3, 0, Math.PI * 2);
+          ctx.stroke();
+          ctx.restore();
+          this.label("当今", x, y - Math.max(scale * 0.038, 21), 10.5, CINNABAR, alpha * progress, "600");
+        }
+        const stepName = `${index + 1 === 6 ? "终" : ["初", "二", "三", "四", "五"][index]}之气`;
+        this.label(`${stepName} · ${qi.name}`, x, y + Math.max(scale * 0.03, 17), 11.5, current ? GOLD_BRIGHT : ELEMENT_COLORS[qi.element], alpha * progress * (current ? 1 : 0.85), current ? "600" : "");
+        if (current) this.label(STEP_RANGES[index], x, y + Math.max(scale * 0.052, 33), 10, DIM, alpha * progress);
+      });
+    }
+
+    drawCompletion(progress, now) {
+      this.drawBackground(now);
+      if (this.scene === "fortune") {
+        this.drawFortune(11000 + progress * (FORTUNE_TOTAL - 11000), now);
+      } else {
+        this.drawHexagram(10800 + progress * (HEX_TOTAL - 10800), now);
+      }
+    }
+  }
+
+  global.HeavenLoadingCanvas = HeavenLoadingCanvas;
+})(window);

app/static/pages.config.js

@@ -0,0 +1,69 @@
+(function exposePageRegistry(global) {
+  "use strict";
+
+  const pages = [
+    ["sentimentCycleView", "情绪周期", "sentiment", "market", "authenticated", true],
+    ["limitPool", "涨停池", "pools", "market", "authenticated", false],
+    ["brokenView", "炸板池", "pools", "market", "authenticated", false],
+    ["downView", "跌停板", "pools", "market", "authenticated", false],
+    ["yesterdayView", "昨日涨停", "pools", "market", "authenticated", false],
+    ["performanceView", "涨停表现", "pools", "market", "authenticated", false],
+    ["ladderView", "市场天梯", "ladder", "market", "authenticated", false],
+    ["rotationView", "板块轮动", "rotation", "market", "authenticated", false],
+    ["auctionView", "集合竞价", "auction", "market", "authenticated", false],
+    ["themeLibraryView", "题材库", "themes", "market", "authenticated", false],
+    ["popularityView", "人气热榜", "popularity", "market", "authenticated", false],
+    ["dragonView", "龙虎榜", "dragon_tiger", "market", "authenticated", false],
+    ["screenerView", "智能选股", "screener", "intelligence", "member", false],
+    ["mentorView", "问师", "mentor", "intelligence", "member", false],
+    ["heavenView", "问天", "heaven", "intelligence", "member", false],
+    ["reviewWorkspaceView", "我的复盘", "review", "personal", "authenticated", false],
+  ].map(([id, title, feature, group, access, isDefault]) => Object.freeze({
+    id,
+    title,
+    feature,
+    group,
+    access,
+    default: isDefault,
+    desktop_scroll: "page",
+    mobile_layout: "dedicated",
+  }));
+
+  const internalPages = [
+    Object.freeze({
+      id: "screenerTrackingView",
+      title: "策略持续跟踪",
+      feature: "screener",
+      group: "intelligence",
+      access: "member",
+      internal: true,
+      navigation_alias: "screenerView",
+    }),
+  ];
+
+  const all = [...pages, ...internalPages];
+  const byId = new Map(all.map((page) => [page.id, page]));
+  const defaultPage = pages.find((page) => page.default);
+  const aliases = Object.freeze({ sectorView: "rotationView", breadthView: "limitPool" });
+
+  global.XiaobaiPages = Object.freeze({
+    schemaVersion: 1,
+    pages: Object.freeze(pages),
+    internalPages: Object.freeze(internalPages),
+    all: Object.freeze(all),
+    defaultPage,
+    aliases,
+    resolve(id) {
+      return aliases[id] || id;
+    },
+    get(id) {
+      return byId.get(id) || null;
+    },
+    has(id) {
+      return byId.has(id);
+    },
+    inGroup(id, group) {
+      return byId.get(id)?.group === group;
+    },
+  });
+})(window);

app/static/pages/auction/page.js

@@ -0,0 +1,4 @@
+window.XiaobaiPageModules.register("auction", ["auctionView"], {
+  enter: ["loadAuction"],
+  leave: ["clearAuction"],
+});