{
  "summary": {
    "groups": 4,
    "listedRoutes": 36,
    "protectedRoutes": 74,
    "highRiskRoutes": 38
  },
  "groups": [
    {
      "group": "客户小程序",
      "owner": "客服、运营",
      "routes": [
        {
          "method": "GET",
          "path": "/api/client/home",
          "purpose": "首页、服务流程和进行中订单",
          "protected": false,
          "riskLevel": "普通",
          "allowedRoles": [],
          "auditRequired": false
        },
        {
          "method": "POST",
          "path": "/api/client/orders",
          "purpose": "客户提交订单",
          "protected": false,
          "riskLevel": "普通",
          "allowedRoles": [],
          "auditRequired": false
        },
        {
          "method": "GET",
          "path": "/api/client/orders",
          "purpose": "客户订单列表",
          "protected": false,
          "riskLevel": "普通",
          "allowedRoles": [],
          "auditRequired": false
        },
        {
          "method": "GET",
          "path": "/api/client/orders/detail",
          "purpose": "订单详情、报价、风险、付款、物流",
          "protected": false,
          "riskLevel": "普通",
          "allowedRoles": [],
          "auditRequired": false
        },
        {
          "method": "POST",
          "path": "/api/client/orders/confirm-quote",
          "purpose": "客户确认报价",
          "protected": false,
          "riskLevel": "普通",
          "allowedRoles": [],
          "auditRequired": false
        },
        {
          "method": "POST",
          "path": "/api/client/orders/reject-quote",
          "purpose": "客户不同意报价并转客服",
          "protected": false,
          "riskLevel": "普通",
          "allowedRoles": [],
          "auditRequired": false
        },
        {
          "method": "POST",
          "path": "/api/client/orders/confirm-risk",
          "purpose": "客户确认风险",
          "protected": false,
          "riskLevel": "普通",
          "allowedRoles": [],
          "auditRequired": false
        },
        {
          "method": "POST",
          "path": "/api/client/orders/reject-risk",
          "purpose": "客户不同意风险并转客服",
          "protected": false,
          "riskLevel": "普通",
          "allowedRoles": [],
          "auditRequired": false
        },
        {
          "method": "POST",
          "path": "/api/client/orders/pay",
          "purpose": "客户组合支付",
          "protected": false,
          "riskLevel": "普通",
          "allowedRoles": [],
          "auditRequired": false
        },
        {
          "method": "GET",
          "path": "/api/client/points",
          "purpose": "积分商城第一版",
          "protected": false,
          "riskLevel": "普通",
          "allowedRoles": [],
          "auditRequired": false
        }
      ]
    },
    {
      "group": "员工手机端",
      "owner": "系统管理员、各岗位主管",
      "routes": [
        {
          "method": "GET",
          "path": "/api/steward/dashboard",
          "purpose": "管家工作台",
          "protected": false,
          "riskLevel": "普通",
          "allowedRoles": [],
          "auditRequired": false
        },
        {
          "method": "POST",
          "path": "/api/steward/orders",
          "purpose": "管家代下单，必须客户授权",
          "protected": true,
          "riskLevel": "中",
          "allowedRoles": [
            "系统管理员",
            "后台管理员",
            "管家/销售"
          ],
          "auditRequired": true
        },
        {
          "method": "GET",
          "path": "/api/factory/dashboard",
          "purpose": "工厂录单和看板",
          "protected": false,
          "riskLevel": "普通",
          "allowedRoles": [],
          "auditRequired": false
        },
        {
          "method": "POST",
          "path": "/api/factory/items/process",
          "purpose": "工厂单件工序动作",
          "protected": true,
          "riskLevel": "中",
          "allowedRoles": [
            "系统管理员",
            "后台管理员",
            "客服",
            "工厂主管"
          ],
          "auditRequired": true
        },
        {
          "method": "POST",
          "path": "/api/admin/staff/mobile-actions",
          "purpose": "员工手机端统一动作留痕",
          "protected": true,
          "riskLevel": "中",
          "allowedRoles": [
            "系统管理员",
            "后台管理员",
            "客户运营总监",
            "管家/销售",
            "客服",
            "工厂主管",
            "工人",
            "质检员",
            "仓管/会所接待"
          ],
          "auditRequired": true
        }
      ]
    },
    {
      "group": "后台管理",
      "owner": "管理层、客服、工厂、财务、系统管理员",
      "routes": [
        {
          "method": "GET",
          "path": "/api/admin/dashboard",
          "purpose": "后台总览",
          "protected": true,
          "riskLevel": "高",
          "allowedRoles": [
            "系统管理员",
            "后台管理员"
          ],
          "auditRequired": true
        },
        {
          "method": "GET",
          "path": "/api/admin/orders",
          "purpose": "订单中心",
          "protected": true,
          "riskLevel": "高",
          "allowedRoles": [
            "系统管理员",
            "后台管理员",
            "客户运营总监",
            "管家/销售",
            "客服",
            "财务",
            "工厂主管"
          ],
          "auditRequired": true
        },
        {
          "method": "GET",
          "path": "/api/admin/support",
          "purpose": "客服中心异常待办",
          "protected": true,
          "riskLevel": "中",
          "allowedRoles": [
            "系统管理员",
            "客户运营总监",
            "客服"
          ],
          "auditRequired": true
        },
        {
          "method": "GET",
          "path": "/api/admin/reports",
          "purpose": "报表中心",
          "protected": false,
          "riskLevel": "普通",
          "allowedRoles": [],
          "auditRequired": false
        },
        {
          "method": "GET",
          "path": "/api/admin/staff",
          "purpose": "人员权限",
          "protected": true,
          "riskLevel": "高",
          "allowedRoles": [
            "系统管理员"
          ],
          "auditRequired": true
        },
        {
          "method": "GET",
          "path": "/api/admin/logs",
          "purpose": "审计日志",
          "protected": true,
          "riskLevel": "高",
          "allowedRoles": [
            "系统管理员"
          ],
          "auditRequired": true
        },
        {
          "method": "GET",
          "path": "/api/admin/maintenance-index",
          "purpose": "系统维护索引",
          "protected": false,
          "riskLevel": "普通",
          "allowedRoles": [],
          "auditRequired": false
        },
        {
          "method": "GET",
          "path": "/api/admin/interface-map",
          "purpose": "后台接口地图",
          "protected": false,
          "riskLevel": "普通",
          "allowedRoles": [],
          "auditRequired": false
        },
        {
          "method": "GET",
          "path": "/api/admin/release-readiness",
          "purpose": "体验版和正式上线前检查",
          "protected": false,
          "riskLevel": "普通",
          "allowedRoles": [],
          "auditRequired": false
        }
      ]
    },
    {
      "group": "部署和第三方",
      "owner": "系统管理员、技术服务商",
      "routes": [
        {
          "method": "GET",
          "path": "/api/admin/deployment/status",
          "purpose": "部署状态和正式上线阻塞项",
          "protected": false,
          "riskLevel": "普通",
          "allowedRoles": [],
          "auditRequired": false
        },
        {
          "method": "GET",
          "path": "/api/admin/deployment/collection",
          "purpose": "上线资料跟进",
          "protected": false,
          "riskLevel": "普通",
          "allowedRoles": [],
          "auditRequired": false
        },
        {
          "method": "GET",
          "path": "/api/admin/integrations/status",
          "purpose": "第三方接口资料缺口",
          "protected": false,
          "riskLevel": "普通",
          "allowedRoles": [],
          "auditRequired": false
        },
        {
          "method": "POST",
          "path": "/api/integrations/wechat-pay/create-payment",
          "purpose": "微信支付下单，占位待联调",
          "protected": false,
          "riskLevel": "普通",
          "allowedRoles": [],
          "auditRequired": false
        },
        {
          "method": "POST",
          "path": "/api/integrations/wechat-pay/paid",
          "purpose": "微信支付回调，占位待联调",
          "protected": false,
          "riskLevel": "普通",
          "allowedRoles": [],
          "auditRequired": false
        },
        {
          "method": "POST",
          "path": "/api/integrations/wechat-pay/refund",
          "purpose": "微信支付退款，占位待联调",
          "protected": false,
          "riskLevel": "普通",
          "allowedRoles": [],
          "auditRequired": false
        },
        {
          "method": "POST",
          "path": "/api/integrations/sf/create-shipment",
          "purpose": "顺丰下单，占位待联调",
          "protected": false,
          "riskLevel": "普通",
          "allowedRoles": [],
          "auditRequired": false
        },
        {
          "method": "POST",
          "path": "/api/integrations/sf/sync-track",
          "purpose": "顺丰轨迹同步，占位待联调",
          "protected": false,
          "riskLevel": "普通",
          "allowedRoles": [],
          "auditRequired": false
        },
        {
          "method": "POST",
          "path": "/api/integrations/sf/signed",
          "purpose": "顺丰签收回调，占位待联调",
          "protected": false,
          "riskLevel": "普通",
          "allowedRoles": [],
          "auditRequired": false
        },
        {
          "method": "POST",
          "path": "/api/integrations/wework/contact",
          "purpose": "企业微信客服，占位待联调",
          "protected": false,
          "riskLevel": "普通",
          "allowedRoles": [],
          "auditRequired": false
        },
        {
          "method": "POST",
          "path": "/api/integrations/wework/send-message",
          "purpose": "企业微信消息发送，占位待联调",
          "protected": false,
          "riskLevel": "普通",
          "allowedRoles": [],
          "auditRequired": false
        },
        {
          "method": "POST",
          "path": "/api/admin/uploads/prepare",
          "purpose": "图片语音上传签名，占位待联调",
          "protected": false,
          "riskLevel": "普通",
          "allowedRoles": [],
          "auditRequired": false
        }
      ]
    }
  ],
  "protectedRoutes": [
    {
      "method": "GET",
      "path": "/api/admin/dashboard",
      "name": "读取老板经营总览",
      "module": "经营",
      "riskLevel": "高",
      "permissionCode": "dashboard.view",
      "allowedRoles": [
        "系统管理员",
        "后台管理员"
      ],
      "auditRequired": true,
      "note": "经营总览包含全局收入、订单和员工数据，只向管理岗位开放"
    },
    {
      "method": "GET",
      "path": "/api/admin/workbench",
      "name": "读取当前岗位工作台",
      "module": "员工端",
      "riskLevel": "中",
      "permissionCode": "workbench.view",
      "allowedRoles": [
        "系统管理员",
        "后台管理员",
        "客户运营总监",
        "管家/销售",
        "客服",
        "财务",
        "工厂主管",
        "质检员"
      ],
      "auditRequired": true,
      "note": "根据服务端登录身份返回岗位入口、数据边界和可执行能力，前端不能自行指定角色"
    },
    {
      "method": "POST",
      "path": "/api/admin/auth/change-password",
      "name": "员工修改本人密码",
      "module": "员工端",
      "riskLevel": "高",
      "permissionCode": "auth.password.change",
      "allowedRoles": [
        "系统管理员",
        "后台管理员",
        "客户运营总监",
        "管家/销售",
        "客服",
        "财务",
        "工厂主管",
        "工人",
        "质检员",
        "仓管/会所接待"
      ],
      "auditRequired": true,
      "note": "仅允许当前登录员工校验原密码后修改本人密码，不能指定或修改其他员工"
    },
    {
      "method": "GET",
      "path": "/api/admin/orders",
      "name": "读取订单列表",
      "module": "订单",
      "riskLevel": "高",
      "permissionCode": "orders.view",
      "allowedRoles": [
        "系统管理员",
        "后台管理员",
        "客户运营总监",
        "管家/销售",
        "客服",
        "财务",
        "工厂主管"
      ],
      "auditRequired": true,
      "note": "服务端按岗位限制订单范围；管家只看本人，质检员改用质检任务接口"
    },
    {
      "method": "GET",
      "path": "/api/admin/orders/detail",
      "name": "读取订单详情",
      "module": "订单",
      "riskLevel": "高",
      "permissionCode": "orders.view",
      "allowedRoles": [
        "系统管理员",
        "后台管理员",
        "客户运营总监",
        "管家/销售",
        "客服",
        "财务",
        "工厂主管"
      ],
      "auditRequired": true,
      "note": "订单详情继续执行订单归属校验，不能通过猜测订单号越权查看"
    },
    {
      "method": "GET",
      "path": "/api/admin/staff",
      "name": "读取人员配置",
      "module": "系统",
      "riskLevel": "高",
      "permissionCode": "system.config",
      "allowedRoles": [
        "系统管理员"
      ],
      "auditRequired": true,
      "note": "只有系统管理员可以查看和配置完整员工资料"
    },
    {
      "method": "GET",
      "path": "/api/admin/staff/config",
      "name": "读取岗位配置",
      "module": "系统",
      "riskLevel": "高",
      "permissionCode": "system.config",
      "allowedRoles": [
        "系统管理员"
      ],
      "auditRequired": true,
      "note": "岗位、部门、上级和工作台规则统一从服务端读取"
    },
    {
      "method": "GET",
      "path": "/api/admin/support",
      "name": "读取客服工作台",
      "module": "客服",
      "riskLevel": "中",
      "permissionCode": "support.view",
      "allowedRoles": [
        "系统管理员",
        "客户运营总监",
        "客服"
      ],
      "auditRequired": true,
      "note": "客服只读取客服录单、报价跟进和售后相关数据"
    },
    {
      "method": "GET",
      "path": "/api/admin/stewards",
      "name": "读取管家工作台",
      "module": "销售",
      "riskLevel": "中",
      "permissionCode": "steward.view",
      "allowedRoles": [
        "系统管理员",
        "客户运营总监",
        "管家/销售"
      ],
      "auditRequired": true,
      "note": "管家仅访问本人或所属销售层级数据"
    },
    {
      "method": "POST",
      "path": "/api/admin/stewards/pickups/complete",
      "name": "确认上门取件完成",
      "module": "销售",
      "riskLevel": "中",
      "permissionCode": "steward.pickup.complete",
      "allowedRoles": [
        "系统管理员",
        "客户运营总监",
        "管家/销售"
      ],
      "auditRequired": true,
      "note": "管家只能完成分配给自己的任务；客户运营总监可在管家工作台代办并记录实际操作人"
    },
    {
      "method": "POST",
      "path": "/api/admin/stewards/pickups/accept",
      "name": "管家确认接单",
      "module": "销售",
      "riskLevel": "中",
      "permissionCode": "steward.pickup.accept",
      "allowedRoles": [
        "系统管理员",
        "客户运营总监",
        "管家/销售"
      ],
      "auditRequired": true,
      "note": "管家或客户运营总监可接收待分配订单，同一订单只能确认接单一次"
    },
    {
      "method": "POST",
      "path": "/api/admin/stewards/orders",
      "name": "管家代客户下单",
      "module": "销售",
      "riskLevel": "中",
      "permissionCode": "steward.order.create",
      "allowedRoles": [
        "系统管理员",
        "客户运营总监",
        "管家/销售"
      ],
      "auditRequired": true,
      "note": "管家只能为归属自己的客户发起订单，每一单都进入客户授权状态"
    },
    {
      "method": "POST",
      "path": "/api/admin/stewards/handovers/submit",
      "name": "提交交接入库",
      "module": "销售",
      "riskLevel": "中",
      "permissionCode": "steward.handover.submit",
      "allowedRoles": [
        "系统管理员",
        "客户运营总监",
        "管家/销售"
      ],
      "auditRequired": true,
      "note": "必须先确认取件完成，管家才能将本人订单提交给工厂待入库"
    },
    {
      "method": "POST",
      "path": "/api/admin/stewards/returns/update",
      "name": "更新送回任务",
      "module": "销售",
      "riskLevel": "中",
      "permissionCode": "steward.return.update",
      "allowedRoles": [
        "系统管理员",
        "客户运营总监",
        "管家/销售"
      ],
      "auditRequired": true,
      "note": "客户付款后由原订单负责管家开始送回，并在实际送达后确认完成"
    },
    {
      "method": "GET",
      "path": "/api/admin/quality",
      "name": "读取质检工作台",
      "module": "质检",
      "riskLevel": "中",
      "permissionCode": "quality.view",
      "allowedRoles": [
        "系统管理员",
        "后台管理员",
        "客户运营总监",
        "工厂主管",
        "质检员"
      ],
      "auditRequired": true,
      "note": "质检岗位读取待检任务和对比照片"
    },
    {
      "method": "POST",
      "path": "/api/admin/quality/accept",
      "name": "接收质检任务",
      "module": "质检",
      "riskLevel": "中",
      "permissionCode": "quality.inspect",
      "allowedRoles": [
        "系统管理员",
        "后台管理员",
        "客户运营总监",
        "工厂主管",
        "质检员"
      ],
      "auditRequired": true,
      "note": "首位接收的质检员绑定当前任务，避免多人重复处理"
    },
    {
      "method": "GET",
      "path": "/api/admin/finance",
      "name": "读取财务工作台",
      "module": "财务",
      "riskLevel": "高",
      "permissionCode": "finance.view",
      "allowedRoles": [
        "系统管理员",
        "后台管理员",
        "财务"
      ],
      "auditRequired": true,
      "note": "财务数据仅向财务和管理岗位开放"
    },
    {
      "method": "GET",
      "path": "/api/admin/customer-payments",
      "name": "读取客户付款记录",
      "module": "客户",
      "riskLevel": "中",
      "permissionCode": "customer.view",
      "allowedRoles": [
        "系统管理员",
        "后台管理员",
        "客户运营总监",
        "客服"
      ],
      "auditRequired": true,
      "note": "客户中心只读取付款单、订单、金额、方式和状态，不开放退款、余额或财务结算操作"
    },
    {
      "method": "GET",
      "path": "/api/admin/finance/export",
      "name": "导出财务数据",
      "module": "财务",
      "riskLevel": "高",
      "permissionCode": "finance.export",
      "allowedRoles": [
        "系统管理员",
        "后台管理员",
        "财务"
      ],
      "auditRequired": true,
      "note": "财务导出包含收入、充值和余额明细"
    },
    {
      "method": "GET",
      "path": "/api/admin/recharge-plans",
      "name": "读取充值档位",
      "module": "财务配置",
      "riskLevel": "中",
      "permissionCode": "finance.view",
      "allowedRoles": [
        "系统管理员",
        "财务",
        "客户运营总监"
      ],
      "auditRequired": true,
      "note": "充值档位由客户中心维护"
    },
    {
      "method": "GET",
      "path": "/api/admin/member-levels",
      "name": "读取会员等级",
      "module": "财务配置",
      "riskLevel": "中",
      "permissionCode": "finance.view",
      "allowedRoles": [
        "系统管理员",
        "财务",
        "客户运营总监"
      ],
      "auditRequired": true,
      "note": "会员等级规则由客户中心维护"
    },
    {
      "method": "GET",
      "path": "/api/admin/quality/photo-guide",
      "name": "读取质检参考照片",
      "module": "质检",
      "riskLevel": "中",
      "permissionCode": "quality.photo",
      "allowedRoles": [
        "系统管理员",
        "后台管理员",
        "客户运营总监",
        "工厂主管",
        "质检员"
      ],
      "auditRequired": true,
      "note": "只向质检相关岗位开放入厂参考图和同位置复拍指引"
    },
    {
      "method": "GET",
      "path": "/api/admin/staff/mobile-actions",
      "name": "读取移动端操作入口",
      "module": "员工端",
      "riskLevel": "中",
      "permissionCode": "staff.mobile_action",
      "allowedRoles": [
        "系统管理员",
        "后台管理员",
        "客户运营总监",
        "管家/销售",
        "客服",
        "财务",
        "工厂主管",
        "工人",
        "质检员",
        "仓管/会所接待"
      ],
      "auditRequired": true,
      "note": "服务端按当前登录岗位过滤可见操作，不能由前端自行决定"
    },
    {
      "method": "GET",
      "path": "/api/admin/auth/route-policies",
      "name": "读取接口权限策略",
      "module": "系统",
      "riskLevel": "高",
      "permissionCode": "system.config",
      "allowedRoles": [
        "系统管理员"
      ],
      "auditRequired": true,
      "note": "完整权限策略只向系统管理员开放"
    },
    {
      "method": "GET",
      "path": "/api/admin/logs",
      "name": "读取审计日志",
      "module": "系统",
      "riskLevel": "高",
      "permissionCode": "system.audit",
      "allowedRoles": [
        "系统管理员"
      ],
      "auditRequired": true,
      "note": "审计日志包含员工操作记录"
    },
    {
      "method": "GET",
      "path": "/api/admin/logs/export",
      "name": "导出审计日志",
      "module": "系统",
      "riskLevel": "高",
      "permissionCode": "system.audit",
      "allowedRoles": [
        "系统管理员"
      ],
      "auditRequired": true,
      "note": "审计日志导出只允许系统管理员"
    },
    {
      "method": "POST",
      "path": "/api/admin/quality/inspections",
      "name": "提交质检结论",
      "module": "质检",
      "riskLevel": "高",
      "permissionCode": "quality.inspect",
      "allowedRoles": [
        "系统管理员",
        "后台管理员",
        "客户运营总监",
        "工厂主管",
        "质检员"
      ],
      "auditRequired": true,
      "note": "质检人取自当前登录员工；不通过时自动生成返工记录"
    },
    {
      "method": "POST",
      "path": "/api/admin/quality/release",
      "name": "质检放行",
      "module": "质检",
      "riskLevel": "高",
      "permissionCode": "outbound.quality_release",
      "allowedRoles": [
        "系统管理员",
        "后台管理员",
        "客户运营总监",
        "工厂主管"
      ],
      "auditRequired": true,
      "note": "必须存在最新通过的质检记录且没有未完成返工；普通质检员不能放行"
    },
    {
      "method": "POST",
      "path": "/api/admin/finance/payments",
      "name": "登记收款",
      "module": "财务",
      "riskLevel": "高",
      "permissionCode": "finance.handle",
      "allowedRoles": [
        "系统管理员",
        "财务"
      ],
      "auditRequired": true,
      "note": "手工登记收款会形成财务流水"
    },
    {
      "method": "POST",
      "path": "/api/admin/orders/quote",
      "name": "客服确认报价",
      "module": "报价",
      "riskLevel": "高",
      "permissionCode": "quote.confirm",
      "allowedRoles": [
        "系统管理员",
        "客户运营总监",
        "客服"
      ],
      "auditRequired": true,
      "note": "客服根据工厂录单资料直接报价；疑难材质、工艺或风险问题可咨询报价员，管家和工人不能修改报价"
    },
    {
      "method": "POST",
      "path": "/api/admin/orders/risk",
      "name": "发起风险确认",
      "module": "风险",
      "riskLevel": "高",
      "permissionCode": "risk.create",
      "allowedRoles": [
        "系统管理员",
        "客户运营总监",
        "客服"
      ],
      "auditRequired": true,
      "note": "风险由工厂/报价判断后，经客服发给客户确认"
    },
    {
      "method": "POST",
      "path": "/api/admin/orders/ship",
      "name": "发货出库",
      "module": "出库",
      "riskLevel": "高",
      "permissionCode": "outbound.quality_release",
      "allowedRoles": [
        "系统管理员",
        "后台管理员",
        "客户运营总监",
        "工厂主管"
      ],
      "auditRequired": true,
      "note": "未付款不能出库；B端月结可按规则放行"
    },
    {
      "method": "POST",
      "path": "/api/admin/orders/sign",
      "name": "确认签收完成",
      "module": "物流完成",
      "riskLevel": "中",
      "permissionCode": "outbound.quality_release",
      "allowedRoles": [
        "系统管理员",
        "后台管理员",
        "客户运营总监",
        "工厂主管"
      ],
      "auditRequired": true,
      "note": "顺丰签收后自动完成订单；后台仅用于手动修正或补录"
    },
    {
      "method": "POST",
      "path": "/api/admin/orders/complete",
      "name": "确认处理完成",
      "module": "质检出库",
      "riskLevel": "高",
      "permissionCode": "outbound.quality_release",
      "allowedRoles": [
        "系统管理员",
        "后台管理员",
        "客户运营总监",
        "工厂主管"
      ],
      "auditRequired": true,
      "note": "全部单品处理和质检完成后，订单才进入客户待付款"
    },
    {
      "method": "POST",
      "path": "/api/admin/finance/payments/confirm",
      "name": "确认收款",
      "module": "财务",
      "riskLevel": "高",
      "permissionCode": "finance.handle",
      "allowedRoles": [
        "系统管理员",
        "财务"
      ],
      "auditRequired": true,
      "note": "确认收款会改变订单付款状态"
    },
    {
      "method": "POST",
      "path": "/api/admin/finance/refunds",
      "name": "发起退款",
      "module": "财务",
      "riskLevel": "高",
      "permissionCode": "finance.handle",
      "allowedRoles": [
        "系统管理员",
        "财务"
      ],
      "auditRequired": true,
      "note": "退款按折扣前规则核对后处理"
    },
    {
      "method": "POST",
      "path": "/api/admin/finance/refunds/approve",
      "name": "审核退款",
      "module": "财务",
      "riskLevel": "高",
      "permissionCode": "finance.handle",
      "allowedRoles": [
        "系统管理员",
        "财务"
      ],
      "auditRequired": true,
      "note": "退款审核会影响财务流水和佣金扣回"
    },
    {
      "method": "POST",
      "path": "/api/admin/customer-accounts/balance-logs",
      "name": "调整余额/赠送余额",
      "module": "账户",
      "riskLevel": "高",
      "permissionCode": "account.adjust",
      "allowedRoles": [
        "系统管理员",
        "财务"
      ],
      "auditRequired": true,
      "note": "余额是客户资产，赠送余额是活动赠送金额，必须限制调整"
    },
    {
      "method": "POST",
      "path": "/api/admin/recharge-plans",
      "name": "新增充值档位",
      "module": "财务配置",
      "riskLevel": "高",
      "permissionCode": "finance.handle",
      "allowedRoles": [
        "系统管理员",
        "财务",
        "客户运营总监"
      ],
      "auditRequired": true,
      "note": "充值档位会直接影响客户付款和赠送余额，只允许财务或系统管理员修改"
    },
    {
      "method": "POST",
      "path": "/api/admin/recharge-plans/update",
      "name": "修改充值档位",
      "module": "财务配置",
      "riskLevel": "高",
      "permissionCode": "finance.handle",
      "allowedRoles": [
        "系统管理员",
        "财务",
        "客户运营总监"
      ],
      "auditRequired": true,
      "note": "修改充值金额、赠送金额和排序后，小程序会同步展示"
    },
    {
      "method": "POST",
      "path": "/api/admin/recharge-plans/reorder",
      "name": "调整充值档位顺序",
      "module": "客户配置",
      "riskLevel": "高",
      "permissionCode": "finance.handle",
      "allowedRoles": [
        "系统管理员",
        "财务",
        "客户运营总监"
      ],
      "auditRequired": true,
      "note": "一次提交完整档位顺序，避免逐条更新产生中间状态"
    },
    {
      "method": "POST",
      "path": "/api/admin/recharge-plans/status",
      "name": "启停充值档位",
      "module": "财务配置",
      "riskLevel": "高",
      "permissionCode": "finance.handle",
      "allowedRoles": [
        "系统管理员",
        "财务",
        "客户运营总监"
      ],
      "auditRequired": true,
      "note": "停用后客户小程序不再展示该充值档位"
    },
    {
      "method": "POST",
      "path": "/api/admin/member-levels/update",
      "name": "修改会员等级规则",
      "module": "财务配置",
      "riskLevel": "高",
      "permissionCode": "finance.handle",
      "allowedRoles": [
        "系统管理员",
        "财务",
        "客户运营总监"
      ],
      "auditRequired": true,
      "note": "会员等级会影响客户权益展示和运营策略，只允许财务或系统管理员修改"
    },
    {
      "method": "POST",
      "path": "/api/admin/member-levels/status",
      "name": "启停会员等级",
      "module": "财务配置",
      "riskLevel": "高",
      "permissionCode": "finance.handle",
      "allowedRoles": [
        "系统管理员",
        "财务",
        "客户运营总监"
      ],
      "auditRequired": true,
      "note": "停用后客户小程序不再展示该会员等级"
    },
    {
      "method": "POST",
      "path": "/api/admin/recharge-plans/delete",
      "name": "删除充值档位",
      "module": "客户配置",
      "riskLevel": "高",
      "permissionCode": "finance.handle",
      "allowedRoles": [
        "系统管理员",
        "财务",
        "客户运营总监"
      ],
      "auditRequired": true,
      "note": "只删除以后可选的档位配置，历史充值和余额不受影响"
    },
    {
      "method": "POST",
      "path": "/api/admin/member-levels/delete",
      "name": "删除会员等级",
      "module": "客户配置",
      "riskLevel": "高",
      "permissionCode": "finance.handle",
      "allowedRoles": [
        "系统管理员",
        "财务",
        "客户运营总监"
      ],
      "auditRequired": true,
      "note": "普通会员默认等级禁止删除，历史客户资料保留"
    },
    {
      "method": "POST",
      "path": "/api/admin/staff/employees",
      "name": "新增员工",
      "module": "系统",
      "riskLevel": "高",
      "permissionCode": "system.config",
      "allowedRoles": [
        "系统管理员"
      ],
      "auditRequired": true,
      "note": "新增账号会影响系统访问边界"
    },
    {
      "method": "POST",
      "path": "/api/admin/staff/employees/status",
      "name": "启停员工",
      "module": "系统",
      "riskLevel": "高",
      "permissionCode": "system.config",
      "allowedRoles": [
        "系统管理员"
      ],
      "auditRequired": true,
      "note": "停用后不可登录，启用前需确认岗位"
    },
    {
      "method": "POST",
      "path": "/api/admin/staff/employees/update",
      "name": "修改员工资料",
      "module": "系统",
      "riskLevel": "高",
      "permissionCode": "system.config",
      "allowedRoles": [
        "系统管理员"
      ],
      "auditRequired": true,
      "note": "修改员工角色、部门、数据范围会影响访问边界"
    },
    {
      "method": "POST",
      "path": "/api/admin/staff/employees/archive",
      "name": "离职归档员工",
      "module": "系统",
      "riskLevel": "高",
      "permissionCode": "system.config",
      "allowedRoles": [
        "系统管理员"
      ],
      "auditRequired": true,
      "note": "归档前必须先转移直属下级；历史操作和企业微信 UserID 归属永久保留"
    },
    {
      "method": "POST",
      "path": "/api/admin/staff/mobile-actions",
      "name": "员工手机端操作",
      "module": "员工端",
      "riskLevel": "中",
      "permissionCode": "staff.mobile_action",
      "allowedRoles": [
        "系统管理员",
        "后台管理员",
        "客户运营总监",
        "管家/销售",
        "客服",
        "工厂主管",
        "工人",
        "质检员",
        "仓管/会所接待"
      ],
      "auditRequired": true,
      "note": "员工手机端和网页后台的关键工序动作都必须留痕，工人只能操作自己工位任务"
    },
    {
      "method": "POST",
      "path": "/api/admin/wework/replies",
      "name": "企业微信沟通回复",
      "module": "企微沟通",
      "riskLevel": "中",
      "permissionCode": "wework.reply",
      "allowedRoles": [
        "系统管理员",
        "后台管理员",
        "客户运营总监",
        "管家/销售",
        "客服",
        "财务",
        "工厂主管",
        "质检员"
      ],
      "auditRequired": true,
      "note": "凡是对客户或合作方的企业微信沟通都要绑定订单、客户或合作方并留痕"
    },
    {
      "method": "POST",
      "path": "/api/admin/internal-messages",
      "name": "内部统一沟通",
      "module": "内部沟通",
      "riskLevel": "中",
      "permissionCode": "internal.message",
      "allowedRoles": [
        "系统管理员",
        "后台管理员",
        "客户运营总监",
        "管家/销售",
        "客服",
        "财务",
        "工厂主管",
        "工人",
        "质检员",
        "仓管/会所接待"
      ],
      "auditRequired": true,
      "note": "员工只通过系统统一发起内部沟通，按订单和单件找到负责人，不分散到多个软件"
    },
    {
      "method": "POST",
      "path": "/api/admin/acceptance/update",
      "name": "更新内部测试签收",
      "module": "测试验收",
      "riskLevel": "中",
      "permissionCode": "acceptance.signoff",
      "allowedRoles": [
        "系统管理员",
        "后台管理员",
        "客户运营总监",
        "工厂主管",
        "财务"
      ],
      "auditRequired": true,
      "note": "签收结果会影响部署前门禁，普通管家和工人不能自行改为通过"
    },
    {
      "method": "POST",
      "path": "/api/admin/partners/discount",
      "name": "设置合作方折扣",
      "module": "B端合作方",
      "riskLevel": "中",
      "permissionCode": "partner.discount",
      "allowedRoles": [
        "系统管理员",
        "客户运营总监"
      ],
      "auditRequired": true,
      "note": "合作方仅洗涤有折扣，修复不打折"
    },
    {
      "method": "GET",
      "path": "/api/admin/factory/intake/scan",
      "name": "扫码查询入厂订单",
      "module": "工厂入厂",
      "riskLevel": "低",
      "permissionCode": "factory.intake",
      "allowedRoles": [
        "系统管理员",
        "后台管理员",
        "客户运营总监",
        "客服",
        "工厂主管"
      ],
      "auditRequired": false,
      "note": "客服或录单人员可按订单号、单件码、条码、RFID、顺丰单号查询待核件订单"
    },
    {
      "method": "POST",
      "path": "/api/admin/factory/intake/confirm",
      "name": "确认入厂核件",
      "module": "工厂入厂",
      "riskLevel": "中",
      "permissionCode": "factory.intake",
      "allowedRoles": [
        "系统管理员",
        "后台管理员",
        "客户运营总监",
        "客服",
        "工厂主管"
      ],
      "auditRequired": true,
      "note": "保存申报和实收分类件数；有差异必须写说明，确认后进入待录单"
    },
    {
      "method": "POST",
      "path": "/api/admin/factory/intake/notify-mismatch",
      "name": "发送入厂件数差异",
      "module": "工厂入厂",
      "riskLevel": "中",
      "permissionCode": "factory.intake",
      "allowedRoles": [
        "系统管理员",
        "后台管理员",
        "客户运营总监",
        "客服",
        "工厂主管"
      ],
      "auditRequired": true,
      "note": "实收与申报不一致时先通知客户，并绑定订单留痕"
    },
    {
      "method": "GET",
      "path": "/api/admin/factory/records",
      "name": "查询待录单任务",
      "module": "工厂录单",
      "riskLevel": "低",
      "permissionCode": "factory.record",
      "allowedRoles": [
        "系统管理员",
        "后台管理员",
        "客户运营总监",
        "客服",
        "工厂主管"
      ],
      "auditRequired": false,
      "note": "录单岗位只查看已完成入厂核件的订单和录单进度"
    },
    {
      "method": "GET",
      "path": "/api/admin/factory/records/detail",
      "name": "查看录单明细",
      "module": "工厂录单",
      "riskLevel": "低",
      "permissionCode": "factory.record",
      "allowedRoles": [
        "系统管理员",
        "后台管理员",
        "客户运营总监",
        "客服",
        "工厂主管"
      ],
      "auditRequired": false,
      "note": "查看逐件资料和入厂照片，不向无关岗位开放客户完整信息"
    },
    {
      "method": "POST",
      "path": "/api/admin/factory/records/ensure",
      "name": "生成录单单件",
      "module": "工厂录单",
      "riskLevel": "中",
      "permissionCode": "factory.record",
      "allowedRoles": [
        "系统管理员",
        "后台管理员",
        "客户运营总监",
        "客服",
        "工厂主管"
      ],
      "auditRequired": true,
      "note": "根据入厂实收件数生成逐件录单记录"
    },
    {
      "method": "POST",
      "path": "/api/admin/factory/records/item",
      "name": "保存逐件录单",
      "module": "工厂录单",
      "riskLevel": "中",
      "permissionCode": "factory.record",
      "allowedRoles": [
        "系统管理员",
        "后台管理员",
        "客户运营总监",
        "客服",
        "工厂主管"
      ],
      "auditRequired": true,
      "note": "保存单件品类、材质、问题和护理需求，操作全程留痕"
    },
    {
      "method": "POST",
      "path": "/api/admin/factory/records/complete",
      "name": "完成录单并报价",
      "module": "工厂录单",
      "riskLevel": "中",
      "permissionCode": "factory.record",
      "allowedRoles": [
        "系统管理员",
        "后台管理员",
        "客户运营总监",
        "客服",
        "工厂主管"
      ],
      "auditRequired": true,
      "note": "客服核件、拍照和录单完成后直接报价并通知客户确认；疑难单可咨询报价员"
    },
    {
      "method": "POST",
      "path": "/api/admin/factory/records/escalate",
      "name": "提交客户运营总监报价",
      "module": "工厂录单",
      "riskLevel": "中",
      "permissionCode": "factory.record",
      "allowedRoles": [
        "系统管理员",
        "后台管理员",
        "客户运营总监",
        "客服"
      ],
      "auditRequired": true,
      "note": "维修类或无法确认价格的订单由客服完成拍照录单后提交客户运营总监报价"
    },
    {
      "method": "GET",
      "path": "/api/admin/wework/js-sdk-signature",
      "name": "获取企业微信扫一扫签名",
      "module": "员工端",
      "riskLevel": "低",
      "permissionCode": "factory.intake",
      "allowedRoles": [
        "系统管理员",
        "后台管理员",
        "客户运营总监",
        "客服",
        "工厂主管"
      ],
      "auditRequired": false,
      "note": "仅为已登录的入厂核件岗位签发当前 HTTPS 页面 JS-SDK 签名"
    },
    {
      "method": "POST",
      "path": "/api/factory/items/process",
      "name": "更新单件工序",
      "module": "工厂",
      "riskLevel": "中",
      "permissionCode": "factory.intake",
      "allowedRoles": [
        "系统管理员",
        "后台管理员",
        "客服",
        "工厂主管"
      ],
      "auditRequired": true,
      "note": "工人通过员工手机端扫码留痕；后台单件工序接口仅客服和工厂主管可直接更新"
    },
    {
      "method": "POST",
      "path": "/api/steward/orders",
      "name": "管家代下单",
      "module": "管家",
      "riskLevel": "中",
      "permissionCode": "order.steward_create",
      "allowedRoles": [
        "系统管理员",
        "后台管理员",
        "管家/销售"
      ],
      "auditRequired": true,
      "note": "每次代下单都要客户确认授权"
    },
    {
      "method": "POST",
      "path": "/api/admin/stewards/pickups/voice",
      "name": "保存管家上门语音",
      "module": "管家",
      "riskLevel": "中",
      "permissionCode": "order.steward_pickup",
      "allowedRoles": [
        "系统管理员",
        "后台管理员",
        "客户运营总监",
        "管家/销售"
      ],
      "auditRequired": true,
      "note": "仅允许负责管家将客户现场交代录音绑定到对应订单"
    },
    {
      "method": "POST",
      "path": "/api/admin/uploads",
      "name": "登记后台照片",
      "module": "照片",
      "riskLevel": "中",
      "permissionCode": "quality.photo",
      "allowedRoles": [
        "系统管理员",
        "后台管理员",
        "客户运营总监",
        "客服",
        "质检员",
        "工厂主管"
      ],
      "auditRequired": true,
      "note": "照片用于留底、质检对比和案例候选，发布前需客户授权"
    },
    {
      "method": "POST",
      "path": "/api/admin/uploads/delete",
      "name": "删除后台照片",
      "module": "照片",
      "riskLevel": "中",
      "permissionCode": "quality.photo",
      "allowedRoles": [
        "系统管理员",
        "后台管理员",
        "客户运营总监",
        "客服",
        "质检员",
        "工厂主管"
      ],
      "auditRequired": true,
      "note": "录单和质检岗位可删除误拍照片，删除操作保留审计记录"
    },
    {
      "method": "GET",
      "path": "/api/admin/photo-archives",
      "name": "读取月度照片归档",
      "module": "照片",
      "riskLevel": "高",
      "permissionCode": "photo.archive",
      "allowedRoles": [
        "系统管理员",
        "后台管理员"
      ],
      "auditRequired": true,
      "note": "按完成月份查看一单一ZIP归档，不改变订单或订单数量"
    },
    {
      "method": "GET",
      "path": "/api/admin/photo-archives/download",
      "name": "下载订单照片ZIP",
      "module": "照片",
      "riskLevel": "高",
      "permissionCode": "photo.archive",
      "allowedRoles": [
        "系统管理员",
        "后台管理员"
      ],
      "auditRequired": true,
      "note": "归档ZIP包含客户隐私照片，仅管理岗位可以下载"
    },
    {
      "method": "POST",
      "path": "/api/admin/photo-archives/generate",
      "name": "生成月度照片归档",
      "module": "照片",
      "riskLevel": "高",
      "permissionCode": "photo.archive",
      "allowedRoles": [
        "系统管理员",
        "后台管理员"
      ],
      "auditRequired": true,
      "note": "只生成ZIP，不删除原图；一单一ZIP"
    },
    {
      "method": "POST",
      "path": "/api/admin/photo-archives/confirm-delete",
      "name": "确认删除已归档原图",
      "module": "照片",
      "riskLevel": "高",
      "permissionCode": "photo.archive.delete",
      "allowedRoles": [
        "系统管理员"
      ],
      "auditRequired": true,
      "note": "校验所有ZIP后仅删除照片文件；订单、数量、金额、状态和审计记录全部保留"
    }
  ],
  "maintenanceNote": "普通接口看 interface-map-service.js；高风险接口必须同步 route-policy-service.js、系统维护索引和总自检。",
  "blockers": [
    "微信支付真实联调需要商户号、API v3 密钥和证书序列号。",
    "顺丰真实联调需要客户编码、校验码、月结卡号和轨迹/签收回调配置。",
    "企业微信客服真实联调需要 CorpID、Secret、客服账号 ID 和接待规则。",
    "图片语音存储第一阶段已支持服务器本地上传；后期升级云存储时再准备 Bucket、区域、访问域名和 Access Key。"
  ]
}