refactor: 改造 CI/CD 使用阿里云 ACR 镜像仓库

Co-authored-by: Cursor <cursoragent@cursor.com>

.drone.yml

@@ -1,6 +1,6 @@
 kind: pipeline
 type: docker
-name: build-and-deploy
+name: build-and-push
 
 trigger:
   branch:
@@ -10,88 +10,66 @@ trigger:
     - push
 
 steps:
-  # 构建后端镜像
+  # 构建并推送后端镜像
-  - name: build-backend
+  - name: build-push-backend
-    image: docker:dind
-    volumes:
-      - name: docker-sock
-        path: /var/run/docker.sock
-    commands:
-      - docker build -t platform-backend:${DRONE_COMMIT_SHA:0:8} -f deploy/Dockerfile.backend .
-      - docker tag platform-backend:${DRONE_COMMIT_SHA:0:8} platform-backend:latest
-
-  # 构建前端镜像（测试环境）
-  - name: build-frontend-test
-    image: docker:dind
-    volumes:
-      - name: docker-sock
-        path: /var/run/docker.sock
-    commands:
-      - docker build -t platform-frontend-test:${DRONE_COMMIT_SHA:0:8} -f deploy/Dockerfile.frontend --build-arg BACKEND_HOST=platform-backend-test .
-      - docker tag platform-frontend-test:${DRONE_COMMIT_SHA:0:8} platform-frontend-test:latest
-    when:
-      branch:
-        - develop
-
-  # 构建前端镜像（生产环境）
-  - name: build-frontend-prod
-    image: docker:dind
-    volumes:
-      - name: docker-sock
-        path: /var/run/docker.sock
-    commands:
-      - docker build -t platform-frontend-prod:${DRONE_COMMIT_SHA:0:8} -f deploy/Dockerfile.frontend --build-arg BACKEND_HOST=platform-backend-prod .
-      - docker tag platform-frontend-prod:${DRONE_COMMIT_SHA:0:8} platform-frontend-prod:latest
-    when:
-      branch:
-        - main
-
-  # 部署测试环境
-  - name: deploy-test
     image: docker:dind
     volumes:
       - name: docker-sock
         path: /var/run/docker.sock
     environment:
-      DATABASE_URL:
+      DOCKER_REGISTRY:
-        from_secret: database_url
+        from_secret: docker_registry
-      API_KEY:
+      DOCKER_USERNAME:
-        from_secret: api_key
+        from_secret: docker_username
-      JWT_SECRET:
+      DOCKER_PASSWORD:
-        from_secret: jwt_secret
+        from_secret: docker_password
-      CONFIG_ENCRYPT_KEY:
-        from_secret: config_encrypt_key
     commands:
-      - docker network create platform-network 2>/dev/null || true
+      - echo "$DOCKER_PASSWORD" | docker login "$DOCKER_REGISTRY" -u "$DOCKER_USERNAME" --password-stdin
-      - docker stop platform-backend-test platform-frontend-test || true
+      - docker build -t $DOCKER_REGISTRY/ireborn/platform-backend:${DRONE_BRANCH} -f deploy/Dockerfile.backend .
-      - docker rm platform-backend-test platform-frontend-test || true
+      - docker tag $DOCKER_REGISTRY/ireborn/platform-backend:${DRONE_BRANCH} $DOCKER_REGISTRY/ireborn/platform-backend:latest
-      - docker run -d --name platform-backend-test --network platform-network -p 8001:8000 --restart unless-stopped -e DATABASE_URL=$DATABASE_URL -e API_KEY=$API_KEY -e JWT_SECRET=$JWT_SECRET -e CONFIG_ENCRYPT_KEY=$CONFIG_ENCRYPT_KEY platform-backend:latest
+      - docker tag $DOCKER_REGISTRY/ireborn/platform-backend:${DRONE_BRANCH} $DOCKER_REGISTRY/ireborn/platform-backend:${DRONE_COMMIT_SHA:0:8}
-      - docker run -d --name platform-frontend-test --network platform-network -p 3003:80 --restart unless-stopped platform-frontend-test:latest
+      - docker push $DOCKER_REGISTRY/ireborn/platform-backend:${DRONE_BRANCH}
-    when:
+      - docker push $DOCKER_REGISTRY/ireborn/platform-backend:latest
-      branch:
+      - docker push $DOCKER_REGISTRY/ireborn/platform-backend:${DRONE_COMMIT_SHA:0:8}
-        - develop
 
-  # 部署生产环境（使用独立的生产数据库）
+  # 构建并推送前端镜像（测试环境）
-  - name: deploy-prod
+  - name: build-push-frontend-test
     image: docker:dind
     volumes:
       - name: docker-sock
         path: /var/run/docker.sock
     environment:
-      DATABASE_URL:
+      DOCKER_REGISTRY:
-        from_secret: database_url_prod
+        from_secret: docker_registry
-      API_KEY:
+      DOCKER_USERNAME:
-        from_secret: api_key
+        from_secret: docker_username
-      JWT_SECRET:
+      DOCKER_PASSWORD:
-        from_secret: jwt_secret
+        from_secret: docker_password
-      CONFIG_ENCRYPT_KEY:
-        from_secret: config_encrypt_key
     commands:
-      - docker network create platform-network-prod 2>/dev/null || true
+      - echo "$DOCKER_PASSWORD" | docker login "$DOCKER_REGISTRY" -u "$DOCKER_USERNAME" --password-stdin
-      - docker stop platform-backend-prod platform-frontend-prod || true
+      - docker build -t $DOCKER_REGISTRY/ireborn/platform-frontend:develop -f deploy/Dockerfile.frontend --build-arg BACKEND_HOST=platform-backend-test .
-      - docker rm platform-backend-prod platform-frontend-prod || true
+      - docker push $DOCKER_REGISTRY/ireborn/platform-frontend:develop
-      - docker run -d --name platform-backend-prod --network platform-network-prod -p 9001:8000 --restart unless-stopped -e DATABASE_URL=$DATABASE_URL -e API_KEY=$API_KEY -e JWT_SECRET=$JWT_SECRET -e CONFIG_ENCRYPT_KEY=$CONFIG_ENCRYPT_KEY platform-backend:latest
+    when:
-      - docker run -d --name platform-frontend-prod --network platform-network-prod -p 4003:80 --restart unless-stopped platform-frontend-prod:latest
+      branch:
+        - develop
+
+  # 构建并推送前端镜像（生产环境）
+  - name: build-push-frontend-prod
+    image: docker:dind
+    volumes:
+      - name: docker-sock
+        path: /var/run/docker.sock
+    environment:
+      DOCKER_REGISTRY:
+        from_secret: docker_registry
+      DOCKER_USERNAME:
+        from_secret: docker_username
+      DOCKER_PASSWORD:
+        from_secret: docker_password
+    commands:
+      - echo "$DOCKER_PASSWORD" | docker login "$DOCKER_REGISTRY" -u "$DOCKER_USERNAME" --password-stdin
+      - docker build -t $DOCKER_REGISTRY/ireborn/platform-frontend:main -f deploy/Dockerfile.frontend --build-arg BACKEND_HOST=platform-backend-prod .
+      - docker push $DOCKER_REGISTRY/ireborn/platform-frontend:main
     when:
       branch:
         - main

backend/app/main.py

@@ -16,6 +16,8 @@ from .routers.cost import router as cost_router
 from .routers.quota import router as quota_router
 from .routers.tasks import router as tasks_router
 from .routers.notification_channels import router as notification_channels_router
+from .routers.tool_configs import router as tool_configs_router
+from .routers.ruimeiyun import router as ruimeiyun_router
 from .middleware import TraceMiddleware, setup_exception_handlers, RequestLoggerMiddleware
 from .middleware.trace import setup_logging
 from .services.scheduler import scheduler_service
@@ -71,6 +73,8 @@ app.include_router(cost_router, prefix="/api")
 app.include_router(quota_router, prefix="/api")
 app.include_router(tasks_router)
 app.include_router(notification_channels_router)
+app.include_router(tool_configs_router, prefix="/api")
+app.include_router(ruimeiyun_router, prefix="/api")
 
 
 # 应用生命周期事件

backend/app/routers/ruimeiyun.py

@@ -0,0 +1,287 @@
+"""
+睿美云代理路由
+
+提供统一的睿美云接口代理能力，支持：
+- 多租户配置隔离
+- 接口权限控制
+- 统一日志记录
+- 错误处理
+"""
+
+import logging
+from typing import Optional, Dict, Any, List
+from fastapi import APIRouter, Depends, HTTPException, Query
+from pydantic import BaseModel
+from sqlalchemy.orm import Session
+
+from ..database import get_db
+from ..services.ruimeiyun import RuimeiyunClient, RUIMEIYUN_APIS, get_api_definition
+from ..services.ruimeiyun.client import RuimeiyunError
+from ..services.ruimeiyun.registry import get_all_modules, get_api_list_by_module, get_api_summary
+from .auth import get_current_user
+from ..models.user import User
+
+logger = logging.getLogger(__name__)
+
+router = APIRouter(prefix="/ruimeiyun", tags=["睿美云代理"])
+
+
+# ========================================
+# Schemas
+# ========================================
+
+class RuimeiyunCallRequest(BaseModel):
+    """睿美云接口调用请求"""
+    params: Optional[Dict[str, Any]] = None  # URL 参数
+    body: Optional[Dict[str, Any]] = None    # 请求体
+
+
+class RuimeiyunRawCallRequest(BaseModel):
+    """睿美云原始接口调用请求"""
+    method: str  # HTTP 方法
+    path: str    # API 路径
+    params: Optional[Dict[str, Any]] = None
+    body: Optional[Dict[str, Any]] = None
+
+
+# ========================================
+# API Endpoints
+# ========================================
+
+@router.post("/call/{api_name}")
+async def call_ruimeiyun_api(
+    api_name: str,
+    request: RuimeiyunCallRequest,
+    tenant_id: str = Query(..., description="租户ID"),
+    user: User = Depends(get_current_user),
+    db: Session = Depends(get_db)
+):
+    """
+    调用睿美云接口（通过接口名称）
+    
+    Args:
+        api_name: 接口名称，如 customer.search, order.list
+        request: 请求参数
+        tenant_id: 租户ID
+        
+    Returns:
+        睿美云接口返回的数据
+        
+    示例:
+        POST /api/ruimeiyun/call/customer.search?tenant_id=xxx
+        Body: {"params": {"keyword": "13800138000", "page": 1, "size": 20}}
+    """
+    try:
+        client = RuimeiyunClient(tenant_id, db)
+        result = await client.call(
+            api_name=api_name,
+            params=request.params,
+            body=request.body
+        )
+        
+        if result.success:
+            return {
+                "success": True,
+                "data": result.data
+            }
+        else:
+            return {
+                "success": False,
+                "error": result.error,
+                "raw": result.raw_response
+            }
+            
+    except RuimeiyunError as e:
+        logger.error(f"睿美云调用失败: {api_name}, {e}")
+        raise HTTPException(status_code=e.status_code, detail=str(e))
+    except Exception as e:
+        logger.exception(f"睿美云调用异常: {api_name}")
+        raise HTTPException(status_code=500, detail=f"调用失败: {str(e)}")
+
+
+@router.post("/call-raw")
+async def call_ruimeiyun_raw(
+    request: RuimeiyunRawCallRequest,
+    tenant_id: str = Query(..., description="租户ID"),
+    user: User = Depends(get_current_user),
+    db: Session = Depends(get_db)
+):
+    """
+    直接调用睿美云接口（通过路径）
+    
+    用于调用未在注册表中定义的接口
+    
+    Args:
+        request: 请求参数（包含 method, path, params, body）
+        tenant_id: 租户ID
+        
+    Returns:
+        睿美云接口返回的数据
+        
+    示例:
+        POST /api/ruimeiyun/call-raw?tenant_id=xxx
+        Body: {
+            "method": "GET",
+            "path": "/api/v1/tpos/customer/customer-search",
+            "params": {"keyword": "13800138000"}
+        }
+    """
+    try:
+        client = RuimeiyunClient(tenant_id, db)
+        result = await client.call_raw(
+            method=request.method,
+            path=request.path,
+            params=request.params,
+            body=request.body
+        )
+        
+        if result.success:
+            return {
+                "success": True,
+                "data": result.data
+            }
+        else:
+            return {
+                "success": False,
+                "error": result.error,
+                "raw": result.raw_response
+            }
+            
+    except RuimeiyunError as e:
+        logger.error(f"睿美云调用失败: {request.path}, {e}")
+        raise HTTPException(status_code=e.status_code, detail=str(e))
+    except Exception as e:
+        logger.exception(f"睿美云调用异常: {request.path}")
+        raise HTTPException(status_code=500, detail=f"调用失败: {str(e)}")
+
+
+# ========================================
+# 接口元数据
+# ========================================
+
+@router.get("/apis")
+async def list_apis(
+    module: Optional[str] = None,
+    user: User = Depends(get_current_user)
+):
+    """
+    获取可用的接口列表
+    
+    Args:
+        module: 模块名称（可选），如 customer, order
+        
+    Returns:
+        接口列表
+    """
+    if module:
+        apis = get_api_list_by_module(module)
+        return {
+            "module": module,
+            "count": len(apis),
+            "apis": apis
+        }
+    else:
+        return {
+            "count": len(RUIMEIYUN_APIS),
+            "summary": get_api_summary(),
+            "apis": RUIMEIYUN_APIS
+        }
+
+
+@router.get("/apis/{api_name}")
+async def get_api_info(
+    api_name: str,
+    user: User = Depends(get_current_user)
+):
+    """
+    获取接口详情
+    
+    Args:
+        api_name: 接口名称，如 customer.search
+        
+    Returns:
+        接口定义
+    """
+    api_def = get_api_definition(api_name)
+    if not api_def:
+        raise HTTPException(status_code=404, detail=f"接口不存在: {api_name}")
+    
+    return {
+        "name": api_name,
+        **api_def
+    }
+
+
+@router.get("/modules")
+async def list_modules(
+    user: User = Depends(get_current_user)
+):
+    """
+    获取所有模块列表
+    
+    Returns:
+        模块名称列表和每个模块的接口数量
+    """
+    modules = get_all_modules()
+    summary = get_api_summary()
+    
+    return {
+        "modules": [
+            {"name": m, "count": summary.get(m, 0)}
+            for m in modules
+        ]
+    }
+
+
+# ========================================
+# 健康检查
+# ========================================
+
+@router.get("/health/{tenant_id}")
+async def check_ruimeiyun_health(
+    tenant_id: str,
+    user: User = Depends(get_current_user),
+    db: Session = Depends(get_db)
+):
+    """
+    检查租户的睿美云连接状态
+    
+    Args:
+        tenant_id: 租户ID
+        
+    Returns:
+        连接状态信息
+    """
+    try:
+        client = RuimeiyunClient(tenant_id, db)
+        
+        # 调用门店列表接口测试连接
+        result = await client.call("tenant.list")
+        
+        if result.success:
+            return {
+                "status": "connected",
+                "tenant_id": tenant_id,
+                "base_url": client.config.base_url,
+                "account": client.config.account,
+                "message": "连接正常"
+            }
+        else:
+            return {
+                "status": "error",
+                "tenant_id": tenant_id,
+                "message": result.error
+            }
+            
+    except RuimeiyunError as e:
+        return {
+            "status": "error",
+            "tenant_id": tenant_id,
+            "message": str(e)
+        }
+    except Exception as e:
+        return {
+            "status": "error",
+            "tenant_id": tenant_id,
+            "message": f"检查失败: {str(e)}"
+        }

backend/app/routers/tool_configs.py

@@ -354,7 +354,8 @@ async def get_config_types():
             {"code": "datasource", "name": "数据源配置", "description": "数据库连接等"},
             {"code": "jssdk", "name": "JS-SDK 配置", "description": "企微侧边栏等"},
             {"code": "webhook", "name": "Webhook 配置", "description": "n8n 工作流地址等"},
-            {"code": "params", "name": "工具参数", "description": "各工具的自定义参数"}
+            {"code": "params", "name": "工具参数", "description": "各工具的自定义参数"},
+            {"code": "external_api", "name": "外部API配置", "description": "睿美云等外部系统对接"}
         ]
     }
 
@@ -387,5 +388,11 @@ async def get_config_keys():
             {"key": "default_data_tenant_id", "name": "默认数据租户ID", "encrypted": False},
             {"key": "enable_deep_thinking", "name": "启用深度思考", "encrypted": False},
             {"key": "max_history_rounds", "name": "最大历史轮数", "encrypted": False}
+        ],
+        "external_api": [
+            {"key": "ruimeiyun_base_url", "name": "睿美云 API 地址", "encrypted": False},
+            {"key": "ruimeiyun_account", "name": "睿美云 TPOS 账号", "encrypted": False},
+            {"key": "ruimeiyun_private_key", "name": "睿美云 RSA 私钥", "encrypted": True},
+            {"key": "ruimeiyun_allowed_apis", "name": "允许的接口列表(JSON)", "encrypted": False}
         ]
     }

backend/app/services/ruimeiyun/__init__.py

@@ -0,0 +1,10 @@
+"""
+睿美云对接服务
+
+提供睿美云开放接口的代理调用能力，支持多租户配置。
+"""
+
+from .client import RuimeiyunClient
+from .registry import RUIMEIYUN_APIS, get_api_definition
+
+__all__ = ["RuimeiyunClient", "RUIMEIYUN_APIS", "get_api_definition"]

backend/app/services/ruimeiyun/auth.py

@@ -0,0 +1,124 @@
+"""
+睿美云 TPOS 鉴权
+
+实现睿美云开放接口的身份验证机制：
+- tpos-timestamp: 请求时间戳（秒级）
+- tpos-account: 账号
+- tpos-nonce-str: 随机字符串
+- tpos-sign: SHA256WithRSA 签名
+
+签名算法：
+1. 组合待签名字符串: {timestamp}&{nonce_str}
+2. 使用私钥进行 SHA256WithRSA 签名
+3. Base64 编码签名结果
+"""
+
+import time
+import uuid
+import base64
+import logging
+from typing import Dict
+
+from cryptography.hazmat.primitives import hashes, serialization
+from cryptography.hazmat.primitives.asymmetric import padding
+from cryptography.hazmat.backends import default_backend
+
+logger = logging.getLogger(__name__)
+
+
+class TposAuthError(Exception):
+    """TPOS 鉴权错误"""
+    pass
+
+
+def build_tpos_headers(account: str, private_key_pem: str) -> Dict[str, str]:
+    """
+    构建 TPOS 鉴权请求头
+    
+    Args:
+        account: TPOS 账号（由睿美云提供）
+        private_key_pem: RSA 私钥（PEM 格式）
+        
+    Returns:
+        包含鉴权信息的请求头字典
+        
+    Raises:
+        TposAuthError: 签名失败时抛出
+    """
+    try:
+        # 1. 生成时间戳和随机字符串
+        timestamp = str(int(time.time()))
+        nonce_str = uuid.uuid4().hex
+        
+        # 2. 组合待签名字符串
+        sign_content = f"{timestamp}&{nonce_str}"
+        
+        # 3. 加载私钥
+        private_key = serialization.load_pem_private_key(
+            private_key_pem.encode('utf-8'),
+            password=None,
+            backend=default_backend()
+        )
+        
+        # 4. SHA256WithRSA 签名
+        signature = private_key.sign(
+            sign_content.encode('utf-8'),
+            padding.PKCS1v15(),
+            hashes.SHA256()
+        )
+        
+        # 5. Base64 编码
+        sign_base64 = base64.b64encode(signature).decode('utf-8')
+        
+        return {
+            "tpos-timestamp": timestamp,
+            "tpos-account": account,
+            "tpos-nonce-str": nonce_str,
+            "tpos-sign": sign_base64
+        }
+        
+    except Exception as e:
+        logger.error(f"TPOS 签名失败: {e}")
+        raise TposAuthError(f"签名失败: {str(e)}")
+
+
+def validate_private_key(private_key_pem: str) -> bool:
+    """
+    验证私钥格式是否正确
+    
+    Args:
+        private_key_pem: RSA 私钥（PEM 格式）
+        
+    Returns:
+        True 如果私钥有效，否则 False
+    """
+    try:
+        serialization.load_pem_private_key(
+            private_key_pem.encode('utf-8'),
+            password=None,
+            backend=default_backend()
+        )
+        return True
+    except Exception as e:
+        logger.warning(f"私钥验证失败: {e}")
+        return False
+
+
+def mask_private_key(private_key_pem: str, show_chars: int = 50) -> str:
+    """
+    对私钥进行脱敏处理，用于日志显示
+    
+    Args:
+        private_key_pem: RSA 私钥（PEM 格式）
+        show_chars: 显示的字符数
+        
+    Returns:
+        脱敏后的字符串
+    """
+    if not private_key_pem:
+        return ""
+    
+    if len(private_key_pem) <= show_chars * 2:
+        return "****"
+    
+    return f"{private_key_pem[:show_chars]}...****...{private_key_pem[-show_chars:]}"

backend/app/services/ruimeiyun/client.py

@@ -0,0 +1,325 @@
+"""
+睿美云 API 客户端
+
+提供统一的睿美云接口调用能力：
+- 自动加载租户配置
+- 自动构建 TPOS 鉴权头
+- 统一错误处理
+- 请求日志记录
+"""
+
+import json
+import logging
+from typing import Dict, Any, Optional, List
+from dataclasses import dataclass
+
+import httpx
+from sqlalchemy.orm import Session
+
+from .auth import build_tpos_headers, TposAuthError
+from .registry import get_api_definition, RUIMEIYUN_APIS
+from ..crypto import decrypt_value
+
+logger = logging.getLogger(__name__)
+
+# 请求超时设置
+DEFAULT_TIMEOUT = 30.0  # 秒
+LONG_TIMEOUT = 60.0  # 长时间操作
+
+
+@dataclass
+class RuimeiyunConfig:
+    """睿美云配置"""
+    base_url: str
+    account: str
+    private_key: str
+    allowed_apis: Optional[List[str]] = None
+
+
+@dataclass
+class RuimeiyunResponse:
+    """睿美云响应"""
+    success: bool
+    data: Optional[Any] = None
+    error: Optional[str] = None
+    status_code: int = 200
+    raw_response: Optional[Dict] = None
+
+
+class RuimeiyunError(Exception):
+    """睿美云调用错误"""
+    def __init__(self, message: str, status_code: int = 500, response: Any = None):
+        super().__init__(message)
+        self.status_code = status_code
+        self.response = response
+
+
+class RuimeiyunClient:
+    """
+    睿美云 API 客户端
+    
+    使用方式:
+        client = RuimeiyunClient(tenant_id, db)
+        result = await client.call("customer.search", params={"keyword": "13800138000"})
+    """
+    
+    def __init__(self, tenant_id: str, db: Session):
+        """
+        初始化客户端
+        
+        Args:
+            tenant_id: 租户ID
+            db: 数据库会话
+        """
+        self.tenant_id = tenant_id
+        self.db = db
+        self.config = self._load_config()
+    
+    def _load_config(self) -> RuimeiyunConfig:
+        """从数据库加载租户的睿美云配置"""
+        from ...models.tool_config import ToolConfig
+        
+        # 查询租户的睿美云配置
+        configs = self.db.query(ToolConfig).filter(
+            ToolConfig.tenant_id == self.tenant_id,
+            ToolConfig.tool_code == "ruimeiyun",
+            ToolConfig.config_type == "external_api",
+            ToolConfig.status == 1
+        ).all()
+        
+        if not configs:
+            raise RuimeiyunError(
+                f"租户 {self.tenant_id} 未配置睿美云连接信息",
+                status_code=400
+            )
+        
+        # 转换为字典
+        config_dict = {}
+        for c in configs:
+            value = c.config_value
+            # 解密加密字段
+            if c.is_encrypted and value:
+                try:
+                    value = decrypt_value(value)
+                except Exception as e:
+                    logger.error(f"解密配置失败: {c.config_key}, {e}")
+                    raise RuimeiyunError(f"配置解密失败: {c.config_key}")
+            config_dict[c.config_key] = value
+        
+        # 验证必填配置
+        required = ["ruimeiyun_base_url", "ruimeiyun_account", "ruimeiyun_private_key"]
+        for key in required:
+            if not config_dict.get(key):
+                raise RuimeiyunError(f"缺少必填配置: {key}", status_code=400)
+        
+        # 解析允许的接口列表
+        allowed_apis = None
+        if config_dict.get("ruimeiyun_allowed_apis"):
+            try:
+                allowed_apis = json.loads(config_dict["ruimeiyun_allowed_apis"])
+            except json.JSONDecodeError:
+                logger.warning(f"解析 allowed_apis 失败: {config_dict.get('ruimeiyun_allowed_apis')}")
+        
+        return RuimeiyunConfig(
+            base_url=config_dict["ruimeiyun_base_url"].rstrip("/"),
+            account=config_dict["ruimeiyun_account"],
+            private_key=config_dict["ruimeiyun_private_key"],
+            allowed_apis=allowed_apis
+        )
+    
+    def _check_permission(self, api_name: str):
+        """检查是否有权限调用该接口"""
+        if self.config.allowed_apis is not None:
+            if api_name not in self.config.allowed_apis:
+                raise RuimeiyunError(
+                    f"租户无权调用接口: {api_name}",
+                    status_code=403
+                )
+    
+    async def call(
+        self,
+        api_name: str,
+        params: Optional[Dict[str, Any]] = None,
+        body: Optional[Dict[str, Any]] = None,
+        timeout: float = DEFAULT_TIMEOUT
+    ) -> RuimeiyunResponse:
+        """
+        调用睿美云接口
+        
+        Args:
+            api_name: 接口名称，如 customer.search
+            params: URL 查询参数
+            body: 请求体（POST 请求）
+            timeout: 超时时间（秒）
+            
+        Returns:
+            RuimeiyunResponse 对象
+            
+        Raises:
+            RuimeiyunError: 调用失败时抛出
+        """
+        # 1. 获取接口定义
+        api_def = get_api_definition(api_name)
+        if not api_def:
+            raise RuimeiyunError(f"未知接口: {api_name}", status_code=400)
+        
+        # 2. 检查权限
+        self._check_permission(api_name)
+        
+        # 3. 构建请求
+        method = api_def["method"]
+        url = f"{self.config.base_url}{api_def['path']}"
+        
+        # 4. 构建鉴权头
+        try:
+            auth_headers = build_tpos_headers(
+                self.config.account,
+                self.config.private_key
+            )
+        except TposAuthError as e:
+            raise RuimeiyunError(str(e), status_code=500)
+        
+        headers = {
+            **auth_headers,
+            "Content-Type": "application/json"
+        }
+        
+        # 5. 发送请求
+        logger.info(f"调用睿美云接口: {api_name} ({method} {api_def['path']})")
+        
+        try:
+            async with httpx.AsyncClient(timeout=timeout) as client:
+                if method == "GET":
+                    response = await client.get(url, params=params, headers=headers)
+                else:
+                    response = await client.post(url, params=params, json=body, headers=headers)
+                
+                # 6. 处理响应
+                status_code = response.status_code
+                
+                try:
+                    response_data = response.json()
+                except Exception:
+                    response_data = {"raw": response.text}
+                
+                # 睿美云响应格式通常为: {"code": 0, "data": ..., "msg": "success"}
+                if status_code == 200:
+                    # 检查业务状态码
+                    code = response_data.get("code")
+                    if code == 0 or code == "0" or code is None:
+                        return RuimeiyunResponse(
+                            success=True,
+                            data=response_data.get("data", response_data),
+                            status_code=status_code,
+                            raw_response=response_data
+                        )
+                    else:
+                        return RuimeiyunResponse(
+                            success=False,
+                            error=response_data.get("msg", response_data.get("message", "未知错误")),
+                            status_code=status_code,
+                            raw_response=response_data
+                        )
+                else:
+                    return RuimeiyunResponse(
+                        success=False,
+                        error=f"HTTP {status_code}: {response_data}",
+                        status_code=status_code,
+                        raw_response=response_data
+                    )
+                    
+        except httpx.TimeoutException:
+            logger.error(f"睿美云接口超时: {api_name}")
+            raise RuimeiyunError(f"接口超时: {api_name}", status_code=504)
+        except httpx.RequestError as e:
+            logger.error(f"睿美云接口请求错误: {api_name}, {e}")
+            raise RuimeiyunError(f"请求错误: {str(e)}", status_code=502)
+    
+    async def call_raw(
+        self,
+        method: str,
+        path: str,
+        params: Optional[Dict[str, Any]] = None,
+        body: Optional[Dict[str, Any]] = None,
+        timeout: float = DEFAULT_TIMEOUT
+    ) -> RuimeiyunResponse:
+        """
+        直接调用睿美云接口（不经过注册表）
+        
+        用于调用未在注册表中定义的接口
+        
+        Args:
+            method: HTTP 方法
+            path: API 路径
+            params: URL 查询参数
+            body: 请求体
+            timeout: 超时时间
+            
+        Returns:
+            RuimeiyunResponse 对象
+        """
+        url = f"{self.config.base_url}{path}"
+        
+        try:
+            auth_headers = build_tpos_headers(
+                self.config.account,
+                self.config.private_key
+            )
+        except TposAuthError as e:
+            raise RuimeiyunError(str(e), status_code=500)
+        
+        headers = {
+            **auth_headers,
+            "Content-Type": "application/json"
+        }
+        
+        logger.info(f"调用睿美云接口(raw): {method} {path}")
+        
+        try:
+            async with httpx.AsyncClient(timeout=timeout) as client:
+                response = await client.request(
+                    method=method,
+                    url=url,
+                    params=params,
+                    json=body if method != "GET" else None,
+                    headers=headers
+                )
+                
+                try:
+                    response_data = response.json()
+                except Exception:
+                    response_data = {"raw": response.text}
+                
+                if response.status_code == 200:
+                    code = response_data.get("code")
+                    if code == 0 or code == "0" or code is None:
+                        return RuimeiyunResponse(
+                            success=True,
+                            data=response_data.get("data", response_data),
+                            status_code=response.status_code,
+                            raw_response=response_data
+                        )
+                    else:
+                        return RuimeiyunResponse(
+                            success=False,
+                            error=response_data.get("msg", "未知错误"),
+                            status_code=response.status_code,
+                            raw_response=response_data
+                        )
+                else:
+                    return RuimeiyunResponse(
+                        success=False,
+                        error=f"HTTP {response.status_code}",
+                        status_code=response.status_code,
+                        raw_response=response_data
+                    )
+                    
+        except httpx.TimeoutException:
+            raise RuimeiyunError("接口超时", status_code=504)
+        except httpx.RequestError as e:
+            raise RuimeiyunError(f"请求错误: {str(e)}", status_code=502)
+    
+    @staticmethod
+    def get_available_apis() -> Dict[str, Any]:
+        """获取所有可用的接口列表"""
+        return RUIMEIYUN_APIS

backend/app/services/ruimeiyun/registry.py

@@ -0,0 +1,885 @@
+"""
+睿美云接口注册表
+
+定义所有可用的睿美云开放接口，包括：
+- 接口路径
+- 请求方法
+- 参数说明
+- 接口分组
+
+接口命名规则: {模块}.{操作}
+例如: customer.search, order.list, treat.page
+"""
+
+from typing import Dict, Any, Optional, List
+from dataclasses import dataclass
+
+
+@dataclass
+class ApiDefinition:
+    """接口定义"""
+    method: str  # GET / POST
+    path: str  # API 路径
+    description: str  # 接口描述
+    module: str  # 所属模块
+    params: Optional[List[str]] = None  # URL 参数列表
+    body_required: bool = False  # 是否需要请求体
+
+
+# 睿美云开放接口注册表
+RUIMEIYUN_APIS: Dict[str, Dict[str, Any]] = {
+    
+    # ========================================
+    # 客户模块 (customer)
+    # ========================================
+    
+    "customer.sync": {
+        "method": "POST",
+        "path": "/api/v1/tpos/customer/info-sync",
+        "description": "客户档案新增/编辑",
+        "module": "customer",
+        "body_required": True
+    },
+    "customer.search": {
+        "method": "GET",
+        "path": "/api/v1/tpos/customer/customer-search",
+        "description": "获取客户信息列表（支持姓名、电话、档案号模糊查询）",
+        "module": "customer",
+        "params": ["keyword", "createDateStart", "createDateEnd", "tenantId", "page", "size", "lastCustomerId"]
+    },
+    "customer.detail": {
+        "method": "GET",
+        "path": "/api/v1/tpos/customer/customer-by-id",
+        "description": "根据客户ID获取详细信息",
+        "module": "customer",
+        "params": ["customerId"]
+    },
+    "customer.rebate_list": {
+        "method": "POST",
+        "path": "/api/v1/tpos/customer/my-rebate-list",
+        "description": "获取客户返利列表",
+        "module": "customer",
+        "body_required": True
+    },
+    "customer.rebate_detail": {
+        "method": "GET",
+        "path": "/api/v1/tpos/customer/my-rebate-detail",
+        "description": "获取返利详情",
+        "module": "customer",
+        "params": ["rebateId"]
+    },
+    "customer.clue_list": {
+        "method": "POST",
+        "path": "/api/v1/tpos/customer/customer-clue-list",
+        "description": "获取客户线索列表",
+        "module": "customer",
+        "body_required": True
+    },
+    "customer.label_list": {
+        "method": "GET",
+        "path": "/api/v1/tpos/customer/customer-label-list",
+        "description": "获取客户标签列表",
+        "module": "customer",
+        "params": ["tenantId"]
+    },
+    "customer.gold_list": {
+        "method": "POST",
+        "path": "/api/v1/tpos/customer/customer-gold-list",
+        "description": "获取金卡客户列表",
+        "module": "customer",
+        "body_required": True
+    },
+    "customer.plan_list": {
+        "method": "GET",
+        "path": "/api/v1/tpos/customer/get-all-plan",
+        "description": "获取所有客户计划",
+        "module": "customer",
+        "params": ["tenantId"]
+    },
+    "customer.transfer_pool": {
+        "method": "POST",
+        "path": "/api/v1/tpos/customer/transfer-pool",
+        "description": "客户池转移",
+        "module": "customer",
+        "body_required": True
+    },
+    "customer.pool_info": {
+        "method": "GET",
+        "path": "/api/v1/tpos/customer/get-pool-info",
+        "description": "获取客户池信息",
+        "module": "customer",
+        "params": ["customerId"]
+    },
+    "customer.qw_info": {
+        "method": "GET",
+        "path": "/api/v1/tpos/customer/customer-qw-info",
+        "description": "获取客户企微信息",
+        "module": "customer",
+        "params": ["customerId"]
+    },
+    "customer.sign_search": {
+        "method": "POST",
+        "path": "/api/v1/tpos/customer/customer-sign-search",
+        "description": "客户签到搜索",
+        "module": "customer",
+        "body_required": True
+    },
+    
+    # ========================================
+    # 门店模块 (tenant)
+    # ========================================
+    
+    "tenant.list": {
+        "method": "GET",
+        "path": "/api/v1/tpos/common/tenantList",
+        "description": "获取门店信息列表",
+        "module": "tenant",
+        "params": []
+    },
+    
+    # ========================================
+    # 回访模块 (visit)
+    # ========================================
+    
+    "visit.type_list": {
+        "method": "GET",
+        "path": "/api/v1/tpos/visit/get-visit-type",
+        "description": "获取回访类型列表",
+        "module": "visit",
+        "params": ["tenantId"]
+    },
+    "visit.way_type_list": {
+        "method": "GET",
+        "path": "/api/v1/tpos/visit/get-visit-way-type",
+        "description": "获取回访方式类型列表",
+        "module": "visit",
+        "params": ["tenantId"]
+    },
+    "visit.page": {
+        "method": "POST",
+        "path": "/api/v1/tpos/visit/get-visit-page",
+        "description": "分页获取回访记录",
+        "module": "visit",
+        "body_required": True
+    },
+    "visit.create": {
+        "method": "POST",
+        "path": "/api/v1/tpos/visit/create-visit",
+        "description": "新增回访记录",
+        "module": "visit",
+        "body_required": True
+    },
+    "visit.template_type": {
+        "method": "GET",
+        "path": "/api/v1/tpos/visit/visit-template-type",
+        "description": "获取回访模板类型",
+        "module": "visit",
+        "params": ["tenantId"]
+    },
+    
+    # ========================================
+    # 报备模块 (preparation)
+    # ========================================
+    
+    "preparation.add": {
+        "method": "POST",
+        "path": "/api/v1/tpos/preparation/add",
+        "description": "新增报备",
+        "module": "preparation",
+        "body_required": True
+    },
+    "preparation.query": {
+        "method": "POST",
+        "path": "/api/v1/tpos/preparation/get-preparation",
+        "description": "查询报备",
+        "module": "preparation",
+        "body_required": True
+    },
+    
+    # ========================================
+    # 员工模块 (user)
+    # ========================================
+    
+    "user.page": {
+        "method": "GET",
+        "path": "/api/v1/tpos/user/get-page",
+        "description": "分页获取员工列表",
+        "module": "user",
+        "params": ["page", "size", "tenantId", "keyword"]
+    },
+    "user.dept_tree": {
+        "method": "GET",
+        "path": "/api/v1/tpos/basic/dept-tree",
+        "description": "获取部门树结构",
+        "module": "user",
+        "params": ["tenantId"]
+    },
+    "user.role_list": {
+        "method": "GET",
+        "path": "/api/v1/tpos/role/getRoleList",
+        "description": "获取角色列表",
+        "module": "user",
+        "params": ["tenantId"]
+    },
+    
+    # ========================================
+    # 卡券模块 (coupon)
+    # ========================================
+    
+    "coupon.customer_page": {
+        "method": "GET",
+        "path": "/api/v1/tpos/coupon/customer-coupon-page",
+        "description": "分页获取客户卡券",
+        "module": "coupon",
+        "params": ["customerId", "page", "size"]
+    },
+    "coupon.customer_list": {
+        "method": "GET",
+        "path": "/api/v1/tpos/coupon/customer-coupon-list",
+        "description": "获取客户卡券列表",
+        "module": "coupon",
+        "params": ["customerId"]
+    },
+    "coupon.use": {
+        "method": "POST",
+        "path": "/api/v1/tpos/coupon/use-coupon",
+        "description": "使用卡券",
+        "module": "coupon",
+        "body_required": True
+    },
+    "coupon.page": {
+        "method": "GET",
+        "path": "/api/v1/tpos/coupon/coupon-page",
+        "description": "分页获取卡券信息",
+        "module": "coupon",
+        "params": ["page", "size", "tenantId"]
+    },
+    "coupon.send": {
+        "method": "POST",
+        "path": "/api/v1/tpos/coupon/send-coupon",
+        "description": "发送卡券",
+        "module": "coupon",
+        "body_required": True
+    },
+    "coupon.gift": {
+        "method": "POST",
+        "path": "/api/v1/tpos/coupon/gift-coupon",
+        "description": "卡券赠送（小程序分享）",
+        "module": "coupon",
+        "body_required": True
+    },
+    "coupon.receive": {
+        "method": "POST",
+        "path": "/api/v1/tpos/coupon/receive-coupon",
+        "description": "领取卡券（小程序分享）",
+        "module": "coupon",
+        "body_required": True
+    },
+    
+    # ========================================
+    # 营销模块 (marketing)
+    # ========================================
+    
+    "marketing.appoint_card_page": {
+        "method": "GET",
+        "path": "/api/v1/tpos/marketing/appoint-card-page",
+        "description": "线上预约-名片管理",
+        "module": "marketing",
+        "params": ["page", "size", "tenantId"]
+    },
+    "marketing.graphic_message_list": {
+        "method": "GET",
+        "path": "/api/v1/tpos/marketing/graphic-message-list",
+        "description": "内容管理-图文消息",
+        "module": "marketing",
+        "params": ["tenantId"]
+    },
+    
+    # ========================================
+    # 积分模块 (integral)
+    # ========================================
+    
+    "integral.customer": {
+        "method": "GET",
+        "path": "/api/v1/tpos/integral/getCusIntegral",
+        "description": "获取客户积分",
+        "module": "integral",
+        "params": ["customerId"]
+    },
+    "integral.score_record_page": {
+        "method": "GET",
+        "path": "/api/v1/tpos/integral/score-record-page",
+        "description": "获取客户积分/成长值分页信息",
+        "module": "integral",
+        "params": ["customerId", "page", "size"]
+    },
+    "integral.growth_upgrade": {
+        "method": "POST",
+        "path": "/api/v1/tpos/integral/query-customer-growth-upgrade",
+        "description": "查询客户成长升级信息",
+        "module": "integral",
+        "body_required": True
+    },
+    
+    # ========================================
+    # 订单模块 (order)
+    # ========================================
+    
+    "order.billing_page": {
+        "method": "GET",
+        "path": "/api/v1/tpos/order/billing-page",
+        "description": "获取订单信息列表",
+        "module": "order",
+        "params": ["customerId", "page", "size", "startDate", "endDate"]
+    },
+    "order.payment_detail": {
+        "method": "GET",
+        "path": "/api/v1/tpos/order/payment-detail",
+        "description": "获取费用单详细信息",
+        "module": "order",
+        "params": ["billingId"]
+    },
+    "order.add_billing": {
+        "method": "POST",
+        "path": "/api/v1/tpos/order/add-billing",
+        "description": "开单",
+        "module": "order",
+        "body_required": True
+    },
+    "order.add_billing_review": {
+        "method": "POST",
+        "path": "/api/v1/tpos/order/add-billing-review",
+        "description": "开单审核",
+        "module": "order",
+        "body_required": True
+    },
+    "order.enable_billing": {
+        "method": "GET",
+        "path": "/api/v1/tpos/order/enable-billing",
+        "description": "可操作的订单项",
+        "module": "order",
+        "params": ["billingId"]
+    },
+    "order.refund": {
+        "method": "POST",
+        "path": "/api/v1/tpos/order/refund",
+        "description": "订单退款",
+        "module": "order",
+        "body_required": True
+    },
+    "order.gift_project": {
+        "method": "POST",
+        "path": "/api/v1/tpos/order/gift-project",
+        "description": "项目转赠（小程序分享）",
+        "module": "order",
+        "body_required": True
+    },
+    "order.receive_project": {
+        "method": "POST",
+        "path": "/api/v1/tpos/order/receive-project",
+        "description": "领取赠送项目（小程序分享）",
+        "module": "order",
+        "body_required": True
+    },
+    "order.equity_card_page": {
+        "method": "GET",
+        "path": "/api/v1/tpos/order/billing-equity-card-page",
+        "description": "获取客户权益卡列表",
+        "module": "order",
+        "params": ["customerId", "page", "size"]
+    },
+    "order.balance_recharge_page": {
+        "method": "GET",
+        "path": "/api/v1/tpos/order/balance-recharge-page",
+        "description": "储值充值记录",
+        "module": "order",
+        "params": ["customerId", "page", "size"]
+    },
+    "order.balance_deduction_page": {
+        "method": "GET",
+        "path": "/api/v1/tpos/order/balance-deduction-page",
+        "description": "储值抵扣记录",
+        "module": "order",
+        "params": ["customerId", "page", "size"]
+    },
+    "order.balance_refund_page": {
+        "method": "GET",
+        "path": "/api/v1/tpos/order/balance-refund-page",
+        "description": "储值退款记录",
+        "module": "order",
+        "params": ["customerId", "page", "size"]
+    },
+    "order.balance_transfer_page": {
+        "method": "GET",
+        "path": "/api/v1/tpos/order/balance-transfer-page",
+        "description": "储值转赠记录",
+        "module": "order",
+        "params": ["customerId", "page", "size"]
+    },
+    "order.integral_mall_page": {
+        "method": "GET",
+        "path": "/api/v1/tpos/order/integral-mall-exchange-page",
+        "description": "获取积分兑换订单信息列表",
+        "module": "order",
+        "params": ["customerId", "page", "size"]
+    },
+    "order.add_external": {
+        "method": "POST",
+        "path": "/api/v1/tpos/order/add-order-external",
+        "description": "外部订单创建",
+        "module": "order",
+        "body_required": True
+    },
+    "order.refund_external": {
+        "method": "POST",
+        "path": "/api/v1/tpos/order/refund-order-external",
+        "description": "外部订单退款",
+        "module": "order",
+        "body_required": True
+    },
+    "order.customer_billing_list": {
+        "method": "POST",
+        "path": "/api/v1/tpos/order/get-customer-billing-list",
+        "description": "获取客户订单列表",
+        "module": "order",
+        "body_required": True
+    },
+    "order.cashier_record_list": {
+        "method": "POST",
+        "path": "/api/v1/tpos/order/get-cashierRecord-list",
+        "description": "获取收银记录列表",
+        "module": "order",
+        "body_required": True
+    },
+    
+    # ========================================
+    # 治疗模块 (treat)
+    # ========================================
+    
+    "treat.untreated_page": {
+        "method": "GET",
+        "path": "/api/v1/tpos/treat/untreated-page",
+        "description": "查询客户未治疗记录",
+        "module": "treat",
+        "params": ["customerId", "page", "size"]
+    },
+    "treat.already_treated_page": {
+        "method": "GET",
+        "path": "/api/v1/tpos/treat/already-treated-page",
+        "description": "查询客户已治疗记录",
+        "module": "treat",
+        "params": ["customerId", "page", "size"]
+    },
+    "treat.page_review": {
+        "method": "GET",
+        "path": "/api/v1/tpos/treat/treated-page-review",
+        "description": "分页获取治疗数据",
+        "module": "treat",
+        "params": ["page", "size", "tenantId"]
+    },
+    "treat.operating_room_list": {
+        "method": "GET",
+        "path": "/api/v1/tpos/treat/get-operating-room-list",
+        "description": "获取治疗时查询的手术间信息",
+        "module": "treat",
+        "params": ["tenantId"]
+    },
+    "treat.begin_info": {
+        "method": "GET",
+        "path": "/api/v1/tpos/treat/get-begin-treat-info",
+        "description": "获取治疗中和已治疗的数据",
+        "module": "treat",
+        "params": ["treatId"]
+    },
+    "treat.deduct_verify": {
+        "method": "POST",
+        "path": "/api/v1/tpos/treat/treat-deduct-verify",
+        "description": "进行核销和划扣",
+        "module": "treat",
+        "body_required": True
+    },
+    "treat.cancel_deduct": {
+        "method": "POST",
+        "path": "/api/v1/tpos/treat/cancel-deduct",
+        "description": "取消划扣",
+        "module": "treat",
+        "body_required": True
+    },
+    "treat.cancel_verify": {
+        "method": "POST",
+        "path": "/api/v1/tpos/treat/cancel-verify",
+        "description": "取消核销",
+        "module": "treat",
+        "body_required": True
+    },
+    "treat.deduct_verify_detail": {
+        "method": "GET",
+        "path": "/api/v1/tpos/treat/get-treated-deduct-and-verify-detail",
+        "description": "已治疗的核销和划扣详情信息",
+        "module": "treat",
+        "params": ["treatId"]
+    },
+    "treat.roles": {
+        "method": "GET",
+        "path": "/api/v1/tpos/treat/get-treatment-roles",
+        "description": "获取所有的治疗岗位列表",
+        "module": "treat",
+        "params": ["tenantId"]
+    },
+    "treat.scrm_list": {
+        "method": "POST",
+        "path": "/api/v1/tpos/treat/scrmTreatList",
+        "description": "小程序-我的治疗（新版）",
+        "module": "treat",
+        "body_required": True
+    },
+    
+    # ========================================
+    # 照片模块 (photo)
+    # ========================================
+    
+    "photo.add": {
+        "method": "POST",
+        "path": "/api/v1/tpos/common/addPhoto",
+        "description": "外部七牛照片转存至睿美云",
+        "module": "photo",
+        "body_required": True
+    },
+    "photo.add_open": {
+        "method": "POST",
+        "path": "/api/v1/tpos/common/addPhotoOpen",
+        "description": "外部照片路径转存至睿美云",
+        "module": "photo",
+        "body_required": True
+    },
+    "photo.upload": {
+        "method": "POST",
+        "path": "/api/v1/tpos/common/upload_customer_photo",
+        "description": "上传照片到睿美云",
+        "module": "photo",
+        "body_required": True
+    },
+    "photo.page": {
+        "method": "GET",
+        "path": "/api/v1/tpos/common/photoPage",
+        "description": "通过客户id分页查询照片信息",
+        "module": "photo",
+        "params": ["customerId", "page", "size"]
+    },
+    "photo.skin_update": {
+        "method": "POST",
+        "path": "/api/v1/tpos/skin_image/update_skin_file",
+        "description": "皮肤检测类图片上传",
+        "module": "photo",
+        "body_required": True
+    },
+    
+    # ========================================
+    # 基础数据模块 (basic)
+    # ========================================
+    
+    "basic.project_page": {
+        "method": "GET",
+        "path": "/api/v1/tpos/basic/project-page",
+        "description": "分页获取项目列表",
+        "module": "basic",
+        "params": ["page", "size", "tenantId", "keyword"]
+    },
+    "basic.project_type_tree": {
+        "method": "GET",
+        "path": "/api/v1/tpos/basic/project-type-tree",
+        "description": "获取项目分类树",
+        "module": "basic",
+        "params": ["tenantId"]
+    },
+    "basic.project_detail": {
+        "method": "GET",
+        "path": "/api/v1/tpos/basic/project-detail",
+        "description": "获取项目详情",
+        "module": "basic",
+        "params": ["projectId"]
+    },
+    "basic.package_page": {
+        "method": "GET",
+        "path": "/api/v1/tpos/basic/package-page",
+        "description": "分页获取套餐列表",
+        "module": "basic",
+        "params": ["page", "size", "tenantId"]
+    },
+    "basic.package_type_tree": {
+        "method": "GET",
+        "path": "/api/v1/tpos/basic/package-type-tree",
+        "description": "获取套餐分类树",
+        "module": "basic",
+        "params": ["tenantId"]
+    },
+    "basic.package_detail": {
+        "method": "GET",
+        "path": "/api/v1/tpos/basic/package-detail",
+        "description": "获取套餐详情",
+        "module": "basic",
+        "params": ["packageId"]
+    },
+    "basic.annual_card_page": {
+        "method": "GET",
+        "path": "/api/v1/tpos/basic/annual-card-page",
+        "description": "分页获取年卡列表",
+        "module": "basic",
+        "params": ["page", "size", "tenantId"]
+    },
+    "basic.annual_card_type_tree": {
+        "method": "GET",
+        "path": "/api/v1/tpos/basic/annual-card-type-tree",
+        "description": "获取年卡分类树",
+        "module": "basic",
+        "params": ["tenantId"]
+    },
+    "basic.annual_card_detail": {
+        "method": "GET",
+        "path": "/api/v1/tpos/basic/annual-card-detail",
+        "description": "获取年卡详情",
+        "module": "basic",
+        "params": ["cardId"]
+    },
+    "basic.time_card_page": {
+        "method": "GET",
+        "path": "/api/v1/tpos/basic/time-card-page",
+        "description": "分页获取次卡列表",
+        "module": "basic",
+        "params": ["page", "size", "tenantId"]
+    },
+    "basic.time_card_type_tree": {
+        "method": "GET",
+        "path": "/api/v1/tpos/basic/time-card-type-tree",
+        "description": "获取次卡分类树",
+        "module": "basic",
+        "params": ["tenantId"]
+    },
+    "basic.time_card_detail": {
+        "method": "GET",
+        "path": "/api/v1/tpos/basic/time-card-detail",
+        "description": "获取次卡详情",
+        "module": "basic",
+        "params": ["cardId"]
+    },
+    
+    # ========================================
+    # 预约模块 (cusbespeak)
+    # ========================================
+    
+    "appointment.add": {
+        "method": "POST",
+        "path": "/api/v1/tpos/cusbespeak/add",
+        "description": "新增预约",
+        "module": "appointment",
+        "body_required": True
+    },
+    "appointment.update": {
+        "method": "POST",
+        "path": "/api/v1/tpos/cusbespeak/update",
+        "description": "修改预约",
+        "module": "appointment",
+        "body_required": True
+    },
+    "appointment.confirm": {
+        "method": "POST",
+        "path": "/api/v1/tpos/cusbespeak/confirm",
+        "description": "确认预约",
+        "module": "appointment",
+        "body_required": True
+    },
+    "appointment.cancel": {
+        "method": "POST",
+        "path": "/api/v1/tpos/cusbespeak/cancel",
+        "description": "取消预约",
+        "module": "appointment",
+        "body_required": True
+    },
+    "appointment.page": {
+        "method": "POST",
+        "path": "/api/v1/tpos/cusbespeak/page",
+        "description": "预约分页查询",
+        "module": "appointment",
+        "body_required": True
+    },
+    "appointment.doctor_list": {
+        "method": "GET",
+        "path": "/api/v1/tpos/cusbespeak/doctor-list",
+        "description": "获取可选择的预约医生",
+        "module": "appointment",
+        "params": ["tenantId"]
+    },
+    "appointment.schedule": {
+        "method": "GET",
+        "path": "/api/v1/tpos/cusbespeak/schedule",
+        "description": "查询预约专家排班",
+        "module": "appointment",
+        "params": ["doctorId", "date"]
+    },
+    
+    # ========================================
+    # 渠道模块 (channel)
+    # ========================================
+    
+    "channel.type_select": {
+        "method": "GET",
+        "path": "/api/v1/tpos/channel/type-select",
+        "description": "整合渠道类型选择（建档，报备）",
+        "module": "channel",
+        "params": ["tenantId"]
+    },
+    "channel.list_by_type": {
+        "method": "GET",
+        "path": "/api/v1/tpos/channel/list-by-type",
+        "description": "通过渠道类型获取渠道列表",
+        "module": "channel",
+        "params": ["typeId", "tenantId"]
+    },
+    "channel.info": {
+        "method": "GET",
+        "path": "/api/v1/tpos/channel/info",
+        "description": "查询渠道信息",
+        "module": "channel",
+        "params": ["channelId"]
+    },
+    "channel.media_info": {
+        "method": "GET",
+        "path": "/api/v1/tpos/channel/media-info",
+        "description": "查询运营媒体信息",
+        "module": "channel",
+        "params": ["mediaId"]
+    },
+    
+    # ========================================
+    # 接待模块 (reception)
+    # ========================================
+    
+    "reception.triage_list": {
+        "method": "GET",
+        "path": "/api/v1/tpos/reception/triage-list",
+        "description": "可用的接待分诊人列表",
+        "module": "reception",
+        "params": ["tenantId"]
+    },
+    "reception.add": {
+        "method": "POST",
+        "path": "/api/v1/tpos/reception/add",
+        "description": "新增接待",
+        "module": "reception",
+        "body_required": True
+    },
+    "reception.query": {
+        "method": "GET",
+        "path": "/api/v1/tpos/reception/query",
+        "description": "查询客户接待信息",
+        "module": "reception",
+        "params": ["customerId"]
+    },
+    "reception.sign_init": {
+        "method": "GET",
+        "path": "/api/v1/tpos/reception/sign-init",
+        "description": "客户扫码签到初始化数据(小程序)",
+        "module": "reception",
+        "params": ["tenantId"]
+    },
+    "reception.sign": {
+        "method": "POST",
+        "path": "/api/v1/tpos/reception/sign",
+        "description": "客户扫码签到(小程序)",
+        "module": "reception",
+        "body_required": True
+    },
+    
+    # ========================================
+    # 咨询模块 (consult)
+    # ========================================
+    
+    "consult.add": {
+        "method": "POST",
+        "path": "/api/v1/tpos/consult/add",
+        "description": "新增咨询",
+        "module": "consult",
+        "body_required": True
+    },
+    "consult.update": {
+        "method": "POST",
+        "path": "/api/v1/tpos/consult/update",
+        "description": "修改咨询",
+        "module": "consult",
+        "body_required": True
+    },
+    
+    # ========================================
+    # 病历模块 (medical_record)
+    # ========================================
+    
+    "medical_record.add": {
+        "method": "POST",
+        "path": "/api/v1/tpos/medical-record/add",
+        "description": "新增病历",
+        "module": "medical_record",
+        "body_required": True
+    },
+    "medical_record.update": {
+        "method": "POST",
+        "path": "/api/v1/tpos/medical-record/update",
+        "description": "修改病历",
+        "module": "medical_record",
+        "body_required": True
+    },
+    "medical_record.delete": {
+        "method": "POST",
+        "path": "/api/v1/tpos/medical-record/delete",
+        "description": "删除病历",
+        "module": "medical_record",
+        "body_required": True
+    },
+}
+
+
+def get_api_definition(api_name: str) -> Optional[Dict[str, Any]]:
+    """
+    获取接口定义
+    
+    Args:
+        api_name: 接口名称，如 customer.search
+        
+    Returns:
+        接口定义字典，不存在则返回 None
+    """
+    return RUIMEIYUN_APIS.get(api_name)
+
+
+def get_api_list_by_module(module: str) -> List[Dict[str, Any]]:
+    """
+    按模块获取接口列表
+    
+    Args:
+        module: 模块名称，如 customer, order
+        
+    Returns:
+        该模块下的接口列表
+    """
+    result = []
+    for name, definition in RUIMEIYUN_APIS.items():
+        if definition.get("module") == module:
+            result.append({"name": name, **definition})
+    return result
+
+
+def get_all_modules() -> List[str]:
+    """获取所有模块名称"""
+    modules = set()
+    for definition in RUIMEIYUN_APIS.values():
+        if "module" in definition:
+            modules.add(definition["module"])
+    return sorted(list(modules))
+
+
+def get_api_summary() -> Dict[str, int]:
+    """获取接口统计"""
+    summary = {}
+    for definition in RUIMEIYUN_APIS.values():
+        module = definition.get("module", "unknown")
+        summary[module] = summary.get(module, 0) + 1
+    return summary

frontend/src/views/tenants/detail.vue

@@ -230,8 +230,137 @@ watch(activeTab, (newVal) => {
     fetchToolConfigs()
     fetchConfigSchema()
   }
+  if (newVal === 'ruimeiyun' && !ruimeiyunLoaded.value) {
+    fetchRuimeiyunConfig()
+  }
 })
 
+// ========================================
+// 瑞美云配置
+// ========================================
+const ruimeiyunLoading = ref(false)
+const ruimeiyunLoaded = ref(false)
+const ruimeiyunTesting = ref(false)
+const ruimeiyunFormRef = ref(null)
+const ruimeiyunForm = reactive({
+  base_url: '',
+  account: '',
+  private_key: '',
+  allowed_apis: ''
+})
+
+const ruimeiyunRules = {
+  base_url: [{ required: true, message: '请输入睿美云 API 地址', trigger: 'blur' }],
+  account: [{ required: true, message: '请输入账号', trigger: 'blur' }],
+  private_key: [{ required: true, message: '请输入私钥', trigger: 'blur' }]
+}
+
+async function fetchRuimeiyunConfig() {
+  ruimeiyunLoading.value = true
+  try {
+    const res = await api.get('/api/tool-configs', {
+      params: { tenant_id: tenantId, tool_code: 'ruimeiyun', size: 100 }
+    })
+    const items = res.data.items || []
+    // 映射配置到表单
+    items.forEach(item => {
+      if (item.config_key === 'ruimeiyun_base_url') {
+        ruimeiyunForm.base_url = item.config_value || ''
+      } else if (item.config_key === 'ruimeiyun_account') {
+        ruimeiyunForm.account = item.config_value || ''
+      } else if (item.config_key === 'ruimeiyun_private_key') {
+        // 加密字段显示占位符
+        ruimeiyunForm.private_key = item.is_encrypted ? '********' : (item.config_value || '')
+      } else if (item.config_key === 'ruimeiyun_allowed_apis') {
+        ruimeiyunForm.allowed_apis = item.config_value || ''
+      }
+    })
+    ruimeiyunLoaded.value = true
+  } catch (e) {
+    console.error('获取瑞美云配置失败:', e)
+  } finally {
+    ruimeiyunLoading.value = false
+  }
+}
+
+async function saveRuimeiyunConfig() {
+  await ruimeiyunFormRef.value.validate()
+  
+  ruimeiyunLoading.value = true
+  try {
+    // 构建配置列表
+    const configs = [
+      {
+        config_type: 'external_api',
+        config_key: 'ruimeiyun_base_url',
+        config_value: ruimeiyunForm.base_url,
+        is_encrypted: 0,
+        description: '睿美云 API 地址'
+      },
+      {
+        config_type: 'external_api',
+        config_key: 'ruimeiyun_account',
+        config_value: ruimeiyunForm.account,
+        is_encrypted: 0,
+        description: '睿美云账号'
+      }
+    ]
+    
+    // 如果私钥不是占位符，则更新
+    if (ruimeiyunForm.private_key && ruimeiyunForm.private_key !== '********') {
+      configs.push({
+        config_type: 'external_api',
+        config_key: 'ruimeiyun_private_key',
+        config_value: ruimeiyunForm.private_key,
+        is_encrypted: 1,
+        description: '睿美云私钥'
+      })
+    }
+    
+    // 如果有接口限制
+    if (ruimeiyunForm.allowed_apis) {
+      configs.push({
+        config_type: 'external_api',
+        config_key: 'ruimeiyun_allowed_apis',
+        config_value: ruimeiyunForm.allowed_apis,
+        is_encrypted: 0,
+        description: '允许调用的接口列表'
+      })
+    }
+    
+    await api.post('/api/tool-configs/batch', {
+      tenant_id: tenantId,
+      tool_code: 'ruimeiyun',
+      configs
+    })
+    
+    ElMessage.success('保存成功')
+    // 重新加载
+    ruimeiyunLoaded.value = false
+    fetchRuimeiyunConfig()
+  } catch (e) {
+    console.error('保存失败:', e)
+  } finally {
+    ruimeiyunLoading.value = false
+  }
+}
+
+async function testRuimeiyunConnection() {
+  ruimeiyunTesting.value = true
+  try {
+    const res = await api.get(`/api/ruimeiyun/health/${tenantId}`)
+    if (res.data.status === 'connected') {
+      ElMessage.success(`连接成功！账号: ${res.data.account}`)
+    } else {
+      ElMessage.error(`连接失败: ${res.data.message}`)
+    }
+  } catch (e) {
+    ElMessage.error(`测试失败: ${e.response?.data?.detail || e.message}`)
+  } finally {
+    ruimeiyunTesting.value = false
+  }
+}
+
 onMounted(() => {
   fetchDetail()
 })
@@ -304,6 +433,73 @@ onMounted(() => {
           </div>
         </el-tab-pane>
         
+        <!-- 瑞美云配置 Tab -->
+        <el-tab-pane label="瑞美云配置" name="ruimeiyun">
+          <div class="ruimeiyun-container" v-loading="ruimeiyunLoading">
+            <el-alert 
+              type="info" 
+              :closable="false" 
+              style="margin-bottom: 20px"
+            >
+              <template #title>
+                配置租户的睿美云 TPOS 接口连接信息，配置后可通过 Platform 代理调用睿美云接口
+              </template>
+            </el-alert>
+            
+            <el-form 
+              ref="ruimeiyunFormRef" 
+              :model="ruimeiyunForm" 
+              :rules="ruimeiyunRules" 
+              label-width="120px"
+              style="max-width: 600px"
+            >
+              <el-form-item label="API 地址" prop="base_url">
+                <el-input 
+                  v-model="ruimeiyunForm.base_url" 
+                  placeholder="例如: https://xxx.ruimeiyun.com"
+                />
+                <div class="form-hint">睿美云 TPOS 接口的基础地址</div>
+              </el-form-item>
+              
+              <el-form-item label="账号" prop="account">
+                <el-input 
+                  v-model="ruimeiyunForm.account" 
+                  placeholder="TPOS 接口账号"
+                />
+              </el-form-item>
+              
+              <el-form-item label="私钥" prop="private_key">
+                <el-input 
+                  v-model="ruimeiyunForm.private_key" 
+                  type="textarea"
+                  :rows="4"
+                  placeholder="RSA 私钥（PEM 格式）"
+                />
+                <div class="form-hint">用于 TPOS 接口签名的 RSA 私钥，将加密存储</div>
+              </el-form-item>
+              
+              <el-form-item label="接口限制">
+                <el-input 
+                  v-model="ruimeiyunForm.allowed_apis" 
+                  type="textarea"
+                  :rows="2"
+                  placeholder='可选，JSON 数组格式，例如: ["customer.search", "order.list"]'
+                />
+                <div class="form-hint">限制租户可调用的接口，留空表示允许所有接口</div>
+              </el-form-item>
+              
+              <el-form-item>
+                <el-button type="primary" @click="saveRuimeiyunConfig" :loading="ruimeiyunLoading">
+                  保存配置
+                </el-button>
+                <el-button @click="testRuimeiyunConnection" :loading="ruimeiyunTesting">
+                  测试连接
+                </el-button>
+              </el-form-item>
+            </el-form>
+          </div>
+        </el-tab-pane>
+        
         <!-- 工具配置 Tab -->
         <el-tab-pane label="工具配置" name="config">
           <div class="config-container" v-loading="configLoading">
@@ -506,4 +702,15 @@ onMounted(() => {
   color: #909399;
   font-family: monospace;
 }
+
+.ruimeiyun-container {
+  padding: 0 4px;
+}
+
+.form-hint {
+  font-size: 12px;
+  color: #909399;
+  line-height: 1.5;
+  margin-top: 4px;
+}
 </style>